@tenova/swt3-ai 0.1.0 → 0.2.1

package/README.md

@@ -2,7 +2,7 @@ Cryptographic AI Governance for the Edge. Zero Latency. Zero Data Retention.
 
 # @tenova/swt3-ai
 
-**SWT3 AI Witness SDK for TypeScript** — continuous, cryptographic attestation for AI systems. Prove your models are running approved weights, safety guardrails are active, and inferences are traceable. All without a single prompt or response ever leaving your infrastructure.
+**SWT3 AI Witness SDK for TypeScript**: continuous, cryptographic attestation for AI systems. Prove your models are running approved weights, safety guardrails are active, and inferences are traceable. All without a single prompt or response ever leaving your infrastructure.
 
 Works with OpenAI, Anthropic, Vercel AI SDK, and any OpenAI-compatible endpoint (vLLM, Ollama, Azure, Llama.cpp).
 
@@ -22,14 +22,14 @@ const witness = new Witness({
 
 const client = witness.wrap(new OpenAI()) as OpenAI;
 
-// Non-streaming — works exactly as before
+// Non-streaming, works exactly as before
 const response = await client.chat.completions.create({
   model: "gpt-4o",
   messages: [{ role: "user", content: "Summarize this contract..." }],
 });
 console.log(response.choices[0].message.content);
 
-// Streaming — also works. Chunks arrive in real-time, witnessing happens after.
+// Streaming, also works. Chunks arrive in real-time, witnessing happens after.
 const stream = await client.chat.completions.create({
   model: "gpt-4o",
   messages: [{ role: "user", content: "Explain quantum computing" }],
@@ -93,17 +93,17 @@ const result = await streamText({
   onFinish: witness.vercelOnFinish({ promptText: prompt }),
 });
 
-// Works with any Vercel AI SDK provider — OpenAI, Anthropic, Google, Mistral, custom
+// Works with any Vercel AI SDK provider:OpenAI, Anthropic, Google, Mistral, custom
 ```
 
 The `onFinish` hook is framework-idiomatic: no wrapping, no proxying, no monkey-patching. It fires after the stream completes and receives a normalized result regardless of provider.
 
 ## Sovereign Cloud Support
 
-The SDK works out-of-the-box with any OpenAI-compatible endpoint. Run Llama 3 on vLLM, Mistral on Ollama, or any model behind an OpenAI-compatible API — every inference is witnessed identically.
+The SDK works out-of-the-box with any OpenAI-compatible endpoint. Run Llama 3 on vLLM, Mistral on Ollama, or any model behind an OpenAI-compatible API:every inference is witnessed identically.
 
 ```typescript
-// vLLM with Llama 3 — sovereign cloud, your hardware
+// vLLM with Llama 3, sovereign cloud, your hardware
 const client = witness.wrap(
   new OpenAI({ baseURL: "http://gpu-cluster.internal:8000/v1" }),
 ) as OpenAI;
@@ -112,7 +112,7 @@ const response = await client.chat.completions.create({
   model: "meta-llama/Meta-Llama-3-70B-Instruct",
   messages: [{ role: "user", content: "Classify this threat indicator" }],
 });
-// Same SWT3 anchor, same ledger, same audit trail — regardless of where the model runs
+// Same SWT3 anchor, same ledger, same audit trail:regardless of where the model runs
 
 // Ollama (local development)
 const localClient = witness.wrap(
@@ -130,12 +130,12 @@ const azureClient = witness.wrap(
 
 ## What Happens Per Inference
 
-1. **Intercept** — ES6 Proxy wraps your AI client transparently
-2. **Hash** — Prompts and responses are SHA-256 hashed in-process
-3. **Extract** — Model hash, latency, token count, refusal status → numeric factors
-4. **Clear** — Raw text is purged from the wire payload (configurable clearing level)
-5. **Buffer** — Factors queued in background, flushed to the SWT3 ledger asynchronously
-6. **Return** — Your original response returns untouched, zero added latency
+1. **Intercept**: ES6 Proxy wraps your AI client transparently
+2. **Hash**: Prompts and responses are SHA-256 hashed in-process
+3. **Extract**: Model hash, latency, token count, refusal status as numeric factors
+4. **Clear**: Raw text is purged from the wire payload (configurable clearing level)
+5. **Buffer**: Factors queued in background, flushed to the SWT3 ledger asynchronously
+6. **Return**: Your original response returns untouched, zero added latency
 
 For streaming: chunks arrive to the developer in real-time. The SDK accumulates content in the background and witnesses after the stream completes.
 
@@ -148,7 +148,7 @@ For streaming: chunks arrive to the developer in real-time. The SDK accumulates
 | 2 | Sensitive | Hashes + factors + model only | Healthcare, legal, PII |
 | 3 | Classified | Numeric factors only. Model ID hashed. | Defense, air-gapped |
 
