@fluxpointstudios/orynq-sdk-flight-recorder 0.1.0

package/dist/types.d.ts

@@ -0,0 +1,284 @@
+/**
+ * Core types for the PoI Flight Recorder.
+ */
+export type TeeType = "sev-snp" | "tdx" | "sgx" | "nitro" | "gpu-cc";
+export type Visibility = "public" | "private" | "redacted";
+export interface EncryptionConfig {
+    algorithm: "aes-256-gcm" | "chacha20-poly1305";
+    keyDerivation: "hkdf-sha256";
+    keyMode: {
+        type: "ephemeral";
+    } | {
+        type: "sealed";
+        teeType: TeeType;
+    } | {
+        type: "wrapped";
+        pubkeys: string[];
+    };
+}
+export interface RecorderConfig {
+    agentId: string;
+    sessionId?: string;
+    chunkSizeBytes: number;
+    chunkTimeoutMs?: number;
+    encryption: EncryptionConfig;
+    storage: StorageAdapter;
+    attestor?: Attestor;
+    captureRuntime?: boolean;
+}
+export interface StorageAdapter {
+    readonly type: "local" | "ipfs" | "s3" | "arweave";
+    store(data: Uint8Array): Promise<StorageRef>;
+    storeManifest(manifest: ManifestV2): Promise<StorageRef>;
+    fetch(ref: StorageRef): Promise<Uint8Array>;
+    fetchManifest(ref: StorageRef): Promise<ManifestV2>;
+    verify(ref: StorageRef): Promise<boolean>;
+    delete?(ref: StorageRef): Promise<void>;
+    pin?(ref: StorageRef): Promise<void>;
+}
+export interface StorageRef {
+    type: "local" | "ipfs" | "s3" | "arweave";
+    uri: string;
+    hash: string;
+    size: number;
+}
+export interface Attestor {
+    readonly teeType: TeeType;
+    attest(hashToSign: string): Promise<AttestationBundle>;
+    getMeasurements(): Promise<Measurements>;
+    isAttested(): boolean;
+}
+export interface AttestationBundle {
+    teeType: TeeType;
+    teeVersion: string;
+    evidence: {
+        format: "raw" | "base64" | "cbor";
+        data?: string;
+        hash?: string;
+        storageUri?: string;
+    };
+    binding: {
+        hash: string;
+        hashType: "rootHash" | "manifestHash" | "merkleRoot";
+        timestamp: string;
+    };
+    verifierPolicy: VerifierPolicy;
+    attestorId: string;
+    attestorPubkey?: string;
+}
+export interface VerifierPolicy {
+    expectedMeasurements?: string[];
+    allowedSignerKeys?: string[];
+    minFirmwareVersion?: string;
+    minSvn?: number;
+    checkRevocation?: boolean;
+    revocationListUri?: string;
+}
+export interface Measurements {
+    firmwareVersion?: string;
+    sevSnp?: {
+        launchMeasurement: string;
+        guestPolicy: string;
+    };
+    tdx?: {
+        mrTd: string;
+        mrConfigId: string;
+        tdAttributes: string;
+    };
+    sgx?: {
+        mrEnclave: string;
+        mrSigner: string;
+        isvProdId: number;
+        isvSvn: number;
+    };
+    nitro?: {
+        pcrs: Record<number, string>;
+        moduleId: string;
+    };
+}
+export type RecorderEvent = InferenceStartEvent | InferenceEndEvent | ToolCallEvent | ToolResultEvent | StreamChunkEvent | DecisionEvent | ErrorEvent | CustomEvent;
+export interface BaseEvent {
+    seq: number;
+    ts: string;
+    spanId?: string;
+}
+export interface InferenceStartEvent extends BaseEvent {
+    kind: "inference:start";
+    requestId: string;
+    model: string;
+    promptHash: string;
+    systemPromptHash?: string;
+    params: InferenceParams;
+}
+export interface InferenceEndEvent extends BaseEvent {
+    kind: "inference:end";
+    requestId: string;
+    outputHash: string;
+    tokenCounts: {
+        prompt: number;
+        completion: number;
+    };
