@tenova/swt3-ai 0.1.0

package/README.md

@@ -0,0 +1,246 @@
+Cryptographic AI Governance for the Edge. Zero Latency. Zero Data Retention.
+
+# @tenova/swt3-ai
+
+**SWT3 AI Witness SDK for TypeScript** — continuous, cryptographic attestation for AI systems. Prove your models are running approved weights, safety guardrails are active, and inferences are traceable. All without a single prompt or response ever leaving your infrastructure.
+
+Works with OpenAI, Anthropic, Vercel AI SDK, and any OpenAI-compatible endpoint (vLLM, Ollama, Azure, Llama.cpp).
+
+## Three Lines of Code
+
+### OpenAI
+
+```typescript
+import { Witness } from "@tenova/swt3-ai";
+import OpenAI from "openai";
+
+const witness = new Witness({
+  endpoint: "https://sovereign.tenova.io",
+  apiKey: "axm_live_...",
+  tenantId: "YOUR_ENCLAVE",
+});
+
+const client = witness.wrap(new OpenAI()) as OpenAI;
+
+// Non-streaming — works exactly as before
+const response = await client.chat.completions.create({
+  model: "gpt-4o",
+  messages: [{ role: "user", content: "Summarize this contract..." }],
+});
+console.log(response.choices[0].message.content);
+
+// Streaming — also works. Chunks arrive in real-time, witnessing happens after.
+const stream = await client.chat.completions.create({
+  model: "gpt-4o",
+  messages: [{ role: "user", content: "Explain quantum computing" }],
+  stream: true,
+});
+for await (const chunk of stream) {
+  process.stdout.write(chunk.choices[0]?.delta?.content ?? "");
+}
+```
+
+### Anthropic
+
+```typescript
+import { Witness } from "@tenova/swt3-ai";
+import Anthropic from "@anthropic-ai/sdk";
+
+const witness = new Witness({
+  endpoint: "https://sovereign.tenova.io",
+  apiKey: "axm_live_...",
+  tenantId: "YOUR_ENCLAVE",
+});
+
+const client = witness.wrap(new Anthropic()) as Anthropic;
+
+const message = await client.messages.create({
+  model: "claude-sonnet-4-20250514",
+  max_tokens: 1024,
+  messages: [{ role: "user", content: "Draft a compliance memo" }],
+});
+
+// Streaming with Anthropic
+const stream = await client.messages.create({
+  model: "claude-sonnet-4-20250514",
+  max_tokens: 1024,
+  messages: [{ role: "user", content: "Analyze this dataset" }],
+  stream: true,
+});
+for await (const event of stream) {
+  // events arrive in real-time, witnessing happens after stream ends
+}
+```
+
+### Vercel AI SDK (Next.js / React)
+
+```typescript
+import { Witness } from "@tenova/swt3-ai";
+import { streamText } from "ai";
+import { openai } from "@ai-sdk/openai";
+
+const witness = new Witness({
+  endpoint: "https://sovereign.tenova.io",
+  apiKey: "axm_live_...",
+  tenantId: "YOUR_ENCLAVE",
+});
+
+const prompt = "Summarize this contract for the board";
+
+const result = await streamText({
+  model: openai("gpt-4o"),
+  prompt,
+  onFinish: witness.vercelOnFinish({ promptText: prompt }),
+});
+
+// Works with any Vercel AI SDK provider — OpenAI, Anthropic, Google, Mistral, custom
+```
+
+The `onFinish` hook is framework-idiomatic: no wrapping, no proxying, no monkey-patching. It fires after the stream completes and receives a normalized result regardless of provider.
+
+## Sovereign Cloud Support
+
+The SDK works out-of-the-box with any OpenAI-compatible endpoint. Run Llama 3 on vLLM, Mistral on Ollama, or any model behind an OpenAI-compatible API — every inference is witnessed identically.