-At Level 1+, raw prompts and responses **never leave your infrastructure**. The witness endpoint is a "Blind Registrar" — it stores cryptographic proofs, not data.
+At Level 1+, raw prompts and responses **never leave your infrastructure**. The witness endpoint is a "Blind Registrar":it stores cryptographic proofs, not data.
 
 ```typescript
 // Healthcare deployment: Level 2
@@ -224,6 +224,8 @@ npm install @anthropic-ai/sdk  # for Anthropic adapter
 | `timeout` | `10000` | HTTP timeout (ms) |
 | `maxRetries` | `3` | Retries before dead-letter |
 | `guardrailNames` | `[]` | Active guardrail names |
+| `factorHandoff` | - | `"file"` to enable local factor export |
+| `factorHandoffPath` | - | Directory for factor handoff files |
 
 ### `witness.wrap(client)`
 
@@ -241,6 +243,34 @@ Force-flush all buffered payloads. Returns receipts.
 
 Stop the witness and flush remaining payloads.
 
+## Factor Handoff (Clearing Level 2+)
+
+At Clearing Level 2 or 3, some or all verifiable data is stripped before it reaches the witness endpoint. The Factor Handoff writes your factors to a local directory **before** clearing proceeds. If the write fails, the payload is not transmitted.
+
+```typescript
+const witness = new Witness({
+  endpoint: "https://sovereign.tenova.io",
+  apiKey: "axm_live_...",
+  tenantId: "YOUR_ENCLAVE",
+  clearingLevel: 3,
+  factorHandoff: "file",
+  factorHandoffPath: "/secure/vault/factors/",
+});
+```
+
+Each anchor gets its own JSON file containing the full uncleared factors and metadata for independent re-verification.
+
+For the full protocol specification, see the [Factor Handoff Protocol](https://sovereign.tenova.io/docs/factor-handoff-protocol.html).
+
+## Documentation
+
+- [SDK Developer Docs](https://sovereign.tenova.io/docs/) - Quickstart, providers, clearing levels, configuration
+- [Factor Handoff Protocol](https://sovereign.tenova.io/docs/factor-handoff-protocol.html) - How factors are securely transferred to your custody
+- [Clearing Protocol Terms](https://sovereign.tenova.io/terms/clearing-addendum) - Shared responsibility model and liability
+- [CMMC Compliance Overlay](https://sovereign.tenova.io/guides/cmmc-overlay.html) - Control mappings for defense industrial base
+
 ---
 
 *SWT3: Sovereign Witness Traceability. We don't run your models. We witness them.*
+
+SWT3 and Sovereign Witness Traceability are trademarks of Tenable Nova LLC. Patent pending. Apache 2.0 licensed.

package/dist/adapters/bedrock.d.ts

@@ -0,0 +1,33 @@
+/**
+ * SWT3 AI Witness SDK — AWS Bedrock Adapter (ES6 Proxy).
+ *
+ * Wraps the @aws-sdk/client-bedrock-runtime client so that
+ * `client.send(new ConverseCommand(...))` and
+ * `client.send(new InvokeModelCommand(...))` are intercepted.
+ *
+ * AWS Bedrock uses the Command pattern:
+ *   const response = await client.send(new ConverseCommand({ modelId, messages }));
+ *
+ * The adapter intercepts `send()` and checks if the command is a
+ * ConverseCommand or InvokeModelCommand to extract factors.
+ *
+ * Copyright (c) 2026 Tenable Nova LLC. Apache 2.0. Patent pending.
+ */
+import type { Witness } from "../witness.js";
+/**
+ * Wrap a BedrockRuntimeClient with transparent witnessing.
+ *
+ * Usage:
+ *   import { BedrockRuntimeClient, ConverseCommand } from "@aws-sdk/client-bedrock-runtime";
+ *   import { Witness } from "@tenova/swt3-ai";
+ *
+ *   const witness = new Witness({ endpoint, apiKey, tenantId });
+ *   const client = witness.wrap(new BedrockRuntimeClient({ region: "us-east-1" }));
+ *
+ *   const response = await client.send(new ConverseCommand({
+ *     modelId: "anthropic.claude-3-5-sonnet-20241022-v2:0",
+ *     messages: [{ role: "user", content: [{ text: "Hello" }] }],
+ *   }));
+ */
+export declare function wrapBedrock(client: unknown, witness: Witness): unknown;
+//# sourceMappingURL=bedrock.d.ts.map

package/dist/adapters/bedrock.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bedrock.d.ts","sourceRoot":"","sources":["../../src/adapters/bedrock.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAIH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAE7C;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAatE"}

package/dist/adapters/bedrock.js

@@ -0,0 +1,259 @@
+/**
+ * SWT3 AI Witness SDK — AWS Bedrock Adapter (ES6 Proxy).
+ *
+ * Wraps the @aws-sdk/client-bedrock-runtime client so that
+ * `client.send(new ConverseCommand(...))` and
+ * `client.send(new InvokeModelCommand(...))` are intercepted.
+ *
+ * AWS Bedrock uses the Command pattern:
+ *   const response = await client.send(new ConverseCommand({ modelId, messages }));
+ *
+ * The adapter intercepts `send()` and checks if the command is a
+ * ConverseCommand or InvokeModelCommand to extract factors.
+ *
+ * Copyright (c) 2026 Tenable Nova LLC. Apache 2.0. Patent pending.
+ */
+import { sha256Truncated } from "../fingerprint.js";
+/**
+ * Wrap a BedrockRuntimeClient with transparent witnessing.
+ *
+ * Usage:
+ *   import { BedrockRuntimeClient, ConverseCommand } from "@aws-sdk/client-bedrock-runtime";
+ *   import { Witness } from "@tenova/swt3-ai";
+ *
+ *   const witness = new Witness({ endpoint, apiKey, tenantId });
+ *   const client = witness.wrap(new BedrockRuntimeClient({ region: "us-east-1" }));
+ *
+ *   const response = await client.send(new ConverseCommand({
+ *     modelId: "anthropic.claude-3-5-sonnet-20241022-v2:0",
+ *     messages: [{ role: "user", content: [{ text: "Hello" }] }],
+ *   }));
+ */
+export function wrapBedrock(client, witness) {
+    return new Proxy(client, {
+        get(target, prop) {
+            if (typeof prop === "symbol")
+                return Reflect.get(target, prop);
+            const real = Reflect.get(target, prop);
+            if (prop === "send" && typeof real === "function") {
+                return createSendInterceptor(real, witness, target);
+            }
+            return real;
+        },
+    });
+}
+function createSendInterceptor(realSend, witness, thisArg) {
+    return async function interceptedSend(...args) {
+        const command = args[0];
+        if (!command)
+            return realSend.call(thisArg, ...args);
+        // Detect command type by constructor name
+        const commandName = command.constructor?.name ?? "";
+        if (commandName === "ConverseCommand") {
+            return handleConverse(realSend, thisArg, command, witness, args);
+        }
+        if (commandName === "InvokeModelCommand") {
+            return handleInvokeModel(realSend, thisArg, command, witness, args);
+        }
