@sponsio/sdk 0.2.0-alpha.4 → 0.2.0-alpha.9

package/dist/cloud/evidence.d.ts

@@ -0,0 +1,108 @@
+/**
+ * The evidence lane, from TypeScript.
+ *
+ * Rules check what an agent *does*; evidence checks what it *says*. A
+ * model that reports "the three line items total $100" is making a claim
+ * that is either true of the numbers it was given or is not, and no
+ * amount of prompting settles it. This sends the claim to
+ * `/v1/evidence/verify`, which resolves it against the declared inputs
+ * and answers PASS, MISMATCH, or a verdict meaning it could not tell.
+ *
+ * Parity with `sponsio/cloud/evidence.py`: same endpoint, same wire
+ * shape, same verdict vocabulary. One service, one meter — the server
+ * records usage per tenant and cannot see which SDK called it.
+ *
+ * The judgement is entirely server-side. This file normalises inputs,
+ * makes one request, and classifies the answer.
+ *
+ * @module @sponsio/sdk/cloud/evidence
+ */
+/** A verdict the server can return. Anything else is treated as unknown. */
+export type EvidenceVerdict = "PASS" | "MISMATCH" | "NO_EVIDENCE" | "SOURCE_UNAVAILABLE" | "UNDERDETERMINED";
+/** What the server says to do about a verdict. */
+export type EvidenceAction = "release" | "block" | "clarify";
+/**
+ * One input, tagged with where its value came from.
+ *
+ * The tag is not decoration. Each predicate declares which sources it
+ * will accept, and the server refuses a value that arrived from anywhere
+ * else: a total the model made up must not be checked against itself.
+ * `GET /v1/evidence/predicates` lists the allowlist per predicate.
+ */
+export interface TaggedInput {
+    value: unknown;
+    source: string;
+}
+/** Ergonomic forms accepted per input: a tagged object or a `[value, source]` pair. */
+export type InputSpec = TaggedInput | [unknown, string];
+export interface EvidenceResult {
+    predicate: string;
+    verdict: EvidenceVerdict | string;
+    action: EvidenceAction | string;
+    /** The resolved values the verdict was reached from. */
+    values: unknown[];
+    evidenceTs?: number;
+    source?: string;
+    tableVersion?: string;
+    /** The right value, when the server knows it. Never invented. */
+    correction?: unknown;
+    /** What to ask about, on a clarify action. */
+    clarifyOn: unknown[];
+    /** Server-side record of this check, for an audit trail. */
+    attestationId?: string;
+}
+/** The check did not reach a verdict. The caller decides open or closed. */
+export declare class EvidenceError extends Error {
+    readonly status?: number;
+    constructor(message: string, status?: number);
+}
+/** True when this verdict must stop the response. */
+export declare function isBlocking(result: EvidenceResult): boolean;
+/** True when this verdict asks the agent to clarify rather than stop. */
+export declare function needsClarification(result: EvidenceResult): boolean;
+/**
+ * Ergonomic input forms to the wire's tagged shape.
+ *
+ * An untagged input is rejected here rather than sent. The server would
+ * refuse it anyway under the taint rule, and failing locally names the
+ * input that is missing its tag.
+ *
+ * The pair form needs a string source. Without that check a two-element
+ * array of data read as a pair: `{ items: [40, 60] }` became
+ * `value: 40, source: "60"`, and the server then refused source `"60"`
+ * as untrusted, an error naming nothing the caller had written. A list
+ * value takes the explicit form, `[[40, 60], "submitted_output"]`.
+ */
+export declare function normalizeInputs(inputs?: Record<string, InputSpec>): Record<string, TaggedInput>;
+export interface EvidenceClientOptions {
+    /** Defaults to `SPONSIO_API_KEY`. */
+    apiKey?: string;
+    /** Defaults to `SPONSIO_API_URL`, then `https://app.sponsio.dev`. */
+    url?: string;
+    /** Per-request timeout in milliseconds. */
+    timeoutMs?: number;
+}
+export declare class EvidenceClient {
+    readonly url: string;
+    private readonly apiKey;
+    private readonly timeoutMs;
+    constructor(opts?: EvidenceClientOptions);
+    get configured(): boolean;
+    private post;
+    /**
+     * Verify one claim against fresh evidence, server-side.
+     *
+     * Throws `EvidenceError` when the check did not run to a verdict.
+     * Decide open or closed at the call site; closed means treating the
+     * throw as a block.
+     */
+    verify(predicate: string, opts?: {
+        value?: unknown;
+        text?: string;
+        inputs?: Record<string, InputSpec>;
+        sessionId?: string;
+    }): Promise<EvidenceResult>;
+    /** The predicate catalog this key can reach. */
+    predicates(): Promise<Record<string, unknown>[]>;
+}
+//# sourceMappingURL=evidence.d.ts.map

