@tenova/swt3-ai 0.3.2 → 0.3.4

package/README.md

@@ -194,6 +194,27 @@ Each inference produces anchors for these checks. Every check maps to a regulati
 | AI-ACC.1 | Resource access was within scope | "Was the access authorized?" | EU AI Act Art. 14 |
 | AI-ID.1 | Agent identity was attested | "Is the agent identified?" | EU AI Act Art. 13 |
 
+### EU AI Act Article Mapping
+
+All 12 SWT3 AI witnessing procedures map to specific EU AI Act obligations:
+
+| Procedure | EU AI Act Article | Obligation | Demo | Production |
+|-----------|-------------------|------------|------|------------|
+| AI-INF.1 | Art. 12(1) | Automatic Logging of Use Periods | ✓ | ✓ |
+| AI-INF.2 | Art. 15(3) | Performance Consistency Monitoring | — | ✓ |
+| AI-INF.3 | Art. 12(1) | Volume & Usage Logging | — | ✓ |
+| AI-MDL.1 | Art. 9(4a) | Model Risk Identification | ✓ | ✓ |
+| AI-MDL.2 | Art. 12(2b) | Version & Lineage Tracking | — | ✓ |
+| AI-MDL.3 | Art. 72(1) | Post-Market Drift Monitoring | — | ✓ |
+| AI-MDL.4 | Art. 15(4) | Feedback Loop Isolation | — | ✓ |
+| AI-GRD.1 | Art. 9(2a) | Risk Mitigation Measures | ✓ | ✓ |
+| AI-GRD.2 | Art. 9(4b) | Content Safety Filtering | — | ✓ |
+| AI-GRD.3 | Art. 10(2f) | PII & Data Protection | — | ✓ |
+| AI-EXPL.1 | Art. 13(1) | Transparency & Explainability | — | ✓ |
+| AI-EXPL.2 | Art. 13(3b) | Confidence Calibration | — | ✓ |
+
+The demo demonstrates 3 procedures using simulated data. All 12 are available in production with real inference data. [See live conformity →](https://sovereign.tenova.io/audit/axm_audit_demo_eu_ai_act_public)
+
 ## How Verdicts Work
 
 Every anchor carries three numbers:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tenova/swt3-ai",
-  "version": "0.3.2",
+  "version": "0.3.4",
   "description": "SWT3 AI Witness SDK: cryptographic attestation for AI inference",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",

package/dist/adapters/anthropic.d.ts

@@ -1,32 +0,0 @@
-/**
- * SWT3 AI Witness SDK — Anthropic Adapter (ES6 Proxy).
- *
- * Wraps the Anthropic client so that `client.messages.create()` is
- * intercepted for witnessing. Two levels deep (simpler than OpenAI).
- *
- * Handles both:
- *   - Non-streaming: Message response object
- *   - Streaming: MessageStream — accumulates content_block_delta events
- *     for hashing, witnesses after stream_message_stop
- *
- * Anthropic response structure:
- *   response.content      → ContentBlock[] (text, tool_use, etc.)
- *   response.model        → string
- *   response.stop_reason  → "end_turn" | "max_tokens" | "stop_sequence" | "tool_use"
- *   response.usage        → { input_tokens, output_tokens }
- *
- * Anthropic streaming:
- *   The SDK returns a MessageStream with:
- *   - Symbol.asyncIterator → yields MessageStreamEvent objects
- *   - .on("message", cb) → fires when complete message is assembled
- *   - .finalMessage() → Promise<Message> (the assembled message)
- *
- *   Events: message_start, content_block_start, content_block_delta,
- *           content_block_stop, message_delta, message_stop
- */
-import type { Witness } from "../witness.js";
-/**
- * Wrap an Anthropic client with an ES6 Proxy for transparent witnessing.
- */
-export declare function wrapAnthropic(client: unknown, witness: Witness): unknown;
-//# sourceMappingURL=anthropic.d.ts.map

package/dist/adapters/anthropic.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"anthropic.d.ts","sourceRoot":"","sources":["../../src/adapters/anthropic.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAIH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAE7C;;GAEG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAYxE"}

package/dist/adapters/anthropic.js

@@ -1,291 +0,0 @@
-/**
- * SWT3 AI Witness SDK — Anthropic Adapter (ES6 Proxy).
- *
- * Wraps the Anthropic client so that `client.messages.create()` is
- * intercepted for witnessing. Two levels deep (simpler than OpenAI).
