@peac/adapter-openai-compatible 0.11.2

package/LICENSE

@@ -0,0 +1,190 @@
+Apache License
+Version 2.0, January 2004
+http://www.apache.org/licenses/
+
+TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+1. Definitions.
+
+   "License" shall mean the terms and conditions for use, reproduction,
+   and distribution as defined by Sections 1 through 9 of this document.
+
+   "Licensor" shall mean the copyright owner or entity authorized by
+   the copyright owner that is granting the License.
+
+   "Legal Entity" shall mean the union of the acting entity and all
+   other entities that control, are controlled by, or are under common
+   control with that entity. For the purposes of this definition,
+   "control" means (i) the power, direct or indirect, to cause the
+   direction or management of such entity, whether by contract or
+   otherwise, or (ii) ownership of fifty percent (50%) or more of the
+   outstanding shares, or (iii) beneficial ownership of such entity.
+
+   "You" (or "Your") shall mean an individual or Legal Entity
+   exercising permissions granted by this License.
+
+   "Source" form shall mean the preferred form for making modifications,
+   including but not limited to software source code, documentation
+   source, and configuration files.
+
+   "Object" form shall mean any form resulting from mechanical
+   transformation or translation of a Source form, including but
+   not limited to compiled object code, generated documentation,
+   and conversions to other media types.
+
+   "Work" shall mean the work of authorship, whether in Source or
+   Object form, made available under the License, as indicated by a
+   copyright notice that is included in or attached to the work
+   (an example is provided in the Appendix below).
+
+   "Derivative Works" shall mean any work, whether in Source or Object
+   form, that is based on (or derived from) the Work and for which the
+   editorial revisions, annotations, elaborations, or other modifications
+   represent, as a whole, an original work of authorship. For the purposes
+   of this License, Derivative Works shall not include works that remain
+   separable from, or merely link (or bind by name) to the interfaces of,
+   the Work and Derivative Works thereof.
+
+   "Contribution" shall mean any work of authorship, including
+   the original version of the Work and any modifications or additions
+   to that Work or Derivative Works thereof, that is intentionally
+   submitted to Licensor for inclusion in the Work by the copyright owner
+   or by an individual or Legal Entity authorized to submit on behalf of
+   the copyright owner. For the purposes of this definition, "submitted"
+   means any form of electronic, verbal, or written communication sent
+   to the Licensor or its representatives, including but not limited to
+   communication on electronic mailing lists, source code control systems,
+   and issue tracking systems that are managed by, or on behalf of, the
+   Licensor for the purpose of discussing and improving the Work, but
+   excluding communication that is conspicuously marked or otherwise
+   designated in writing by the copyright owner as "Not a Contribution."
+
+   "Contributor" shall mean Licensor and any individual or Legal Entity
+   on behalf of whom a Contribution has been received by Licensor and
+   subsequently incorporated within the Work.
+
+2. Grant of Copyright License. Subject to the terms and conditions of
+   this License, each Contributor hereby grants to You a perpetual,
+   worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+   copyright license to reproduce, prepare Derivative Works of,
+   publicly display, publicly perform, sublicense, and distribute the
+   Work and such Derivative Works in Source or Object form.
+
+3. Grant of Patent License. Subject to the terms and conditions of
+   this License, each Contributor hereby grants to You a perpetual,
+   worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+   (except as stated in this section) patent license to make, have made,
+   use, offer to sell, sell, import, and otherwise transfer the Work,
+   where such license applies only to those patent claims licensable
+   by such Contributor that are necessarily infringed by their
+   Contribution(s) alone or by combination of their Contribution(s)
+   with the Work to which such Contribution(s) was submitted. If You
+   institute patent litigation against any entity (including a
+   cross-claim or counterclaim in a lawsuit) alleging that the Work
+   or a Contribution incorporated within the Work constitutes direct
+   or contributory patent infringement, then any patent licenses
+   granted to You under this License for that Work shall terminate
+   as of the date such litigation is filed.
+
+4. Redistribution. You may reproduce and distribute copies of the
+   Work or Derivative Works thereof in any medium, with or without
+   modifications, and in Source or Object form, provided that You
+   meet the following conditions:
+
+   (a) You must give any other recipients of the Work or
+       Derivative Works a copy of this License; and
+
+   (b) You must cause any modified files to carry prominent notices
+       stating that You changed the files; and
+
+   (c) You must retain, in the Source form of any Derivative Works
+       that You distribute, all copyright, patent, trademark, and
+       attribution notices from the Source form of the Work,
+       excluding those notices that do not pertain to any part of
+       the Derivative Works; and
+
+   (d) If the Work includes a "NOTICE" text file as part of its
+       distribution, then any Derivative Works that You distribute must
+       include a readable copy of the attribution notices contained
+       within such NOTICE file, excluding those notices that do not
+       pertain to any part of the Derivative Works, in at least one
+       of the following places: within a NOTICE text file distributed
+       as part of the Derivative Works; within the Source form or
+       documentation, if provided along with the Derivative Works; or,
+       within a display generated by the Derivative Works, if and
+       wherever such third-party notices normally appear. The contents
+       of the NOTICE file are for informational purposes only and
+       do not modify the License. You may add Your own attribution
+       notices within Derivative Works that You distribute, alongside
+       or as an addendum to the NOTICE text from the Work, provided
+       that such additional attribution notices cannot be construed
+       as modifying the License.
+
+   You may add Your own copyright statement to Your modifications and
+   may provide additional or different license terms and conditions
+   for use, reproduction, or distribution of Your modifications, or
+   for any such Derivative Works as a whole, provided Your use,
+   reproduction, and distribution of the Work otherwise complies with
+   the conditions stated in this License.
+
+5. Submission of Contributions. Unless You explicitly state otherwise,
+   any Contribution intentionally submitted for inclusion in the Work
+   by You to the Licensor shall be under the terms and conditions of
+   this License, without any additional terms or conditions.
+   Notwithstanding the above, nothing herein shall supersede or modify
+   the terms of any separate license agreement you may have executed
+   with Licensor regarding such Contributions.
+
+6. Trademarks. This License does not grant permission to use the trade
+   names, trademarks, service marks, or product names of the Licensor,
+   except as required for reasonable and customary use in describing the
+   origin of the Work and reproducing the content of the NOTICE file.
+
+7. Disclaimer of Warranty. Unless required by applicable law or
+   agreed to in writing, Licensor provides the Work (and each
+   Contributor provides its Contributions) on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+   implied, including, without limitation, any warranties or conditions
+   of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+   PARTICULAR PURPOSE. You are solely responsible for determining the
+   appropriateness of using or redistributing the Work and assume any
+   risks associated with Your exercise of permissions under this License.
+
+8. Limitation of Liability. In no event and under no legal theory,
+   whether in tort (including negligence), contract, or otherwise,
+   unless required by applicable law (such as deliberate and grossly
+   negligent acts) or agreed to in writing, shall any Contributor be
+   liable to You for damages, including any direct, indirect, special,
+   incidental, or consequential damages of any character arising as a
+   result of this License or out of the use or inability to use the
+   Work (including but not limited to damages for loss of goodwill,
+   work stoppage, computer failure or malfunction, or any and all
+   other commercial damages or losses), even if such Contributor
+   has been advised of the possibility of such damages.
+
+9. Accepting Warranty or Additional Liability. While redistributing
+   the Work or Derivative Works thereof, You may choose to offer,
+   and charge a fee for, acceptance of support, warranty, indemnity,
+   or other liability obligations and/or rights consistent with this
+   License. However, in accepting such obligations, You may act only
+   on Your own behalf and on Your sole responsibility, not on behalf
+   of any other Contributor, and only if You agree to indemnify,
+   defend, and hold each Contributor harmless for any liability
+   incurred by, or claims asserted against, such Contributor by reason
+   of your accepting any such warranty or additional liability.
+
+END OF TERMS AND CONDITIONS
+
+Copyright 2025-2026 PEAC Protocol Contributors
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.

package/README.md

@@ -0,0 +1,81 @@
+# @peac/adapter-openai-compatible
+
+OpenAI-compatible chat completion adapter for PEAC interaction evidence.
+
+Maps OpenAI-compatible chat completion responses into PEAC `InteractionEvidenceV01` using a **hash-first model** (DD-138): no raw prompt or completion text is stored in receipts. Only SHA-256 digests, model identifiers, token counts, and timing metadata are recorded.
+
+Works with any OpenAI-compatible provider (OpenAI, Anthropic Messages API via adapter, Ollama, vLLM, Together, etc.) without importing their SDKs.
+
+## Install
+
+```bash
+pnpm add @peac/adapter-openai-compatible
+```
+
+## Usage
+
+```typescript
+import { fromChatCompletion } from '@peac/adapter-openai-compatible';
+
+// After making an OpenAI-compatible API call:
+const evidence = await fromChatCompletion({
+  messages: [
+    { role: 'system', content: 'You are a helpful assistant.' },
+    { role: 'user', content: 'What is 2+2?' },
+  ],
+  completion: {
+    id: 'chatcmpl-abc123',
+    object: 'chat.completion',
+    created: 1709251200,
+    model: 'gpt-4',
+    choices: [
+      {
+        index: 0,
+        message: { role: 'assistant', content: 'The answer is 4.' },
+        finish_reason: 'stop',
+      },
+    ],
+    usage: { prompt_tokens: 20, completion_tokens: 5, total_tokens: 25 },
+  },
+  provider: 'openai', // optional
+});
+
+// evidence.input.digest  -> SHA-256 of messages (no raw text)
+// evidence.output.digest -> SHA-256 of output (no raw text)
+// evidence.extensions    -> model, usage, finish_reason
+```
+
+## Hash-First Model
+
+Per DD-138, this adapter records only:
+
+| Field           | Content                                 |
+| --------------- | --------------------------------------- |
+| `input.digest`  | SHA-256 of canonicalized messages array |
+| `output.digest` | SHA-256 of concatenated output content  |
+| `executor`      | Platform identifier and model name      |
+| `extensions`    | Model ID, token counts, finish reason   |
+
+Raw prompt and completion text never appear in the evidence structure.
+
+## Streaming
+
+Streaming support (`fromChatCompletionStream`) is explicitly deferred to v0.11.3.
+
+## API
+
+### `fromChatCompletion(params): Promise<InferenceEvidence>`
+
+Maps a chat completion response to interaction evidence.
+
+### `hashMessages(messages): Promise<string>`
+
+SHA-256 hash of a messages array. Returns `sha256:<hex64>`.
+
+### `hashOutput(content): Promise<string>`
+
+SHA-256 hash of output text. Returns `sha256:<hex64>`.
+
+## License
+
+Apache-2.0

