@prampta/sdk 0.9.0 → 0.9.1

package/README.md

@@ -147,8 +147,11 @@ const decision = await pg.assertLicensed(subjectCode, {
 - asks fresh for **every subject in the output** and generates only if
   **all** of them return a licence-backed `allow`;
 - re-checks every allow **immediately before** your `generate` runs;
-- stores the output hash **before** sending receipts, and resends the
-  byte-identical receipt after a failure;
+- takes its own copy of the request before doing anything, so changing your
+  object afterwards cannot change the job;
+- stores the output hash and the **exact receipts** (signed, if you sign)
+  before sending them, and after a failure resends those receipts byte for
+  byte — receipt options passed on a later call do not replace them;
 - a receipt counts as filed only when the registry accepted exactly it:
   `unreported` lists receipts to resend (call again with the same id and
   request), `conflicts` lists decisions for which the registry holds a

package/dist/index.d.mts

@@ -398,8 +398,10 @@ interface GenerationJournalEntry {
     stage: "claimed" | "authorized" | "generated" | "reported" | "released";
     decisions: SignedDecision[];
     outputHash?: string;
-    /** Kept so a resent receipt is byte-identical to the first. */
     generatedAt?: number;
+    /** The exact receipt bodies (signed, if a key was given), stored before the
+     * first send and resent unchanged. No private key is stored. */
+    receipts?: Record<string, Record<string, unknown>>;
 }
 interface GenerationJournal {
     /** ATOMIC across every worker: store `entry` if no entry exists for its
@@ -666,6 +668,8 @@ declare class Prampta {
         /** 32-byte Ed25519 private key, hex; keep server-side. Never sent to PRAMPTA. */
         providerSigningKeyHex?: string;
     }): Promise<Record<string, unknown>>;
+    /** The exact receipt body submitReceipt() would send, signed if a key is given. */
+    buildReceipt(decision: SignedDecision, result?: NonNullable<Parameters<Prampta["submitReceipt"]>[1]>): Promise<Record<string, unknown>>;
     /**
      * Get (issuing if needed) the signed `pg.assertion.v1` for a decision this
      * provider/licensee pair already submitted a receipt for — embed it in

package/dist/index.d.ts

@@ -398,8 +398,10 @@ interface GenerationJournalEntry {
     stage: "claimed" | "authorized" | "generated" | "reported" | "released";
     decisions: SignedDecision[];
     outputHash?: string;
-    /** Kept so a resent receipt is byte-identical to the first. */
     generatedAt?: number;
+    /** The exact receipt bodies (signed, if a key was given), stored before the
+     * first send and resent unchanged. No private key is stored. */
+    receipts?: Record<string, Record<string, unknown>>;
 }
 interface GenerationJournal {
     /** ATOMIC across every worker: store `entry` if no entry exists for its
@@ -666,6 +668,8 @@ declare class Prampta {
         /** 32-byte Ed25519 private key, hex; keep server-side. Never sent to PRAMPTA. */
         providerSigningKeyHex?: string;
     }): Promise<Record<string, unknown>>;
+    /** The exact receipt body submitReceipt() would send, signed if a key is given. */
+    buildReceipt(decision: SignedDecision, result?: NonNullable<Parameters<Prampta["submitReceipt"]>[1]>): Promise<Record<string, unknown>>;
     /**
      * Get (issuing if needed) the signed `pg.assertion.v1` for a decision this
      * provider/licensee pair already submitted a receipt for — embed it in

