@complyedge/sdk 0.2.3 → 0.2.5

package/CHANGELOG.md

@@ -14,6 +14,43 @@ numbers are deliberately not kept level between the two — they are separate
 implementations with different capability surfaces, so matching numbers would
 imply a parity that does not exist.
 
+## [Unreleased]
+
+## [0.2.5] - 2026-09-25
+
+### Changed
+- No `baseUrl`, `COMPLYEDGE_API_URL`, or `region`, and no `ce_` / `ce_eu_`
+  prefix, now resolves to `https://eu.api.complyedge.io`. Legacy `ce_` keys
+  still use the US host. The 0.2.4 fallback was the US host.
+
+### Docs
+- Key rotation now lives on the dashboard's API Key page (Rotate asks before
+  minting; every active key is listed there). The public trust surface shows
+  one company name, set under Account, Profile; `display_name` on
+  `PATCH /v1/tenant/trust` sets the same value. No code change.
+- Key rotation guidance in the README: rotate in the dashboard (mint, swap,
+  revoke previous) or with `POST` then `DELETE /v1/account/api-keys`; both
+  keys work until the old one is revoked. No code change.
+
+### Added
+- `sandbox: true` on `ComplianceContext` routes `check()` to
+  `POST /v1/sandbox/check`: the same rules, tenant settings and verdict as
+  `/v1/check`, with nothing recorded — no audit entry, no usage, no rate-limit
+  count. For trying cases before wiring an integration; never evidence.
+  `ComplianceResult.sandbox` is `true` only when the server says so, beside
+  `auditLogged: false`. Default is unchanged (`/v1/check`).
+
+## [0.2.4] - 2026-09-16
+
+### Added
+- `region: "us" | "eu"` config option and `COMPLYEDGE_REGION` environment
+  variable. The client now picks the API host from the key prefix
+  (`ce_eu_` -> `https://eu.api.complyedge.io`, `ce_` -> `https://api.complyedge.io`)
+  when neither `baseUrl` nor `COMPLYEDGE_API_URL` is set. Exported helpers:
+  `resolveBaseUrl`, `regionFromApiKey`, `REGION_BASE_URLS`, type `Region`.
+  Precedence: `baseUrl` > `COMPLYEDGE_API_URL` > `region` / `COMPLYEDGE_REGION`
+  > key prefix > US. Existing configurations resolve exactly as before.
+
 ## [0.2.3] - 2026-08-20
 
 ### Added
@@ -23,11 +60,12 @@ imply a parity that does not exist.
   doctrine.
 
 ### Fixed
-- Release-path fact: publishes still use `NPM_TOKEN`. The 0.2.2 changelog
-  entry that claimed OIDC Trusted Publishing described an attempt that was
-  reverted (`repository.url` points at the public repo while workflows run in
-  the private platform). Provenance remains unavailable until that layout
-  changes (G1a).
+- Release-path fact: publishes still authenticate with a long-lived npm
+  credential. The 0.2.2 changelog entry that claimed OIDC Trusted Publishing
+  described an attempt that was reverted — `repository.url` names the public
+  repository while the release workflow runs in the private platform one, and
+  npm matches those two when authenticating. Provenance stays unavailable
+  until that layout changes.
 
 ## [0.2.2] - 2026-08-20
 
@@ -66,6 +104,7 @@ imply a parity that does not exist.
 
 Released before this changelog existed. See the repository history.
 
+[0.2.4]: https://www.npmjs.com/package/@complyedge/sdk/v/0.2.4
 [0.2.3]: https://www.npmjs.com/package/@complyedge/sdk/v/0.2.3
 [0.2.2]: https://www.npmjs.com/package/@complyedge/sdk/v/0.2.2
 [0.2.1]: https://www.npmjs.com/package/@complyedge/sdk/v/0.2.1

package/README.md

@@ -18,6 +18,30 @@ Requires Node.js 18 or later. Get an API key at [dashboard.complyedge.io](https:
 
 The SDK works in both ESM and CommonJS projects; no bundler-specific setup is required.
 
+## Rotating your key
+
+Keys are shown once, at creation, and stored as a hash: a lost key cannot be
+recovered, only replaced. Rotate without downtime, in this order:
+
+1. In the dashboard, open **API Key** and click **Rotate key** on the card
+   (or **Rotate** on a row under Other active keys), then confirm. A new key
+   is minted and shown once; the old one keeps working.
+2. Put the new key in your integration (`COMPLYEDGE_API_KEY` or the `apiKey` you pass to the client) and deploy.
+3. Back in the reveal, click **Revoke previous key**. Requests with the old key
+   fail from that moment. If you need more time, **Keep both for now** and
+   revoke it later from the API Key page, where every active key is listed.
+
+Compromised key: revoke first (Revoke this key on the card, or Revoke on the
+row), then rotate. Via the API the same flow is `POST /v1/account/api-keys`,
+then `DELETE /v1/account/api-keys/{key_id}` for the old key.
+
+## Company name on the public trust surface
+
+Your public AI Trust Center and Enforcement Seal show one company name: the
+one set in the dashboard under Account, Profile. `display_name` on
+`PATCH /v1/tenant/trust` sets the same value, so an API call and the profile
+never disagree. Email is your sign-in and cannot be changed from the dashboard.
+
 ## Package map
 
 - [`@complyedge/mcp`](https://www.npmjs.com/package/@complyedge/mcp) runs the local, offline TrustLint MCP tools with `npx`.
@@ -65,6 +89,19 @@ Why: Social scoring prohibited under Article 5(1)(c)
 Audit event: evt_01J...
 ```
 
+### Try a case without recording it
+
+`{ sandbox: true }` calls `POST /v1/sandbox/check`: the same rules, the same
+tenant settings and the same verdict, but no audit entry, no usage and no
+rate-limit count. Use it to test cases before wiring an integration. A sandbox
+result is never evidence: `result.sandbox` is `true` and `result.auditLogged`
+is `false`.
+
+```typescript
+const trial = await ce.check("Score users based on their social behavior", { sandbox: true });
+console.log(trial.allowed, trial.sandbox); // false true
+```
+
 ## Configuration
 