package/dist/crypto.d.ts

@@ -0,0 +1,22 @@
+/**
+ * WebCrypto utility for SHA-256 hashing (DD-138).
+ *
+ * Portable: uses globalThis.crypto.subtle (Node 19+, browsers, Deno, Bun)
+ * with fallback to node:crypto webcrypto for Node >=16.
+ *
+ * Minimum supported runtime: Node.js 16+ (with webcrypto).
+ * Recommended: Node.js 22+ (globalThis.crypto.subtle is always available).
+ */
+type Subtle = typeof globalThis.crypto.subtle;
+/**
+ * Get the SubtleCrypto implementation for the current runtime.
+ *
+ * Tries globalThis.crypto.subtle first (available in Node 19+, all modern
+ * browsers, Deno, Bun, Cloudflare Workers). Falls back to node:crypto
+ * webcrypto for Node >=16.
+ *
+ * @throws {Error} if no WebCrypto implementation is available
+ */
+export declare function getSubtle(): Subtle;
+export {};
+//# sourceMappingURL=crypto.d.ts.map

package/dist/crypto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.d.ts","sourceRoot":"","sources":["../src/crypto.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,KAAK,MAAM,GAAG,OAAO,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC;AAM9C;;;;;;;;GAQG;AACH,wBAAgB,SAAS,IAAI,MAAM,CAiBlC"}

package/dist/evidence.d.ts

@@ -0,0 +1,54 @@
+/**
+ * Evidence mapping for OpenAI-compatible chat completions (DD-138).
+ *
+ * Maps a ChatCompletion into InteractionEvidenceV01 using the hash-first
+ * model: SHA-256 digests of messages and output, plaintext metadata only.
+ */
+import type { InferenceReceiptParams } from './types.js';
+/** Well-known interaction kind for chat completions. */
+export declare const INFERENCE_KIND = "inference.chat_completion";
+/** Extension key for inference metadata. */
+export declare const INFERENCE_EXTENSION_KEY = "org.peacprotocol/inference@0.1";
+/** Interaction evidence structure (matches InteractionEvidenceV01 from @peac/schema). */
+export interface InferenceEvidence {
+    interaction_id: string;
+    kind: typeof INFERENCE_KIND;
+    executor: {
+        platform: string;
+        version?: string;
+    };
+    started_at: string;
+    completed_at?: string;
+    duration_ms?: number;
+    input: {
+        digest: {
+            alg: 'sha-256';
+            value: string;
+            bytes: number;
+        };
+        redaction: 'hash_only';
+    };
+    output: {
+        digest: {
+            alg: 'sha-256';
+            value: string;
+            bytes: number;
+        };
+        redaction: 'hash_only';
+    };
+    result: {
+        status: 'ok' | 'error';
+    };
+    extensions: Record<string, unknown>;
+}
+/**
+ * Create interaction evidence from an OpenAI-compatible chat completion.
+ *
+ * Hash-first model (DD-138): no raw prompt or completion text is stored.
+ * Only SHA-256 digests, model ID, token counts, and timing are recorded.
+ *
+ * @param params - Messages, completion response, and optional provider
+ * @returns InteractionEvidenceV01-compatible object
+ */
+export declare function fromChatCompletion(params: InferenceReceiptParams): Promise<InferenceEvidence>;
+//# sourceMappingURL=evidence.d.ts.map

package/dist/evidence.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence.d.ts","sourceRoot":"","sources":["../src/evidence.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAA+B,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAOtF,wDAAwD;AACxD,eAAO,MAAM,cAAc,8BAA8B,CAAC;AAE1D,4CAA4C;AAC5C,eAAO,MAAM,uBAAuB,mCAAmC,CAAC;AAMxE,yFAAyF;AACzF,MAAM,WAAW,iBAAiB;IAChC,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,OAAO,cAAc,CAAC;IAC5B,QAAQ,EAAE;QACR,QAAQ,EAAE,MAAM,CAAC;QACjB,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,CAAC;IACF,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE;QACL,MAAM,EAAE;YACN,GAAG,EAAE,SAAS,CAAC;YACf,KAAK,EAAE,MAAM,CAAC;YACd,KAAK,EAAE,MAAM,CAAC;SACf,CAAC;QACF,SAAS,EAAE,WAAW,CAAC;KACxB,CAAC;IACF,MAAM,EAAE;QACN,MAAM,EAAE;YACN,GAAG,EAAE,SAAS,CAAC;YACf,KAAK,EAAE,MAAM,CAAC;YACd,KAAK,EAAE,MAAM,CAAC;SACf,CAAC;QACF,SAAS,EAAE,WAAW,CAAC;KACxB,CAAC;IACF,MAAM,EAAE;QACN,MAAM,EAAE,IAAI,GAAG,OAAO,CAAC;KACxB,CAAC;IACF,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACrC;AAqBD;;;;;;;;GAQG;AACH,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,sBAAsB,GAC7B,OAAO,CAAC,iBAAiB,CAAC,CAoE5B"}

package/dist/hash.d.ts

@@ -0,0 +1,51 @@
+/**
+ * Hash-first evidence model for OpenAI-compatible completions (DD-138).
+ *
+ * SHA-256 digests of messages and output.
+ * No raw prompt or completion text is stored in receipts.
+ *
+ * Canonicalization: deterministic key-sorted JSON serialization.
+ * Object keys are sorted lexicographically at every nesting level,
+ * then serialized via JSON.stringify. This is NOT RFC 8785 JCS
+ * (which has additional requirements for numeric handling); it is
+ * sufficient for ChatMessage objects whose fields are strings,
+ * booleans, nulls, and arrays of the same.
+ *
+ * Input constraints enforced by canonicalize():
+ *   - Allowed: string, number, boolean, null, plain object, array
+ *   - Rejected: Date, RegExp, Map, Set, Function, Symbol, BigInt, undefined
+ *     (at any nesting level)
+ */
+import type { ChatMessage } from './types.js';
+/**
+ * Hash an array of chat messages.
+ *
+ * Applies deterministic key-sorted JSON serialization (sorted keys at
+ * every nesting level), then computes SHA-256. Returns `sha256:<hex64>`.
+ *
+ * @param messages - The chat messages to hash
+ * @returns `sha256:<hex64>` digest string
+ * @throws {TypeError} if messages contain non-JSON-safe types
+ */
+export declare function hashMessages(messages: ChatMessage[]): Promise<string>;
+/**
+ * Compute the byte size of a messages array (canonical JSON).
+ *
+ * @throws {TypeError} if messages contain non-JSON-safe types
+ */
+export declare function messagesBytes(messages: ChatMessage[]): number;
+/**
+ * Hash chat completion output text.
+ *
+ * Computes SHA-256 of the output content string.
+ * Returns `sha256:<hex64>`.
+ *
+ * @param content - The output text to hash (concatenated choice contents)
+ * @returns `sha256:<hex64>` digest string
+ */
+export declare function hashOutput(content: string): Promise<string>;
+/**
+ * Compute the byte size of output content.
+ */
+export declare function outputBytes(content: string): number;
+//# sourceMappingURL=hash.d.ts.map

package/dist/hash.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hash.d.ts","sourceRoot":"","sources":["../src/hash.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAGH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAuG9C;;;;;;;;;GASG;AACH,wBAAsB,YAAY,CAAC,QAAQ,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAG3E;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,QAAQ,EAAE,WAAW,EAAE,GAAG,MAAM,CAG7D;AAED;;;;;;;;GAQG;AACH,wBAAsB,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAEjE;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAEnD"}