package/dist/cloud/evidence.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence.d.ts","sourceRoot":"","sources":["../../src/cloud/evidence.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,4EAA4E;AAC5E,MAAM,MAAM,eAAe,GACvB,MAAM,GACN,UAAU,GACV,aAAa,GACb,oBAAoB,GACpB,iBAAiB,CAAC;AAEtB,kDAAkD;AAClD,MAAM,MAAM,cAAc,GAAG,SAAS,GAAG,OAAO,GAAG,SAAS,CAAC;AAE7D;;;;;;;GAOG;AACH,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,uFAAuF;AACvF,MAAM,MAAM,SAAS,GAAG,WAAW,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;AAExD,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,eAAe,GAAG,MAAM,CAAC;IAClC,MAAM,EAAE,cAAc,GAAG,MAAM,CAAC;IAChC,wDAAwD;IACxD,MAAM,EAAE,OAAO,EAAE,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,iEAAiE;IACjE,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,8CAA8C;IAC9C,SAAS,EAAE,OAAO,EAAE,CAAC;IACrB,4DAA4D;IAC5D,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,4EAA4E;AAC5E,qBAAa,aAAc,SAAQ,KAAK;IACtC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;gBACb,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM;CAK7C;AAED,qDAAqD;AACrD,wBAAgB,UAAU,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAE1D;AAED,yEAAyE;AACzE,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAElE;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,eAAe,CAC7B,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GACjC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAkB7B;AA0BD,MAAM,WAAW,qBAAqB;IACpC,qCAAqC;IACrC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,qEAAqE;IACrE,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,2CAA2C;IAC3C,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,qBAAa,cAAc;IACzB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAqB;IAC5C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;gBAEvB,IAAI,GAAE,qBAA0B;IAa5C,IAAI,UAAU,IAAI,OAAO,CAExB;YAEa,IAAI;IAmDlB;;;;;;OAMG;IACG,MAAM,CACV,SAAS,EAAE,MAAM,EACjB,IAAI,GAAE;QACJ,KAAK,CAAC,EAAE,OAAO,CAAC;QAChB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QACnC,SAAS,CAAC,EAAE,MAAM,CAAC;KACf,GACL,OAAO,CAAC,cAAc,CAAC;IAU1B,gDAAgD;IAC1C,UAAU,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;CAoBvD"}