+
+```typescript
+// vLLM with Llama 3 — sovereign cloud, your hardware
+const client = witness.wrap(
+  new OpenAI({ baseURL: "http://gpu-cluster.internal:8000/v1" }),
+) as OpenAI;
+
+const response = await client.chat.completions.create({
+  model: "meta-llama/Meta-Llama-3-70B-Instruct",
+  messages: [{ role: "user", content: "Classify this threat indicator" }],
+});
+// Same SWT3 anchor, same ledger, same audit trail — regardless of where the model runs
+
+// Ollama (local development)
+const localClient = witness.wrap(
+  new OpenAI({ baseURL: "http://localhost:11434/v1" }),
+) as OpenAI;
+
+// Azure OpenAI (enterprise deployment)
+const azureClient = witness.wrap(
+  new OpenAI({
+    apiKey: process.env.AZURE_OPENAI_KEY,
+    baseURL: "https://your-resource.openai.azure.com/openai/deployments/gpt-4o",
+  }),
+) as OpenAI;
+```
+
+## What Happens Per Inference
+
+1. **Intercept** — ES6 Proxy wraps your AI client transparently
+2. **Hash** — Prompts and responses are SHA-256 hashed in-process
+3. **Extract** — Model hash, latency, token count, refusal status → numeric factors
+4. **Clear** — Raw text is purged from the wire payload (configurable clearing level)
+5. **Buffer** — Factors queued in background, flushed to the SWT3 ledger asynchronously
+6. **Return** — Your original response returns untouched, zero added latency
+
+For streaming: chunks arrive to the developer in real-time. The SDK accumulates content in the background and witnesses after the stream completes.
+
+## Clearing Levels
+
+| Level | Name | On the Wire | Use Case |
+|-------|------|------------|----------|
+| 0 | Analytics | Hashes + factors + model + provider + guardrails | Internal analytics |
+| 1 | Standard | Hashes + factors + model + provider | **Default.** Production apps |
+| 2 | Sensitive | Hashes + factors + model only | Healthcare, legal, PII |
+| 3 | Classified | Numeric factors only. Model ID hashed. | Defense, air-gapped |
+
+At Level 1+, raw prompts and responses **never leave your infrastructure**. The witness endpoint is a "Blind Registrar" — it stores cryptographic proofs, not data.
+
+```typescript
+// Healthcare deployment: Level 2
+const witness = new Witness({
+  endpoint: "https://sovereign.tenova.io",
+  apiKey: "axm_live_...",
+  tenantId: "HOSPITAL_ENCLAVE",
+  clearingLevel: 2,
+});
+```
+
+## What Gets Witnessed
+
+| Procedure | What It Proves | Regulatory Mapping |
+|-----------|---------------|-------------------|
+| AI-INF.1 | Inference provenance (prompt + response hashed) | EU AI Act Art. 12 |
+| AI-INF.2 | Latency within threshold (detects model swaps) | NIST AI RMF MEASURE 2.6 |
+| AI-MDL.1 | Model hash matches approved version | EU AI Act Art. 9 |
+| AI-MDL.2 | Model version identifier recorded | EU AI Act Art. 72 |
+| AI-GRD.1 | Required guardrails were active | NIST AI RMF MANAGE 4.1 |
+| AI-GRD.2 | No content filter / refusal triggered | EU AI Act Art. 9 |
+
+## Resilience (Flight Recorder)
+
+If the witness endpoint is unreachable, payloads move to a dead-letter queue instead of being dropped. When connectivity is restored, the backlog drains automatically.
+
+```typescript
+const witness = new Witness({
+  endpoint: "...",
+  apiKey: "axm_...",
+  tenantId: "...",
+  bufferSize: 50,       // flush every 50 anchors
+  flushInterval: 10,    // or every 10 seconds
+  maxRetries: 5,        // retry before dead-lettering
+});
+```
+
+## Cross-Language Parity
+
+This SDK produces **identical SWT3 fingerprints** to the Python SDK (`swt3-ai`) and the Axiom ingestion endpoint. A unified audit trail across your entire stack:
+
+| Layer | Language | Package |
+|-------|----------|---------|
+| Backend services | Python | `swt3-ai` |
+| API routes / Edge | TypeScript | `@tenova/swt3-ai` |
+| Frontend (Next.js) | TypeScript | `@tenova/swt3-ai` + Vercel AI SDK |
+| CLI / scripts | Python | `swt3-ai` |
+
+10 cross-language test vectors validated at build time.