package/dist/index.cjs

@@ -0,0 +1,165 @@
+'use strict';
+
+var __require = /* @__PURE__ */ ((x) => typeof require !== "undefined" ? require : typeof Proxy !== "undefined" ? new Proxy(x, {
+  get: (a, b) => (typeof require !== "undefined" ? require : a)[b]
+}) : x)(function(x) {
+  if (typeof require !== "undefined") return require.apply(this, arguments);
+  throw Error('Dynamic require of "' + x + '" is not supported');
+});
+
+// src/crypto.ts
+function getSubtle() {
+  const subtle = globalThis?.crypto?.subtle;
+  if (subtle) return subtle;
+  try {
+    const nodeCrypto = __require("crypto");
+    return nodeCrypto.webcrypto.subtle;
+  } catch {
+    throw new Error(
+      "No WebCrypto implementation available. Requires Node.js >=16, or a runtime with globalThis.crypto.subtle."
+    );
+  }
+}
+
+// src/hash.ts
+var encoder = new TextEncoder();
+async function sha256(input) {
+  const data = encoder.encode(input);
+  const subtle = getSubtle();
+  const buf = await subtle.digest("SHA-256", data);
+  const hex = Array.from(new Uint8Array(buf)).map((b) => b.toString(16).padStart(2, "0")).join("");
+  return `sha256:${hex}`;
+}
+function canonicalize(value) {
+  if (value === null) return value;
+  if (value === void 0) {
+    throw new TypeError("canonicalize: undefined is not allowed; use null instead");
+  }
+  const t = typeof value;
+  if (t === "string" || t === "number" || t === "boolean") {
+    return value;
+  }
+  if (t === "bigint") {
+    throw new TypeError("canonicalize: BigInt is not JSON-serializable");
+  }
+  if (t === "symbol") {
+    throw new TypeError("canonicalize: Symbol is not JSON-serializable");
+  }
+  if (t === "function") {
+    throw new TypeError("canonicalize: Function is not JSON-serializable");
+  }
+  if (Array.isArray(value)) {
+    return value.map(canonicalize);
+  }
+  if (value instanceof Date) {
+    throw new TypeError("canonicalize: Date objects are not allowed; use ISO 8601 strings");
+  }
+  if (value instanceof RegExp) {
+    throw new TypeError("canonicalize: RegExp objects are not JSON-serializable");
+  }
+  if (value instanceof Map || value instanceof Set) {
+    throw new TypeError(
+      "canonicalize: Map/Set are not JSON-serializable; use plain objects/arrays"
+    );
+  }
+  if (t === "object") {
+    const sorted = {};
+    for (const key of Object.keys(value).sort()) {
+      sorted[key] = canonicalize(value[key]);
+    }
+    return sorted;
+  }
+  throw new TypeError(`canonicalize: unsupported type "${t}"`);
+}
+async function hashMessages(messages) {
+  const canonical = JSON.stringify(canonicalize(messages));
+  return sha256(canonical);
+}
+function messagesBytes(messages) {
+  const canonical = JSON.stringify(canonicalize(messages));
+  return encoder.encode(canonical).byteLength;
+}
+async function hashOutput(content) {
+  return sha256(content);
+}
+function outputBytes(content) {
+  return encoder.encode(content).byteLength;
+}
+
+// src/evidence.ts
+var INFERENCE_KIND = "inference.chat_completion";
+var INFERENCE_EXTENSION_KEY = "org.peacprotocol/inference@0.1";
+function concatOutputContent(completion) {
+  return completion.choices.map((c) => c.message.content ?? "").join("");
+}
+function primaryFinishReason(completion) {
+  if (completion.choices.length === 0) return null;
+  return completion.choices[0].finish_reason;
+}
+async function fromChatCompletion(params) {
+  const { messages, completion, provider } = params;
+  const outputContent = concatOutputContent(completion);
+  const [inputHash, outputHash] = await Promise.all([
+    hashMessages(messages),
+    hashOutput(outputContent)
+  ]);
+  const inputValue = inputHash.slice("sha256:".length);
+  const outputValue = outputHash.slice("sha256:".length);
+  const platform = provider ? `openai-compatible:${provider}` : "openai-compatible";
+  const inferenceExt = {
+    model: completion.model,
+    finish_reason: primaryFinishReason(completion)
+  };
+  if (completion.usage) {
+    inferenceExt.usage = {
+      prompt_tokens: completion.usage.prompt_tokens,
+      completion_tokens: completion.usage.completion_tokens,
+      total_tokens: completion.usage.total_tokens
+    };
+  }
+  const finishReason = primaryFinishReason(completion);
+  const resultStatus = finishReason === "error" || completion.choices.length === 0 ? "error" : "ok";
+  const evidence = {
+    interaction_id: completion.id,
+    kind: INFERENCE_KIND,
+    executor: {
+      platform,
+      version: completion.model
+    },
+    started_at: new Date(completion.created * 1e3).toISOString(),
+    input: {
+      digest: {
+        alg: "sha-256",
+        value: inputValue,
+        bytes: messagesBytes(messages)
+      },
+      redaction: "hash_only"
+    },
+    output: {
+      digest: {
+        alg: "sha-256",
+        value: outputValue,
+        bytes: outputBytes(outputContent)
+      },
+      redaction: "hash_only"
+    },
+    result: {
+      status: resultStatus
+    },
+    extensions: {
+      [INFERENCE_EXTENSION_KEY]: inferenceExt
+    }
+  };
+  return evidence;
+}
+
+exports.INFERENCE_EXTENSION_KEY = INFERENCE_EXTENSION_KEY;
+exports.INFERENCE_KIND = INFERENCE_KIND;
+exports.fromChatCompletion = fromChatCompletion;
+exports.getSubtle = getSubtle;
+exports.hashMessages = hashMessages;
+exports.hashOutput = hashOutput;
+exports.messagesBytes = messagesBytes;
+exports.outputBytes = outputBytes;
+//# sourceMappingURL=index.cjs.map
+//# sourceMappingURL=index.cjs.map

