@agentguard-run/spend 0.5.0 → 0.6.0

package/CHANGELOG.md

@@ -1,5 +1,12 @@
 # Changelog
 
+## 0.6.0
+
+- Added receipt schema v3 provenance blocks for model identity, hosting route, jurisdiction, BAA status, retention, and foreign-origin model flagging.
+- Added provider registry and local provenance enforcement: compliance posture blocks foreign-origin weights, standard posture requires a signed consent receipt.
+- Added consent receipt validation hooks for `foreign_origin_consent_receipt_id`.
+- Kept v1 and v2 receipt verification paths backward compatible.
+
 ## 0.5.0
 
 - Added the workflow primitive: one budget envelope, one duration cap, resumable checkpoints, and signed receipt chains across multi-step agent runs.

package/dist/index.d.ts

@@ -14,6 +14,11 @@ export { InMemorySpendStore } from './store-memory';
 export { AgentGuardLicenseRequiredError, validateLicenseKey, validateAndRegisterLicense, readConfiguredLicenseKey, writeConfiguredLicenseKey, clearConfiguredLicenseKey, licenseKeyFingerprint, type AgentGuardLicenseStatus, type AgentGuardLicenseFeatures, type AgentGuardTier, } from './license';
 export { telemetryStatus, enableTelemetry, disableTelemetry, resetTelemetryInstallId, recordTelemetryEvent, type TelemetryStatus, } from './telemetry';
 export { fetchCatalog, getCachedCatalog, syncPricingIntoCostTable, persistOverrides, modelCostFromOpenRouter, type OpenRouterCatalog, type OpenRouterModel, type SyncPricingResult, } from './openrouter-catalog';
+export type { AnyReceipt, ComplianceProvenance, HostingProvenance, JurisdictionCountry, ModelIdentity, ProvenanceBlock, ProvenanceProvider, ReceiptV1, ReceiptV3, WeightsOriginCountry, } from './receipts/schema';
+export { assertReceiptV3, isReceiptV3, receiptSchemaVersion } from './receipts/schema';
+export { captureProvenance, type AgentGuardContext, type AgentRequest } from './middleware/provenance';
+export { PROVIDER_REGISTRY, inferProviderRoute, inferModelIdentity, inferHosting, inferCompliance, isForeignOriginModel } from './middleware/provider-registry';
+export { AgentGuardComplianceError, AgentGuardConsentRequiredError, enforceCompliance, verifyConsentReceipt, type GovernancePosture } from './posture/enforce';
 export { workflow, WorkflowContext } from './workflow/context';
 export { computeChainHash, validateReceiptChain } from './workflow/chain-validator';
 export { AgentGuardBudgetCapError, AgentGuardChainCorruptError, AgentGuardDurationCapError, AgentGuardWorkflowStateError, } from './workflow/errors';
@@ -25,7 +30,7 @@ export { SpendGuard, withSpendGuard, AgentGuardBlockedError, type SpendGuardConf
 export { withSpendGuardAnthropic, type AnthropicBindingOptions } from './bindings/anthropic';
 export { withSpendGuardBedrock, type BedrockBindingOptions } from './bindings/bedrock';
 export { DEFAULT_LOCALE, SUPPORTED_LOCALES, TRANSLATIONS, type SupportedLocale, resolveLocale, t, formatBlockedTrace, type BlockedTraceArgs, } from './i18n';
-export declare const AGENTGUARD_SPEND_VERSION = "0.5.0";
+export declare const AGENTGUARD_SPEND_VERSION = "0.6.0";
 export declare const agentguard: {
     workflow: typeof runWorkflow;
 };

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EAAE,QAAQ,IAAI,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAG7D,YAAY,EACV,WAAW,EACX,WAAW,EACX,QAAQ,EACR,eAAe,EACf,cAAc,EACd,QAAQ,EACR,UAAU,EACV,WAAW,EACX,WAAW,EACX,aAAa,EACb,sBAAsB,EACtB,UAAU,EACV,gBAAgB,GACjB,MAAM,SAAS,CAAC;AAGjB,OAAO,EACL,YAAY,EACZ,eAAe,EACf,kBAAkB,EAClB,gBAAgB,EAChB,aAAa,EACb,iBAAiB,EACjB,0BAA0B,EAC1B,oBAAoB,EACpB,eAAe,EACf,KAAK,SAAS,GACf,MAAM,cAAc,CAAC;AAGtB,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,uBAAuB,EAAE,yBAAyB,EAAE,2BAA2B,EAAE,2BAA2B,EAAE,MAAM,UAAU,CAAC;AAGvK,OAAO,EACL,aAAa,EACb,SAAS,EACT,gBAAgB,EAChB,wBAAwB,EACxB,YAAY,EACZ,WAAW,EACX,WAAW,EACX,qBAAqB,EACrB,wBAAwB,GACzB,MAAM,gBAAgB,CAAC;AAGxB,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAGpD,OAAO,EACL,8BAA8B,EAC9B,kBAAkB,EAClB,0BAA0B,EAC1B,wBAAwB,EACxB,yBAAyB,EACzB,yBAAyB,EACzB,qBAAqB,EACrB,KAAK,uBAAuB,EAC5B,KAAK,yBAAyB,EAC9B,KAAK,cAAc,GACpB,MAAM,WAAW,CAAC;AAGnB,OAAO,EACL,eAAe,EACf,eAAe,EACf,gBAAgB,EAChB,uBAAuB,EACvB,oBAAoB,EACpB,KAAK,eAAe,GACrB,MAAM,aAAa,CAAC;AAGrB,OAAO,EACL,YAAY,EACZ,gBAAgB,EAChB,wBAAwB,EACxB,gBAAgB,EAChB,uBAAuB,EACvB,KAAK,iBAAiB,EACtB,KAAK,eAAe,EACpB,KAAK,iBAAiB,GACvB,MAAM,sBAAsB,CAAC;AAK9B,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAC/D,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AACpF,OAAO,EACL,wBAAwB,EACxB,2BAA2B,EAC3B,0BAA0B,EAC1B,4BAA4B,GAC7B,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EACV,qBAAqB,EACrB,iBAAiB,EACjB,SAAS,EACT,uBAAuB,EACvB,cAAc,EACd,aAAa,EACb,cAAc,GACf,MAAM,kBAAkB,CAAC;AAG1B,OAAO,EACL,mBAAmB,EACnB,oBAAoB,EACpB,sBAAsB,EACtB,gBAAgB,EAChB,KAAK,sBAAsB,EAC3B,KAAK,gBAAgB,GACtB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,KAAK,aAAa,EAAE,KAAK,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAC3H,OAAO,EAAE,0BAA0B,EAAE,mBAAmB,EAAE,KAAK,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAGxG,OAAO,EACL,UAAU,EACV,cAAc,EACd,sBAAsB,EACtB,KAAK,gBAAgB,EACrB,KAAK,oBAAoB,EACzB,KAAK,uBAAuB,EAC5B,KAAK,sBAAsB,GAC5B,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,uBAAuB,EAAE,KAAK,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAC7F,OAAO,EAAE,qBAAqB,EAAE,KAAK,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAGvF,OAAO,EACL,cAAc,EACd,iBAAiB,EACjB,YAAY,EACZ,KAAK,eAAe,EACpB,aAAa,EACb,CAAC,EACD,kBAAkB,EAClB,KAAK,gBAAgB,GACtB,MAAM,QAAQ,CAAC;AAEhB,eAAO,MAAM,wBAAwB,UAAU,CAAC;AAGhD,eAAO,MAAM,UAAU;;CAEtB,CAAC;AAEF,2DAA2D;AAC3D,eAAO,MAAM,aAAa,QAG8B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EAAE,QAAQ,IAAI,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAG7D,YAAY,EACV,WAAW,EACX,WAAW,EACX,QAAQ,EACR,eAAe,EACf,cAAc,EACd,QAAQ,EACR,UAAU,EACV,WAAW,EACX,WAAW,EACX,aAAa,EACb,sBAAsB,EACtB,UAAU,EACV,gBAAgB,GACjB,MAAM,SAAS,CAAC;AAGjB,OAAO,EACL,YAAY,EACZ,eAAe,EACf,kBAAkB,EAClB,gBAAgB,EAChB,aAAa,EACb,iBAAiB,EACjB,0BAA0B,EAC1B,oBAAoB,EACpB,eAAe,EACf,KAAK,SAAS,GACf,MAAM,cAAc,CAAC;AAGtB,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,uBAAuB,EAAE,yBAAyB,EAAE,2BAA2B,EAAE,2BAA2B,EAAE,MAAM,UAAU,CAAC;AAGvK,OAAO,EACL,aAAa,EACb,SAAS,EACT,gBAAgB,EAChB,wBAAwB,EACxB,YAAY,EACZ,WAAW,EACX,WAAW,EACX,qBAAqB,EACrB,wBAAwB,GACzB,MAAM,gBAAgB,CAAC;AAGxB,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAGpD,OAAO,EACL,8BAA8B,EAC9B,kBAAkB,EAClB,0BAA0B,EAC1B,wBAAwB,EACxB,yBAAyB,EACzB,yBAAyB,EACzB,qBAAqB,EACrB,KAAK,uBAAuB,EAC5B,KAAK,yBAAyB,EAC9B,KAAK,cAAc,GACpB,MAAM,WAAW,CAAC;AAGnB,OAAO,EACL,eAAe,EACf,eAAe,EACf,gBAAgB,EAChB,uBAAuB,EACvB,oBAAoB,EACpB,KAAK,eAAe,GACrB,MAAM,aAAa,CAAC;AAGrB,OAAO,EACL,YAAY,EACZ,gBAAgB,EAChB,wBAAwB,EACxB,gBAAgB,EAChB,uBAAuB,EACvB,KAAK,iBAAiB,EACtB,KAAK,eAAe,EACpB,KAAK,iBAAiB,GACvB,MAAM,sBAAsB,CAAC;AAK9B,YAAY,EACV,UAAU,EACV,oBAAoB,EACpB,iBAAiB,EACjB,mBAAmB,EACnB,aAAa,EACb,eAAe,EACf,kBAAkB,EAClB,SAAS,EACT,SAAS,EACT,oBAAoB,GACrB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACvF,OAAO,EAAE,iBAAiB,EAAE,KAAK,iBAAiB,EAAE,KAAK,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvG,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,YAAY,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AAChK,OAAO,EAAE,yBAAyB,EAAE,8BAA8B,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,KAAK,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAG/J,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAC/D,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AACpF,OAAO,EACL,wBAAwB,EACxB,2BAA2B,EAC3B,0BAA0B,EAC1B,4BAA4B,GAC7B,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EACV,qBAAqB,EACrB,iBAAiB,EACjB,SAAS,EACT,uBAAuB,EACvB,cAAc,EACd,aAAa,EACb,cAAc,GACf,MAAM,kBAAkB,CAAC;AAG1B,OAAO,EACL,mBAAmB,EACnB,oBAAoB,EACpB,sBAAsB,EACtB,gBAAgB,EAChB,KAAK,sBAAsB,EAC3B,KAAK,gBAAgB,GACtB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,KAAK,aAAa,EAAE,KAAK,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAC3H,OAAO,EAAE,0BAA0B,EAAE,mBAAmB,EAAE,KAAK,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAGxG,OAAO,EACL,UAAU,EACV,cAAc,EACd,sBAAsB,EACtB,KAAK,gBAAgB,EACrB,KAAK,oBAAoB,EACzB,KAAK,uBAAuB,EAC5B,KAAK,sBAAsB,GAC5B,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,uBAAuB,EAAE,KAAK,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAC7F,OAAO,EAAE,qBAAqB,EAAE,KAAK,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAGvF,OAAO,EACL,cAAc,EACd,iBAAiB,EACjB,YAAY,EACZ,KAAK,eAAe,EACpB,aAAa,EACb,CAAC,EACD,kBAAkB,EAClB,KAAK,gBAAgB,GACtB,MAAM,QAAQ,CAAC;AAEhB,eAAO,MAAM,wBAAwB,UAAU,CAAC;AAGhD,eAAO,MAAM,UAAU;;CAEtB,CAAC;AAEF,2DAA2D;AAC3D,eAAO,MAAM,aAAa,QAG8B,CAAC"}