+
+## Installation
+
+```bash
+npm install @tenova/swt3-ai
+
+# Peer dependencies (install whichever you use)
+npm install openai          # for OpenAI adapter
+npm install @anthropic-ai/sdk  # for Anthropic adapter
+```
+
+## API Reference
+
+### `new Witness(options)`
+
+| Option | Default | Description |
+|--------|---------|-------------|
+| `endpoint` | *required* | Witness endpoint URL |
+| `apiKey` | *required* | API key (`axm_*`) |
+| `tenantId` | *required* | Enclave identifier |
+| `clearingLevel` | `1` | Clearing level (0-3) |
+| `bufferSize` | `10` | Flush after N anchors |
+| `flushInterval` | `5` | Flush after N seconds |
+| `timeout` | `10000` | HTTP timeout (ms) |
+| `maxRetries` | `3` | Retries before dead-letter |
+| `guardrailNames` | `[]` | Active guardrail names |
+
+### `witness.wrap(client)`
+
+Returns a Proxy that behaves identically to the original client. Supports OpenAI and Anthropic.
+
+### `witness.vercelOnFinish(options?)`
+
+Returns an `onFinish` callback for `streamText()` / `generateText()`. Pass `{ promptText }` for full provenance hashing.
+
+### `witness.flush()`
+
+Force-flush all buffered payloads. Returns receipts.
+
+### `witness.stop()`
+
+Stop the witness and flush remaining payloads.
+
+---
+
+*SWT3: Sovereign Witness Traceability. We don't run your models. We witness them.*

package/dist/adapters/anthropic.d.ts

@@ -0,0 +1,32 @@
+/**
+ * SWT3 AI Witness SDK — Anthropic Adapter (ES6 Proxy).
+ *
+ * Wraps the Anthropic client so that `client.messages.create()` is
+ * intercepted for witnessing. Two levels deep (simpler than OpenAI).
+ *
+ * Handles both:
+ *   - Non-streaming: Message response object
+ *   - Streaming: MessageStream — accumulates content_block_delta events
+ *     for hashing, witnesses after stream_message_stop
+ *
+ * Anthropic response structure:
+ *   response.content      → ContentBlock[] (text, tool_use, etc.)
+ *   response.model        → string
+ *   response.stop_reason  → "end_turn" | "max_tokens" | "stop_sequence" | "tool_use"
+ *   response.usage        → { input_tokens, output_tokens }
+ *
+ * Anthropic streaming:
+ *   The SDK returns a MessageStream with:
+ *   - Symbol.asyncIterator → yields MessageStreamEvent objects
+ *   - .on("message", cb) → fires when complete message is assembled
+ *   - .finalMessage() → Promise<Message> (the assembled message)
+ *
+ *   Events: message_start, content_block_start, content_block_delta,
+ *           content_block_stop, message_delta, message_stop
+ */
+import type { Witness } from "../witness.js";
+/**
+ * Wrap an Anthropic client with an ES6 Proxy for transparent witnessing.
+ */
+export declare function wrapAnthropic(client: unknown, witness: Witness): unknown;
+//# sourceMappingURL=anthropic.d.ts.map

package/dist/adapters/anthropic.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"anthropic.d.ts","sourceRoot":"","sources":["../../src/adapters/anthropic.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAIH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAE7C;;GAEG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAYxE"}

package/dist/adapters/anthropic.js

@@ -0,0 +1,267 @@
+/**
+ * SWT3 AI Witness SDK — Anthropic Adapter (ES6 Proxy).
+ *
+ * Wraps the Anthropic client so that `client.messages.create()` is
+ * intercepted for witnessing. Two levels deep (simpler than OpenAI).
+ *
+ * Handles both:
+ *   - Non-streaming: Message response object
+ *   - Streaming: MessageStream — accumulates content_block_delta events
+ *     for hashing, witnesses after stream_message_stop
+ *
+ * Anthropic response structure:
+ *   response.content      → ContentBlock[] (text, tool_use, etc.)
+ *   response.model        → string
+ *   response.stop_reason  → "end_turn" | "max_tokens" | "stop_sequence" | "tool_use"
+ *   response.usage        → { input_tokens, output_tokens }
+ *
+ * Anthropic streaming:
+ *   The SDK returns a MessageStream with:
+ *   - Symbol.asyncIterator → yields MessageStreamEvent objects
+ *   - .on("message", cb) → fires when complete message is assembled
+ *   - .finalMessage() → Promise<Message> (the assembled message)
+ *
+ *   Events: message_start, content_block_start, content_block_delta,
+ *           content_block_stop, message_delta, message_stop
+ */
+import { sha256Truncated } from "../fingerprint.js";
+/**
+ * Wrap an Anthropic client with an ES6 Proxy for transparent witnessing.
