@complyedge/sdk 0.2.0

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts","../src/client.ts","../src/openai-middleware.ts"],"sourcesContent":["/**\n * ComplyEdge TypeScript SDK\n *\n * Runtime EU AI Act enforcement for AI agents.\n *\n * @example\n * ```typescript\n * import { ComplyEdgeClient } from \"@complyedge/sdk\";\n *\n * const ce = new ComplyEdgeClient({ apiKey: process.env.COMPLYEDGE_API_KEY! });\n * const result = await ce.check(\"Your AI prompt here\");\n *\n * if (result.status === \"violation\") {\n *   console.log(\"Blocked:\", result.violations);\n * }\n * ```\n */\n\nexport { ComplyEdgeClient } from \"./client\";\nexport { withCompliance, ComplianceError } from \"./openai-middleware\";\nexport type {\n  ComplyEdgeConfig,\n  ComplianceContext,\n  ComplianceResult,\n  ComplianceViolation,\n  SeverityLevel,\n  SensitivityResult,\n  SensitivityDetection,\n  PreDeploymentInput,\n  PreDeploymentResult,\n} from \"./types\";\n","/**\n * ComplyEdge TypeScript SDK — Client\n */\n\nimport axios, { AxiosInstance } from \"axios\";\nimport type {\n  ComplyEdgeConfig,\n  ComplianceContext,\n  ComplianceResult,\n  ComplianceViolation,\n  SensitivityDetection,\n  SensitivityResult,\n  PreDeploymentInput,\n  PreDeploymentResult,\n} from \"./types\";\n\nconst DEFAULT_BASE_URL = \"https://api.complyedge.io\";\nconst SDK_VERSION = \"0.2.0\";\n\nexport class ComplyEdgeClient {\n  private http: AxiosInstance;\n  private agentId: string;\n  private jurisdiction?: string;\n\n  constructor(config: ComplyEdgeConfig) {\n    const baseUrl = config.baseUrl || process.env.COMPLYEDGE_API_URL || DEFAULT_BASE_URL;\n\n    this.agentId = config.agentId || \"default\";\n    this.jurisdiction = config.jurisdiction;\n\n    this.http = axios.create({\n      baseURL: baseUrl.replace(/\\/+$/, \"\"),\n      timeout: config.timeout || 30_000,\n      headers: {\n        Authorization: `Bearer ${config.apiKey}`,\n        \"Content-Type\": \"application/json\",\n        \"User-Agent\": `complyedge-typescript-sdk/${SDK_VERSION}`,\n      },\n    });\n  }\n\n  /**\n   * Run a compliance check on text input.\n   *\n   * Calls POST /v1/check: the deterministic OPA hot path. A decision here is\n   * evaluated against the Rego rule bundle, returns article-cited violations,\n   * and is written to the Article 12 audit trail (`auditLogged`).\n   */\n  async check(text: string, context?: ComplianceContext): Promise<ComplianceResult> {\n    const start = Date.now();\n    const jurisdiction = context?.jurisdiction || this.jurisdiction || \"EU\";\n\n    const response = await this.http.post(\"/v1/check\", {\n      text,\n      agent_id: context?.agentId || this.agentId,\n      jurisdiction,\n      direction: context?.direction === \"prompt\" ? \"input\" : \"output\",\n      use_semantic_fallback: false,\n      context: context?.userRole ? { user_role: context.userRole } : undefined,\n    });\n\n    const data = response.data;\n    const processingTimeMs = Date.now() - start;\n    const allowed = data.allowed !== false;\n\n    return {\n      eventId: data.event_id || \"\",\n      allowed,\n      status: allowed ? \"safe\" : \"violation\",\n      violations: (data.violations || []).map((v: Record<string, unknown>) => ({\n        ruleId: (v.rule_id as string) || \"\",\n        ruleDescription: (v.rule_description as string) || \"\",\n        severity: (v.severity as ComplianceViolation[\"severity\"]) || \"medium\",\n        reason: (v.reason as string) || \"\",\n        confidence: (v.confidence as number) ?? 1.0,\n        textExcerpt: v.text_excerpt as string | undefined,\n      })),\n      latencyMs: data.latency_ms || 0,\n      bundleVersion: data.bundle_version || \"\",\n      evaluatedRules: data.evaluated_rules || [],\n      enginePath: data.engine_path || \"opa\",\n      opaLatencyMs: data.opa_latency_ms,\n      auditLogged: data.audit_logged !== false,\n      jurisdiction,\n      processingTimeMs,\n    };\n  }\n\n  /**\n   * Run proactive sensitivity detection on user input.\n   *\n   * Calls POST /v1/sensitivity/detect, which deliberately stays on the legacy\n   * TrustLint + LLM pipeline. It does NOT run OPA and does NOT write the\n   * Article 12 audit trail. Use `check()` for runtime EU AI Act enforcement.\n   */\n  async detectSensitivity(\n    text: string,\n    context?: ComplianceContext\n  ): Promise<SensitivityResult> {\n    const start = Date.now();\n    const jurisdiction = context?.jurisdiction || this.jurisdiction || \"US\";\n\n    const response = await this.http.post(\"/v1/sensitivity/detect\", {\n      input_text: text,\n      agent_id: context?.agentId || this.agentId,\n      jurisdiction,\n      direction: context?.direction || \"prompt\",\n      user_role: context?.userRole,\n    });\n\n    const data = response.data;\n\n    return {\n      eventId: data.event_id || \"\",\n      status: data.overall_risk_assessment === \"safe\" ? \"safe\" : \"violation\",\n      detections: (data.detections || []).map((d: Record<string, unknown>) => ({\n        ruleId: (d.rule_id as string) || \"\",\n        severity: (d.severity as SensitivityDetection[\"severity\"]) || \"medium\",\n        regulation: (d.regulation as string) || \"\",\n        description: (d.description as string) || \"\",\n        article: d.article as string | undefined,\n        remediation: d.remediation as string | undefined,\n      })),\n      riskScore: data.overall_risk_score || 0,\n      jurisdiction,\n      processingTimeMs: Date.now() - start,\n    };\n  }\n\n  /**\n   * Run a pre-deployment assessment on an AI system configuration.