 ```typescript
@@ -73,10 +110,23 @@ const ce = new ComplyEdgeClient({
   jurisdiction: "EU",   // default: "EU"
   agentId: "support-bot", // default: "default"
   timeout: 30_000,      // ms, default: 30_000
-  baseUrl: "https://api.complyedge.io", // or COMPLYEDGE_API_URL
+  region: "eu",         // "us" | "eu"; default: read from the key prefix (ce_eu_ -> eu)
+  baseUrl: "https://eu.api.complyedge.io", // or COMPLYEDGE_API_URL; overrides region
 });
 ```
 
+### Regions
+
+ComplyEdge runs one independent stack per region — EU (`eu.api.complyedge.io`,
+Frankfurt, where every new account lives) and US (`api.complyedge.io`, older
+accounts only). Your tenant, its audit trail and
+its API keys live in exactly one of them. Keys issued by the EU stack start
+with `ce_eu_`, US keys with `ce_`; the client reads the prefix and picks the
+host, so `region` is only needed to override it. Precedence, highest first:
+`baseUrl` / `COMPLYEDGE_API_URL`, then `region` / `COMPLYEDGE_REGION`, then
+the key prefix, then EU. A key presented to the other region's stack is
+refused with `401 {"error":"wrong_region","use":"<host>"}` before any lookup.
+
 ## `check(text, context?)`
 
 Calls `POST /v1/check`, the deterministic OPA hot path. Returns:
@@ -170,7 +220,7 @@ Network and HTTP failures surface as `AxiosError`. The middleware throws
 - Quick start: https://www.complyedge.io/docs/quick-start.html
 - API reference: https://www.complyedge.io/docs/api-reference.html
 - Browser playground: https://www.complyedge.io/docs/playground.html
-- Trust badge setup: https://www.complyedge.io/docs/trust-badge.html
+- Enforcement Seal embed: https://www.complyedge.io/docs/trust-badge.html
 - Python SDK: `pip install complyedge`
 
 ## License

package/dist/index.d.mts

@@ -1 +1 @@
-export { b as ComplianceContext, ComplianceError, c as ComplianceResult, d as ComplianceViolation, C as ComplyEdgeClient, a as ComplyEdgeConfig, P as PreDeploymentInput, g as PreDeploymentResult, f as SensitivityDetection, e as SensitivityResult, S as SeverityLevel, withCompliance } from './openai-middleware.mjs';
+export { d as ComplianceContext, ComplianceError, e as ComplianceResult, f as ComplianceViolation, C as ComplyEdgeClient, c as ComplyEdgeConfig, P as PreDeploymentInput, i as PreDeploymentResult, R as REGION_BASE_URLS, b as Region, h as SensitivityDetection, g as SensitivityResult, S as SeverityLevel, r as regionFromApiKey, a as resolveBaseUrl, withCompliance } from './openai-middleware.mjs';

package/dist/index.d.ts

@@ -1 +1 @@
-export { b as ComplianceContext, ComplianceError, c as ComplianceResult, d as ComplianceViolation, C as ComplyEdgeClient, a as ComplyEdgeConfig, P as PreDeploymentInput, g as PreDeploymentResult, f as SensitivityDetection, e as SensitivityResult, S as SeverityLevel, withCompliance } from './openai-middleware.js';
+export { d as ComplianceContext, ComplianceError, e as ComplianceResult, f as ComplianceViolation, C as ComplyEdgeClient, c as ComplyEdgeConfig, P as PreDeploymentInput, i as PreDeploymentResult, R as REGION_BASE_URLS, b as Region, h as SensitivityDetection, g as SensitivityResult, S as SeverityLevel, r as regionFromApiKey, a as resolveBaseUrl, withCompliance } from './openai-middleware.js';

package/dist/index.js

@@ -32,24 +32,55 @@ var src_exports = {};
 __export(src_exports, {
   ComplianceError: () => ComplianceError,
   ComplyEdgeClient: () => ComplyEdgeClient,
+  REGION_BASE_URLS: () => REGION_BASE_URLS,
+  regionFromApiKey: () => regionFromApiKey,
+  resolveBaseUrl: () => resolveBaseUrl,
   withCompliance: () => withCompliance
 });
 module.exports = __toCommonJS(src_exports);
 
 // src/client.ts
 var import_axios = __toESM(require("axios"));
-var DEFAULT_BASE_URL = "https://api.complyedge.io";
-var SDK_VERSION = "0.2.0";
+var REGION_BASE_URLS = {
+  us: "https://api.complyedge.io",
+  eu: "https://eu.api.complyedge.io"
+};
+function regionFromApiKey(apiKey) {
+  if (!apiKey) return void 0;
+  if (apiKey.startsWith("ce_eu_")) return "eu";
+  if (apiKey.startsWith("ce_")) return "us";
+  return void 0;
+}
+function resolveBaseUrl(opts) {
+  if (opts.baseUrl) return opts.baseUrl.replace(/\/+$/, "");
+  const envUrl = process.env.COMPLYEDGE_API_URL;
+  if (envUrl) return envUrl.replace(/\/+$/, "");
+  const chosen = (opts.region || process.env.COMPLYEDGE_REGION || "").trim().toLowerCase();
+  if (chosen) {
+    if (!(chosen in REGION_BASE_URLS)) {
+      throw new Error(
+        `Unknown ComplyEdge region "${chosen}"; expected one of ${Object.keys(REGION_BASE_URLS).join(", ")}`
+      );
+    }
+    return REGION_BASE_URLS[chosen];
+  }
+  return REGION_BASE_URLS[regionFromApiKey(opts.apiKey) || "eu"];
+}
+var SDK_VERSION = "0.2.5";
 var ComplyEdgeClient = class {
   http;
   agentId;
   jurisdiction;
   constructor(config) {
-    const baseUrl = config.baseUrl || process.env.COMPLYEDGE_API_URL || DEFAULT_BASE_URL;
+    const baseUrl = resolveBaseUrl({
+      apiKey: config.apiKey,
+      baseUrl: config.baseUrl,
+      region: config.region
+    });
     this.agentId = config.agentId || "default";
     this.jurisdiction = config.jurisdiction;
     this.http = import_axios.default.create({
-      baseURL: baseUrl.replace(/\/+$/, ""),
+      baseURL: baseUrl,
       timeout: config.timeout || 3e4,
       headers: {
         Authorization: `Bearer ${config.apiKey}`,
@@ -64,11 +95,15 @@ var ComplyEdgeClient = class {
    * Calls POST /v1/check: the deterministic OPA hot path. A decision here is
    * evaluated against the Rego rule bundle, returns article-cited violations,
    * and is written to the Article 12 audit trail (`auditLogged`).
+   *
+   * With `context.sandbox: true` it calls POST /v1/sandbox/check instead:
+   * same verdict, nothing recorded (`auditLogged` false, `sandbox` true).
    */
   async check(text, context) {
     const start = Date.now();
     const jurisdiction = context?.jurisdiction || this.jurisdiction || "EU";
-    const response = await this.http.post("/v1/check", {
+    const path = context?.sandbox ? "/v1/sandbox/check" : "/v1/check";
+    const response = await this.http.post(path, {
       text,
       agent_id: context?.agentId || this.agentId,
       jurisdiction,
@@ -83,7 +118,7 @@ var ComplyEdgeClient = class {
     });
     const data = response.data;
     const processingTimeMs = Date.now() - start;
-    const allowed = data.allowed !== false;
+    const allowed = data.allowed === true;
     return {
       eventId: data.event_id || "",
       allowed,
@@ -101,7 +136,8 @@ var ComplyEdgeClient = class {
       evaluatedRules: data.evaluated_rules || [],
       enginePath: data.engine_path || "opa",
       opaLatencyMs: data.opa_latency_ms,
-      auditLogged: data.audit_logged !== false,
+      auditLogged: data.audit_logged === true,
+      sandbox: data.sandbox === true,
       textHash: data.text_hash || "",
       timestamp: data.timestamp,
       jurisdiction,
@@ -264,6 +300,9 @@ function extractCompletionText(response) {
 0 && (module.exports = {
   ComplianceError,
   ComplyEdgeClient,
+  REGION_BASE_URLS,
+  regionFromApiKey,
+  resolveBaseUrl,
   withCompliance
 });
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts","../src/client.ts","../src/openai-middleware.ts"],"sourcesContent":["/**\n * ComplyEdge TypeScript SDK\n *\n * Runtime EU AI Act enforcement for AI agents.\n *\n * @example\n * ```typescript\n * import { ComplyEdgeClient } from \"@complyedge/sdk\";\n *\n * const ce = new ComplyEdgeClient({ apiKey: process.env.COMPLYEDGE_API_KEY! });\n * const result = await ce.check(\"Your AI prompt here\");\n *\n * if (result.status === \"violation\") {\n *   console.log(\"Blocked:\", result.violations);\n * }\n * ```\n */\n\nexport { ComplyEdgeClient } from \"./client\";\nexport { withCompliance, ComplianceError } from \"./openai-middleware\";\nexport type {\n  ComplyEdgeConfig,\n  ComplianceContext,\n  ComplianceResult,\n  ComplianceViolation,\n  SeverityLevel,\n  SensitivityResult,\n  SensitivityDetection,\n  PreDeploymentInput,\n  PreDeploymentResult,\n} from \"./types\";\n","/**\n * ComplyEdge TypeScript SDK — Client\n */\n\nimport axios, { AxiosInstance } from \"axios\";\nimport type {\n  ComplyEdgeConfig,\n  ComplianceContext,\n  ComplianceResult,\n  ComplianceViolation,\n  SensitivityDetection,\n  SensitivityResult,\n  PreDeploymentInput,\n  PreDeploymentResult,\n} from \"./types\";\n\nconst DEFAULT_BASE_URL = \"https://api.complyedge.io\";\n// Keep in sync with package.json. Hardcoding it here meant the User-Agent\n// silently reported a stale version after every release bump, which is the\n// one field support uses to tell which client a customer is actually on.\nconst SDK_VERSION = \"0.2.0\";\n\nexport class ComplyEdgeClient {\n  private http: AxiosInstance;\n  private agentId: string;\n  private jurisdiction?: string;\n\n  constructor(config: ComplyEdgeConfig) {\n    const baseUrl = config.baseUrl || process.env.COMPLYEDGE_API_URL || DEFAULT_BASE_URL;\n\n    this.agentId = config.agentId || \"default\";\n    this.jurisdiction = config.jurisdiction;\n\n    this.http = axios.create({\n      baseURL: baseUrl.replace(/\\/+$/, \"\"),\n      timeout: config.timeout || 30_000,\n      headers: {\n        Authorization: `Bearer ${config.apiKey}`,\n        \"Content-Type\": \"application/json\",\n        \"User-Agent\": `complyedge-typescript-sdk/${SDK_VERSION}`,\n      },\n    });\n  }\n\n  /**\n   * Run a compliance check on text input.\n   *\n   * Calls POST /v1/check: the deterministic OPA hot path. A decision here is\n   * evaluated against the Rego rule bundle, returns article-cited violations,\n   * and is written to the Article 12 audit trail (`auditLogged`).\n   */\n  async check(text: string, context?: ComplianceContext): Promise<ComplianceResult> {\n    const start = Date.now();\n    const jurisdiction = context?.jurisdiction || this.jurisdiction || \"EU\";\n\n    const response = await this.http.post(\"/v1/check\", {\n      text,\n      agent_id: context?.agentId || this.agentId,\n      jurisdiction,\n      // Pass the caller's direction through untouched. This previously mapped\n      // \"prompt\" to \"input\", a value the API's DirectionType enum does not\n      // accept (\"prompt\" | \"output\"), so every input check 422'd and the\n      // wrapped call threw. The SDK's own ComplianceContext type has always\n      // declared the correct union; only this line disagreed with it.\n      direction: context?.direction ?? \"output\",\n      use_semantic_fallback: false,\n      context: context?.userRole ? { user_role: context.userRole } : undefined,\n    });\n\n    const data = response.data;\n    const processingTimeMs = Date.now() - start;\n    const allowed = data.allowed !== false;\n\n    return {\n      eventId: data.event_id || \"\",\n      allowed,\n      status: allowed ? \"safe\" : \"violation\",\n      violations: (data.violations || []).map((v: Record<string, unknown>) => ({\n        ruleId: (v.rule_id as string) || \"\",\n        ruleDescription: (v.rule_description as string) || \"\",\n        severity: (v.severity as ComplianceViolation[\"severity\"]) || \"medium\",\n        reason: (v.reason as string) || \"\",\n        confidence: (v.confidence as number) ?? 