@palveron/sdk 1.0.0

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts"],"sourcesContent":["// ============================================================\n// @palveron/sdk — Official TypeScript SDK for Palveron AI Governance\n// ============================================================\n// Zero dependencies. Works in Node.js 18+, Deno, Bun, Edge Runtimes.\n// ============================================================\n\n// ─── Types ──────────────────────────────────────────────────\n\nexport type Decision = 'ALLOWED' | 'BLOCKED' | 'MODIFIED' | 'ERROR';\nexport type RiskLevel = 'minimal' | 'limited' | 'high' | 'unacceptable';\nexport type Sensitivity = 'low' | 'medium' | 'high';\n\nexport interface PalveronConfig {\n  /** API key (starts with pv_live_ or pv_test_) */\n  apiKey: string;\n  /** Gateway base URL (default: https://gateway.palveron.com) */\n  baseUrl?: string;\n  /** Request timeout in ms (default: 30000) */\n  timeout?: number;\n  /** Max retry attempts on transient failures (default: 3) */\n  maxRetries?: number;\n  /** Base delay for exponential backoff in ms (default: 500) */\n  retryBaseDelay?: number;\n  /** Custom logger (default: console) */\n  logger?: PalveronLogger;\n  /** Custom headers added to every request */\n  headers?: Record<string, string>;\n  /** Circuit breaker: max consecutive failures before opening (default: 5) */\n  circuitBreakerThreshold?: number;\n  /** Circuit breaker: cooldown in ms before half-open retry (default: 30000) */\n  circuitBreakerCooldown?: number;\n}\n\nexport interface PalveronLogger {\n  debug(message: string, meta?: Record<string, unknown>): void;\n  info(message: string, meta?: Record<string, unknown>): void;\n  warn(message: string, meta?: Record<string, unknown>): void;\n  error(message: string, meta?: Record<string, unknown>): void;\n}\n\nexport interface Attachment {\n  /** MIME type (e.g. \"image/png\", \"audio/wav\", \"application/pdf\") */\n  contentType: string;\n  /** Base64-encoded data */\n  data: string;\n  /** Optional filename */\n  filename?: string;\n  /** Optional per-attachment metadata (GPS, resolution, etc.) */\n  metadata?: Record<string, unknown>;\n}\n\nexport interface RequestContext {\n  /** MCP server URL if applicable */\n  mcpServer?: string;\n  /** MCP tool name */\n  toolName?: string;\n  /** Agent chain depth for recursive calls */\n  chainDepth?: number;\n  /** Source system identifier (\"ros2\", \"unity\", \"cursor-ide\", etc.) */\n  sourceSystem?: string;\n  /** Session ID for conversation tracking */\n  sessionId?: string;\n}\n\nexport interface VerifyRequest {\n  /** The prompt or input text to verify */\n  prompt: string;\n  /** Pre-extracted text from attachments (optional, server extracts if absent) */\n  extractedText?: string;\n  /** Arbitrary metadata passed through to the trace */\n  metadata?: Record<string, unknown>;\n  /** Multi-modal attachments (images, audio, documents, code) */\n  attachments?: Attachment[];\n  /** Agentic context (MCP, tool chains, source systems) */\n  context?: RequestContext;\n}\n\nexport interface Finding {\n  risk: 'LOW' | 'MEDIUM' | 'HIGH' | 'CRITICAL';\n  category: string;\n  description: string;\n  confidence: number;\n}\n\nexport interface VerifyResponse {\n  /** Governance decision */\n  decision: Decision;\n  /** Modified/sanitized output (present when decision is MODIFIED) */\n  output: string;\n  /** Human-readable reason for the decision */\n  reason: string;\n  /** Unique trace ID for audit trail */\n  traceId: string;\n  /** SHA-256 integrity hash of the governance decision */\n  integrityHash: string;\n  /** Whether this trace will be anchored to Flare blockchain */\n  shouldAnchor: boolean;\n  /** Flare blockchain status */\n  flareStatus: string;\n  /** Flare transaction hash (populated after anchoring) */\n  flareTxHash: string | null;\n  /** Detected content type */\n  contentType: string;\n  /** Security findings (secrets, PII, policy violations) */\n  findings: Finding[];\n  /** Server-side latency in milliseconds */\n  latencyMs: number;\n}\n\nexport interface PolicyListResponse {\n  policies: Array<{\n    id: string;\n    name: string;\n    prompt: string;\n    environment: string;\n    contentTypes: string[];\n    createdAt: string;\n    updatedAt: string;\n  }>;\n}\n\nexport interface HealthResponse {\n  status: 'healthy' | 'degraded' | 'unhealthy';\n  version: string;\n  uptime: number;\n  checks: Record<string, { status: string; latencyMs: number }>;\n}\n\n// ─── Errors ─────────────────────────────────────────────────\n\nexport class PalveronError extends Error {\n  public readonly code: string;\n  public readonly statusCode: number;\n  public readonly requestId: string | null;\n  public readonly retryable: boolean;\n\n  constructor(message: string, opts: {\n    code: string;\n    statusCode: number;\n    requestId?: string | null;\n    retryable?: boolean;\n  }) {\n    super(message);\n    this.name = 'PalveronError';\n    this.code = opts.code;\n    this.statusCode = opts.statusCode;\n    this.requestId = opts.requestId ?? null;\n    this.retryable = opts.retryable ?? false;\n  }\n}\n\nexport class PalveronAuthenticationError extends PalveronError {\n  constructor(message: string, requestId?: string | null) {\n    super(message, { code: 'AUTHENTICATION_FAILED', statusCode: 401, requestId, retryable: false });\n    this.name = 'PalveronAuthenticationError';\n  }\n}\n\nexport class PalveronRateLimitError extends PalveronError {\n  public readonly retryAfterMs: number;\n\n  constructor(message: string, retryAfterMs: number, requestId?: string | null) {\n    super(message, { code: 'RATE_LIMITED', statusCode: 429, requestId, retryable: true });\n    this.name = 'PalveronRateLimitError';\n    this.retryAfterMs = retryAfterMs;\n  }\n}\n\nexport class PalveronValidationError extends PalveronError {\n  public readonly field: string | null;\n\n  constructor(message: string, field?: string, requestId?: string | null) {\n    super(message, { code: 'VALIDATION_ERROR', statusCode: 400, requestId, retryable: false });\n    this.name = 'PalveronValidationError';\n    this.field = field ?? null;\n  }\n}\n\nexport class PalveronCircuitOpenError extends PalveronError {\n  constructor() {\n    super('Circuit breaker is open — too many consecutive failures. Retry later.', {\n      code: 'CIRCUIT_OPEN', statusCode: 503, retryable: false,\n    });\n    this.name = 'PalveronCircuitOpenError';\n  }\n}\n\nexport class PalveronTimeoutError extends PalveronError {\n  constructor(timeoutMs: number, requestId?: string | null) {\n    super(`Request timed out after ${timeoutMs}ms`, {\n      code: 'TIMEOUT', statusCode: 408, requestId, retryable: true,\n    });\n    this.name = 'PalveronTimeoutError';\n  }\n}\n\n// ─── Circuit Breaker ────────────────────────────────────────\n\nclass CircuitBreaker {\n  private failures = 0;\n  private lastFailure = 0;\n  private state: 'closed' | 'open' | 'half-open' = 'closed';\n\n  constructor(\n    private threshold: number,\n    private cooldownMs: number,\n  ) {}\n\n  canRequest(): boolean {\n    if (this.state === 'closed') return true;\n    if (this.state === 'open') {\n      if (Date.now() - this.lastFailure >= this.cooldownMs) {\n        this.state = 'half-open';\n        return true;\n      }\n      return false;\n    }\n    return true; // half-open: allow one request\n  }\n\n  onSuccess(): void {\n    this.failures = 0;\n    this.state = 'closed';\n  }\n\n  onFailure(): void {\n    this.failures++;\n    this.lastFailure = Date.now();\n    if (this.failures >= this.threshold) {\n      this.state = 'open';\n    }\n  }\n\n  getState(): string {\n    return this.state;\n  }\n}\n\n// ─── Client ─────────────────────────────────────────────────\n\nconst DEFAULT_BASE_URL = 'https://gateway.palveron.com';\nconst DEFAULT_TIMEOUT = 30_000;\nconst DEFAULT_MAX_RETRIES = 3;\nconst DEFAULT_RETRY_BASE_DELAY = 500;\nconst SDK_VERSION = '1.0.0';\n\nexport class Palveron {\n  private readonly config: Required<Pick<PalveronConfig,\n    'apiKey' | 'baseUrl' | 'timeout' | 'maxRetries' | 'retryBaseDelay'\n  >> & Pick<PalveronConfig, 'logger' | 'headers'>;\n\n  private readonly circuit: CircuitBreaker;\n\n  constructor(config: PalveronConfig) {\n    if (!config.apiKey) throw new PalveronValidationError('apiKey is required');\n\n    this.config = {\n      apiKey: config.apiKey,\n      baseUrl: (config.baseUrl ?? DEFAULT_BASE_URL).replace(/\\/+$/, ''),\n      timeout: config.timeout ?? DEFAULT_TIMEOUT,\n      maxRetries: config.maxRetries ?? DEFAULT_MAX_RETRIES,\n      retryBaseDelay: config.retryBaseDelay ?? DEFAULT_RETRY_BASE_DELAY,\n      logger: config.logger,\n      headers: config.headers,\n    };\n\n    this.circuit = new CircuitBreaker(\n      config.circuitBreakerThreshold ?? 