+        // Not a command we intercept — pass through
+        return realSend.call(thisArg, ...args);
+    };
+}
+// ── Converse Command Handler ──────────────────────────────────────
+async function handleConverse(realSend, thisArg, command, witness, args) {
+    const input = command.input ?? command;
+    const modelId = input.modelId ?? "unknown";
+    const messages = input.messages ?? [];
+    const promptText = extractConversePrompt(messages);
+    const promptHash = sha256Truncated(promptText);
+    const start = performance.now();
+    const response = await realSend.call(thisArg, ...args);
+    const elapsedMs = Math.round(performance.now() - start);
+    const resp = response;
+    const record = extractConverseRecord(resp, modelId, promptHash, elapsedMs);
+    witness.record(record);
+    return response;
+}
+// ── InvokeModel Command Handler ──────────────────────────────────
+async function handleInvokeModel(realSend, thisArg, command, witness, args) {
+    const input = command.input ?? command;
+    const modelId = input.modelId ?? "unknown";
+    // Parse the body to get prompt
+    let body = {};
+    const rawBody = input.body;
+    if (typeof rawBody === "string") {
+        try {
+            body = JSON.parse(rawBody);
+        }
+        catch { /* empty */ }
+    }
+    else if (rawBody instanceof Uint8Array) {
+        try {
+            body = JSON.parse(new TextDecoder().decode(rawBody));
+        }
+        catch { /* empty */ }
+    }
+    const promptText = extractInvokePrompt(body, modelId);
+    const promptHash = sha256Truncated(promptText);
+    const start = performance.now();
+    const response = await realSend.call(thisArg, ...args);
+    const elapsedMs = Math.round(performance.now() - start);
+    const resp = response;
+    const record = extractInvokeRecord(resp, modelId, promptHash, elapsedMs);
+    witness.record(record);
+    return response;
+}
+// ── Prompt Extraction ─────────────────────────────────────────────
+function extractConversePrompt(messages) {
+    const parts = [];
+    for (const msg of messages) {
+        const m = msg;
+        const content = m.content;
+        if (Array.isArray(content)) {
+            for (const block of content) {
+                const b = block;
+                if (b.text)
+                    parts.push(b.text);
+            }
+        }
+        else if (typeof content === "string") {
+            parts.push(content);
+        }
+    }
+    return parts.join("\n");
+}
+function extractInvokePrompt(body, modelId) {
+    // Anthropic on Bedrock
+    const messages = body.messages;
+    if (messages?.length) {
+        const parts = [];
+        for (const msg of messages) {
+            const m = msg;
+            const content = m.content;
+            if (typeof content === "string") {
+                parts.push(content);
+            }
+            else if (Array.isArray(content)) {
+                for (const block of content) {
+                    const b = block;
+                    if (b.type === "text" && b.text)
+                        parts.push(b.text);
+                }
+            }
+        }
+        if (parts.length)
+            return parts.join("\n");
+    }
+    // Amazon Titan
+    if (body.inputText)
+        return body.inputText;
+    // Meta Llama
+    if (body.prompt)
+        return body.prompt;
+    return JSON.stringify(body);
+}
+// ── Record Extraction ─────────────────────────────────────────────
+function extractConverseRecord(response, modelId, promptHash, elapsedMs) {
+    let responseText = "";
+    let hasRefusal = false;
+    const output = response.output;
+    const message = output?.message;
+    const content = message?.content;
+    if (content) {
+        for (const block of content) {
+            if (block.text)
+                responseText += block.text;
+        }
+    }
+    const stopReason = response.stopReason;
+    if (stopReason === "content_filtered")
+        hasRefusal = true;
+    const usage = response.usage;
+    const inputTokens = usage?.inputTokens;
+    const outputTokens = usage?.outputTokens;
+    return {
+        modelId: modelId,
+        modelHash: sha256Truncated(modelId),
+        promptHash: promptHash,
+        responseHash: sha256Truncated(responseText || ""),
+        latencyMs: elapsedMs,
+        inputTokens: inputTokens ?? undefined,
+        outputTokens: outputTokens ?? undefined,
+        hasRefusal: hasRefusal,
+        provider: "bedrock",
+        systemFingerprint: undefined,
+        guardrailsActive: 0,
+        guardrailsRequired: 0,
+        guardrailPassed: true,
+        guardrailNames: [],
+    };
+}
+function extractInvokeRecord(response, modelId, promptHash, elapsedMs) {
+    let responseText = "";
+    let hasRefusal = false;
+    let inputTokens = null;
+    let outputTokens = null;
+    try {
+        let body = {};
+        const rawBody = response.body;
+        if (rawBody instanceof Uint8Array) {
+            body = JSON.parse(new TextDecoder().decode(rawBody));
+        }
+        else if (typeof rawBody === "string") {
+            body = JSON.parse(rawBody);
+        }
+        // Anthropic on Bedrock
+        if (body.content) {
+            const content = body.content;
+            if (Array.isArray(content)) {
+                for (const block of content) {
+                    if (block.type === "text" && block.text)
+                        responseText += block.text;
+                }
+            }
+            else if (typeof content === "string") {
+                responseText = content;
+            }
+        }
+        // Amazon Titan
+        else if (body.results) {
+            const results = body.results;
+            if (results[0]?.outputText)
+                responseText = results[0].outputText;
+        }
+        // Meta Llama
+        else if (body.generation) {
+            responseText = body.generation;
+        }
+        // Usage
+        const usage = body.usage;
+        if (usage) {
+            inputTokens = (usage.input_tokens ?? usage.inputTokens ?? null);
+            outputTokens = (usage.output_tokens ?? usage.outputTokens ?? null);
+        }
+        // Refusal
+        const stopReason = (body.stop_reason ?? body.stopReason ?? "");
+        if (stopReason.toLowerCase().includes("content_filter"))
+            hasRefusal = true;
+    }
+    catch {
+        // Parse failure — still witness with what we have
+    }
+    return {
+        modelId: modelId,
+        modelHash: sha256Truncated(modelId),
+        promptHash: promptHash,