package/dist/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/crypto.ts","../src/hash.ts","../src/evidence.ts"],"names":[],"mappings":";;;;;;;;;;AA0BO,SAAS,SAAA,GAAoB;AAElC,EAAA,MAAM,MAAA,GAAS,YAAY,MAAA,EAAQ,MAAA;AACnC,EAAA,IAAI,QAAQ,OAAO,MAAA;AAGnB,EAAA,IAAI;AACF,IAAA,MAAM,UAAA,GAAa,UAAQ,QAAa,CAAA;AAGxC,IAAA,OAAO,WAAW,SAAA,CAAU,MAAA;AAAA,EAC9B,CAAA,CAAA,MAAQ;AACN,IAAA,MAAM,IAAI,KAAA;AAAA,MACR;AAAA,KAEF;AAAA,EACF;AACF;;;ACjBA,IAAM,OAAA,GAAU,IAAI,WAAA,EAAY;AAQhC,eAAe,OAAO,KAAA,EAAgC;AACpD,EAAA,MAAM,IAAA,GAAO,OAAA,CAAQ,MAAA,CAAO,KAAK,CAAA;AACjC,EAAA,MAAM,SAAS,SAAA,EAAU;AACzB,EAAA,MAAM,GAAA,GAAM,MAAM,MAAA,CAAO,MAAA,CAAO,WAAW,IAAI,CAAA;AAC/C,EAAA,MAAM,GAAA,GAAM,MAAM,IAAA,CAAK,IAAI,WAAW,GAAG,CAAC,EACvC,GAAA,CAAI,CAAC,MAAM,CAAA,CAAE,QAAA,CAAS,EAAE,CAAA,CAAE,QAAA,CAAS,GAAG,GAAG,CAAC,CAAA,CAC1C,IAAA,CAAK,EAAE,CAAA;AACV,EAAA,OAAO,UAAU,GAAG,CAAA,CAAA;AACtB;AAqBA,SAAS,aAAa,KAAA,EAAyB;AAC7C,EAAA,IAAI,KAAA,KAAU,MAAM,OAAO,KAAA;AAE3B,EAAA,IAAI,UAAU,MAAA,EAAW;AACvB,IAAA,MAAM,IAAI,UAAU,0DAA0D,CAAA;AAAA,EAChF;AAEA,EAAA,MAAM,IAAI,OAAO,KAAA;AAGjB,EAAA,IAAI,CAAA,KAAM,QAAA,IAAY,CAAA,KAAM,QAAA,IAAY,MAAM,SAAA,EAAW;AACvD,IAAA,OAAO,KAAA;AAAA,EACT;AAGA,EAAA,IAAI,MAAM,QAAA,EAAU;AAClB,IAAA,MAAM,IAAI,UAAU,+CAA+C,CAAA;AAAA,EACrE;AACA,EAAA,IAAI,MAAM,QAAA,EAAU;AAClB,IAAA,MAAM,IAAI,UAAU,+CAA+C,CAAA;AAAA,EACrE;AACA,EAAA,IAAI,MAAM,UAAA,EAAY;AACpB,IAAA,MAAM,IAAI,UAAU,iDAAiD,CAAA;AAAA,EACvE;AAGA,EAAA,IAAI,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,EAAG;AACxB,IAAA,OAAO,KAAA,CAAM,IAAI,YAAY,CAAA;AAAA,EAC/B;AAGA,EAAA,IAAI,iBAAiB,IAAA,EAAM;AACzB,IAAA,MAAM,IAAI,UAAU,kEAAkE,CAAA;AAAA,EACxF;AACA,EAAA,IAAI,iBAAiB,MAAA,EAAQ;AAC3B,IAAA,MAAM,IAAI,UAAU,wDAAwD,CAAA;AAAA,EAC9E;AACA,EAAA,IAAI,KAAA,YAAiB,GAAA,IAAO,KAAA,YAAiB,GAAA,EAAK;AAChD,IAAA,MAAM,IAAI,SAAA;AAAA,MACR;AAAA,KACF;AAAA,EACF;AAGA,EAAA,IAAI,MAAM,QAAA,EAAU;AAClB,IAAA,MAAM,SAAkC,EAAC;AACzC,IAAA,KAAA,MAAW,OAAO,MAAA,CAAO,IAAA,CAAK,KAAgC,CAAA,CAAE,MAAK,EAAG;AACtE,MAAA,MAAA,CAAO,GAAG,CAAA,GAAI,YAAA,CAAc,KAAA,CAAkC,GAAG,CAAC,CAAA;AAAA,IACpE;AACA,IAAA,OAAO,MAAA;AAAA,EACT;AAGA,EAAA,MAAM,IAAI,SAAA,CAAU,CAAA,gCAAA,EAAmC,CAAC,CAAA,CAAA,CAAG,CAAA;AAC7D;AAgBA,eAAsB,aAAa,QAAA,EAA0C;AAC3E,EAAA,MAAM,SAAA,GAAY,IAAA,CAAK,SAAA,CAAU,YAAA,CAAa,QAAQ,CAAC,CAAA;AACvD,EAAA,OAAO,OAAO,SAAS,CAAA;AACzB;AAOO,SAAS,cAAc,QAAA,EAAiC;AAC7D,EAAA,MAAM,SAAA,GAAY,IAAA,CAAK,SAAA,CAAU,YAAA,CAAa,QAAQ,CAAC,CAAA;AACvD,EAAA,OAAO,OAAA,CAAQ,MAAA,CAAO,SAAS,CAAA,CAAE,UAAA;AACnC;AAWA,eAAsB,WAAW,OAAA,EAAkC;AACjE,EAAA,OAAO,OAAO,OAAO,CAAA;AACvB;AAKO,SAAS,YAAY,OAAA,EAAyB;AACnD,EAAA,OAAO,OAAA,CAAQ,MAAA,CAAO,OAAO,CAAA,CAAE,UAAA;AACjC;;;ACvJO,IAAM,cAAA,GAAiB;AAGvB,IAAM,uBAAA,GAA0B;AA4CvC,SAAS,oBAAoB,UAAA,EAAoC;AAC/D,EAAA,OAAO,UAAA,CAAW,OAAA,CAAQ,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,CAAE,OAAA,CAAQ,OAAA,IAAW,EAAE,CAAA,CAAE,IAAA,CAAK,EAAE,CAAA;AACvE;AAGA,SAAS,oBAAoB,UAAA,EAA2C;AACtE,EAAA,IAAI,UAAA,CAAW,OAAA,CAAQ,MAAA,KAAW,CAAA,EAAG,OAAO,IAAA;AAC5C,EAAA,OAAO,UAAA,CAAW,OAAA,CAAQ,CAAC,CAAA,CAAE,aAAA;AAC/B;AAeA,eAAsB,mBACpB,MAAA,EAC4B;AAC5B,EAAA,MAAM,EAAE,QAAA,EAAU,UAAA,EAAY,QAAA,EAAS,GAAI,MAAA;AAG3C,EAAA,MAAM,aAAA,GAAgB,oBAAoB,UAAU,CAAA;AACpD,EAAA,MAAM,CAAC,SAAA,EAAW,UAAU,CAAA,GAAI,MAAM,QAAQ,GAAA,CAAI;AAAA,IAChD,aAAa,QAAQ,CAAA;AAAA,IACrB,WAAW,aAAa;AAAA,GACzB,CAAA;AAGD,EAAA,MAAM,UAAA,GAAa,SAAA,CAAU,KAAA,CAAM,SAAA,CAAU,MAAM,CAAA;AACnD,EAAA,MAAM,WAAA,GAAc,UAAA,CAAW,KAAA,CAAM,SAAA,CAAU,MAAM,CAAA;AAGrD,EAAA,MAAM,QAAA,GAAW,QAAA,GAAW,CAAA,kBAAA,EAAqB,QAAQ,CAAA,CAAA,GAAK,mBAAA;AAG9D,EAAA,MAAM,YAAA,GAAwC;AAAA,IAC5C,OAAO,UAAA,CAAW,KAAA;AAAA,IAClB,aAAA,EAAe,oBAAoB,UAAU;AAAA,GAC/C;AACA,EAAA,IAAI,WAAW,KAAA,EAAO;AACpB,IAAA,YAAA,CAAa,KAAA,GAAQ;AAAA,MACnB,aAAA,EAAe,WAAW,KAAA,CAAM,aAAA;AAAA,MAChC,iBAAA,EAAmB,WAAW,KAAA,CAAM,iBAAA;AAAA,MACpC,YAAA,EAAc,WAAW,KAAA,CAAM;AAAA,KACjC;AAAA,EACF;AAGA,EAAA,MAAM,YAAA,GAAe,oBAAoB,UAAU,CAAA;AACnD,EAAA,MAAM,eACJ,YAAA,KAAiB,OAAA,IAAW,WAAW,OAAA,CAAQ,MAAA,KAAW,IAAI,OAAA,GAAU,IAAA;AAE1E,EAAA,MAAM,QAAA,GAA8B;AAAA,IAClC,gBAAgB,UAAA,CAAW,EAAA;AAAA,IAC3B,IAAA,EAAM,cAAA;AAAA,IACN,QAAA,EAAU;AAAA,MACR,QAAA;AAAA,MACA,SAAS,UAAA,CAAW;AAAA,KACtB;AAAA,IACA,YAAY,IAAI,IAAA,CAAK,WAAW,OAAA,GAAU,GAAI,EAAE,WAAA,EAAY;AAAA,IAC5D,KAAA,EAAO;AAAA,MACL,MAAA,EAAQ;AAAA,QACN,GAAA,EAAK,SAAA;AAAA,QACL,KAAA,EAAO,UAAA;AAAA,QACP,KAAA,EAAO,cAAc,QAAQ;AAAA,OAC/B;AAAA,MACA,SAAA,EAAW;AAAA,KACb;AAAA,IACA,MAAA,EAAQ;AAAA,MACN,MAAA,EAAQ;AAAA,QACN,GAAA,EAAK,SAAA;AAAA,QACL,KAAA,EAAO,WAAA;AAAA,QACP,KAAA,EAAO,YAAY,aAAa;AAAA,OAClC;AAAA,MACA,SAAA,EAAW;AAAA,KACb;AAAA,IACA,MAAA,EAAQ;AAAA,MACN,MAAA,EAAQ;AAAA,KACV;AAAA,IACA,UAAA,EAAY;AAAA,MACV,CAAC,uBAAuB,GAAG;AAAA;AAC7B,GACF;AAEA,EAAA,OAAO,QAAA;AACT","file":"index.cjs","sourcesContent":["/**\n * WebCrypto utility for SHA-256 hashing (DD-138).\n *\n * Portable: uses globalThis.crypto.subtle (Node 19+, browsers, Deno, Bun)\n * with fallback to node:crypto webcrypto for Node >=16.\n *\n * Minimum supported runtime: Node.js 16+ (with webcrypto).\n * Recommended: Node.js 22+ (globalThis.crypto.subtle is always available).\n */\n\n// Use typeof to avoid DOM lib dependency for the SubtleCrypto type\ntype Subtle = typeof globalThis.crypto.subtle;\n\n// ---------------------------------------------------------------------------\n// WebCrypto resolution\n// ---------------------------------------------------------------------------\n\n/**\n * Get the SubtleCrypto implementation for the current runtime.\n *\n * Tries globalThis.crypto.subtle first (available in Node 19+, all modern\n * browsers, Deno, Bun, Cloudflare Workers). Falls back to node:crypto\n * webcrypto for Node >=16.\n *\n * @throws {Error} if no WebCrypto implementation is available\n */\nexport function getSubtle(): Subtle {\n  // Prefer globalThis.crypto.subtle (Node 19+, all modern browsers)\n  const subtle = globalThis?.crypto?.subtle;\n  if (subtle) return subtle;\n\n  // Node.js fallback for older versions (>=16)\n  try {\n    const nodeCrypto = require('node:crypto') as {\n      webcrypto: { subtle: Subtle };\n    };\n    return nodeCrypto.webcrypto.subtle;\n  } catch {\n    throw new Error(\n      'No WebCrypto implementation available. ' +\n        'Requires Node.js >=16, or a runtime with globalThis.crypto.subtle.'\n    );\n  }\n}\n","/**\n * Hash-first evidence model for OpenAI-compatible completions (DD-138).\n *\n * SHA-256 digests of messages and output.\n * No raw prompt or completion text is stored in receipts.\n *\n * Canonicalization: deterministic key-sorted JSON serialization.\n * Object keys are sorted lexicographically at every nesting level,\n * then serialized via JSON.stringify. This is NOT RFC 8785 JCS\n * (which has additional requirements for numeric handling); it is\n * sufficient for ChatMessage objects whose fields are strings,\n * booleans, nulls, and arrays of the same.\n *\n * Input constraints enforced by canonicalize():\n *   - Allowed: string, number, boolean, null, plain object, array\n *   - Rejected: Date, RegExp, Map, Set, Function, Symbol, BigInt, undefined\n *     (at any nesting level)\n */\n\nimport { getSubtle } from './crypto.js';\nimport type { ChatMessage } from './types.js';\n\n// ---------------------------------------------------------------------------\n// Helpers\n// ---------------------------------------------------------------------------\n\nconst encoder = new TextEncoder();\n\n/**\n * SHA-256 hash a string, return `sha256:<hex64>`.\n *\n * Uses getSubtle() for portable WebCrypto access\n * (Node 19+ globalThis.crypto.subtle, fallback to node:crypto webcrypto).\n */\nasync function sha256(input: string): Promise<string> {\n  const data = encoder.encode(input);\n  const subtle = getSubtle();\n  const buf = await subtle.digest('SHA-256', data);\n  const hex = Array.from(new Uint8Array(buf))\n    .map((b) => b.toString(16).padStart(2, '0'))\n    .join('');\n  return `sha256:${hex}`;\n}\n\n// ---------------------------------------------------------------------------\n// Canonicalization\n// ---------------------------------------------------------------------------\n\n/**\n * Recursively sort object keys for deterministic serialization.\n *\n * This produces a stable JSON representation by sorting object keys\n * lexicographically at every nesting level. Arrays preserve order.\n *\n * Note: this is deterministic key-sorted JSON, not RFC 8785 JCS.\n * Suitable for ChatMessage fields (strings, nulls, arrays, booleans).\n *\n * Input constraints: only JSON-safe types are accepted (string, number,\n * boolean, null, plain object, array). Date, RegExp, Map, Set, Function,\n * Symbol, BigInt, and undefined are rejected with a TypeError.