@fulcrum-governance/sdk 0.1.3 → 0.1.5

package/dist/instrumentation/evaluator.js

@@ -21,6 +21,7 @@ class PolicyEvaluator {
         this.syncInterval = null;
         this.running = false;
         this.config = { ...types_1.DEFAULT_CONFIG, ...config };
+        this.rawFetch = globalThis.fetch;
     }
     /**
      * Start the background policy sync.
@@ -186,17 +187,114 @@ class PolicyEvaluator {
         if (!this.config.apiKey || !this.config.tenantId) {
             return;
         }
-        // TODO: Implement actual HTTP/gRPC call to fulcrum-server
-        // For now, this is a no-op placeholder
-        //
-        // Example implementation:
-        // const response = await fetch(`${this.config.serverUrl}/api/v1/policies`, {
-        //   headers: { Authorization: `Bearer ${this.config.apiKey}` },
-        // });
-        // const data = await response.json();
-        // this.policies = data.policies;
-        this.lastSync = Date.now();
-        this.syncError = null;
+        try {
+            const url = `${this.config.serverUrl}/api/v1/policies`;
+            const response = await this.rawFetch(url, {
+                method: 'GET',
+                headers: {
+                    'X-API-Key': this.config.apiKey,
+                    'Accept': 'application/json',
+                },
+                signal: AbortSignal.timeout(10000),
+            });
+            if (!response.ok) {
+                throw new Error(`HTTP ${response.status}: ${response.statusText}`);
+            }
+            const data = await response.json();
+            // Map server response to the Policy format the evaluator expects.
+            // The REST gateway returns a compact form; we normalise it here.
+            const policies = (data.policies ?? []).map((p) => ({
+                policyId: p.policy_id ?? '',
+                tenantId: this.config.tenantId,
+                priority: p.priority ?? 0,
+                status: mapStatus(p.status),
+                scope: p.scope
+                    ? {
+                        applyToAll: p.scope.apply_to_all ?? false,
+                        toolNames: p.scope.tool_names ?? [],
+                    }
+                    : undefined,
+                rules: (p.rules ?? []).map((r) => ({
+                    ruleId: r.rule_id ?? '',
+                    name: r.name ?? '',
+                    enabled: r.enabled !== false,
+                    priority: r.priority ?? 0,
+                    conditions: (r.conditions ?? []).map((c) => ({
+                        field: c.field ?? '',
+                        operator: c.operator ?? 'equals',
+                        value: c.value,
+                        values: c.values,
+                    })),
+                    actions: (r.actions ?? []).map((a) => ({
+                        actionType: a.action_type ?? 'allow',
+                    })),
+                })),
+            }));
+            this.policies = policies;
+            this.lastSync = Date.now();
+            this.syncError = null;
+            console.debug(`[fulcrum] Synced ${policies.length} policies from server`);
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : String(err);
+            console.warn(`[fulcrum] Policy sync failed (will retry): ${message}`);
+            this.syncError = message;
+            // Still update timestamp to avoid tight retry loops
+            this.lastSync = Date.now();
+        }
+    }
+    /**
+     * Evaluate a request server-side via the REST gateway.
+     *
+     * Used as fallback when local cache is empty but credentials are configured.
+     * Returns null on any error so the caller can fall back to local evaluation.
+     */
+    async evaluateServerSide(request) {
+        if (!this.config.apiKey || !this.config.tenantId) {
+            return null;
+        }
+        try {
+            const url = `${this.config.serverUrl}/api/v1/evaluate`;
+            const response = await this.rawFetch(url, {
+                method: 'POST',
+                headers: {
+                    'X-API-Key': this.config.apiKey,
+                    'Content-Type': 'application/json',
+                    'Accept': 'application/json',
+                },
+                body: JSON.stringify({
+                    tool_names: [request.toolName],
+                    input: request.resource ?? request.toolName,
+                    phase: request.actionType,
+                }),
+                signal: AbortSignal.timeout(5000),
+            });
+            if (!response.ok) {
+                throw new Error(`HTTP ${response.status}: ${response.statusText}`);
+            }
+            const data = await response.json();
+            // Map server decision string to our Action type
+            const decisionStr = (data.decision ?? '').toLowerCase();
+            const actionMap = {
+                allow: 'allow',
+                'evaluation_decision_allow': 'allow',
+                deny: 'deny',
+                'evaluation_decision_deny': 'deny',
+                warn: 'warn',
+                'evaluation_decision_warn': 'warn',
+                escalate: 'escalate',
+                'evaluation_decision_escalate': 'escalate',
+            };
+            const action = actionMap[decisionStr] ?? 'allow';
+            return {
+                action,
+                reason: data.message ?? decisionStr,
+            };
+        }
+        catch (err) {
+            console.warn(`[fulcrum] Server-side evaluation failed (falling back to local): ${err instanceof Error ? err.message : err}`);
+            return null;
+        }
     }
     /**
      * Manually update the policy cache (for testing).
@@ -216,3 +314,18 @@ class PolicyEvaluator {
     }
 }
 exports.PolicyEvaluator = PolicyEvaluator;
+/**
+ * Map a server status string to the Policy status type.
+ */
+function mapStatus(status) {
+    if (!status)
+        return 'active';
+    const s = status.toLowerCase().replace('policy_status_', '');
+    if (s === 'active')
+        return 'active';
+    if (s === 'inactive')
+        return 'inactive';
+    if (s === 'draft')
+        return 'draft';
+    return 'active';
+}