+        responseHash: sha256Truncated(responseText || ""),
+        latencyMs: elapsedMs,
+        inputTokens: inputTokens ?? undefined,
+        outputTokens: outputTokens ?? undefined,
+        hasRefusal: hasRefusal,
+        provider: "bedrock",
+        systemFingerprint: undefined,
+        guardrailsActive: 0,
+        guardrailsRequired: 0,
+        guardrailPassed: true,
+        guardrailNames: [],
+    };
+}
+//# sourceMappingURL=bedrock.js.map

package/dist/adapters/bedrock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bedrock.js","sourceRoot":"","sources":["../../src/adapters/bedrock.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAIpD;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,WAAW,CAAC,MAAe,EAAE,OAAgB;IAC3D,OAAO,IAAI,KAAK,CAAC,MAAgB,EAAE;QACjC,GAAG,CAAC,MAAc,EAAE,IAAqB;YACvC,IAAI,OAAO,IAAI,KAAK,QAAQ;gBAAE,OAAO,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAC/D,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAEvC,IAAI,IAAI,KAAK,MAAM,IAAI,OAAO,IAAI,KAAK,UAAU,EAAE,CAAC;gBAClD,OAAO,qBAAqB,CAAC,IAAgD,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;YAClG,CAAC;YAED,OAAO,IAAI,CAAC;QACd,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,SAAS,qBAAqB,CAC5B,QAAkD,EAClD,OAAgB,EAChB,OAAe;IAEf,OAAO,KAAK,UAAU,eAAe,CAAC,GAAG,IAAe;QACtD,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAwC,CAAC;QAC/D,IAAI,CAAC,OAAO;YAAE,OAAO,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;QAErD,0CAA0C;QAC1C,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC;QAEpD,IAAI,WAAW,KAAK,iBAAiB,EAAE,CAAC;YACtC,OAAO,cAAc,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;QACnE,CAAC;QAED,IAAI,WAAW,KAAK,oBAAoB,EAAE,CAAC;YACzC,OAAO,iBAAiB,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;QACtE,CAAC;QAED,4CAA4C;QAC5C,OAAO,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;IACzC,CAAC,CAAC;AACJ,CAAC;AAED,qEAAqE;AAErE,KAAK,UAAU,cAAc,CAC3B,QAAkD,EAClD,OAAe,EACf,OAAgC,EAChC,OAAgB,EAChB,IAAe;IAEf,MAAM,KAAK,GAAI,OAA+C,CAAC,KAAK,IAAI,OAAO,CAAC;IAChF,MAAM,OAAO,GAAI,KAAK,CAAC,OAAkB,IAAI,SAAS,CAAC;IACvD,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAqB,IAAI,EAAE,CAAC;IAEnD,MAAM,UAAU,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAC;IACnD,MAAM,UAAU,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC;IAE/C,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;IAChC,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;IACvD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC;IAExD,MAAM,IAAI,GAAG,QAAmC,CAAC;IACjD,MAAM,MAAM,GAAG,qBAAqB,CAAC,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;IAC3E,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAEvB,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,oEAAoE;AAEpE,KAAK,UAAU,iBAAiB,CAC9B,QAAkD,EAClD,OAAe,EACf,OAAgC,EAChC,OAAgB,EAChB,IAAe;IAEf,MAAM,KAAK,GAAI,OAA+C,CAAC,KAAK,IAAI,OAAO,CAAC;IAChF,MAAM,OAAO,GAAI,KAAK,CAAC,OAAkB,IAAI,SAAS,CAAC;IAEvD,+BAA+B;IAC/B,IAAI,IAAI,GAA4B,EAAE,CAAC;IACvC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC;IAC3B,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChC,IAAI,CAAC;YAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,WAAW,CAAC,CAAC;IAC3D,CAAC;SAAM,IAAI,OAAO,YAAY,UAAU,EAAE,CAAC;QACzC,IAAI,CAAC;YAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,WAAW,CAAC,CAAC;IACrF,CAAC;IAED,MAAM,UAAU,GAAG,mBAAmB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACtD,MAAM,UAAU,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC;IAE/C,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;IAChC,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;IACvD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC;IAExD,MAAM,IAAI,GAAG,QAAmC,CAAC;IACjD,MAAM,MAAM,GAAG,mBAAmB,CAAC,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;IACzE,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAEvB,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,qEAAqE;AAErE,SAAS,qBAAqB,CAAC,QAAmB;IAChD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,MAAM,CAAC,GAAG,GAA8B,CAAC;QACzC,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC;QAC1B,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;gBAC5B,MAAM,CAAC,GAAG,KAAgC,CAAC;gBAC3C,IAAI,CAAC,CAAC,IAAI;oBAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAc,CAAC,CAAC;YAC3C,CAAC;QACH,CAAC;aAAM,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YACvC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,mBAAmB,CAAC,IAA6B,EAAE,OAAe;IACzE,uBAAuB;IACvB,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAiC,CAAC;IACxD,IAAI,QAAQ,EAAE,MAAM,EAAE,CAAC;QACrB,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;YAC3B,MAAM,CAAC,GAAG,GAA8B,CAAC;YACzC,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC;YAC1B,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;gBAChC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACtB,CAAC;iBAAM,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;gBAClC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;oBAC5B,MAAM,CAAC,GAAG,KAAgC,CAAC;oBAC3C,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,IAAI;wBAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAc,CAAC,CAAC;gBAChE,CAAC;YACH,CAAC;QACH,CAAC;QACD,IAAI,KAAK,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5C,CAAC;IAED,eAAe;IACf,IAAI,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC,SAAmB,CAAC;IAEpD,aAAa;IACb,IAAI,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC,MAAgB,CAAC;IAE9C,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;AAC9B,CAAC;AAED,qEAAqE;AAErE,SAAS,qBAAqB,CAC5B,QAAiC,EACjC,OAAe,EACf,UAAkB,EAClB,SAAiB;IAEjB,IAAI,YAAY,GAAG,EAAE,CAAC;IACtB,IAAI,UAAU,GAAG,KAAK,CAAC;IAEvB,MAAM,MAAM,GAAG,QAAQ,CAAC,MAA6C,CAAC;IACtE,MAAM,OAAO,GAAG,MAAM,EAAE,OAA8C,CAAC;IACvE,MAAM,OAAO,GAAG,OAAO,EAAE,OAAqD,CAAC;IAE/E,IAAI,OAAO,EAAE,CAAC;QACZ,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,KAAK,CAAC,IAAI;gBAAE,YAAY,IAAI,KAAK,CAAC,IAAc,CAAC;QACvD,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GAAG,QAAQ,CAAC,UAAgC,CAAC;IAC7D,IAAI,UAAU,KAAK,kBAAkB;QAAE,UAAU,GAAG,IAAI,CAAC;IAEzD,MAAM,KAAK,GAAG,QAAQ,CAAC,KAA4C,CAAC;IACpE,MAAM,WAAW,GAAG,KAAK,EAAE,WAAiC,CAAC;IAC7D,MAAM,YAAY,GAAG,KAAK,EAAE,YAAkC,CAAC;IAE/D,OAAO;QACL,OAAO,EAAE,OAAO;QAChB,SAAS,EAAE,eAAe,CAAC,OAAO,CAAC;QACnC,UAAU,EAAE,UAAU;QACtB,YAAY,EAAE,eAAe,CAAC,YAAY,IAAI,EAAE,CAAC;QACjD,SAAS,EAAE,SAAS;QACpB,WAAW,EAAE,WAAW,IAAI,SAAS;QACrC,YAAY,EAAE,YAAY,IAAI,SAAS;QACvC,UAAU,EAAE,UAAU;QACtB,QAAQ,EAAE,SAAS;QACnB,iBAAiB,EAAE,SAAS;QAC5B,gBAAgB,EAAE,CAAC;QACnB,kBAAkB,EAAE,CAAC;QACrB,eAAe,EAAE,IAAI;QACrB,cAAc,EAAE,EAAE;KACnB,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAC1B,QAAiC,EACjC,OAAe,EACf,UAAkB,EAClB,SAAiB;IAEjB,IAAI,YAAY,GAAG,EAAE,CAAC;IACtB,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,IAAI,WAAW,GAAkB,IAAI,CAAC;IACtC,IAAI,YAAY,GAAkB,IAAI,CAAC;IAEvC,IAAI,CAAC;QACH,IAAI,IAAI,GAA4B,EAAE,CAAC;QACvC,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC;QAC9B,IAAI,OAAO,YAAY,UAAU,EAAE,CAAC;YAClC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;QACvD,CAAC;aAAM,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YACvC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC7B,CAAC;QAED,uBAAuB;QACvB,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;YAC7B,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC3B,KAAK,MAAM,KAAK,IAAI,OAAyC,EAAE,CAAC;oBAC9D,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,IAAI;wBAAE,YAAY,IAAI,KAAK,CAAC,IAAc,CAAC;gBAChF,CAAC;YACH,CAAC;iBAAM,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;gBACvC,YAAY,GAAG,OAAO,CAAC;YACzB,CAAC;QACH,CAAC;QACD,eAAe;aACV,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACtB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAyC,CAAC;YAC/D,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,UAAU;gBAAE,YAAY,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,UAAoB,CAAC;QAC7E,CAAC;QACD,aAAa;aACR,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACzB,YAAY,GAAG,IAAI,CAAC,UAAoB,CAAC;QAC3C,CAAC;QAED,QAAQ;QACR,MAAM,KAAK,GAAG,IAAI,CAAC,KAA4C,CAAC;QAChE,IAAI,KAAK,EAAE,CAAC;YACV,WAAW,GAAG,CAAC,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,WAAW,IAAI,IAAI,CAAkB,CAAC;YACjF,YAAY,GAAG,CAAC,KAAK,CAAC,aAAa,IAAI,KAAK,CAAC,YAAY,IAAI,IAAI,CAAkB,CAAC;QACtF,CAAC;QAED,UAAU;QACV,MAAM,UAAU,GAAG,CAAC,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,UAAU,IAAI,EAAE,CAAW,CAAC;QACzE,IAAI,UAAU,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,gBAAgB,CAAC;YAAE,UAAU,GAAG,IAAI,CAAC;IAC7E,CAAC;IAAC,MAAM,CAAC;QACP,kDAAkD;IACpD,CAAC;IAED,OAAO;QACL,OAAO,EAAE,OAAO;QAChB,SAAS,EAAE,eAAe,CAAC,OAAO,CAAC;QACnC,UAAU,EAAE,UAAU;QACtB,YAAY,EAAE,eAAe,CAAC,YAAY,IAAI,EAAE,CAAC;QACjD,SAAS,EAAE,SAAS;QACpB,WAAW,EAAE,WAAW,IAAI,SAAS;QACrC,YAAY,EAAE,YAAY,IAAI,SAAS;QACvC,UAAU,EAAE,UAAU;QACtB,QAAQ,EAAE,SAAS;QACnB,iBAAiB,EAAE,SAAS;QAC5B,gBAAgB,EAAE,CAAC;QACnB,kBAAkB,EAAE,CAAC;QACrB,eAAe,EAAE,IAAI;QACrB,cAAc,EAAE,EAAE;KACnB,CAAC;AACJ,CAAC"}

package/dist/handoff.d.ts

@@ -0,0 +1,17 @@
+/**
+ * SWT3 AI Witness SDK — Factor Handoff (Local File Export).
+ *
+ * Writes factor data to local JSON files before the clearing engine strips
+ * them from the wire payload. If the write fails, clearing does NOT proceed.
+ *
+ * Spec: SWT3 Factor Handoff Protocol v1.0.0
+ */
+import type { WitnessPayload, InferenceRecord } from "./types.js";
+/**
+ * Write one JSON file per payload to the handoff directory.
+ *
+ * Throws on failure — the caller must NOT proceed with clearing
+ * if this function throws.
+ */
+export declare function writeHandoffFiles(payloads: WitnessPayload[], inference: InferenceRecord, tenantId: string, handoffPath: string): void;
+//# sourceMappingURL=handoff.d.ts.map

package/dist/handoff.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"handoff.d.ts","sourceRoot":"","sources":["../src/handoff.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,OAAO,KAAK,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAoClE;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,cAAc,EAAE,EAC1B,SAAS,EAAE,eAAe,EAC1B,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,MAAM,GAClB,IAAI,CA+BN"}

package/dist/handoff.js

@@ -0,0 +1,82 @@
+/**
+ * SWT3 AI Witness SDK — Factor Handoff (Local File Export).
+ *
+ * Writes factor data to local JSON files before the clearing engine strips
+ * them from the wire payload. If the write fails, clearing does NOT proceed.
+ *
+ * Spec: SWT3 Factor Handoff Protocol v1.0.0
+ */
+import { writeFileSync, mkdirSync, renameSync, unlinkSync, chmodSync } from "node:fs";
+import { join } from "node:path";
+const HANDOFF_VERSION = "1.0.0";
+/**
+ * Write one JSON file per payload to the handoff directory.
+ *
+ * Throws on failure — the caller must NOT proceed with clearing
+ * if this function throws.
+ */
+export function writeHandoffFiles(payloads, inference, tenantId, handoffPath) {
+    mkdirSync(handoffPath, { recursive: true });
+    for (const payload of payloads) {
+        const record = buildHandoffRecord(payload, inference, tenantId);
+        const filename = `${payload.anchor_fingerprint}.json`;
+        const filepath = join(handoffPath, filename);
+        const tmpPath = filepath + ".tmp";
+        try {
+            writeFileSync(tmpPath, JSON.stringify(record, null, 2) + "\n", "utf-8");
+            // Set restrictive permissions (owner read/write only, 0o600)
+            try {
+                chmodSync(tmpPath, 0o600);
+            }
+            catch {
+                // chmod may not be supported on all platforms (e.g., Windows)
+            }
+            // Atomic rename
+            renameSync(tmpPath, filepath);
+        }
+        catch (err) {
+            // Clean up temp file on failure
+            try {
+                unlinkSync(tmpPath);
+            }
+            catch {
+                // ignore cleanup errors
+            }
+            throw err;
+        }
+    }
+}
+function buildHandoffRecord(payload, inference, tenantId) {
+    return {
+        handoff_version: HANDOFF_VERSION,
+        handoff_type: `clearing_level_${payload.clearing_level}`,
+        tenant_id: tenantId,
+        timestamp_iso: new Date(payload.anchor_epoch * 1000).toISOString(),
+        anchor_fingerprint: payload.anchor_fingerprint,
+        anchor_epoch: payload.anchor_epoch,
+        fingerprint_timestamp_ms: payload.fingerprint_timestamp_ms,
+        clearing_level: payload.clearing_level,
+        factors: {
+            procedure_id: payload.procedure_id,
+            factor_a: payload.factor_a,
+            factor_b: payload.factor_b,
+            factor_c: payload.factor_c,
+        },
+        metadata: {
+            ai_model_id: inference.modelId,
+            ai_model_hash: inference.modelHash,
+            ai_prompt_hash: inference.promptHash,
+            ai_response_hash: inference.responseHash,
+            ai_latency_ms: inference.latencyMs,
+            ai_input_tokens: inference.inputTokens,
+            ai_output_tokens: inference.outputTokens,
+            ai_provider: inference.provider,
+            ai_system_fingerprint: inference.systemFingerprint,
+            ai_guardrail_names: inference.guardrailNames ?? [],
+            ai_guardrails_active: inference.guardrailsActive,
+            ai_guardrails_required: inference.guardrailsRequired,
