@groovysec/whiteout-ai 0.3.0

package/dist/guard.js

@@ -0,0 +1,168 @@
+import { WhiteoutBlockedError, WhiteoutConfigError, WhiteoutConnectionError, } from "./exceptions.js";
+import { extractCallMetadata, extractResponseText } from "./extract.js";
+/**
+ * WhiteoutGuard wraps AI API calls with policy enforcement.
+ *
+ * Three integration patterns:
+ *  1. await guard.evaluate({ prompt }) — check before you call yourself
+ *  2. await guard.wrap(openai.chat.completions.create, options) — wrap an SDK call
+ *  3. catch WhiteoutBlockedError to handle policy blocks gracefully
+ */
+export class WhiteoutGuard {
+    token;
+    backendUrl;
+    agentName;
+    resourceId;
+    resourceType;
+    mode;
+    timeoutMs;
+    failOpen;
+    agentId = "";
+    readyPromise;
+    constructor(opts) {
+        if (!opts.token)
+            throw new WhiteoutConfigError("token is required");
+        if (!opts.backendUrl)
+            throw new WhiteoutConfigError("backendUrl is required");
+        const pid = typeof process !== "undefined" && process.pid ? String(process.pid) : "node";
+        this.token = opts.token;
+        this.backendUrl = opts.backendUrl.replace(/\/+$/, "");
+        this.agentName = opts.agentName ?? `sdk-${pid}`;
+        this.resourceId = opts.resourceId ?? `sdk-${pid}`;
+        this.resourceType = opts.resourceType ?? "vm";
+        this.mode = opts.mode ?? "sdk";
+        this.timeoutMs = opts.timeoutMs ?? 10_000;
+        this.failOpen = opts.failOpen ?? true;
+        if (opts.register === false) {
+            this.readyPromise = Promise.resolve();
+        }
+        else {
+            this.readyPromise = this.registerOnce();
+        }
+    }
+    /** Await this before calling evaluate/wrap if you need registration to complete. */
+    ready() {
+        return this.readyPromise;
+    }
+    async registerOnce() {
+        try {
+            const data = await this.post("/infra-agent/register", {
+                token: this.token,
+                agent_name: this.agentName,
+                resource_id: this.resourceId,
+                resource_type: this.resourceType,
+                mode: this.mode,
+            });
+            this.agentId = data.agent_id ?? "";
+        }
+        catch (err) {
+            if (!this.failOpen) {
+                throw new WhiteoutConnectionError(`Registration failed: ${String(err)}`);
+            }
+            // fail-open: leave agentId empty; evaluate() will short-circuit.
+        }
+    }
+    async evaluate(input) {
+        await this.readyPromise;
+        if (!this.agentId) {
+            if (this.failOpen) {
+                return { decision: "allow", reason: "Not registered (fail-open)" };
+            }
+            throw new WhiteoutConnectionError("Not registered with backend");
+        }
+        try {
+            const result = await this.post("/infra-agent/evaluate", {
+                token: this.token,
+                agent_id: this.agentId,
+                prompt_text: input.prompt,
+                ai_provider: input.aiProvider ?? "unknown",
+                model: input.model ?? "",
+                endpoint: input.endpoint ?? "",
+                token_count_in: input.tokenCountIn,
+            });
+            if (result.decision === "block") {
+                throw new WhiteoutBlockedError({
+                    reason: result.reason ?? "blocked",
+                    violatedPolicies: result.violatedPolicies,
+                    rule: result.rule,
+                });
+            }
+            return result;
+        }
+        catch (err) {
+            if (err instanceof WhiteoutBlockedError)
+                throw err;
+            if (this.failOpen)
+                return { decision: "allow", reason: `Backend error (fail-open): ${String(err)}` };
+            throw new WhiteoutConnectionError(`Evaluate failed: ${String(err)}`);
+        }
+    }
+    async evaluateResponse(responseText, evaluationId, opts = {}) {
+        if (!this.agentId)
+            return { decision: "allow", reason: "Not registered" };
+        try {
+            return await this.post("/infra-agent/evaluate-response", {
+                token: this.token,
+                agent_id: this.agentId,
+                evaluation_id: evaluationId,
+                response_text: responseText,
+                ai_provider: opts.aiProvider ?? "unknown",
+                model: opts.model ?? "",
+            });
+        }
+        catch (err) {
+            return { decision: "allow", reason: `Backend error: ${String(err)}` };
+        }
+    }
+    /**
+     * Wrap an AI SDK call. Extracts prompt/model/provider from the call args,
+     * evaluates pre-call, runs the call, and asynchronously scans the response.
+     *
+     * Throws WhiteoutBlockedError if the pre-call evaluation blocks.
+     */
+    async wrap(fn, ...args) {
+        const meta = extractCallMetadata(args);
+        let evaluationId;
+        if (meta.prompt) {
+            const result = await this.evaluate({
+                prompt: meta.prompt,
+                aiProvider: meta.provider,
+                model: meta.model,
+            });
+            evaluationId = typeof result.evaluationId === "string" ? result.evaluationId : undefined;
+        }
+        const response = await fn(...args);
+        if (evaluationId) {
+            const text = extractResponseText(response);
+            if (text) {
+                // Don't await — response scanning is observation, not a gate.
+                void this.evaluateResponse(text, evaluationId, {
+                    aiProvider: meta.provider,
+                    model: meta.model,
+                });
+            }
+        }
+        return response;
+    }
+    async post(path, body) {
+        const controller = new AbortController();
+        const timer = setTimeout(() => controller.abort(), this.timeoutMs);
+        try {
+            const resp = await fetch(`${this.backendUrl}${path}`, {
+                method: "POST",
+                headers: { "Content-Type": "application/json" },
+                body: JSON.stringify(body),
+                signal: controller.signal,
+            });
+            if (!resp.ok) {
+                const text = await resp.text().catch(() => "");
+                throw new Error(`backend ${resp.status}: ${text}`);
+            }
+            return (await resp.json());
+        }
+        finally {
+            clearTimeout(timer);
+        }
+    }
+}
+//# sourceMappingURL=guard.js.map