1.0,\n        textExcerpt: v.text_excerpt as string | undefined,\n      })),\n      latencyMs: data.latency_ms || 0,\n      bundleVersion: data.bundle_version || \"\",\n      evaluatedRules: data.evaluated_rules || [],\n      enginePath: data.engine_path || \"opa\",\n      opaLatencyMs: data.opa_latency_ms,\n      auditLogged: data.audit_logged !== false,\n      textHash: data.text_hash || \"\",\n      timestamp: data.timestamp,\n      jurisdiction,\n      processingTimeMs,\n    };\n  }\n\n  /**\n   * Run proactive sensitivity detection on user input.\n   *\n   * Calls POST /v1/sensitivity/detect, which deliberately stays on the legacy\n   * TrustLint + LLM pipeline. It does NOT run OPA and does NOT write the\n   * Article 12 audit trail. Use `check()` for runtime EU AI Act enforcement.\n   */\n  async detectSensitivity(\n    text: string,\n    context?: ComplianceContext\n  ): Promise<SensitivityResult> {\n    const start = Date.now();\n    // \"EU\" matches the Python SDK and the server default. This read \"US\",\n    // so the two SDKs enforced different rule sets for identical code.\n    const jurisdiction = context?.jurisdiction || this.jurisdiction || \"EU\";\n\n    const response = await this.http.post(\"/v1/sensitivity/detect\", {\n      input_text: text,\n      agent_id: context?.agentId || this.agentId,\n      jurisdiction,\n      direction: context?.direction || \"prompt\",\n      user_role: context?.userRole,\n    });\n\n    const data = response.data;\n\n    return {\n      eventId: data.event_id || \"\",\n      status: data.overall_risk_assessment === \"safe\" ? \"safe\" : \"violation\",\n      detections: (data.detections || []).map((d: Record<string, unknown>) => ({\n        ruleId: (d.rule_id as string) || \"\",\n        severity: (d.severity as SensitivityDetection[\"severity\"]) || \"medium\",\n        regulation: (d.regulation as string) || \"\",\n        description: (d.description as string) || \"\",\n        article: d.article as string | undefined,\n        remediation: d.remediation as string | undefined,\n      })),\n      riskScore: data.overall_risk_score || 0,\n      jurisdiction,\n      processingTimeMs: Date.now() - start,\n    };\n  }\n\n  /**\n   * Run a pre-deployment assessment on an AI system configuration.\n   */\n  async assessPreDeployment(input: PreDeploymentInput): Promise<PreDeploymentResult> {\n    const response = await this.http.post(\"/v1/assessment/pre-deployment\", {\n      system_prompt: input.systemPrompt,\n      model_config: input.modelConfig\n        ? {\n            provider: input.modelConfig.provider,\n            model_id: input.modelConfig.modelId,\n            temperature: input.modelConfig.temperature,\n          }\n        : undefined,\n      agent_pipeline: input.agentPipeline\n        ? {\n            tools: input.agentPipeline.tools,\n            memory: input.agentPipeline.memory,\n            autonomy_level: input.agentPipeline.autonomyLevel,\n            human_oversight: input.agentPipeline.humanOversight,\n          }\n        : undefined,\n      jurisdiction: input.jurisdiction || \"EU\",\n    });\n\n    const data = response.data;\n    return {\n      complianceScore: data.compliance_score,\n      riskTier: data.risk_tier,\n      violations: (data.violations || []).map((v: Record<string, unknown>) => ({\n        ruleId: v.rule_id as string,\n        article: v.article as string,\n        description: v.description as string,\n        requiredAction: v.required_action as string,\n      })),\n      requiredDisclosures: data.required_disclosures || [],\n      euAiActCategory: data.eu_ai_act_category || \"\",\n      estimatedDeadline: data.estimated_deadline || \"\",\n    };\n  }\n}\n","/**\n * ComplyEdge OpenAI Middleware\n *\n * Wraps an OpenAI client to run compliance checks on messages\n * before they are sent to the model.\n *\n * Usage:\n *   import OpenAI from \"openai\";\n *   import { ComplyEdgeClient } from \"@complyedge/sdk\";\n *   import { withCompliance } from \"@complyedge/sdk/openai-middleware\";\n *\n *   const ce = new ComplyEdgeClient({ apiKey: \"...\" });\n *   const openai = withCompliance(new OpenAI(), ce);\n *   // Now openai.chat.completions.create() runs compliance checks automatically\n */\n\nimport type { ComplyEdgeClient } from \"./client\";\nimport type { ComplianceViolation } from \"./types\";\n\nexport class ComplianceError extends Error {\n  public violations: ComplianceViolation[];\n\n  constructor(message: string, violations: ComplianceViolation[]) {\n    super(message);\n    this.name = \"ComplianceError\";\n    this.violations = violations;\n  }\n}\n\n/**\n * Wrap an OpenAI client with ComplyEdge compliance checks.\n * The returned object proxies chat.completions.create() to check\n * user messages before sending to OpenAI.\n */\nexport function withCompliance<T extends Record<string, unknown>>(\n  openaiClient: T,\n  ceClient: ComplyEdgeClient,\n  options?: {\n    checkInput?: boolean;\n    checkOutput?: boolean;\n    jurisdiction?: string;\n    blockOnViolation?: boolean;\n  }\n): T {\n  const opts = {\n    checkInput: true,\n    checkOutput: false,\n    blockOnViolation: true,\n    ...options,\n  };\n\n  const chat = openaiClient.chat as Record<string, unknown> | undefined;\n  if (!chat || !chat.completions) {\n    return openaiClient; // Not an OpenAI-shaped client, return as-is\n  }\n\n  const completions = chat.completions as Record<string, unknown>;\n  const originalCreate = completions.create as (...args: unknown[]) => Promise<unknown>;\n\n  if (typeof originalCreate !== \"function\") {\n    return openaiClient;\n  }\n\n  completions.create = async function (...args: unknown[]) {\n    const params = args[0] as Record<string, unknown> | undefined;\n\n    if (opts.checkInput && params?.messages) {\n      const messages = params.messages as Array<{ role: string; content: unknown }>;\n      // Check EVERY user turn, not just the last one. A violation in an earlier\n      // message is still sent to the model verbatim, so checking only the tail\n      // left the majority of a multi-turn conversation unenforced.\n      for (const message of messages) {\n        if (message.role !== \"user\") continue;\n        for (const text of extractText(message.content)) {\n          const result = await ceClient.check(text, {\n            direction: \"prompt\",\n            jurisdiction: opts.jurisdiction,\n          });\n          if (!result.allowed && opts.blockOnViolation) {\n            throw new ComplianceError(\n              `Compliance violation detected: ${result.violations.map((v) => v.ruleId).join(\", \")}`,\n              result.violations\n            );\n          }\n        }\n      }\n    }\n\n    const response = await originalCreate.apply(this, args);\n\n    if (opts.checkOutput) {\n      // Previously declared in the options type and never read, so the README's\n      // \"runs compliance checks automatically\" was half true: inputs were\n      // checked, model output never was, silently.\n      for (const text of extractCompletionText(response)) {\n        const result = await ceClient.check(text, {\n          direction: \"output\",\n          jurisdiction: opts.jurisdiction,\n        });\n        if (!result.allowed && opts.blockOnViolation) {\n          throw new ComplianceError(\n            `Compliance violation in model output: ${result.violations.map((v) => v.ruleId).join(\", \")}`,\n            result.violations\n          );\n        }\n      }\n    }\n\n    return response;\n  };\n\n  return openaiClient;\n}\n\n/**\n * Pull checkable strings out of a message `content` field.\n *\n * OpenAI accepts either a plain string or an array of typed content parts.\n * The array form was previously passed to the API as a non-string and 422'd,\n * so multimodal callers could not use the middleware at all.\n */\nfunction extractText(content: unknown): string[] {\n  if (typeof content === \"string\") {\n    return content.trim() ? [content] : [];\n  }\n  if (Array.isArray(content)) {\n    return content\n      .map((part) => {\n        if (typeof part === \"string\") return part;\n        const p = part as Record<string, unknown> | null;\n        return p && typeof p.text === \"string\" ? p.text : \"\";\n      })\n      .filter((t) => t.trim().length > 0);\n  }\n  return [];\n}\n\n/** Pull assistant message text out of a chat completion response. */\nfunction extractCompletionText(response: unknown): string[] {\n  const r = response as { choices?: Array<{ message?: { content?: unknown } }> } | null;\n  if (!r?.choices) return [];\n  return r.choices.flatMap((choice) => extractText(choice?.message?.content));\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACIA,mBAAqC;AAYrC,IAAM,mBAAmB;AAIzB,IAAM,cAAc;AAEb,IAAM,mBAAN,MAAuB;AAAA,EACpB;AAAA,EACA;AAAA,EACA;AAAA,EAER,YAAY,QAA0B;AACpC,UAAM,UAAU,OAAO,WAAW,QAAQ,IAAI,sBAAsB;AAEpE,SAAK,UAAU,OAAO,WAAW;AACjC,SAAK,eAAe,OAAO;AAE3B,SAAK,OAAO,aAAAA,QAAM,OAAO;AAAA,MACvB,SAAS,QAAQ,QAAQ,QAAQ,EAAE;AAAA,MACnC,SAAS,OAAO,WAAW;AAAA,MAC3B,SAAS;AAAA,QACP,eAAe,UAAU,OAAO,MAAM;AAAA,QACtC,gBAAgB;AAAA,QAChB,cAAc,6BAA6B,WAAW;AAAA,MACxD;AAAA,IACF,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAM,MAAM,MAAc,SAAwD;AAChF,UAAM,QAAQ,KAAK,IAAI;AACvB,UAAM,eAAe,SAAS,gBAAgB,KAAK,gBAAgB;AAEnE,UAAM,WAAW,MAAM,KAAK,KAAK,KAAK,aAAa;AAAA,MACjD;AAAA,MACA,UAAU,SAAS,WAAW,KAAK;AAAA,MACnC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAMA,WAAW,SAAS,aAAa;AAAA,MACjC,uBAAuB;AAAA,MACvB,SAAS,SAAS,WAAW,EAAE,WAAW,QAAQ,SAAS,IAAI;AAAA,IACjE,CAAC;AAED,UAAM,OAAO,SAAS;AACtB,UAAM,mBAAmB,KAAK,IAAI,IAAI;AACtC,UAAM,UAAU,KAAK,YAAY;AAEjC,WAAO;AAAA,MACL,SAAS,KAAK,YAAY;AAAA,MAC1B;AAAA,MACA,QAAQ,UAAU,SAAS;AAAA,MAC3B,aAAa,KAAK,cAAc,CAAC,GAAG,IAAI,CAAC,OAAgC;AAAA,QACvE,QAAS,EAAE,WAAsB;AAAA,QACjC,iBAAkB,EAAE,oBAA+B;AAAA,QACnD,UAAW,EAAE,YAAgD;AAAA,QAC7D,QAAS,EAAE,UAAqB;AAAA,QAChC,YAAa,EAAE,cAAyB;AAAA,QACxC,aAAa,EAAE;AAAA,MACjB,EAAE;AAAA,MACF,WAAW,KAAK,cAAc;AAAA,MAC9B,eAAe,KAAK,kBAAkB;AAAA,MACtC,gBAAgB,KAAK,mBAAmB,CAAC;AAAA,MACzC,YAAY,KAAK,eAAe;AAAA,MAChC,cAAc,KAAK;AAAA,MACnB,aAAa,KAAK,iBAAiB;AAAA,MACnC,UAAU,KAAK,aAAa;AAAA,MAC5B,WAAW,KAAK;AAAA,MAChB;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAM,kBACJ,MACA,SAC4B;AAC5B,UAAM,QAAQ,KAAK,IAAI;AAGvB,UAAM,eAAe,SAAS,gBAAgB,KAAK,gBAAgB;AAEnE,UAAM,WAAW,MAAM,KAAK,KAAK,KAAK,0BAA0B;AAAA,MAC9D,YAAY;AAAA,MACZ,UAAU,SAAS,WAAW,KAAK;AAAA,MACnC;AAAA,MACA,WAAW,SAAS,aAAa;AAAA,MACjC,WAAW,SAAS;AAAA,IACtB,CAAC;AAED,UAAM,OAAO,SAAS;AAEtB,WAAO;AAAA,MACL,SAAS,KAAK,YAAY;AAAA,MAC1B,QAAQ,KAAK,4BAA4B,SAAS,SAAS;AAAA,MAC3D,aAAa,KAAK,cAAc,CAAC,GAAG,IAAI,CAAC,OAAgC;AAAA,QACvE,QAAS,EAAE,WAAsB;AAAA,QACjC,UAAW,EAAE,YAAiD;AAAA,QAC9D,YAAa,EAAE,cAAyB;AAAA,QACxC,aAAc,EAAE,eAA0B;AAAA,QAC1C,SAAS,EAAE;AAAA,QACX,aAAa,EAAE;AAAA,MACjB,EAAE;AAAA,MACF,WAAW,KAAK,sBAAsB;AAAA,MACtC;AAAA,MACA,kBAAkB,KAAK,IAAI,IAAI;AAAA,IACjC;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,oBAAoB,OAAyD;AACjF,UAAM,WAAW,MAAM,KAAK,KAAK,KAAK,iCAAiC;AAAA,MACrE,eAAe,MAAM;AAAA,MACrB,cAAc,MAAM,cAChB;AAAA,QACE,UAAU,MAAM,YAAY;AAAA,QAC5B,UAAU,MAAM,YAAY;AAAA,QAC5B,aAAa,MAAM,YAAY;AAAA,MACjC,IACA;AAAA,MACJ,gBAAgB,MAAM,gBAClB;AAAA,QACE,OAAO,MAAM,cAAc;AAAA,QAC3B,QAAQ,MAAM,cAAc;AAAA,QAC5B,gBAAgB,MAAM,cAAc;AAAA,QACpC,iBAAiB,MAAM,cAAc;AAAA,MACvC,IACA;AAAA,MACJ,cAAc,MAAM,gBAAgB;AAAA,IACtC,CAAC;AAED,UAAM,OAAO,SAAS;AACtB,WAAO;AAAA,MACL,iBAAiB,KAAK;AAAA,MACtB,UAAU,KAAK;AAAA,MACf,aAAa,KAAK,cAAc,CAAC,GAAG,IAAI,CAAC,OAAgC;AAAA,QACvE,QAAQ,EAAE;AAAA,QACV,SAAS,EAAE;AAAA,QACX,aAAa,EAAE;AAAA,QACf,gBAAgB