+            ai_guardrail_passed: inference.guardrailPassed,
+        },
+    };
+}
+//# sourceMappingURL=handoff.js.map

package/dist/handoff.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"handoff.js","sourceRoot":"","sources":["../src/handoff.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACtF,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAGjC,MAAM,eAAe,GAAG,OAAO,CAAC;AAkChC;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAC/B,QAA0B,EAC1B,SAA0B,EAC1B,QAAgB,EAChB,WAAmB;IAEnB,SAAS,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE5C,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,kBAAkB,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;QAChE,MAAM,QAAQ,GAAG,GAAG,OAAO,CAAC,kBAAkB,OAAO,CAAC;QACtD,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAC7C,MAAM,OAAO,GAAG,QAAQ,GAAG,MAAM,CAAC;QAElC,IAAI,CAAC;YACH,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;YAExE,6DAA6D;YAC7D,IAAI,CAAC;gBACH,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAC5B,CAAC;YAAC,MAAM,CAAC;gBACP,8DAA8D;YAChE,CAAC;YAED,gBAAgB;YAChB,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAChC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,gCAAgC;YAChC,IAAI,CAAC;gBACH,UAAU,CAAC,OAAO,CAAC,CAAC;YACtB,CAAC;YAAC,MAAM,CAAC;gBACP,wBAAwB;YAC1B,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CACzB,OAAuB,EACvB,SAA0B,EAC1B,QAAgB;IAEhB,OAAO;QACL,eAAe,EAAE,eAAe;QAChC,YAAY,EAAE,kBAAkB,OAAO,CAAC,cAAc,EAAE;QACxD,SAAS,EAAE,QAAQ;QACnB,aAAa,EAAE,IAAI,IAAI,CAAC,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE;QAClE,kBAAkB,EAAE,OAAO,CAAC,kBAAkB;QAC9C,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,wBAAwB,EAAE,OAAO,CAAC,wBAAwB;QAC1D,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,OAAO,EAAE;YACP,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;SAC3B;QACD,QAAQ,EAAE;YACR,WAAW,EAAE,SAAS,CAAC,OAAO;YAC9B,aAAa,EAAE,SAAS,CAAC,SAAS;YAClC,cAAc,EAAE,SAAS,CAAC,UAAU;YACpC,gBAAgB,EAAE,SAAS,CAAC,YAAY;YACxC,aAAa,EAAE,SAAS,CAAC,SAAS;YAClC,eAAe,EAAE,SAAS,CAAC,WAAW;YACtC,gBAAgB,EAAE,SAAS,CAAC,YAAY;YACxC,WAAW,EAAE,SAAS,CAAC,QAAQ;YAC/B,qBAAqB,EAAE,SAAS,CAAC,iBAAiB;YAClD,kBAAkB,EAAE,SAAS,CAAC,cAAc,IAAI,EAAE;YAClD,oBAAoB,EAAE,SAAS,CAAC,gBAAgB;YAChD,sBAAsB,EAAE,SAAS,CAAC,kBAAkB;YACpD,mBAAmB,EAAE,SAAS,CAAC,eAAe;SAC/C;KACF,CAAC;AACJ,CAAC"}

package/dist/types.d.ts

@@ -14,6 +14,8 @@ export interface WitnessConfig {
     guardrailsRequired: number;
     guardrailNames: string[];
     procedures?: string[];
+    factorHandoff?: "file";
+    factorHandoffPath?: string;
 }
 export interface WitnessPayload {
     procedure_id: string;

package/dist/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,MAAM,WAAW,cAAc;IAC7B,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;IACvB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,YAAY,EAAE,MAAM,CAAC;IACrB,wBAAwB,EAAE,MAAM,CAAC;IACjC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,UAAU,CAAC,EAAE;QACX,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;QACtB,kBAAkB,CAAC,EAAE,MAAM,CAAC;KAC7B,CAAC;CACH;AAED,MAAM,WAAW,cAAc;IAC7B,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;IAClC,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,MAAM,CAAC;IACzB,EAAE,EAAE,OAAO,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,OAAO,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,cAAc,EAAE,CAAC;CAC5B;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,MAAM,CAAC;IACzB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,eAAe,EAAE,OAAO,CAAC;IACzB,UAAU,EAAE,OAAO,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,cAAc,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED,mDAAmD;AACnD,eAAO,MAAM,aAAa,aAQxB,CAAC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,cAAc;IAC7B,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;IACvB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,YAAY,EAAE,MAAM,CAAC;IACrB,wBAAwB,EAAE,MAAM,CAAC;IACjC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,UAAU,CAAC,EAAE;QACX,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;QACtB,kBAAkB,CAAC,EAAE,MAAM,CAAC;KAC7B,CAAC;CACH;AAED,MAAM,WAAW,cAAc;IAC7B,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;IAClC,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,MAAM,CAAC;IACzB,EAAE,EAAE,OAAO,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,OAAO,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,cAAc,EAAE,CAAC;CAC5B;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,MAAM,CAAC;IACzB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,eAAe,EAAE,OAAO,CAAC;IACzB,UAAU,EAAE,OAAO,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,cAAc,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED,mDAAmD;AACnD,eAAO,MAAM,aAAa,aAQxB,CAAC"}

package/dist/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AA4EH,mDAAmD;AACnD,MAAM,CAAC,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC;IACnC,UAAU,EAAE,UAAU,EAAE,UAAU;IAClC,UAAU,EAAE,UAAU,EAAE,UAAU;IAClC,UAAU,EAAE,UAAU,EAAE,UAAU;IAClC,WAAW,EAAE,WAAW;IACxB,WAAW,EAAE,WAAW;IACxB,WAAW,EAAE,WAAW;IACxB,WAAW,EAAE,WAAW;CACzB,CAAC,CAAC"}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AA8EH,mDAAmD;AACnD,MAAM,CAAC,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC;IACnC,UAAU,EAAE,UAAU,EAAE,UAAU;IAClC,UAAU,EAAE,UAAU,EAAE,UAAU;IAClC,UAAU,EAAE,UAAU,EAAE,UAAU;IAClC,WAAW,EAAE,WAAW;IACxB,WAAW,EAAE,WAAW;IACxB,WAAW,EAAE,WAAW;IACxB,WAAW,EAAE,WAAW;CACzB,CAAC,CAAC"}

package/dist/witness.d.ts

@@ -16,6 +16,8 @@
  *
  *   // Graceful shutdown
  *   await witness.flush();
+ *
+ * Copyright (c) 2026 Tenable Nova LLC. Apache 2.0. Patent pending.
  */
 import { type VercelOnFinishOptions } from "./adapters/vercel-ai.js";
 import type { WitnessReceipt, InferenceRecord } from "./types.js";
@@ -32,6 +34,8 @@ export interface WitnessOptions {
     guardrailsRequired?: number;
     guardrailNames?: string[];
     procedures?: string[];
+    factorHandoff?: "file";
+    factorHandoffPath?: string;
 }
 export declare class Witness {
     private config;
@@ -51,6 +55,10 @@ export declare class Witness {
     /**
      * Record a witnessed inference. Extracts factors, applies clearing,
      * and enqueues payloads for background flush.
+     *
+     * If factorHandoff is configured, factors are written to the handoff
+     * destination BEFORE clearing proceeds. If the handoff fails, the
+     * payload is NOT transmitted.
      */
     record(inference: InferenceRecord): void;
     /**