\n   */\n  async assessPreDeployment(input: PreDeploymentInput): Promise<PreDeploymentResult> {\n    const response = await this.http.post(\"/v1/assessment/pre-deployment\", {\n      system_prompt: input.systemPrompt,\n      model_config: input.modelConfig\n        ? {\n            provider: input.modelConfig.provider,\n            model_id: input.modelConfig.modelId,\n            temperature: input.modelConfig.temperature,\n          }\n        : undefined,\n      agent_pipeline: input.agentPipeline\n        ? {\n            tools: input.agentPipeline.tools,\n            memory: input.agentPipeline.memory,\n            autonomy_level: input.agentPipeline.autonomyLevel,\n            human_oversight: input.agentPipeline.humanOversight,\n          }\n        : undefined,\n      jurisdiction: input.jurisdiction || \"EU\",\n    });\n\n    const data = response.data;\n    return {\n      complianceScore: data.compliance_score,\n      riskTier: data.risk_tier,\n      violations: (data.violations || []).map((v: Record<string, unknown>) => ({\n        ruleId: v.rule_id as string,\n        article: v.article as string,\n        description: v.description as string,\n        requiredAction: v.required_action as string,\n      })),\n      requiredDisclosures: data.required_disclosures || [],\n      euAiActCategory: data.eu_ai_act_category || \"\",\n      estimatedDeadline: data.estimated_deadline || \"\",\n    };\n  }\n}\n","/**\n * ComplyEdge OpenAI Middleware\n *\n * Wraps an OpenAI client to run compliance checks on messages\n * before they are sent to the model.\n *\n * Usage:\n *   import OpenAI from \"openai\";\n *   import { ComplyEdgeClient } from \"@complyedge/sdk\";\n *   import { withCompliance } from \"@complyedge/sdk/openai-middleware\";\n *\n *   const ce = new ComplyEdgeClient({ apiKey: \"...\" });\n *   const openai = withCompliance(new OpenAI(), ce);\n *   // Now openai.chat.completions.create() runs compliance checks automatically\n */\n\nimport type { ComplyEdgeClient } from \"./client\";\nimport type { ComplianceViolation } from \"./types\";\n\nexport class ComplianceError extends Error {\n  public violations: ComplianceViolation[];\n\n  constructor(message: string, violations: ComplianceViolation[]) {\n    super(message);\n    this.name = \"ComplianceError\";\n    this.violations = violations;\n  }\n}\n\n/**\n * Wrap an OpenAI client with ComplyEdge compliance checks.\n * The returned object proxies chat.completions.create() to check\n * user messages before sending to OpenAI.\n */\nexport function withCompliance<T extends Record<string, unknown>>(\n  openaiClient: T,\n  ceClient: ComplyEdgeClient,\n  options?: {\n    checkInput?: boolean;\n    checkOutput?: boolean;\n    jurisdiction?: string;\n    blockOnViolation?: boolean;\n  }\n): T {\n  const opts = {\n    checkInput: true,\n    checkOutput: false,\n    blockOnViolation: true,\n    ...options,\n  };\n\n  const chat = openaiClient.chat as Record<string, unknown> | undefined;\n  if (!chat || !chat.completions) {\n    return openaiClient; // Not an OpenAI-shaped client, return as-is\n  }\n\n  const completions = chat.completions as Record<string, unknown>;\n  const originalCreate = completions.create as (...args: unknown[]) => Promise<unknown>;\n\n  if (typeof originalCreate !== \"function\") {\n    return openaiClient;\n  }\n\n  completions.create = async function (...args: unknown[]) {\n    const params = args[0] as Record<string, unknown> | undefined;\n\n    if (opts.checkInput && params?.messages) {\n      const messages = params.messages as Array<{ role: string; content: string }>;\n      const userMessages = messages.filter((m) => m.role === \"user\");\n      const lastUserMessage = userMessages[userMessages.length - 1];\n\n      if (lastUserMessage?.content) {\n        const result = await ceClient.check(lastUserMessage.content, {\n          direction: \"prompt\",\n          jurisdiction: opts.jurisdiction,\n        });\n\n        if (!result.allowed && opts.blockOnViolation) {\n          throw new ComplianceError(\n            `Compliance violation detected: ${result.violations.map((v) => v.ruleId).join(\", \")}`,\n            result.violations\n          );\n        }\n      }\n    }\n\n    return originalCreate.apply(this, args);\n  };\n\n  return