package/dist/cloud/evidence.js

@@ -0,0 +1,184 @@
+/**
+ * The evidence lane, from TypeScript.
+ *
+ * Rules check what an agent *does*; evidence checks what it *says*. A
+ * model that reports "the three line items total $100" is making a claim
+ * that is either true of the numbers it was given or is not, and no
+ * amount of prompting settles it. This sends the claim to
+ * `/v1/evidence/verify`, which resolves it against the declared inputs
+ * and answers PASS, MISMATCH, or a verdict meaning it could not tell.
+ *
+ * Parity with `sponsio/cloud/evidence.py`: same endpoint, same wire
+ * shape, same verdict vocabulary. One service, one meter — the server
+ * records usage per tenant and cannot see which SDK called it.
+ *
+ * The judgement is entirely server-side. This file normalises inputs,
+ * makes one request, and classifies the answer.
+ *
+ * @module @sponsio/sdk/cloud/evidence
+ */
+/** The check did not reach a verdict. The caller decides open or closed. */
+export class EvidenceError extends Error {
+    status;
+    constructor(message, status) {
+        super(message);
+        this.name = "EvidenceError";
+        this.status = status;
+    }
+}
+/** True when this verdict must stop the response. */
+export function isBlocking(result) {
+    return result.action === "block";
+}
+/** True when this verdict asks the agent to clarify rather than stop. */
+export function needsClarification(result) {
+    return result.action === "clarify";
+}
+/**
+ * Ergonomic input forms to the wire's tagged shape.
+ *
+ * An untagged input is rejected here rather than sent. The server would
+ * refuse it anyway under the taint rule, and failing locally names the
+ * input that is missing its tag.
+ *
+ * The pair form needs a string source. Without that check a two-element
+ * array of data read as a pair: `{ items: [40, 60] }` became
+ * `value: 40, source: "60"`, and the server then refused source `"60"`
+ * as untrusted, an error naming nothing the caller had written. A list
+ * value takes the explicit form, `[[40, 60], "submitted_output"]`.
+ */
+export function normalizeInputs(inputs) {
+    const wire = {};
+    for (const [name, spec] of Object.entries(inputs ?? {})) {
+        if (Array.isArray(spec) && spec.length === 2 && typeof spec[1] === "string") {
+            wire[name] = { value: spec[0], source: spec[1] };
+        }
+        else if (spec && typeof spec === "object" && "source" in spec) {
+            wire[name] = {
+                value: spec.value,
+                source: String(spec.source),
+            };
+        }
+        else {
+            throw new Error(`input '${name}' needs a source tag: pass [value, source] or ` +
+                `{ value, source } — the server rejects untagged inputs (taint rule)`);
+        }
+    }
+    return wire;
+}
+function parseResult(payload) {
+    const evidence = (payload.evidence ?? {});
+    const rawValues = evidence.values;
+    const clarify = payload.clarify_on;
+    return {
+        predicate: String(payload.predicate ?? ""),
+        verdict: String(payload.verdict ?? ""),
+        action: String(payload.action ?? ""),
+        values: Array.isArray(rawValues) ? rawValues : [],
+        ...(typeof evidence.ts === "number" ? { evidenceTs: evidence.ts } : {}),
+        ...(typeof evidence.source === "string" ? { source: evidence.source } : {}),
+        ...(typeof evidence.table_version === "string"
+            ? { tableVersion: evidence.table_version }
+            : {}),
+        ...(payload.correction !== null && payload.correction !== undefined
+            ? { correction: payload.correction }
+            : {}),
+        clarifyOn: Array.isArray(clarify) ? clarify : [],
+        ...(typeof payload.attestation_id === "string"
+            ? { attestationId: payload.attestation_id }
+            : {}),
+    };
+}
+export class EvidenceClient {
+    url;
+    apiKey;
+    timeoutMs;
+    constructor(opts = {}) {
+        this.apiKey = opts.apiKey ?? process.env.SPONSIO_API_KEY ?? undefined;
+        // Trailing slashes stripped without a regex. `/\/+$/` backtracks
+        // polynomially on a string of many slashes, and the URL comes from
+        // an env var, so it is not ours to trust about its own shape.
+        let base = opts.url ?? process.env.SPONSIO_API_URL ?? "https://app.sponsio.dev";
+        let end = base.length;
+        while (end > 0 && base.charCodeAt(end - 1) === 47)
+            end -= 1;
+        this.url = base.slice(0, end);
+        this.timeoutMs = opts.timeoutMs ?? 10_000;
+    }
+    get configured() {
+        return Boolean(this.apiKey);
+    }
+    async post(path, body) {
+        if (!this.apiKey) {
+            throw new EvidenceError("no API key: set SPONSIO_API_KEY or pass apiKey to EvidenceClient");
+        }
+        const controller = new AbortController();
+        const timer = setTimeout(() => controller.abort(), this.timeoutMs);
+        let response;
+        try {
+            response = await fetch(`${this.url}${path}`, {
+                method: "POST",
+                headers: {
+                    Authorization: `Bearer ${this.apiKey}`,
+                    "Content-Type": "application/json",
+                    "User-Agent": "sponsio-sdk-ts",
+                },
+                body: JSON.stringify(body),
+                signal: controller.signal,
+            });
+        }
+        catch (err) {
+            throw new EvidenceError(`cannot reach ${this.url}: ${err instanceof Error ? err.message : err}`);
+        }
+        finally {
+            clearTimeout(timer);
+        }
+        const text = await response.text();
+        let payload;
+        try {
+            payload = text ? JSON.parse(text) : {};
+        }
+        catch {
+            throw new EvidenceError(`${this.url} answered ${response.status} with non-JSON`, response.status);
+        }
+        if (!response.ok) {
+            const detail = payload?.detail;
+            throw new EvidenceError(typeof detail === "string" ? detail : `verify failed (${response.status})`, response.status);
+        }
+        return payload;
+    }
+    /**
+     * Verify one claim against fresh evidence, server-side.
+     *
+     * Throws `EvidenceError` when the check did not run to a verdict.
+     * Decide open or closed at the call site; closed means treating the
+     * throw as a block.
+     */
+    async verify(predicate, opts = {}) {
+        const body = {
+            predicate,
+            claim: { value: opts.value ?? null, text: opts.text ?? null },
+            inputs: normalizeInputs(opts.inputs),
+        };
+        if (opts.sessionId)
+            body.session_id = opts.sessionId;
+        return parseResult(await this.post("/v1/evidence/verify", body));
+    }
+    /** The predicate catalog this key can reach. */
+    async predicates() {
+        if (!this.apiKey) {
+            throw new EvidenceError("no API key: set SPONSIO_API_KEY or pass apiKey to EvidenceClient");
+        }
+        const response = await fetch(`${this.url}/v1/evidence/predicates`, {
+            headers: {
+                Authorization: `Bearer ${this.apiKey}`,
+                "User-Agent": "sponsio-sdk-ts",
+            },
+        });
+        if (!response.ok) {
+            throw new EvidenceError(`predicates failed (${response.status})`, response.status);
+        }
+        return (await response.json());
+    }
+}
+//# sourceMappingURL=evidence.js.map