\n *\n * @throws {TypeError} if input contains non-JSON-safe types\n */\nfunction canonicalize(value: unknown): unknown {\n  if (value === null) return value;\n\n  if (value === undefined) {\n    throw new TypeError('canonicalize: undefined is not allowed; use null instead');\n  }\n\n  const t = typeof value;\n\n  // Primitives: string, number, boolean pass through\n  if (t === 'string' || t === 'number' || t === 'boolean') {\n    return value;\n  }\n\n  // Reject non-JSON-safe primitives\n  if (t === 'bigint') {\n    throw new TypeError('canonicalize: BigInt is not JSON-serializable');\n  }\n  if (t === 'symbol') {\n    throw new TypeError('canonicalize: Symbol is not JSON-serializable');\n  }\n  if (t === 'function') {\n    throw new TypeError('canonicalize: Function is not JSON-serializable');\n  }\n\n  // Object types\n  if (Array.isArray(value)) {\n    return value.map(canonicalize);\n  }\n\n  // Reject non-plain objects (Date, RegExp, Map, Set, etc.)\n  if (value instanceof Date) {\n    throw new TypeError('canonicalize: Date objects are not allowed; use ISO 8601 strings');\n  }\n  if (value instanceof RegExp) {\n    throw new TypeError('canonicalize: RegExp objects are not JSON-serializable');\n  }\n  if (value instanceof Map || value instanceof Set) {\n    throw new TypeError(\n      'canonicalize: Map/Set are not JSON-serializable; use plain objects/arrays'\n    );\n  }\n\n  // Plain object: sort keys recursively\n  if (t === 'object') {\n    const sorted: Record<string, unknown> = {};\n    for (const key of Object.keys(value as Record<string, unknown>).sort()) {\n      sorted[key] = canonicalize((value as Record<string, unknown>)[key]);\n    }\n    return sorted;\n  }\n\n  // Catch-all for any other unexpected type\n  throw new TypeError(`canonicalize: unsupported type \"${t}\"`);\n}\n\n// ---------------------------------------------------------------------------\n// Public API\n// ---------------------------------------------------------------------------\n\n/**\n * Hash an array of chat messages.\n *\n * Applies deterministic key-sorted JSON serialization (sorted keys at\n * every nesting level), then computes SHA-256. Returns `sha256:<hex64>`.\n *\n * @param messages - The chat messages to hash\n * @returns `sha256:<hex64>` digest string\n * @throws {TypeError} if messages contain non-JSON-safe types\n */\nexport async function hashMessages(messages: ChatMessage[]): Promise<string> {\n  const canonical = JSON.stringify(canonicalize(messages));\n  return sha256(canonical);\n}\n\n/**\n * Compute the byte size of a messages array (canonical JSON).\n *\n * @throws {TypeError} if messages contain non-JSON-safe types\n */\nexport function messagesBytes(messages: ChatMessage[]): number {\n  const canonical = JSON.stringify(canonicalize(messages));\n  return encoder.encode(canonical).byteLength;\n}\n\n/**\n * Hash chat completion output text.\n *\n * Computes SHA-256 of the output content string.\n * Returns `sha256:<hex64>`.\n *\n * @param content - The output text to hash (concatenated choice contents)\n * @returns `sha256:<hex64>` digest string\n */\nexport async function hashOutput(content: string): Promise<string> {\n  return sha256(content);\n}\n\n/**\n * Compute the byte size of output content.\n */\nexport function outputBytes(content: string): number {\n  return encoder.encode(content).byteLength;\n}\n","/**\n * Evidence mapping for OpenAI-compatible chat completions (DD-138).\n *\n * Maps a ChatCompletion into InteractionEvidenceV01 using the hash-first\n * model: SHA-256 digests of messages and output, plaintext metadata only.\n */\n\nimport type { ChatCompletion, ChatMessage, InferenceReceiptParams } from './types.js';\nimport { hashMessages, hashOutput, messagesBytes, outputBytes } from './hash.js';\n\n// ---------------------------------------------------------------------------\n// Constants\n// ---------------------------------------------------------------------------\n\n/** Well-known interaction kind for chat completions. */\nexport const INFERENCE_KIND = 'inference.chat_completion';\n\n/** Extension key for inference metadata. */\nexport const INFERENCE_EXTENSION_KEY = 'org.peacprotocol/inference@0.1';\n\n// ---------------------------------------------------------------------------\n// Types\n// ---------------------------------------------------------------------------\n\n/** Interaction evidence structure (matches InteractionEvidenceV01 from @peac/schema). */\nexport interface InferenceEvidence {\n  interaction_id: string;\n  kind: typeof INFERENCE_KIND;\n  executor: {\n    platform: string;\n    version?: string;\n  };\n  started_at: string;\n  completed_at?: string;\n  duration_ms?: number;\n  input: {\n    digest: {\n      alg: 'sha-256';\n      value: string;\n      bytes: number;\n    };\n    redaction: 'hash_only';\n  };\n  output: {\n    digest: {\n      alg: 'sha-256';\n      value: string;\n      bytes: number;\n    };\n    redaction: 'hash_only';\n  };\n  result: {\n    status: 'ok' | 'error';\n  };\n  extensions: Record<string, unknown>;\n}\n\n// ---------------------------------------------------------------------------\n// Helpers\n// ---------------------------------------------------------------------------\n\n/** Concatenate all choice message contents into a single string. */\nfunction concatOutputContent(completion: ChatCompletion): string {\n  return completion.choices.map((c) => c.message.content ?? '').join('');\n}\n\n/** Extract finish_reason from the first choice (if any). */\nfunction primaryFinishReason(completion: ChatCompletion): string | null {\n  if (completion.choices.length === 0) return null;\n  return completion.choices[0].finish_reason;\n}\n\n// ---------------------------------------------------------------------------\n// Public API\n// ---------------------------------------------------------------------------\n\n/**\n * Create interaction evidence from an OpenAI-compatible chat completion.\n *\n * Hash-first model (DD-138): no raw prompt or completion text is stored.\n * Only SHA-256 digests, model ID, token counts, and timing are recorded.\n *\n * @param params - Messages, completion response, and optional provider\n * @returns InteractionEvidenceV01-compatible object\n */\nexport async function fromChatCompletion(\n  params: InferenceReceiptParams\n): Promise<InferenceEvidence> {\n  const { messages, completion, provider } = params;\n\n  // Hash inputs and outputs\n  const outputContent = concatOutputContent(completion);\n  const [inputHash, outputHash] = await Promise.all([\n    hashMessages(messages),\n    hashOutput(outputContent),\n  ]);\n\n  // Extract the hex value (strip `sha256:` prefix for digest.value)\n  const inputValue = inputHash.slice('sha256:'.length);\n  const outputValue = outputHash.slice('sha256:'.length);\n\n  // Build platform identifier\n  const platform = provider ? `openai-compatible:${provider}` : 'openai-compatible';\n\n  // Build inference extension metadata\n  const inferenceExt: Record<string, unknown> = {\n    model: completion.model,\n    finish_reason: primaryFinishReason(completion),\n  };\n  if (completion.usage) {\n    inferenceExt.usage = {\n      prompt_tokens: completion.usage.prompt_tokens,\n      completion_tokens: completion.usage.completion_tokens,\n      total_tokens: completion.usage.total_tokens,\n    };\n  }\n\n  // Determine result status from finish_reason\n  const finishReason = primaryFinishReason(completion);\n  const resultStatus: 'ok' | 'error' =\n    finishReason === 'error' || completion.choices.length === 0 ? 'error' : 'ok';\n\n  const evidence: InferenceEvidence = {\n    interaction_id: completion.id,\n    kind: INFERENCE_KIND,\n    executor: {\n      platform,\n      version: completion.model,\n    },\n    started_at: new Date(completion.created * 1000).toISOString(),\n    input: {\n      digest: {\n        alg: 'sha-256',\n        value: inputValue,\n        bytes: messagesBytes(messages),\n      },\n      redaction: 'hash_only',\n    },\n    output: {\n      digest: {\n        alg: 'sha-256',\n        value: outputValue,\n        bytes: outputBytes(outputContent),\n      },\n      redaction: 'hash_only',\n    },\n    result: {\n      status: resultStatus,\n    },\n    extensions: {\n      [INFERENCE_EXTENSION_KEY]: inferenceExt,\n    },\n  };\n\n  return evidence;\n}\n"]}