package/dist/index.js

@@ -7,8 +7,8 @@
  * 64/071,781; 64/071,789).
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.AgentGuardWorkflowStateError = exports.AgentGuardDurationCapError = exports.AgentGuardChainCorruptError = exports.AgentGuardBudgetCapError = exports.validateReceiptChain = exports.computeChainHash = exports.WorkflowContext = exports.workflow = exports.modelCostFromOpenRouter = exports.persistOverrides = exports.syncPricingIntoCostTable = exports.getCachedCatalog = exports.fetchCatalog = exports.recordTelemetryEvent = exports.resetTelemetryInstallId = exports.disableTelemetry = exports.enableTelemetry = exports.telemetryStatus = exports.licenseKeyFingerprint = exports.clearConfiguredLicenseKey = exports.writeConfiguredLicenseKey = exports.readConfiguredLicenseKey = exports.validateAndRegisterLicense = exports.validateLicenseKey = exports.AgentGuardLicenseRequiredError = exports.InMemorySpendStore = exports.InMemoryDecisionLogStore = exports.GENESIS_PREVIOUS_HASH = exports.verifyChain = exports.verifyEntry = exports.signDecision = exports.computeSignerFingerprint = exports.computeEntryHash = exports.sha256Hex = exports.canonicalJson = exports.BUILT_IN_KEYWORD_WATCHLISTS = exports.findCustomKeywordWatchlists = exports.enforcePolicyLicenseGates = exports.adjustPolicyWindowSpend = exports.buildScopeKey = exports.evaluatePolicy = exports.knownModelCosts = exports.persistCostOverrides = exports.loadPersistedCostOverrides = exports.listCostOverrides = exports.inferProvider = exports.computeCallCents = exports.clearCostOverrides = exports.setCostOverride = exports.getModelCost = void 0;
-exports.PATENT_NOTICE = exports.agentguard = exports.AGENTGUARD_SPEND_VERSION = exports.formatBlockedTrace = exports.t = exports.resolveLocale = exports.TRANSLATIONS = exports.SUPPORTED_LOCALES = exports.DEFAULT_LOCALE = exports.withSpendGuardBedrock = exports.withSpendGuardAnthropic = exports.AgentGuardBlockedError = exports.withSpendGuard = exports.SpendGuard = exports.writeAdvisorOutputs = exports.createAdvisorSessionLogger = exports.resolveAdvisorApiKey = exports.createAdvisorClient = exports.projectedSavings = exports.buildPolicyFromProfile = exports.buildBusinessProfile = exports.AdvisorConversation = void 0;
+exports.inferHosting = exports.inferModelIdentity = exports.inferProviderRoute = exports.PROVIDER_REGISTRY = exports.captureProvenance = exports.receiptSchemaVersion = exports.isReceiptV3 = exports.assertReceiptV3 = exports.modelCostFromOpenRouter = exports.persistOverrides = exports.syncPricingIntoCostTable = exports.getCachedCatalog = exports.fetchCatalog = exports.recordTelemetryEvent = exports.resetTelemetryInstallId = exports.disableTelemetry = exports.enableTelemetry = exports.telemetryStatus = exports.licenseKeyFingerprint = exports.clearConfiguredLicenseKey = exports.writeConfiguredLicenseKey = exports.readConfiguredLicenseKey = exports.validateAndRegisterLicense = exports.validateLicenseKey = exports.AgentGuardLicenseRequiredError = exports.InMemorySpendStore = exports.InMemoryDecisionLogStore = exports.GENESIS_PREVIOUS_HASH = exports.verifyChain = exports.verifyEntry = exports.signDecision = exports.computeSignerFingerprint = exports.computeEntryHash = exports.sha256Hex = exports.canonicalJson = exports.BUILT_IN_KEYWORD_WATCHLISTS = exports.findCustomKeywordWatchlists = exports.enforcePolicyLicenseGates = exports.adjustPolicyWindowSpend = exports.buildScopeKey = exports.evaluatePolicy = exports.knownModelCosts = exports.persistCostOverrides = exports.loadPersistedCostOverrides = exports.listCostOverrides = exports.inferProvider = exports.computeCallCents = exports.clearCostOverrides = exports.setCostOverride = exports.getModelCost = void 0;
+exports.PATENT_NOTICE = exports.agentguard = exports.AGENTGUARD_SPEND_VERSION = exports.formatBlockedTrace = exports.t = exports.resolveLocale = exports.TRANSLATIONS = exports.SUPPORTED_LOCALES = exports.DEFAULT_LOCALE = exports.withSpendGuardBedrock = exports.withSpendGuardAnthropic = exports.AgentGuardBlockedError = exports.withSpendGuard = exports.SpendGuard = exports.writeAdvisorOutputs = exports.createAdvisorSessionLogger = exports.resolveAdvisorApiKey = exports.createAdvisorClient = exports.projectedSavings = exports.buildPolicyFromProfile = exports.buildBusinessProfile = exports.AdvisorConversation = exports.AgentGuardWorkflowStateError = exports.AgentGuardDurationCapError = exports.AgentGuardChainCorruptError = exports.AgentGuardBudgetCapError = exports.validateReceiptChain = exports.computeChainHash = exports.WorkflowContext = exports.workflow = exports.verifyConsentReceipt = exports.enforceCompliance = exports.AgentGuardConsentRequiredError = exports.AgentGuardComplianceError = exports.isForeignOriginModel = exports.inferCompliance = void 0;
 const telemetry_1 = require("./telemetry");
 const context_1 = require("./workflow/context");
 // Cost table
@@ -67,6 +67,24 @@ Object.defineProperty(exports, "getCachedCatalog", { enumerable: true, get: func
 Object.defineProperty(exports, "syncPricingIntoCostTable", { enumerable: true, get: function () { return openrouter_catalog_1.syncPricingIntoCostTable; } });
 Object.defineProperty(exports, "persistOverrides", { enumerable: true, get: function () { return openrouter_catalog_1.persistOverrides; } });
 Object.defineProperty(exports, "modelCostFromOpenRouter", { enumerable: true, get: function () { return openrouter_catalog_1.modelCostFromOpenRouter; } });
+var schema_1 = require("./receipts/schema");
+Object.defineProperty(exports, "assertReceiptV3", { enumerable: true, get: function () { return schema_1.assertReceiptV3; } });
+Object.defineProperty(exports, "isReceiptV3", { enumerable: true, get: function () { return schema_1.isReceiptV3; } });
+Object.defineProperty(exports, "receiptSchemaVersion", { enumerable: true, get: function () { return schema_1.receiptSchemaVersion; } });
+var provenance_1 = require("./middleware/provenance");
+Object.defineProperty(exports, "captureProvenance", { enumerable: true, get: function () { return provenance_1.captureProvenance; } });
+var provider_registry_1 = require("./middleware/provider-registry");
+Object.defineProperty(exports, "PROVIDER_REGISTRY", { enumerable: true, get: function () { return provider_registry_1.PROVIDER_REGISTRY; } });
+Object.defineProperty(exports, "inferProviderRoute", { enumerable: true, get: function () { return provider_registry_1.inferProviderRoute; } });
+Object.defineProperty(exports, "inferModelIdentity", { enumerable: true, get: function () { return provider_registry_1.inferModelIdentity; } });
+Object.defineProperty(exports, "inferHosting", { enumerable: true, get: function () { return provider_registry_1.inferHosting; } });
+Object.defineProperty(exports, "inferCompliance", { enumerable: true, get: function () { return provider_registry_1.inferCompliance; } });
+Object.defineProperty(exports, "isForeignOriginModel", { enumerable: true, get: function () { return provider_registry_1.isForeignOriginModel; } });
+var enforce_1 = require("./posture/enforce");
+Object.defineProperty(exports, "AgentGuardComplianceError", { enumerable: true, get: function () { return enforce_1.AgentGuardComplianceError; } });
+Object.defineProperty(exports, "AgentGuardConsentRequiredError", { enumerable: true, get: function () { return enforce_1.AgentGuardConsentRequiredError; } });
+Object.defineProperty(exports, "enforceCompliance", { enumerable: true, get: function () { return enforce_1.enforceCompliance; } });
+Object.defineProperty(exports, "verifyConsentReceipt", { enumerable: true, get: function () { return enforce_1.verifyConsentReceipt; } });
 // Workflow primitive
 var context_2 = require("./workflow/context");
 Object.defineProperty(exports, "workflow", { enumerable: true, get: function () { return context_2.workflow; } });
@@ -108,7 +126,7 @@ Object.defineProperty(exports, "TRANSLATIONS", { enumerable: true, get: function
 Object.defineProperty(exports, "resolveLocale", { enumerable: true, get: function () { return i18n_1.resolveLocale; } });
 Object.defineProperty(exports, "t", { enumerable: true, get: function () { return i18n_1.t; } });
 Object.defineProperty(exports, "formatBlockedTrace", { enumerable: true, get: function () { return i18n_1.formatBlockedTrace; } });
-exports.AGENTGUARD_SPEND_VERSION = '0.5.0';
+exports.AGENTGUARD_SPEND_VERSION = '0.6.0';
 exports.agentguard = {
     workflow: context_1.workflow,
 };