- *
- * Handles both:
- *   - Non-streaming: Message response object
- *   - Streaming: MessageStream — accumulates content_block_delta events
- *     for hashing, witnesses after stream_message_stop
- *
- * Anthropic response structure:
- *   response.content      → ContentBlock[] (text, tool_use, etc.)
- *   response.model        → string
- *   response.stop_reason  → "end_turn" | "max_tokens" | "stop_sequence" | "tool_use"
- *   response.usage        → { input_tokens, output_tokens }
- *
- * Anthropic streaming:
- *   The SDK returns a MessageStream with:
- *   - Symbol.asyncIterator → yields MessageStreamEvent objects
- *   - .on("message", cb) → fires when complete message is assembled
- *   - .finalMessage() → Promise<Message> (the assembled message)
- *
- *   Events: message_start, content_block_start, content_block_delta,
- *           content_block_stop, message_delta, message_stop
- */
-import { sha256Truncated } from "../fingerprint.js";
-/**
- * Wrap an Anthropic client with an ES6 Proxy for transparent witnessing.
- */
-export function wrapAnthropic(client, witness) {
-    return new Proxy(client, {
-        get(target, prop) {
-            if (typeof prop === "symbol")
-                return Reflect.get(target, prop);
-            const real = Reflect.get(target, prop);
-            if (prop === "messages") {
-                return createMessagesProxy(real, witness);
-            }
-            return real;
-        },
-    });
-}
-function createMessagesProxy(messages, witness) {
-    return new Proxy(messages, {
-        get(target, prop) {
-            if (typeof prop === "symbol")
-                return Reflect.get(target, prop);
-            const real = Reflect.get(target, prop);
-            if (prop === "create") {
-                return createInterceptor(real, witness);
-            }
-            // Anthropic also has messages.stream() — intercept that too
-            if (prop === "stream") {
-                return createStreamInterceptor(real, witness);
-            }
-            return real;
-        },
-    });
-}
-// ── Non-streaming / auto-detect interceptor ─────────────────────────
-function createInterceptor(realMethod, witness) {
-    return function interceptedCreate(...args) {
-        const kwargs = (args[0] ?? {});
-        const messages = kwargs.messages;
-        const system = kwargs.system;
-        const model = kwargs.model ?? "unknown";
-        const isStreaming = kwargs.stream === true;
-        const promptText = extractPromptText(messages, system);
-        const promptHash = sha256Truncated(promptText);
-        // Hash system prompt separately (instruction drift detection)
-        const systemPromptText = extractSystemOnly(system);
-        const systemPromptHash = systemPromptText ? sha256Truncated(systemPromptText) : undefined;
-        const start = performance.now();
-        const result = realMethod.call(this, ...args);
-        if (isStreaming) {
-            // Streaming via create({ stream: true }) — returns a Stream
-            return handleStreaming(result, witness, model, promptHash, start, systemPromptHash);
-        }
-        // Non-streaming — result is Promise<Message>
-        return result.then((response) => {
-            const elapsedMs = Math.round(performance.now() - start);
-            const record = extractRecord(response, model, promptHash, elapsedMs, systemPromptHash);
-            witness.record(record);
-            return response;
-        });
-    };
-}
-// ── Explicit .stream() interceptor ──────────────────────────────────
-function createStreamInterceptor(realMethod, witness) {
-    return function interceptedStream(...args) {
-        const kwargs = (args[0] ?? {});
-        const messages = kwargs.messages;
-        const system = kwargs.system;
-        const model = kwargs.model ?? "unknown";
-        const promptText = extractPromptText(messages, system);
-        const promptHash = sha256Truncated(promptText);
-        const systemPromptText = extractSystemOnly(system);
-        const systemPromptHash = systemPromptText ? sha256Truncated(systemPromptText) : undefined;