5,\n      config.circuitBreakerCooldown ?? 30_000,\n    );\n  }\n\n  // ── Core: Verify ────────────────────────────────────────\n\n  /**\n   * Send a governance verification request.\n   * This is the primary method — every LLM call should go through this.\n   *\n   * @example\n   * ```typescript\n   * const result = await palveron.verify({ prompt: 'User input here' });\n   * if (result.decision === 'BLOCKED') {\n   *   throw new Error(result.reason);\n   * }\n   * ```\n   */\n  async verify(request: VerifyRequest): Promise<VerifyResponse> {\n    const body = {\n      prompt: request.prompt,\n      extracted_text: request.extractedText,\n      metadata: request.metadata,\n      attachments: request.attachments?.map(a => ({\n        content_type: a.contentType,\n        data: a.data,\n        filename: a.filename,\n        metadata: a.metadata,\n      })),\n      context: request.context ? {\n        mcp_server: request.context.mcpServer,\n        tool_name: request.context.toolName,\n        chain_depth: request.context.chainDepth,\n        source_system: request.context.sourceSystem,\n        session_id: request.context.sessionId,\n      } : undefined,\n    };\n\n    const start = Date.now();\n    const raw = await this.request<Record<string, unknown>>('POST', '/api/v1/verify', body);\n    const latency = Date.now() - start;\n\n    return {\n      decision: (raw.decision as Decision) ?? 'ERROR',\n      output: (raw.output as string) ?? '',\n      reason: (raw.reason as string) ?? '',\n      traceId: (raw.trace_id as string) ?? '',\n      integrityHash: (raw.integrity_hash as string) ?? '',\n      shouldAnchor: (raw.should_anchor as boolean) ?? false,\n      flareStatus: (raw.flare_status as string) ?? '',\n      flareTxHash: (raw.flare_tx_hash as string | null) ?? null,\n      contentType: (raw.content_type as string) ?? 'text',\n      findings: (raw.findings as Finding[]) ?? [],\n      latencyMs: latency,\n    };\n  }\n\n  // ── Convenience: Quick verify (string-only) ─────────────\n\n  /**\n   * Quick verification for text-only prompts.\n   *\n   * @example\n   * ```typescript\n   * const result = await palveron.check('Is this prompt safe?');\n   * console.log(result.decision); // 'ALLOWED'\n   * ```\n   */\n  async check(prompt: string): Promise<VerifyResponse> {\n    return this.verify({ prompt });\n  }\n\n  // ── Convenience: Verify with file ───────────────────────\n\n  /**\n   * Verify a prompt with a file attachment.\n   * Reads the file, Base64-encodes it, and sends it with the correct MIME type.\n   * Node.js only — use verify() with pre-encoded data in browsers.\n   *\n   * @example\n   * ```typescript\n   * const result = await palveron.verifyWithFile(\n   *   'Analyze this document',\n   *   '/path/to/report.pdf'\n   * );\n   * ```\n   */\n  async verifyWithFile(prompt: string, filePath: string): Promise<VerifyResponse> {\n    // Dynamic import to keep SDK isomorphic\n    const { readFile } = await import('node:fs/promises');\n    const { basename } = await import('node:path');\n\n    const buffer = await readFile(filePath);\n    const base64 = buffer.toString('base64');\n    const filename = basename(filePath);\n    const contentType = this.inferMimeType(filename);\n\n    return this.verify({\n      prompt,\n      attachments: [{ contentType, data: base64, filename }],\n    });\n  }\n\n  // ── Policies ────────────────────────────────────────────\n\n  /**\n   * List all active policies for the project.\n   */\n  async listPolicies(env: string = 'prod'): Promise<PolicyListResponse> {\n    return this.request<PolicyListResponse>('GET', `/api/v1/policies?env=${env}`);\n  }\n\n  // ── Health ──────────────────────────────────────────────\n\n  /**\n   * Check gateway health status.\n   */\n  async health(): Promise<HealthResponse> {\n    return this.request<HealthResponse>('GET', '/health');\n  }\n\n  // ── Diagnostics ─────────────────────────────────────────\n\n  /**\n   * Get SDK and connection diagnostics.\n   */\n  diagnostics(): {\n    sdkVersion: string;\n    baseUrl: string;\n    timeout: number;\n    maxRetries: number;\n    circuitState: string;\n  } {\n    return {\n      sdkVersion: SDK_VERSION,\n      baseUrl: this.config.baseUrl,\n      timeout: this.config.timeout,\n      maxRetries: this.config.maxRetries,\n      circuitState: this.circuit.getState(),\n    };\n  }\n\n  // ─── Internal: HTTP with retry + circuit breaker ────────\n\n  private async request<T>(method: string, path: string, body?: unknown): Promise<T> {\n    if (!this.circuit.canRequest()) {\n      throw new PalveronCircuitOpenError();\n    }\n\n    let lastError: Error | null = null;\n    const maxAttempts = this.config.maxRetries + 1;\n\n    for (let attempt = 0; attempt < maxAttempts; attempt++) {\n      if (attempt > 0) {\n        const delay = this.backoffDelay(attempt);\n        this.config.logger?.debug(`Retry attempt ${attempt}/${this.config.maxRetries}`, { delay, path });\n        await this.sleep(delay);\n      }\n\n      const requestId = this.generateRequestId();\n\n      try {\n        const controller = new AbortController();\n        const timer = setTimeout(() => controller.abort(), this.config.timeout);\n\n        const headers: Record<string, string> = {\n          'Authorization': `Bearer ${this.config.apiKey}`,\n          'Content-Type': 'application/json',\n          'Accept': 'application/json',\n          'User-Agent': `palveron-sdk-typescript/${SDK_VERSION}`,\n          'X-Request-ID': requestId,\n          ...this.config.headers,\n        };\n\n        const response = await fetch(`${this.config.baseUrl}${path}`, {\n          method,\n          headers,\n          body: body ? JSON.stringify(body) : undefined,\n          signal: controller.signal,\n        });\n\n        clearTimeout(timer);\n\n        const responseRequestId = response.headers.get('x-request-id') ?? requestId;\n\n        if (response.ok) {\n          this.circuit.onSuccess();\n          return await response.json() as T;\n        }\n\n        // Handle specific error codes\n        if (response.status === 401) {\n          this.circuit.onSuccess(); // auth errors are not circuit failures\n          throw new PalveronAuthenticationError(\n            'Invalid API key or expired token',\n            responseRequestId,\n          );\n        }\n\n        if (response.status === 429) {\n          const retryAfter = parseInt(response.headers.get('retry-after') ?? '5', 10) * 1000;\n          throw new PalveronRateLimitError(\n            'Rate limit exceeded',\n            retryAfter,\n            responseRequestId,\n          );\n        }\n\n        if (response.status === 400) {\n          const errorBody = await response.json().catch(() => ({})) as Record<string, string>;\n          throw new PalveronValidationError(\n            errorBody.error ?? 'Invalid request',\n            errorBody.field,\n            responseRequestId,\n          );\n        }\n\n        // Retryable server errors (500, 502, 503)\n        if (response.status >= 500) {\n          this.circuit.onFailure();\n          const errorBody = await response.text().catch(() => '');\n          lastError = new PalveronError(\n            `Server error: ${response.status} ${response.statusText}`,\n            { code: 'SERVER_ERROR', statusCode: response.status, requestId: responseRequestId, retryable: true },\n          );\n          this.config.logger?.warn(`Server error on attempt ${attempt + 1}`, {\n            status: response.status,\n            requestId: responseRequestId,\n            body: errorBody.slice(0, 200),\n          });\n          continue; // retry\n        }\n\n        // Non-retryable client errors\n        const errorBody = await response.json().catch(() => ({})) as Record<string, string>;\n        throw new PalveronError(\n          errorBody.error ?? `HTTP ${response.status}`,\n          { code: 'CLIENT_ERROR', statusCode: response.status, requestId: responseRequestId, retryable: false },\n        );\n\n      } catch (error) {\n        if (error instanceof PalveronError && !error.retryable) throw error;\n\n        if (error instanceof DOMException && error.name === 'AbortError') {\n          this.circuit.onFailure();\n          lastError = new PalveronTimeoutError(this.config.timeout, requestId);\n          continue;\n        }\n\n        if (error instanceof TypeError && error.message.includes('fetch')) {\n          this.circuit.onFailure();\n          lastError = new PalveronError('Network error — could not reach gateway', {\n            code: 'NETWORK_ERROR', statusCode: 0, requestId, retryable: true,\n          });\n          continue;\n        }\n\n        if (error instanceof PalveronError) {\n          lastError = error;\n          continue;\n        }\n\n        throw error;\n      }\n    }\n\n    throw lastError ?? new PalveronError('Max retries exceeded', {\n      code: 'MAX_RETRIES', statusCode: 0, retryable: false,\n    });\n  }\n\n  // ─── Helpers ────────────────────────────────────────────\n\n  private backoffDelay(attempt: number): number {\n    const base = this.config.retryBaseDelay * Math.pow(2, attempt - 1);\n    const jitter = base * 0.2 * Math.random();\n    return Math.min(base + jitter, 30_000);\n  }\n\n  private sleep(ms: number): Promise<void> {\n    return new Promise(resolve => setTimeout(resolve, ms));\n  }\n\n  private generateRequestId(): string {\n    const ts = Date.now().toString(36);\n    const rand = Math.random().toString(36).slice(2, 8);\n    return `pv_${ts}_${rand}`;\n  }\n\n  private inferMimeType(filename: string): string {\n    const ext = filename.split('.').pop()?.toLowerCase();\n    const map: Record<string, string> = {\n      png: 'image/png', jpg: 'image/jpeg', jpeg: 'image/jpeg', gif: 'image/gif',\n      webp: 'image/webp', svg: 'image/svg+xml', pdf: 'application/pdf',\n      wav: 'audio/wav', mp3: 'audio/mpeg', ogg: 'audio/ogg', mp4: 'video/mp4',\n      py: 'text/x-python', js: 'text/javascript', ts: 'text/typescript',\n      rs: 'text/x-rust', go: 'text/x-go', java: 'text/x-java',\n      c: 'text/x-c', cpp: 'text/x-c++', txt: 'text/plain',\n      json: 'application/json', csv: 'text/csv', xml: 'application/xml',\n    };\n    return map[ext ?? ''] ?? 'application/octet-stream';\n  }\n}\n\n// ─── Factory ──────────────────────────────────────────────\n\n/**\n * Create a Palveron client instance.\n *\n * @example\n * ```typescript\n * import { createClient } from '@palveron/sdk';\n *\n * const palveron = createClient({\n *   apiKey: process.env.PALVERON_API_KEY!,\n *   baseUrl: 'https://gateway.acme.corp:8080', // on-prem\n * });\n *\n * const result = await palveron.verify({ prompt: userInput });\n * ```\n */\nexport function createClient(config: PalveronConfig): Palveron {\n  return new Palveron(config);\n}\n\n// ─── Re-exports ─────────────────────────────────────────\n\nexport default Palveron;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAkIO,IAAM,gBAAN,cAA4B,MAAM;AAAA,EACvB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEhB,YAAY,SAAiB,MAK1B;AACD,UAAM,OAAO;AACb,SAAK,OAAO;AACZ,SAAK,OAAO,KAAK;AACjB,SAAK,aAAa,KAAK;AACvB,SAAK,YAAY,KAAK,aAAa;AACnC,SAAK,YAAY,KAAK,aAAa;AAAA,EACrC;AACF;AAEO,IAAM,8BAAN,cAA0C,cAAc;AAAA,EAC7D,YAAY,SAAiB,WAA2B;AACtD,UAAM,SAAS,EAAE,MAAM,yBAAyB,YAAY,KAAK,WAAW,WAAW,MAAM,CAAC;AAC9F,SAAK,OAAO;AAAA,EACd;AACF;AAEO,IAAM,yBAAN,cAAqC,cAAc;AAAA,EACxC;AAAA,EAEhB,YAAY,SAAiB,cAAsB,WAA2B;AAC5E,UAAM,SAAS,EAAE,MAAM,gBAAgB,YAAY,KAAK,WAAW,WAAW,KAAK,CAAC;AACpF,SAAK,OAAO;AACZ,SAAK,eAAe;AAAA,EACtB;AACF;AAEO,IAAM,0BAAN,cAAsC,cAAc;AAAA,EACzC;AAAA,EAEhB,YAAY,SAAiB,OAAgB,WAA2B;AACtE,UAAM,SAAS,EAAE,MAAM,oBAAoB,YAAY,KAAK,WAAW,WAAW,MAAM,CAAC;AACzF,SAAK,OAAO;AACZ,SAAK,QAAQ,SAAS;AAAA,EACxB;AACF;AAEO,IAAM,2BAAN,cAAuC,cAAc;AAAA,EAC1D,cAAc;AACZ,UAAM,8EAAyE;AAAA,MAC7E,MAAM;AAAA,MAAgB,YAAY;AAAA,MAAK,WAAW;AAAA,IACpD,CAAC;AACD,SAAK,OAAO;AAAA,EACd;AACF;AAEO,IAAM,uBAAN,cAAmC,cAAc;AAAA,EACtD,YAAY,WAAmB,WAA2B;AACxD,UAAM,2BAA2B,SAAS,MAAM;AAAA,MAC9C,MAAM;AAAA,MAAW,YAAY;AAAA,MAAK;AAAA,MAAW,WAAW;AAAA,IAC1D,CAAC;AACD,SAAK,OAAO;AAAA,EACd;AACF;AAIA,IAAM,iBAAN,MAAqB;AAAA,EAKnB,YACU,WACA,YACR;AAFQ;AACA;AAAA,EACP;AAAA,EAFO;AAAA,EACA;AAAA,EANF,WAAW;AAAA,EACX,cAAc;AAAA,EACd,QAAyC;AAAA,EAOjD,aAAsB;AACpB,QAAI,KAAK,UAAU,SAAU,QAAO;AACpC,QAAI,KAAK,UAAU,QAAQ;AACzB,UAAI,KAAK,IAAI,IAAI,KAAK,eAAe,KAAK,YAAY;AACpD,aAAK,QAAQ;AACb,eAAO;AAAA,MACT;AACA,aAAO;AAAA,IACT;AACA,WAAO;AAAA,EACT;AAAA,EAEA,YAAkB;AAChB,SAAK,WAAW;AAChB,SAAK,QAAQ;AAAA,EACf;AAAA,EAEA,YAAkB;AAChB,SAAK;AACL,SAAK,cAAc,KAAK,IAAI;AAC5B,QAAI,KAAK,YAAY,KAAK,WAAW;AACnC,WAAK,QAAQ;AAAA,IACf;AAAA,EACF;AAAA,EAEA,WAAmB;AACjB,WAAO,KAAK;AAAA,EACd;AACF;AAIA,IAAM,mBAAmB;AACzB,IAAM,kBAAkB;AACxB,IAAM,sBAAsB;AAC5B,IAAM,2BAA2B;AACjC,IAAM,cAAc;AAEb,IAAM,WAAN,MAAe;AAAA,EACH;AAAA,EAIA;AAAA,EAEjB,YAAY,QAAwB;AAClC,QAAI,CAAC,OAAO,OAAQ,OAAM,IAAI,wBAAwB,oBAAoB;AAE1E,SAAK,SAAS;AAAA,MACZ,QAAQ,OAAO;AAAA,MACf,UAAU,OAAO,WAAW,kBAAkB,QAAQ,QAAQ,EAAE;AAAA,MAChE,SAAS,OAAO,WAAW;AAAA,MAC3B,YAAY,OAAO,cAAc;AAAA,MACjC,gBAAgB,OAAO,kBAAkB;AAAA,MACzC,QAAQ,OAAO;AAAA,MACf,SAAS,OAAO;AAAA,IAClB;AAEA,SAAK,UAAU,IAAI;AAAA,MACjB,OAAO,2BAA2B;AAAA,MAClC,OAAO,0BAA0B;AAAA,IACnC;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAgBA,MAAM,OAAO,SAAiD;AAC5D,UAAM,OAAO;AAAA,MACX,QAAQ,QAAQ;AAAA,MAChB,gBAAgB,QAAQ;AAAA,MACxB,UAAU,QAAQ;AAAA,MAClB,aAAa,QAAQ,aAAa,IAAI,QAAM;AAAA,QAC1C,cAAc,EAAE;AAAA,QAChB,MAAM,EAAE;AAAA,QACR,UAAU,EAAE;AAAA,QACZ,UAAU,EAAE;AAAA,MACd,EAAE;AAAA,MACF,SAAS,QAAQ,UAAU;AAAA,QACzB,YAAY,QAAQ,QAAQ;AAAA,QAC5B,WAAW,QAAQ,QAAQ;AAAA,QAC3B,aAAa,QAAQ,QAAQ;AAAA,QAC7B,eAAe,QAAQ,QAAQ;AAAA,QAC/B,YAAY,QAAQ,QAAQ;AAAA,MAC9B,IAAI;AAAA,IACN;AAEA,UAAM,QAAQ,KAAK,IAAI;AACvB,UAAM,MAAM,MAAM,KAAK,QAAiC,QAAQ,kBAAkB,IAAI;AACtF,UAAM,UAAU,KAAK,IAAI,IAAI;AAE7B,WAAO;AAAA,MACL,UAAW,IAAI,YAAyB;AAAA,MACxC,QAAS,IAAI,UAAqB;AAAA,MAClC,QAAS,IAAI,UAAqB;AAAA,MAClC,SAAU,IAAI,YAAuB;AAAA,MACrC,eAAgB,IAAI,kBAA6B;AAAA,MACjD,cAAe,IAAI,iBAA6B;AAAA,MAChD,aAAc,IAAI,gBAA2B;AAAA,MAC7C,aAAc,IAAI,iBAAmC;AAAA,MACrD,aAAc,IAAI,gBAA2B;AAAA,MAC7C,UAAW,IAAI,YAA0B,CAAC;AAAA,MAC1C,WAAW;AAAA,IACb;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAaA,MAAM,MAAM,QAAyC;AACnD,WAAO,KAAK,OAAO,EAAE,OAAO,CAAC;AAAA,EAC/B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAiBA,MAAM,eAAe,QAAgB,UAA2C;AAE9E,UAAM,EAAE,SAAS,IAAI,MAAM,OAAO,aAAkB;AACpD,UAAM,EAAE,SAAS,IAAI,MAAM,OAAO,MAAW;AAE7C,UAAM,SAAS,MAAM,SAAS,QAAQ;AACtC,UAAM,SAAS,OAAO,SAAS,QAAQ;AACvC,UAAM,WAAW,SAAS,QAAQ;AAClC,UAAM,cAAc,KAAK,cAAc,QAAQ;AAE/C,WAAO,KAAK,OAAO;AAAA,MACjB;AAAA,MACA,aAAa,CAAC,EAAE,aAAa,MAAM,QAAQ,SAAS,CAAC;AAAA,IACvD,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,aAAa,MAAc,QAAqC;AACpE,WAAO,KAAK,QAA4B,OAAO,wBAAwB,GAAG,EAAE;AAAA,EAC9E;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,SAAkC;AACtC,WAAO,KAAK,QAAwB,OAAO,SAAS;AAAA,EACtD;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,cAME;AACA,WAAO;AAAA,MACL,YAAY;AAAA,MACZ,SAAS,KAAK,OAAO;AAAA,MACrB,SAAS,KAAK,OAAO;AAAA,MACrB,YAAY,KAAK,OAAO;AAAA,MACxB,cAAc,KAAK,QAAQ,SAAS;AAAA,IACtC;AAAA,EACF;AAAA;AAAA,EAIA,MAAc,QAAW,QAAgB,MAAc,MAA4B;AACjF,QAAI,CAAC,KAAK,QAAQ,WAAW,GAAG;AAC9B,YAAM,IAAI,yBAAyB;AAAA,IACrC;AAEA,QAAI,YAA0B;AAC9B,UAAM,cAAc,KAAK,OAAO,aAAa;AAE7C,aAAS,UAAU,GAAG,UAAU,aAAa,WAAW;AACtD,UAAI,UAAU,GAAG;AACf,cAAM,QAAQ,KAAK,aAAa,OAAO;AACvC,aAAK,OAAO,QAAQ,MAAM,iBAAiB,OAAO,IAAI,KAAK,OAAO,UAAU,IAAI,EAAE,OAAO,KAAK,CAAC;AAC/F,cAAM,KAAK,MAAM,KAAK;AAAA,MACxB;AAEA,YAAM,YAAY,KAAK,kBAAkB;AAEzC,UAAI;AACF,cAAM,aAAa,IAAI,gBAAgB;AACvC,cAAM,QAAQ,WAAW,MAAM,WAAW,MAAM,GAAG,KAAK,OAAO,OAAO;AAEtE,cAAM,UAAkC;AAAA,UACtC,iBAAiB,UAAU,KAAK,OAAO,MAAM;AAAA,UAC7C,gBAAgB;AAAA,UAChB,UAAU;AAAA,UACV,cAAc,2BAA2B,WAAW;AAAA,UACpD,gBAAgB;AAAA,UAChB,GAAG,KAAK,OAAO;AAAA,QACjB;AAEA,cAAM,WAAW,MAAM,MAAM,GAAG,KAAK,OAAO,OAAO,GAAG,IAAI,IAAI;AAAA,UAC5D;AAAA,UACA;AAAA,UACA,MAAM,OAAO,KAAK,UAAU,IAAI,IAAI;AAAA,UACpC,QAAQ,WAAW;AAAA,QACrB,CAAC;AAED,qBAAa,KAAK;AAElB,cAAM,oBAAoB,SAAS,QAAQ,IAAI,cAAc,KAAK;AAElE,YAAI,SAAS,IAAI;AACf,eAAK,QAAQ,UAAU;AACvB,iBAAO,MAAM,SAAS,KAAK;AAAA,QAC7B;AAGA,YAAI,SAAS,WAAW,KAAK;AAC3B,eAAK,QAAQ,UAAU;AACvB,gBAAM,IAAI;AAAA,YACR;AAAA,YACA;AAAA,UACF;AAAA,QACF;AAEA,YAAI,SAAS,WAAW,KAAK;AAC3B,gBAAM,aAAa,SAAS,SAAS,QAAQ,IAAI,aAAa,KAAK,KAAK,EAAE,IAAI;AAC9E,gBAAM,IAAI;AAAA,YACR;AAAA,YACA;AAAA,YACA;AAAA,UACF;AAAA,QACF;AAEA,YAAI,SAAS,WAAW,KAAK;AAC3B,gBAAMA,aAAY,MAAM,SAAS,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AACxD,gBAAM,IAAI;AAAA,YACRA,WAAU,SAAS;AAAA,YACnBA,WAAU;AAAA,YACV;AAAA,UACF;AAAA,QACF;AAGA,YAAI,SAAS,UAAU,KAAK;AAC1B,eAAK,QAAQ,UAAU;AACvB,gBAAMA,aAAY,MAAM,SAAS,KAAK,EAAE,MAAM,MAAM,EAAE;AACtD,sBAAY,IAAI;AAAA,YACd,iBAAiB,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,YACvD,EAAE,MAAM,gBAAgB,YAAY,SAAS,QAAQ,WAAW,mBAAmB,WAAW,KAAK;AAAA,UACrG;AACA,eAAK,OAAO,QAAQ,KAAK,2BAA2B,UAAU,CAAC,IAAI;AAAA,YACjE,QAAQ,SAAS;AAAA,YACjB,WAAW;AAAA,YACX,MAAMA,WAAU,MAAM,GAAG,GAAG;AAAA,UAC9B,CAAC;AACD;AAAA,QACF;AAGA,cAAM,YAAY,MAAM,SAAS,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AACxD,cAAM,IAAI;AAAA,UACR,UAAU,SAAS,QAAQ,SAAS,MAAM;AAAA,UAC1C,EAAE,MAAM,gBAAgB,YAAY,SAAS,QAAQ,WAAW,mBAAmB,WAAW,MAAM;AAAA,QACtG;AAAA,MAEF,SAAS,OAAO;AACd,YAAI,iBAAiB,iBAAiB,CAAC,MAAM,UAAW,OAAM;AAE9D,YAAI,iBAAiB,gBAAgB,MAAM,SAAS,cAAc;AAChE,eAAK,QAAQ,UAAU;AACvB,sBAAY,IAAI,qBAAqB,KAAK,OAAO,SAAS,SAAS;AACnE;AAAA,QACF;AAEA,YAAI,iBAAiB,aAAa,MAAM,QAAQ,SAAS,OAAO,GAAG;AACjE,eAAK,QAAQ,UAAU;AACvB,sBAAY,IAAI,cAAc,gDAA2C;AAAA,YACvE,MAAM;AAAA,YAAiB,YAAY;AAAA,YAAG;AAAA,YAAW,WAAW;AAAA,UAC9D,CAAC;AACD;AAAA,QACF;AAEA,YAAI,iBAAiB,eAAe;AAClC,sBAAY;AACZ;AAAA,QACF;AAEA,cAAM;AAAA,MACR;AAAA,IACF;AAEA,UAAM,aAAa,IAAI,cAAc,wBAAwB;AAAA,MAC3D,MAAM;AAAA,MAAe,YAAY;AAAA,MAAG,WAAW;AAAA,IACjD,CAAC;AAAA,EACH;AAAA;AAAA,EAIQ,aAAa,SAAyB;AAC5C,UAAM,OAAO,KAAK,OAAO,iBAAiB,KAAK,IAAI,GAAG,UAAU,CAAC;AACjE,UAAM,SAAS,OAAO,MAAM,KAAK,OAAO;AACxC,WAAO,KAAK,IAAI,OAAO,QAAQ,GAAM;AAAA,EACvC;AAAA,EAEQ,MAAM,IAA2B;AACvC,WAAO,IAAI,QAAQ,aAAW,WAAW,SAAS,EAAE,CAAC;AAAA,EACvD;AAAA,EAEQ,oBAA4B;AAClC,UAAM,KAAK,KAAK,IAAI,EAAE,SAAS,EAAE;AACjC,UAAM,OAAO,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,GAAG,CAAC;AAClD,WAAO,MAAM,EAAE,IAAI,IAAI;AAAA,EACzB;AAAA,EAEQ,cAAc,UAA0B;AAC9C,UAAM,MAAM,SAAS,MAAM,GAAG,EAAE,IAAI,GAAG,YAAY;AACnD,UAAM,MAA8B;AAAA,MAClC,KAAK;AAAA,MAAa,KAAK;AAAA,MAAc,MAAM;AAAA,MAAc,KAAK;AAAA,MAC9D,MAAM;AAAA,MAAc,KAAK;AAAA,MAAiB,KAAK;AAAA,MAC/C,KAAK;AAAA,MAAa,KAAK;AAAA,MAAc,KAAK;AAAA,MAAa,KAAK;AAAA,MAC5D,IAAI;AAAA,MAAiB,IAAI;AAAA,MAAmB,IAAI;AAAA,MAChD,IAAI;AAAA,MAAe,IAAI;AAAA,MAAa,MAAM;AAAA,MAC1C,GAAG;AAAA,MAAY,KAAK;AAAA,MAAc,KAAK;AAAA,MACvC,MAAM;AAAA,MAAoB,KAAK;AAAA,MAAY,KAAK;AAAA,IAClD;AACA,WAAO,IAAI,OAAO,EAAE,KAAK;AAAA,EAC3B;AACF;AAmBO,SAAS,aAAa,QAAkC;AAC7D,SAAO,IAAI,SAAS,MAAM;AAC5B;AAIA,IAAO,gBAAQ;","names":["errorBody"]}

package/dist/index.mjs

@@ -0,0 +1,402 @@
+// src/index.ts
+var PalveronError = class extends Error {
+  code;
+  statusCode;
+  requestId;
+  retryable;
+  constructor(message, opts) {
+    super(message);
+    this.name = "PalveronError";
+    this.code = opts.code;
+    this.statusCode = opts.statusCode;
+    this.requestId = opts.requestId ?? null;
+    this.retryable = opts.retryable ?? false;
+  }
+};
+var PalveronAuthenticationError = class extends PalveronError {
+  constructor(message, requestId) {
+    super(message, { code: "AUTHENTICATION_FAILED", statusCode: 401, requestId, retryable: false });
+    this.name = "PalveronAuthenticationError";
+  }
+};
+var PalveronRateLimitError = class extends PalveronError {
+  retryAfterMs;
+  constructor(message, retryAfterMs, requestId) {
+    super(message, { code: "RATE_LIMITED", statusCode: 429, requestId, retryable: true });
+    this.name = "PalveronRateLimitError";
+    this.retryAfterMs = retryAfterMs;
+  }
+};
+var PalveronValidationError = class extends PalveronError {
+  field;
+  constructor(message, field, requestId) {
+    super(message, { code: "VALIDATION_ERROR", statusCode: 400, requestId, retryable: false });
+    this.name = "PalveronValidationError";
+    this.field = field ?? null;
+  }
+};
+var PalveronCircuitOpenError = class extends PalveronError {
+  constructor() {
+    super("Circuit breaker is open \u2014 too many consecutive failures. Retry later.", {
+      code: "CIRCUIT_OPEN",
+      statusCode: 503,
+      retryable: false
+    });
+    this.name = "PalveronCircuitOpenError";
+  }
+};
+var PalveronTimeoutError = class extends PalveronError {
+  constructor(timeoutMs, requestId) {
+    super(`Request timed out after ${timeoutMs}ms`, {
+      code: "TIMEOUT",
+      statusCode: 408,
+      requestId,
+      retryable: true
+    });
+    this.name = "PalveronTimeoutError";
+  }
+};
+var CircuitBreaker = class {
+  constructor(threshold, cooldownMs) {
+    this.threshold = threshold;
+    this.cooldownMs = cooldownMs;
+  }
+  threshold;
+  cooldownMs;
+  failures = 0;
+  lastFailure = 0;
+  state = "closed";
+  canRequest() {
+    if (this.state === "closed") return true;
+    if (this.state === "open") {
+      if (Date.now() - this.lastFailure >= this.cooldownMs) {
+        this.state = "half-open";
+        return true;
+      }
+      return false;
+    }
+    return true;
+  }
+  onSuccess() {
+    this.failures = 0;
+    this.state = "closed";
+  }
+  onFailure() {
+    this.failures++;
+    this.lastFailure = Date.now();
+    if (this.failures >= this.threshold) {
+      this.state = "open";
+    }
+  }
+  getState() {
+    return this.state;
+  }
+};
+var DEFAULT_BASE_URL = "https://gateway.palveron.com";
+var DEFAULT_TIMEOUT = 3e4;
+var DEFAULT_MAX_RETRIES = 3;
+var DEFAULT_RETRY_BASE_DELAY = 500;
+var SDK_VERSION = "1.0.0";
+var Palveron = class {
+  config;
+  circuit;
+  constructor(config) {
+    if (!config.apiKey) throw new PalveronValidationError("apiKey is required");
+    this.config = {
+      apiKey: config.apiKey,
+      baseUrl: (config.baseUrl ?? DEFAULT_BASE_URL).replace(/\/+$/, ""),
+      timeout: config.timeout ?? DEFAULT_TIMEOUT,
+      maxRetries: config.maxRetries ?? DEFAULT_MAX_RETRIES,
+      retryBaseDelay: config.retryBaseDelay ?? DEFAULT_RETRY_BASE_DELAY,
+      logger: config.logger,
+      headers: config.headers
+    };
+    this.circuit = new CircuitBreaker(
+      config.circuitBreakerThreshold ?? 5,
+      config.circuitBreakerCooldown ?? 3e4
+    );
+  }
+  // ── Core: Verify ────────────────────────────────────────
+  /**
+   * Send a governance verification request.
+   * This is the primary method — every LLM call should go through this.
+   *
+   * @example
+   * ```typescript
+   * const result = await palveron.verify({ prompt: 'User input here' });
+   * if (result.decision === 'BLOCKED') {
+   *   throw new Error(result.reason);
+   * }
+   * ```
+   */
+  async verify(request) {
+    const body = {
+      prompt: request.prompt,
+      extracted_text: request.extractedText,
+      metadata: request.metadata,
+      attachments: request.attachments?.map((a) => ({
+        content_type: a.contentType,
+        data: a.data,
+        filename: a.filename,
+        metadata: a.metadata
+      })),
+      context: request.context ? {
+        mcp_server: request.context.mcpServer,
+        tool_name: request.context.toolName,
+        chain_depth: request.context.chainDepth,
+        source_system: request.context.sourceSystem,
+        session_id: request.context.sessionId
+      } : void 0
+    };
+    const start = Date.now();
+    const raw = await this.request("POST", "/api/v1/verify", body);
+    const latency = Date.now() - start;
+    return {
+      decision: raw.decision ?? "ERROR",
+      output: raw.output ?? "",
+      reason: raw.reason ?? "",
+      traceId: raw.trace_id ?? "",
+      integrityHash: raw.integrity_hash ?? "",
+      shouldAnchor: raw.should_anchor ?? false,
+      flareStatus: raw.flare_status ?? "",
+      flareTxHash: raw.flare_tx_hash ?? null,
+      contentType: raw.content_type ?? "text",
+      findings: raw.findings ?? [],
+      latencyMs: latency
+    };
+  }
+  // ── Convenience: Quick verify (string-only) ─────────────
+  /**
+   * Quick verification for text-only prompts.
+   *
+   * @example
+   * ```typescript
+   * const result = await palveron.check('Is this prompt safe?');
+   * console.log(result.decision); // 'ALLOWED'
+   * ```
+   */
+  async check(prompt) {
+    return this.verify({ prompt });
+  }
+  // ── Convenience: Verify with file ───────────────────────
+  /**
+   * Verify a prompt with a file attachment.
+   * Reads the file, Base64-encodes it, and sends it with the correct MIME type.
+   * Node.js only — use verify() with pre-encoded data in browsers.
+   *
+   * @example
+   * ```typescript
+   * const result = await palveron.verifyWithFile(
+   *   'Analyze this document',
+   *   '/path/to/report.pdf'
+   * );
+   * ```
+   */
+  async verifyWithFile(prompt, filePath) {
+    const { readFile } = await import("fs/promises");
+    const { basename } = await import("path");
+    const buffer = await readFile(filePath);
+    const base64 = buffer.toString("base64");
+    const filename = basename(filePath);
+    const contentType = this.inferMimeType(filename);
+    return this.verify({
+      prompt,
+      attachments: [{ contentType, data: base64, filename }]
+    });
+  }
+  // ── Policies ────────────────────────────────────────────
+  /**
+   * List all active policies for the project.
+   */
+  async listPolicies(env = "prod") {
+    return this.request("GET", `/api/v1/policies?env=${env}`);
+  }
+  // ── Health ──────────────────────────────────────────────
+  /**
+   * Check gateway health status.
+   */
+  async health() {
+    return this.request("GET", "/health");
+  }
+  // ── Diagnostics ─────────────────────────────────────────
+  /**
+   * Get SDK and connection diagnostics.