package/dist/cloud/evidence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence.js","sourceRoot":"","sources":["../../src/cloud/evidence.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AA8CH,4EAA4E;AAC5E,MAAM,OAAO,aAAc,SAAQ,KAAK;IAC7B,MAAM,CAAU;IACzB,YAAY,OAAe,EAAE,MAAe;QAC1C,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;QAC5B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;CACF;AAED,qDAAqD;AACrD,MAAM,UAAU,UAAU,CAAC,MAAsB;IAC/C,OAAO,MAAM,CAAC,MAAM,KAAK,OAAO,CAAC;AACnC,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,kBAAkB,CAAC,MAAsB;IACvD,OAAO,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC;AACrC,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,eAAe,CAC7B,MAAkC;IAElC,MAAM,IAAI,GAAgC,EAAE,CAAC;IAC7C,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,CAAC;QACxD,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC5E,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QACnD,CAAC;aAAM,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,QAAQ,IAAI,IAAI,EAAE,CAAC;YAChE,IAAI,CAAC,IAAI,CAAC,GAAG;gBACX,KAAK,EAAG,IAAoB,CAAC,KAAK;gBAClC,MAAM,EAAE,MAAM,CAAE,IAAoB,CAAC,MAAM,CAAC;aAC7C,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,KAAK,CACb,UAAU,IAAI,gDAAgD;gBAC5D,qEAAqE,CACxE,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,WAAW,CAAC,OAAgC;IACnD,MAAM,QAAQ,GAAG,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAA4B,CAAC;IACrE,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC;IAClC,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC;IACnC,OAAO;QACL,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC;QAC1C,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC;QACtC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC;QACpC,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE;QACjD,GAAG,CAAC,OAAO,QAAQ,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvE,GAAG,CAAC,OAAO,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3E,GAAG,CAAC,OAAO,QAAQ,CAAC,aAAa,KAAK,QAAQ;YAC5C,CAAC,CAAC,EAAE,YAAY,EAAE,QAAQ,CAAC,aAAa,EAAE;YAC1C,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,OAAO,CAAC,UAAU,KAAK,IAAI,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS;YACjE,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE;YACpC,CAAC,CAAC,EAAE,CAAC;QACP,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE;QAChD,GAAG,CAAC,OAAO,OAAO,CAAC,cAAc,KAAK,QAAQ;YAC5C,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,cAAc,EAAE;YAC3C,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAWD,MAAM,OAAO,cAAc;IAChB,GAAG,CAAS;IACJ,MAAM,CAAqB;IAC3B,SAAS,CAAS;IAEnC,YAAY,OAA8B,EAAE;QAC1C,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,SAAS,CAAC;QACtE,iEAAiE;QACjE,mEAAmE;QACnE,8DAA8D;QAC9D,IAAI,IAAI,GACN,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,yBAAyB,CAAC;QACvE,IAAI,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC;QACtB,OAAO,GAAG,GAAG,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,EAAE;YAAE,GAAG,IAAI,CAAC,CAAC;QAC5D,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAC9B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC;IAC5C,CAAC;IAED,IAAI,UAAU;QACZ,OAAO,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC;IAEO,KAAK,CAAC,IAAI,CAChB,IAAY,EACZ,IAAa;QAEb,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,MAAM,IAAI,aAAa,CACrB,kEAAkE,CACnE,CAAC;QACJ,CAAC;QACD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QACnE,IAAI,QAAkB,CAAC;QACvB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,GAAG,GAAG,IAAI,EAAE,EAAE;gBAC3C,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,aAAa,EAAE,UAAU,IAAI,CAAC,MAAM,EAAE;oBACtC,cAAc,EAAE,kBAAkB;oBAClC,YAAY,EAAE,gBAAgB;iBAC/B;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;gBAC1B,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,aAAa,CACrB,gBAAgB,IAAI,CAAC,GAAG,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,CACxE,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnC,IAAI,OAAgB,CAAC;QACrB,IAAI,CAAC;YACH,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACzC,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,aAAa,CACrB,GAAG,IAAI,CAAC,GAAG,aAAa,QAAQ,CAAC,MAAM,gBAAgB,EACvD,QAAQ,CAAC,MAAM,CAChB,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,MAAM,GAAI,OAAmC,EAAE,MAAM,CAAC;YAC5D,MAAM,IAAI,aAAa,CACrB,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,kBAAkB,QAAQ,CAAC,MAAM,GAAG,EAC1E,QAAQ,CAAC,MAAM,CAChB,CAAC;QACJ,CAAC;QACD,OAAO,OAAkC,CAAC;IAC5C,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,MAAM,CACV,SAAiB,EACjB,OAKI,EAAE;QAEN,MAAM,IAAI,GAA4B;YACpC,SAAS;YACT,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,IAAI,EAAE;YAC7D,MAAM,EAAE,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC;SACrC,CAAC;QACF,IAAI,IAAI,CAAC,SAAS;YAAE,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC;QACrD,OAAO,WAAW,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,qBAAqB,EAAE,IAAI,CAAC,CAAC,CAAC;IACnE,CAAC;IAED,gDAAgD;IAChD,KAAK,CAAC,UAAU;QACd,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,MAAM,IAAI,aAAa,CACrB,kEAAkE,CACnE,CAAC;QACJ,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,GAAG,yBAAyB,EAAE;YACjE,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,IAAI,CAAC,MAAM,EAAE;gBACtC,YAAY,EAAE,gBAAgB;aAC/B;SACF,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,aAAa,CACrB,sBAAsB,QAAQ,CAAC,MAAM,GAAG,EACxC,QAAQ,CAAC,MAAM,CAChB,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA8B,CAAC;IAC9D,CAAC;CACF"}