-        const start = performance.now();
-        const result = realMethod.call(this, ...args);
-        return handleStreaming(result, witness, model, promptHash, start, systemPromptHash);
-    };
-}
-// ── Streaming Handler ───────────────────────────────────────────────
-async function* streamAccumulator(stream, witness, model, promptHash, startTime, systemPromptHash) {
-    const textParts = [];
-    let actualModel = model;
-    let stopReason = "";
-    let inputTokens;
-    let outputTokens;
-    for await (const event of stream) {
-        // Yield to developer immediately
-        yield event;
-        const e = event;
-        const type = e.type;
-        if (type === "message_start") {
-            const msg = e.message;
-            if (msg?.model)
-                actualModel = msg.model;
-            const usage = msg?.usage;
-            if (usage?.input_tokens)
-                inputTokens = usage.input_tokens;
-        }
-        if (type === "content_block_delta") {
-            const delta = e.delta;
-            if (delta?.type === "text_delta" && delta?.text) {
-                textParts.push(delta.text);
-            }
-        }
-        if (type === "message_delta") {
-            const delta = e.delta;
-            if (delta?.stop_reason)
-                stopReason = delta.stop_reason;
-            const usage = e.usage;
-            if (usage?.output_tokens)
-                outputTokens = usage.output_tokens;
-        }
-    }
-    // Stream complete — witness
-    const elapsedMs = Math.round(performance.now() - startTime);
-    const responseText = textParts.join("");
-    const hasRefusal = !["end_turn", "max_tokens", "stop_sequence", "tool_use"].includes(stopReason);
-    const record = {
-        modelId: actualModel,
-        modelHash: sha256Truncated(actualModel),
-        promptHash,
-        responseHash: sha256Truncated(responseText),
-        latencyMs: elapsedMs,
-        inputTokens,
-        outputTokens,
-        guardrailsActive: 0,
-        guardrailsRequired: 0,
-        guardrailPassed: true,
-        hasRefusal,
-        provider: "anthropic",
-        systemPromptHash,
-        guardrailNames: [],
-    };
-    witness.record(record);
-}
-function handleStreaming(streamResult, witness, model, promptHash, startTime, systemPromptHash) {
-    // Anthropic's stream() returns a MessageStream directly (not a Promise)
-    // But create({ stream: true }) may return a Promise<Stream>
-    if (streamResult && typeof streamResult.then === "function") {
-        return streamResult.then((stream) => wrapAnthropicStream(stream, witness, model, promptHash, startTime, systemPromptHash));
-    }
-    return wrapAnthropicStream(streamResult, witness, model, promptHash, startTime, systemPromptHash);
-}
-function wrapAnthropicStream(stream, witness, model, promptHash, startTime, systemPromptHash) {
-    const s = stream;
-    const gen = streamAccumulator(s, witness, model, promptHash, startTime, systemPromptHash);
-    return new Proxy(s, {
-        get(target, prop) {
-            if (prop === Symbol.asyncIterator) {
-                return () => gen;
-            }
-            const value = Reflect.get(target, prop);
-            if (typeof value === "function") {
-                // Wrap finalMessage() to also witness the complete response
-                if (prop === "finalMessage") {
-                    return async function wrappedFinalMessage() {
-                        const msg = await value.call(target);
-                        // The stream accumulator will have already witnessed via iteration,
-                        // but if someone calls finalMessage() WITHOUT iterating, we need
-                        // to witness from the assembled message.
-                        return msg;
-                    };
-                }
-                return value.bind(target);
-            }
-            return value;
-        },
-    });
-}
-// ── Factor Extraction ──────────────────────────────────────────────
-function extractSystemOnly(system) {
-    if (typeof system === "string" && system)
-        return system;
-    if (Array.isArray(system)) {