+   */
+  diagnostics() {
+    return {
+      sdkVersion: SDK_VERSION,
+      baseUrl: this.config.baseUrl,
+      timeout: this.config.timeout,
+      maxRetries: this.config.maxRetries,
+      circuitState: this.circuit.getState()
+    };
+  }
+  // ─── Internal: HTTP with retry + circuit breaker ────────
+  async request(method, path, body) {
+    if (!this.circuit.canRequest()) {
+      throw new PalveronCircuitOpenError();
+    }
+    let lastError = null;
+    const maxAttempts = this.config.maxRetries + 1;
+    for (let attempt = 0; attempt < maxAttempts; attempt++) {
+      if (attempt > 0) {
+        const delay = this.backoffDelay(attempt);
+        this.config.logger?.debug(`Retry attempt ${attempt}/${this.config.maxRetries}`, { delay, path });
+        await this.sleep(delay);
+      }
+      const requestId = this.generateRequestId();
+      try {
+        const controller = new AbortController();
+        const timer = setTimeout(() => controller.abort(), this.config.timeout);
+        const headers = {
+          "Authorization": `Bearer ${this.config.apiKey}`,
+          "Content-Type": "application/json",
+          "Accept": "application/json",
+          "User-Agent": `palveron-sdk-typescript/${SDK_VERSION}`,
+          "X-Request-ID": requestId,
+          ...this.config.headers
+        };
+        const response = await fetch(`${this.config.baseUrl}${path}`, {
+          method,
+          headers,
+          body: body ? JSON.stringify(body) : void 0,
+          signal: controller.signal
+        });
+        clearTimeout(timer);
+        const responseRequestId = response.headers.get("x-request-id") ?? requestId;
+        if (response.ok) {
+          this.circuit.onSuccess();
+          return await response.json();
+        }
+        if (response.status === 401) {
+          this.circuit.onSuccess();
+          throw new PalveronAuthenticationError(
+            "Invalid API key or expired token",
+            responseRequestId
+          );
+        }
+        if (response.status === 429) {
+          const retryAfter = parseInt(response.headers.get("retry-after") ?? "5", 10) * 1e3;
+          throw new PalveronRateLimitError(
+            "Rate limit exceeded",
+            retryAfter,
+            responseRequestId
+          );
+        }
+        if (response.status === 400) {
+          const errorBody2 = await response.json().catch(() => ({}));
+          throw new PalveronValidationError(
+            errorBody2.error ?? "Invalid request",
+            errorBody2.field,
+            responseRequestId
+          );
+        }
+        if (response.status >= 500) {
+          this.circuit.onFailure();
+          const errorBody2 = await response.text().catch(() => "");
+          lastError = new PalveronError(
+            `Server error: ${response.status} ${response.statusText}`,
+            { code: "SERVER_ERROR", statusCode: response.status, requestId: responseRequestId, retryable: true }
+          );
+          this.config.logger?.warn(`Server error on attempt ${attempt + 1}`, {
+            status: response.status,
+            requestId: responseRequestId,
+            body: errorBody2.slice(0, 200)
+          });
+          continue;
+        }
+        const errorBody = await response.json().catch(() => ({}));
+        throw new PalveronError(
+          errorBody.error ?? `HTTP ${response.status}`,
+          { code: "CLIENT_ERROR", statusCode: response.status, requestId: responseRequestId, retryable: false }
+        );
+      } catch (error) {
+        if (error instanceof PalveronError && !error.retryable) throw error;
+        if (error instanceof DOMException && error.name === "AbortError") {
+          this.circuit.onFailure();
+          lastError = new PalveronTimeoutError(this.config.timeout, requestId);
+          continue;
+        }
+        if (error instanceof TypeError && error.message.includes("fetch")) {
+          this.circuit.onFailure();
+          lastError = new PalveronError("Network error \u2014 could not reach gateway", {
+            code: "NETWORK_ERROR",
+            statusCode: 0,
+            requestId,
+            retryable: true
+          });
+          continue;
+        }
+        if (error instanceof PalveronError) {
+          lastError = error;
+          continue;
+        }
+        throw error;
+      }
+    }
+    throw lastError ?? new PalveronError("Max retries exceeded", {
+      code: "MAX_RETRIES",
+      statusCode: 0,
+      retryable: false
+    });
+  }
+  // ─── Helpers ────────────────────────────────────────────
+  backoffDelay(attempt) {
+    const base = this.config.retryBaseDelay * Math.pow(2, attempt - 1);
+    const jitter = base * 0.2 * Math.random();
+    return Math.min(base + jitter, 3e4);
+  }
+  sleep(ms) {
+    return new Promise((resolve) => setTimeout(resolve, ms));
+  }
+  generateRequestId() {
+    const ts = Date.now().toString(36);
+    const rand = Math.random().toString(36).slice(2, 8);
+    return `pv_${ts}_${rand}`;
+  }
+  inferMimeType(filename) {
+    const ext = filename.split(".").pop()?.toLowerCase();
+    const map = {
+      png: "image/png",
+      jpg: "image/jpeg",
+      jpeg: "image/jpeg",
+      gif: "image/gif",
+      webp: "image/webp",
+      svg: "image/svg+xml",
+      pdf: "application/pdf",
+      wav: "audio/wav",
+      mp3: "audio/mpeg",
+      ogg: "audio/ogg",
+      mp4: "video/mp4",
+      py: "text/x-python",
+      js: "text/javascript",
+      ts: "text/typescript",
+      rs: "text/x-rust",
+      go: "text/x-go",
+      java: "text/x-java",
+      c: "text/x-c",
+      cpp: "text/x-c++",
+      txt: "text/plain",
+      json: "application/json",
+      csv: "text/csv",
+      xml: "application/xml"
+    };
+    return map[ext ?? ""] ?? "application/octet-stream";
+  }
+};
+function createClient(config) {
+  return new Palveron(config);
+}
+var index_default = Palveron;
+export {
+  Palveron,
+  PalveronAuthenticationError,
+  PalveronCircuitOpenError,
+  PalveronError,
+  PalveronRateLimitError,
+  PalveronTimeoutError,
+  PalveronValidationError,
+  createClient,
+  index_default as default
+};
+//# sourceMappingURL=index.mjs.map

package/dist/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts"],"sourcesContent":["// ============================================================\n// @palveron/sdk — Official TypeScript SDK for Palveron AI Governance\n// ============================================================\n// Zero dependencies. Works in Node.js 18+, Deno, Bun, Edge Runtimes.\n// ============================================================\n\n// ─── Types ──────────────────────────────────────────────────\n\nexport type Decision = 'ALLOWED' | 'BLOCKED' | 'MODIFIED' | 'ERROR';\nexport type RiskLevel = 'minimal' | 'limited' | 'high' | 'unacceptable';\nexport type Sensitivity = 'low' | 'medium' | 'high';\n\nexport interface PalveronConfig {\n  /** API key (starts with pv_live_ or pv_test_) */\n  apiKey: string;\n  /** Gateway base URL (default: https://gateway.palveron.com) */\n  baseUrl?: string;\n  /** Request timeout in ms (default: 30000) */\n  timeout?: number;\n  /** Max retry attempts on transient failures (default: 3) */\n  maxRetries?: number;\n  /** Base delay for exponential backoff in ms (default: 500) */\n  retryBaseDelay?: number;\n  /** Custom logger (default: console) */\n  logger?: PalveronLogger;\n  /** Custom headers added to every request */\n  headers?: Record<string, string>;\n  /** Circuit breaker: max consecutive failures before opening (default: 5) */\n  circuitBreakerThreshold?: number;\n  /** Circuit breaker: cooldown in ms before half-open retry (default: 30000) */\n  circuitBreakerCooldown?: number;\n}\n\nexport interface PalveronLogger {\n  debug(message: string, meta?: Record<string, unknown>): void;\n  info(message: string, meta?: Record<string, unknown>): void;\n  warn(message: string, meta?: Record<string, unknown>): void;\n  error(message: string, meta?: Record<string, unknown>): void;\n}\n\nexport interface Attachment {\n  /** MIME type (e.g. \"image/png\", \"audio/wav\", \"application/pdf\") */\n  contentType: string;\n  /** Base64-encoded data */\n  data: string;\n  /** Optional filename */\n  filename?: string;\n  /** Optional per-attachment metadata (GPS, resolution, etc.) */\n  metadata?: Record<string, unknown>;\n}\n\nexport interface RequestContext {\n  /** MCP server URL if applicable */\n  mcpServer?: string;\n  /** MCP tool name */\n  toolName?: string;\n  /** Agent chain depth for recursive calls */\n  chainDepth?: number;\n  /** Source system identifier (\"ros2\", \"unity\", \"cursor-ide\", etc.) */\n  sourceSystem?: string;\n  /** Session ID for conversation tracking */\n  sessionId?: string;\n}\n\nexport