openaiClient;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACIA,mBAAqC;AAYrC,IAAM,mBAAmB;AACzB,IAAM,cAAc;AAEb,IAAM,mBAAN,MAAuB;AAAA,EACpB;AAAA,EACA;AAAA,EACA;AAAA,EAER,YAAY,QAA0B;AACpC,UAAM,UAAU,OAAO,WAAW,QAAQ,IAAI,sBAAsB;AAEpE,SAAK,UAAU,OAAO,WAAW;AACjC,SAAK,eAAe,OAAO;AAE3B,SAAK,OAAO,aAAAA,QAAM,OAAO;AAAA,MACvB,SAAS,QAAQ,QAAQ,QAAQ,EAAE;AAAA,MACnC,SAAS,OAAO,WAAW;AAAA,MAC3B,SAAS;AAAA,QACP,eAAe,UAAU,OAAO,MAAM;AAAA,QACtC,gBAAgB;AAAA,QAChB,cAAc,6BAA6B,WAAW;AAAA,MACxD;AAAA,IACF,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAM,MAAM,MAAc,SAAwD;AAChF,UAAM,QAAQ,KAAK,IAAI;AACvB,UAAM,eAAe,SAAS,gBAAgB,KAAK,gBAAgB;AAEnE,UAAM,WAAW,MAAM,KAAK,KAAK,KAAK,aAAa;AAAA,MACjD;AAAA,MACA,UAAU,SAAS,WAAW,KAAK;AAAA,MACnC;AAAA,MACA,WAAW,SAAS,cAAc,WAAW,UAAU;AAAA,MACvD,uBAAuB;AAAA,MACvB,SAAS,SAAS,WAAW,EAAE,WAAW,QAAQ,SAAS,IAAI;AAAA,IACjE,CAAC;AAED,UAAM,OAAO,SAAS;AACtB,UAAM,mBAAmB,KAAK,IAAI,IAAI;AACtC,UAAM,UAAU,KAAK,YAAY;AAEjC,WAAO;AAAA,MACL,SAAS,KAAK,YAAY;AAAA,MAC1B;AAAA,MACA,QAAQ,UAAU,SAAS;AAAA,MAC3B,aAAa,KAAK,cAAc,CAAC,GAAG,IAAI,CAAC,OAAgC;AAAA,QACvE,QAAS,EAAE,WAAsB;AAAA,QACjC,iBAAkB,EAAE,oBAA+B;AAAA,QACnD,UAAW,EAAE,YAAgD;AAAA,QAC7D,QAAS,EAAE,UAAqB;AAAA,QAChC,YAAa,EAAE,cAAyB;AAAA,QACxC,aAAa,EAAE;AAAA,MACjB,EAAE;AAAA,MACF,WAAW,KAAK,cAAc;AAAA,MAC9B,eAAe,KAAK,kBAAkB;AAAA,MACtC,gBAAgB,KAAK,mBAAmB,CAAC;AAAA,MACzC,YAAY,KAAK,eAAe;AAAA,MAChC,cAAc,KAAK;AAAA,MACnB,aAAa,KAAK,iBAAiB;AAAA,MACnC;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAM,kBACJ,MACA,SAC4B;AAC5B,UAAM,QAAQ,KAAK,IAAI;AACvB,UAAM,eAAe,SAAS,gBAAgB,KAAK,gBAAgB;AAEnE,UAAM,WAAW,MAAM,KAAK,KAAK,KAAK,0BAA0B;AAAA,MAC9D,YAAY;AAAA,MACZ,UAAU,SAAS,WAAW,KAAK;AAAA,MACnC;AAAA,MACA,WAAW,SAAS,aAAa;AAAA,MACjC,WAAW,SAAS;AAAA,IACtB,CAAC;AAED,UAAM,OAAO,SAAS;AAEtB,WAAO;AAAA,MACL,SAAS,KAAK,YAAY;AAAA,MAC1B,QAAQ,KAAK,4BAA4B,SAAS,SAAS;AAAA,MAC3D,aAAa,KAAK,cAAc,CAAC,GAAG,IAAI,CAAC,OAAgC;AAAA,QACvE,QAAS,EAAE,WAAsB;AAAA,QACjC,UAAW,EAAE,YAAiD;AAAA,QAC9D,YAAa,EAAE,cAAyB;AAAA,QACxC,aAAc,EAAE,eAA0B;AAAA,QAC1C,SAAS,EAAE;AAAA,QACX,aAAa,EAAE;AAAA,MACjB,EAAE;AAAA,MACF,WAAW,KAAK,sBAAsB;AAAA,MACtC;AAAA,MACA,kBAAkB,KAAK,IAAI,IAAI;AAAA,IACjC;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,oBAAoB,OAAyD;AACjF,UAAM,WAAW,MAAM,KAAK,KAAK,KAAK,iCAAiC;AAAA,MACrE,eAAe,MAAM;AAAA,MACrB,cAAc,MAAM,cAChB;AAAA,QACE,UAAU,MAAM,YAAY;AAAA,QAC5B,UAAU,MAAM,YAAY;AAAA,QAC5B,aAAa,MAAM,YAAY;AAAA,MACjC,IACA;AAAA,MACJ,gBAAgB,MAAM,gBAClB;AAAA,QACE,OAAO,MAAM,cAAc;AAAA,QAC3B,QAAQ,MAAM,cAAc;AAAA,QAC5B,gBAAgB,MAAM,cAAc;AAAA,QACpC,iBAAiB,MAAM,cAAc;AAAA,MACvC,IACA;AAAA,MACJ,cAAc,MAAM,gBAAgB;AAAA,IACtC,CAAC;AAED,UAAM,OAAO,SAAS;AACtB,WAAO;AAAA,MACL,iBAAiB,KAAK;AAAA,MACtB,UAAU,KAAK;AAAA,MACf,aAAa,KAAK,cAAc,CAAC,GAAG,IAAI,CAAC,OAAgC;AAAA,QACvE,QAAQ,EAAE;AAAA,QACV,SAAS,EAAE;AAAA,QACX,aAAa,EAAE;AAAA,QACf,gBAAgB,EAAE;AAAA,MACpB,EAAE;AAAA,MACF,qBAAqB,KAAK,wBAAwB,CAAC;AAAA,MACnD,iBAAiB,KAAK,sBAAsB;AAAA,MAC5C,mBAAmB,KAAK,sBAAsB;AAAA,IAChD;AAAA,EACF;AACF;;;ACrJO,IAAM,kBAAN,cAA8B,MAAM;AAAA,EAClC;AAAA,EAEP,YAAY,SAAiB,YAAmC;AAC9D,UAAM,OAAO;AACb,SAAK,OAAO;AACZ,SAAK,aAAa;AAAA,EACpB;AACF;AAOO,SAAS,eACd,cACA,UACA,SAMG;AACH,QAAM,OAAO;AAAA,IACX,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,kBAAkB;AAAA,IAClB,GAAG;AAAA,EACL;AAEA,QAAM,OAAO,aAAa;AAC1B,MAAI,CAAC,QAAQ,CAAC,KAAK,aAAa;AAC9B,WAAO;AAAA,EACT;AAEA,QAAM,cAAc,KAAK;AACzB,QAAM,iBAAiB,YAAY;AAEnC,MAAI,OAAO,mBAAmB,YAAY;AACxC,WAAO;AAAA,EACT;AAEA,cAAY,SAAS,kBAAmB,MAAiB;AACvD,UAAM,SAAS,KAAK,CAAC;AAErB,QAAI,KAAK,cAAc,QAAQ,UAAU;AACvC,YAAM,WAAW,OAAO;AACxB,YAAM,eAAe,SAAS,OAAO,CAAC,MAAM,EAAE,SAAS,MAAM;AAC7D,YAAM,kBAAkB,aAAa,aAAa,SAAS,CAAC;AAE5D,UAAI,iBAAiB,SAAS;AAC5B,cAAM,SAAS,MAAM,SAAS,MAAM,gBAAgB,SAAS;AAAA,UAC3D,WAAW;AAAA,UACX,cAAc,KAAK;AAAA,QACrB,CAAC;AAED,YAAI,CAAC,OAAO,WAAW,KAAK,kBAAkB;AAC5C,gBAAM,IAAI;AAAA,YACR,kCAAkC,OAAO,WAAW,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,IAAI,CAAC;AAAA,YACnF,OAAO;AAAA,UACT;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAEA,WAAO,eAAe,MAAM,MAAM,IAAI;AAAA,EACxC;AAEA,SAAO;AACT;","names":["axios"]}

package/dist/index.mjs

@@ -0,0 +1,145 @@
+import {
+  ComplianceError,
+  withCompliance
+} from "./chunk-KZYIMMVM.mjs";
+
+// src/client.ts
+import axios from "axios";
+var DEFAULT_BASE_URL = "https://api.complyedge.io";
+var SDK_VERSION = "0.2.0";
+var ComplyEdgeClient = class {
+  http;
+  agentId;
+  jurisdiction;
+  constructor(config) {
+    const baseUrl = config.baseUrl || process.env.COMPLYEDGE_API_URL || DEFAULT_BASE_URL;
+    this.agentId = config.agentId || "default";
+    this.jurisdiction = config.jurisdiction;
+    this.http = axios.create({
+      baseURL: baseUrl.replace(/\/+$/, ""),
+      timeout: config.timeout || 3e4,
+      headers: {
+        Authorization: `Bearer ${config.apiKey}`,
+        "Content-Type": "application/json",
+        "User-Agent": `complyedge-typescript-sdk/${SDK_VERSION}`
+      }
+    });
+  }
+  /**
+   * Run a compliance check on text input.
+   *
+   * Calls POST /v1/check: the deterministic OPA hot path. A decision here is
+   * evaluated against the Rego rule bundle, returns article-cited violations,
+   * and is written to the Article 12 audit trail (`auditLogged`).