package/dist/cloud/privacy.d.ts

@@ -0,0 +1,67 @@
+/**
+ * What may leave this machine.
+ *
+ * Port of ``sponsio/bridge/privacy.py``. Enforcement already happened
+ * here — the det checks are pure and local — so nothing in this file can
+ * change a verdict. It only narrows what the console is shown, which is
+ * what makes it cheap: the run's shape is all the cloud needs to render
+ * a dashboard, count a finding, or meter usage.
+ */
+export declare const LEVELS: readonly ["full", "shape", "hashed", "metadata", "tool_calls"];
+export type PrivacyLevel = (typeof LEVELS)[number];
+/**
+ * The level in force. The environment beats the argument, deliberately:
+ * the person who decides what may leave a machine is the operator of
+ * that machine, not the author of the agent running on it.
+ */
+export declare function resolve(explicit?: string): PrivacyLevel;
+/**
+ * The structure of an argument set, with every value replaced.
+ *
+ * Lengths survive for strings and lists because "the model passed a
+ * 40 000-character path" is a debugging fact and not content, and it is
+ * the one an oversize-argument rule fires on.
+ */
+export declare function shape(args: unknown): string;
+/**
+ * ``json.dumps`` as Python writes it, which is what the other runtime
+ * hashes and displays.
+ *
+ * ``JSON.stringify`` omits the spaces Python puts after ``,`` and
+ * ``:``. That is invisible in a console and decisive in a digest: the
+ * same arguments hashed to different values on the two sides, so
+ * duplicate and loop detection disagreed about whether two calls were
+ * the same call. ``sortKeys`` additionally makes two calls that differ
+ * only in key order agree, which is what the digest is for.
+ */
+export declare function pyJson(value: unknown, sortKeys?: boolean): string;
+/**
+ * A stable short hash of an argument set. An equality token, not a
+ * signature, which is why twelve hex characters is enough: it is what
+ * lets duplicate and loop detection keep working with no content.
+ */
+export declare function digest(args: unknown): string;
+/** What ``argsPreview`` carries at this level. */
+export declare function preview(args: unknown, level: PrivacyLevel, fullPreview: string): string;
+/**
+ * What a model turn may quote of itself. A response is the most
+ * content-bearing field in the payload, so it goes one level earlier
+ * than arguments do.
+ */
+export declare function say(text: string, level: PrivacyLevel): string;
+/**
+ * Whether a step of this type is recorded at all.
+ *
+ * Only ``tool_calls`` drops whole steps. Every other level keeps the
+ * shape of the run and empties fields; this one keeps the action lane
+ * alone, because that is what the customer asked for by name.
+ */
+export declare function keepsStep(stepType: string, level: PrivacyLevel): boolean;
+/**
+ * A stamp for the run, so a reader knows what they are not seeing.
+ *
+ * A dashboard showing empty arguments has to be able to say whether the
+ * agent passed none or the deployment declined to send them.
+ */
+export declare function describe(level: PrivacyLevel): Record<string, unknown>;
+//# sourceMappingURL=privacy.d.ts.map

package/dist/cloud/privacy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"privacy.d.ts","sourceRoot":"","sources":["../../src/cloud/privacy.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,eAAO,MAAM,MAAM,gEAAiE,CAAC;AACrF,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC;AASnD;;;;GAIG;AACH,wBAAgB,OAAO,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,YAAY,CAWvD;AA0BD;;;;;;GAMG;AACH,wBAAgB,KAAK,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,CAS3C;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,UAAQ,GAAG,MAAM,CAmB/D;AAED;;;;GAIG;AACH,wBAAgB,MAAM,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,CAM5C;AAED,kDAAkD;AAClD,wBAAgB,OAAO,CACrB,IAAI,EAAE,OAAO,EACb,KAAK,EAAE,YAAY,EACnB,WAAW,EAAE,MAAM,GAClB,MAAM,CAKR;AAED;;;;GAIG;AACH,wBAAgB,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,GAAG,MAAM,CAE7D;AAED;;;;;;GAMG;AACH,wBAAgB,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAExE;AAED;;;;;GAKG;AACH,wBAAgB,QAAQ,CAAC,KAAK,EAAE,YAAY,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CASrE"}