interface VerifyRequest {\n  /** The prompt or input text to verify */\n  prompt: string;\n  /** Pre-extracted text from attachments (optional, server extracts if absent) */\n  extractedText?: string;\n  /** Arbitrary metadata passed through to the trace */\n  metadata?: Record<string, unknown>;\n  /** Multi-modal attachments (images, audio, documents, code) */\n  attachments?: Attachment[];\n  /** Agentic context (MCP, tool chains, source systems) */\n  context?: RequestContext;\n}\n\nexport interface Finding {\n  risk: 'LOW' | 'MEDIUM' | 'HIGH' | 'CRITICAL';\n  category: string;\n  description: string;\n  confidence: number;\n}\n\nexport interface VerifyResponse {\n  /** Governance decision */\n  decision: Decision;\n  /** Modified/sanitized output (present when decision is MODIFIED) */\n  output: string;\n  /** Human-readable reason for the decision */\n  reason: string;\n  /** Unique trace ID for audit trail */\n  traceId: string;\n  /** SHA-256 integrity hash of the governance decision */\n  integrityHash: string;\n  /** Whether this trace will be anchored to Flare blockchain */\n  shouldAnchor: boolean;\n  /** Flare blockchain status */\n  flareStatus: string;\n  /** Flare transaction hash (populated after anchoring) */\n  flareTxHash: string | null;\n  /** Detected content type */\n  contentType: string;\n  /** Security findings (secrets, PII, policy violations) */\n  findings: Finding[];\n  /** Server-side latency in milliseconds */\n  latencyMs: number;\n}\n\nexport interface PolicyListResponse {\n  policies: Array<{\n    id: string;\n    name: string;\n    prompt: string;\n    environment: string;\n    contentTypes: string[];\n    createdAt: string;\n    updatedAt: string;\n  }>;\n}\n\nexport interface HealthResponse {\n  status: 'healthy' | 'degraded' | 'unhealthy';\n  version: string;\n  uptime: number;\n  checks: Record<string, { status: string; latencyMs: number }>;\n}\n\n// ─── Errors ─────────────────────────────────────────────────\n\nexport class PalveronError extends Error {\n  public readonly code: string;\n  public readonly statusCode: number;\n  public readonly requestId: string | null;\n  public readonly retryable: boolean;\n\n  constructor(message: string, opts: {\n    code: string;\n    statusCode: number;\n    requestId?: string | null;\n    retryable?: boolean;\n  }) {\n    super(message);\n    this.name = 'PalveronError';\n    this.code = opts.code;\n    this.statusCode = opts.statusCode;\n    this.requestId = opts.requestId ?? null;\n    this.retryable = opts.retryable ?? false;\n  }\n}\n\nexport class PalveronAuthenticationError extends PalveronError {\n  constructor(message: string, requestId?: string | null) {\n    super(message, { code: 'AUTHENTICATION_FAILED', statusCode: 401, requestId, retryable: false });\n    this.name = 'PalveronAuthenticationError';\n  }\n}\n\nexport class PalveronRateLimitError extends PalveronError {\n  public readonly retryAfterMs: number;\n\n  constructor(message: string, retryAfterMs: number, requestId?: string | null) {\n    super(message, { code: 'RATE_LIMITED', statusCode: 429, requestId, retryable: true });\n    this.name = 'PalveronRateLimitError';\n    this.retryAfterMs = retryAfterMs;\n  }\n}\n\nexport class PalveronValidationError extends PalveronError {\n  public readonly field: string | null;\n\n  constructor(message: string, field?: string, requestId?: string | null) {\n    super(message, { code: 'VALIDATION_ERROR', statusCode: 400, requestId, retryable: false });\n    this.name = 'PalveronValidationError';\n    this.field = field ?? null;\n  }\n}\n\nexport class PalveronCircuitOpenError extends PalveronError {\n  constructor() {\n    super('Circuit breaker is open — too many consecutive failures. Retry later.', {\n      code: 'CIRCUIT_OPEN', statusCode: 503, retryable: false,\n    });\n    this.name = 'PalveronCircuitOpenError';\n  }\n}\n\nexport class PalveronTimeoutError extends PalveronError {\n  constructor(timeoutMs: number, requestId?: string | null) {\n    super(`Request timed out after ${timeoutMs}ms`, {\n      code: 'TIMEOUT', statusCode: 408, requestId, retryable: true,\n    });\n    this.name = 'PalveronTimeoutError';\n  }\n}\n\n// ─── Circuit Breaker ────────────────────────────────────────\n\nclass CircuitBreaker {\n  private failures = 0;\n  private lastFailure = 0;\n  private state: 'closed' | 'open' | 'half-open' = 'closed';\n\n  constructor(\n    private threshold: number,\n    private cooldownMs: number,\n  ) {}\n\n  canRequest(): boolean {\n    if (this.state === 'closed') return true;\n    if (this.state === 'open') {\n      if (Date.now() - this.lastFailure >= this.cooldownMs) {\n        this.state = 'half-open';\n        return true;\n      }\n      return false;\n    }\n    return true; // half-open: allow one request\n  }\n\n  onSuccess(): void {\n    this.failures = 0;\n    this.state = 'closed';\n  }\n\n  onFailure(): void {\n    this.failures++;\n    this.lastFailure = Date.now();\n    if (this.failures >= this.threshold) {\n      this.state = 'open';\n    }\n  }\n\n  getState(): string {\n    return this.state;\n  }\n}\n\n// ─── Client ─────────────────────────────────────────────────\n\nconst DEFAULT_BASE_URL = 'https://gateway.palveron.com';\nconst DEFAULT_TIMEOUT = 30_000;\nconst DEFAULT_MAX_RETRIES = 3;\nconst DEFAULT_RETRY_BASE_DELAY = 500;\nconst SDK_VERSION = '1.0.0';\n\nexport class Palveron {\n  private readonly config: Required<Pick<PalveronConfig,\n    'apiKey' | 'baseUrl' | 'timeout' | 'maxRetries' | 'retryBaseDelay'\n  >> & Pick<PalveronConfig, 'logger' | 'headers'>;\n\n  private readonly circuit: CircuitBreaker;\n\n  constructor(config: PalveronConfig) {\n    if (!config.apiKey) throw new PalveronValidationError('apiKey is required');\n\n    this.config = {\n      apiKey: config.apiKey,\n      baseUrl: (config.baseUrl ?? DEFAULT_BASE_URL).replace(/\\/+$/, ''),\n      timeout: config.timeout ?? DEFAULT_TIMEOUT,\n      maxRetries: config.maxRetries ?? DEFAULT_MAX_RETRIES,\n      retryBaseDelay: config.retryBaseDelay ?? DEFAULT_RETRY_BASE_DELAY,\n      logger: config.logger,\n      headers: config.headers,\n    };\n\n    this.circuit = new CircuitBreaker(\n      config.circuitBreakerThreshold ?? 5,\n      config.circuitBreakerCooldown ?? 30_000,\n    );\n  }\n\n  // ── Core: Verify ────────────────────────────────────────\n\n  /**\n   * Send a governance verification request.\n   * This is the primary method — every LLM call should go through this.\n   *\n   * @example\n   * ```typescript\n   * const result = await palveron.verify({ prompt: 'User input here' });\n   * if (result.decision === 'BLOCKED') {\n   *   throw new Error(result.reason);\n   * }\n   * ```\n   */\n  async verify(request: VerifyRequest): Promise<VerifyResponse> {\n    const body = {\n      prompt: request.prompt,\n      extracted_text: request.extractedText,\n      metadata: request.metadata,\n      attachments: request.attachments?.map(a => ({\n        content_type: a.contentType,\n        data: a.data,\n        filename: a.filename,\n        metadata: a.metadata,\n      })),\n      context: request.context ? {\n        mcp_server: request.context.mcpServer,\n        tool_name: request.context.toolName,\n        chain_depth: request.context.chainDepth,\n        source_system: request.context.sourceSystem,\n        session_id: request.context.sessionId,\n      } : undefined,\n    };\n\n    const start = Date.now();\n    const raw = await this.request<Record<string, unknown>>('POST', '/api/v1/verify', body);\n    const latency = Date.now() - start;\n\n    return {\n      decision: (raw.decision as Decision) ?? 'ERROR',\n      output: (raw.output as string) ?? '',\n      reason: (raw.reason as string) ?? '',\n      traceId: (raw.trace_id as string) ?? '',\n      integrityHash: (raw.integrity_hash as string) ?? '',\n      shouldAnchor: (raw.should_anchor as boolean) ?? false,\n      flareStatus: (raw.flare_status as string) ?? '',\n      flareTxHash: (raw.flare_tx_hash as string | null) ?? null,\n      contentType: (raw.content_type as string) ?? 'text',\n      findings: (raw.findings as Finding[]) ?? [],\n      latencyMs: latency,\n    };\n  }\n\n  // ── Convenience: Quick verify (string-only) ─────────────\n\n  /**\n   * Quick verification for text-only prompts.\n   *\n   * @example\n   * ```typescript\n   * const result = await palveron.check('Is this prompt safe?');\n   * console.log(result.decision); // 'ALLOWED'\n   * ```\n   */\n  async check(prompt: string): Promise<VerifyResponse> {\n    return this.verify({ prompt });\n  }\n\n  // ── Convenience: Verify with file ───────────────────────\n\n  /**\n   * Verify a prompt with a file attachment.\n   * Reads the file, Base64-encodes it, and sends it with the correct MIME type.