+ */
+export function wrapAnthropic(client, witness) {
+    return new Proxy(client, {
+        get(target, prop) {
+            if (typeof prop === "symbol")
+                return Reflect.get(target, prop);
+            const real = Reflect.get(target, prop);
+            if (prop === "messages") {
+                return createMessagesProxy(real, witness);
+            }
+            return real;
+        },
+    });
+}
+function createMessagesProxy(messages, witness) {
+    return new Proxy(messages, {
+        get(target, prop) {
+            if (typeof prop === "symbol")
+                return Reflect.get(target, prop);
+            const real = Reflect.get(target, prop);
+            if (prop === "create") {
+                return createInterceptor(real, witness);
+            }
+            // Anthropic also has messages.stream() — intercept that too
+            if (prop === "stream") {
+                return createStreamInterceptor(real, witness);
+            }
+            return real;
+        },
+    });
+}
+// ── Non-streaming / auto-detect interceptor ─────────────────────────
+function createInterceptor(realMethod, witness) {
+    return function interceptedCreate(...args) {
+        const kwargs = (args[0] ?? {});
+        const messages = kwargs.messages;
+        const system = kwargs.system;
+        const model = kwargs.model ?? "unknown";
+        const isStreaming = kwargs.stream === true;
+        const promptText = extractPromptText(messages, system);
+        const promptHash = sha256Truncated(promptText);
+        const start = performance.now();
+        const result = realMethod.call(this, ...args);
+        if (isStreaming) {
+            // Streaming via create({ stream: true }) — returns a Stream
+            return handleStreaming(result, witness, model, promptHash, start);
+        }
+        // Non-streaming — result is Promise<Message>
+        return result.then((response) => {
+            const elapsedMs = Math.round(performance.now() - start);
+            const record = extractRecord(response, model, promptHash, elapsedMs);
+            witness.record(record);
+            return response;
+        });
+    };
+}
+// ── Explicit .stream() interceptor ──────────────────────────────────
+function createStreamInterceptor(realMethod, witness) {
+    return function interceptedStream(...args) {
+        const kwargs = (args[0] ?? {});
+        const messages = kwargs.messages;
+        const system = kwargs.system;
+        const model = kwargs.model ?? "unknown";
+        const promptText = extractPromptText(messages, system);
+        const promptHash = sha256Truncated(promptText);
+        const start = performance.now();
+        const result = realMethod.call(this, ...args);
+        return handleStreaming(result, witness, model, promptHash, start);
+    };
+}
+// ── Streaming Handler ───────────────────────────────────────────────
+async function* streamAccumulator(stream, witness, model, promptHash, startTime) {
+    const textParts = [];
+    let actualModel = model;
+    let stopReason = "";
+    let inputTokens;
+    let outputTokens;
+    for await (const event of stream) {
+        // Yield to developer immediately
+        yield event;
+        const e = event;
+        const type = e.type;
+        if (type === "message_start") {
+            const msg = e.message;
+            if (msg?.model)
+                actualModel = msg.model;
+            const usage = msg?.usage;
+            if (usage?.input_tokens)
+                inputTokens = usage.input_tokens;
+        }
+        if (type === "content_block_delta") {
+            const delta = e.delta;
+            if (delta?.type === "text_delta" && delta?.text) {
+                textParts.push(delta.text);
+            }
+        }