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;;;AAEH,2CAA8E;AAC9E,gDAA6D;AAmB7D,aAAa;AACb,2CAWsB;AAVpB,0GAAA,YAAY,OAAA;AACZ,6GAAA,eAAe,OAAA;AACf,gHAAA,kBAAkB,OAAA;AAClB,8GAAA,gBAAgB,OAAA;AAChB,2GAAA,aAAa,OAAA;AACb,+GAAA,iBAAiB,OAAA;AACjB,wHAAA,0BAA0B,OAAA;AAC1B,kHAAA,oBAAoB,OAAA;AACpB,6GAAA,eAAe,OAAA;AAIjB,gBAAgB;AAChB,mCAAuK;AAA9J,wGAAA,cAAc,OAAA;AAAE,uGAAA,aAAa,OAAA;AAAE,iHAAA,uBAAuB,OAAA;AAAE,mHAAA,yBAAyB,OAAA;AAAE,qHAAA,2BAA2B,OAAA;AAAE,qHAAA,2BAA2B,OAAA;AAEpJ,eAAe;AACf,+CAUwB;AATtB,6GAAA,aAAa,OAAA;AACb,yGAAA,SAAS,OAAA;AACT,gHAAA,gBAAgB,OAAA;AAChB,wHAAA,wBAAwB,OAAA;AACxB,4GAAA,YAAY,OAAA;AACZ,2GAAA,WAAW,OAAA;AACX,2GAAA,WAAW,OAAA;AACX,qHAAA,qBAAqB,OAAA;AACrB,wHAAA,wBAAwB,OAAA;AAG1B,wBAAwB;AACxB,+CAAoD;AAA3C,kHAAA,kBAAkB,OAAA;AAE3B,mBAAmB;AACnB,qCAWmB;AAVjB,yHAAA,8BAA8B,OAAA;AAC9B,6GAAA,kBAAkB,OAAA;AAClB,qHAAA,0BAA0B,OAAA;AAC1B,mHAAA,wBAAwB,OAAA;AACxB,oHAAA,yBAAyB,OAAA;AACzB,oHAAA,yBAAyB,OAAA;AACzB,gHAAA,qBAAqB,OAAA;AAMvB,qBAAqB;AACrB,yCAOqB;AANnB,4GAAA,eAAe,OAAA;AACf,4GAAA,eAAe,OAAA;AACf,6GAAA,gBAAgB,OAAA;AAChB,oHAAA,uBAAuB,OAAA;AACvB,iHAAA,oBAAoB,OAAA;AAItB,qBAAqB;AACrB,2DAS8B;AAR5B,kHAAA,YAAY,OAAA;AACZ,sHAAA,gBAAgB,OAAA;AAChB,8HAAA,wBAAwB,OAAA;AACxB,sHAAA,gBAAgB,OAAA;AAChB,6HAAA,uBAAuB,OAAA;AAQzB,qBAAqB;AACrB,8CAA+D;AAAtD,mGAAA,QAAQ,OAAA;AAAE,0GAAA,eAAe,OAAA;AAClC,8DAAoF;AAA3E,mHAAA,gBAAgB,OAAA;AAAE,uHAAA,oBAAoB,OAAA;AAC/C,4CAK2B;AAJzB,kHAAA,wBAAwB,OAAA;AACxB,qHAAA,2BAA2B,OAAA;AAC3B,oHAAA,0BAA0B,OAAA;AAC1B,sHAAA,4BAA4B,OAAA;AAY9B,sBAAsB;AACtB,uDAOgC;AAN9B,mHAAA,mBAAmB,OAAA;AACnB,oHAAA,oBAAoB,OAAA;AACpB,sHAAA,sBAAsB,OAAA;AACtB,gHAAA,gBAAgB,OAAA;AAIlB,mDAA2H;AAAlH,iHAAA,mBAAmB,OAAA;AAAE,kHAAA,oBAAoB,OAAA;AAClD,2CAAwG;AAA/F,oHAAA,0BAA0B,OAAA;AAAE,6GAAA,mBAAmB,OAAA;AAExD,eAAe;AACf,6CAQuB;AAPrB,yGAAA,UAAU,OAAA;AACV,6GAAA,cAAc,OAAA;AACd,qHAAA,sBAAsB,OAAA;AAOxB,kDAA6F;AAApF,oHAAA,uBAAuB,OAAA;AAChC,8CAAuF;AAA9E,gHAAA,qBAAqB,OAAA;AAE9B,sCAAsC;AACtC,+BASgB;AARd,sGAAA,cAAc,OAAA;AACd,yGAAA,iBAAiB,OAAA;AACjB,oGAAA,YAAY,OAAA;AAEZ,qGAAA,aAAa,OAAA;AACb,yFAAA,CAAC,OAAA;AACD,0GAAA,kBAAkB,OAAA;AAIP,QAAA,wBAAwB,GAAG,OAAO,CAAC;AAGnC,QAAA,UAAU,GAAG;IACxB,QAAQ,EAAE,kBAAW;CACtB,CAAC;AAEF,2DAA2D;AAC9C,QAAA,aAAa,GACxB,8CAA8C;IAC9C,6DAA6D;IAC7D,sDAAsD,CAAC;AACzD,IAAA,gCAAuB,EAAC,UAAU,CAAC,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;;;AAEH,2CAA8E;AAC9E,gDAA6D;AAmB7D,aAAa;AACb,2CAWsB;AAVpB,0GAAA,YAAY,OAAA;AACZ,6GAAA,eAAe,OAAA;AACf,gHAAA,kBAAkB,OAAA;AAClB,8GAAA,gBAAgB,OAAA;AAChB,2GAAA,aAAa,OAAA;AACb,+GAAA,iBAAiB,OAAA;AACjB,wHAAA,0BAA0B,OAAA;AAC1B,kHAAA,oBAAoB,OAAA;AACpB,6GAAA,eAAe,OAAA;AAIjB,gBAAgB;AAChB,mCAAuK;AAA9J,wGAAA,cAAc,OAAA;AAAE,uGAAA,aAAa,OAAA;AAAE,iHAAA,uBAAuB,OAAA;AAAE,mHAAA,yBAAyB,OAAA;AAAE,qHAAA,2BAA2B,OAAA;AAAE,qHAAA,2BAA2B,OAAA;AAEpJ,eAAe;AACf,+CAUwB;AATtB,6GAAA,aAAa,OAAA;AACb,yGAAA,SAAS,OAAA;AACT,gHAAA,gBAAgB,OAAA;AAChB,wHAAA,wBAAwB,OAAA;AACxB,4GAAA,YAAY,OAAA;AACZ,2GAAA,WAAW,OAAA;AACX,2GAAA,WAAW,OAAA;AACX,qHAAA,qBAAqB,OAAA;AACrB,wHAAA,wBAAwB,OAAA;AAG1B,wBAAwB;AACxB,+CAAoD;AAA3C,kHAAA,kBAAkB,OAAA;AAE3B,mBAAmB;AACnB,qCAWmB;AAVjB,yHAAA,8BAA8B,OAAA;AAC9B,6GAAA,kBAAkB,OAAA;AAClB,qHAAA,0BAA0B,OAAA;AAC1B,mHAAA,wBAAwB,OAAA;AACxB,oHAAA,yBAAyB,OAAA;AACzB,oHAAA,yBAAyB,OAAA;AACzB,gHAAA,qBAAqB,OAAA;AAMvB,qBAAqB;AACrB,yCAOqB;AANnB,4GAAA,eAAe,OAAA;AACf,4GAAA,eAAe,OAAA;AACf,6GAAA,gBAAgB,OAAA;AAChB,oHAAA,uBAAuB,OAAA;AACvB,iHAAA,oBAAoB,OAAA;AAItB,qBAAqB;AACrB,2DAS8B;AAR5B,kHAAA,YAAY,OAAA;AACZ,sHAAA,gBAAgB,OAAA;AAChB,8HAAA,wBAAwB,OAAA;AACxB,sHAAA,gBAAgB,OAAA;AAChB,6HAAA,uBAAuB,OAAA;AAqBzB,4CAAuF;AAA9E,yGAAA,eAAe,OAAA;AAAE,qGAAA,WAAW,OAAA;AAAE,8GAAA,oBAAoB,OAAA;AAC3D,sDAAuG;AAA9F,+GAAA,iBAAiB,OAAA;AAC1B,oEAAgK;AAAvJ,sHAAA,iBAAiB,OAAA;AAAE,uHAAA,kBAAkB,OAAA;AAAE,uHAAA,kBAAkB,OAAA;AAAE,iHAAA,YAAY,OAAA;AAAE,oHAAA,eAAe,OAAA;AAAE,yHAAA,oBAAoB,OAAA;AACvH,6CAA+J;AAAtJ,oHAAA,yBAAyB,OAAA;AAAE,yHAAA,8BAA8B,OAAA;AAAE,4GAAA,iBAAiB,OAAA;AAAE,+GAAA,oBAAoB,OAAA;AAE3G,qBAAqB;AACrB,8CAA+D;AAAtD,mGAAA,QAAQ,OAAA;AAAE,0GAAA,eAAe,OAAA;AAClC,8DAAoF;AAA3E,mHAAA,gBAAgB,OAAA;AAAE,uHAAA,oBAAoB,OAAA;AAC/C,4CAK2B;AAJzB,kHAAA,wBAAwB,OAAA;AACxB,qHAAA,2BAA2B,OAAA;AAC3B,oHAAA,0BAA0B,OAAA;AAC1B,sHAAA,4BAA4B,OAAA;AAY9B,sBAAsB;AACtB,uDAOgC;AAN9B,mHAAA,mBAAmB,OAAA;AACnB,oHAAA,oBAAoB,OAAA;AACpB,sHAAA,sBAAsB,OAAA;AACtB,gHAAA,gBAAgB,OAAA;AAIlB,mDAA2H;AAAlH,iHAAA,mBAAmB,OAAA;AAAE,kHAAA,oBAAoB,OAAA;AAClD,2CAAwG;AAA/F,oHAAA,0BAA0B,OAAA;AAAE,6GAAA,mBAAmB,OAAA;AAExD,eAAe;AACf,6CAQuB;AAPrB,yGAAA,UAAU,OAAA;AACV,6GAAA,cAAc,OAAA;AACd,qHAAA,sBAAsB,OAAA;AAOxB,kDAA6F;AAApF,oHAAA,uBAAuB,OAAA;AAChC,8CAAuF;AAA9E,gHAAA,qBAAqB,OAAA;AAE9B,sCAAsC;AACtC,+BASgB;AARd,sGAAA,cAAc,OAAA;AACd,yGAAA,iBAAiB,OAAA;AACjB,oGAAA,YAAY,OAAA;AAEZ,qGAAA,aAAa,OAAA;AACb,yFAAA,CAAC,OAAA;AACD,0GAAA,kBAAkB,OAAA;AAIP,QAAA,wBAAwB,GAAG,OAAO,CAAC;AAGnC,QAAA,UAAU,GAAG;IACxB,QAAQ,EAAE,kBAAW;CACtB,CAAC;AAEF,2DAA2D;AAC9C,QAAA,aAAa,GACxB,8CAA8C;IAC9C,6DAA6D;IAC7D,sDAAsD,CAAC;AACzD,IAAA,gCAAuB,EAAC,UAAU,CAAC,CAAC"}