package/dist/guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"guard.js","sourceRoot":"","sources":["../src/guard.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,oBAAoB,EACpB,mBAAmB,EACnB,uBAAuB,GACxB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AA+BxE;;;;;;;GAOG;AACH,MAAM,OAAO,aAAa;IACP,KAAK,CAAS;IACd,UAAU,CAAS;IACnB,SAAS,CAAS;IAClB,UAAU,CAAS;IACnB,YAAY,CAAS;IACrB,IAAI,CAAS;IACb,SAAS,CAAS;IAClB,QAAQ,CAAU;IAC3B,OAAO,GAAG,EAAE,CAAC;IACb,YAAY,CAAgB;IAEpC,YAAY,IAAkB;QAC5B,IAAI,CAAC,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,mBAAmB,CAAC,mBAAmB,CAAC,CAAC;QACpE,IAAI,CAAC,IAAI,CAAC,UAAU;YAAE,MAAM,IAAI,mBAAmB,CAAC,wBAAwB,CAAC,CAAC;QAE9E,MAAM,GAAG,GAAG,OAAO,OAAO,KAAK,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QAEzF,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACxB,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACtD,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,OAAO,GAAG,EAAE,CAAC;QAChD,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,OAAO,GAAG,EAAE,CAAC;QAClD,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC;QAC9C,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC;QAC/B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC;QAC1C,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC;QAEtC,IAAI,IAAI,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;YAC5B,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;QACxC,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QAC1C,CAAC;IACH,CAAC;IAED,oFAAoF;IACpF,KAAK;QACH,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;IAEO,KAAK,CAAC,YAAY;QACxB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAwB,uBAAuB,EAAE;gBAC3E,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,UAAU,EAAE,IAAI,CAAC,SAAS;gBAC1B,WAAW,EAAE,IAAI,CAAC,UAAU;gBAC5B,aAAa,EAAE,IAAI,CAAC,YAAY;gBAChC,IAAI,EAAE,IAAI,CAAC,IAAI;aAChB,CAAC,CAAC;YACH,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC;QACrC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACnB,MAAM,IAAI,uBAAuB,CAAC,wBAAwB,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC3E,CAAC;YACD,iEAAiE;QACnE,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,KAAoB;QACjC,MAAM,IAAI,CAAC,YAAY,CAAC;QACxB,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAClB,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,4BAA4B,EAAE,CAAC;YACrE,CAAC;YACD,MAAM,IAAI,uBAAuB,CAAC,6BAA6B,CAAC,CAAC;QACnE,CAAC;QACD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAiB,uBAAuB,EAAE;gBACtE,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,QAAQ,EAAE,IAAI,CAAC,OAAO;gBACtB,WAAW,EAAE,KAAK,CAAC,MAAM;gBACzB,WAAW,EAAE,KAAK,CAAC,UAAU,IAAI,SAAS;gBAC1C,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,EAAE;gBACxB,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,EAAE;gBAC9B,cAAc,EAAE,KAAK,CAAC,YAAY;aACnC,CAAC,CAAC;YACH,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;gBAChC,MAAM,IAAI,oBAAoB,CAAC;oBAC7B,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,SAAS;oBAClC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;oBACzC,IAAI,EAAE,MAAM,CAAC,IAAI;iBAClB,CAAC,CAAC;YACL,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,oBAAoB;gBAAE,MAAM,GAAG,CAAC;YACnD,IAAI,IAAI,CAAC,QAAQ;gBAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,8BAA8B,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACrG,MAAM,IAAI,uBAAuB,CAAC,oBAAoB,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;IAED,KAAK,CAAC,gBAAgB,CACpB,YAAoB,EACpB,YAAoB,EACpB,OAAgD,EAAE;QAElD,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;QAC1E,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,IAAI,CAAiB,gCAAgC,EAAE;gBACvE,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,QAAQ,EAAE,IAAI,CAAC,OAAO;gBACtB,aAAa,EAAE,YAAY;gBAC3B,aAAa,EAAE,YAAY;gBAC3B,WAAW,EAAE,IAAI,CAAC,UAAU,IAAI,SAAS;gBACzC,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,EAAE;aACxB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,kBAAkB,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACxE,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,IAAI,CACR,EAAkD,EAClD,GAAG,IAAW;QAEd,MAAM,IAAI,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAEvC,IAAI,YAAgC,CAAC;QACrC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC;gBACjC,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,UAAU,EAAE,IAAI,CAAC,QAAQ;gBACzB,KAAK,EAAE,IAAI,CAAC,KAAK;aAClB,CAAC,CAAC;YACH,YAAY,GAAG,OAAO,MAAM,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;QAC3F,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;QAEnC,IAAI,YAAY,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;YAC3C,IAAI,IAAI,EAAE,CAAC;gBACT,8DAA8D;gBAC9D,KAAK,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,YAAY,EAAE;oBAC7C,UAAU,EAAE,IAAI,CAAC,QAAQ;oBACzB,KAAK,EAAE,IAAI,CAAC,KAAK;iBAClB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,KAAK,CAAC,IAAI,CAAI,IAAY,EAAE,IAAa;QAC/C,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QACnE,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,UAAU,GAAG,IAAI,EAAE,EAAE;gBACpD,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;gBAC1B,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;gBACb,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;gBAC/C,MAAM,IAAI,KAAK,CAAC,WAAW,IAAI,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC,CAAC;YACrD,CAAC;YACD,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAM,CAAC;QAClC,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;CACF"}