+        if (type === "message_delta") {
+            const delta = e.delta;
+            if (delta?.stop_reason)
+                stopReason = delta.stop_reason;
+            const usage = e.usage;
+            if (usage?.output_tokens)
+                outputTokens = usage.output_tokens;
+        }
+    }
+    // Stream complete — witness
+    const elapsedMs = Math.round(performance.now() - startTime);
+    const responseText = textParts.join("");
+    const hasRefusal = !["end_turn", "max_tokens", "stop_sequence", "tool_use"].includes(stopReason);
+    const record = {
+        modelId: actualModel,
+        modelHash: sha256Truncated(actualModel),
+        promptHash,
+        responseHash: sha256Truncated(responseText),
+        latencyMs: elapsedMs,
+        inputTokens,
+        outputTokens,
+        guardrailsActive: 0,
+        guardrailsRequired: 0,
+        guardrailPassed: true,
+        hasRefusal,
+        provider: "anthropic",
+        guardrailNames: [],
+    };
+    witness.record(record);
+}
+function handleStreaming(streamResult, witness, model, promptHash, startTime) {
+    // Anthropic's stream() returns a MessageStream directly (not a Promise)
+    // But create({ stream: true }) may return a Promise<Stream>
+    if (streamResult && typeof streamResult.then === "function") {
+        return streamResult.then((stream) => wrapAnthropicStream(stream, witness, model, promptHash, startTime));
+    }
+    return wrapAnthropicStream(streamResult, witness, model, promptHash, startTime);
+}
+function wrapAnthropicStream(stream, witness, model, promptHash, startTime) {
+    const s = stream;
+    const gen = streamAccumulator(s, witness, model, promptHash, startTime);
+    return new Proxy(s, {
+        get(target, prop) {
+            if (prop === Symbol.asyncIterator) {
+                return () => gen;
+            }
+            const value = Reflect.get(target, prop);
+            if (typeof value === "function") {
+                // Wrap finalMessage() to also witness the complete response
+                if (prop === "finalMessage") {
+                    return async function wrappedFinalMessage() {
+                        const msg = await value.call(target);
+                        // The stream accumulator will have already witnessed via iteration,
+                        // but if someone calls finalMessage() WITHOUT iterating, we need
+                        // to witness from the assembled message.
+                        return msg;
+                    };
+                }
+                return value.bind(target);
+            }
+            return value;
+        },
+    });
+}
+// ── Factor Extraction ──────────────────────────────────────────────
+function extractPromptText(messages, system = "") {
+    const parts = [];
+    // System prompt
+    if (typeof system === "string" && system) {
+        parts.push(system);
+    }
+    else if (Array.isArray(system)) {
+        for (const block of system) {
+            if (typeof block === "object" && block !== null) {
+                const b = block;
+                if (b.type === "text" && typeof b.text === "string") {
+                    parts.push(b.text);
+                }
+            }
+        }
+    }
+    // Messages
+    if (Array.isArray(messages)) {
+        for (const msg of messages) {
+            if (typeof msg === "object" && msg !== null) {
+                const m = msg;
+                const content = m.content;
+                if (typeof content === "string") {
+                    parts.push(content);
+                }
+                else if (Array.isArray(content)) {
+                    for (const block of content) {
+                        if (typeof block === "object" && block !== null) {
+                            const b = block;