package/dist/index.js

@@ -1143,6 +1143,7 @@ var Prampta = class _Prampta {
    * `generate` must throw only when nothing was produced.
    */
   async generateAuthorized(request, generate, options) {
+    request = structuredClone(request);
     const id = request.generationId;
     if (!id) throw new PramptaSchemaError("generateAuthorized requires a generationId");
     if (!options?.journal) throw new PramptaSchemaError("generateAuthorized requires a journal (singleProcessJournal() for one process)");
@@ -1203,12 +1204,18 @@ var Prampta = class _Prampta {
     }
     const bytes = typeof result.outputBytes === "string" ? new TextEncoder().encode(result.outputBytes) : result.outputBytes;
     const outputHash = result.outputHash ?? (bytes ? await sha256Bytes(bytes) : "");
-    const generated = { ...entry, stage: "generated", outputHash, generatedAt: Math.floor(Date.now() / 1e3) };
+    const generatedAt = Math.floor(Date.now() / 1e3);
+    const receipts = {};
+    for (const d of decisions) receipts[d.decisionId] = await this.buildReceipt(d, { ...receipt, outputHash, generatedAt });
+    const generated = { ...entry, stage: "generated", outputHash, generatedAt, receipts };
     await journal.put(generated);
     return this.report(journal, generated, "generated", result.output, receipt);
   }
   async report(journal, entry, status, output, receipt) {
-    const results = await Promise.allSettled(entry.decisions.map((d) => this.submitReceipt(d, { ...receipt, outputHash: entry.outputHash ?? "", generatedAt: entry.generatedAt })));
+    const results = await Promise.allSettled(entry.decisions.map(async (d) => this.post(
+      "/v1/receipts/",
+      entry.receipts?.[d.decisionId] ?? await this.buildReceipt(d, { ...receipt, outputHash: entry.outputHash ?? "", generatedAt: entry.generatedAt })
+    )));
     const unreported = [], conflicts = [];
     results.forEach((r, i) => {
       if (r.status === "fulfilled") return;
@@ -1275,6 +1282,10 @@ var Prampta = class _Prampta {
    * provider attestation, not proof of complete reporting or actual execution.
    */
   async submitReceipt(decision, result = {}) {
+    return this.post("/v1/receipts/", await this.buildReceipt(decision, result));
+  }
+  /** The exact receipt body submitReceipt() would send, signed if a key is given. */
+  async buildReceipt(decision, result = {}) {
     const payload = {
       decision_id: decision.decisionId,
       prompt_hash: decision.promptHash,
@@ -1317,7 +1328,7 @@ var Prampta = class _Prampta {
     } else if (result.eventType && result.eventType !== "output_accepted") {
       throw new PramptaError("A non-default eventType requires a provider signing key and pg.receipt.v3");
     }
-    return this.post("/v1/receipts/", payload);
+    return payload;
   }
   // ── C2PA bridge (PRE-GEN v1.1 addendum §11) ─────────────────────────────
   /**

package/dist/index.mjs

@@ -1086,6 +1086,7 @@ var Prampta = class _Prampta {
    * `generate` must throw only when nothing was produced.
    */
   async generateAuthorized(request, generate, options) {
+    request = structuredClone(request);
     const id = request.generationId;
     if (!id) throw new PramptaSchemaError("generateAuthorized requires a generationId");
     if (!options?.journal) throw new PramptaSchemaError("generateAuthorized requires a journal (singleProcessJournal() for one process)");
@@ -1146,12 +1147,18 @@ var Prampta = class _Prampta {
     }
     const bytes = typeof result.outputBytes === "string" ? new TextEncoder().encode(result.outputBytes) : result.outputBytes;
     const outputHash = result.outputHash ?? (bytes ? await sha256Bytes(bytes) : "");
-    const generated = { ...entry, stage: "generated", outputHash, generatedAt: Math.floor(Date.now() / 1e3) };
+    const generatedAt = Math.floor(Date.now() / 1e3);
+    const receipts = {};
+    for (const d of decisions) receipts[d.decisionId] = await this.buildReceipt(d, { ...receipt, outputHash, generatedAt });
+    const generated = { ...entry, stage: "generated", outputHash, generatedAt, receipts };
     await journal.put(generated);
     return this.report(journal, generated, "generated", result.output, receipt);
   }
   async report(journal, entry, status, output, receipt) {
-    const results = await Promise.allSettled(entry.decisions.map((d) => this.submitReceipt(d, { ...receipt, outputHash: entry.outputHash ?? "", generatedAt: entry.generatedAt })));
+    const results = await Promise.allSettled(entry.decisions.map(async (d) => this.post(
+      "/v1/receipts/",
+      entry.receipts?.[d.decisionId] ?? await this.buildReceipt(d, { ...receipt, outputHash: entry.outputHash ?? "", generatedAt: entry.generatedAt })
+    )));
     const unreported = [], conflicts = [];
     results.forEach((r, i) => {
       if (r.status === "fulfilled") return;
@@ -1218,6 +1225,10 @@ var Prampta = class _Prampta {
    * provider attestation, not proof of complete reporting or actual execution.
    */
   async submitReceipt(decision, result = {}) {
+    return this.post("/v1/receipts/", await this.buildReceipt(decision, result));
+  }
+  /** The exact receipt body submitReceipt() would send, signed if a key is given. */
+  async buildReceipt(decision, result = {}) {
     const payload = {
       decision_id: decision.decisionId,
       prompt_hash: decision.promptHash,
@@ -1260,7 +1271,7 @@ var Prampta = class _Prampta {
     } else if (result.eventType && result.eventType !== "output_accepted") {
       throw new PramptaError("A non-default eventType requires a provider signing key and pg.receipt.v3");
     }
-    return this.post("/v1/receipts/", payload);
+    return payload;
   }
   // ── C2PA bridge (PRE-GEN v1.1 addendum §11) ─────────────────────────────
   /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@prampta/sdk",
-  "version": "0.9.0",
+  "version": "0.9.1",
   "description": "PRAMPTA SDK — authorization before generation",
   "main": "dist/index.js",
   "module": "dist/index.mjs",