+    durationMs: number;
+}
+export interface ToolCallEvent extends BaseEvent {
+    kind: "tool:call";
+    toolName: string;
+    argsHash: string;
+    visibility: Visibility;
+}
+export interface ToolResultEvent extends BaseEvent {
+    kind: "tool:result";
+    toolName: string;
+    resultHash: string;
+    success: boolean;
+    visibility: Visibility;
+}
+export interface StreamChunkEvent extends BaseEvent {
+    kind: "stream:chunk";
+    chunkHash: string;
+    index: number;
+}
+export interface DecisionEvent extends BaseEvent {
+    kind: "decision";
+    decisionType: string;
+    choiceHash: string;
+    rationale?: string;
+}
+export interface ErrorEvent extends BaseEvent {
+    kind: "error";
+    errorType: string;
+    message: string;
+    recoverable: boolean;
+}
+export interface CustomEvent extends BaseEvent {
+    kind: "custom";
+    eventType: string;
+    dataHash: string;
+    metadata?: Record<string, unknown>;
+}
+export interface InferenceParams {
+    temperature?: number;
+    topP?: number;
+    topK?: number;
+    maxTokens?: number;
+    stopStrings?: string[];
+    frequencyPenalty?: number;
+    presencePenalty?: number;
+}
+export interface ChunkRef {
+    id: string;
+    hash: string;
+    size: number;
+    storageUri: string;
+    encryptionKeyId: string;
+    compression: "zstd" | "gzip" | "none";
+}
+export interface ChunkData {
+    ciphertext: Uint8Array;
+    nonce: Uint8Array;
+    tag: Uint8Array;
+    meta: {
+        index: number;
+        eventRange: [number, number];
+        spanIds: string[];
+        createdAt: string;
+    };
+}
+export interface ManifestV2 {
+    formatVersion: "2.0";
+    agentId: string;
+    sessionId: string;
+    rootHash: string;
+    merkleRoot: string;
+    manifestHash: string;
+    inputs: {
+        promptHash: string;
+        systemPromptHash?: string;
+        toolContextHash?: string;
+        encryptedCiphertextHashes?: string[];
+    };
+    params: {
+        model: string;
+        modelWeightDigest?: string;
+        tokenizerDigest?: string;
+        temperature?: number;
+        topP?: number;
+        topK?: number;
+        maxTokens?: number;
+        stopStrings?: string[];
+        frequencyPenalty?: number;
+        presencePenalty?: number;
+        toolPolicy?: Record<string, unknown>;
+    };
+    runtime: {
+        recorderVersion: string;
+        containerDigest?: string;
+        gitCommit?: string;
+        dependencies?: Record<string, string>;
+        gpuDriver?: string;
+        nodeVersion?: string;
+    };
+    chunks: ChunkRef[];
+    outputs: {
+        transcriptRollingHash: string;
+        toolCallCount: number;
+        totalTokens: number;
+        completionTokens: number;
+    };
+    attestation?: {
+        teeType: TeeType;
+        evidenceHash: string;
+        evidenceUri?: string;
+        verifierPolicy: VerifierPolicy;
+        boundHash: "rootHash" | "manifestHash" | "merkleRoot";
+    };
+    createdAt: string;
+    startedAt: string;
+    endedAt: string;
+    durationMs: number;
+    totalEvents: number;
+    totalSpans: number;
+}
+export interface RecordingSession {
+    sessionId: string;
+    agentId: string;
+    startedAt: string;
+    status: "recording" | "finalizing" | "finalized" | "aborted";
+}
+export interface RecordingResult {
+    rootHash: string;
+    merkleRoot: string;
+    manifestHash: string;
+    manifest: ManifestV2;
+    chunkRefs: ChunkRef[];
+    attestation?: AttestationBundle;
+    anchorEntry: AnchorEntry;