+   */
+  async check(text, context) {
+    const start = Date.now();
+    const jurisdiction = context?.jurisdiction || this.jurisdiction || "EU";
+    const response = await this.http.post("/v1/check", {
+      text,
+      agent_id: context?.agentId || this.agentId,
+      jurisdiction,
+      direction: context?.direction === "prompt" ? "input" : "output",
+      use_semantic_fallback: false,
+      context: context?.userRole ? { user_role: context.userRole } : void 0
+    });
+    const data = response.data;
+    const processingTimeMs = Date.now() - start;
+    const allowed = data.allowed !== false;
+    return {
+      eventId: data.event_id || "",
+      allowed,
+      status: allowed ? "safe" : "violation",
+      violations: (data.violations || []).map((v) => ({
+        ruleId: v.rule_id || "",
+        ruleDescription: v.rule_description || "",
+        severity: v.severity || "medium",
+        reason: v.reason || "",
+        confidence: v.confidence ?? 1,
+        textExcerpt: v.text_excerpt
+      })),
+      latencyMs: data.latency_ms || 0,
+      bundleVersion: data.bundle_version || "",
+      evaluatedRules: data.evaluated_rules || [],
+      enginePath: data.engine_path || "opa",
+      opaLatencyMs: data.opa_latency_ms,
+      auditLogged: data.audit_logged !== false,
+      jurisdiction,
+      processingTimeMs
+    };
+  }
+  /**
+   * Run proactive sensitivity detection on user input.
+   *
+   * Calls POST /v1/sensitivity/detect, which deliberately stays on the legacy
+   * TrustLint + LLM pipeline. It does NOT run OPA and does NOT write the
+   * Article 12 audit trail. Use `check()` for runtime EU AI Act enforcement.
+   */
+  async detectSensitivity(text, context) {
+    const start = Date.now();
+    const jurisdiction = context?.jurisdiction || this.jurisdiction || "US";
+    const response = await this.http.post("/v1/sensitivity/detect", {
+      input_text: text,
+      agent_id: context?.agentId || this.agentId,
+      jurisdiction,
+      direction: context?.direction || "prompt",
+      user_role: context?.userRole
+    });
+    const data = response.data;
+    return {
+      eventId: data.event_id || "",
+      status: data.overall_risk_assessment === "safe" ? "safe" : "violation",
+      detections: (data.detections || []).map((d) => ({
+        ruleId: d.rule_id || "",
+        severity: d.severity || "medium",
+        regulation: d.regulation || "",
+        description: d.description || "",
+        article: d.article,
+        remediation: d.remediation
+      })),
+      riskScore: data.overall_risk_score || 0,
+      jurisdiction,
+      processingTimeMs: Date.now() - start
+    };
+  }
+  /**
+   * Run a pre-deployment assessment on an AI system configuration.
+   */
+  async assessPreDeployment(input) {
+    const response = await this.http.post("/v1/assessment/pre-deployment", {
+      system_prompt: input.systemPrompt,
+      model_config: input.modelConfig ? {
+        provider: input.modelConfig.provider,
+        model_id: input.modelConfig.modelId,
+        temperature: input.modelConfig.temperature
+      } : void 0,
+      agent_pipeline: input.agentPipeline ? {
+        tools: input.agentPipeline.tools,
+        memory: input.agentPipeline.memory,
+        autonomy_level: input.agentPipeline.autonomyLevel,
+        human_oversight: input.agentPipeline.humanOversight
+      } : void 0,
+      jurisdiction: input.jurisdiction || "EU"
+    });
+    const data = response.data;
+    return {
+      complianceScore: data.compliance_score,
+      riskTier: data.risk_tier,
+      violations: (data.violations || []).map((v) => ({
+        ruleId: v.rule_id,
+        article: v.article,
+        description: v.description,
+        requiredAction: v.required_action
+      })),
+      requiredDisclosures: data.required_disclosures || [],
+      euAiActCategory: data.eu_ai_act_category || "",
+      estimatedDeadline: data.estimated_deadline || ""
+    };
+  }
+};
+export {
+  ComplianceError,
+  ComplyEdgeClient,
+  withCompliance
+};
+//# sourceMappingURL=index.mjs.map

package/dist/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/client.ts"],"sourcesContent":["/**\n * ComplyEdge TypeScript SDK — Client\n */\n\nimport axios, { AxiosInstance } from \"axios\";\nimport type {\n  ComplyEdgeConfig,\n  ComplianceContext,\n  ComplianceResult,\n  ComplianceViolation,\n  SensitivityDetection,\n  SensitivityResult,\n  PreDeploymentInput,\n  PreDeploymentResult,\n} from \"./types\";\n\nconst DEFAULT_BASE_URL = \"https://api.complyedge.io\";\nconst SDK_VERSION = \"0.2.0\";\n\nexport class ComplyEdgeClient {\n  private http: AxiosInstance;\n  private agentId: string;\n  private jurisdiction?: string;\n\n  constructor(config: ComplyEdgeConfig) {\n    const baseUrl = config.baseUrl || process.env.COMPLYEDGE_API_URL || DEFAULT_BASE_URL;\n\n    this.agentId = config.agentId || \"default\";\n    this.jurisdiction = config.jurisdiction;\n\n    this.http = axios.create({\n      baseURL: baseUrl.replace(/\\/+$/, \"\"),\n      timeout: config.timeout || 30_000,\n      headers: {\n        Authorization: `Bearer ${config.apiKey}`,\n        \"Content-Type\": \"application/json\",\n        \"User-Agent\": `complyedge-typescript-sdk/${SDK_VERSION}`,\n      },\n    });\n  }\n\n  /**\n   * Run a compliance check on text input.\n   *\n   * Calls POST /v1/check: the deterministic OPA hot path. A decision here is\n   * evaluated against the Rego rule bundle, returns article-cited violations,\n   * and is written to the Article 12 audit trail (`auditLogged`).