package/dist/index.d.ts

@@ -0,0 +1,9 @@
+export { WhiteoutGuard } from "./guard.js";
+export { AppGuard, normalizeMessages, applyQuarantine, cleanContext, DEFAULT_BASE_URL, SCAN_TARGETS, QUARANTINE_NOTICE, SDK_VERSION, } from "./appGuard.js";
+export { instrument, uninstrument } from "./auto.js";
+export type { AppGuardOptions, CheckInputOptions, CheckOutputOptions, ContextDoc, GuardConfig, GuardDecision, GuardMessage, ScanTarget, StreamMode, WhiteoutCallOptions, } from "./appGuard.js";
+export type { GuardOptions, EvaluateInput, EvaluateResult } from "./guard.js";
+export { WhiteoutError, WhiteoutConfigError, WhiteoutConnectionError, WhiteoutBlockedError, } from "./exceptions.js";
+export { extractCallMetadata, extractResponseText } from "./extract.js";
+export type { CallMetadata } from "./extract.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EACL,QAAQ,EAAE,iBAAiB,EAAE,eAAe,EAAE,YAAY,EAAE,gBAAgB,EAAE,YAAY,EAAE,iBAAiB,EAAE,WAAW,GAC3H,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AACrD,YAAY,EACV,eAAe,EACf,iBAAiB,EACjB,kBAAkB,EAClB,UAAU,EACV,WAAW,EACX,aAAa,EACb,YAAY,EACZ,UAAU,EACV,UAAU,EACV,mBAAmB,GACpB,MAAM,eAAe,CAAC;AACvB,YAAY,EAAE,YAAY,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC9E,OAAO,EACL,aAAa,EACb,mBAAmB,EACnB,uBAAuB,EACvB,oBAAoB,GACrB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACxE,YAAY,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC"}