+                            if (b.type === "text" && typeof b.text === "string") {
+                                parts.push(b.text);
+                            }
+                        }
+                    }
+                }
+            }
+        }
+    }
+    return parts.join("\n");
+}
+function extractRecord(response, model, promptHash, elapsedMs) {
+    const r = response;
+    // Extract text from content blocks
+    let responseText = "";
+    const contentBlocks = r.content;
+    if (Array.isArray(contentBlocks)) {
+        const texts = [];
+        for (const block of contentBlocks) {
+            if (block.type === "text" && typeof block.text === "string") {
+                texts.push(block.text);
+            }
+        }
+        responseText = texts.join("\n");
+    }
+    const stopReason = r.stop_reason ?? "";
+    const hasRefusal = !["end_turn", "max_tokens", "stop_sequence", "tool_use"].includes(stopReason);
+    const usage = r.usage;
+    const inputTokens = usage?.input_tokens;
+    const outputTokens = usage?.output_tokens;
+    const actualModel = r.model ?? model;
+    return {
+        modelId: actualModel,
+        modelHash: sha256Truncated(actualModel),
+        promptHash,
+        responseHash: sha256Truncated(responseText),
+        latencyMs: elapsedMs,
+        inputTokens,
+        outputTokens,
+        guardrailsActive: 0,
+        guardrailsRequired: 0,
+        guardrailPassed: true,
+        hasRefusal,
+        provider: "anthropic",
+        guardrailNames: [],
+    };
+}
+//# sourceMappingURL=anthropic.js.map

package/dist/adapters/anthropic.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"anthropic.js","sourceRoot":"","sources":["../../src/adapters/anthropic.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAIpD;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,MAAe,EAAE,OAAgB;IAC7D,OAAO,IAAI,KAAK,CAAC,MAAgB,EAAE;QACjC,GAAG,CAAC,MAAc,EAAE,IAAqB;YACvC,IAAI,OAAO,IAAI,KAAK,QAAQ;gBAAE,OAAO,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAC/D,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAEvC,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;gBACxB,OAAO,mBAAmB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAC5C,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,SAAS,mBAAmB,CAAC,QAAiB,EAAE,OAAgB;IAC9D,OAAO,IAAI,KAAK,CAAC,QAAkB,EAAE;QACnC,GAAG,CAAC,MAAc,EAAE,IAAqB;YACvC,IAAI,OAAO,IAAI,KAAK,QAAQ;gBAAE,OAAO,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAC/D,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAEvC,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtB,OAAO,iBAAiB,CAAC,IAAuC,EAAE,OAAO,CAAC,CAAC;YAC7E,CAAC;YAED,4DAA4D;YAC5D,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtB,OAAO,uBAAuB,CAAC,IAAuC,EAAE,OAAO,CAAC,CAAC;YACnF,CAAC;YAED,OAAO,IAAI,CAAC;QACd,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,uEAAuE;AAEvE,SAAS,iBAAiB,CACxB,UAA2C,EAC3C,OAAgB;IAEhB,OAAO,SAAS,iBAAiB,CAAgB,GAAG,IAAe;QACjE,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAA4B,CAAC;QAC1D,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAqB,CAAC;QAC9C,MAAM,MAAM,GAAG,MAAM,CAAC,MAAiB,CAAC;QACxC,MAAM,KAAK,GAAI,MAAM,CAAC,KAAgB,IAAI,SAAS,CAAC;QACpD,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,KAAK,IAAI,CAAC;QAE3C,MAAM,UAAU,GAAG,iBAAiB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACvD,MAAM,UAAU,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC;QAC/C,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QAEhC,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,CAAC;QAE9C,IAAI,WAAW,EAAE,CAAC;YAChB,4DAA4D;YAC5D,OAAO,eAAe,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC;QACpE,CAAC;QAED,6CAA6C;QAC7C,OAAQ,MAA2B,CAAC,IAAI,CAAC,CAAC,QAAiB,EAAE,EAAE;YAC7D,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC;YACxD,MAAM,MAAM