+}
+export interface AnchorEntry {
+    schema: "poi-anchor-v2";
+    rootHash: string;
+    merkleRoot: string;
+    manifestHash: string;
+    storageUri: string;
+    agentId: string;
+    sessionId: string;
+    timestamp: string;
+}
+export declare enum FlightRecorderError {
+    RECORDING_NOT_STARTED = 1001,
+    RECORDING_ALREADY_FINALIZED = 1002,
+    CHUNK_CREATION_FAILED = 1003,
+    ENCRYPTION_FAILED = 1004,
+    COMPRESSION_FAILED = 1005,
+    STORAGE_WRITE_FAILED = 2001,
+    STORAGE_READ_FAILED = 2002,
+    STORAGE_NOT_FOUND = 2003,
+    ATTESTATION_NOT_AVAILABLE = 3001,
+    ATTESTATION_FAILED = 3002
+}
+export declare class FlightRecorderException extends Error {
+    readonly code: FlightRecorderError;
+    readonly cause?: Error | undefined;
+    constructor(code: FlightRecorderError, message: string, cause?: Error | undefined);
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH,MAAM,MAAM,OAAO,GAAG,SAAS,GAAG,KAAK,GAAG,KAAK,GAAG,OAAO,GAAG,QAAQ,CAAC;AAIrE,MAAM,MAAM,UAAU,GAAG,QAAQ,GAAG,SAAS,GAAG,UAAU,CAAC;AAI3D,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,aAAa,GAAG,mBAAmB,CAAC;IAC/C,aAAa,EAAE,aAAa,CAAC;IAC7B,OAAO,EACH;QAAE,IAAI,EAAE,WAAW,CAAA;KAAE,GACrB;QAAE,IAAI,EAAE,QAAQ,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,GACpC;QAAE,IAAI,EAAE,SAAS,CAAC;QAAC,OAAO,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;CAC5C;AAID,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,UAAU,EAAE,gBAAgB,CAAC;IAC7B,OAAO,EAAE,cAAc,CAAC;IACxB,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAID,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IACnD,KAAK,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAC7C,aAAa,CAAC,QAAQ,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IACzD,KAAK,CAAC,GAAG,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAC5C,aAAa,CAAC,GAAG,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IACpD,MAAM,CAAC,GAAG,EAAE,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,CAAC,CAAC,GAAG,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxC,GAAG,CAAC,CAAC,GAAG,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACtC;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IAC1C,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AAID,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,MAAM,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACvD,eAAe,IAAI,OAAO,CAAC,YAAY,CAAC,CAAC;IACzC,UAAU,IAAI,OAAO,CAAC;CACvB;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE;QACR,MAAM,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;QAClC,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,CAAC;IACF,OAAO,EAAE;QACP,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,EAAE,UAAU,GAAG,cAAc,GAAG,YAAY,CAAC;QACrD,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;IACF,cAAc,EAAE,cAAc,CAAC;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,cAAc;IAC7B,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;IAChC,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,YAAY;IAC3B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,MAAM,CAAC,EAAE;QAAE,iBAAiB,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5D,GAAG,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,CAAC;IACjE,GAAG,CAAC,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IACjF,KAAK,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;CAC5D;AAID,MAAM,MAAM,aAAa,GACrB,mBAAmB,GACnB,iBAAiB,GACjB,aAAa,GACb,eAAe,GACf,gBAAgB,GAChB,aAAa,GACb,UAAU,GACV,WAAW,CAAC;AAEhB,MAAM,WAAW,SAAS;IACxB,GAAG,EAAE,MAAM,CAAC;IACZ,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