package/dist/witness.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"witness.d.ts","sourceRoot":"","sources":["../src/witness.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAOH,OAAO,EAAwB,KAAK,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAC3F,OAAO,KAAK,EAAiC,cAAc,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAEjG,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC9B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,qBAAa,OAAO;IAClB,OAAO,CAAC,MAAM,CAAgB;IAC9B,OAAO,CAAC,MAAM,CAAgB;gBAElB,OAAO,EAAE,cAAc;IAwBnC;;;;;;;;;OASG;IACH,IAAI,CAAC,MAAM,EAAE,OAAO,GAAG,OAAO;IAoB9B;;;OAGG;IACH,MAAM,CAAC,SAAS,EAAE,eAAe,GAAG,IAAI;IAoBxC;;;;;;;;;OASG;IACH,cAAc,CAAC,OAAO,CAAC,EAAE,qBAAqB,GAAG,CAAC,MAAM,EAAE,OAAO,KAAK,IAAI;IAI1E,yCAAyC;IACnC,KAAK,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;IAIxC,qDAAqD;IAC/C,IAAI,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;IAIvC,kCAAkC;IAClC,IAAI,OAAO,IAAI,MAAM,CAEpB;IAED,2CAA2C;IAC3C,IAAI,QAAQ,IAAI,cAAc,EAAE,CAE/B;CACF"}
+{"version":3,"file":"witness.d.ts","sourceRoot":"","sources":["../src/witness.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AASH,OAAO,EAAwB,KAAK,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAC3F,OAAO,KAAK,EAAiC,cAAc,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAEjG,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC9B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,qBAAa,OAAO;IAClB,OAAO,CAAC,MAAM,CAAgB;IAC9B,OAAO,CAAC,MAAM,CAAgB;gBAElB,OAAO,EAAE,cAAc;IAgCnC;;;;;;;;;OASG;IACH,IAAI,CAAC,MAAM,EAAE,OAAO,GAAG,OAAO;IAyB9B;;;;;;;OAOG;IACH,MAAM,CAAC,SAAS,EAAE,eAAe,GAAG,IAAI;IA2BxC;;;;;;;;;OASG;IACH,cAAc,CAAC,OAAO,CAAC,EAAE,qBAAqB,GAAG,CAAC,MAAM,EAAE,OAAO,KAAK,IAAI;IAI1E,yCAAyC;IACnC,KAAK,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;IAIxC,qDAAqD;IAC/C,IAAI,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;IAIvC,kCAAkC;IAClC,IAAI,OAAO,IAAI,MAAM,CAEpB;IAED,2CAA2C;IAC3C,IAAI,QAAQ,IAAI,cAAc,EAAE,CAE/B;CACF"}

package/dist/witness.js

@@ -16,11 +16,15 @@
  *
  *   // Graceful shutdown
  *   await witness.flush();
+ *
+ * Copyright (c) 2026 Tenable Nova LLC. Apache 2.0. Patent pending.
  */
 import { extractPayloads } from "./clearing.js";
 import { WitnessBuffer } from "./buffer.js";
+import { writeHandoffFiles } from "./handoff.js";
 import { wrapOpenAI } from "./adapters/openai.js";
 import { wrapAnthropic } from "./adapters/anthropic.js";
+import { wrapBedrock } from "./adapters/bedrock.js";
 import { createVercelOnFinish } from "./adapters/vercel-ai.js";
 export class Witness {
     config;
@@ -34,6 +38,12 @@ export class Witness {
             throw new Error("apiKey must start with 'axm_'");
         if (!options.tenantId)
             throw new Error("tenantId is required");
+        if (options.factorHandoff && options.factorHandoff !== "file") {
+            throw new Error("factorHandoff must be 'file' (other methods planned for v0.4.0)");
+        }
+        if (options.factorHandoff === "file" && !options.factorHandoffPath) {
+            throw new Error("factorHandoffPath is required when factorHandoff is 'file'");
+        }
         this.config = {
             endpoint: options.endpoint.replace(/\/+$/, ""),
             apiKey: options.apiKey,
@@ -47,6 +57,8 @@ export class Witness {
             guardrailsRequired: options.guardrailsRequired ?? 0,
             guardrailNames: options.guardrailNames ?? [],
             procedures: options.procedures,
+            factorHandoff: options.factorHandoff,
+            factorHandoffPath: options.factorHandoffPath,
         };
         this.buffer = new WitnessBuffer(this.config);
     }
@@ -72,11 +84,19 @@ export class Witness {
         if (name === "Anthropic" || (obj?.messages && !obj?.chat)) {
             return wrapAnthropic(client, this);
         }
-        throw new TypeError(`Unsupported client: ${name || "unknown"}. Supported: OpenAI, Anthropic.`);
+        // AWS Bedrock: has client.send and client.config
+        if (name === "BedrockRuntimeClient" || (obj?.send && obj?.config)) {
+            return wrapBedrock(client, this);
+        }
+        throw new TypeError(`Unsupported client: ${name || "unknown"}. Supported: OpenAI, Anthropic, BedrockRuntimeClient.`);
     }
     /**
      * Record a witnessed inference. Extracts factors, applies clearing,
      * and enqueues payloads for background flush.
+     *
+     * If factorHandoff is configured, factors are written to the handoff
+     * destination BEFORE clearing proceeds. If the handoff fails, the
+     * payload is NOT transmitted.
      */
     record(inference) {
         // Merge guardrail config
@@ -86,6 +106,12 @@ export class Witness {
             inference.guardrailsRequired = this.config.guardrailsRequired;
         }
         const payloads = extractPayloads(inference, this.config.tenantId, this.config.clearingLevel, this.config.latencyThresholdMs, this.config.guardrailsRequired, this.config.procedures);
+        // Factor handoff: write full (uncleared) data to custody destination
+        // BEFORE enqueuing the cleared payload for transmission.
+        // If this fails, we do NOT proceed.
+        if (this.config.factorHandoff === "file" && this.config.factorHandoffPath) {
+            writeHandoffFiles(payloads, inference, this.config.tenantId, this.config.factorHandoffPath);
+        }
         this.buffer.enqueueMany(payloads);
     }
     /**

package/dist/witness.js.map

@@ -1 +1 @@
-{"version":3,"file":"witness.js","sourceRoot":"","sources":["../src/witness.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAGH,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACxD,OAAO,EAAE,oBAAoB,EAA8B,MAAM,yBAAyB,CAAC;AAkB3F,MAAM,OAAO,OAAO;IACV,MAAM,CAAgB;IACtB,MAAM,CAAgB;IAE9B,YAAY,OAAuB;QACjC,IAAI,CAAC,OAAO,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAC/D,IAAI,CAAC,OAAO,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;QAC3D,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QACzF,IAAI,CAAC,OAAO,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAE/D,IAAI,CAAC,MAAM,GAAG;YACZ,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YAC9C,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,aAAa,EAAE,OAAO,CAAC,aAAa,IAAI,CAAC;YACzC,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,EAAE;YACpC,aAAa,EAAE,OAAO,CAAC,aAAa,IAAI,GAAG;YAC3C,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,KAAK;YACjC,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,CAAC;YACnC,kBAAkB,EAAE,OAAO,CAAC,kBAAkB,IAAI,KAAK;YACvD,kBAAkB,EAAE,OAAO,CAAC,kBAAkB,IAAI,CAAC;YACnD,cAAc,EAAE,OAAO,CAAC,cAAc,IAAI,EAAE;YAC5C,UAAU,EAAE,OAAO,CAAC,UAAU;SAC/B,CAAC;QAEF,IAAI,CAAC,MAAM,GAAG,IAAI,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC/C,CAAC;IAED;;;;;;;;;OASG;IACH,IAAI,CAAC,MAAe;QAClB,MAAM,KAAK,GAAG,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QAC5C,MAAM,IAAI,GAAG,KAAK,EAAE,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC;QAC5C,MAAM,GAAG,GAAG,MAAiC,CAAC;QAE9C,sCAAsC;QACtC,IAAI,IAAI,KAAK,QAAQ,IAAI,GAAG,EAAE,IAAI,EAAE,CAAC;YACnC,OAAO,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAClC,CAAC;QAED,iCAAiC;QACjC,IAAI,IAAI,KAAK,WAAW,IAAI,CAAC,GAAG,EAAE,QAAQ,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC;YAC1D,OAAO,aAAa,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACrC,CAAC;QAED,MAAM,IAAI,SAAS,CACjB,uBAAuB,IAAI,IAAI,SAAS,iCAAiC,CAC1E,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,SAA0B;QAC/B,yBAAyB;QACzB,IAAI,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,IAAI,SAAS,CAAC,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnF,SAAS,CAAC,cAAc,GAAG,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC;YACtD,SAAS,CAAC,gBAAgB,GAAG,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC;YAC/D,SAAS,CAAC,kBAAkB,GAAG,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC;QAChE,CAAC;QAED,MAAM,QAAQ,GAAG,eAAe,CAC9B,SAAS,EACT,IAAI,CAAC,MAAM,CAAC,QAAQ,EACpB,IAAI,CAAC,MAAM,CAAC,aAAa,EACzB,IAAI,CAAC,MAAM,CAAC,kBAAkB,EAC9B,IAAI,CAAC,MAAM,CAAC,kBAAkB,EAC9B,IAAI,CAAC,MAAM,CAAC,UAAU,CACvB,CAAC;QAEF,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;IACpC,CAAC;IAED;;;;;;;;;OASG;IACH,cAAc,CAAC,OAA+B;QAC5C,OAAO,oBAAoB,CAAC,IAAI,EAAE,OAAO,CAA8B,CAAC;IAC1E,CAAC;IAED,yCAAyC;IACzC,KAAK,CAAC,KAAK;QACT,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;IAC7B,CAAC;IAED,qDAAqD;IACrD,KAAK,CAAC,IAAI;QACR,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAC5B,CAAC;IAED,kCAAkC;IAClC,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;IAC7B,CAAC;IAED,2CAA2C;IAC3C,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;IAC9B,CAAC;CACF"}
+{"version":3,"file":"witness.js","sourceRoot":"","sources":["../src/witness.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAGH,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACxD,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,oBAAoB,EAA8B,MAAM,yBAAyB,CAAC;AAoB3F,MAAM,OAAO,OAAO;IACV,MAAM,CAAgB;IACtB,MAAM,CAAgB;IAE9B,YAAY,OAAuB;QACjC,IAAI,CAAC,OAAO,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAC/D,IAAI,CAAC,OAAO,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;QAC3D,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QACzF,IAAI,CAAC,OAAO,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAC/D,IAAI,OAAO,CAAC,aAAa,IAAI,OAAO,CAAC,aAAa,KAAK,MAAM,EAAE,CAAC;YAC9D,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;QACrF,CAAC;QACD,IAAI,OAAO,CAAC,aAAa,KAAK,MAAM,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE,CAAC;YACnE,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;QAChF,CAAC;QAED,IAAI,CAAC,MAAM,GAAG;YACZ,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YAC9C,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,aAAa,EAAE,OAAO,CAAC,aAAa,IAAI,CAAC;YACzC,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,EAAE;YACpC,aAAa,EAAE,OAAO,CAAC,aAAa,IAAI,GAAG;YAC3C,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,KAAK;YACjC,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,CAAC;YACnC,kBAAkB,EAAE,OAAO,CAAC,kBAAkB,IAAI,KAAK;YACvD,kBAAkB,EAAE,OAAO,CAAC,kBAAkB,IAAI,CAAC;YACnD,cAAc,EAAE,OAAO,CAAC,cAAc,IAAI,EAAE;YAC5C,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,aAAa,EAAE,OAAO,CAAC,aAAa;YACpC,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;SAC7C,CAAC;QAEF,IAAI,CAAC,MAAM,GAAG,IAAI,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC/C,CAAC;IAED;;;;;;;;;OASG;IACH,IAAI,CAAC,MAAe;QAClB,MAAM,KAAK,GAAG,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QAC5C,MAAM,IAAI,GAAG,KAAK,EAAE,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC;QAC5C,MAAM,GAAG,GAAG,MAAiC,CAAC;QAE9C,sCAAsC;QACtC,IAAI,IAAI,KAAK,QAAQ,IAAI,GAAG,EAAE,IAAI,EAAE,CAAC;YACnC,OAAO,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAClC,CAAC;QAED,iCAAiC;QACjC,IAAI,IAAI,KAAK,WAAW,IAAI,CAAC,GAAG,EAAE,QAAQ,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC;YAC1D,OAAO,aAAa,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACrC,CAAC;QAED,iDAAiD;QACjD,IAAI,IAAI,KAAK,sBAAsB,IAAI,CAAC,GAAG,EAAE,IAAI,IAAK,GAA+B,EAAE,MAAM,CAAC,EAAE,CAAC;YAC/F,OAAO,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACnC,CAAC;QAED,MAAM,IAAI,SAAS,CACjB,uBAAuB,IAAI,IAAI,SAAS,uDAAuD,CAChG,CAAC;IACJ,CAAC;IAED;;;;;;;OAOG;IACH,MAAM,CAAC,SAA0B;QAC/B,yBAAyB;QACzB,IAAI,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,IAAI,SAAS,CAAC,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnF,SAAS,CAAC,cAAc,GAAG,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC;YACtD,SAAS,CAAC,gBAAgB,GAAG,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC;YAC/D,SAAS,CAAC,kBAAkB,GAAG,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC;QAChE,CAAC;QAED,MAAM,QAAQ,GAAG,eAAe,CAC9B,SAAS,EACT,IAAI,CAAC,MAAM,CAAC,QAAQ,EACpB,IAAI,CAAC,MAAM,CAAC,aAAa,EACzB,IAAI,CAAC,MAAM,CAAC,kBAAkB,EAC9B,IAAI,CAAC,MAAM,CAAC,kBAAkB,EAC9B,IAAI,CAAC,MAAM,CAAC,UAAU,CACvB,CAAC;QAEF,qEAAqE;QACrE,yDAAyD;QACzD,oCAAoC;QACpC,IAAI,IAAI,CAAC,MAAM,CAAC,aAAa,KAAK,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC;YAC1E,iBAAiB,CAAC,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;QAC9F,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;IACpC,CAAC;IAED;;;;;;;;;OASG;IACH,cAAc,CAAC,OAA+B;QAC5C,OAAO,oBAAoB,CAAC,IAAI,EAAE,OAAO,CAA8B,CAAC;IAC1E,CAAC;IAED,yCAAyC;IACzC,KAAK,CAAC,KAAK;QACT,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;IAC7B,CAAC;IAED,qDAAqD;IACrD,KAAK,CAAC,IAAI;QACR,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAC5B,CAAC;IAED,kCAAkC;IAClC,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;IAC7B,CAAC;IAED,2CAA2C;IAC3C,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;IAC9B,CAAC;CACF"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@tenova/swt3-ai",
-  "version": "0.1.0",
-  "description": "SWT3 AI Witness SDK — cryptographic attestation for AI inference",
+  "version": "0.2.1",
+  "description": "SWT3 AI Witness SDK: cryptographic attestation for AI inference",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
   "type": "module",
@@ -32,7 +32,7 @@
     "openai",
     "anthropic"
   ],
-  "author": "TeNova <engineering@tenova.io>",
+  "author": "TeNova <engineering@tenovaai.com>",
   "license": "Apache-2.0",
   "repository": {
     "type": "git",
@@ -47,9 +47,9 @@
     }
   },
   "devDependencies": {
-    "typescript": "^5.5.0",
-    "vitest": "^2.0.0",
+    "openai": "^4.70.0",
     "tsx": "^4.0.0",
-    "openai": "^4.70.0"
+    "typescript": "^5.5.0",
+    "vitest": "^4.1.2"
   }
 }