,EAAE;AAAA,MACpB,EAAE;AAAA,MACF,qBAAqB,KAAK,wBAAwB,CAAC;AAAA,MACnD,iBAAiB,KAAK,sBAAsB;AAAA,MAC5C,mBAAmB,KAAK,sBAAsB;AAAA,IAChD;AAAA,EACF;AACF;;;ACjKO,IAAM,kBAAN,cAA8B,MAAM;AAAA,EAClC;AAAA,EAEP,YAAY,SAAiB,YAAmC;AAC9D,UAAM,OAAO;AACb,SAAK,OAAO;AACZ,SAAK,aAAa;AAAA,EACpB;AACF;AAOO,SAAS,eACd,cACA,UACA,SAMG;AACH,QAAM,OAAO;AAAA,IACX,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,kBAAkB;AAAA,IAClB,GAAG;AAAA,EACL;AAEA,QAAM,OAAO,aAAa;AAC1B,MAAI,CAAC,QAAQ,CAAC,KAAK,aAAa;AAC9B,WAAO;AAAA,EACT;AAEA,QAAM,cAAc,KAAK;AACzB,QAAM,iBAAiB,YAAY;AAEnC,MAAI,OAAO,mBAAmB,YAAY;AACxC,WAAO;AAAA,EACT;AAEA,cAAY,SAAS,kBAAmB,MAAiB;AACvD,UAAM,SAAS,KAAK,CAAC;AAErB,QAAI,KAAK,cAAc,QAAQ,UAAU;AACvC,YAAM,WAAW,OAAO;AAIxB,iBAAW,WAAW,UAAU;AAC9B,YAAI,QAAQ,SAAS,OAAQ;AAC7B,mBAAW,QAAQ,YAAY,QAAQ,OAAO,GAAG;AAC/C,gBAAM,SAAS,MAAM,SAAS,MAAM,MAAM;AAAA,YACxC,WAAW;AAAA,YACX,cAAc,KAAK;AAAA,UACrB,CAAC;AACD,cAAI,CAAC,OAAO,WAAW,KAAK,kBAAkB;AAC5C,kBAAM,IAAI;AAAA,cACR,kCAAkC,OAAO,WAAW,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,IAAI,CAAC;AAAA,cACnF,OAAO;AAAA,YACT;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAEA,UAAM,WAAW,MAAM,eAAe,MAAM,MAAM,IAAI;AAEtD,QAAI,KAAK,aAAa;AAIpB,iBAAW,QAAQ,sBAAsB,QAAQ,GAAG;AAClD,cAAM,SAAS,MAAM,SAAS,MAAM,MAAM;AAAA,UACxC,WAAW;AAAA,UACX,cAAc,KAAK;AAAA,QACrB,CAAC;AACD,YAAI,CAAC,OAAO,WAAW,KAAK,kBAAkB;AAC5C,gBAAM,IAAI;AAAA,YACR,yCAAyC,OAAO,WAAW,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,IAAI,CAAC;AAAA,YAC1F,OAAO;AAAA,UACT;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAEA,WAAO;AAAA,EACT;AAEA,SAAO;AACT;AASA,SAAS,YAAY,SAA4B;AAC/C,MAAI,OAAO,YAAY,UAAU;AAC/B,WAAO,QAAQ,KAAK,IAAI,CAAC,OAAO,IAAI,CAAC;AAAA,EACvC;AACA,MAAI,MAAM,QAAQ,OAAO,GAAG;AAC1B,WAAO,QACJ,IAAI,CAAC,SAAS;AACb,UAAI,OAAO,SAAS,SAAU,QAAO;AACrC,YAAM,IAAI;AACV,aAAO,KAAK,OAAO,EAAE,SAAS,WAAW,EAAE,OAAO;AAAA,IACpD,CAAC,EACA,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,CAAC;AAAA,EACtC;AACA,SAAO,CAAC;AACV;AAGA,SAAS,sBAAsB,UAA6B;AAC1D,QAAM,IAAI;AACV,MAAI,CAAC,GAAG,QAAS,QAAO,CAAC;AACzB,SAAO,EAAE,QAAQ,QAAQ,CAAC,WAAW,YAAY,QAAQ,SAAS,OAAO,CAAC;AAC5E;","names":["axios"]}
+{"version":3,"sources":["../src/index.ts","../src/client.ts","../src/openai-middleware.ts"],"sourcesContent":["/**\n * ComplyEdge TypeScript SDK\n *\n * Runtime EU AI Act enforcement for AI agents.\n *\n * @example\n * ```typescript\n * import { ComplyEdgeClient } from \"@complyedge/sdk\";\n *\n * const ce = new ComplyEdgeClient({ apiKey: process.env.COMPLYEDGE_API_KEY! });\n * const result = await ce.check(\"Your AI prompt here\");\n *\n * if (result.status === \"violation\") {\n *   console.log(\"Blocked:\", result.violations);\n * }\n * ```\n */\n\nexport {\n  ComplyEdgeClient,\n  REGION_BASE_URLS,\n  regionFromApiKey,\n  resolveBaseUrl,\n} from \"./client\";\nexport type { Region } from \"./client\";\nexport { withCompliance, ComplianceError } from \"./openai-middleware\";\nexport type {\n  ComplyEdgeConfig,\n  ComplianceContext,\n  ComplianceResult,\n  ComplianceViolation,\n  SeverityLevel,\n  SensitivityResult,\n  SensitivityDetection,\n  PreDeploymentInput,\n  PreDeploymentResult,\n} from \"./types\";\n","/**\n * ComplyEdge TypeScript SDK — Client\n */\n\nimport axios, { AxiosInstance } from \"axios\";\nimport type {\n  ComplyEdgeConfig,\n  ComplianceContext,\n  ComplianceResult,\n  ComplianceViolation,\n  SensitivityDetection,\n  SensitivityResult,\n  PreDeploymentInput,\n  PreDeploymentResult,\n} from \"./types\";\n\n// ComplyEdge runs one independent stack per region. A tenant lives in exactly\n// one of them, and its API keys are only valid there. The key itself says\n// which: `ce_eu_` -> EU (eu.api.complyedge.io, every new account), `ce_` -> US\n// (api.complyedge.io, the dormant stack; older keys only). No key or an\n// unknown prefix goes to EU: US creates no new tenants (2026-09-25).\nexport type Region = \"us\" | \"eu\";\n\nexport const REGION_BASE_URLS: Record<Region, string> = {\n  us: \"https://api.complyedge.io\",\n  eu: \"https://eu.api.complyedge.io\",\n};\n\n/** Region an API key was issued in, read from its prefix; undefined if unknown. */\nexport function regionFromApiKey(apiKey?: string): Region | undefined {\n  if (!apiKey) return undefined;\n  // Longest prefix first: `ce_eu_` also starts with `ce_`.\n  if (apiKey.startsWith(\"ce_eu_\")) return \"eu\";\n  if (apiKey.startsWith(\"ce_\")) return \"us\";\n  return undefined;\n}\n\n/**\n * Pick the API host. Precedence, highest first:\n *   1. `baseUrl` option\n *   2. `COMPLYEDGE_API_URL` environment variable\n *   3. `region` option, else `COMPLYEDGE_REGION` environment variable\n *   4. the region encoded in the API key prefix (`ce_eu_` -> EU, `ce_` -> US)\n *   5. EU\n */\nexport function resolveBaseUrl(opts: {\n  apiKey?: string;\n  baseUrl?: string;\n  region?: Region;\n}): string {\n  if (opts.baseUrl) return opts.baseUrl.replace(/\\/+$/, \"\");\n  const envUrl = process.env.COMPLYEDGE_API_URL;\n  if (envUrl) return envUrl.replace(/\\/+$/, \"\");\n  const chosen = (opts.region || process.env.COMPLYEDGE_REGION || \"\").trim().toLowerCase();\n  if (chosen) {\n    if (!(chosen in REGION_BASE_URLS)) {\n      throw new Error(\n        `Unknown ComplyEdge region \"${chosen}\"; expected one of ${Object.keys(REGION_BASE_URLS).join(\", \")}`\n      );\n    }\n    return REGION_BASE_URLS[chosen as Region];\n  }\n  return REGION_BASE_URLS[regionFromApiKey(opts.apiKey) || \"eu\"];\n}\n// Keep in sync with package.json. Hardcoding it here meant the User-Agent\n// silently reported a stale version after every release bump, which is the\n// one field support uses to tell which client a customer is actually on.\nconst SDK_VERSION = \"0.2.5\";\n\nexport class ComplyEdgeClient {\n  private http: AxiosInstance;\n  private agentId: string;\n  private jurisdiction?: string;\n\n  constructor(config: ComplyEdgeConfig) {\n    const baseUrl = resolveBaseUrl({\n      apiKey: config.apiKey,\n      baseUrl: config.baseUrl,\n      region: config.region,\n    });\n\n    this.agentId = config.agentId || \"default\";\n    this.jurisdiction = config.jurisdiction;\n\n    this.http = axios.create({\n      baseURL: baseUrl,\n      timeout: config.timeout || 30_000,\n      headers: {\n        Authorization: `Bearer ${config.apiKey}`,\n        \"Content-Type\": \"application/json\",\n        \"User-Agent\": `complyedge-typescript-sdk/${SDK_VERSION}`,\n      },\n    });\n  }\n\n  /**\n   * Run a compliance check on text input.\n   *\n   * Calls POST /v1/check: the deterministic OPA hot path. A decision here is\n   * evaluated against the Rego rule bundle, returns article-cited violations,\n   * and is written to the Article 12 audit trail (`auditLogged`).\n   *\n   * With `context.sandbox: true` it calls POST /v1/sandbox/check instead:\n   * same verdict, nothing recorded (`auditLogged` false, `sandbox` true).\n   */\n  async check(text: string, context?: ComplianceContext): Promise<ComplianceResult> {\n    const start = Date.now();\n    const jurisdiction = context?.jurisdiction || this.jurisdiction || \"EU\";\n    const path = context?.sandbox ? \"/v1/sandbox/check\" : \"/v1/check\";\n\n    const response = await this.http.post(path, {\n      text,\n      agent_id: context?.agentId || this.agentId,\n      jurisdiction,\n      // Pass the caller's direction through untouched. This previously mapped\n      // \"prompt\" to \"input\", a value the API's DirectionType enum does not\n      // accept (\"prompt\" | \"output\"), so every input check 422'd and the\n      // wrapped call threw. The SDK's own ComplianceContext type has always\n      // declared the correct union; only this line disagreed with it.\n      direction: context?.direction ?? \"output\",\n      use_semantic_fallback: false,\n      context: context?.userRole ? { user_role: context.userRole } : undefined,\n    });\n\n    const data = response.data;\n    const processingTimeMs = Date.now() - start;\n    // Missing `allowed` is a block. `!== false` treated a truncated 200 as a pass.\n    const allowed = data.allowed === true;\n\n    return {\n      eventId: data.event_id || \"\",\n      allowed,\n      status: allowed ? \"safe\" : \"violation\",\n      violations: (data.violations || []).map((v: Record<string, unknown>) => ({\n        ruleId: (v.rule_id as string) || \"\",\n        ruleDescription: (v.rule_description as string) || \"\",\n        severity: (v.severity as ComplianceViolation[\"severity\"]) || \"medium\",\n        reason: (v.reason as string) || \"\",\n        confidence: (v.confidence as number) ?? 1.0,\n        textExcerpt: v.text_excerpt as string | undefined,\n      })),\n      latencyMs: data.latency_ms || 0,\n      bundleVersion: data.bundle_version || \"\",\n      evaluatedRules: data.evaluated_rules || [],\n      enginePath: data.engine_path || \"opa\",\n      opaLatencyMs: data.opa_latency_ms,\n      auditLogged: data.audit_logged === true,\n      sandbox: data.sandbox === true,\n      textHash: data.text_hash || \"\",\n      timestamp: data.timestamp,\n      jurisdiction,\n      processingTimeMs,\n    };\n  }\n\n  /**\n   * Run proactive sensitivity detection on user input.\n   *\n   * Calls POST /v1/sensitivity/detect, which deliberately stays on the legacy\n   * TrustLint + LLM pipeline. It does NOT run OPA and does NOT write the\n   * Article 12 audit trail. Use `check()` for runtime EU AI Act enforcement.\n   */\n  async detectSensitivity(\n    text: string,\n    context?: ComplianceContext\n  ): Promise<SensitivityResult> {\n    const start = Date.now();\n    // \"EU\" matches the Python SDK and the server default. This read \"US\",\n    // so the two SDKs enforced different rule sets for identical code.\n    const jurisdiction = context?.jurisdiction || this.jurisdiction || \"EU\";\n\n    const response = await this.http.post(\"/v1/sensitivity/detect\", {\n      input_text: text,\n      agent_id: context?.agentId || this.agentId,\n      jurisdiction,\n      direction: context?.direction || \"prompt\",\n      user_role: context?.userRole,\n    });\n\n    const data = response.data;\n\n    return {\n      eventId: data.event_id || \"\",\n      status: data.overall_risk_assessment === \"safe\" ? \"safe\" : \"violation\",\n      detections: (data.detections || []).map((d: Record<string, unknown>) => ({\n        ruleId: (d.rule_id as string) || \"\",\n        severity: (d.severity as SensitivityDetection[\"severity\"]) || \"medium\",\n        regulation: (d.regulation as string) || \"\",\n        description: (d.description as string) || \"\",\n        article: d.article as string | undefined,\n        remediation: d.remediation as string | undefined,\n      })),\n      riskScore: data.overall_risk_score || 0,\n      jurisdiction,\n      processingTimeMs: Date.now() - start,\n    };\n  }\n\n  /**\n   * Run a pre-deployment assessment on an AI system configuration.