,mBAAoB,SAAQ,SAAS;IACpD,IAAI,EAAE,iBAAiB,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,MAAM,EAAE,eAAe,CAAC;CACzB;AAED,MAAM,WAAW,iBAAkB,SAAQ,SAAS;IAClD,IAAI,EAAE,eAAe,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE;QACX,MAAM,EAAE,MAAM,CAAC;QACf,UAAU,EAAE,MAAM,CAAC;KACpB,CAAC;IACF,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,aAAc,SAAQ,SAAS;IAC9C,IAAI,EAAE,WAAW,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,UAAU,CAAC;CACxB;AAED,MAAM,WAAW,eAAgB,SAAQ,SAAS;IAChD,IAAI,EAAE,aAAa,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,EAAE,UAAU,CAAC;CACxB;AAED,MAAM,WAAW,gBAAiB,SAAQ,SAAS;IACjD,IAAI,EAAE,cAAc,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,aAAc,SAAQ,SAAS;IAC9C,IAAI,EAAE,UAAU,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,UAAW,SAAQ,SAAS;IAC3C,IAAI,EAAE,OAAO,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,WAAY,SAAQ,SAAS;IAC5C,IAAI,EAAE,QAAQ,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,eAAe;IAC9B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAID,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;CACvC;AAED,MAAM,WAAW,SAAS;IACxB,UAAU,EAAE,UAAU,CAAC;IACvB,KAAK,EAAE,UAAU,CAAC;IAClB,GAAG,EAAE,UAAU,CAAC;IAChB,IAAI,EAAE;QACJ,KAAK,EAAE,MAAM,CAAC;QACd,UAAU,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC7B,OAAO,EAAE,MAAM,EAAE,CAAC;QAClB,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;CACH;AAID,MAAM,WAAW,UAAU;IACzB,aAAa,EAAE,KAAK,CAAC;IAGrB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAGlB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IAGrB,MAAM,EAAE;QACN,UAAU,EAAE,MAAM,CAAC;QACnB,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAC1B,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,yBAAyB,CAAC,EAAE,MAAM,EAAE,CAAC;KACtC,CAAC;IAGF,MAAM,EAAE;QACN,KAAK,EAAE,MAAM,CAAC;QACd,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAC3B,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;QACvB,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAC1B,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KACtC,CAAC;IAGF,OAAO,EAAE;QACP,eAAe,EAAE,MAAM,CAAC;QACxB,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACtC,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC;IAGF,MAAM,EAAE,QAAQ,EAAE,CAAC;IAGnB,OAAO,EAAE;QACP,qBAAqB,EAAE,MAAM,CAAC;QAC9B,aAAa,EAAE,MAAM,CAAC;QACtB,WAAW,EAAE,MAAM,CAAC;QACpB,gBAAgB,EAAE,MAAM,CAAC;KAC1B,CAAC;IAGF,WAAW,CAAC,EAAE;QACZ,OAAO,EAAE,OAAO,CAAC;QACjB,YAAY,EAAE,MAAM,CAAC;QACrB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,cAAc,EAAE,cAAc,CAAC;QAC/B,SAAS,EAAE,UAAU,GAAG,cAAc,GAAG,YAAY,CAAC;KACvD,CAAC;IAGF,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IAGnB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;CACpB;AAID,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,WAAW,GAAG,YAAY,GAAG,WAAW,GAAG,SAAS,CAAC;CAC9D;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,UAAU,CAAC;IACrB,SAAS,EAAE,QAAQ,EAAE,CAAC;IACtB,WAAW,CAAC,EAAE,iBAAiB,CAAC;IAChC,WAAW,EAAE,WAAW,CAAC;CAC1B;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,eAAe,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAID,oBAAY,mBAAmB;IAC7B,qBAAqB,OAAO;IAC5B,2BAA2B,OAAO;IAClC,qBAAqB,OAAO;IAC5B,iBAAiB,OAAO;IACxB,kBAAkB,OAAO;IACzB,oBAAoB,OAAO;IAC3B,mBAAmB,OAAO;IAC1B,iBAAiB,OAAO;IACxB,yBAAyB,OAAO;IAChC,kBAAkB,OAAO;CAC1B;AAED,qBAAa,uBAAwB,SAAQ,KAAK;aAE9B,IAAI,EAAE,mBAAmB;aAEzB,KAAK,CAAC,EAAE,KAAK;gBAFb,IAAI,EAAE,mBAAmB,EACzC,OAAO,EAAE,MAAM,EACC,KAAK,CAAC,EAAE,KAAK,YAAA;CAKhC"}

package/dist/types.js

@@ -0,0 +1,28 @@
+/**
+ * Core types for the PoI Flight Recorder.