\n   */\n  async check(text: string, context?: ComplianceContext): Promise<ComplianceResult> {\n    const start = Date.now();\n    const jurisdiction = context?.jurisdiction || this.jurisdiction || \"EU\";\n\n    const response = await this.http.post(\"/v1/check\", {\n      text,\n      agent_id: context?.agentId || this.agentId,\n      jurisdiction,\n      direction: context?.direction === \"prompt\" ? \"input\" : \"output\",\n      use_semantic_fallback: false,\n      context: context?.userRole ? { user_role: context.userRole } : undefined,\n    });\n\n    const data = response.data;\n    const processingTimeMs = Date.now() - start;\n    const allowed = data.allowed !== false;\n\n    return {\n      eventId: data.event_id || \"\",\n      allowed,\n      status: allowed ? \"safe\" : \"violation\",\n      violations: (data.violations || []).map((v: Record<string, unknown>) => ({\n        ruleId: (v.rule_id as string) || \"\",\n        ruleDescription: (v.rule_description as string) || \"\",\n        severity: (v.severity as ComplianceViolation[\"severity\"]) || \"medium\",\n        reason: (v.reason as string) || \"\",\n        confidence: (v.confidence as number) ?? 1.0,\n        textExcerpt: v.text_excerpt as string | undefined,\n      })),\n      latencyMs: data.latency_ms || 0,\n      bundleVersion: data.bundle_version || \"\",\n      evaluatedRules: data.evaluated_rules || [],\n      enginePath: data.engine_path || \"opa\",\n      opaLatencyMs: data.opa_latency_ms,\n      auditLogged: data.audit_logged !== false,\n      jurisdiction,\n      processingTimeMs,\n    };\n  }\n\n  /**\n   * Run proactive sensitivity detection on user input.\n   *\n   * Calls POST /v1/sensitivity/detect, which deliberately stays on the legacy\n   * TrustLint + LLM pipeline. It does NOT run OPA and does NOT write the\n   * Article 12 audit trail. Use `check()` for runtime EU AI Act enforcement.\n   */\n  async detectSensitivity(\n    text: string,\n    context?: ComplianceContext\n  ): Promise<SensitivityResult> {\n    const start = Date.now();\n    const jurisdiction = context?.jurisdiction || this.jurisdiction || \"US\";\n\n    const response = await this.http.post(\"/v1/sensitivity/detect\", {\n      input_text: text,\n      agent_id: context?.agentId || this.agentId,\n      jurisdiction,\n      direction: context?.direction || \"prompt\",\n      user_role: context?.userRole,\n    });\n\n    const data = response.data;\n\n    return {\n      eventId: data.event_id || \"\",\n      status: data.overall_risk_assessment === \"safe\" ? \"safe\" : \"violation\",\n      detections: (data.detections || []).map((d: Record<string, unknown>) => ({\n        ruleId: (d.rule_id as string) || \"\",\n        severity: (d.severity as SensitivityDetection[\"severity\"]) || \"medium\",\n        regulation: (d.regulation as string) || \"\",\n        description: (d.description as string) || \"\",\n        article: d.article as string | undefined,\n        remediation: d.remediation as string | undefined,\n      })),\n      riskScore: data.overall_risk_score || 0,\n      jurisdiction,\n      processingTimeMs: Date.now() - start,\n    };\n  }\n\n  /**\n   * Run a pre-deployment assessment on an AI system configuration.\n   */\n  async assessPreDeployment(input: PreDeploymentInput): Promise<PreDeploymentResult> {\n    const response = await this.http.post(\"/v1/assessment/pre-deployment\", {\n      system_prompt: input.systemPrompt,\n      model_config: input.modelConfig\n        ? {\n            provider: input.modelConfig.provider,\n            model_id: input.modelConfig.modelId,\n            temperature: input.modelConfig.temperature,\n          }\n        : undefined,\n      agent_pipeline: input.agentPipeline\n        ? {\n            tools: input.agentPipeline.tools,\n            memory: input.agentPipeline.memory,\n            autonomy_level: input.agentPipeline.autonomyLevel,\n            human_oversight: input.agentPipeline.humanOversight,\n          }\n        : undefined,\n      jurisdiction: input.jurisdiction || \"EU\",\n    });\n\n    const data = response.data;\n    return {\n      complianceScore: data.compliance_score,\n      riskTier: data.risk_tier,\n      violations: (data.violations || []).map((v: Record<string, unknown>) => ({\n        ruleId: v.rule_id as string,\n        article: v.article as string,\n        description: v.description as string,\n        requiredAction: v.required_action as string,\n      })),\n      requiredDisclosures: data.required_disclosures || [],\n      euAiActCategory: data.eu_ai_act_category || \"\",\n      estimatedDeadline: data.estimated_deadline || \"\",\n    };\n  }\n}\n"],"mappings":";;;;;;AAIA,OAAO,WAA8B;AAYrC,IAAM,mBAAmB;AACzB,IAAM,cAAc;AAEb,IAAM,mBAAN,MAAuB;AAAA,EACpB;AAAA,EACA;AAAA,EACA;AAAA,EAER,YAAY,QAA0B;AACpC,UAAM,UAAU,OAAO,WAAW,QAAQ,IAAI,sBAAsB;AAEpE,SAAK,UAAU,OAAO,WAAW;AACjC,SAAK,eAAe,OAAO;AAE3B,SAAK,OAAO,MAAM,OAAO;AAAA,MACvB,SAAS,QAAQ,QAAQ,QAAQ,EAAE;AAAA,MACnC,SAAS,OAAO,WAAW;AAAA,MAC3B,SAAS;AAAA,QACP,eAAe,UAAU,OAAO,MAAM;AAAA,QACtC,gBAAgB;AAAA,QAChB,cAAc,6BAA6B,WAAW;AAAA,MACxD;AAAA,IACF,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAM,MAAM,MAAc,SAAwD;AAChF,UAAM,QAAQ,KAAK,IAAI;AACvB,UAAM,eAAe,SAAS,gBAAgB,KAAK,gBAAgB;AAEnE,UAAM,WAAW,MAAM,KAAK,KAAK,KAAK,aAAa;AAAA,MACjD;AAAA,MACA,UAAU,SAAS,WAAW,KAAK;AAAA,MACnC;AAAA,MACA,WAAW,SAAS,cAAc,WAAW,UAAU;AAAA,MACvD,uBAAuB;AAAA,MACvB,SAAS,SAAS,WAAW,EAAE,WAAW,QAAQ,SAAS,IAAI;AAAA,IACjE,CAAC;AAED,UAAM,OAAO,SAAS;AACtB,UAAM,mBAAmB,KAAK,IAAI,IAAI;AACtC,UAAM,UAAU,KAAK,YAAY;AAEjC,WAAO;AAAA,MACL,SAAS,KAAK,YAAY;AAAA,MAC1B;AAAA,MACA,QAAQ,UAAU,SAAS;AAAA,MAC3B,aAAa,KAAK,cAAc,CAAC,GAAG,IAAI,CAAC,OAAgC;AAAA,QACvE,QAAS,EAAE,WAAsB;AAAA,QACjC,iBAAkB,EAAE,oBAA+B;AAAA,QACnD,UAAW,EAAE,YAAgD;AAAA,QAC7D,QAAS,EAAE,UAAqB;AAAA,QAChC,YAAa,EAAE,cAAyB;AAAA,QACxC,aAAa,EAAE;AAAA,MACjB,EAAE;AAAA,MACF,WAAW,KAAK,cAAc;AAAA,MAC9B,eAAe,KAAK,kBAAkB;AAAA,MACtC,gBAAgB,KAAK,mBAAmB,CAAC;AAAA,MACzC,YAAY,KAAK,eAAe;AAAA,MAChC,cAAc,KAAK;AAAA,MACnB,aAAa,KAAK,iBAAiB;AAAA,MACnC;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAM,kBACJ,MACA,SAC4B;AAC5B,UAAM,QAAQ,KAAK,IAAI;AACvB,UAAM,eAAe,SAAS,gBAAgB,KAAK,gBAAgB;AAEnE,UAAM,WAAW,MAAM,KAAK,KAAK,KAAK,0BAA0B;AAAA,MAC9D,YAAY;AAAA,MACZ,UAAU,SAAS,WAAW,KAAK;AAAA