package/dist/middleware/provenance.d.ts

@@ -0,0 +1,11 @@
+import type { ProvenanceBlock } from '../receipts/schema';
+import { type ProviderRegistryConfig, type ProviderRegistryRequest } from './provider-registry';
+export interface AgentRequest extends ProviderRegistryRequest {
+    headers?: Record<string, string | undefined>;
+}
+export interface AgentGuardContext {
+    config?: ProviderRegistryConfig;
+    now?: () => Date;
+}
+export declare function captureProvenance(req: AgentRequest, ctx?: AgentGuardContext): ProvenanceBlock;
+//# sourceMappingURL=provenance.d.ts.map

package/dist/middleware/provenance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provenance.d.ts","sourceRoot":"","sources":["../../src/middleware/provenance.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAKL,KAAK,sBAAsB,EAC3B,KAAK,uBAAuB,EAC7B,MAAM,qBAAqB,CAAC;AAE7B,MAAM,WAAW,YAAa,SAAQ,uBAAuB;IAC3D,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;CAC9C;AAED,MAAM,WAAW,iBAAiB;IAChC,MAAM,CAAC,EAAE,sBAAsB,CAAC;IAChC,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB;AAED,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,YAAY,EAAE,GAAG,GAAE,iBAAsB,GAAG,eAAe,CAWjG"}

package/dist/middleware/provenance.js

@@ -0,0 +1,17 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.captureProvenance = captureProvenance;
+const provider_registry_1 = require("./provider-registry");
+function captureProvenance(req, ctx = {}) {
+    const route = (0, provider_registry_1.inferProviderRoute)({ ...req, providerRoute: ctx.config?.providerRoute ?? req.providerRoute });
+    const model = (0, provider_registry_1.inferModelIdentity)(String(req.model || 'unknown'), route);
+    const hosting = (0, provider_registry_1.inferHosting)(route, ctx.config);
+    const compliance = (0, provider_registry_1.inferCompliance)(route, model, ctx.config);
+    return {
+        model_identity: model,
+        hosting,
+        compliance,
+        captured_at: (ctx.now ? ctx.now() : new Date()).toISOString(),
+    };
+}
+//# sourceMappingURL=provenance.js.map