+ */
+// === Errors ===
+export var FlightRecorderError;
+(function (FlightRecorderError) {
+    FlightRecorderError[FlightRecorderError["RECORDING_NOT_STARTED"] = 1001] = "RECORDING_NOT_STARTED";
+    FlightRecorderError[FlightRecorderError["RECORDING_ALREADY_FINALIZED"] = 1002] = "RECORDING_ALREADY_FINALIZED";
+    FlightRecorderError[FlightRecorderError["CHUNK_CREATION_FAILED"] = 1003] = "CHUNK_CREATION_FAILED";
+    FlightRecorderError[FlightRecorderError["ENCRYPTION_FAILED"] = 1004] = "ENCRYPTION_FAILED";
+    FlightRecorderError[FlightRecorderError["COMPRESSION_FAILED"] = 1005] = "COMPRESSION_FAILED";
+    FlightRecorderError[FlightRecorderError["STORAGE_WRITE_FAILED"] = 2001] = "STORAGE_WRITE_FAILED";
+    FlightRecorderError[FlightRecorderError["STORAGE_READ_FAILED"] = 2002] = "STORAGE_READ_FAILED";
+    FlightRecorderError[FlightRecorderError["STORAGE_NOT_FOUND"] = 2003] = "STORAGE_NOT_FOUND";
+    FlightRecorderError[FlightRecorderError["ATTESTATION_NOT_AVAILABLE"] = 3001] = "ATTESTATION_NOT_AVAILABLE";
+    FlightRecorderError[FlightRecorderError["ATTESTATION_FAILED"] = 3002] = "ATTESTATION_FAILED";
+})(FlightRecorderError || (FlightRecorderError = {}));
+export class FlightRecorderException extends Error {
+    code;
+    cause;
+    constructor(code, message, cause) {
+        super(message);
+        this.code = code;
+        this.cause = cause;
+        this.name = "FlightRecorderException";
+    }
+}
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAgUH,iBAAiB;AAEjB,MAAM,CAAN,IAAY,mBAWX;AAXD,WAAY,mBAAmB;IAC7B,kGAA4B,CAAA;IAC5B,8GAAkC,CAAA;IAClC,kGAA4B,CAAA;IAC5B,0FAAwB,CAAA;IACxB,4FAAyB,CAAA;IACzB,gGAA2B,CAAA;IAC3B,8FAA0B,CAAA;IAC1B,0FAAwB,CAAA;IACxB,0GAAgC,CAAA;IAChC,4FAAyB,CAAA;AAC3B,CAAC,EAXW,mBAAmB,KAAnB,mBAAmB,QAW9B;AAED,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IAE9B;IAEA;IAHlB,YACkB,IAAyB,EACzC,OAAe,EACC,KAAa;QAE7B,KAAK,CAAC,OAAO,CAAC,CAAC;QAJC,SAAI,GAAJ,IAAI,CAAqB;QAEzB,UAAK,GAAL,KAAK,CAAQ;QAG7B,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACxC,CAAC;CACF"}

package/package.json

@@ -0,0 +1,43 @@
+{
+  "name": "@fluxpointstudios/orynq-sdk-flight-recorder",
+  "version": "0.1.0",
+  "description": "Streaming flight recorder for PoI with chunking, compression, and encryption",
+  "type": "module",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "dependencies": {
+    "fflate": "^0.8.2",
+    "@fluxpointstudios/orynq-sdk-core": "0.1.0",
+    "@fluxpointstudios/orynq-sdk-process-trace": "0.1.0"
+  },
+  "devDependencies": {
+    "vitest": "^1.6.0"
+  },
+  "peerDependencies": {
+    "typescript": "^5.0.0"
+  },
+  "files": [
+    "dist",
+    "src"
+  ],
+  "keywords": [
+    "poi",
+    "proof-of-inference",
+    "flight-recorder",
+    "cardano",
+    "audit"
+  ],
+  "license": "MIT",
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "lint": "eslint src --ext .ts"
+  }
+}

package/src/__tests__/flight-recorder.test.ts

@@ -0,0 +1,211 @@
+/**
+ * Tests for flight-recorder package.
+ */
+
+import { describe, it, expect, beforeEach } from "vitest";
+import { FlightRecorder } from "../recorder/stream-recorder.js";
+import { LocalStorageAdapter } from "../storage/local-adapter.js";
+import { sha256String, buildMerkleRoot, merkleLeaf } from "../crypto/hashing.js";
+import { generateKey, encrypt, decrypt } from "../crypto/encryption.js";
+import { compress, decompress } from "../crypto/compression.js";
+import type { RecorderConfig, StorageAdapter, StorageRef, ManifestV2 } from "../types.js";
+import * as fs from "node:fs/promises";
+import * as path from "node:path";
+import * as os from "node:os";
+
+describe("Crypto utilities", () => {
+  describe("sha256", () => {
+    it("should hash strings consistently", async () => {
+      const hash1 = await sha256String("hello");
+      const hash2 = await sha256String("hello");
+      expect(hash1).toBe(hash2);
+      expect(hash1).toHaveLength(64); // 32 bytes hex
+    });
+
+    it("should produce different hashes for different inputs", async () => {
+      const hash1 = await sha256String("hello");
+      const hash2 = await sha256String("world");
+      expect(hash1).not.toBe(hash2);
+    });
+  });
+
+  describe("encryption", () => {