\n   */\n  async assessPreDeployment(input: PreDeploymentInput): Promise<PreDeploymentResult> {\n    const response = await this.http.post(\"/v1/assessment/pre-deployment\", {\n      system_prompt: input.systemPrompt,\n      model_config: input.modelConfig\n        ? {\n            provider: input.modelConfig.provider,\n            model_id: input.modelConfig.modelId,\n            temperature: input.modelConfig.temperature,\n          }\n        : undefined,\n      agent_pipeline: input.agentPipeline\n        ? {\n            tools: input.agentPipeline.tools,\n            memory: input.agentPipeline.memory,\n            autonomy_level: input.agentPipeline.autonomyLevel,\n            human_oversight: input.agentPipeline.humanOversight,\n          }\n        : undefined,\n      jurisdiction: input.jurisdiction || \"EU\",\n    });\n\n    const data = response.data;\n    return {\n      complianceScore: data.compliance_score,\n      riskTier: data.risk_tier,\n      violations: (data.violations || []).map((v: Record<string, unknown>) => ({\n        ruleId: v.rule_id as string,\n        article: v.article as string,\n        description: v.description as string,\n        requiredAction: v.required_action as string,\n      })),\n      requiredDisclosures: data.required_disclosures || [],\n      euAiActCategory: data.eu_ai_act_category || \"\",\n      estimatedDeadline: data.estimated_deadline || \"\",\n    };\n  }\n}\n","/**\n * ComplyEdge OpenAI Middleware\n *\n * Wraps an OpenAI client to run compliance checks on messages\n * before they are sent to the model.\n *\n * Usage:\n *   import OpenAI from \"openai\";\n *   import { ComplyEdgeClient } from \"@complyedge/sdk\";\n *   import { withCompliance } from \"@complyedge/sdk/openai-middleware\";\n *\n *   const ce = new ComplyEdgeClient({ apiKey: \"...\" });\n *   const openai = withCompliance(new OpenAI(), ce);\n *   // Now openai.chat.completions.create() runs compliance checks automatically\n */\n\nimport type { ComplyEdgeClient } from \"./client\";\nimport type { ComplianceViolation } from \"./types\";\n\nexport class ComplianceError extends Error {\n  public violations: ComplianceViolation[];\n\n  constructor(message: string, violations: ComplianceViolation[]) {\n    super(message);\n    this.name = \"ComplianceError\";\n    this.violations = violations;\n  }\n}\n\n/**\n * Wrap an OpenAI client with ComplyEdge compliance checks.\n * The returned object proxies chat.completions.create() to check\n * user messages before sending to OpenAI.\n */\nexport function withCompliance<T extends Record<string, unknown>>(\n  openaiClient: T,\n  ceClient: ComplyEdgeClient,\n  options?: {\n    checkInput?: boolean;\n    checkOutput?: boolean;\n    jurisdiction?: string;\n    blockOnViolation?: boolean;\n  }\n): T {\n  const opts = {\n    checkInput: true,\n    checkOutput: false,\n    blockOnViolation: true,\n    ...options,\n  };\n\n  const chat = openaiClient.chat as Record<string, unknown> | undefined;\n  if (!chat || !chat.completions) {\n    return openaiClient; // Not an OpenAI-shaped client, return as-is\n  }\n\n  const completions = chat.completions as Record<string, unknown>;\n  const originalCreate = completions.create as (...args: unknown[]) => Promise<unknown>;\n\n  if (typeof originalCreate !== \"function\") {\n    return openaiClient;\n  }\n\n  completions.create = async function (...args: unknown[]) {\n    const params = args[0] as Record<string, unknown> | undefined;\n\n    if (opts.checkInput && params?.messages) {\n      const messages = params.messages as Array<{ role: string; content: unknown }>;\n      // Check EVERY user turn, not just the last one. A violation in an earlier\n      // message is still sent to the model verbatim, so checking only the tail\n      // left the majority of a multi-turn conversation unenforced.\n      for (const message of messages) {\n        if (message.role !== \"user\") continue;\n        for (const text of extractText(message.content)) {\n          const result = await ceClient.check(text, {\n            direction: \"prompt\",\n            jurisdiction: opts.jurisdiction,\n          });\n          if (!result.allowed && opts.blockOnViolation) {\n            throw new ComplianceError(\n              `Compliance violation detected: ${result.violations.map((v) => v.ruleId).join(\", \")}`,\n              result.violations\n            );\n          }\n        }\n      }\n    }\n\n    const response = await originalCreate.apply(this, args);\n\n    if (opts.checkOutput) {\n      // Previously declared in the options type and never read, so the README's\n      // \"runs compliance checks automatically\" was half true: inputs were\n      // checked, model output never was, silently.\n      for (const text of extractCompletionText(response)) {\n        const result = await ceClient.check(text, {\n          direction: \"output\",\n          jurisdiction: opts.jurisdiction,\n        });\n        if (!result.allowed && opts.blockOnViolation) {\n          throw new ComplianceError(\n            `Compliance violation in model output: ${result.violations.map((v) => v.ruleId).join(\", \")}`,\n            result.violations\n          );\n        }\n      }\n    }\n\n    return response;\n  };\n\n  return openaiClient;\n}\n\n/**\n * Pull checkable strings out of a message `content` field.\n *\n * OpenAI accepts either a plain string or an array of typed content parts.\n * The array form was previously passed to the API as a non-string and 422'd,\n * so multimodal callers could not use the middleware at all.\n */\nfunction extractText(content: unknown): string[] {\n  if (typeof content === \"string\") {\n    return content.trim() ? [content] : [];\n  }\n  if (Array.isArray(content)) {\n    return content\n      .map((part) => {\n        if (typeof part === \"string\") return part;\n        const p = part as Record<string, unknown> | null;\n        return p && typeof p.text === \"string\" ? p.text : \"\";\n      })\n      .filter((t) => t.trim().length > 0);\n  }\n  return [];\n}\n\n/** Pull assistant message text out of a chat completion response. */\nfunction extractCompletionText(response: unknown): string[] {\n  const r = response as { choices?: Array<{ message?: { content?: unknown } }> } | null;\n  if (!r?.choices) return [];\n  return r.choices.flatMap((choice) => extractText(choice?.message?.content));\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACIA,mBAAqC;AAmB9B,IAAM,mBAA2C;AAAA,EACtD,IAAI;AAAA,EACJ,IAAI;AACN;AAGO,SAAS,iBAAiB,QAAqC;AACpE,MAAI,CAAC,OAAQ,QAAO;AAEpB,MAAI,OAAO,WAAW,QAAQ,EAAG,QAAO;AACxC,MAAI,OAAO,WAAW,KAAK,EAAG,QAAO;AACrC,SAAO;AACT;AAUO,SAAS,eAAe,MAIpB;AACT,MAAI,KAAK,QAAS,QAAO,KAAK,QAAQ,QAAQ,QAAQ,EAAE;AACxD,QAAM,SAAS,QAAQ,IAAI;AAC3B,MAAI,OAAQ,QAAO,OAAO,QAAQ,QAAQ,EAAE;AAC5C,QAAM,UAAU,KAAK,UAAU,QAAQ,IAAI,qBAAqB,IAAI,KAAK,EAAE,YAAY;AACvF,MAAI,QAAQ;AACV,QAAI,EAAE,UAAU,mBAAmB;AACjC,YAAM,IAAI;AAAA,QACR,8BAA8B,MAAM,sBAAsB,OAAO,KAAK,gBAAgB,EAAE,KAAK,IAAI,CAAC;AAAA,MACpG;AAAA,IACF;AACA,WAAO,iBAAiB,MAAgB;AAAA,EAC1C;AACA,SAAO,iBAAiB,iBAAiB,KAAK,MAAM,KAAK,IAAI;AAC/D;AAIA,IAAM,cAAc;AAEb,IAAM,mBAAN,MAAuB;AAAA,EACpB;AAAA,EACA;AAAA,EACA;AAAA,EAER,YAAY,QAA0B;AACpC,UAAM,UAAU,eAAe;AAAA,MAC7B,QAAQ,OAAO;AAAA,MACf,SAAS,OAAO;AAAA,MAChB,QAAQ,OAAO;AAAA,IACjB,CAAC;AAED,SAAK,UAAU,OAAO,WAAW;AACjC,SAAK,eAAe,OAAO;AAE3B,SAAK,OAAO,aAAAA,QAAM,OAAO;AAAA,MACvB,SAAS;AAAA,MACT,SAAS,OAAO,WAAW;AAAA,MAC3B,SAAS;AAAA,QACP,eAAe,UAAU,OAAO,MAAM;AAAA,QACtC,gBAAgB;AAAA,QAChB,cAAc,6BAA6B,WAAW;AAAA,MACxD;AAAA,IACF,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAYA,MAAM,MAAM,MAAc,SAAwD;AAChF,UAAM,QAAQ,KAAK,IAAI;AACvB,UAAM,eAAe,SAAS,gBAAgB,KAAK,gBAAgB;AACnE,UAAM,OAAO,SAAS,UAAU,sBAAsB;AAEtD,UAAM,WAAW,MAAM,KAAK,KAAK,KAAK,MAAM;AAAA,MAC1C;AAAA,MACA,UAAU,SAAS,WAAW,KAAK;AAAA,MACnC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAMA,WAAW,SAAS,aAAa;AAAA,MACjC,uBAAuB;AAAA,MACvB,SAAS,SAAS,WAAW,EAAE,WAAW,QAAQ,SAAS,IAAI;AAAA,IACjE,CAAC;AAED,UAAM,OAAO,SAAS;AACtB,UAAM,mBAAmB,KAAK,IAAI,IAAI;AAEtC,UAAM,UAAU,KAAK,YAAY;AAEjC,WAAO;AAAA,MACL,SAAS,KAAK,YAAY;AAAA,MAC1B;AAAA,MACA,QAAQ,UAAU,SAAS;AAAA,MAC3B,aAAa,KAAK,cAAc,CAAC,GAAG,IAAI,CAAC,OAAgC;AAAA,QACvE,QAAS,EAAE,WAAsB;AAAA,QACjC,iBAAkB,EAAE,oBAA+B;AAAA,QACnD,UAAW,EAAE,YAAgD;AAAA,QAC7D,QAAS,EAAE,UAAqB;AAAA,QAChC,YAAa,EAAE,cAAyB;AAAA,QACxC,aAAa,EAAE;AAAA,MACjB,EAAE;AAAA,MACF,WAAW,KAAK,cAAc;AAAA,MAC9B,eAAe,KAAK,kBAAkB;AAAA,MACtC,gBAAgB,KAAK,mBAAmB,CAAC;AAAA,MACzC,YAAY,KAAK,eAAe;AAAA,MAChC,cAAc,KAAK;AAAA,MACnB,aAAa,KAAK,iBAAiB;AAAA,MACnC,SAAS,KAAK,YAAY;AAAA,MAC1B,UAAU,KAAK,aAAa;AAAA,MAC5B,WAAW,KAAK;AAAA,MAChB;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAM,kBACJ,MACA,SAC4B;AAC5B,UAAM,QAAQ,KAAK,IAAI;AAGvB,UAAM,eAAe,SAAS,gBAAgB,KAAK,gBAAgB;AAEnE,UAAM,WAAW,MAAM,KAAK,KAAK,KAAK,0BAA0B;AAAA,MAC9D,YAAY;AAAA,MACZ,UAAU,SAAS,WAAW,KAAK;AAAA,MACnC;AAAA,MACA,WAAW,SAAS,aAAa;AAAA,MACjC,WAAW,SAAS;AAAA,IACtB,CAAC;AAED,UAAM,OAAO,SAAS;AAEtB,WAAO;AAAA,MACL,SAAS,KAAK,YAAY;AAAA,MAC1B,QAAQ,KAAK,4BAA4B,SAAS,SAAS;AAAA,MAC3D,aAAa,KAAK,cAAc,CAAC,GAAG,IAAI,CAAC,OAAgC;AAAA,QACvE,QAAS,EAAE,WAAsB;AAAA,QACjC,UAAW,EAAE,YAAiD;AAAA,QAC9D,YAAa,EAAE,cAAyB;AAAA,QACxC,aAAc,EAAE,eAA0B;AAAA,QAC1C,SAAS,EAAE;AAAA,QACX,aAAa,EAAE;AAAA,MACjB,EAAE;AAAA,MACF,WAAW,KAAK,sBAAsB;AAAA,MACtC;AAAA,MACA,kBAAkB,KAAK,IAAI,IAAI;AAAA,IACjC;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,oBAAoB,OAAyD;AACjF,UAAM,WAAW,MAAM,KAAK,KAAK,KAAK,iCAAiC;AAAA,MACrE,eAAe,MAAM;AAAA,MACrB,cAAc,MAAM,cAChB;AAAA,QACE,UAAU,MAAM,YAAY;AAAA,QAC5B,UAAU,MAAM,YAAY;AAAA,QAC5B,aAAa,MAAM,YAAY;AAAA,MACjC,IACA;AAAA,MACJ,gBAAgB,MAAM,gBAClB;AAAA,QACE,OAAO,MAAM,cAAc;AAAA,QAC3B,QAAQ,MAAM,cAAc;AAAA,QAC5B,gBAAgB,MAAM,cAAc;AAAA,QACpC,iBAAiB,MAAM,cAAc;AAAA,MACvC,IACA;AAAA,MACJ,cAAc,MAAM,gBAAgB;AAAA,IACtC,CAAC;AAED,UAAM,OAAO,SAAS;AACtB,WAAO;AAAA,MACL,iBAAiB,KAAK;AAAA,MACtB,UAAU,KAAK;AAAA,MACf,aAAa,KAAK,cAAc,CAAC,GAAG,IAAI,CAAC,OAAgC;AAAA,QACvE,QAAQ,EAAE;AAAA,QACV,SAAS,EAAE;AAAA,QACX,aAAa,EAAE;AAAA,QACf,gBAAgB,EAAE;AAAA,MACpB,EAAE;AAAA,MACF,qBAAqB,KAAK,wBAAwB,CAAC;AAAA,MACnD,iBAAiB,KAAK,sBAAsB;AAAA,MAC5C,mBAAmB,KAAK,sBAAsB;AAAA,IAChD;AAAA,EACF;AACF;;;AC1NO,IAAM,kBAAN,cAA8B,MAAM;AAAA,EAClC;AAAA,EAEP,YAAY,SAAiB,YAAmC;AAC9D,UAAM,OAAO;AACb,SAAK,OAAO;AACZ,SAAK,aAAa;AAAA,EACpB;AACF;AAOO,SAAS,eACd,cACA,UACA,SAMG;AACH,QAAM,OAAO;AAAA,IACX,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,kBAAkB;AAAA,IAClB,GAAG;AAAA,EACL;AAEA,QAAM,OAAO,aAAa;AAC1B,MAAI,CAAC,QAAQ,CAAC,KAAK,aAAa;AAC9B,WAAO;AAAA,EACT;AAEA,QAAM,cAAc,KAAK;AACzB,QAAM,iBAAiB,YAAY;AAEnC,MAAI,OAAO,mBAAmB,YAAY;AACxC,WAAO;AAAA,EACT;AAEA,cAAY,SAAS,kBAAmB,MAAiB;AACvD,UAAM,SAAS,KAAK,CAAC;AAErB,QAAI,KAAK,cAAc,QAAQ,UAAU;AACvC,YAAM,WAAW,OAAO;AAIxB,iBAAW,WAAW,UAAU;AAC9B,YAAI,QAAQ,SAAS,OAAQ;AAC7B,mBAAW,QAAQ,YAAY,QAAQ,OAAO,GAAG;AAC/C,gBAAM,SAAS,MAAM,SAAS,MAAM,MAAM;AAAA,YACxC,WAAW;AAAA,YACX,cAAc,KAAK;AAAA,UACrB,CAAC;AACD,cAAI,CAAC,OAAO,WAAW,KAAK,kBAAkB;AAC5C,kBAAM,IAAI;AAAA,cACR,kCAAkC,OAAO,WAAW,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,IAAI,CAAC;AAAA,cACnF,OAAO;AAAA,YACT;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAEA,UAAM,WAAW,MAAM,eAAe,MAAM,MAAM,IAAI;AAEtD,QAAI,KAAK,aAAa;AAIpB,iBAAW,QAAQ,sBAAsB,QAAQ,GAAG;AAClD,cAAM,SAAS,MAAM,SAAS,MAAM,MAAM;AAAA,UACxC,WAAW;AAAA,UACX,cAAc,KAAK;AAAA,QACrB,CAAC;AACD,YAAI,CAAC,OAAO,WAAW,KAAK,kBAAkB;AAC5C,gBAAM,IAAI;AAAA,YACR,yCAAyC,OAAO,WAAW,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,IAAI,CAAC;AAAA,YAC1F,OAAO;AAAA,UACT;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAEA,WAAO;AAAA,EACT;AAEA,SAAO;AACT;AASA,SAAS,YAAY,SAA4B;AAC/C,MAAI,OAAO,YAAY,UAAU;AAC/B,WAAO,QAAQ,KAAK,IAAI,CAAC,OAAO,IAAI,CAAC;AAAA,EACvC;AACA,MAAI,MAAM,QAAQ,OAAO,GAAG;AAC1B,WAAO,QACJ,IAAI,CAAC,SAAS;AACb,UAAI,OAAO,SAAS,SAAU,QAAO;AACrC,YAAM,IAAI;AACV,aAAO,KAAK,OAAO,EAAE,SAAS,WAAW,EAAE,OAAO;AAAA,IACpD,CAAC,EACA,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,CAAC;AAAA,EACtC;AACA,SAAO,CAAC;AACV;AAGA,SAAS,sBAAsB,UAA6B;AAC1D,QAAM,IAAI;AACV,MAAI,CAAC,GAAG,QAAS,QAAO,CAAC;AACzB,SAAO,EAAE,QAAQ,QAAQ,CAAC,WAAW,YAAY,QAAQ,SAAS,OAAO,CAAC;AAC5E;","names":["axios"]}