package/dist/cloud/privacy.js

@@ -0,0 +1,170 @@
+/**
+ * What may leave this machine.
+ *
+ * Port of ``sponsio/bridge/privacy.py``. Enforcement already happened
+ * here — the det checks are pure and local — so nothing in this file can
+ * change a verdict. It only narrows what the console is shown, which is
+ * what makes it cheap: the run's shape is all the cloud needs to render
+ * a dashboard, count a finding, or meter usage.
+ */
+import { createHash } from "node:crypto";
+export const LEVELS = ["full", "shape", "hashed", "metadata", "tool_calls"];
+const DEFAULT = "full";
+const STRICTEST = "tool_calls";
+function isLevel(v) {
+    return LEVELS.includes(v);
+}
+/**
+ * The level in force. The environment beats the argument, deliberately:
+ * the person who decides what may leave a machine is the operator of
+ * that machine, not the author of the agent running on it.
+ */
+export function resolve(explicit) {
+    const env = (process.env.SPONSIO_PRIVACY ?? "").trim().toLowerCase();
+    if (isLevel(env))
+        return env;
+    if (env) {
+        // An unrecognised value is far more likely to be a typo in a
+        // deployment that meant to tighten than a request to loosen, so it
+        // fails closed, to the strictest level there is.
+        return STRICTEST;
+    }
+    if (explicit && isLevel(explicit))
+        return explicit;
+    return DEFAULT;
+}
+function typeOf(value) {
+    if (value === null || value === undefined)
+        return "<null>";
+    if (typeof value === "boolean")
+        return "<bool>";
+    if (typeof value === "number") {
+        // The one place the two runtimes cannot agree. JavaScript has a
+        // single number type, so a value Python reports as ``<float>``
+        // because it was written 250.0 arrives here indistinguishable from
+        // 250 and is reported ``<int>``. Reporting every number as a float
+        // to match would misdescribe every integer, which is worse: a shape
+        // is read to answer "what did the agent pass", and the answer for
+        // this runtime is that it passed a number JavaScript calls integral.
+        return Number.isInteger(value) ? "<int>" : "<float>";
+    }
+    if (typeof value === "string")
+        return `<str:${value.length}>`;
+    if (Array.isArray(value))
+        return `<list:${value.length}>`;
+    if (typeof value === "object") {
+        const parts = Object.entries(value).map(([k, v]) => `${k}: ${typeOf(v)}`);
+        return `{${parts.join(", ")}}`;
+    }
+    return `<${typeof value}>`;
+}
+/**
+ * The structure of an argument set, with every value replaced.
+ *
+ * Lengths survive for strings and lists because "the model passed a
+ * 40 000-character path" is a debugging fact and not content, and it is
+ * the one an oversize-argument rule fires on.
+ */
+export function shape(args) {
+    if (args === null || args === undefined)
+        return "";
+    if (typeof args === "object" && !Array.isArray(args)) {
+        const parts = Object.entries(args).map(([k, v]) => `"${k}": ${typeOf(v)}`);
+        return `{${parts.join(", ")}}`;
+    }
+    return typeOf(args);
+}
+/**
+ * ``json.dumps`` as Python writes it, which is what the other runtime
+ * hashes and displays.
+ *
+ * ``JSON.stringify`` omits the spaces Python puts after ``,`` and
+ * ``:``. That is invisible in a console and decisive in a digest: the
+ * same arguments hashed to different values on the two sides, so
+ * duplicate and loop detection disagreed about whether two calls were
+ * the same call. ``sortKeys`` additionally makes two calls that differ
+ * only in key order agree, which is what the digest is for.
+ */
+export function pyJson(value, sortKeys = false) {
+    const seen = new WeakSet();
+    const walk = (v) => {
+        if (v === null || v === undefined)
+            return "null";
+        if (typeof v === "string")
+            return JSON.stringify(v);
+        if (typeof v === "number" || typeof v === "boolean")
+            return JSON.stringify(v);
+        if (typeof v !== "object")
+            return JSON.stringify(String(v));
+        if (seen.has(v))
+            return JSON.stringify("[circular]");
+        seen.add(v);
+        if (Array.isArray(v))
+            return "[" + v.map(walk).join(", ") + "]";
+        const o = v;
+        const keys = sortKeys ? Object.keys(o).sort() : Object.keys(o);
+        return "{" + keys.map((k) => `${JSON.stringify(k)}: ${walk(o[k])}`).join(", ") + "}";
+    };
+    try {
+        return walk(value);
+    }
+    catch {
+        return String(value);
+    }
+}
+/**
+ * A stable short hash of an argument set. An equality token, not a
+ * signature, which is why twelve hex characters is enough: it is what
+ * lets duplicate and loop detection keep working with no content.
+ */
+export function digest(args) {
+    if (args === null || args === undefined)
+        return "";
+    return ("sha256:" +
+        createHash("sha256").update(pyJson(args, true)).digest("hex").slice(0, 12));
+}
+/** What ``argsPreview`` carries at this level. */
+export function preview(args, level, fullPreview) {
+    if (level === "full")
+        return fullPreview;
+    if (level === "shape")
+        return shape(args);
+    if (level === "hashed")
+        return digest(args);
+    return "";
+}
+/**
+ * What a model turn may quote of itself. A response is the most
+ * content-bearing field in the payload, so it goes one level earlier
+ * than arguments do.
+ */
+export function say(text, level) {
+    return level === "metadata" || level === "tool_calls" ? "" : text;
+}
+/**
+ * Whether a step of this type is recorded at all.
+ *
+ * Only ``tool_calls`` drops whole steps. Every other level keeps the
+ * shape of the run and empties fields; this one keeps the action lane
+ * alone, because that is what the customer asked for by name.
+ */
+export function keepsStep(stepType, level) {
+    return level === "tool_calls" ? stepType === "tool_call" : true;
+}
+/**
+ * A stamp for the run, so a reader knows what they are not seeing.
+ *
+ * A dashboard showing empty arguments has to be able to say whether the
+ * agent passed none or the deployment declined to send them.
+ */
+export function describe(level) {
+    return {
+        level,
+        sendsArguments: level === "full",
+        sendsArgumentShapes: level === "full" || level === "shape",
+        sendsOutputText: level === "full" || level === "shape" || level === "hashed",
+        sendsClaimValues: level === "full" || level === "shape" || level === "hashed",
+        sendsOutputLane: level !== "tool_calls",
+    };
+}
+//# sourceMappingURL=privacy.js.map