package/dist/instrumentation/index.d.ts

@@ -25,4 +25,6 @@
  */
 export { activate, deactivate, isActive } from './autoGovern';
 export { PolicyEvaluator } from './evaluator';
-export type { InstrumentationConfig, Decision, EvaluationRequest, Action } from './types';
+export { CostReporter } from './costReporter';
+export type { CostReporterConfig } from './costReporter';
+export type { InstrumentationConfig, Decision, EvaluationRequest, Action, CostEvent } from './types';

package/dist/instrumentation/index.js

@@ -25,10 +25,12 @@
  * All patches are fail-safe: governance errors never crash your agent.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.PolicyEvaluator = exports.isActive = exports.deactivate = exports.activate = void 0;
+exports.CostReporter = exports.PolicyEvaluator = exports.isActive = exports.deactivate = exports.activate = void 0;
 var autoGovern_1 = require("./autoGovern");
 Object.defineProperty(exports, "activate", { enumerable: true, get: function () { return autoGovern_1.activate; } });
 Object.defineProperty(exports, "deactivate", { enumerable: true, get: function () { return autoGovern_1.deactivate; } });
 Object.defineProperty(exports, "isActive", { enumerable: true, get: function () { return autoGovern_1.isActive; } });
 var evaluator_1 = require("./evaluator");
 Object.defineProperty(exports, "PolicyEvaluator", { enumerable: true, get: function () { return evaluator_1.PolicyEvaluator; } });
+var costReporter_1 = require("./costReporter");
+Object.defineProperty(exports, "CostReporter", { enumerable: true, get: function () { return costReporter_1.CostReporter; } });

package/dist/instrumentation/types.d.ts

@@ -99,6 +99,19 @@ export interface Metrics {
     allowedCalls: number;
     patchFailures: number;
 }
+/**
+ * Cost event to report to the server.
+ */
+export interface CostEvent {
+    event_type: 'llm' | 'tool';
+    envelope_id?: string;
+    tool_name: string;
+    cost_usd: number;
+    tokens_in?: number;
+    tokens_out?: number;
+    model_id?: string;
+    workflow_id?: string;
+}
 /**
  * Default configuration values.
  */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fulcrum-governance/sdk",
-  "version": "0.1.3",
+  "version": "0.1.5",
   "mcpName": "io.github.Dewars30/fulcrum",
   "description": "TypeScript SDK for Fulcrum - Intelligent AI Governance Platform",
   "main": "dist/index.js",
@@ -11,18 +11,25 @@
     "lint": "eslint src/",
     "prepublishOnly": "npm run build"
   },
-  "keywords": ["ai", "governance", "llm", "agents", "safety", "grpc"],
+  "keywords": [
+    "ai",
+    "governance",
+    "llm",
+    "agents",
+    "safety",
+    "grpc"
+  ],
   "author": "Fulcrum Team <hello@fulcrum.dev>",
   "license": "Apache-2.0",
   "repository": {
     "type": "git",
-    "url": "https://github.com/Dewars30/fulcrum-io.git",
+    "url": "git+https://github.com/Fulcrum-Governance/fulcrum-io.git",
     "directory": "sdk/typescript"
   },
   "dependencies": {
     "@grpc/grpc-js": "^1.9.0",
     "@grpc/proto-loader": "^0.7.0",
-    "uuid": "^9.0.0"
+    "uuid": "^14.0.0"
   },
   "devDependencies": {
     "@types/node": "^20.0.0",

package/proto/events.proto

@@ -2,7 +2,7 @@ syntax = "proto3";
 
 package fulcrum.events.v1;
 