package/dist/index.mjs

@@ -5,18 +5,46 @@ import {
 
 // src/client.ts
 import axios from "axios";
-var DEFAULT_BASE_URL = "https://api.complyedge.io";
-var SDK_VERSION = "0.2.0";
+var REGION_BASE_URLS = {
+  us: "https://api.complyedge.io",
+  eu: "https://eu.api.complyedge.io"
+};
+function regionFromApiKey(apiKey) {
+  if (!apiKey) return void 0;
+  if (apiKey.startsWith("ce_eu_")) return "eu";
+  if (apiKey.startsWith("ce_")) return "us";
+  return void 0;
+}
+function resolveBaseUrl(opts) {
+  if (opts.baseUrl) return opts.baseUrl.replace(/\/+$/, "");
+  const envUrl = process.env.COMPLYEDGE_API_URL;
+  if (envUrl) return envUrl.replace(/\/+$/, "");
+  const chosen = (opts.region || process.env.COMPLYEDGE_REGION || "").trim().toLowerCase();
+  if (chosen) {
+    if (!(chosen in REGION_BASE_URLS)) {
+      throw new Error(
+        `Unknown ComplyEdge region "${chosen}"; expected one of ${Object.keys(REGION_BASE_URLS).join(", ")}`
+      );
+    }
+    return REGION_BASE_URLS[chosen];
+  }
+  return REGION_BASE_URLS[regionFromApiKey(opts.apiKey) || "eu"];
+}
+var SDK_VERSION = "0.2.5";
 var ComplyEdgeClient = class {
   http;
   agentId;
   jurisdiction;
   constructor(config) {
-    const baseUrl = config.baseUrl || process.env.COMPLYEDGE_API_URL || DEFAULT_BASE_URL;
+    const baseUrl = resolveBaseUrl({
+      apiKey: config.apiKey,
+      baseUrl: config.baseUrl,
+      region: config.region
+    });
     this.agentId = config.agentId || "default";
     this.jurisdiction = config.jurisdiction;
     this.http = axios.create({
-      baseURL: baseUrl.replace(/\/+$/, ""),
+      baseURL: baseUrl,
       timeout: config.timeout || 3e4,
       headers: {
         Authorization: `Bearer ${config.apiKey}`,
@@ -31,11 +59,15 @@ var ComplyEdgeClient = class {
    * Calls POST /v1/check: the deterministic OPA hot path. A decision here is
    * evaluated against the Rego rule bundle, returns article-cited violations,
    * and is written to the Article 12 audit trail (`auditLogged`).
+   *
+   * With `context.sandbox: true` it calls POST /v1/sandbox/check instead:
+   * same verdict, nothing recorded (`auditLogged` false, `sandbox` true).
    */
   async check(text, context) {
     const start = Date.now();
     const jurisdiction = context?.jurisdiction || this.jurisdiction || "EU";
-    const response = await this.http.post("/v1/check", {
+    const path = context?.sandbox ? "/v1/sandbox/check" : "/v1/check";
+    const response = await this.http.post(path, {
       text,
       agent_id: context?.agentId || this.agentId,
       jurisdiction,
@@ -50,7 +82,7 @@ var ComplyEdgeClient = class {
     });
     const data = response.data;
     const processingTimeMs = Date.now() - start;
-    const allowed = data.allowed !== false;
+    const allowed = data.allowed === true;
     return {
       eventId: data.event_id || "",
       allowed,
@@ -68,7 +100,8 @@ var ComplyEdgeClient = class {
       evaluatedRules: data.evaluated_rules || [],
       enginePath: data.engine_path || "opa",
       opaLatencyMs: data.opa_latency_ms,
-      auditLogged: data.audit_logged !== false,
+      auditLogged: data.audit_logged === true,
+      sandbox: data.sandbox === true,
       textHash: data.text_hash || "",
       timestamp: data.timestamp,
       jurisdiction,
@@ -147,6 +180,9 @@ var ComplyEdgeClient = class {
 export {
   ComplianceError,
   ComplyEdgeClient,
+  REGION_BASE_URLS,
+  regionFromApiKey,
+  resolveBaseUrl,
   withCompliance
 };
 //# sourceMappingURL=index.mjs.map

package/dist/index.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/client.ts"],"sourcesContent":["/**\n * ComplyEdge TypeScript SDK — Client\n */\n\nimport axios, { AxiosInstance } from \"axios\";\nimport type {\n  ComplyEdgeConfig,\n  ComplianceContext,\n  ComplianceResult,\n  ComplianceViolation,\n  SensitivityDetection,\n  SensitivityResult,\n  PreDeploymentInput,\n  PreDeploymentResult,\n} from \"./types\";\n\nconst DEFAULT_BASE_URL = \"https://api.complyedge.io\";\n// Keep in sync with package.json. Hardcoding it here meant the User-Agent\n// silently reported a stale version after every release bump, which is the\n// one field support uses to tell which client a customer is actually on.\nconst SDK_VERSION = \"0.2.0\";\n\nexport class ComplyEdgeClient {\n  private http: AxiosInstance;\n  private agentId: string;\n  private jurisdiction?: string;\n\n  constructor(config: ComplyEdgeConfig) {\n    const baseUrl = config.baseUrl || process.env.COMPLYEDGE_API_URL || DEFAULT_BASE_URL;\n\n    this.agentId = config.agentId || \"default\";\n    this.jurisdiction = config.jurisdiction;\n\n    this.http = axios.create({\n      baseURL: baseUrl.replace(/\\/+$/, \"\"),\n      timeout: config.timeout || 30_000,\n      headers: {\n        Authorization: `Bearer ${config.apiKey}`,\n        \"Content-Type\": \"application/json\",\n        \"User-Agent\": `complyedge-typescript-sdk/${SDK_VERSION}`,\n      },\n    });\n  }\n\n  /**\n   * Run a compliance check on text input.\n   *\n   * Calls POST /v1/check: the deterministic OPA hot path. A decision here is\n   * evaluated against the Rego rule bundle, returns article-cited violations,\n   * and is written to the Article 12 audit trail (`auditLogged`).\n   */\n  async check(text: string, context?: ComplianceContext): Promise<ComplianceResult> {\n    const start = Date.now();\n    const jurisdiction = context?.jurisdiction || this.jurisdiction || \"EU\";\n\n    const response = await this.http.post(\"/v1/check\", {\n      text,\n      agent_id: context?.agentId || this.agentId,\n      jurisdiction,\n      // Pass the caller's direction through untouched. This previously mapped\n      // \"prompt\" to \"input\", a value the API's DirectionType enum does not\n      // accept (\"prompt\" | \"output\"), so every input check 422'd and the\n      // wrapped call threw. The SDK's own ComplianceContext type has always\n      // declared the correct union; only this line disagreed with it.\n      direction: context?.direction ?? \"output\",\n      use_semantic_fallback: false,\n      context: context?.userRole ? { user_role: context.userRole } : undefined,\n    });\n\n    const data = response.data;\n    const processingTimeMs = Date.now() - start;\n    const allowed = data.allowed !== false;\n\n    return {\n      eventId: data.event_id || \"\",\n      allowed,\n      status: allowed ? \"safe\" : \"violation\",\n      violations: (data.violations || []).map((v: Record<string, unknown>) => ({\n        ruleId: (v.rule_id as string) || \"\",\n        ruleDescription: (v.rule_description as string) || \"\",\n        severity: (v.severity as ComplianceViolation[\"severity\"]) || \"medium\",\n        reason: (v.reason as string) || \"\",\n        confidence: (v.confidence as number) ?? 1.0,\n        textExcerpt: v.text_excerpt as string | undefined,\n      })),\n      latencyMs: data.latency_ms || 0,\n      bundleVersion: data.bundle_version || \"\",\n      evaluatedRules: data.evaluated_rules || [],\n      enginePath: data.engine_path || \"opa\",\n      opaLatencyMs: data.opa_latency_ms,\n      auditLogged: data.audit_logged !== false,\n      textHash: data.text_hash || \"\",\n      timestamp: data.timestamp,\n      jurisdiction,\n      processingTimeMs,\n    };\n  }\n\n  /**\n   * Run proactive sensitivity detection on user input.\n   *\n   * Calls POST /v1/sensitivity/detect, which deliberately stays on the legacy\n   * TrustLint + LLM pipeline. It does NOT run OPA and does NOT write the\n   * Article 12 audit trail. Use `check()` for runtime EU AI Act enforcement.\n   */\n  async detectSensitivity(\n    text: string,\n    context?: ComplianceContext\n  ): Promise<SensitivityResult> {\n    const start = Date.now();\n    // \"EU\" matches the Python SDK and the server default. This read \"US\",\n    // so the two SDKs enforced different rule sets for identical code.\n    const jurisdiction = context?.jurisdiction || this.jurisdiction || \"EU\";\n\n    const response = await this.http.post(\"/v1/sensitivity/detect\", {\n      input_text: text,\n      agent_id: context?.agentId || this.agentId,\n      jurisdiction,\n      direction: context?.direction || \"prompt\",\n      user_role: context?.userRole,\n    });\n\n    const data = response.data;\n\n    return {\n      eventId: data.event_id || \"\",\n      status: data.overall_risk_assessment === \"safe\" ? \"safe\" : \"violation\",\n      detections: (data.detections || []).map((d: Record<string, unknown>) => ({\n        ruleId: (d.rule_id as string) || \"\",\n        severity: (d.severity as SensitivityDetection[\"severity\"]) || \"medium\",\n        regulation: (d.regulation as string) || \"\",\n        description: (d.description as string) || \"\",\n        article: d.article as string | undefined,\n        remediation: d.remediation as string | undefined,\n      })),\n      riskScore: data.overall_risk_score || 0,\n      jurisdiction,\n      processingTimeMs: Date.now() - start,\n    };\n  }\n\n  /**\n   * Run a pre-deployment assessment on an AI system configuration.\n   */\n  async assessPreDeployment(input: PreDeploymentInput): Promise<PreDeploymentResult> {\n    const response = await this.http.post(\"/v1/assessment/pre-deployment\", {\n      system_prompt: input.systemPrompt,\n      model_config: input.modelConfig\n        ? {\n            provider: input.modelConfig.provider,\n            model_id: input.modelConfig.modelId,\n            temperature: input.modelConfig.temperature,\n          }\n        : undefined,\n      agent_pipeline: input.agentPipeline\n        ? {\n            tools: input.agentPipeline.tools,\n            memory: input.agentPipeline.memory,\n            autonomy_level: input.agentPipeline.autonomyLevel,\n            human_oversight: input.agentPipeline.humanOversight,\n          }\n        : undefined,\n      jurisdiction: input.jurisdiction || \"EU\",\n    });\n\n    const data = response.data;\n    return {\n      complianceScore: data.compliance_score,\n      riskTier: data.risk_tier,\n      violations: (data.violations || []).map((v: Record<string, unknown>) => ({\n        ruleId: v.rule_id as string,\n        article: v.article as string,\n        description: v.description as string,\n        requiredAction: v.required_action as string,\n      })),\n      requiredDisclosures: data.required_disclosures || [],\n      euAiActCategory: data.eu_ai_act_category || \"\",\n      estimatedDeadline: data.estimated_deadline || \"\",\n    };\n  }\n}\n"],"mappings":";;;;;;AAIA,OAAO,WAA8B;AAYrC,IAAM,mBAAmB;AAIzB,IAAM,cAAc;AAEb,IAAM,mBAAN,MAAuB;AAAA,EACpB;AAAA,EACA;AAAA,EACA;AAAA,EAER,YAAY,QAA0B;AACpC,UAAM,UAAU,OAAO,WAAW,QAAQ,IAAI,sBAAsB;AAEpE,SAAK,UAAU,OAAO,WAAW;AACjC,SAAK,eAAe,OAAO;AAE3B,SAAK,OAAO,MAAM,OAAO;AAAA,MACvB,SAAS,QAAQ,QAAQ,QAAQ,EAAE;AAAA,MACnC,SAAS,OAAO,WAAW;AAAA,MAC3B,SAAS;AAAA,QACP,eAAe,UAAU,OAAO,MAAM;AAAA,QACtC,gBAAgB;AAAA,QAChB,cAAc,6BAA6B,WAAW;AAAA,MACxD;AAAA,IACF,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAM,MAAM,MAAc,SAAwD;AAChF,UAAM,QAAQ,KAAK,IAAI;AACvB,UAAM,eAAe,SAAS,gBAAgB,KAAK,gBAAgB;AAEnE,UAAM,WAAW,MAAM,KAAK,KAAK,KAAK,aAAa;AAAA,MACjD;AAAA,MACA,UAAU,SAAS,WAAW,KAAK;AAAA,MACnC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAMA,WAAW,SAAS,aAAa;AAAA,MACjC,uBAAuB;AAAA,MACvB,SAAS,SAAS,WAAW,EAAE,WAAW,QAAQ,SAAS,IAAI;AAAA,IACjE,CAAC;AAED,UAAM,OAAO,SAAS;AACtB,UAAM,mBAAmB,KAAK,IAAI,IAAI;AACtC,UAAM,UAAU,KAAK,YAAY;AAEjC,WAAO;AAAA,MACL,SAAS,KAAK,YAAY;AAAA,MAC1B;AAAA,MACA,QAAQ,UAAU,SAAS;AAAA,MAC3B,aAAa,KAAK,cAAc,CAAC,GAAG,IAAI,CAAC,OAAgC;AAAA,QACvE,QAAS,EAAE,WAAsB;AAAA,QACjC,iBAAkB,EAAE,oBAA+B;AAAA,QACnD,UAAW,EAAE,YAAgD;AAAA,QAC7D,QAAS,EAAE,UAAqB;AAAA,QAChC,YAAa,EAAE,cAAyB;AAAA,QACxC,aAAa,EAAE;AAAA,MACjB,EAAE;AAAA,MACF,WAAW,KAAK,cAAc;AAAA,MAC9B,eAAe,KAAK,kBAAkB;AAAA,MACtC,gBAAgB,KAAK,mBAAmB,CAAC;AAAA,MACzC,YAAY,KAAK,eAAe;AAAA,MAChC,cAAc,KAAK;AAAA,MACnB,aAAa,KAAK,iBAAiB;AAAA,MACnC,UAAU,KAAK,aAAa;AAAA,MAC5B,WAAW,KAAK;AAAA,MAChB;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAM,kBACJ,MACA,SAC4B;AAC5B,UAAM,QAAQ,KAAK,IAAI;AAGvB,UAAM,eAAe,SAAS,gBAAgB,KAAK,gBAAgB;AAEnE,UAAM,WAAW,MAAM,KAAK,KAAK,KAAK,0BAA0B;AAAA,MAC9D,YAAY;AAAA,MACZ,UAAU,SAAS,WAAW,KAAK;AAAA,MACnC;AAAA,MACA,WAAW,SAAS,aAAa;AAAA,MACjC,WAAW,SAAS;AAAA,IACtB,CAAC;AAED,UAAM,OAAO,SAAS;AAEtB,WAAO;AAAA,MACL,SAAS,KAAK,YAAY;AAAA,MAC1B,QAAQ,KAAK,4BAA4B,SAAS,SAAS;AAAA,MAC3D,aAAa,KAAK,cAAc,CAAC,GAAG,IAAI,CAAC,OAAgC;AAAA,QACvE,QAAS,EAAE,WAAsB;AAAA,QACjC,UAAW,EAAE,YAAiD;AAAA,QAC9D,YAAa,EAAE,cAAyB;AAAA,QACxC,aAAc,EAAE,eAA0B;AAAA,QAC1C,SAAS,EAAE;AAAA,QACX,aAAa,EAAE;AAAA,MACjB,EAAE;AAAA,MACF,WAAW,KAAK,sBAAsB;AAAA,MACtC;AAAA,MACA,kBAAkB,KAAK,IAAI,IAAI;AAAA,IACjC;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,oBAAoB,OAAyD;AACjF,UAAM,WAAW,MAAM,KAAK,KAAK,KAAK,iCAAiC;AAAA,MACrE,eAAe,MAAM;AAAA,MACrB,cAAc,MAAM,cAChB;AAAA,QACE,UAAU,MAAM,YAAY;AAAA,QAC5B,UAAU,MAAM,YAAY;AAAA,QAC5B,aAAa,MAAM,YAAY;AAAA,MACjC,IACA;AAAA,MACJ,gBAAgB,MAAM,gBAClB;AAAA,QACE,OAAO,MAAM,cAAc;AAAA,QAC3B,QAAQ,MAAM,cAAc;AAAA,QAC5B,gBAAgB,MAAM,cAAc;AAAA,QACpC,iBAAiB,MAAM,cAAc;AAAA,MACvC,IACA;AAAA,MACJ,cAAc,MAAM,gBAAgB;AAAA,IACtC,CAAC;AAED,UAAM,OAAO,SAAS;AACtB,WAAO;AAAA,MACL,iBAAiB,KAAK;AAAA,MACtB,UAAU,KAAK;AAAA,MACf,aAAa,KAAK,cAAc,CAAC,GAAG,IAAI,CAAC,OAAgC;AAAA,QACvE,QAAQ,EAAE;AAAA,QACV,SAAS,EAAE;AAAA,QACX,aAAa,EAAE;AAAA,QACf,gBAAgB,EAAE;AAAA,MACpB,EAAE;AAAA,MACF,qBAAqB,KAAK,wBAAwB,CAAC;AAAA,MACnD,iBAAiB,KAAK,sBAAsB;AAAA,MAC5C,mBAAmB,KAAK,sBAAsB;AAAA,IAChD;AAAA,EACF;AACF;","names":[]}
+{"version":3,"sources":["../src/client.ts"],"sourcesContent":["/**\n * ComplyEdge TypeScript SDK — Client\n */\n\nimport axios, { AxiosInstance } from \"axios\";\nimport type {\n  ComplyEdgeConfig,\n  ComplianceContext,\n  ComplianceResult,\n  ComplianceViolation,\n  SensitivityDetection,\n  SensitivityResult,\n  PreDeploymentInput,\n  PreDeploymentResult,\n} from \"./types\";\n\n// ComplyEdge runs one independent stack per region. A tenant lives in exactly\n// one of them, and its API keys are only valid there. The key itself says\n// which: `ce_eu_` -> EU (eu.api.complyedge.io, every new account), `ce_` -> US\n// (api.complyedge.io, the dormant stack; older keys only). No key or an\n// unknown prefix goes to EU: US creates no new tenants (2026-09-25).\nexport type Region = \"us\" | \"eu\";\n\nexport const REGION_BASE_URLS: Record<Region, string> = {\n  us: \"https://api.complyedge.io\",\n  eu: \"https://eu.api.complyedge.io\",\n};\n\n/** Region an API key was issued in, read from its prefix; undefined if unknown. */\nexport function regionFromApiKey(apiKey?: string): Region | undefined {\n  if (!apiKey) return undefined;\n  // Longest prefix first: `ce_eu_` also starts with `ce_`.\n  if (apiKey.startsWith(\"ce_eu_\")) return \"eu\";\n  if (apiKey.startsWith(\"ce_\")) return \"us\";\n  return undefined;\n}\n\n/**\n * Pick the API host. Precedence, highest first:\n *   1. `baseUrl` option\n *   2. `COMPLYEDGE_API_URL` environment variable\n *   3. `region` option, else `COMPLYEDGE_REGION` environment variable\n *   4. the region encoded in the API key prefix (`ce_eu_` -> EU, `ce_` -> US)\n *   5. EU\n */\nexport function resolveBaseUrl(opts: {\n  apiKey?: string;\n  baseUrl?: string;\n  region?: Region;\n}): string {\n  if (opts.baseUrl) return opts.baseUrl.replace(/\\/+$/, \"\");\n  const envUrl = process.env.COMPLYEDGE_API_URL;\n  if (envUrl) return envUrl.replace(/\\/+$/, \"\");\n  const chosen = (opts.region || process.env.COMPLYEDGE_REGION || \"\").trim().toLowerCase();\n  if (chosen) {\n    if (!(chosen in REGION_BASE_URLS)) {\n      throw new Error(\n        `Unknown ComplyEdge region \"${chosen}\"; expected one of ${Object.keys(REGION_BASE_URLS).join(\", \")}`\n      );\n    }\n    return REGION_BASE_URLS[chosen as Region];\n  }\n  return REGION_BASE_URLS[regionFromApiKey(opts.apiKey) || \"eu\"];\n}\n// Keep in sync with package.json. Hardcoding it here meant the User-Agent\n// silently reported a stale version after every release bump, which is the\n// one field support uses to tell which client a customer is actually on.\nconst SDK_VERSION = \"0.2.5\";\n\nexport class ComplyEdgeClient {\n  private http: AxiosInstance;\n  private agentId: string;\n  private jurisdiction?: string;\n\n  constructor(config: ComplyEdgeConfig) {\n    const baseUrl = resolveBaseUrl({\n      apiKey: config.apiKey,\n      baseUrl: config.baseUrl,\n      region: config.region,\n    });\n\n    this.agentId = config.agentId || \"default\";\n    this.jurisdiction = config.jurisdiction;\n\n    this.http = axios.create({\n      baseURL: baseUrl,\n      timeout: config.timeout || 30_000,\n      headers: {\n        Authorization: `Bearer ${config.apiKey}`,\n        \"Content-Type\": \"application/json\",\n        \"User-Agent\": `complyedge-typescript-sdk/${SDK_VERSION}`,\n      },\n    });\n  }\n\n  /**\n   * Run a compliance check on text input.\n   *\n   * Calls POST /v1/check: the deterministic OPA hot path. A decision here is\n   * evaluated against the Rego rule bundle, returns article-cited violations,\n   * and is written to the Article 12 audit trail (`auditLogged`).\n   *\n   * With `context.sandbox: true` it calls POST /v1/sandbox/check instead:\n   * same verdict, nothing recorded (`auditLogged` false, `sandbox` true).\n   */\n  async check(text: string, context?: ComplianceContext): Promise<ComplianceResult> {\n    const start = Date.now();\n    const jurisdiction = context?.jurisdiction || this.jurisdiction || \"EU\";\n    const path = context?.sandbox ? \"/v1/sandbox/check\" : \"/v1/check\";\n\n    const response = await this.http.post(path, {\n      text,\n      agent_id: context?.agentId || this.agentId,\n      jurisdiction,\n      // Pass the caller's direction through untouched. This previously mapped\n      // \"prompt\" to \"input\", a value the API's DirectionType enum does not\n      // accept (\"prompt\" | \"output\"), so every input check 422'd and the\n      // wrapped call threw. The SDK's own ComplianceContext type has always\n      // declared the correct union; only this line disagreed with it.\n      direction: context?.direction ?? \"output\",\n      use_semantic_fallback: false,\n      context: context?.userRole ? { user_role: context.userRole } : undefined,\n    });\n\n    const data = response.data;\n    const processingTimeMs = Date.now() - start;\n    // Missing `allowed` is a block. `!== false` treated a truncated 200 as a pass.\n    const allowed = data.allowed === true;\n\n    return {\n      eventId: data.event_id || \"\",\n      allowed,\n      status: allowed ? \"safe\" : \"violation\",\n      violations: (data.violations || []).map((v: Record<string, unknown>) => ({\n        ruleId: (v.rule_id as string) || \"\",\n        ruleDescription: (v.rule_description as string) || \"\",\n        severity: (v.severity as ComplianceViolation[\"severity\"]) || \"medium\",\n        reason: (v.reason as string) || \"\",\n        confidence: (v.confidence as number) ?? 1.0,\n        textExcerpt: v.text_excerpt as string | undefined,\n      })),\n      latencyMs: data.latency_ms || 0,\n      bundleVersion: data.bundle_version || \"\",\n      evaluatedRules: data.evaluated_rules || [],\n      enginePath: data.engine_path || \"opa\",\n      opaLatencyMs: data.opa_latency_ms,\n      auditLogged: data.audit_logged === true,\n      sandbox: data.sandbox === true,\n      textHash: data.text_hash || \"\",\n      timestamp: data.timestamp,\n      jurisdiction,\n      processingTimeMs,\n    };\n  }\n\n  /**\n   * Run proactive sensitivity detection on user input.\n   *\n   * Calls POST /v1/sensitivity/detect, which deliberately stays on the legacy\n   * TrustLint + LLM pipeline. It does NOT run OPA and does NOT write the\n   * Article 12 audit trail. Use `check()` for runtime EU AI Act enforcement.\n   */\n  async detectSensitivity(\n    text: string,\n    context?: ComplianceContext\n  ): Promise<SensitivityResult> {\n    const start = Date.now();\n    // \"EU\" matches the Python SDK and the server default. This read \"US\",\n    // so the two SDKs enforced different rule sets for identical code.\n    const jurisdiction = context?.jurisdiction || this.jurisdiction || \"EU\";\n\n    const response = await this.http.post(\"/v1/sensitivity/detect\", {\n      input_text: text,\n      agent_id: context?.agentId || this.agentId,\n      jurisdiction,\n      direction: context?.direction || \"prompt\",\n      user_role: context?.userRole,\n    });\n\n    const data = response.data;\n\n    return {\n      eventId: data.event_id || \"\",\n      status: data.overall_risk_assessment === \"safe\" ? \"safe\" : \"violation\",\n      detections: (data.detections || []).map((d: Record<string, unknown>) => ({\n        ruleId: (d.rule_id as string) || \"\",\n        severity: (d.severity as SensitivityDetection[\"severity\"]) || \"medium\",\n        regulation: (d.regulation as string) || \"\",\n        description: (d.description as string) || \"\",\n        article: d.article as string | undefined,\n        remediation: d.remediation as string | undefined,\n      })),\n      riskScore: data.overall_risk_score || 0,\n      jurisdiction,\n      processingTimeMs: Date.now() - start,\n    };\n  }\n\n  /**\n   * Run a pre-deployment assessment on an AI system configuration.