,MACnC;AAAA,MACA,WAAW,SAAS,aAAa;AAAA,MACjC,WAAW,SAAS;AAAA,IACtB,CAAC;AAED,UAAM,OAAO,SAAS;AAEtB,WAAO;AAAA,MACL,SAAS,KAAK,YAAY;AAAA,MAC1B,QAAQ,KAAK,4BAA4B,SAAS,SAAS;AAAA,MAC3D,aAAa,KAAK,cAAc,CAAC,GAAG,IAAI,CAAC,OAAgC;AAAA,QACvE,QAAS,EAAE,WAAsB;AAAA,QACjC,UAAW,EAAE,YAAiD;AAAA,QAC9D,YAAa,EAAE,cAAyB;AAAA,QACxC,aAAc,EAAE,eAA0B;AAAA,QAC1C,SAAS,EAAE;AAAA,QACX,aAAa,EAAE;AAAA,MACjB,EAAE;AAAA,MACF,WAAW,KAAK,sBAAsB;AAAA,MACtC;AAAA,MACA,kBAAkB,KAAK,IAAI,IAAI;AAAA,IACjC;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,oBAAoB,OAAyD;AACjF,UAAM,WAAW,MAAM,KAAK,KAAK,KAAK,iCAAiC;AAAA,MACrE,eAAe,MAAM;AAAA,MACrB,cAAc,MAAM,cAChB;AAAA,QACE,UAAU,MAAM,YAAY;AAAA,QAC5B,UAAU,MAAM,YAAY;AAAA,QAC5B,aAAa,MAAM,YAAY;AAAA,MACjC,IACA;AAAA,MACJ,gBAAgB,MAAM,gBAClB;AAAA,QACE,OAAO,MAAM,cAAc;AAAA,QAC3B,QAAQ,MAAM,cAAc;AAAA,QAC5B,gBAAgB,MAAM,cAAc;AAAA,QACpC,iBAAiB,MAAM,cAAc;AAAA,MACvC,IACA;AAAA,MACJ,cAAc,MAAM,gBAAgB;AAAA,IACtC,CAAC;AAED,UAAM,OAAO,SAAS;AACtB,WAAO;AAAA,MACL,iBAAiB,KAAK;AAAA,MACtB,UAAU,KAAK;AAAA,MACf,aAAa,KAAK,cAAc,CAAC,GAAG,IAAI,CAAC,OAAgC;AAAA,QACvE,QAAQ,EAAE;AAAA,QACV,SAAS,EAAE;AAAA,QACX,aAAa,EAAE;AAAA,QACf,gBAAgB,EAAE;AAAA,MACpB,EAAE;AAAA,MACF,qBAAqB,KAAK,wBAAwB,CAAC;AAAA,MACnD,iBAAiB,KAAK,sBAAsB;AAAA,MAC5C,mBAAmB,KAAK,sBAAsB;AAAA,IAChD;AAAA,EACF;AACF;","names":[]}

package/dist/openai-middleware.d.mts

@@ -0,0 +1,159 @@
+/**
+ * ComplyEdge TypeScript SDK — Type definitions
+ * Matches the Python SDK interfaces for cross-language consistency.
+ */
+interface ComplianceContext {
+    agentId?: string;
+    jurisdiction?: string;
+    userRole?: string;
+    direction?: "prompt" | "output";
+}
+type SeverityLevel = "critical" | "high" | "medium" | "low" | "informational";
+interface ComplianceViolation {
+    ruleId: string;
+    ruleDescription: string;
+    severity: SeverityLevel;
+    reason: string;
+    confidence: number;
+    textExcerpt?: string;
+}
+/**
+ * Result of POST /v1/check (the deterministic OPA enforcement path).
+ * Field names mirror the Python SDK's ComplianceResult.
+ */
+interface ComplianceResult {
+    eventId: string;
+    allowed: boolean;
+    /** Convenience mirror of `allowed`, for branch-on-string call sites. */
+    status: "safe" | "violation";
+    violations: ComplianceViolation[];
+    latencyMs: number;
+    bundleVersion: string;
+    evaluatedRules: string[];
+    enginePath: string;
+    opaLatencyMs?: number;
+    auditLogged: boolean;
+    jurisdiction: string;
+    /** Client-measured round trip, including network. */
+    processingTimeMs: number;
+}
+interface SensitivityDetection {
+    ruleId: string;
+    severity: SeverityLevel;
+    regulation: string;
+    description: string;
+    article?: string;
+    remediation?: string;
+}
+/**
+ * Result of POST /v1/sensitivity/detect (legacy TrustLint + LLM pipeline).
+ * This path does NOT run OPA and does NOT write the Article 12 audit trail.
+ */
+interface SensitivityResult {
+    eventId: string;
+    status: "safe" | "violation";
+    detections: SensitivityDetection[];
+    riskScore: number;
+    jurisdiction: string;
+    processingTimeMs: number;
+}
+interface PreDeploymentInput {
+    systemPrompt: string;
+    modelConfig?: {
+        provider?: string;
+        modelId?: string;
+        temperature?: number;
+    };
+    agentPipeline?: {
+        tools?: string[];
+        memory?: boolean;
+        autonomyLevel?: string;
+        humanOversight?: boolean;
+    };
+    jurisdiction?: string;
+}
+interface PreDeploymentResult {
+    complianceScore: number;
+    riskTier: "unacceptable" | "high" | "limited" | "minimal";
+    violations: Array<{
+        ruleId: string;
+        article: string;
+        description: string;
+        requiredAction: string;
+    }>;
+    requiredDisclosures: string[];
+    euAiActCategory: string;
+    estimatedDeadline: string;
+}
+interface ComplyEdgeConfig {
+    apiKey: string;
+    baseUrl?: string;
+    agentId?: string;
+    jurisdiction?: string;
+    timeout?: number;
+}
+
+/**
+ * ComplyEdge TypeScript SDK — Client
+ */
+
+declare class ComplyEdgeClient {
+    private http;
+    private agentId;
+    private jurisdiction?;
+    constructor(config: ComplyEdgeConfig);
+    /**
+     * Run a compliance check on text input.
+     *
+     * Calls POST /v1/check: the deterministic OPA hot path. A decision here is
+     * evaluated against the Rego rule bundle, returns article-cited violations,
+     * and is written to the Article 12 audit trail (`auditLogged`).
+     */
+    check(text: string, context?: ComplianceContext): Promise<ComplianceResult>;
+    /**
+     * Run proactive sensitivity detection on user input.
+     *
+     * Calls POST /v1/sensitivity/detect, which deliberately stays on the legacy
+     * TrustLint + LLM pipeline. It does NOT run OPA and does NOT write the
+     * Article 12 audit trail. Use `check()` for runtime EU AI Act enforcement.
+     */
+    detectSensitivity(text: string, context?: ComplianceContext): Promise<SensitivityResult>;
+    /**
+     * Run a pre-deployment assessment on an AI system configuration.
+     */
+    assessPreDeployment(input: PreDeploymentInput): Promise<PreDeploymentResult>;
+}
+
+/**
+ * ComplyEdge OpenAI Middleware
+ *
+ * Wraps an OpenAI client to run compliance checks on messages
+ * before they are sent to the model.
+ *
+ * Usage:
+ *   import OpenAI from "openai";
+ *   import { ComplyEdgeClient } from "@complyedge/sdk";
+ *   import { withCompliance } from "@complyedge/sdk/openai-middleware";
+ *
+ *   const ce = new ComplyEdgeClient({ apiKey: "..." });
+ *   const openai = withCompliance(new OpenAI(), ce);
+ *   // Now openai.chat.completions.create() runs compliance checks automatically
+ */
+
+declare class ComplianceError extends Error {
+    violations: ComplianceViolation[];
+    constructor(message: string, violations: ComplianceViolation[]);
+}
+/**
+ * Wrap an OpenAI client with ComplyEdge compliance checks.