,GAAG,aAAa,CAAC,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;YACrE,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACvB,OAAO,QAAQ,CAAC;QAClB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC;AAED,uEAAuE;AAEvE,SAAS,uBAAuB,CAC9B,UAA2C,EAC3C,OAAgB;IAEhB,OAAO,SAAS,iBAAiB,CAAgB,GAAG,IAAe;QACjE,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAA4B,CAAC;QAC1D,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAqB,CAAC;QAC9C,MAAM,MAAM,GAAG,MAAM,CAAC,MAAiB,CAAC;QACxC,MAAM,KAAK,GAAI,MAAM,CAAC,KAAgB,IAAI,SAAS,CAAC;QAEpD,MAAM,UAAU,GAAG,iBAAiB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACvD,MAAM,UAAU,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC;QAC/C,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QAEhC,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,CAAC;QAC9C,OAAO,eAAe,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC;IACpE,CAAC,CAAC;AACJ,CAAC;AAED,uEAAuE;AAEvE,KAAK,SAAS,CAAC,CAAC,iBAAiB,CAC/B,MAA8B,EAC9B,OAAgB,EAChB,KAAa,EACb,UAAkB,EAClB,SAAiB;IAEjB,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,IAAI,UAAU,GAAG,EAAE,CAAC;IACpB,IAAI,WAA+B,CAAC;IACpC,IAAI,YAAgC,CAAC;IAErC,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QACjC,iCAAiC;QACjC,MAAM,KAAK,CAAC;QAEZ,MAAM,CAAC,GAAG,KAAgC,CAAC;QAC3C,MAAM,IAAI,GAAG,CAAC,CAAC,IAAc,CAAC;QAE9B,IAAI,IAAI,KAAK,eAAe,EAAE,CAAC;YAC7B,MAAM,GAAG,GAAG,CAAC,CAAC,OAA8C,CAAC;YAC7D,IAAI,GAAG,EAAE,KAAK;gBAAE,WAAW,GAAG,GAAG,CAAC,KAAe,CAAC;YAClD,MAAM,KAAK,GAAG,GAAG,EAAE,KAA4C,CAAC;YAChE,IAAI,KAAK,EAAE,YAAY;gBAAE,WAAW,GAAG,KAAK,CAAC,YAAsB,CAAC;QACtE,CAAC;QAED,IAAI,IAAI,KAAK,qBAAqB,EAAE,CAAC;YACnC,MAAM,KAAK,GAAG,CAAC,CAAC,KAA4C,CAAC;YAC7D,IAAI,KAAK,EAAE,IAAI,KAAK,YAAY,IAAI,KAAK,EAAE,IAAI,EAAE,CAAC;gBAChD,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,IAAc,CAAC,CAAC;YACvC,CAAC;QACH,CAAC;QAED,IAAI,IAAI,KAAK,eAAe,EAAE,CAAC;YAC7B,MAAM,KAAK,GAAG,CAAC,CAAC,KAA4C,CAAC;YAC7D,IAAI,KAAK,EAAE,WAAW;gBAAE,UAAU,GAAG,KAAK,CAAC,WAAqB,CAAC;YACjE,MAAM,KAAK,GAAG,CAAC,CAAC,KAA4C,CAAC;YAC7D,IAAI,KAAK,EAAE,aAAa;gBAAE,YAAY,GAAG,KAAK,CAAC,aAAuB,CAAC;QACzE,CAAC;IACH,CAAC;IAED,4BAA4B;IAC5B,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,CAAC;IAC5D,MAAM,YAAY,GAAG,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACxC,MAAM,UAAU,GAAG,CAAC,CAAC,UAAU,EAAE,YAAY,EAAE,eAAe,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IAEjG,MAAM,MAAM,GAAoB;QAC9B,OAAO,EAAE,WAAW;QACpB,SAAS,EAAE,eAAe,CAAC,WAAW,CAAC;QACvC,UAAU;QACV,YAAY,EAAE,eAAe,CAAC,YAAY,CAAC;QAC3C,SAAS,EAAE,SAAS;QACpB,WAAW;QACX,YAAY;QACZ,gBAAgB,EAAE,CAAC;QACnB,kBAAkB,EAAE,CAAC;QACrB,eAAe,EAAE,IAAI;QACrB,UAAU;QACV,QAAQ,EAAE,WAAW;QACrB,cAAc,EAAE,EAAE;KACnB,CAAC;IAEF,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AACzB,CAAC;AAED,SAAS,eAAe,CACtB,YAAqB,EACrB,OAAgB,EAChB,KAAa,EACb,UAAkB,EAClB,SAAiB;IAEjB,wEAAwE;IACxE,4DAA4D;IAC5D,IAAI,YAAY,IAAI,OAAQ,YAAiC,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAClF,OAAQ,YAAiC,CAAC,IAAI,CAAC,CAAC,MAAe,EAAE,EAAE,CACjE,mBAAmB,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,CAAC,CACnE,CAAC;IACJ,CAAC;IACD,OAAO,mBAAmB,CAAC,YAAY,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;AAClF,CAAC;AAED,SAAS,mBAAmB,CAC1B,MAAe,EACf,OAAgB,EAChB,KAAa,EACb,UAAkB,EAClB,SAAiB;IAEjB,MAAM,CAAC,GAAG,MAA0C,CAAC;IAErD,MAAM,GAAG,GAAG,iBAAiB,CAC3B,CAAsC,EACtC,OAAO,EACP,KAAK,EACL,UAAU,EACV,SAAS,CACV,CAAC;IAEF,OAAO,IAAI,KAAK,CAAC,CAAC,EAAE;QAClB,GAAG,CAAC,MAAwC,EAAE,IAAqB;YACjE,IAAI,IAAI,KAAK,MAAM,CAAC,aAAa,EAAE,CAAC;gBAClC,OAAO,GAAG,EAAE,CAAC,GAAG,CAAC;YACnB,CAAC;YAED,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YACxC,IAAI,OAAO,KAAK,KAAK,UAAU,EAAE,CAAC;gBAChC,4DAA4D;gBAC5D,IAAI,IAAI,KAAK,cAAc,EAAE,CAAC;oBAC5B,OAAO,KAAK,UAAU,mBAAmB;wBACvC,MAAM,GAAG,GAAG,MAAO,KAAgC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;wBACjE,oEAAoE;wBACpE,iEAAiE;wBACjE,yCAAyC;wBACzC,OAAO,GAAG,CAAC;oBACb,CAAC,CAAC;gBACJ,CAAC;gBACD,OAAQ,KAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC1C,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,sEAAsE;AAEtE,SAAS,iBAAiB,CAAC,QAAiB,EAAE,SAAkB,EAAE;IAChE,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,gBAAgB;IAChB,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,EAAE,CAAC;QACzC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACrB,CAAC;SAAM,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACjC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;gBAChD,MAAM,CAAC,GAAG,KAAgC,CAAC;gBAC3C,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBACpD,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gBACrB,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,WAAW;IACX,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5B,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;YAC3B,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;gBAC5C,MAAM,CAAC,GAAG,GAA8B,CAAC;gBACzC,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC;gBAC1B,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;oBAChC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACtB,CAAC;qBAAM,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;oBAClC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;wBAC5B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;4BAChD,MAAM,CAAC,GAAG,KAAgC,CAAC;4BAC3C,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gCACpD,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;4BACrB,CAAC;wBACH,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,aAAa,CACpB,QAAiB,EACjB,KAAa,EACb,UAAkB,EAClB,SAAiB;IAEjB,MAAM,CAAC,GAAG,QAAmC,CAAC;IAE9C,mCAAmC;IACnC,IAAI,YAAY,GAAG,EAAE,CAAC;IACtB,MAAM,aAAa,GAAG,CAAC,CAAC,OAAqD,CAAC;IAC9E,IAAI,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;QACjC,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,KAAK,MAAM,KAAK,IAAI,aAAa,EAAE,CAAC;YAClC,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC5D,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;QACD,YAAY,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClC,CAAC;IAED,MAAM,UAAU,GAAI,CAAC,CAAC,WAAsB,IAAI,EAAE,CAAC;IACnD,MAAM,UAAU,GAAG,CAAC,CAAC,UAAU,EAAE,YAAY,EAAE,eAAe,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IAEjG,MAAM,KAAK,GAAG,CAAC,CAAC,KAA4C,CAAC;IAC7D,MAAM,WAAW,GAAG,KAAK,EAAE,YAAkC,CAAC;IAC9D,MAAM,YAAY,GAAG,KAAK,EAAE,aAAmC,CAAC;IAEhE,MAAM,WAAW,GAAI,CAAC,CAAC,KAAgB,IAAI,KAAK,CAAC;IAEjD,OAAO;QACL,OAAO,EAAE,WAAW;QACpB,SAAS,EAAE,eAAe,CAAC,WAAW,CAAC;QACvC,UAAU;QACV,YAAY,EAAE,eAAe,CAAC,YAAY,CAAC;QAC3C,SAAS,EAAE,SAAS;QACpB,WAAW;QACX,YAAY;QACZ,gBAAgB,EAAE,CAAC;QACnB,kBAAkB,EAAE,CAAC;QACrB,eAAe,EAAE,IAAI;QACrB,UAAU;QACV,QAAQ,EAAE,WAAW;QACrB,cAAc,EAAE,EAAE;KACnB,CAAC;AACJ,CAAC"}

package/dist/adapters/openai.d.ts

@@ -0,0 +1,19 @@
+/**
+ * SWT3 AI Witness SDK — OpenAI Adapter (ES6 Proxy).
+ *
+ * Uses JavaScript's native Proxy to intercept property access on the
+ * OpenAI client, following the chain: client.chat.completions.create()
+ *
+ * Handles both:
+ *   - Non-streaming: ChatCompletion response object
+ *   - Streaming: AsyncIterable<ChatCompletionChunk> — accumulates chunks
+ *     for hashing, then witnesses after stream completes
+ *
+ * The developer's code sees zero difference from using the raw client.
+ */
+import type { Witness } from "../witness.js";
+/**
+ * Wrap an OpenAI client with an ES6 Proxy for transparent witnessing.
+ */
+export declare function wrapOpenAI(client: unknown, witness: Witness): unknown;
+//# sourceMappingURL=openai.d.ts.map

package/dist/adapters/openai.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"openai.d.ts","sourceRoot":"","sources":["../../src/adapters/openai.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAIH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAU7C;;GAEG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAErE"}