\n   */\n  async assessPreDeployment(input: PreDeploymentInput): Promise<PreDeploymentResult> {\n    const response = await this.http.post(\"/v1/assessment/pre-deployment\", {\n      system_prompt: input.systemPrompt,\n      model_config: input.modelConfig\n        ? {\n            provider: input.modelConfig.provider,\n            model_id: input.modelConfig.modelId,\n            temperature: input.modelConfig.temperature,\n          }\n        : undefined,\n      agent_pipeline: input.agentPipeline\n        ? {\n            tools: input.agentPipeline.tools,\n            memory: input.agentPipeline.memory,\n            autonomy_level: input.agentPipeline.autonomyLevel,\n            human_oversight: input.agentPipeline.humanOversight,\n          }\n        : undefined,\n      jurisdiction: input.jurisdiction || \"EU\",\n    });\n\n    const data = response.data;\n    return {\n      complianceScore: data.compliance_score,\n      riskTier: data.risk_tier,\n      violations: (data.violations || []).map((v: Record<string, unknown>) => ({\n        ruleId: v.rule_id as string,\n        article: v.article as string,\n        description: v.description as string,\n        requiredAction: v.required_action as string,\n      })),\n      requiredDisclosures: data.required_disclosures || [],\n      euAiActCategory: data.eu_ai_act_category || \"\",\n      estimatedDeadline: data.estimated_deadline || \"\",\n    };\n  }\n}\n"],"mappings":";;;;;;AAIA,OAAO,WAA8B;AAmB9B,IAAM,mBAA2C;AAAA,EACtD,IAAI;AAAA,EACJ,IAAI;AACN;AAGO,SAAS,iBAAiB,QAAqC;AACpE,MAAI,CAAC,OAAQ,QAAO;AAEpB,MAAI,OAAO,WAAW,QAAQ,EAAG,QAAO;AACxC,MAAI,OAAO,WAAW,KAAK,EAAG,QAAO;AACrC,SAAO;AACT;AAUO,SAAS,eAAe,MAIpB;AACT,MAAI,KAAK,QAAS,QAAO,KAAK,QAAQ,QAAQ,QAAQ,EAAE;AACxD,QAAM,SAAS,QAAQ,IAAI;AAC3B,MAAI,OAAQ,QAAO,OAAO,QAAQ,QAAQ,EAAE;AAC5C,QAAM,UAAU,KAAK,UAAU,QAAQ,IAAI,qBAAqB,IAAI,KAAK,EAAE,YAAY;AACvF,MAAI,QAAQ;AACV,QAAI,EAAE,UAAU,mBAAmB;AACjC,YAAM,IAAI;AAAA,QACR,8BAA8B,MAAM,sBAAsB,OAAO,KAAK,gBAAgB,EAAE,KAAK,IAAI,CAAC;AAAA,MACpG;AAAA,IACF;AACA,WAAO,iBAAiB,MAAgB;AAAA,EAC1C;AACA,SAAO,iBAAiB,iBAAiB,KAAK,MAAM,KAAK,IAAI;AAC/D;AAIA,IAAM,cAAc;AAEb,IAAM,mBAAN,MAAuB;AAAA,EACpB;AAAA,EACA;AAAA,EACA;AAAA,EAER,YAAY,QAA0B;AACpC,UAAM,UAAU,eAAe;AAAA,MAC7B,QAAQ,OAAO;AAAA,MACf,SAAS,OAAO;AAAA,MAChB,QAAQ,OAAO;AAAA,IACjB,CAAC;AAED,SAAK,UAAU,OAAO,WAAW;AACjC,SAAK,eAAe,OAAO;AAE3B,SAAK,OAAO,MAAM,OAAO;AAAA,MACvB,SAAS;AAAA,MACT,SAAS,OAAO,WAAW;AAAA,MAC3B,SAAS;AAAA,QACP,eAAe,UAAU,OAAO,MAAM;AAAA,QACtC,gBAAgB;AAAA,QAChB,cAAc,6BAA6B,WAAW;AAAA,MACxD;AAAA,IACF,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAYA,MAAM,MAAM,MAAc,SAAwD;AAChF,UAAM,QAAQ,KAAK,IAAI;AACvB,UAAM,eAAe,SAAS,gBAAgB,KAAK,gBAAgB;AACnE,UAAM,OAAO,SAAS,UAAU,sBAAsB;AAEtD,UAAM,WAAW,MAAM,KAAK,KAAK,KAAK,MAAM;AAAA,MAC1C;AAAA,MACA,UAAU,SAAS,WAAW,KAAK;AAAA,MACnC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAMA,WAAW,SAAS,aAAa;AAAA,MACjC,uBAAuB;AAAA,MACvB,SAAS,SAAS,WAAW,EAAE,WAAW,QAAQ,SAAS,IAAI;AAAA,IACjE,CAAC;AAED,UAAM,OAAO,SAAS;AACtB,UAAM,mBAAmB,KAAK,IAAI,IAAI;AAEtC,UAAM,UAAU,KAAK,YAAY;AAEjC,WAAO;AAAA,MACL,SAAS,KAAK,YAAY;AAAA,MAC1B;AAAA,MACA,QAAQ,UAAU,SAAS;AAAA,MAC3B,aAAa,KAAK,cAAc,CAAC,GAAG,IAAI,CAAC,OAAgC;AAAA,QACvE,QAAS,EAAE,WAAsB;AAAA,QACjC,iBAAkB,EAAE,oBAA+B;AAAA,QACnD,UAAW,EAAE,YAAgD;AAAA,QAC7D,QAAS,EAAE,UAAqB;AAAA,QAChC,YAAa,EAAE,cAAyB;AAAA,QACxC,aAAa,EAAE;AAAA,MACjB,EAAE;AAAA,MACF,WAAW,KAAK,cAAc;AAAA,MAC9B,eAAe,KAAK,kBAAkB;AAAA,MACtC,gBAAgB,KAAK,mBAAmB,CAAC;AAAA,MACzC,YAAY,KAAK,eAAe;AAAA,MAChC,cAAc,KAAK;AAAA,MACnB,aAAa,KAAK,iBAAiB;AAAA,MACnC,SAAS,KAAK,YAAY;AAAA,MAC1B,UAAU,KAAK,aAAa;AAAA,MAC5B,WAAW,KAAK;AAAA,MAChB;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAM,kBACJ,MACA,SAC4B;AAC5B,UAAM,QAAQ,KAAK,IAAI;AAGvB,UAAM,eAAe,SAAS,gBAAgB,KAAK,gBAAgB;AAEnE,UAAM,WAAW,MAAM,KAAK,KAAK,KAAK,0BAA0B;AAAA,MAC9D,YAAY;AAAA,MACZ,UAAU,SAAS,WAAW,KAAK;AAAA,MACnC;AAAA,MACA,WAAW,SAAS,aAAa;AAAA,MACjC,WAAW,SAAS;AAAA,IACtB,CAAC;AAED,UAAM,OAAO,SAAS;AAEtB,WAAO;AAAA,MACL,SAAS,KAAK,YAAY;AAAA,MAC1B,QAAQ,KAAK,4BAA4B,SAAS,SAAS;AAAA,MAC3D,aAAa,KAAK,cAAc,CAAC,GAAG,IAAI,CAAC,OAAgC;AAAA,QACvE,QAAS,EAAE,WAAsB;AAAA,QACjC,UAAW,EAAE,YAAiD;AAAA,QAC9D,YAAa,EAAE,cAAyB;AAAA,QACxC,aAAc,EAAE,eAA0B;AAAA,QAC1C,SAAS,EAAE;AAAA,QACX,aAAa,EAAE;AAAA,MACjB,EAAE;AAAA,MACF,WAAW,KAAK,sBAAsB;AAAA,MACtC;AAAA,MACA,kBAAkB,KAAK,IAAI,IAAI;AAAA,IACjC;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,oBAAoB,OAAyD;AACjF,UAAM,WAAW,MAAM,KAAK,KAAK,KAAK,iCAAiC;AAAA,MACrE,eAAe,MAAM;AAAA,MACrB,cAAc,MAAM,cAChB;AAAA,QACE,UAAU,MAAM,YAAY;AAAA,QAC5B,UAAU,MAAM,YAAY;AAAA,QAC5B,aAAa,MAAM,YAAY;AAAA,MACjC,IACA;AAAA,MACJ,gBAAgB,MAAM,gBAClB;AAAA,QACE,OAAO,MAAM,cAAc;AAAA,QAC3B,QAAQ,MAAM,cAAc;AAAA,QAC5B,gBAAgB,MAAM,cAAc;AAAA,QACpC,iBAAiB,MAAM,cAAc;AAAA,MACvC,IACA;AAAA,MACJ,cAAc,MAAM,gBAAgB;AAAA,IACtC,CAAC;AAED,UAAM,OAAO,SAAS;AACtB,WAAO;AAAA,MACL,iBAAiB,KAAK;AAAA,MACtB,UAAU,KAAK;AAAA,MACf,aAAa,KAAK,cAAc,CAAC,GAAG,IAAI,CAAC,OAAgC;AAAA,QACvE,QAAQ,EAAE;AAAA,QACV,SAAS,EAAE;AAAA,QACX,aAAa,EAAE;AAAA,QACf,gBAAgB,EAAE;AAAA,MACpB,EAAE;AAAA,MACF,qBAAqB,KAAK,wBAAwB,CAAC;AAAA,MACnD,iBAAiB,KAAK,sBAAsB;AAAA,MAC5C,mBAAmB,KAAK,sBAAsB;AAAA,IAChD;AAAA,EACF;AACF;","names":[]}

package/dist/openai-middleware.d.mts

@@ -7,6 +7,12 @@ interface ComplianceContext {
     jurisdiction?: string;
     userRole?: string;
     direction?: "prompt" | "output";
+    /**
+     * Evaluate without recording: POST /v1/sandbox/check. Same rules, same
+     * tenant settings, same verdict as /v1/check; no audit entry, no usage,
+     * no rate-limit count. For trying cases, never for production traffic.
+     */
+    sandbox?: boolean;
 }
 type SeverityLevel = "critical" | "high" | "medium" | "low" | "informational";
 interface ComplianceViolation {
@@ -33,6 +39,8 @@ interface ComplianceResult {
     enginePath: string;
     opaLatencyMs?: number;
     auditLogged: boolean;
+    /** True when the decision came from /v1/sandbox/check. Never evidence. */
+    sandbox: boolean;
     /**
      * SHA-256 of the evaluated text as a bare hex digest, byte-identical to this
      * event's Article 12 audit entry. Binds the decision to its exact input
@@ -95,7 +103,13 @@ interface PreDeploymentResult {
 }
 interface ComplyEdgeConfig {
     apiKey: string;
+    /** Overrides region and key inference. Also settable via COMPLYEDGE_API_URL. */
     baseUrl?: string;
+    /**
+     * "us" | "eu". Defaults to the region encoded in the API key prefix
+     * (`ce_eu_` -> EU), else US. Also settable via COMPLYEDGE_REGION.
+     */
+    region?: "us" | "eu";
     agentId?: string;
     jurisdiction?: string;
     timeout?: number;
@@ -105,6 +119,23 @@ interface ComplyEdgeConfig {
  * ComplyEdge TypeScript SDK — Client
  */
 
+type Region = "us" | "eu";
+declare const REGION_BASE_URLS: Record<Region, string>;
+/** Region an API key was issued in, read from its prefix; undefined if unknown. */
+declare function regionFromApiKey(apiKey?: string): Region | undefined;
+/**
+ * Pick the API host. Precedence, highest first:
+ *   1. `baseUrl` option
+ *   2. `COMPLYEDGE_API_URL` environment variable
+ *   3. `region` option, else `COMPLYEDGE_REGION` environment variable
+ *   4. the region encoded in the API key prefix (`ce_eu_` -> EU, `ce_` -> US)
+ *   5. EU
+ */
+declare function resolveBaseUrl(opts: {
+    apiKey?: string;
+    baseUrl?: string;
+    region?: Region;
+}): string;
 declare class ComplyEdgeClient {
     private http;
     private agentId;
@@ -116,6 +147,9 @@ declare class ComplyEdgeClient {
      * Calls POST /v1/check: the deterministic OPA hot path. A decision here is
      * evaluated against the Rego rule bundle, returns article-cited violations,
      * and is written to the Article 12 audit trail (`auditLogged`).
+     *
+     * With `context.sandbox: true` it calls POST /v1/sandbox/check instead:
+     * same verdict, nothing recorded (`auditLogged` false, `sandbox` true).
      */
     check(text: string, context?: ComplianceContext): Promise<ComplianceResult>;
     /**
@@ -164,4 +198,4 @@ declare function withCompliance<T extends Record<string, unknown>>(openaiClient:
     blockOnViolation?: boolean;
 }): T;
 
-export { ComplyEdgeClient as C, ComplianceError, type PreDeploymentInput as P, type SeverityLevel as S, type ComplyEdgeConfig as a, type ComplianceContext as b, type ComplianceResult as c, type ComplianceViolation as d, type SensitivityResult as e, type SensitivityDetection as f, type PreDeploymentResult as g, withCompliance };
+export { ComplyEdgeClient as C, ComplianceError, type PreDeploymentInput as P, REGION_BASE_URLS as R, type SeverityLevel as S, resolveBaseUrl as a, type Region as b, type ComplyEdgeConfig as c, type ComplianceContext as d, type ComplianceResult as e, type ComplianceViolation as f, type SensitivityResult as g, type SensitivityDetection as h, type PreDeploymentResult as i, regionFromApiKey as r, withCompliance };

package/dist/openai-middleware.d.ts

@@ -7,6 +7,12 @@ interface ComplianceContext {
     jurisdiction?: string;
     userRole?: string;
     direction?: "prompt" | "output";
+    /**
+     * Evaluate without recording: POST /v1/sandbox/check. Same rules, same
+     * tenant settings, same verdict as /v1/check; no audit entry, no usage,
+     * no rate-limit count. For trying cases, never for production traffic.
+     */
+    sandbox?: boolean;
 }
 type SeverityLevel = "critical" | "high" | "medium" | "low" | "informational";
 interface ComplianceViolation {
@@ -33,6 +39,8 @@ interface ComplianceResult {
     enginePath: string;
     opaLatencyMs?: number;
     auditLogged: boolean;
+    /** True when the decision came from /v1/sandbox/check. Never evidence. */
+    sandbox: boolean;
     /**
      * SHA-256 of the evaluated text as a bare hex digest, byte-identical to this
      * event's Article 12 audit entry. Binds the decision to its exact input
@@ -95,7 +103,13 @@ interface PreDeploymentResult {
 }
 interface ComplyEdgeConfig {
     apiKey: string;
+    /** Overrides region and key inference. Also settable via COMPLYEDGE_API_URL. */
     baseUrl?: string;
+    /**
+     * "us" | "eu". Defaults to the region encoded in the API key prefix
+     * (`ce_eu_` -> EU), else US. Also settable via COMPLYEDGE_REGION.
+     */
+    region?: "us" | "eu";
     agentId?: string;
     jurisdiction?: string;
     timeout?: number;
@@ -105,6 +119,23 @@ interface ComplyEdgeConfig {
  * ComplyEdge TypeScript SDK — Client
  */
 
+type Region = "us" | "eu";
+declare const REGION_BASE_URLS: Record<Region, string>;
+/** Region an API key was issued in, read from its prefix; undefined if unknown. */
+declare function regionFromApiKey(apiKey?: string): Region | undefined;
+/**
+ * Pick the API host. Precedence, highest first:
+ *   1. `baseUrl` option
+ *   2. `COMPLYEDGE_API_URL` environment variable
+ *   3. `region` option, else `COMPLYEDGE_REGION` environment variable
+ *   4. the region encoded in the API key prefix (`ce_eu_` -> EU, `ce_` -> US)
+ *   5. EU
+ */
+declare function resolveBaseUrl(opts: {
+    apiKey?: string;
+    baseUrl?: string;
+    region?: Region;
+}): string;
 declare class ComplyEdgeClient {
     private http;
     private agentId;
@@ -116,6 +147,9 @@ declare class ComplyEdgeClient {
      * Calls POST /v1/check: the deterministic OPA hot path. A decision here is
      * evaluated against the Rego rule bundle, returns article-cited violations,
      * and is written to the Article 12 audit trail (`auditLogged`).
+     *
+     * With `context.sandbox: true` it calls POST /v1/sandbox/check instead:
+     * same verdict, nothing recorded (`auditLogged` false, `sandbox` true).
      */
     check(text: string, context?: ComplianceContext): Promise<ComplianceResult>;
     /**
@@ -164,4 +198,4 @@ declare function withCompliance<T extends Record<string, unknown>>(openaiClient:
     blockOnViolation?: boolean;
 }): T;
 
-export { ComplyEdgeClient as C, ComplianceError, type PreDeploymentInput as P, type SeverityLevel as S, type ComplyEdgeConfig as a, type ComplianceContext as b, type ComplianceResult as c, type ComplianceViolation as d, type SensitivityResult as e, type SensitivityDetection as f, type PreDeploymentResult as g, withCompliance };
+export { ComplyEdgeClient as C, ComplianceError, type PreDeploymentInput as P, REGION_BASE_URLS as R, type SeverityLevel as S, resolveBaseUrl as a, type Region as b, type ComplyEdgeConfig as c, type ComplianceContext as d, type ComplianceResult as e, type ComplianceViolation as f, type SensitivityResult as g, type SensitivityDetection as h, type PreDeploymentResult as i, regionFromApiKey as r, withCompliance };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@complyedge/sdk",
-  "version": "0.2.3",
+  "version": "0.2.5",
   "description": "EU AI Act runtime enforcement SDK: OPA/Rego policy checks, Article 12 audit trails, risk assessment, and OpenAI middleware.",
   "publishConfig": {
     "access": "public"