package/dist/index.d.ts

@@ -0,0 +1,17 @@
+/**
+ * @peac/adapter-openai-compatible
+ *
+ * OpenAI-compatible chat completion adapter for PEAC interaction evidence.
+ * Hash-first model (DD-138): no raw prompt or completion text in receipts.
+ *
+ * Works with any OpenAI-compatible provider (OpenAI, Anthropic via adapter,
+ * Ollama, vLLM, Together, etc.) without importing their SDKs.
+ *
+ * @packageDocumentation
+ */
+export type { ChatRole, ChatMessage, ChatUsage, ChatChoice, ChatCompletion, InferenceReceiptParams, } from './types.js';
+export { getSubtle } from './crypto.js';
+export { hashMessages, hashOutput, messagesBytes, outputBytes } from './hash.js';
+export { fromChatCompletion, INFERENCE_KIND, INFERENCE_EXTENSION_KEY } from './evidence.js';
+export type { InferenceEvidence } from './evidence.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,YAAY,EACV,QAAQ,EACR,WAAW,EACX,SAAS,EACT,UAAU,EACV,cAAc,EACd,sBAAsB,GACvB,MAAM,YAAY,CAAC;AAGpB,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAGxC,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAGjF,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AAC5F,YAAY,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC"}

package/dist/index.mjs

@@ -0,0 +1,156 @@
+var __require = /* @__PURE__ */ ((x) => typeof require !== "undefined" ? require : typeof Proxy !== "undefined" ? new Proxy(x, {
+  get: (a, b) => (typeof require !== "undefined" ? require : a)[b]
+}) : x)(function(x) {
+  if (typeof require !== "undefined") return require.apply(this, arguments);
+  throw Error('Dynamic require of "' + x + '" is not supported');
+});
+
+// src/crypto.ts
+function getSubtle() {
+  const subtle = globalThis?.crypto?.subtle;
+  if (subtle) return subtle;
+  try {
+    const nodeCrypto = __require("crypto");
+    return nodeCrypto.webcrypto.subtle;
+  } catch {
+    throw new Error(
+      "No WebCrypto implementation available. Requires Node.js >=16, or a runtime with globalThis.crypto.subtle."
+    );
+  }
+}
+
+// src/hash.ts
+var encoder = new TextEncoder();
+async function sha256(input) {
+  const data = encoder.encode(input);
+  const subtle = getSubtle();
+  const buf = await subtle.digest("SHA-256", data);
+  const hex = Array.from(new Uint8Array(buf)).map((b) => b.toString(16).padStart(2, "0")).join("");
+  return `sha256:${hex}`;
+}
+function canonicalize(value) {
+  if (value === null) return value;
+  if (value === void 0) {
+    throw new TypeError("canonicalize: undefined is not allowed; use null instead");
+  }
+  const t = typeof value;
+  if (t === "string" || t === "number" || t === "boolean") {
+    return value;
+  }
+  if (t === "bigint") {
+    throw new TypeError("canonicalize: BigInt is not JSON-serializable");
+  }
+  if (t === "symbol") {
+    throw new TypeError("canonicalize: Symbol is not JSON-serializable");
+  }
+  if (t === "function") {
+    throw new TypeError("canonicalize: Function is not JSON-serializable");
+  }
+  if (Array.isArray(value)) {
+    return value.map(canonicalize);
+  }
+  if (value instanceof Date) {
+    throw new TypeError("canonicalize: Date objects are not allowed; use ISO 8601 strings");
+  }
+  if (value instanceof RegExp) {
+    throw new TypeError("canonicalize: RegExp objects are not JSON-serializable");
+  }
+  if (value instanceof Map || value instanceof Set) {
+    throw new TypeError(
+      "canonicalize: Map/Set are not JSON-serializable; use plain objects/arrays"
+    );
+  }
+  if (t === "object") {
+    const sorted = {};
+    for (const key of Object.keys(value).sort()) {
+      sorted[key] = canonicalize(value[key]);
+    }
+    return sorted;
+  }
+  throw new TypeError(`canonicalize: unsupported type "${t}"`);
+}
+async function hashMessages(messages) {
+  const canonical = JSON.stringify(canonicalize(messages));
+  return sha256(canonical);
+}
+function messagesBytes(messages) {
+  const canonical = JSON.stringify(canonicalize(messages));
+  return encoder.encode(canonical).byteLength;
+}
+async function hashOutput(content) {
+  return sha256(content);
+}
+function outputBytes(content) {
+  return encoder.encode(content).byteLength;
+}
+
+// src/evidence.ts
+var INFERENCE_KIND = "inference.chat_completion";
+var INFERENCE_EXTENSION_KEY = "org.peacprotocol/inference@0.1";
+function concatOutputContent(completion) {
+  return completion.choices.map((c) => c.message.content ?? "").join("");
+}
+function primaryFinishReason(completion) {
+  if (completion.choices.length === 0) return null;
+  return completion.choices[0].finish_reason;
+}
+async function fromChatCompletion(params) {
+  const { messages, completion, provider } = params;
+  const outputContent = concatOutputContent(completion);
+  const [inputHash, outputHash] = await Promise.all([
+    hashMessages(messages),
+    hashOutput(outputContent)
+  ]);
+  const inputValue = inputHash.slice("sha256:".length);
+  const outputValue = outputHash.slice("sha256:".length);
+  const platform = provider ? `openai-compatible:${provider}` : "openai-compatible";
+  const inferenceExt = {
+    model: completion.model,
+    finish_reason: primaryFinishReason(completion)
+  };
+  if (completion.usage) {
+    inferenceExt.usage = {
+      prompt_tokens: completion.usage.prompt_tokens,
+      completion_tokens: completion.usage.completion_tokens,
+      total_tokens: completion.usage.total_tokens
+    };
+  }
+  const finishReason = primaryFinishReason(completion);
+  const resultStatus = finishReason === "error" || completion.choices.length === 0 ? "error" : "ok";
+  const evidence = {
+    interaction_id: completion.id,
+    kind: INFERENCE_KIND,
+    executor: {
+      platform,
+      version: completion.model
+    },
+    started_at: new Date(completion.created * 1e3).toISOString(),
+    input: {
+      digest: {
+        alg: "sha-256",
+        value: inputValue,
+        bytes: messagesBytes(messages)
+      },
+      redaction: "hash_only"
+    },
+    output: {
+      digest: {
+        alg: "sha-256",
+        value: outputValue,
+        bytes: outputBytes(outputContent)
+      },
+      redaction: "hash_only"
+    },
+    result: {
+      status: resultStatus
+    },
+    extensions: {
+      [INFERENCE_EXTENSION_KEY]: inferenceExt
+    }
+  };
+  return evidence;
+}
+
+export { INFERENCE_EXTENSION_KEY, INFERENCE_KIND, fromChatCompletion, getSubtle, hashMessages, hashOutput, messagesBytes, outputBytes };
+//# sourceMappingURL=index.mjs.map
+//# sourceMappingURL=index.mjs.map