package/dist/index.js

@@ -0,0 +1,6 @@
+export { WhiteoutGuard } from "./guard.js";
+export { AppGuard, normalizeMessages, applyQuarantine, cleanContext, DEFAULT_BASE_URL, SCAN_TARGETS, QUARANTINE_NOTICE, SDK_VERSION, } from "./appGuard.js";
+export { instrument, uninstrument } from "./auto.js";
+export { WhiteoutError, WhiteoutConfigError, WhiteoutConnectionError, WhiteoutBlockedError, } from "./exceptions.js";
+export { extractCallMetadata, extractResponseText } from "./extract.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EACL,QAAQ,EAAE,iBAAiB,EAAE,eAAe,EAAE,YAAY,EAAE,gBAAgB,EAAE,YAAY,EAAE,iBAAiB,EAAE,WAAW,GAC3H,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAcrD,OAAO,EACL,aAAa,EACb,mBAAmB,EACnB,uBAAuB,EACvB,oBAAoB,GACrB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC"}

package/dist/register.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=register.d.ts.map

package/dist/register.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"register.d.ts","sourceRoot":"","sources":["../src/register.ts"],"names":[],"mappings":""}

package/dist/register.js

@@ -0,0 +1,16 @@
+/**
+ * Preload entry: `node --import @groovysec/whiteout-ai/register server.js`
+ * (or `NODE_OPTIONS="--import @groovysec/whiteout-ai/register"`). Arms
+ * auto-instrumentation before the app's own code runs. Never throws — a
+ * failure logs loudly and the app starts ungoverned.
+ */
+import { instrument } from "./auto.js";
+try {
+    const armed = await instrument();
+    if (armed.length)
+        console.info(`[Whiteout] auto-instrumentation armed for ${armed.join(", ")}`);
+}
+catch (e) {
+    console.error(`[Whiteout] auto-instrumentation failed to start: ${e.message} — calls are NOT governed`);
+}
+//# sourceMappingURL=register.js.map

package/dist/register.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"register.js","sourceRoot":"","sources":["../src/register.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAEvC,IAAI,CAAC;IACH,MAAM,KAAK,GAAG,MAAM,UAAU,EAAE,CAAC;IACjC,IAAI,KAAK,CAAC,MAAM;QAAE,OAAO,CAAC,IAAI,CAAC,6CAA6C,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAClG,CAAC;AAAC,OAAO,CAAC,EAAE,CAAC;IACX,OAAO,CAAC,KAAK,CAAC,oDAAqD,CAAW,CAAC,OAAO,2BAA2B,CAAC,CAAC;AACrH,CAAC"}

package/package.json

@@ -0,0 +1,53 @@
+{
+  "name": "@groovysec/whiteout-ai",
+  "version": "0.3.0",
+  "description": "Whiteout AI governance SDK for Node.js. Add policy enforcement to any AI workload in three lines.",
+  "license": "Apache-2.0",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    },
+    "./auto": {
+      "types": "./dist/auto.d.ts",
+      "import": "./dist/auto.js"
+    },
+    "./register": {
+      "types": "./dist/register.d.ts",
+      "import": "./dist/register.js"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "lint": "tsc --noEmit"
+  },
+  "engines": {
+    "node": ">=18.19"
+  },
+  "devDependencies": {
+    "@types/node": "^20.0.0",
+    "typescript": "^5.4.0",
+    "vitest": "^1.6.0"
+  },
+  "keywords": [
+    "ai",
+    "governance",
+    "compliance",
+    "openai",
+    "anthropic",
+    "bedrock",
+    "vertex",
+    "whiteout"
+  ],
+  "author": "Groovy Security"
+}