\n   * Node.js only — use verify() with pre-encoded data in browsers.\n   *\n   * @example\n   * ```typescript\n   * const result = await palveron.verifyWithFile(\n   *   'Analyze this document',\n   *   '/path/to/report.pdf'\n   * );\n   * ```\n   */\n  async verifyWithFile(prompt: string, filePath: string): Promise<VerifyResponse> {\n    // Dynamic import to keep SDK isomorphic\n    const { readFile } = await import('node:fs/promises');\n    const { basename } = await import('node:path');\n\n    const buffer = await readFile(filePath);\n    const base64 = buffer.toString('base64');\n    const filename = basename(filePath);\n    const contentType = this.inferMimeType(filename);\n\n    return this.verify({\n      prompt,\n      attachments: [{ contentType, data: base64, filename }],\n    });\n  }\n\n  // ── Policies ────────────────────────────────────────────\n\n  /**\n   * List all active policies for the project.\n   */\n  async listPolicies(env: string = 'prod'): Promise<PolicyListResponse> {\n    return this.request<PolicyListResponse>('GET', `/api/v1/policies?env=${env}`);\n  }\n\n  // ── Health ──────────────────────────────────────────────\n\n  /**\n   * Check gateway health status.\n   */\n  async health(): Promise<HealthResponse> {\n    return this.request<HealthResponse>('GET', '/health');\n  }\n\n  // ── Diagnostics ─────────────────────────────────────────\n\n  /**\n   * Get SDK and connection diagnostics.\n   */\n  diagnostics(): {\n    sdkVersion: string;\n    baseUrl: string;\n    timeout: number;\n    maxRetries: number;\n    circuitState: string;\n  } {\n    return {\n      sdkVersion: SDK_VERSION,\n      baseUrl: this.config.baseUrl,\n      timeout: this.config.timeout,\n      maxRetries: this.config.maxRetries,\n      circuitState: this.circuit.getState(),\n    };\n  }\n\n  // ─── Internal: HTTP with retry + circuit breaker ────────\n\n  private async request<T>(method: string, path: string, body?: unknown): Promise<T> {\n    if (!this.circuit.canRequest()) {\n      throw new PalveronCircuitOpenError();\n    }\n\n    let lastError: Error | null = null;\n    const maxAttempts = this.config.maxRetries + 1;\n\n    for (let attempt = 0; attempt < maxAttempts; attempt++) {\n      if (attempt > 0) {\n        const delay = this.backoffDelay(attempt);\n        this.config.logger?.debug(`Retry attempt ${attempt}/${this.config.maxRetries}`, { delay, path });\n        await this.sleep(delay);\n      }\n\n      const requestId = this.generateRequestId();\n\n      try {\n        const controller = new AbortController();\n        const timer = setTimeout(() => controller.abort(), this.config.timeout);\n\n        const headers: Record<string, string> = {\n          'Authorization': `Bearer ${this.config.apiKey}`,\n          'Content-Type': 'application/json',\n          'Accept': 'application/json',\n          'User-Agent': `palveron-sdk-typescript/${SDK_VERSION}`,\n          'X-Request-ID': requestId,\n          ...this.config.headers,\n        };\n\n        const response = await fetch(`${this.config.baseUrl}${path}`, {\n          method,\n          headers,\n          body: body ? JSON.stringify(body) : undefined,\n          signal: controller.signal,\n        });\n\n        clearTimeout(timer);\n\n        const responseRequestId = response.headers.get('x-request-id') ?? requestId;\n\n        if (response.ok) {\n          this.circuit.onSuccess();\n          return await response.json() as T;\n        }\n\n        // Handle specific error codes\n        if (response.status === 401) {\n          this.circuit.onSuccess(); // auth errors are not circuit failures\n          throw new PalveronAuthenticationError(\n            'Invalid API key or expired token',\n            responseRequestId,\n          );\n        }\n\n        if (response.status === 429) {\n          const retryAfter = parseInt(response.headers.get('retry-after') ?? '5', 10) * 1000;\n          throw new PalveronRateLimitError(\n            'Rate limit exceeded',\n            retryAfter,\n            responseRequestId,\n          );\n        }\n\n        if (response.status === 400) {\n          const errorBody = await response.json().catch(() => ({})) as Record<string, string>;\n          throw new PalveronValidationError(\n            errorBody.error ?? 'Invalid request',\n            errorBody.field,\n            responseRequestId,\n          );\n        }\n\n        // Retryable server errors (500, 502, 503)\n        if (response.status >= 500) {\n          this.circuit.onFailure();\n          const errorBody = await response.text().catch(() => '');\n          lastError = new PalveronError(\n            `Server error: ${response.status} ${response.statusText}`,\n            { code: 'SERVER_ERROR', statusCode: response.status, requestId: responseRequestId, retryable: true },\n          );\n          this.config.logger?.warn(`Server error on attempt ${attempt + 1}`, {\n            status: response.status,\n            requestId: responseRequestId,\n            body: errorBody.slice(0, 200),\n          });\n          continue; // retry\n        }\n\n        // Non-retryable client errors\n        const errorBody = await response.json().catch(() => ({})) as Record<string, string>;\n        throw new PalveronError(\n          errorBody.error ?? `HTTP ${response.status}`,\n          { code: 'CLIENT_ERROR', statusCode: response.status, requestId: responseRequestId, retryable: false },\n        );\n\n      } catch (error) {\n        if (error instanceof PalveronError && !error.retryable) throw error;\n\n        if (error instanceof DOMException && error.name === 'AbortError') {\n          this.circuit.onFailure();\n          lastError = new PalveronTimeoutError(this.config.timeout, requestId);\n          continue;\n        }\n\n        if (error instanceof TypeError && error.message.includes('fetch')) {\n          this.circuit.onFailure();\n          lastError = new PalveronError('Network error — could not reach gateway', {\n            code: 'NETWORK_ERROR', statusCode: 0, requestId, retryable: true,\n          });\n          continue;\n        }\n\n        if (error instanceof PalveronError) {\n          lastError = error;\n          continue;\n        }\n\n        throw error;\n      }\n    }\n\n    throw lastError ?? new PalveronError('Max retries exceeded', {\n      code: 'MAX_RETRIES', statusCode: 0, retryable: false,\n    });\n  }\n\n  // ─── Helpers ────────────────────────────────────────────\n\n  private backoffDelay(attempt: number): number {\n    const base = this.config.retryBaseDelay * Math.pow(2, attempt - 1);\n    const jitter = base * 0.2 * Math.random();\n    return Math.min(base + jitter, 30_000);\n  }\n\n  private sleep(ms: number): Promise<void> {\n    return new Promise(resolve => setTimeout(resolve, ms));\n  }\n\n  private generateRequestId(): string {\n    const ts = Date.now().toString(36);\n    const rand = Math.random().toString(36).slice(2, 8);\n    return `pv_${ts}_${rand}`;\n  }\n\n  private inferMimeType(filename: string): string {\n    const ext = filename.split('.').pop()?.toLowerCase();\n    const map: Record<string, string> = {\n      png: 'image/png', jpg: 'image/jpeg', jpeg: 'image/jpeg', gif: 'image/gif',\n      webp: 'image/webp', svg: 'image/svg+xml', pdf: 'application/pdf',\n      wav: 'audio/wav', mp3: 'audio/mpeg', ogg: 'audio/ogg', mp4: 'video/mp4',\n      py: 'text/x-python', js: 'text/javascript', ts: 'text/typescript',\n      rs: 'text/x-rust', go: 'text/x-go', java: 'text/x-java',\n      c: 'text/x-c', cpp: 'text/x-c++', txt: 'text/plain',\n      json: 'application/json', csv: 'text/csv', xml: 'application/xml',\n    };\n    return map[ext ?? ''] ?? 'application/octet-stream';\n  }\n}\n\n// ─── Factory ──────────────────────────────────────────────\n\n/**\n * Create a Palveron client instance.