+ * The returned object proxies chat.completions.create() to check
+ * user messages before sending to OpenAI.
+ */
+declare function withCompliance<T extends Record<string, unknown>>(openaiClient: T, ceClient: ComplyEdgeClient, options?: {
+    checkInput?: boolean;
+    checkOutput?: boolean;
+    jurisdiction?: string;
+    blockOnViolation?: boolean;
+}): T;
+
+export { ComplyEdgeClient as C, ComplianceError, type PreDeploymentInput as P, type SeverityLevel as S, type ComplyEdgeConfig as a, type ComplianceContext as b, type ComplianceResult as c, type ComplianceViolation as d, type SensitivityResult as e, type SensitivityDetection as f, type PreDeploymentResult as g, withCompliance };

package/dist/openai-middleware.d.ts

@@ -0,0 +1,159 @@
+/**
+ * ComplyEdge TypeScript SDK — Type definitions
+ * Matches the Python SDK interfaces for cross-language consistency.
+ */
+interface ComplianceContext {
+    agentId?: string;
+    jurisdiction?: string;
+    userRole?: string;
+    direction?: "prompt" | "output";
+}
+type SeverityLevel = "critical" | "high" | "medium" | "low" | "informational";
+interface ComplianceViolation {
+    ruleId: string;
+    ruleDescription: string;
+    severity: SeverityLevel;
+    reason: string;
+    confidence: number;
+    textExcerpt?: string;
+}
+/**
+ * Result of POST /v1/check (the deterministic OPA enforcement path).
+ * Field names mirror the Python SDK's ComplianceResult.
+ */
+interface ComplianceResult {
+    eventId: string;
+    allowed: boolean;
+    /** Convenience mirror of `allowed`, for branch-on-string call sites. */
+    status: "safe" | "violation";
+    violations: ComplianceViolation[];
+    latencyMs: number;
+    bundleVersion: string;
+    evaluatedRules: string[];
+    enginePath: string;
+    opaLatencyMs?: number;
+    auditLogged: boolean;
+    jurisdiction: string;
+    /** Client-measured round trip, including network. */
+    processingTimeMs: number;
+}
+interface SensitivityDetection {
+    ruleId: string;
+    severity: SeverityLevel;
+    regulation: string;
+    description: string;
+    article?: string;
+    remediation?: string;
+}
+/**
+ * Result of POST /v1/sensitivity/detect (legacy TrustLint + LLM pipeline).
+ * This path does NOT run OPA and does NOT write the Article 12 audit trail.
+ */
+interface SensitivityResult {
+    eventId: string;
+    status: "safe" | "violation";
+    detections: SensitivityDetection[];
+    riskScore: number;
+    jurisdiction: string;
+    processingTimeMs: number;
+}
+interface PreDeploymentInput {
+    systemPrompt: string;
+    modelConfig?: {
+        provider?: string;
+        modelId?: string;
+        temperature?: number;
+    };
+    agentPipeline?: {
+        tools?: string[];
+        memory?: boolean;
+        autonomyLevel?: string;
+        humanOversight?: boolean;
+    };
+    jurisdiction?: string;
+}
+interface PreDeploymentResult {
+    complianceScore: number;
+    riskTier: "unacceptable" | "high" | "limited" | "minimal";
+    violations: Array<{
+        ruleId: string;
+        article: string;
+        description: string;
+        requiredAction: string;
+    }>;
+    requiredDisclosures: string[];
+    euAiActCategory: string;
+    estimatedDeadline: string;
+}
+interface ComplyEdgeConfig {
+    apiKey: string;
+    baseUrl?: string;
+    agentId?: string;
+    jurisdiction?: string;
+    timeout?: number;
+}
+
+/**
+ * ComplyEdge TypeScript SDK — Client
+ */
+
+declare class ComplyEdgeClient {
+    private http;
+    private agentId;
+    private jurisdiction?;
+    constructor(config: ComplyEdgeConfig);
+    /**
+     * Run a compliance check on text input.
+     *
+     * Calls POST /v1/check: the deterministic OPA hot path. A decision here is
+     * evaluated against the Rego rule bundle, returns article-cited violations,
+     * and is written to the Article 12 audit trail (`auditLogged`).
+     */
+    check(text: string, context?: ComplianceContext): Promise<ComplianceResult>;
+    /**
+     * Run proactive sensitivity detection on user input.
+     *
+     * Calls POST /v1/sensitivity/detect, which deliberately stays on the legacy
+     * TrustLint + LLM pipeline. It does NOT run OPA and does NOT write the
+     * Article 12 audit trail. Use `check()` for runtime EU AI Act enforcement.
+     */
+    detectSensitivity(text: string, context?: ComplianceContext): Promise<SensitivityResult>;
+    /**
+     * Run a pre-deployment assessment on an AI system configuration.
+     */
+    assessPreDeployment(input: PreDeploymentInput): Promise<PreDeploymentResult>;
+}
+
+/**
+ * ComplyEdge OpenAI Middleware
+ *
+ * Wraps an OpenAI client to run compliance checks on messages
+ * before they are sent to the model.
+ *
+ * Usage:
+ *   import OpenAI from "openai";
+ *   import { ComplyEdgeClient } from "@complyedge/sdk";
+ *   import { withCompliance } from "@complyedge/sdk/openai-middleware";
+ *
+ *   const ce = new ComplyEdgeClient({ apiKey: "..." });
+ *   const openai = withCompliance(new OpenAI(), ce);
+ *   // Now openai.chat.completions.create() runs compliance checks automatically
+ */
+
+declare class ComplianceError extends Error {
+    violations: ComplianceViolation[];
+    constructor(message: string, violations: ComplianceViolation[]);
+}
+/**
+ * Wrap an OpenAI client with ComplyEdge compliance checks.
+ * The returned object proxies chat.completions.create() to check
+ * user messages before sending to OpenAI.