package/dist/cloud/privacy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"privacy.js","sourceRoot":"","sources":["../../src/cloud/privacy.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,YAAY,CAAU,CAAC;AAGrF,MAAM,OAAO,GAAiB,MAAM,CAAC;AACrC,MAAM,SAAS,GAAiB,YAAY,CAAC;AAE7C,SAAS,OAAO,CAAC,CAAS;IACxB,OAAQ,MAA4B,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AACnD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,OAAO,CAAC,QAAiB;IACvC,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrE,IAAI,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC;IAC7B,IAAI,GAAG,EAAE,CAAC;QACR,6DAA6D;QAC7D,mEAAmE;QACnE,iDAAiD;QACjD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC;QAAE,OAAO,QAAQ,CAAC;IACnD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,MAAM,CAAC,KAAc;IAC5B,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IAC3D,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IAChD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,gEAAgE;QAChE,+DAA+D;QAC/D,mEAAmE;QACnE,mEAAmE;QACnE,oEAAoE;QACpE,kEAAkE;QAClE,qEAAqE;QACrE,OAAO,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IACvD,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,QAAQ,KAAK,CAAC,MAAM,GAAG,CAAC;IAC9D,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,KAAK,CAAC,MAAM,GAAG,CAAC;IAC1D,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,CAAC,GAAG,CAChE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,CACjC,CAAC;QACF,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;IACjC,CAAC;IACD,OAAO,IAAI,OAAO,KAAK,GAAG,CAAC;AAC7B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,KAAK,CAAC,IAAa;IACjC,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACnD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACrD,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,IAA+B,CAAC,CAAC,GAAG,CAC/D,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,MAAM,CAAC,CAAC,CAAC,EAAE,CACnC,CAAC;QACF,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;IACjC,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC;AACtB,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,MAAM,CAAC,KAAc,EAAE,QAAQ,GAAG,KAAK;IACrD,MAAM,IAAI,GAAG,IAAI,OAAO,EAAU,CAAC;IACnC,MAAM,IAAI,GAAG,CAAC,CAAU,EAAU,EAAE;QAClC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,SAAS;YAAE,OAAO,MAAM,CAAC;QACjD,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QACpD,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAC9E,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5D,IAAI,IAAI,CAAC,GAAG,CAAC,CAAW,CAAC;YAAE,OAAO,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QAC/D,IAAI,CAAC,GAAG,CAAC,CAAW,CAAC,CAAC;QACtB,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;YAAE,OAAO,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC;QAChE,MAAM,CAAC,GAAG,CAA4B,CAAC;QACvC,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC/D,OAAO,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC;IACvF,CAAC,CAAC;IACF,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,MAAM,CAAC,IAAa;IAClC,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACnD,OAAO,CACL,SAAS;QACT,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAC3E,CAAC;AACJ,CAAC;AAED,kDAAkD;AAClD,MAAM,UAAU,OAAO,CACrB,IAAa,EACb,KAAmB,EACnB,WAAmB;IAEnB,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO,WAAW,CAAC;IACzC,IAAI,KAAK,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1C,IAAI,KAAK,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC;IAC5C,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,GAAG,CAAC,IAAY,EAAE,KAAmB;IACnD,OAAO,KAAK,KAAK,UAAU,IAAI,KAAK,KAAK,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACpE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,SAAS,CAAC,QAAgB,EAAE,KAAmB;IAC7D,OAAO,KAAK,KAAK,YAAY,CAAC,CAAC,CAAC,QAAQ,KAAK,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC;AAClE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,QAAQ,CAAC,KAAmB;IAC1C,OAAO;QACL,KAAK;QACL,cAAc,EAAE,KAAK,KAAK,MAAM;QAChC,mBAAmB,EAAE,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,OAAO;QAC1D,eAAe,EAAE,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,OAAO,IAAI,KAAK,KAAK,QAAQ;QAC5E,gBAAgB,EAAE,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,OAAO,IAAI,KAAK,KAAK,QAAQ;QAC7E,eAAe,EAAE,KAAK,KAAK,YAAY;KACxC,CAAC;AACJ,CAAC"}