package/dist/middleware/provenance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provenance.js","sourceRoot":"","sources":["../../src/middleware/provenance.ts"],"names":[],"mappings":";;AAmBA,8CAWC;AA7BD,2DAO6B;AAW7B,SAAgB,iBAAiB,CAAC,GAAiB,EAAE,MAAyB,EAAE;IAC9E,MAAM,KAAK,GAAG,IAAA,sCAAkB,EAAC,EAAE,GAAG,GAAG,EAAE,aAAa,EAAE,GAAG,CAAC,MAAM,EAAE,aAAa,IAAI,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC;IAC5G,MAAM,KAAK,GAAG,IAAA,sCAAkB,EAAC,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,SAAS,CAAC,EAAE,KAAK,CAAC,CAAC;IACxE,MAAM,OAAO,GAAG,IAAA,gCAAY,EAAC,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAChD,MAAM,UAAU,GAAG,IAAA,mCAAe,EAAC,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAC7D,OAAO;QACL,cAAc,EAAE,KAAK;QACrB,OAAO;QACP,UAAU;QACV,WAAW,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE;KAC9D,CAAC;AACJ,CAAC"}

package/dist/middleware/provider-registry.d.ts

@@ -0,0 +1,34 @@
+import type { ComplianceProvenance, HostingProvenance, JurisdictionCountry, ModelIdentity, ProvenanceProvider, WeightsOriginCountry } from '../receipts/schema';
+export interface ProviderRouteInfo {
+    provider: ProvenanceProvider;
+    weights_origin_country: WeightsOriginCountry;
+    available_jurisdictions: string[];
+    baa_path: string | null;
+    hipaa_eligible: boolean;
+    zdr_available: boolean;
+    default_retention_days: number | null;
+    foreign_origin?: boolean;
+}
+export interface ProviderRegistryRequest {
+    url?: string;
+    provider?: string;
+    providerRoute?: string;
+    model?: string;
+}
+export interface ProviderRegistryConfig {
+    providerRoute?: string;
+    jurisdictionCountry?: JurisdictionCountry;
+    jurisdictionRegion?: string;
+    baaInForce?: boolean;
+    baaVendor?: string | null;
+    dataRetentionDays?: number | null;
+    dataResidencyAttested?: boolean;
+    foreignOriginConsentReceiptId?: string | null;
+}
+export declare const PROVIDER_REGISTRY: Record<string, ProviderRouteInfo>;
+export declare function isForeignOriginModel(model: string): boolean;
+export declare function inferProviderRoute(req: ProviderRegistryRequest): string;
+export declare function inferModelIdentity(model: string, route: string): ModelIdentity;
+export declare function inferHosting(route: string, config?: ProviderRegistryConfig): HostingProvenance;
+export declare function inferCompliance(route: string, model: ModelIdentity, config?: ProviderRegistryConfig): ComplianceProvenance;
+//# sourceMappingURL=provider-registry.d.ts.map

package/dist/middleware/provider-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-registry.d.ts","sourceRoot":"","sources":["../../src/middleware/provider-registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,oBAAoB,EACpB,iBAAiB,EACjB,mBAAmB,EACnB,aAAa,EACb,kBAAkB,EAClB,oBAAoB,EACrB,MAAM,oBAAoB,CAAC;AAE5B,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,sBAAsB,EAAE,oBAAoB,CAAC;IAC7C,uBAAuB,EAAE,MAAM,EAAE,CAAC;IAClC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,cAAc,EAAE,OAAO,CAAC;IACxB,aAAa,EAAE,OAAO,CAAC;IACvB,sBAAsB,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,uBAAuB;IACtC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,sBAAsB;IACrC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;IAC1C,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,6BAA6B,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/C;AAED,eAAO,MAAM,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,iBAAiB,CA8I/D,CAAC;AAIF,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAE3D;AAED,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,uBAAuB,GAAG,MAAM,CAoBvE;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,aAAa,CAU9E;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,GAAE,sBAA2B,GAAG,iBAAiB,CAQlG;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,GAAE,sBAA2B,GAAG,oBAAoB,CAY9H"}