+ */
+declare function withCompliance<T extends Record<string, unknown>>(openaiClient: T, ceClient: ComplyEdgeClient, options?: {
+    checkInput?: boolean;
+    checkOutput?: boolean;
+    jurisdiction?: string;
+    blockOnViolation?: boolean;
+}): T;
+
+export { ComplyEdgeClient as C, ComplianceError, type PreDeploymentInput as P, type SeverityLevel as S, type ComplyEdgeConfig as a, type ComplianceContext as b, type ComplianceResult as c, type ComplianceViolation as d, type SensitivityResult as e, type SensitivityDetection as f, type PreDeploymentResult as g, withCompliance };

package/dist/openai-middleware.js

@@ -0,0 +1,79 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/openai-middleware.ts
+var openai_middleware_exports = {};
+__export(openai_middleware_exports, {
+  ComplianceError: () => ComplianceError,
+  withCompliance: () => withCompliance
+});
+module.exports = __toCommonJS(openai_middleware_exports);
+var ComplianceError = class extends Error {
+  violations;
+  constructor(message, violations) {
+    super(message);
+    this.name = "ComplianceError";
+    this.violations = violations;
+  }
+};
+function withCompliance(openaiClient, ceClient, options) {
+  const opts = {
+    checkInput: true,
+    checkOutput: false,
+    blockOnViolation: true,
+    ...options
+  };
+  const chat = openaiClient.chat;
+  if (!chat || !chat.completions) {
+    return openaiClient;
+  }
+  const completions = chat.completions;
+  const originalCreate = completions.create;
+  if (typeof originalCreate !== "function") {
+    return openaiClient;
+  }
+  completions.create = async function(...args) {
+    const params = args[0];
+    if (opts.checkInput && params?.messages) {
+      const messages = params.messages;
+      const userMessages = messages.filter((m) => m.role === "user");
+      const lastUserMessage = userMessages[userMessages.length - 1];
+      if (lastUserMessage?.content) {
+        const result = await ceClient.check(lastUserMessage.content, {
+          direction: "prompt",
+          jurisdiction: opts.jurisdiction
+        });
+        if (!result.allowed && opts.blockOnViolation) {
+          throw new ComplianceError(
+            `Compliance violation detected: ${result.violations.map((v) => v.ruleId).join(", ")}`,
+            result.violations
+          );
+        }
+      }
+    }
+    return originalCreate.apply(this, args);
+  };
+  return openaiClient;
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  ComplianceError,
+  withCompliance
+});
+//# sourceMappingURL=openai-middleware.js.map

package/dist/openai-middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/openai-middleware.ts"],"sourcesContent":["/**\n * ComplyEdge OpenAI Middleware\n *\n * Wraps an OpenAI client to run compliance checks on messages\n * before they are sent to the model.\n *\n * Usage:\n *   import OpenAI from \"openai\";\n *   import { ComplyEdgeClient } from \"@complyedge/sdk\";\n *   import { withCompliance } from \"@complyedge/sdk/openai-middleware\";\n *\n *   const ce = new ComplyEdgeClient({ apiKey: \"...\" });\n *   const openai = withCompliance(new OpenAI(), ce);\n *   // Now openai.chat.completions.create() runs compliance checks automatically\n */\n\nimport type { ComplyEdgeClient } from \"./client\";\nimport type { ComplianceViolation } from \"./types\";\n\nexport class ComplianceError extends Error {\n  public violations: ComplianceViolation[];\n\n  constructor(message: string, violations: ComplianceViolation[]) {\n    super(message);\n    this.name = \"ComplianceError\";\n    this.violations = violations;\n  }\n}\n\n/**\n * Wrap an OpenAI client with ComplyEdge compliance checks.\n * The returned object proxies chat.completions.create() to check\n * user messages before sending to OpenAI.\n */\nexport function withCompliance<T extends Record<string, unknown>>(\n  openaiClient: T,\n  ceClient: ComplyEdgeClient,\n  options?: {\n    checkInput?: boolean;\n    checkOutput?: boolean;\n    jurisdiction?: string;\n    blockOnViolation?: boolean;\n  }\n): T {\n  const opts = {\n    checkInput: true,\n    checkOutput: false,\n    blockOnViolation: true,\n    ...options,\n  };\n\n  const chat = openaiClient.chat as Record<string, unknown> | undefined;\n  if (!chat || !chat.completions) {\n    return openaiClient; // Not an OpenAI-shaped client, return as-is\n  }\n\n  const completions = chat.completions as Record<string, unknown>;\n  const originalCreate = completions.create as (...args: unknown[]) => Promise<unknown>;\n\n  if (typeof originalCreate !== \"function\") {\n    return openaiClient;\n  }\n\n  completions.create = async function (...args: unknown[]) {\n    const params = args[0] as Record<string, unknown> | undefined;\n\n    if (opts.checkInput && params?.messages) {\n      const messages = params.messages as Array<{ role: string; content: string }>;\n      const userMessages = messages.filter((m) => m.role === \"user\");\n      const lastUserMessage = userMessages[userMessages.length - 1];\n\n      if (lastUserMessage?.content) {\n        const result = await ceClient.check(lastUserMessage.content, {\n          direction: \"prompt\",\n          jurisdiction: opts.jurisdiction,\n        });\n\n        if (!result.allowed && opts.blockOnViolation) {\n          throw new ComplianceError(\n            `Compliance violation detected: ${result.violations.map((v) => v.ruleId).join(\", \")}`,\n            result.violations\n          );\n        }\n      }\n    }\n\n    return originalCreate.apply(this, args);\n  };\n\n  return openaiClient;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAmBO,IAAM,kBAAN,cAA8B,MAAM;AAAA,EAClC;AAAA,EAEP,YAAY,SAAiB,YAAmC;AAC9D,UAAM,OAAO;AACb,SAAK,OAAO;AACZ,SAAK,aAAa;AAAA,EACpB;AACF;AAOO,SAAS,eACd,cACA,UACA,SAMG;AACH,QAAM,OAAO;AAAA,IACX,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,kBAAkB;AAAA,IAClB,GAAG;AAAA,EACL;AAEA,QAAM,OAAO,aAAa;AAC1B,MAAI,CAAC,QAAQ,CAAC,KAAK,aAAa;AAC9B,WAAO;AAAA,EACT;AAEA,QAAM,cAAc,KAAK;AACzB,QAAM,iBAAiB,YAAY;AAEnC,MAAI,OAAO,mBAAmB,YAAY;AACxC,WAAO;AAAA,EACT;AAEA,cAAY,SAAS,kBAAmB,MAAiB;AACvD,UAAM,SAAS,KAAK,CAAC;AAErB,QAAI,KAAK,cAAc,QAAQ,UAAU;AACvC,YAAM,WAAW,OAAO;AACxB,YAAM,eAAe,SAAS,OAAO,CAAC,MAAM,EAAE,SAAS,MAAM;AAC7D,YAAM,kBAAkB,aAAa,aAAa,SAAS,CAAC;AAE5D,UAAI,iBAAiB,SAAS;AAC5B,cAAM,SAAS,MAAM,SAAS,MAAM,gBAAgB,SAAS;AAAA,UAC3D,WAAW;AAAA,UACX,cAAc,KAAK;AAAA,QACrB,CAAC;AAED,YAAI,CAAC,OAAO,WAAW,KAAK,kBAAkB;AAC5C,gBAAM,IAAI;AAAA,YACR,kCAAkC,OAAO,WAAW,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,IAAI,CAAC;AAAA,YACnF,OAAO;AAAA,UACT;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAEA,WAAO,eAAe,MAAM,MAAM,IAAI;AAAA,EACxC;AAEA,SAAO;AACT;","names":[]}

package/dist/openai-middleware.mjs

@@ -0,0 +1,9 @@
+import {
+  ComplianceError,
+  withCompliance
+} from "./chunk-KZYIMMVM.mjs";
+export {
+  ComplianceError,
+  withCompliance
+};
+//# sourceMappingURL=openai-middleware.mjs.map

package/dist/openai-middleware.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}