+    it("should encrypt and decrypt data", async () => {
+      const key = await generateKey();
+      const plaintext = new TextEncoder().encode("secret message");
+
+      const encrypted = await encrypt(plaintext, key);
+      expect(encrypted.ciphertext).not.toEqual(plaintext);
+
+      const decrypted = await decrypt(encrypted, key);
+      expect(new TextDecoder().decode(decrypted)).toBe("secret message");
+    });
+
+    it("should encrypt with additional data", async () => {
+      const key = await generateKey();
+      const plaintext = new TextEncoder().encode("secret");
+      const aad = new TextEncoder().encode("metadata");
+
+      const encrypted = await encrypt(plaintext, key, aad);
+      const decrypted = await decrypt(encrypted, key, aad);
+      expect(new TextDecoder().decode(decrypted)).toBe("secret");
+    });
+  });
+
+  describe("compression", () => {
+    it("should compress and decompress data", async () => {
+      const original = new TextEncoder().encode("hello world ".repeat(100));
+      const compressed = await compress(original, "gzip");
+      expect(compressed.data.length).toBeLessThan(original.length);
+
+      const decompressed = await decompress(compressed.data, "gzip");
+      expect(new TextDecoder().decode(decompressed)).toBe("hello world ".repeat(100));
+    });
+  });
+
+  describe("merkle tree", () => {
+    it("should build merkle root from leaf hashes", async () => {
+      const leaves = await Promise.all([
+        merkleLeaf(new TextEncoder().encode("leaf1")),
+        merkleLeaf(new TextEncoder().encode("leaf2")),
+        merkleLeaf(new TextEncoder().encode("leaf3")),
+      ]);
+
+      const root = await buildMerkleRoot(leaves);
+      expect(root).toHaveLength(64);
+    });
+
+    it("should return empty tree hash for empty leaves", async () => {
+      const root = await buildMerkleRoot([]);
+      expect(root).toHaveLength(64);
+    });
+  });
+});
+
+describe("LocalStorageAdapter", () => {
+  let tmpDir: string;
+  let adapter: LocalStorageAdapter;
+
+  beforeEach(async () => {
+    tmpDir = await fs.mkdtemp(path.join(os.tmpdir(), "flight-recorder-test-"));
+    adapter = new LocalStorageAdapter({ baseDir: tmpDir });
+  });
+
+  it("should store and fetch data", async () => {
+    const data = new TextEncoder().encode("test data");
+    const ref = await adapter.store(data);
+
+    expect(ref.type).toBe("local");
+    expect(ref.hash).toHaveLength(64);
+    expect(ref.size).toBe(data.length);
+
+    const fetched = await adapter.fetch(ref);
+    expect(new TextDecoder().decode(fetched)).toBe("test data");
+  });
+
+  it("should verify stored data", async () => {
+    const data = new TextEncoder().encode("test data");
+    const ref = await adapter.store(data);
+
+    const valid = await adapter.verify(ref);
+    expect(valid).toBe(true);
+  });
+});
+
+describe("FlightRecorder", () => {
+  let tmpDir: string;
+  let storage: LocalStorageAdapter;
+  let config: RecorderConfig;
+
+  beforeEach(async () => {
+    tmpDir = await fs.mkdtemp(path.join(os.tmpdir(), "flight-recorder-test-"));
+    storage = new LocalStorageAdapter({ baseDir: tmpDir });
+    config = {
+      agentId: "test-agent",
+      chunkSizeBytes: 1024,
+      encryption: {
+        algorithm: "aes-256-gcm",
+        keyDerivation: "hkdf-sha256",
+        keyMode: { type: "ephemeral" },
+      },
+      storage,
+    };
+  });
+
+  it("should start a recording session", async () => {
+    const recorder = new FlightRecorder(config);
+    const session = await recorder.start();
+
+    expect(session.agentId).toBe("test-agent");
+    expect(session.status).toBe("recording");
+    expect(session.sessionId).toBeDefined();
+  });
+
+  it("should record events", async () => {
+    const recorder = new FlightRecorder(config);
+    await recorder.start();
+
+    await recorder.record({
+      kind: "inference:start",
+      requestId: "req-1",
+      model: "test-model",
+      promptHash: "abc123",
+      params: { temperature: 0.7 },
+    });
+
+    await recorder.record({
+      kind: "inference:end",
+      requestId: "req-1",
+      outputHash: "def456",