package/dist/middleware/provider-registry.js

@@ -0,0 +1,290 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PROVIDER_REGISTRY = void 0;
+exports.isForeignOriginModel = isForeignOriginModel;
+exports.inferProviderRoute = inferProviderRoute;
+exports.inferModelIdentity = inferModelIdentity;
+exports.inferHosting = inferHosting;
+exports.inferCompliance = inferCompliance;
+exports.PROVIDER_REGISTRY = {
+    'anthropic-direct': {
+        provider: 'anthropic',
+        weights_origin_country: 'US',
+        available_jurisdictions: ['US'],
+        baa_path: 'Anthropic Enterprise Messages API with BAA eligible routing',
+        hipaa_eligible: true,
+        zdr_available: true,
+        default_retention_days: 0,
+    },
+    'aws-bedrock': {
+        provider: 'anthropic',
+        weights_origin_country: 'US',
+        available_jurisdictions: ['us-east-1', 'us-east-2', 'us-west-2', 'eu-west-1', 'eu-central-1', 'ap-northeast-1'],
+        baa_path: 'AWS BAA for Bedrock HIPAA eligible services',
+        hipaa_eligible: true,
+        zdr_available: true,
+        default_retention_days: 0,
+    },
+    'azure-openai': {
+        provider: 'openai',
+        weights_origin_country: 'US',
+        available_jurisdictions: ['eastus', 'westus', 'westeurope', 'francecentral', 'switzerlandnorth'],
+        baa_path: 'Microsoft Product Terms DPA',
+        hipaa_eligible: true,
+        zdr_available: true,
+        default_retention_days: 0,
+    },
+    'openai-direct': {
+        provider: 'openai',
+        weights_origin_country: 'US',
+        available_jurisdictions: ['US'],
+        baa_path: 'OpenAI Enterprise BAA with eligible API configuration',
+        hipaa_eligible: true,
+        zdr_available: true,
+        default_retention_days: 30,
+    },
+    'vertex-ai': {
+        provider: 'google',
+        weights_origin_country: 'US',
+        available_jurisdictions: ['us-central1', 'us-east4', 'europe-west4', 'europe-west1', 'asia-northeast1'],
+        baa_path: 'Google Cloud BAA',
+        hipaa_eligible: true,
+        zdr_available: true,
+        default_retention_days: 0,
+    },
+    fireworks: {
+        provider: 'fireworks',
+        weights_origin_country: 'unknown',
+        available_jurisdictions: ['US'],
+        baa_path: null,
+        hipaa_eligible: false,
+        zdr_available: false,
+        default_retention_days: 30,
+    },
+    baseten: {
+        provider: 'baseten',
+        weights_origin_country: 'unknown',
+        available_jurisdictions: ['US'],
+        baa_path: null,
+        hipaa_eligible: false,
+        zdr_available: false,
+        default_retention_days: 30,
+    },
+    together: {
+        provider: 'together',
+        weights_origin_country: 'unknown',
+        available_jurisdictions: ['US'],
+        baa_path: null,
+        hipaa_eligible: false,
+        zdr_available: false,
+        default_retention_days: 30,
+    },
+    'moonshot-direct': {
+        provider: 'moonshot',
+        weights_origin_country: 'CN',
+        available_jurisdictions: ['CN'],
+        baa_path: null,
+        hipaa_eligible: false,
+        zdr_available: false,
+        default_retention_days: 30,
+        foreign_origin: true,
+    },
+    'deepseek-direct': {
+        provider: 'deepseek',
+        weights_origin_country: 'CN',
+        available_jurisdictions: ['CN'],
+        baa_path: null,
+        hipaa_eligible: false,
+        zdr_available: false,
+        default_retention_days: 30,
+        foreign_origin: true,
+    },
+    'alibaba-direct': {
+        provider: 'alibaba',
+        weights_origin_country: 'CN',
+        available_jurisdictions: ['CN'],
+        baa_path: null,
+        hipaa_eligible: false,
+        zdr_available: false,
+        default_retention_days: 30,
+        foreign_origin: true,
+    },
+    'kimi-k2-on-baseten': {
+        provider: 'baseten',
+        weights_origin_country: 'CN',
+        available_jurisdictions: ['US'],
+        baa_path: null,
+        hipaa_eligible: false,
+        zdr_available: false,
+        default_retention_days: 30,
+        foreign_origin: true,
+    },
+    'deepseek-on-together': {
+        provider: 'together',
+        weights_origin_country: 'CN',
+        available_jurisdictions: ['US'],
+        baa_path: null,
+        hipaa_eligible: false,
+        zdr_available: false,
+        default_retention_days: 30,
+        foreign_origin: true,
+    },
+    'qwen-on-together': {
+        provider: 'together',
+        weights_origin_country: 'CN',
+        available_jurisdictions: ['US'],
+        baa_path: null,
+        hipaa_eligible: false,
+        zdr_available: false,
+        default_retention_days: 30,
+        foreign_origin: true,
+    },
+    'self-hosted': {
+        provider: 'self_hosted',
+        weights_origin_country: 'unknown',
+        available_jurisdictions: ['self-hosted'],
+        baa_path: null,
+        hipaa_eligible: false,
+        zdr_available: true,
+        default_retention_days: 0,
+    },
+};
+const FOREIGN_ORIGIN_PATTERNS = [/kimi/i, /deepseek/i, /qwen/i, /yi[-_ ]/i, /baichuan/i, /glm/i, /moonshot/i];
+function isForeignOriginModel(model) {
+    return FOREIGN_ORIGIN_PATTERNS.some((pattern) => pattern.test(model));
+}
+function inferProviderRoute(req) {
+    const model = String(req.model || '').toLowerCase();
+    const url = String(req.url || '').toLowerCase();
+    if ((req.providerRoute === 'baseten' || url.includes('baseten')) && /kimi/.test(model))
+        return 'kimi-k2-on-baseten';
+    if ((req.providerRoute === 'together' || url.includes('together')) && /deepseek/.test(model))
+        return 'deepseek-on-together';
+    if ((req.providerRoute === 'together' || url.includes('together')) && /qwen/.test(model))
+        return 'qwen-on-together';
+    if (req.providerRoute && exports.PROVIDER_REGISTRY[req.providerRoute])
+        return req.providerRoute;
+    if (url.includes('bedrock') || req.provider === 'bedrock')
+        return 'aws-bedrock';
+    if (url.includes('anthropic') || req.provider === 'anthropic')
+        return 'anthropic-direct';
+    if (url.includes('azure') || url.includes('openai.azure'))
+        return 'azure-openai';
+    if (url.includes('aiplatform.googleapis') || url.includes('vertex'))
+        return 'vertex-ai';
+    if (url.includes('fireworks') || req.providerRoute === 'fireworks')
+        return 'fireworks';
+    if (url.includes('baseten') || req.providerRoute === 'baseten')
+        return 'baseten';
+    if (url.includes('together') || req.providerRoute === 'together')
+        return 'together';
+    if (url.includes('moonshot') || /kimi/.test(model))
+        return 'moonshot-direct';
+    if (url.includes('deepseek') || /deepseek/.test(model))
+        return 'deepseek-direct';
+    if (url.includes('dashscope') || url.includes('alibaba') || /qwen/.test(model))
+        return 'alibaba-direct';
+    if (req.provider === 'openai')
+        return 'openai-direct';
+    if (req.provider === 'gemini')
+        return 'vertex-ai';
+    return 'self-hosted';
+}
+function inferModelIdentity(model, route) {
+    const info = exports.PROVIDER_REGISTRY[route] ?? exports.PROVIDER_REGISTRY['self-hosted'];
+    const modelId = model || 'unknown';
+    return {
+        provider: modelProvider(modelId, info.provider),
+        model_id: modelId,
+        model_version: modelVersion(modelId),
+        model_family: modelFamily(modelId),
+        weights_origin_country: isForeignOriginModel(modelId) || info.foreign_origin ? 'CN' : info.weights_origin_country,
+    };
+}
+function inferHosting(route, config = {}) {
+    const info = exports.PROVIDER_REGISTRY[route] ?? exports.PROVIDER_REGISTRY['self-hosted'];
+    const region = config.jurisdictionRegion || info.available_jurisdictions[0] || 'unknown';
+    return {
+        provider_route: route,
+        jurisdiction_country: config.jurisdictionCountry || countryFromRegion(region),
+        jurisdiction_region: region,
+    };
+}
+function inferCompliance(route, model, config = {}) {
+    const info = exports.PROVIDER_REGISTRY[route] ?? exports.PROVIDER_REGISTRY['self-hosted'];
+    const retention = config.dataRetentionDays !== undefined ? config.dataRetentionDays : info.default_retention_days;
+    return {
+        baa_in_force: config.baaInForce ?? false,
+        baa_vendor: config.baaVendor ?? info.baa_path,
+        hipaa_eligible: info.hipaa_eligible,
+        data_retention_days: retention,
+        data_residency_attested: config.dataResidencyAttested ?? false,
+        foreign_origin_weight_flag: model.weights_origin_country === 'CN' || info.foreign_origin === true,
+        foreign_origin_consent_receipt_id: config.foreignOriginConsentReceiptId ?? null,
+    };
+}
+function modelProvider(model, fallback) {
+    const lower = model.toLowerCase();
+    if (lower.includes('claude'))
+        return 'anthropic';
+    if (lower.includes('gpt') || lower.includes('openai'))
+        return 'openai';
+    if (lower.includes('gemini'))
+        return 'google';
+    if (lower.includes('mistral'))
+        return 'mistral';
+    if (lower.includes('llama'))
+        return 'meta';
+    if (lower.includes('command'))
+        return 'cohere';
+    if (lower.includes('deepseek'))
+        return 'deepseek';
+    if (lower.includes('kimi') || lower.includes('moonshot'))
+        return 'moonshot';
+    if (lower.includes('qwen') || lower.includes('yi') || lower.includes('baichuan') || lower.includes('glm'))
+        return 'alibaba';
+    return fallback;
+}
+function modelVersion(model) {
+    const match = model.match(/(?:^|[-_])(20\d{6}|\d{8})(?:$|[-_])/);
+    return match?.[1] ?? 'unknown';
+}
+function modelFamily(model) {
+    const lower = model.toLowerCase();
+    if (lower.includes('claude'))
+        return 'claude';
+    if (lower.includes('gpt'))
+        return 'gpt';
+    if (lower.includes('gemini'))
+        return 'gemini';
+    if (lower.includes('llama-4') || lower.includes('llama4'))
+        return 'llama-4';
+    if (lower.includes('mistral'))
+        return 'mistral';
+    if (lower.includes('kimi'))
+        return 'kimi';
+    if (lower.includes('deepseek'))
+        return 'deepseek';
+    if (lower.includes('qwen'))
+        return 'qwen';
+    return lower.split(/[/:_]/).pop()?.split('-').slice(0, 2).join('-') || 'unknown';
+}
+function countryFromRegion(region) {
+    const lower = region.toLowerCase();
+    if (lower.startsWith('us') || lower.includes('eastus') || lower.includes('westus'))
+        return 'US';
+    if (lower.startsWith('eu') || lower.includes('europe') || lower.includes('france') || lower.includes('switzerland'))
+        return 'EU';
+    if (lower.startsWith('uk'))
+        return 'UK';
+    if (lower.startsWith('ca'))
+        return 'CA';
+    if (lower.startsWith('cn'))
+        return 'CN';
+    if (lower.startsWith('ap-northeast') || lower.includes('tokyo') || lower.includes('japan'))
+        return 'JP';
+    if (lower.startsWith('ap-southeast-2') || lower.includes('australia'))
+        return 'AU';
+    return 'unknown';
+}
+//# sourceMappingURL=provider-registry.js.map