package/dist/cloud/view-model.d.ts

@@ -0,0 +1,49 @@
+/**
+ * One finished run, in the shape the cloud stores.
+ *
+ * Port of the projection in ``sponsio/bridge/session.py``. Field names
+ * are Python's, not new ones: the server, the console and the findings
+ * pipeline all read this object, and a TypeScript run that spelled
+ * ``argsPreview`` differently would upload successfully and then appear
+ * as a run with no arguments and no rules.
+ */
+import type { DetFormula } from "../core/patterns.js";
+import type { AgentTurnSpan } from "../core/spans.js";
+import type { DetViolation } from "../index.js";
+import * as privacy from "./privacy.js";
+/** Parity with ``bridge.spans.slug``. */
+export declare function slug(text: string): string;
+/**
+ * One line, truncated. Truncation happens before the value leaves the
+ * machine, so an argument that should never have been sent cannot be
+ * reconstructed from what was.
+ */
+export declare function argsPreview(args: unknown, limit?: number): string;
+/** A run id with enough entropy that two runs cannot silently become one. */
+export declare function newSessionId(): string;
+export interface RunSpan {
+    span: AgentTurnSpan;
+    /** The violations the check produced, in the order it produced them. */
+    violations: DetViolation[];
+    /** What kind of step this was; only ``tool_call`` survives `tool_calls`. */
+    type?: string;
+}
+export interface ViewModelInput {
+    agentId: string;
+    mode: string;
+    sessionId: string;
+    startedAt: number;
+    contracts: DetFormula[];
+    spans: RunSpan[];
+    privacyLevel: privacy.PrivacyLevel;
+    /** Which book this run enforced, when it came from the cloud. */
+    rulebookStamp?: string;
+}
+/**
+ * Build the run object.
+ *
+ * The privacy level is applied here rather than at the transport, so
+ * there is one place that decides what leaves and no path around it.
+ */
+export declare function buildViewModel(input: ViewModelInput): Record<string, unknown>;
+//# sourceMappingURL=view-model.d.ts.map

package/dist/cloud/view-model.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"view-model.d.ts","sourceRoot":"","sources":["../../src/cloud/view-model.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,KAAK,EAAE,aAAa,EAAY,MAAM,kBAAkB,CAAC;AAChE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,KAAK,OAAO,MAAM,cAAc,CAAC;AAKxC,yCAAyC;AACzC,wBAAgB,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEzC;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,SAAM,GAAG,MAAM,CAO9D;AA4BD,6EAA6E;AAC7E,wBAAgB,YAAY,IAAI,MAAM,CAErC;AAED,MAAM,WAAW,OAAO;IACtB,IAAI,EAAE,aAAa,CAAC;IACpB,wEAAwE;IACxE,UAAU,EAAE,YAAY,EAAE,CAAC;IAC3B,4EAA4E;IAC5E,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,UAAU,EAAE,CAAC;IACxB,KAAK,EAAE,OAAO,EAAE,CAAC;IACjB,YAAY,EAAE,OAAO,CAAC,YAAY,CAAC;IACnC,iEAAiE;IACjE,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAUD;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,cAAc,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAuG7E"}