+      tokenCounts: { prompt: 10, completion: 20 },
+      durationMs: 100,
+    });
+
+    const result = await recorder.finalize();
+
+    expect(result.manifest.formatVersion).toBe("2.0");
+    expect(result.manifest.agentId).toBe("test-agent");
+    expect(result.manifest.totalEvents).toBe(2);
+    expect(result.rootHash).toHaveLength(64);
+  });
+
+  it("should manage spans", async () => {
+    const recorder = new FlightRecorder(config);
+    await recorder.start();
+
+    const spanId = recorder.startSpan("test-span");
+    expect(spanId).toBeDefined();
+
+    await recorder.record({
+      kind: "inference:start",
+      requestId: "req-1",
+      model: "test-model",
+      promptHash: "abc123",
+      params: {},
+      spanId,
+    });
+
+    recorder.endSpan(spanId);
+
+    const result = await recorder.finalize();
+    expect(result.manifest.totalSpans).toBe(1);
+  });
+
+  it("should abort recording", async () => {
+    const recorder = new FlightRecorder(config);
+    await recorder.start();
+
+    await recorder.record({
+      kind: "inference:start",
+      requestId: "req-1",
+      model: "test-model",
+      promptHash: "abc123",
+      params: {},
+    });
+
+    await recorder.abort("test abort");
+
+    const session = recorder.getSession();
+    expect(session?.status).toBe("aborted");
+  });
+});

package/src/crypto/compression.ts

@@ -0,0 +1,105 @@
+/**
+ * Compression utilities for flight recorder chunks.
+ * Uses fflate for zstd-like compression (actually gzip/deflate, but fast).
+ *
+ * Note: True zstd would require native bindings. fflate provides
+ * excellent pure-JS compression that works everywhere.
+ */
+
+import { gzip, gunzip, strToU8, strFromU8 } from "fflate";
+
+export type CompressionType = "gzip" | "none";
+
+export interface CompressionResult {
+  data: Uint8Array;
+  originalSize: number;
+  compressedSize: number;
+  ratio: number;
+  algorithm: CompressionType;
+}
+
+/**
+ * Compress data using gzip.
+ */
+export function compress(data: Uint8Array, algorithm: CompressionType = "gzip"): Promise<CompressionResult> {
+  return new Promise((resolve, reject) => {
+    if (algorithm === "none") {
+      resolve({
+        data,
+        originalSize: data.length,
+        compressedSize: data.length,
+        ratio: 1,
+        algorithm: "none",
+      });
+      return;
+    }
+
+    gzip(data, { level: 6 }, (err, compressed) => {
+      if (err) {
+        reject(err);
+        return;
+      }
+
+      resolve({
+        data: compressed,
+        originalSize: data.length,
+        compressedSize: compressed.length,
+        ratio: compressed.length / data.length,
+        algorithm: "gzip",
+      });
+    });
+  });
+}
+
+/**
+ * Decompress gzip data.
+ */
+export function decompress(data: Uint8Array, algorithm: CompressionType = "gzip"): Promise<Uint8Array> {
+  return new Promise((resolve, reject) => {
+    if (algorithm === "none") {
+      resolve(data);
+      return;
+    }
+
+    gunzip(data, (err, decompressed) => {
+      if (err) {
+        reject(err);
+        return;
+      }
+
+      resolve(decompressed);
+    });
+  });
+}
+
+/**
+ * Compress a string to bytes.
+ */
+export function compressString(str: string, algorithm: CompressionType = "gzip"): Promise<CompressionResult> {
+  const data = strToU8(str);
+  return compress(data, algorithm);
+}
+
+/**
+ * Decompress bytes to a string.
+ */
+export async function decompressString(data: Uint8Array, algorithm: CompressionType = "gzip"): Promise<string> {
+  const decompressed = await decompress(data, algorithm);
+  return strFromU8(decompressed);
+}
+
+/**
+ * Estimate if compression is worthwhile for the given data.
+ * Returns true if data is likely compressible (text, JSON, etc).
+ */
+export function isCompressible(data: Uint8Array, sampleSize = 1024): boolean {
+  // Sample the beginning of the data
+  const sample = data.slice(0, Math.min(sampleSize, data.length));
+
+  // Count unique bytes - highly compressible data has fewer unique values
+  const uniqueBytes = new Set(sample);
+  const uniqueRatio = uniqueBytes.size / sample.length;
+
+  // If less than 60% unique bytes, likely compressible
+  return uniqueRatio < 0.6;
+}