package/dist/middleware/provider-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-registry.js","sourceRoot":"","sources":["../../src/middleware/provider-registry.ts"],"names":[],"mappings":";;;AAwLA,oDAEC;AAED,gDAoBC;AAED,gDAUC;AAED,oCAQC;AAED,0CAYC;AA9MY,QAAA,iBAAiB,GAAsC;IAClE,kBAAkB,EAAE;QAClB,QAAQ,EAAE,WAAW;QACrB,sBAAsB,EAAE,IAAI;QAC5B,uBAAuB,EAAE,CAAC,IAAI,CAAC;QAC/B,QAAQ,EAAE,6DAA6D;QACvE,cAAc,EAAE,IAAI;QACpB,aAAa,EAAE,IAAI;QACnB,sBAAsB,EAAE,CAAC;KAC1B;IACD,aAAa,EAAE;QACb,QAAQ,EAAE,WAAW;QACrB,sBAAsB,EAAE,IAAI;QAC5B,uBAAuB,EAAE,CAAC,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,cAAc,EAAE,gBAAgB,CAAC;QAC/G,QAAQ,EAAE,6CAA6C;QACvD,cAAc,EAAE,IAAI;QACpB,aAAa,EAAE,IAAI;QACnB,sBAAsB,EAAE,CAAC;KAC1B;IACD,cAAc,EAAE;QACd,QAAQ,EAAE,QAAQ;QAClB,sBAAsB,EAAE,IAAI;QAC5B,uBAAuB,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,YAAY,EAAE,eAAe,EAAE,kBAAkB,CAAC;QAChG,QAAQ,EAAE,6BAA6B;QACvC,cAAc,EAAE,IAAI;QACpB,aAAa,EAAE,IAAI;QACnB,sBAAsB,EAAE,CAAC;KAC1B;IACD,eAAe,EAAE;QACf,QAAQ,EAAE,QAAQ;QAClB,sBAAsB,EAAE,IAAI;QAC5B,uBAAuB,EAAE,CAAC,IAAI,CAAC;QAC/B,QAAQ,EAAE,uDAAuD;QACjE,cAAc,EAAE,IAAI;QACpB,aAAa,EAAE,IAAI;QACnB,sBAAsB,EAAE,EAAE;KAC3B;IACD,WAAW,EAAE;QACX,QAAQ,EAAE,QAAQ;QAClB,sBAAsB,EAAE,IAAI;QAC5B,uBAAuB,EAAE,CAAC,aAAa,EAAE,UAAU,EAAE,cAAc,EAAE,cAAc,EAAE,iBAAiB,CAAC;QACvG,QAAQ,EAAE,kBAAkB;QAC5B,cAAc,EAAE,IAAI;QACpB,aAAa,EAAE,IAAI;QACnB,sBAAsB,EAAE,CAAC;KAC1B;IACD,SAAS,EAAE;QACT,QAAQ,EAAE,WAAW;QACrB,sBAAsB,EAAE,SAAS;QACjC,uBAAuB,EAAE,CAAC,IAAI,CAAC;QAC/B,QAAQ,EAAE,IAAI;QACd,cAAc,EAAE,KAAK;QACrB,aAAa,EAAE,KAAK;QACpB,sBAAsB,EAAE,EAAE;KAC3B;IACD,OAAO,EAAE;QACP,QAAQ,EAAE,SAAS;QACnB,sBAAsB,EAAE,SAAS;QACjC,uBAAuB,EAAE,CAAC,IAAI,CAAC;QAC/B,QAAQ,EAAE,IAAI;QACd,cAAc,EAAE,KAAK;QACrB,aAAa,EAAE,KAAK;QACpB,sBAAsB,EAAE,EAAE;KAC3B;IACD,QAAQ,EAAE;QACR,QAAQ,EAAE,UAAU;QACpB,sBAAsB,EAAE,SAAS;QACjC,uBAAuB,EAAE,CAAC,IAAI,CAAC;QAC/B,QAAQ,EAAE,IAAI;QACd,cAAc,EAAE,KAAK;QACrB,aAAa,EAAE,KAAK;QACpB,sBAAsB,EAAE,EAAE;KAC3B;IACD,iBAAiB,EAAE;QACjB,QAAQ,EAAE,UAAU;QACpB,sBAAsB,EAAE,IAAI;QAC5B,uBAAuB,EAAE,CAAC,IAAI,CAAC;QAC/B,QAAQ,EAAE,IAAI;QACd,cAAc,EAAE,KAAK;QACrB,aAAa,EAAE,KAAK;QACpB,sBAAsB,EAAE,EAAE;QAC1B,cAAc,EAAE,IAAI;KACrB;IACD,iBAAiB,EAAE;QACjB,QAAQ,EAAE,UAAU;QACpB,sBAAsB,EAAE,IAAI;QAC5B,uBAAuB,EAAE,CAAC,IAAI,CAAC;QAC/B,QAAQ,EAAE,IAAI;QACd,cAAc,EAAE,KAAK;QACrB,aAAa,EAAE,KAAK;QACpB,sBAAsB,EAAE,EAAE;QAC1B,cAAc,EAAE,IAAI;KACrB;IACD,gBAAgB,EAAE;QAChB,QAAQ,EAAE,SAAS;QACnB,sBAAsB,EAAE,IAAI;QAC5B,uBAAuB,EAAE,CAAC,IAAI,CAAC;QAC/B,QAAQ,EAAE,IAAI;QACd,cAAc,EAAE,KAAK;QACrB,aAAa,EAAE,KAAK;QACpB,sBAAsB,EAAE,EAAE;QAC1B,cAAc,EAAE,IAAI;KACrB;IACD,oBAAoB,EAAE;QACpB,QAAQ,EAAE,SAAS;QACnB,sBAAsB,EAAE,IAAI;QAC5B,uBAAuB,EAAE,CAAC,IAAI,CAAC;QAC/B,QAAQ,EAAE,IAAI;QACd,cAAc,EAAE,KAAK;QACrB,aAAa,EAAE,KAAK;QACpB,sBAAsB,EAAE,EAAE;QAC1B,cAAc,EAAE,IAAI;KACrB;IACD,sBAAsB,EAAE;QACtB,QAAQ,EAAE,UAAU;QACpB,sBAAsB,EAAE,IAAI;QAC5B,uBAAuB,EAAE,CAAC,IAAI,CAAC;QAC/B,QAAQ,EAAE,IAAI;QACd,cAAc,EAAE,KAAK;QACrB,aAAa,EAAE,KAAK;QACpB,sBAAsB,EAAE,EAAE;QAC1B,cAAc,EAAE,IAAI;KACrB;IACD,kBAAkB,EAAE;QAClB,QAAQ,EAAE,UAAU;QACpB,sBAAsB,EAAE,IAAI;QAC5B,uBAAuB,EAAE,CAAC,IAAI,CAAC;QAC/B,QAAQ,EAAE,IAAI;QACd,cAAc,EAAE,KAAK;QACrB,aAAa,EAAE,KAAK;QACpB,sBAAsB,EAAE,EAAE;QAC1B,cAAc,EAAE,IAAI;KACrB;IACD,aAAa,EAAE;QACb,QAAQ,EAAE,aAAa;QACvB,sBAAsB,EAAE,SAAS;QACjC,uBAAuB,EAAE,CAAC,aAAa,CAAC;QACxC,QAAQ,EAAE,IAAI;QACd,cAAc,EAAE,KAAK;QACrB,aAAa,EAAE,IAAI;QACnB,sBAAsB,EAAE,CAAC;KAC1B;CACF,CAAC;AAEF,MAAM,uBAAuB,GAAG,CAAC,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;AAE9G,SAAgB,oBAAoB,CAAC,KAAa;IAChD,OAAO,uBAAuB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;AACxE,CAAC;AAED,SAAgB,kBAAkB,CAAC,GAA4B;IAC7D,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACpD,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAChD,IAAI,CAAC,GAAG,CAAC,aAAa,KAAK,SAAS,IAAI,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,oBAAoB,CAAC;IACpH,IAAI,CAAC,GAAG,CAAC,aAAa,KAAK,UAAU,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,sBAAsB,CAAC;IAC5H,IAAI,CAAC,GAAG,CAAC,aAAa,KAAK,UAAU,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,kBAAkB,CAAC;IACpH,IAAI,GAAG,CAAC,aAAa,IAAI,yBAAiB,CAAC,GAAG,CAAC,aAAa,CAAC;QAAE,OAAO,GAAG,CAAC,aAAa,CAAC;IACxF,IAAI,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,QAAQ,KAAK,SAAS;QAAE,OAAO,aAAa,CAAC;IAChF,IAAI,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,GAAG,CAAC,QAAQ,KAAK,WAAW;QAAE,OAAO,kBAAkB,CAAC;IACzF,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,cAAc,CAAC;QAAE,OAAO,cAAc,CAAC;IACjF,IAAI,GAAG,CAAC,QAAQ,CAAC,uBAAuB,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,WAAW,CAAC;IACxF,IAAI,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,GAAG,CAAC,aAAa,KAAK,WAAW;QAAE,OAAO,WAAW,CAAC;IACvF,IAAI,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,aAAa,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACjF,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,aAAa,KAAK,UAAU;QAAE,OAAO,UAAU,CAAC;IACpF,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,iBAAiB,CAAC;IAC7E,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,iBAAiB,CAAC;IACjF,IAAI,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,gBAAgB,CAAC;IACxG,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,eAAe,CAAC;IACtD,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,WAAW,CAAC;IAClD,OAAO,aAAa,CAAC;AACvB,CAAC;AAED,SAAgB,kBAAkB,CAAC,KAAa,EAAE,KAAa;IAC7D,MAAM,IAAI,GAAG,yBAAiB,CAAC,KAAK,CAAC,IAAI,yBAAiB,CAAC,aAAa,CAAC,CAAC;IAC1E,MAAM,OAAO,GAAG,KAAK,IAAI,SAAS,CAAC;IACnC,OAAO;QACL,QAAQ,EAAE,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC;QAC/C,QAAQ,EAAE,OAAO;QACjB,aAAa,EAAE,YAAY,CAAC,OAAO,CAAC;QACpC,YAAY,EAAE,WAAW,CAAC,OAAO,CAAC;QAClC,sBAAsB,EAAE,oBAAoB,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,sBAAsB;KAClH,CAAC;AACJ,CAAC;AAED,SAAgB,YAAY,CAAC,KAAa,EAAE,SAAiC,EAAE;IAC7E,MAAM,IAAI,GAAG,yBAAiB,CAAC,KAAK,CAAC,IAAI,yBAAiB,CAAC,aAAa,CAAC,CAAC;IAC1E,MAAM,MAAM,GAAG,MAAM,CAAC,kBAAkB,IAAI,IAAI,CAAC,uBAAuB,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC;IACzF,OAAO;QACL,cAAc,EAAE,KAAK;QACrB,oBAAoB,EAAE,MAAM,CAAC,mBAAmB,IAAI,iBAAiB,CAAC,MAAM,CAAC;QAC7E,mBAAmB,EAAE,MAAM;KAC5B,CAAC;AACJ,CAAC;AAED,SAAgB,eAAe,CAAC,KAAa,EAAE,KAAoB,EAAE,SAAiC,EAAE;IACtG,MAAM,IAAI,GAAG,yBAAiB,CAAC,KAAK,CAAC,IAAI,yBAAiB,CAAC,aAAa,CAAC,CAAC;IAC1E,MAAM,SAAS,GAAG,MAAM,CAAC,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC;IAClH,OAAO;QACL,YAAY,EAAE,MAAM,CAAC,UAAU,IAAI,KAAK;QACxC,UAAU,EAAE,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC,QAAQ;QAC7C,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,mBAAmB,EAAE,SAAS;QAC9B,uBAAuB,EAAE,MAAM,CAAC,qBAAqB,IAAI,KAAK;QAC9D,0BAA0B,EAAE,KAAK,CAAC,sBAAsB,KAAK,IAAI,IAAI,IAAI,CAAC,cAAc,KAAK,IAAI;QACjG,iCAAiC,EAAE,MAAM,CAAC,6BAA6B,IAAI,IAAI;KAChF,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,KAAa,EAAE,QAA4B;IAChE,MAAM,KAAK,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;IAClC,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,WAAW,CAAC;IACjD,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,QAAQ,CAAC;IACvE,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC9C,IAAI,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,SAAS,CAAC;IAChD,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,MAAM,CAAC;IAC3C,IAAI,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC/C,IAAI,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC;QAAE,OAAO,UAAU,CAAC;IAClD,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC;QAAE,OAAO,UAAU,CAAC;IAC5E,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC5H,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACjE,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC;AACjC,CAAC;AAED,SAAS,WAAW,CAAC,KAAa;IAChC,MAAM,KAAK,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;IAClC,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC9C,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACxC,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC9C,IAAI,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,SAAS,CAAC;IAC5E,IAAI,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,SAAS,CAAC;IAChD,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC;IAC1C,IAAI,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC;QAAE,OAAO,UAAU,CAAC;IAClD,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC;IAC1C,OAAO,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC;AACnF,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAc;IACvC,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;IACnC,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IAChG,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC;QAAE,OAAO,IAAI,CAAC;IACjI,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACxC,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACxC,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACxC,IAAI,KAAK,CAAC,UAAU,CAAC,cAAc,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IACxG,IAAI,KAAK,CAAC,UAAU,CAAC,gBAAgB,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC;QAAE,OAAO,IAAI,CAAC;IACnF,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/posture/enforce.d.ts