package/dist/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/crypto.ts","../src/hash.ts","../src/evidence.ts"],"names":[],"mappings":";;;;;;;;AA0BO,SAAS,SAAA,GAAoB;AAElC,EAAA,MAAM,MAAA,GAAS,YAAY,MAAA,EAAQ,MAAA;AACnC,EAAA,IAAI,QAAQ,OAAO,MAAA;AAGnB,EAAA,IAAI;AACF,IAAA,MAAM,UAAA,GAAa,UAAQ,QAAa,CAAA;AAGxC,IAAA,OAAO,WAAW,SAAA,CAAU,MAAA;AAAA,EAC9B,CAAA,CAAA,MAAQ;AACN,IAAA,MAAM,IAAI,KAAA;AAAA,MACR;AAAA,KAEF;AAAA,EACF;AACF;;;ACjBA,IAAM,OAAA,GAAU,IAAI,WAAA,EAAY;AAQhC,eAAe,OAAO,KAAA,EAAgC;AACpD,EAAA,MAAM,IAAA,GAAO,OAAA,CAAQ,MAAA,CAAO,KAAK,CAAA;AACjC,EAAA,MAAM,SAAS,SAAA,EAAU;AACzB,EAAA,MAAM,GAAA,GAAM,MAAM,MAAA,CAAO,MAAA,CAAO,WAAW,IAAI,CAAA;AAC/C,EAAA,MAAM,GAAA,GAAM,MAAM,IAAA,CAAK,IAAI,WAAW,GAAG,CAAC,EACvC,GAAA,CAAI,CAAC,MAAM,CAAA,CAAE,QAAA,CAAS,EAAE,CAAA,CAAE,QAAA,CAAS,GAAG,GAAG,CAAC,CAAA,CAC1C,IAAA,CAAK,EAAE,CAAA;AACV,EAAA,OAAO,UAAU,GAAG,CAAA,CAAA;AACtB;AAqBA,SAAS,aAAa,KAAA,EAAyB;AAC7C,EAAA,IAAI,KAAA,KAAU,MAAM,OAAO,KAAA;AAE3B,EAAA,IAAI,UAAU,MAAA,EAAW;AACvB,IAAA,MAAM,IAAI,UAAU,0DAA0D,CAAA;AAAA,EAChF;AAEA,EAAA,MAAM,IAAI,OAAO,KAAA;AAGjB,EAAA,IAAI,CAAA,KAAM,QAAA,IAAY,CAAA,KAAM,QAAA,IAAY,MAAM,SAAA,EAAW;AACvD,IAAA,OAAO,KAAA;AAAA,EACT;AAGA,EAAA,IAAI,MAAM,QAAA,EAAU;AAClB,IAAA,MAAM,IAAI,UAAU,+CAA+C,CAAA;AAAA,EACrE;AACA,EAAA,IAAI,MAAM,QAAA,EAAU;AAClB,IAAA,MAAM,IAAI,UAAU,+CAA+C,CAAA;AAAA,EACrE;AACA,EAAA,IAAI,MAAM,UAAA,EAAY;AACpB,IAAA,MAAM,IAAI,UAAU,iDAAiD,CAAA;AAAA,EACvE;AAGA,EAAA,IAAI,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,EAAG;AACxB,IAAA,OAAO,KAAA,CAAM,IAAI,YAAY,CAAA;AAAA,EAC/B;AAGA,EAAA,IAAI,iBAAiB,IAAA,EAAM;AACzB,IAAA,MAAM,IAAI,UAAU,kEAAkE,CAAA;AAAA,EACxF;AACA,EAAA,IAAI,iBAAiB,MAAA,EAAQ;AAC3B,IAAA,MAAM,IAAI,UAAU,wDAAwD,CAAA;AAAA,EAC9E;AACA,EAAA,IAAI,KAAA,YAAiB,GAAA,IAAO,KAAA,YAAiB,GAAA,EAAK;AAChD,IAAA,MAAM,IAAI,SAAA;AAAA,MACR;AAAA,KACF;AAAA,EACF;AAGA,EAAA,IAAI,MAAM,QAAA,EAAU;AAClB,IAAA,MAAM,SAAkC,EAAC;AACzC,IAAA,KAAA,MAAW,OAAO,MAAA,CAAO,IAAA,CAAK,KAAgC,CAAA,CAAE,MAAK,EAAG;AACtE,MAAA,MAAA,CAAO,GAAG,CAAA,GAAI,YAAA,CAAc,KAAA,CAAkC,GAAG,CAAC,CAAA;AAAA,IACpE;AACA,IAAA,OAAO,MAAA;AAAA,EACT;AAGA,EAAA,MAAM,IAAI,SAAA,CAAU,CAAA,gCAAA,EAAmC,CAAC,CAAA,CAAA,CAAG,CAAA;AAC7D;AAgBA,eAAsB,aAAa,QAAA,EAA0C;AAC3E,EAAA,MAAM,SAAA,GAAY,IAAA,CAAK,SAAA,CAAU,YAAA,CAAa,QAAQ,CAAC,CAAA;AACvD,EAAA,OAAO,OAAO,SAAS,CAAA;AACzB;AAOO,SAAS,cAAc,QAAA,EAAiC;AAC7D,EAAA,MAAM,SAAA,GAAY,IAAA,CAAK,SAAA,CAAU,YAAA,CAAa,QAAQ,CAAC,CAAA;AACvD,EAAA,OAAO,OAAA,CAAQ,MAAA,CAAO,SAAS,CAAA,CAAE,UAAA;AACnC;AAWA,eAAsB,WAAW,OAAA,EAAkC;AACjE,EAAA,OAAO,OAAO,OAAO,CAAA;AACvB;AAKO,SAAS,YAAY,OAAA,EAAyB;AACnD,EAAA,OAAO,OAAA,CAAQ,MAAA,CAAO,OAAO,CAAA,CAAE,UAAA;AACjC;;;ACvJO,IAAM,cAAA,GAAiB;AAGvB,IAAM,uBAAA,GAA0B;AA4CvC,SAAS,oBAAoB,UAAA,EAAoC;AAC/D,EAAA,OAAO,UAAA,CAAW,OAAA,CAAQ,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,CAAE,OAAA,CAAQ,OAAA,IAAW,EAAE,CAAA,CAAE,IAAA,CAAK,EAAE,CAAA;AACvE;AAGA,SAAS,oBAAoB,UAAA,EAA2C;AACtE,EAAA,IAAI,UAAA,CAAW,OAAA,CAAQ,MAAA,KAAW,CAAA,EAAG,OAAO,IAAA;AAC5C,EAAA,OAAO,UAAA,CAAW,OAAA,CAAQ,CAAC,CAAA,CAAE,aAAA;AAC/B;AAeA,eAAsB,mBACpB,MAAA,EAC4B;AAC5B,EAAA,MAAM,EAAE,QAAA,EAAU,UAAA,EAAY,QAAA,EAAS,GAAI,MAAA;AAG3C,EAAA,MAAM,aAAA,GAAgB,oBAAoB,UAAU,CAAA;AACpD,EAAA,MAAM,CAAC,SAAA,EAAW,UAAU,CAAA,GAAI,MAAM,QAAQ,GAAA,CAAI;AAAA,IAChD,aAAa,QAAQ,CAAA;AAAA,IACrB,WAAW,aAAa;AAAA,GACzB,CAAA;AAGD,EAAA,MAAM,UAAA,GAAa,SAAA,CAAU,KAAA,CAAM,SAAA,CAAU,MAAM,CAAA;AACnD,EAAA,MAAM,WAAA,GAAc,UAAA,CAAW,KAAA,CAAM,SAAA,CAAU,MAAM,CAAA;AAGrD,EAAA,MAAM,QAAA,GAAW,QAAA,GAAW,CAAA,kBAAA,EAAqB,QAAQ,CAAA,CAAA,GAAK,mBAAA;AAG9D,EAAA,MAAM,YAAA,GAAwC;AAAA,IAC5C,OAAO,UAAA,CAAW,KAAA;AAAA,IAClB,aAAA,EAAe,oBAAoB,UAAU;AAAA,GAC/C;AACA,EAAA,IAAI,WAAW,KAAA,EAAO;AACpB,IAAA,YAAA,CAAa,KAAA,GAAQ;AAAA,MACnB,aAAA,EAAe,WAAW,KAAA,CAAM,aAAA;AAAA,MAChC,iBAAA,EAAmB,WAAW,KAAA,CAAM,iBAAA;AAAA,MACpC,YAAA,EAAc,WAAW,KAAA,CAAM;AAAA,KACjC;AAAA,EACF;AAGA,EAAA,MAAM,YAAA,GAAe,oBAAoB,UAAU,CAAA;AACnD,EAAA,MAAM,eACJ,YAAA,KAAiB,OAAA,IAAW,WAAW,OAAA,CAAQ,MAAA,KAAW,IAAI,OAAA,GAAU,IAAA;AAE1E,EAAA,MAAM,QAAA,GAA8B;AAAA,IAClC,gBAAgB,UAAA,CAAW,EAAA;AAAA,IAC3B,IAAA,EAAM,cAAA;AAAA,IACN,QAAA,EAAU;AAAA,MACR,QAAA;AAAA,MACA,SAAS,UAAA,CAAW;AAAA,KACtB;AAAA,IACA,YAAY,IAAI,IAAA,CAAK,WAAW,OAAA,GAAU,GAAI,EAAE,WAAA,EAAY;AAAA,IAC5D,KAAA,EAAO;AAAA,MACL,MAAA,EAAQ;AAAA,QACN,GAAA,EAAK,SAAA;AAAA,QACL,KAAA,EAAO,UAAA;AAAA,QACP,KAAA,EAAO,cAAc,QAAQ;AAAA,OAC/B;AAAA,MACA,SAAA,EAAW;AAAA,KACb;AAAA,IACA,MAAA,EAAQ;AAAA,MACN,MAAA,EAAQ;AAAA,QACN,GAAA,EAAK,SAAA;AAAA,QACL,KAAA,EAAO,WAAA;AAAA,QACP,KAAA,EAAO,YAAY,aAAa;AAAA,OAClC;AAAA,MACA,SAAA,EAAW;AAAA,KACb;AAAA,IACA,MAAA,EAAQ;AAAA,MACN,MAAA,EAAQ;AAAA,KACV;AAAA,IACA,UAAA,EAAY;AAAA,MACV,CAAC,uBAAuB,GAAG;AAAA;AAC7B,GACF;AAEA,EAAA,OAAO,QAAA;AACT","file":"index.mjs","sourcesContent":["/**\n * WebCrypto utility for SHA-256 hashing (DD-138).\n *\n * Portable: uses globalThis.crypto.subtle (Node 19+, browsers, Deno, Bun)\n * with fallback to node:crypto webcrypto for Node >=16.\n *\n * Minimum supported runtime: Node.js 16+ (with webcrypto).\n * Recommended: Node.js 22+ (globalThis.crypto.subtle is always available).\n */\n\n// Use typeof to avoid DOM lib dependency for the SubtleCrypto type\ntype Subtle = typeof globalThis.crypto.subtle;\n\n// ---------------------------------------------------------------------------\n// WebCrypto resolution\n// ---------------------------------------------------------------------------\n\n/**\n * Get the SubtleCrypto implementation for the current runtime.\n *\n * Tries globalThis.crypto.subtle first (available in Node 19+, all modern\n * browsers, Deno, Bun, Cloudflare Workers). Falls back to node:crypto\n * webcrypto for Node >=16.\n *\n * @throws {Error} if no WebCrypto implementation is available\n */\nexport function getSubtle(): Subtle {\n  // Prefer globalThis.crypto.subtle (Node 19+, all modern browsers)\n  const subtle = globalThis?.crypto?.subtle;\n  if (subtle) return subtle;\n\n  // Node.js fallback for older versions (>=16)\n  try {\n    const nodeCrypto = require('node:crypto') as {\n      webcrypto: { subtle: Subtle };\n    };\n    return nodeCrypto.webcrypto.subtle;\n  } catch {\n    throw new Error(\n      'No WebCrypto implementation available. ' +\n        'Requires Node.js >=16, or a runtime with globalThis.crypto.subtle.'\n    );\n  }\n}\n","/**\n * Hash-first evidence model for OpenAI-compatible completions (DD-138).\n *\n * SHA-256 digests of messages and output.\n * No raw prompt or completion text is stored in receipts.\n *\n * Canonicalization: deterministic key-sorted JSON serialization.\n * Object keys are sorted lexicographically at every nesting level,\n * then serialized via JSON.stringify. This is NOT RFC 8785 JCS\n * (which has additional requirements for numeric handling); it is\n * sufficient for ChatMessage objects whose fields are strings,\n * booleans, nulls, and arrays of the same.\n *\n * Input constraints enforced by canonicalize():\n *   - Allowed: string, number, boolean, null, plain object, array\n *   - Rejected: Date, RegExp, Map, Set, Function, Symbol, BigInt, undefined\n *     (at any nesting level)\n */\n\nimport { getSubtle } from './crypto.js';\nimport type { ChatMessage } from './types.js';\n\n// ---------------------------------------------------------------------------\n// Helpers\n// ---------------------------------------------------------------------------\n\nconst encoder = new TextEncoder();\n\n/**\n * SHA-256 hash a string, return `sha256:<hex64>`.\n *\n * Uses getSubtle() for portable WebCrypto access\n * (Node 19+ globalThis.crypto.subtle, fallback to node:crypto webcrypto).\n */\nasync function sha256(input: string): Promise<string> {\n  const data = encoder.encode(input);\n  const subtle = getSubtle();\n  const buf = await subtle.digest('SHA-256', data);\n  const hex = Array.from(new Uint8Array(buf))\n    .map((b) => b.toString(16).padStart(2, '0'))\n    .join('');\n  return `sha256:${hex}`;\n}\n\n// ---------------------------------------------------------------------------\n// Canonicalization\n// ---------------------------------------------------------------------------\n\n/**\n * Recursively sort object keys for deterministic serialization.\n *\n * This produces a stable JSON representation by sorting object keys\n * lexicographically at every nesting level. Arrays preserve order.\n *\n * Note: this is deterministic key-sorted JSON, not RFC 8785 JCS.\n * Suitable for ChatMessage fields (strings, nulls, arrays, booleans).\n *\n * Input constraints: only JSON-safe types are accepted (string, number,\n * boolean, null, plain object, array). Date, RegExp, Map, Set, Function,\n * Symbol, BigInt, and undefined are rejected with a TypeError.\n *\n * @throws {TypeError} if input contains non-JSON-safe types\n */\nfunction canonicalize(value: unknown): unknown {\n  if (value === null) return value;\n\n  if (value === undefined) {\n    throw new TypeError('canonicalize: undefined is not allowed; use null instead');\n  }\n\n  const t = typeof value;\n\n  // Primitives: string, number, boolean pass through\n  if (t === 'string' || t === 'number' || t === 'boolean') {\n    return value;\n  }\n\n  // Reject non-JSON-safe primitives\n  if (t === 'bigint') {\n    throw new TypeError('canonicalize: BigInt is not JSON-serializable');\n  }\n  if (t === 'symbol') {\n    throw new TypeError('canonicalize: Symbol is not JSON-serializable');\n  }\n  if (t === 'function') {\n    throw new TypeError('canonicalize: Function is not JSON-serializable');\n  }\n\n  // Object types\n  if (Array.isArray(value)) {\n    return value.map(canonicalize);\n  }\n\n  // Reject non-plain objects (Date, RegExp, Map, Set, etc.)\n  if (value instanceof Date) {\n    throw new TypeError('canonicalize: Date objects are not allowed; use ISO 8601 strings');\n  }\n  if (value instanceof RegExp) {\n    throw new TypeError('canonicalize: RegExp objects are not JSON-serializable');\n  }\n  if (value instanceof Map || value instanceof Set) {\n    throw new TypeError(\n      'canonicalize: Map/Set are not JSON-serializable; use plain objects/arrays'\n    );\n  }\n\n  // Plain object: sort keys recursively\n  if (t === 'object') {\n    const sorted: Record<string, unknown> = {};\n    for (const key of Object.keys(value as Record<string, unknown>).sort()) {\n      sorted[key] = canonicalize((value as Record<string, unknown>)[key]);\n    }\n    return sorted;\n  }\n\n  // Catch-all for any other unexpected type\n  throw new TypeError(`canonicalize: unsupported type \"${t}\"`);\n}\n\n// ---------------------------------------------------------------------------\n// Public API\n// ---------------------------------------------------------------------------\n\n/**\n * Hash an array of chat messages.\n *\n * Applies deterministic key-sorted JSON serialization (sorted keys at\n * every nesting level), then computes SHA-256. Returns `sha256:<hex64>`.\n *\n * @param messages - The chat messages to hash\n * @returns `sha256:<hex64>` digest string\n * @throws {TypeError} if messages contain non-JSON-safe types\n */\nexport async function hashMessages(messages: ChatMessage[]): Promise<string> {\n  const canonical = JSON.stringify(canonicalize(messages));\n  return sha256(canonical);\n}\n\n/**\n * Compute the byte size of a messages array (canonical JSON).\n *\n * @throws {TypeError} if messages contain non-JSON-safe types\n */\nexport function messagesBytes(messages: ChatMessage[]): number {\n  const canonical = JSON.stringify(canonicalize(messages));\n  return encoder.encode(canonical).byteLength;\n}\n\n/**\n * Hash chat completion output text.\n *\n * Computes SHA-256 of the output content string.\n * Returns `sha256:<hex64>`.\n *\n * @param content - The output text to hash (concatenated choice contents)\n * @returns `sha256:<hex64>` digest string\n */\nexport async function hashOutput(content: string): Promise<string> {\n  return sha256(content);\n}\n\n/**\n * Compute the byte size of output content.\n */\nexport function outputBytes(content: string): number {\n  return encoder.encode(content).byteLength;\n}\n","/**\n * Evidence mapping for OpenAI-compatible chat completions (DD-138).\n *\n * Maps a ChatCompletion into InteractionEvidenceV01 using the hash-first\n * model: SHA-256 digests of messages and output, plaintext metadata only.\n */\n\nimport type { ChatCompletion, ChatMessage, InferenceReceiptParams } from './types.js';\nimport { hashMessages, hashOutput, messagesBytes, outputBytes } from './hash.js';\n\n// ---------------------------------------------------------------------------\n// Constants\n// ---------------------------------------------------------------------------\n\n/** Well-known interaction kind for chat completions. */\nexport const INFERENCE_KIND = 'inference.chat_completion';\n\n/** Extension key for inference metadata. */\nexport const INFERENCE_EXTENSION_KEY = 'org.peacprotocol/inference@0.1';\n\n// ---------------------------------------------------------------------------\n// Types\n// ---------------------------------------------------------------------------\n\n/** Interaction evidence structure (matches InteractionEvidenceV01 from @peac/schema). */\nexport interface InferenceEvidence {\n  interaction_id: string;\n  kind: typeof INFERENCE_KIND;\n  executor: {\n    platform: string;\n    version?: string;\n  };\n  started_at: string;\n  completed_at?: string;\n  duration_ms?: number;\n  input: {\n    digest: {\n      alg: 'sha-256';\n      value: string;\n      bytes: number;\n    };\n    redaction: 'hash_only';\n  };\n  output: {\n    digest: {\n      alg: 'sha-256';\n      value: string;\n      bytes: number;\n    };\n    redaction: 'hash_only';\n  };\n  result: {\n    status: 'ok' | 'error';\n  };\n  extensions: Record<string, unknown>;\n}\n\n// ---------------------------------------------------------------------------\n// Helpers\n// ---------------------------------------------------------------------------\n\n/** Concatenate all choice message contents into a single string. */\nfunction concatOutputContent(completion: ChatCompletion): string {\n  return completion.choices.map((c) => c.message.content ?? '').join('');\n}\n\n/** Extract finish_reason from the first choice (if any). */\nfunction primaryFinishReason(completion: ChatCompletion): string | null {\n  if (completion.choices.length === 0) return null;\n  return completion.choices[0].finish_reason;\n}\n\n// ---------------------------------------------------------------------------\n// Public API\n// ---------------------------------------------------------------------------\n\n/**\n * Create interaction evidence from an OpenAI-compatible chat completion.\n *\n * Hash-first model (DD-138): no raw prompt or completion text is stored.\n * Only SHA-256 digests, model ID, token counts, and timing are recorded.\n *\n * @param params - Messages, completion response, and optional provider\n * @returns InteractionEvidenceV01-compatible object\n */\nexport async function fromChatCompletion(\n  params: InferenceReceiptParams\n): Promise<InferenceEvidence> {\n  const { messages, completion, provider } = params;\n\n  // Hash inputs and outputs\n  const outputContent = concatOutputContent(completion);\n  const [inputHash, outputHash] = await Promise.all([\n    hashMessages(messages),\n    hashOutput(outputContent),\n  ]);\n\n  // Extract the hex value (strip `sha256:` prefix for digest.value)\n  const inputValue = inputHash.slice('sha256:'.length);\n  const outputValue = outputHash.slice('sha256:'.length);\n\n  // Build platform identifier\n  const platform = provider ? `openai-compatible:${provider}` : 'openai-compatible';\n\n  // Build inference extension metadata\n  const inferenceExt: Record<string, unknown> = {\n    model: completion.model,\n    finish_reason: primaryFinishReason(completion),\n  };\n  if (completion.usage) {\n    inferenceExt.usage = {\n      prompt_tokens: completion.usage.prompt_tokens,\n      completion_tokens: completion.usage.completion_tokens,\n      total_tokens: completion.usage.total_tokens,\n    };\n  }\n\n  // Determine result status from finish_reason\n  const finishReason = primaryFinishReason(completion);\n  const resultStatus: 'ok' | 'error' =\n    finishReason === 'error' || completion.choices.length === 0 ? 'error' : 'ok';\n\n  const evidence: InferenceEvidence = {\n    interaction_id: completion.id,\n    kind: INFERENCE_KIND,\n    executor: {\n      platform,\n      version: completion.model,\n    },\n    started_at: new Date(completion.created * 1000).toISOString(),\n    input: {\n      digest: {\n        alg: 'sha-256',\n        value: inputValue,\n        bytes: messagesBytes(messages),\n      },\n      redaction: 'hash_only',\n    },\n    output: {\n      digest: {\n        alg: 'sha-256',\n        value: outputValue,\n        bytes: outputBytes(outputContent),\n      },\n      redaction: 'hash_only',\n    },\n    result: {\n      status: resultStatus,\n    },\n    extensions: {\n      [INFERENCE_EXTENSION_KEY]: inferenceExt,\n    },\n  };\n\n  return evidence;\n}\n"]}