\n *\n * @example\n * ```typescript\n * import { createClient } from '@palveron/sdk';\n *\n * const palveron = createClient({\n *   apiKey: process.env.PALVERON_API_KEY!,\n *   baseUrl: 'https://gateway.acme.corp:8080', // on-prem\n * });\n *\n * const result = await palveron.verify({ prompt: userInput });\n * ```\n */\nexport function createClient(config: PalveronConfig): Palveron {\n  return new Palveron(config);\n}\n\n// ─── Re-exports ─────────────────────────────────────────\n\nexport default Palveron;\n"],"mappings":";AAkIO,IAAM,gBAAN,cAA4B,MAAM;AAAA,EACvB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEhB,YAAY,SAAiB,MAK1B;AACD,UAAM,OAAO;AACb,SAAK,OAAO;AACZ,SAAK,OAAO,KAAK;AACjB,SAAK,aAAa,KAAK;AACvB,SAAK,YAAY,KAAK,aAAa;AACnC,SAAK,YAAY,KAAK,aAAa;AAAA,EACrC;AACF;AAEO,IAAM,8BAAN,cAA0C,cAAc;AAAA,EAC7D,YAAY,SAAiB,WAA2B;AACtD,UAAM,SAAS,EAAE,MAAM,yBAAyB,YAAY,KAAK,WAAW,WAAW,MAAM,CAAC;AAC9F,SAAK,OAAO;AAAA,EACd;AACF;AAEO,IAAM,yBAAN,cAAqC,cAAc;AAAA,EACxC;AAAA,EAEhB,YAAY,SAAiB,cAAsB,WAA2B;AAC5E,UAAM,SAAS,EAAE,MAAM,gBAAgB,YAAY,KAAK,WAAW,WAAW,KAAK,CAAC;AACpF,SAAK,OAAO;AACZ,SAAK,eAAe;AAAA,EACtB;AACF;AAEO,IAAM,0BAAN,cAAsC,cAAc;AAAA,EACzC;AAAA,EAEhB,YAAY,SAAiB,OAAgB,WAA2B;AACtE,UAAM,SAAS,EAAE,MAAM,oBAAoB,YAAY,KAAK,WAAW,WAAW,MAAM,CAAC;AACzF,SAAK,OAAO;AACZ,SAAK,QAAQ,SAAS;AAAA,EACxB;AACF;AAEO,IAAM,2BAAN,cAAuC,cAAc;AAAA,EAC1D,cAAc;AACZ,UAAM,8EAAyE;AAAA,MAC7E,MAAM;AAAA,MAAgB,YAAY;AAAA,MAAK,WAAW;AAAA,IACpD,CAAC;AACD,SAAK,OAAO;AAAA,EACd;AACF;AAEO,IAAM,uBAAN,cAAmC,cAAc;AAAA,EACtD,YAAY,WAAmB,WAA2B;AACxD,UAAM,2BAA2B,SAAS,MAAM;AAAA,MAC9C,MAAM;AAAA,MAAW,YAAY;AAAA,MAAK;AAAA,MAAW,WAAW;AAAA,IAC1D,CAAC;AACD,SAAK,OAAO;AAAA,EACd;AACF;AAIA,IAAM,iBAAN,MAAqB;AAAA,EAKnB,YACU,WACA,YACR;AAFQ;AACA;AAAA,EACP;AAAA,EAFO;AAAA,EACA;AAAA,EANF,WAAW;AAAA,EACX,cAAc;AAAA,EACd,QAAyC;AAAA,EAOjD,aAAsB;AACpB,QAAI,KAAK,UAAU,SAAU,QAAO;AACpC,QAAI,KAAK,UAAU,QAAQ;AACzB,UAAI,KAAK,IAAI,IAAI,KAAK,eAAe,KAAK,YAAY;AACpD,aAAK,QAAQ;AACb,eAAO;AAAA,MACT;AACA,aAAO;AAAA,IACT;AACA,WAAO;AAAA,EACT;AAAA,EAEA,YAAkB;AAChB,SAAK,WAAW;AAChB,SAAK,QAAQ;AAAA,EACf;AAAA,EAEA,YAAkB;AAChB,SAAK;AACL,SAAK,cAAc,KAAK,IAAI;AAC5B,QAAI,KAAK,YAAY,KAAK,WAAW;AACnC,WAAK,QAAQ;AAAA,IACf;AAAA,EACF;AAAA,EAEA,WAAmB;AACjB,WAAO,KAAK;AAAA,EACd;AACF;AAIA,IAAM,mBAAmB;AACzB,IAAM,kBAAkB;AACxB,IAAM,sBAAsB;AAC5B,IAAM,2BAA2B;AACjC,IAAM,cAAc;AAEb,IAAM,WAAN,MAAe;AAAA,EACH;AAAA,EAIA;AAAA,EAEjB,YAAY,QAAwB;AAClC,QAAI,CAAC,OAAO,OAAQ,OAAM,IAAI,wBAAwB,oBAAoB;AAE1E,SAAK,SAAS;AAAA,MACZ,QAAQ,OAAO;AAAA,MACf,UAAU,OAAO,WAAW,kBAAkB,QAAQ,QAAQ,EAAE;AAAA,MAChE,SAAS,OAAO,WAAW;AAAA,MAC3B,YAAY,OAAO,cAAc;AAAA,MACjC,gBAAgB,OAAO,kBAAkB;AAAA,MACzC,QAAQ,OAAO;AAAA,MACf,SAAS,OAAO;AAAA,IAClB;AAEA,SAAK,UAAU,IAAI;AAAA,MACjB,OAAO,2BAA2B;AAAA,MAClC,OAAO,0BAA0B;AAAA,IACnC;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAgBA,MAAM,OAAO,SAAiD;AAC5D,UAAM,OAAO;AAAA,MACX,QAAQ,QAAQ;AAAA,MAChB,gBAAgB,QAAQ;AAAA,MACxB,UAAU,QAAQ;AAAA,MAClB,aAAa,QAAQ,aAAa,IAAI,QAAM;AAAA,QAC1C,cAAc,EAAE;AAAA,QAChB,MAAM,EAAE;AAAA,QACR,UAAU,EAAE;AAAA,QACZ,UAAU,EAAE;AAAA,MACd,EAAE;AAAA,MACF,SAAS,QAAQ,UAAU;AAAA,QACzB,YAAY,QAAQ,QAAQ;AAAA,QAC5B,WAAW,QAAQ,QAAQ;AAAA,QAC3B,aAAa,QAAQ,QAAQ;AAAA,QAC7B,eAAe,QAAQ,QAAQ;AAAA,QAC/B,YAAY,QAAQ,QAAQ;AAAA,MAC9B,IAAI;AAAA,IACN;AAEA,UAAM,QAAQ,KAAK,IAAI;AACvB,UAAM,MAAM,MAAM,KAAK,QAAiC,QAAQ,kBAAkB,IAAI;AACtF,UAAM,UAAU,KAAK,IAAI,IAAI;AAE7B,WAAO;AAAA,MACL,UAAW,IAAI,YAAyB;AAAA,MACxC,QAAS,IAAI,UAAqB;AAAA,MAClC,QAAS,IAAI,UAAqB;AAAA,MAClC,SAAU,IAAI,YAAuB;AAAA,MACrC,eAAgB,IAAI,kBAA6B;AAAA,MACjD,cAAe,IAAI,iBAA6B;AAAA,MAChD,aAAc,IAAI,gBAA2B;AAAA,MAC7C,aAAc,IAAI,iBAAmC;AAAA,MACrD,aAAc,IAAI,gBAA2B;AAAA,MAC7C,UAAW,IAAI,YAA0B,CAAC;AAAA,MAC1C,WAAW;AAAA,IACb;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAaA,MAAM,MAAM,QAAyC;AACnD,WAAO,KAAK,OAAO,EAAE,OAAO,CAAC;AAAA,EAC/B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAiBA,MAAM,eAAe,QAAgB,UAA2C;AAE9E,UAAM,EAAE,SAAS,IAAI,MAAM,OAAO,aAAkB;AACpD,UAAM,EAAE,SAAS,IAAI,MAAM,OAAO,MAAW;AAE7C,UAAM,SAAS,MAAM,SAAS,QAAQ;AACtC,UAAM,SAAS,OAAO,SAAS,QAAQ;AACvC,UAAM,WAAW,SAAS,QAAQ;AAClC,UAAM,cAAc,KAAK,cAAc,QAAQ;AAE/C,WAAO,KAAK,OAAO;AAAA,MACjB;AAAA,MACA,aAAa,CAAC,EAAE,aAAa,MAAM,QAAQ,SAAS,CAAC;AAAA,IACvD,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,aAAa,MAAc,QAAqC;AACpE,WAAO,KAAK,QAA4B,OAAO,wBAAwB,GAAG,EAAE;AAAA,EAC9E;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,SAAkC;AACtC,WAAO,KAAK,QAAwB,OAAO,SAAS;AAAA,EACtD;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,cAME;AACA,WAAO;AAAA,MACL,YAAY;AAAA,MACZ,SAAS,KAAK,OAAO;AAAA,MACrB,SAAS,KAAK,OAAO;AAAA,MACrB,YAAY,KAAK,OAAO;AAAA,MACxB,cAAc,KAAK,QAAQ,SAAS;AAAA,IACtC;AAAA,EACF;AAAA;AAAA,EAIA,MAAc,QAAW,QAAgB,MAAc,MAA4B;AACjF,QAAI,CAAC,KAAK,QAAQ,WAAW,GAAG;AAC9B,YAAM,IAAI,yBAAyB;AAAA,IACrC;AAEA,QAAI,YAA0B;AAC9B,UAAM,cAAc,KAAK,OAAO,aAAa;AAE7C,aAAS,UAAU,GAAG,UAAU,aAAa,WAAW;AACtD,UAAI,UAAU,GAAG;AACf,cAAM,QAAQ,KAAK,aAAa,OAAO;AACvC,aAAK,OAAO,QAAQ,MAAM,iBAAiB,OAAO,IAAI,KAAK,OAAO,UAAU,IAAI,EAAE,OAAO,KAAK,CAAC;AAC/F,cAAM,KAAK,MAAM,KAAK;AAAA,MACxB;AAEA,YAAM,YAAY,KAAK,kBAAkB;AAEzC,UAAI;AACF,cAAM,aAAa,IAAI,gBAAgB;AACvC,cAAM,QAAQ,WAAW,MAAM,WAAW,MAAM,GAAG,KAAK,OAAO,OAAO;AAEtE,cAAM,UAAkC;AAAA,UACtC,iBAAiB,UAAU,KAAK,OAAO,MAAM;AAAA,UAC7C,gBAAgB;AAAA,UAChB,UAAU;AAAA,UACV,cAAc,2BAA2B,WAAW;AAAA,UACpD,gBAAgB;AAAA,UAChB,GAAG,KAAK,OAAO;AAAA,QACjB;AAEA,cAAM,WAAW,MAAM,MAAM,GAAG,KAAK,OAAO,OAAO,GAAG,IAAI,IAAI;AAAA,UAC5D;AAAA,UACA;AAAA,UACA,MAAM,OAAO,KAAK,UAAU,IAAI,IAAI;AAAA,UACpC,QAAQ,WAAW;AAAA,QACrB,CAAC;AAED,qBAAa,KAAK;AAElB,cAAM,oBAAoB,SAAS,QAAQ,IAAI,cAAc,KAAK;AAElE,YAAI,SAAS,IAAI;AACf,eAAK,QAAQ,UAAU;AACvB,iBAAO,MAAM,SAAS,KAAK;AAAA,QAC7B;AAGA,YAAI,SAAS,WAAW,KAAK;AAC3B,eAAK,QAAQ,UAAU;AACvB,gBAAM,IAAI;AAAA,YACR;AAAA,YACA;AAAA,UACF;AAAA,QACF;AAEA,YAAI,SAAS,WAAW,KAAK;AAC3B,gBAAM,aAAa,SAAS,SAAS,QAAQ,IAAI,aAAa,KAAK,KAAK,EAAE,IAAI;AAC9E,gBAAM,IAAI;AAAA,YACR;AAAA,YACA;AAAA,YACA;AAAA,UACF;AAAA,QACF;AAEA,YAAI,SAAS,WAAW,KAAK;AAC3B,gBAAMA,aAAY,MAAM,SAAS,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AACxD,gBAAM,IAAI;AAAA,YACRA,WAAU,SAAS;AAAA,YACnBA,WAAU;AAAA,YACV;AAAA,UACF;AAAA,QACF;AAGA,YAAI,SAAS,UAAU,KAAK;AAC1B,eAAK,QAAQ,UAAU;AACvB,gBAAMA,aAAY,MAAM,SAAS,KAAK,EAAE,MAAM,MAAM,EAAE;AACtD,sBAAY,IAAI;AAAA,YACd,iBAAiB,SAAS,MAAM,IAAI,SAAS,UAAU;AAAA,YACvD,EAAE,MAAM,gBAAgB,YAAY,SAAS,QAAQ,WAAW,mBAAmB,WAAW,KAAK;AAAA,UACrG;AACA,eAAK,OAAO,QAAQ,KAAK,2BAA2B,UAAU,CAAC,IAAI;AAAA,YACjE,QAAQ,SAAS;AAAA,YACjB,WAAW;AAAA,YACX,MAAMA,WAAU,MAAM,GAAG,GAAG;AAAA,UAC9B,CAAC;AACD;AAAA,QACF;AAGA,cAAM,YAAY,MAAM,SAAS,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AACxD,cAAM,IAAI;AAAA,UACR,UAAU,SAAS,QAAQ,SAAS,MAAM;AAAA,UAC1C,EAAE,MAAM,gBAAgB,YAAY,SAAS,QAAQ,WAAW,mBAAmB,WAAW,MAAM;AAAA,QACtG;AAAA,MAEF,SAAS,OAAO;AACd,YAAI,iBAAiB,iBAAiB,CAAC,MAAM,UAAW,OAAM;AAE9D,YAAI,iBAAiB,gBAAgB,MAAM,SAAS,cAAc;AAChE,eAAK,QAAQ,UAAU;AACvB,sBAAY,IAAI,qBAAqB,KAAK,OAAO,SAAS,SAAS;AACnE;AAAA,QACF;AAEA,YAAI,iBAAiB,aAAa,MAAM,QAAQ,SAAS,OAAO,GAAG;AACjE,eAAK,QAAQ,UAAU;AACvB,sBAAY,IAAI,cAAc,gDAA2C;AAAA,YACvE,MAAM;AAAA,YAAiB,YAAY;AAAA,YAAG;AAAA,YAAW,WAAW;AAAA,UAC9D,CAAC;AACD;AAAA,QACF;AAEA,YAAI,iBAAiB,eAAe;AAClC,sBAAY;AACZ;AAAA,QACF;AAEA,cAAM;AAAA,MACR;AAAA,IACF;AAEA,UAAM,aAAa,IAAI,cAAc,wBAAwB;AAAA,MAC3D,MAAM;AAAA,MAAe,YAAY;AAAA,MAAG,WAAW;AAAA,IACjD,CAAC;AAAA,EACH;AAAA;AAAA,EAIQ,aAAa,SAAyB;AAC5C,UAAM,OAAO,KAAK,OAAO,iBAAiB,KAAK,IAAI,GAAG,UAAU,CAAC;AACjE,UAAM,SAAS,OAAO,MAAM,KAAK,OAAO;AACxC,WAAO,KAAK,IAAI,OAAO,QAAQ,GAAM;AAAA,EACvC;AAAA,EAEQ,MAAM,IAA2B;AACvC,WAAO,IAAI,QAAQ,aAAW,WAAW,SAAS,EAAE,CAAC;AAAA,EACvD;AAAA,EAEQ,oBAA4B;AAClC,UAAM,KAAK,KAAK,IAAI,EAAE,SAAS,EAAE;AACjC,UAAM,OAAO,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,GAAG,CAAC;AAClD,WAAO,MAAM,EAAE,IAAI,IAAI;AAAA,EACzB;AAAA,EAEQ,cAAc,UAA0B;AAC9C,UAAM,MAAM,SAAS,MAAM,GAAG,EAAE,IAAI,GAAG,YAAY;AACnD,UAAM,MAA8B;AAAA,MAClC,KAAK;AAAA,MAAa,KAAK;AAAA,MAAc,MAAM;AAAA,MAAc,KAAK;AAAA,MAC9D,MAAM;AAAA,MAAc,KAAK;AAAA,MAAiB,KAAK;AAAA,MAC/C,KAAK;AAAA,MAAa,KAAK;AAAA,MAAc,KAAK;AAAA,MAAa,KAAK;AAAA,MAC5D,IAAI;AAAA,MAAiB,IAAI;AAAA,MAAmB,IAAI;AAAA,MAChD,IAAI;AAAA,MAAe,IAAI;AAAA,MAAa,MAAM;AAAA,MAC1C,GAAG;AAAA,MAAY,KAAK;AAAA,MAAc,KAAK;AAAA,MACvC,MAAM;AAAA,MAAoB,KAAK;AAAA,MAAY,KAAK;AAAA,IAClD;AACA,WAAO,IAAI,OAAO,EAAE,KAAK;AAAA,EAC3B;AACF;AAmBO,SAAS,aAAa,QAAkC;AAC7D,SAAO,IAAI,SAAS,MAAM;AAC5B;AAIA,IAAO,gBAAQ;","names":["errorBody"]}

package/package.json

@@ -0,0 +1,71 @@
+{
+  "name": "@palveron/sdk",
+  "version": "1.0.0",
+  "description": "Official Palveron TypeScript/JavaScript SDK — AI Governance Gateway client for policy enforcement, trace verification, and compliance automation.",
+  "main": "dist/index.js",
+  "module": "dist/index.mjs",
+  "types": "dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.mjs",
+      "require": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE",
+    "CHANGELOG.md"
+  ],
+  "scripts": {
+    "build": "tsup src/index.ts --format cjs,esm --dts --clean --sourcemap",
+    "test": "vitest run --passWithNoTests",
+    "test:watch": "vitest",
+    "lint": "eslint src/",
+    "typecheck": "tsc --noEmit",
+    "prepublishOnly": "npm run build"
+  },
+  "keywords": [
+    "palveron",
+    "ai-governance",
+    "guardrails",
+    "eu-ai-act",
+    "compliance",
+    "llm",
+    "agent-governance",
+    "policy-enforcement",
+    "blockchain-attestation",
+    "dora",
+    "gdpr",
+    "nist",
+    "audit-trail",
+    "pii-detection",
+    "mcp",
+    "agentic-ai"
+  ],
+  "author": "Palveron <hello@palveron.com> (https://palveron.com)",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/palveron/sdk-typescript.git"
+  },
+  "homepage": "https://docs.palveron.com/sdks",
+  "bugs": {
+    "url": "https://github.com/palveron/sdk-typescript/issues"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "engines": {
+    "node": ">=18"
+  },
+  "sideEffects": false,
+  "dependencies": {},
+  "devDependencies": {
+    "@types/node": "^20.0.0",
+    "tsup": "^8.0.0",
+    "typescript": "^5.5.0",
+    "vitest": "^2.0.0"
+  }
+}