@@ -0,0 +1,19 @@
+import type { ProvenanceBlock } from '../receipts/schema';
+export type GovernancePosture = 'velocity' | 'standard' | 'compliance';
+export interface ComplianceEnforcementConfig {
+    posture?: GovernancePosture;
+    foreignOriginConsentReceiptId?: string | null;
+    consentEndpointBaseUrl?: string;
+    consentGetJson?: (url: string) => Promise<unknown>;
+}
+export declare class AgentGuardComplianceError extends Error {
+    code: string;
+    constructor(message: string);
+}
+export declare class AgentGuardConsentRequiredError extends Error {
+    code: string;
+    constructor(message: string);
+}
+export declare function enforceCompliance(provenance: ProvenanceBlock, config?: ComplianceEnforcementConfig): Promise<void>;
+export declare function verifyConsentReceipt(consentId: string, config?: ComplianceEnforcementConfig): Promise<boolean>;
+//# sourceMappingURL=enforce.d.ts.map

package/dist/posture/enforce.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"enforce.d.ts","sourceRoot":"","sources":["../../src/posture/enforce.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAE1D,MAAM,MAAM,iBAAiB,GAAG,UAAU,GAAG,UAAU,GAAG,YAAY,CAAC;AAEvE,MAAM,WAAW,2BAA2B;IAC1C,OAAO,CAAC,EAAE,iBAAiB,CAAC;IAC5B,6BAA6B,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9C,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,cAAc,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CACpD;AAED,qBAAa,yBAA0B,SAAQ,KAAK;IAClD,IAAI,SAAiC;gBACzB,OAAO,EAAE,MAAM;CAI5B;AAED,qBAAa,8BAA+B,SAAQ,KAAK;IACvD,IAAI,SAAiC;gBACzB,OAAO,EAAE,MAAM;CAI5B;AAID,wBAAsB,iBAAiB,CACrC,UAAU,EAAE,eAAe,EAC3B,MAAM,GAAE,2BAAgC,GACvC,OAAO,CAAC,IAAI,CAAC,CAmBf;AAED,wBAAsB,oBAAoB,CACxC,SAAS,EAAE,MAAM,EACjB,MAAM,GAAE,2BAAgC,GACvC,OAAO,CAAC,OAAO,CAAC,CAKlB"}

package/dist/posture/enforce.js

@@ -0,0 +1,109 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AgentGuardConsentRequiredError = exports.AgentGuardComplianceError = void 0;
+exports.enforceCompliance = enforceCompliance;
+exports.verifyConsentReceipt = verifyConsentReceipt;
+const http = __importStar(require("http"));
+const https = __importStar(require("https"));
+class AgentGuardComplianceError extends Error {
+    code = 'AGENTGUARD_COMPLIANCE_BLOCK';
+    constructor(message) {
+        super(message);
+        this.name = 'AgentGuardComplianceError';
+    }
+}
+exports.AgentGuardComplianceError = AgentGuardComplianceError;
+class AgentGuardConsentRequiredError extends Error {
+    code = 'AGENTGUARD_CONSENT_REQUIRED';
+    constructor(message) {
+        super(message);
+        this.name = 'AgentGuardConsentRequiredError';
+    }
+}
+exports.AgentGuardConsentRequiredError = AgentGuardConsentRequiredError;
+const DEFAULT_CONSENT_BASE_URL = 'https://agentguard.run';
+async function enforceCompliance(provenance, config = {}) {
+    if (!provenance.compliance.foreign_origin_weight_flag)
+        return;
+    const posture = config.posture ?? 'standard';
+    if (posture === 'compliance') {
+        throw new AgentGuardComplianceError('Foreign origin weights are blocked in compliance posture. Set posture to standard and provide foreign_origin_consent_receipt_id to use this model.');
+    }
+    if (posture !== 'standard')
+        return;
+    const consentId = config.foreignOriginConsentReceiptId || provenance.compliance.foreign_origin_consent_receipt_id;
+    if (!consentId) {
+        throw new AgentGuardConsentRequiredError('This call uses foreign origin weights. Generate a consent receipt at https://agentguard.run/dashboard/consent/foreign-origin-weights before using this model.');
+    }
+    const verified = await verifyConsentReceipt(consentId, config);
+    if (!verified) {
+        throw new AgentGuardConsentRequiredError(`Foreign origin consent receipt ${consentId} is invalid or expired.`);
+    }
+}
+async function verifyConsentReceipt(consentId, config = {}) {
+    if (!/^ag_consent_[A-Za-z0-9_-]+$/.test(consentId))
+        return false;
+    const base = (config.consentEndpointBaseUrl || DEFAULT_CONSENT_BASE_URL).replace(/\/$/, '');
+    const raw = await (config.consentGetJson ?? getJson)(`${base}/api/consent/verify/${encodeURIComponent(consentId)}`);
+    return Boolean(raw && typeof raw === 'object' && raw.valid === true);
+}
+function getJson(url) {
+    if (url.startsWith('mock://'))
+        return Promise.resolve({ valid: true });
+    return new Promise((resolve, reject) => {
+        const parsed = new URL(url);
+        const client = parsed.protocol === 'http:' ? http : https;
+        const req = client.request({ method: 'GET', hostname: parsed.hostname, port: parsed.port, path: parsed.pathname + parsed.search, timeout: 5000 }, (res) => {
+            const chunks = [];
+            res.on('data', (chunk) => chunks.push(chunk));
+            res.on('end', () => {
+                const text = Buffer.concat(chunks).toString('utf8');
+                if ((res.statusCode ?? 0) >= 400)
+                    return reject(new Error(`consent endpoint failed: ${res.statusCode}`));
+                try {
+                    resolve(text ? JSON.parse(text) : {});
+                }
+                catch {
+                    resolve({});
+                }
+            });
+        });
+        req.on('error', reject);
+        req.on('timeout', () => req.destroy(new Error('consent endpoint timed out')));
+        req.end();
+    });
+}
+//# sourceMappingURL=enforce.js.map