-option go_package = "github.com/fulcrum-io/fulcrum/pkg/events/v1";
+option go_package = "github.com/Fulcrum-Governance/fulcrum-io/pkg/events/v1";
 
 import "google/protobuf/timestamp.proto";
 import "google/protobuf/struct.proto";

package/proto/fulcrum/agent/v1/agent_service.proto

@@ -12,7 +12,7 @@ package fulcrum.agent.v1;
 import "google/protobuf/timestamp.proto";
 import "google/protobuf/struct.proto";
 
-option go_package = "github.com/fulcrum-io/fulcrum/pkg/agent/v1;agentv1";
+option go_package = "github.com/Fulcrum-Governance/fulcrum-io/pkg/agent/v1;agentv1";
 
 service AgentService {
   // CreateAgent creates a new agent for the authenticated tenant.

package/proto/fulcrum/bridge/v1/bridge.proto

@@ -5,7 +5,7 @@ syntax = "proto3";
 
 package fulcrum.bridge.v1;
 
-option go_package = "github.com/fulcrum-io/fulcrum/pkg/bridge/v1";
+option go_package = "github.com/Fulcrum-Governance/fulcrum-io/pkg/bridge/v1";
 
 // ExecutionRequest initiates a LangGraph StateGraph execution
 message ExecutionRequest {

package/proto/fulcrum/checkpoint/v1/checkpoint_service.proto

@@ -2,7 +2,7 @@ syntax = "proto3";
 
 package fulcrum.checkpoint.v1;
 
-option go_package = "github.com/fulcrum-io/fulcrum/pkg/checkpoint/v1";
+option go_package = "github.com/Fulcrum-Governance/fulcrum-io/pkg/checkpoint/v1";
 
 import "google/api/annotations.proto";
 import "google/protobuf/timestamp.proto";

package/proto/fulcrum/cost/v1/cost_service.proto

@@ -2,7 +2,7 @@ syntax = "proto3";
 
 package fulcrum.cost.v1;
 
-option go_package = "github.com/fulcrum-io/fulcrum/pkg/cost/v1";
+option go_package = "github.com/Fulcrum-Governance/fulcrum-io/pkg/cost/v1";
 
 import "google/api/annotations.proto";
 import "google/protobuf/timestamp.proto";

package/proto/fulcrum/envelope/v1/envelope.proto

@@ -2,7 +2,7 @@ syntax = "proto3";
 
 package fulcrum.envelope.v1;
 
-option go_package = "github.com/fulcrum-io/fulcrum/pkg/envelope/v1";
+option go_package = "github.com/Fulcrum-Governance/fulcrum-io/pkg/envelope/v1";
 
 import "google/protobuf/timestamp.proto";
 import "google/protobuf/struct.proto";

package/proto/fulcrum/envelope/v1/envelope_service.proto

@@ -2,7 +2,7 @@ syntax = "proto3";
 
 package fulcrum.envelope.v1;
 
-option go_package = "github.com/fulcrum-io/fulcrum/pkg/envelope/v1";
+option go_package = "github.com/Fulcrum-Governance/fulcrum-io/pkg/envelope/v1";
 
 
 import "fulcrum/envelope/v1/envelope.proto";

package/proto/fulcrum/eventstore/v1/eventstore.proto

@@ -2,7 +2,7 @@ syntax = "proto3";
 
 package fulcrum.eventstore.v1;
 
-option go_package = "github.com/fulcrum-io/fulcrum/pkg/eventstore/v1;eventstorev1";
+option go_package = "github.com/Fulcrum-Governance/fulcrum-io/pkg/eventstore/v1;eventstorev1";
 
 import "google/protobuf/timestamp.proto";
 import "google/protobuf/struct.proto";

package/proto/fulcrum/policy/v1/policy_service.proto

@@ -2,7 +2,7 @@ syntax = "proto3";
 
 package fulcrum.policy.v1;
 
-option go_package = "github.com/fulcrum-io/fulcrum/pkg/policy/v1";
+option go_package = "github.com/Fulcrum-Governance/fulcrum-io/pkg/policy/v1";
 
 import "google/api/annotations.proto";
 import "google/protobuf/timestamp.proto";

package/proto/fulcrum/tenant/v1/tenant_service.proto

@@ -4,7 +4,7 @@ package fulcrum.tenant.v1;
 
 import "google/protobuf/timestamp.proto";
 
-option go_package = "github.com/fulcrum-io/fulcrum/pkg/tenant/v1;tenantv1";
+option go_package = "github.com/Fulcrum-Governance/fulcrum-io/pkg/tenant/v1;tenantv1";
 
 service TenantService {
   // CreateApiKey creates a new API key for the authenticated tenant.