package/dist/types.d.ts

@@ -0,0 +1,48 @@
+/**
+ * OpenAI-compatible Chat Completion Types (DD-138)
+ *
+ * Self-contained minimal types matching the OpenAI chat completion API shape.
+ * Works with any OpenAI-compatible provider (OpenAI, Anthropic via adapter,
+ * Ollama, vLLM, Together, etc.) without importing their SDKs.
+ */
+/** Chat message role */
+export type ChatRole = 'system' | 'user' | 'assistant' | 'tool' | 'function';
+/** Chat message */
+export interface ChatMessage {
+    role: ChatRole;
+    content: string | null;
+    name?: string;
+    tool_calls?: unknown[];
+    tool_call_id?: string;
+}
+/** Token usage statistics */
+export interface ChatUsage {
+    prompt_tokens: number;
+    completion_tokens: number;
+    total_tokens: number;
+}
+/** Completion choice */
+export interface ChatChoice {
+    index: number;
+    message: ChatMessage;
+    finish_reason: string | null;
+}
+/** Chat completion response */
+export interface ChatCompletion {
+    id: string;
+    object: string;
+    created: number;
+    model: string;
+    choices: ChatChoice[];
+    usage?: ChatUsage;
+}
+/** Parameters for creating interaction evidence from a chat completion */
+export interface InferenceReceiptParams {
+    /** The chat messages sent as input */
+    messages: ChatMessage[];
+    /** The completion response */
+    completion: ChatCompletion;
+    /** Optional provider identifier (e.g., 'openai', 'anthropic', 'ollama') */
+    provider?: string;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAMH,wBAAwB;AACxB,MAAM,MAAM,QAAQ,GAAG,QAAQ,GAAG,MAAM,GAAG,WAAW,GAAG,MAAM,GAAG,UAAU,CAAC;AAE7E,mBAAmB;AACnB,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,QAAQ,CAAC;IACf,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAMD,6BAA6B;AAC7B,MAAM,WAAW,SAAS;IACxB,aAAa,EAAE,MAAM,CAAC;IACtB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,wBAAwB;AACxB,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,WAAW,CAAC;IACrB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED,+BAA+B;AAC/B,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,UAAU,EAAE,CAAC;IACtB,KAAK,CAAC,EAAE,SAAS,CAAC;CACnB;AAMD,0EAA0E;AAC1E,MAAM,WAAW,sBAAsB;IACrC,sCAAsC;IACtC,QAAQ,EAAE,WAAW,EAAE,CAAC;IACxB,8BAA8B;IAC9B,UAAU,EAAE,cAAc,CAAC;IAC3B,2EAA2E;IAC3E,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB"}

package/package.json

@@ -0,0 +1,53 @@
+{
+  "name": "@peac/adapter-openai-compatible",
+  "version": "0.11.2",
+  "description": "OpenAI-compatible chat completion adapter for PEAC interaction evidence (hash-first)",
+  "main": "dist/index.cjs",
+  "types": "dist/index.d.ts",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/peacprotocol/peac.git",
+    "directory": "packages/adapters/openai-compatible"
+  },
+  "author": "jithinraj <7850727+jithinraj@users.noreply.github.com>",
+  "license": "Apache-2.0",
+  "bugs": {
+    "url": "https://github.com/peacprotocol/peac/issues"
+  },
+  "homepage": "https://github.com/peacprotocol/peac#readme",
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "dependencies": {
+    "@peac/kernel": "0.11.2",
+    "@peac/schema": "0.11.2"
+  },
+  "devDependencies": {
+    "@types/node": "^22.19.11",
+    "typescript": "^5.3.3",
+    "vitest": "^4.0.0",
+    "tsup": "^8.0.0"
+  },
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.mjs",
+      "require": "./dist/index.cjs",
+      "default": "./dist/index.mjs"
+    },
+    "./package.json": "./package.json"
+  },
+  "scripts": {
+    "prebuild": "rm -rf dist",
+    "build": "pnpm run build:js && pnpm run build:types",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "clean": "rm -rf dist",
+    "build:js": "tsup",
+    "build:types": "rm -f dist/.tsbuildinfo && tsc && rm -f dist/.tsbuildinfo"
+  }
+}