-        const parts = [];
-        for (const block of system) {
-            if (typeof block === "object" && block !== null) {
-                const b = block;
-                if (b.type === "text" && typeof b.text === "string") {
-                    parts.push(b.text);
-                }
-            }
-        }
-        return parts.length > 0 ? parts.join("\n") : undefined;
-    }
-    return undefined;
-}
-function extractPromptText(messages, system = "") {
-    const parts = [];
-    // System prompt
-    if (typeof system === "string" && system) {
-        parts.push(system);
-    }
-    else if (Array.isArray(system)) {
-        for (const block of system) {
-            if (typeof block === "object" && block !== null) {
-                const b = block;
-                if (b.type === "text" && typeof b.text === "string") {
-                    parts.push(b.text);
-                }
-            }
-        }
-    }
-    // Messages
-    if (Array.isArray(messages)) {
-        for (const msg of messages) {
-            if (typeof msg === "object" && msg !== null) {
-                const m = msg;
-                const content = m.content;
-                if (typeof content === "string") {
-                    parts.push(content);
-                }
-                else if (Array.isArray(content)) {
-                    for (const block of content) {
-                        if (typeof block === "object" && block !== null) {
-                            const b = block;
-                            if (b.type === "text" && typeof b.text === "string") {
-                                parts.push(b.text);
-                            }
-                        }
-                    }
-                }
-            }
-        }
-    }
-    return parts.join("\n");
-}
-function extractRecord(response, model, promptHash, elapsedMs, systemPromptHash) {
-    const r = response;
-    // Extract text from content blocks
-    let responseText = "";
-    const contentBlocks = r.content;
-    if (Array.isArray(contentBlocks)) {
-        const texts = [];
-        for (const block of contentBlocks) {
-            if (block.type === "text" && typeof block.text === "string") {
-                texts.push(block.text);
-            }
-        }
-        responseText = texts.join("\n");
-    }
-    const stopReason = r.stop_reason ?? "";
-    const hasRefusal = !["end_turn", "max_tokens", "stop_sequence", "tool_use"].includes(stopReason);
-    const usage = r.usage;
-    const inputTokens = usage?.input_tokens;
-    const outputTokens = usage?.output_tokens;
-    const actualModel = r.model ?? model;
-    return {
-        modelId: actualModel,
-        modelHash: sha256Truncated(actualModel),
-        promptHash,
-        responseHash: sha256Truncated(responseText),
-        latencyMs: elapsedMs,
-        inputTokens,
-        outputTokens,
-        guardrailsActive: 0,
-        guardrailsRequired: 0,
-        guardrailPassed: true,
-        hasRefusal,
-        provider: "anthropic",
-        systemPromptHash,
-        guardrailNames: [],
-    };
-}
-//# sourceMappingURL=anthropic.js.map

package/dist/adapters/anthropic.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"anthropic.js","sourceRoot":"","sources":["../../src/adapters/anthropic.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAIpD;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,MAAe,EAAE,OAAgB;IAC7D,OAAO,IAAI,KAAK,CAAC,MAAgB,EAAE;QACjC,GAAG,CAAC,MAAc,EAAE,IAAqB;YACvC,IAAI,OAAO,IAAI,KAAK,QAAQ;gBAAE,OAAO,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAC/D,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAEvC,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;gBACxB,OAAO,mBAAmB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAC5C,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,SAAS,mBAAmB,CAAC,QAAiB,EAAE,OAAgB;IAC9D,OAAO,IAAI,KAAK,CAAC,QAAkB,EAAE;QACnC,GAAG,CAAC,MAAc,EAAE,IAAqB;YACvC,IAAI,OAAO,IAAI,KAAK,QAAQ;gBAAE,OAAO,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAC/D,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAEvC,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtB,OAAO,iBAAiB,CAAC,IAAuC,EAAE,OAAO,CAAC,CAAC;YAC7E,CAAC;YAED,4DAA4D;YAC5D,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtB,OAAO,uBAAuB,CAAC,IAAuC,EAAE,OAAO,CAAC,CAAC;YACnF,CAAC;YAED,OAAO,IAAI,CAAC;QACd,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,uEAAuE;AAEvE,SAAS,iBAAiB,CACxB,UAA2C,EAC3C,OAAgB;IAEhB,OAAO,SAAS,iBAAiB,CAAgB,GAAG,IAAe;QACjE,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAA4B,CAAC;QAC1D,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAqB,CAAC;QAC9C,MAAM,MAAM,GAAG,MAAM,CAAC,MAAiB,CAAC;QACxC,MAAM,KAAK,GAAI,MAAM,CAAC,KAAgB,IAAI,SAAS,CAAC;QACpD,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,KAAK,IAAI,CAAC;QAE3C,MAAM,UAAU,GAAG,iBAAiB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACvD,MAAM,UAAU,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC;QAE/C,8DAA8D;QAC9D,MAAM,gBAAgB,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;QACnD,MAAM,gBAAgB,GAAG,gBAAgB,CAAC,CAAC,CAAC,eAAe,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAE1F,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QAEhC,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,CAAC;QAE9C,IAAI,WAAW,EAAE,CAAC;YAChB,4DAA4D;YAC5D,OAAO,eAAe,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,gBAAgB,CAAC,CAAC;QACtF,CAAC;QAED,6CAA6C;QAC7C,OAAQ,MAA2B,CAAC,IAAI,CAAC,CAAC,QAAiB,EAAE,EAAE;YAC7D,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC;YACxD,MAAM,MAAM,GAAG,aAAa,CAAC,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,gBAAgB,CAAC,CAAC;YACvF,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACvB,OAAO,QAAQ,CAAC;QAClB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC;AAED,uEAAuE;AAEvE,SAAS,uBAAuB,CAC9B,UAA2C,EAC3C,OAAgB;IAEhB,OAAO,SAAS,iBAAiB,CAAgB,GAAG,IAAe;QACjE,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAA4B,CAAC;QAC1D,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAqB,CAAC;QAC9C,MAAM,MAAM,GAAG,MAAM,CAAC,MAAiB,CAAC;QACxC,MAAM,KAAK,GAAI,MAAM,CAAC,KAAgB,IAAI,SAAS,CAAC;QAEpD,MAAM,UAAU,GAAG,iBAAiB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACvD,MAAM,UAAU,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC;QAE/C,MAAM,gBAAgB,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;QACnD,MAAM,gBAAgB,GAAG,gBAAgB,CAAC,CAAC,CAAC,eAAe,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAE1F,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QAEhC,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,CAAC;QAC9C,OAAO,eAAe,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,gBAAgB,CAAC,CAAC;IACtF,CAAC,CAAC;AACJ,CAAC;AAED,uEAAuE;AAEvE,KAAK,SAAS,CAAC,CAAC,iBAAiB,CAC/B,MAA8B,EAC9B,OAAgB,EAChB,KAAa,EACb,UAAkB,EAClB,SAAiB,EACjB,gBAAyB;IAEzB,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,IAAI,UAAU,GAAG,EAAE,CAAC;IACpB,IAAI,WAA+B,CAAC;IACpC,IAAI,YAAgC,CAAC;IAErC,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QACjC,iCAAiC;QACjC,MAAM,KAAK,CAAC;QAEZ,MAAM,CAAC,GAAG,KAAgC,CAAC;QAC3C,MAAM,IAAI,GAAG,CAAC,CAAC,IAAc,CAAC;QAE9B,IAAI,IAAI,KAAK,eAAe,EAAE,CAAC;YAC7B,MAAM,GAAG,GAAG,CAAC,CAAC,OAA8C,CAAC;YAC7D,IAAI,GAAG,EAAE,KAAK;gBAAE,WAAW,GAAG,GAAG,CAAC,KAAe,CAAC;YAClD,MAAM,KAAK,GAAG,GAAG,EAAE,KAA4C,CAAC;YAChE,IAAI,KAAK,EAAE,YAAY;gBAAE,WAAW,GAAG,KAAK,CAAC,YAAsB,CAAC;QACtE,CAAC;QAED,IAAI,IAAI,KAAK,qBAAqB,EAAE,CAAC;YACnC,MAAM,KAAK,GAAG,CAAC,CAAC,KAA4C,CAAC;YAC7D,IAAI,KAAK,EAAE,IAAI,KAAK,YAAY,IAAI,KAAK,EAAE,IAAI,EAAE,CAAC;gBAChD,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,IAAc,CAAC,CAAC;YACvC,CAAC;QACH,CAAC;QAED,IAAI,IAAI,KAAK,eAAe,EAAE,CAAC;YAC7B,MAAM,KAAK,GAAG,CAAC,CAAC,KAA4C,CAAC;YAC7D,IAAI,KAAK,EAAE,WAAW;gBAAE,UAAU,GAAG,KAAK,CAAC,WAAqB,CAAC;YACjE,MAAM,KAAK,GAAG,CAAC,CAAC,KAA4C,CAAC;YAC7D,IAAI,KAAK,EAAE,aAAa;gBAAE,YAAY,GAAG,KAAK,CAAC,aAAuB,CAAC;QACzE,CAAC;IACH,CAAC;IAED,4BAA4B;IAC5B,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,CAAC;IAC5D,MAAM,YAAY,GAAG,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACxC,MAAM,UAAU,GAAG,CAAC,CAAC,UAAU,EAAE,YAAY,EAAE,eAAe,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IAEjG,MAAM,MAAM,GAAoB;QAC9B,OAAO,EAAE,WAAW;QACpB,SAAS,EAAE,eAAe,CAAC,WAAW,CAAC;QACvC,UAAU;QACV,YAAY,EAAE,eAAe,CAAC,YAAY,CAAC;QAC3C,SAAS,EAAE,SAAS;QACpB,WAAW;QACX,YAAY;QACZ,gBAAgB,EAAE,CAAC;QACnB,kBAAkB,EAAE,CAAC;QACrB,eAAe,EAAE,IAAI;QACrB,UAAU;QACV,QAAQ,EAAE,WAAW;QACrB,gBAAgB;QAChB,cAAc,EAAE,EAAE;KACnB,CAAC;IAEF,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AACzB,CAAC;AAED,SAAS,eAAe,CACtB,YAAqB,EACrB,OAAgB,EAChB,KAAa,EACb,UAAkB,EAClB,SAAiB,EACjB,gBAAyB;IAEzB,wEAAwE;IACxE,4DAA4D;IAC5D,IAAI,YAAY,IAAI,OAAQ,YAAiC,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAClF,OAAQ,YAAiC,CAAC,IAAI,CAAC,CAAC,MAAe,EAAE,EAAE,CACjE,mBAAmB,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,gBAAgB,CAAC,CACrF,CAAC;IACJ,CAAC;IACD,OAAO,mBAAmB,CAAC,YAAY,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,gBAAgB,CAAC,CAAC;AACpG,CAAC;AAED,SAAS,mBAAmB,CAC1B,MAAe,EACf,OAAgB,EAChB,KAAa,EACb,UAAkB,EAClB,SAAiB,EACjB,gBAAyB;IAEzB,MAAM,CAAC,GAAG,MAA0C,CAAC;IAErD,MAAM,GAAG,GAAG,iBAAiB,CAC3B,CAAsC,EACtC,OAAO,EACP,KAAK,EACL,UAAU,EACV,SAAS,EACT,gBAAgB,CACjB,CAAC;IAEF,OAAO,IAAI,KAAK,CAAC,CAAC,EAAE;QAClB,GAAG,CAAC,MAAwC,EAAE,IAAqB;YACjE,IAAI,IAAI,KAAK,MAAM,CAAC,aAAa,EAAE,CAAC;gBAClC,OAAO,GAAG,EAAE,CAAC,GAAG,CAAC;YACnB,CAAC;YAED,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YACxC,IAAI,OAAO,KAAK,KAAK,UAAU,EAAE,CAAC;gBAChC,4DAA4D;gBAC5D,IAAI,IAAI,KAAK,cAAc,EAAE,CAAC;oBAC5B,OAAO,KAAK,UAAU,mBAAmB;wBACvC,MAAM,GAAG,GAAG,MAAO,KAAgC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;wBACjE,oEAAoE;wBACpE,iEAAiE;wBACjE,yCAAyC;wBACzC,OAAO,GAAG,CAAC;oBACb,CAAC,CAAC;gBACJ,CAAC;gBACD,OAAQ,KAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC1C,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,sEAAsE;AAEtE,SAAS,iBAAiB,CAAC,MAAe;IACxC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IACxD,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1B,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;gBAChD,MAAM,CAAC,GAAG,KAAgC,CAAC;gBAC3C,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBACpD,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gBACrB,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACzD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAiB,EAAE,SAAkB,EAAE;IAChE,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,gBAAgB;IAChB,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,EAAE,CAAC;QACzC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACrB,CAAC;SAAM,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACjC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;gBAChD,MAAM,CAAC,GAAG,KAAgC,CAAC;gBAC3C,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBACpD,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gBACrB,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,WAAW;IACX,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5B,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;YAC3B,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;gBAC5C,MAAM,CAAC,GAAG,GAA8B,CAAC;gBACzC,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC;gBAC1B,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;oBAChC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACtB,CAAC;qBAAM,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;oBAClC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;wBAC5B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;4BAChD,MAAM,CAAC,GAAG,KAAgC,CAAC;4BAC3C,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gCACpD,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;4BACrB,CAAC;wBACH,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,aAAa,CACpB,QAAiB,EACjB,KAAa,EACb,UAAkB,EAClB,SAAiB,EACjB,gBAAyB;IAEzB,MAAM,CAAC,GAAG,QAAmC,CAAC;IAE9C,mCAAmC;IACnC,IAAI,YAAY,GAAG,EAAE,CAAC;IACtB,MAAM,aAAa,GAAG,CAAC,CAAC,OAAqD,CAAC;IAC9E,IAAI,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;QACjC,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,KAAK,MAAM,KAAK,IAAI,aAAa,EAAE,CAAC;YAClC,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC5D,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;QACD,YAAY,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClC,CAAC;IAED,MAAM,UAAU,GAAI,CAAC,CAAC,WAAsB,IAAI,EAAE,CAAC;IACnD,MAAM,UAAU,GAAG,CAAC,CAAC,UAAU,EAAE,YAAY,EAAE,eAAe,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IAEjG,MAAM,KAAK,GAAG,CAAC,CAAC,KAA4C,CAAC;IAC7D,MAAM,WAAW,GAAG,KAAK,EAAE,YAAkC,CAAC;IAC9D,MAAM,YAAY,GAAG,KAAK,EAAE,aAAmC,CAAC;IAEhE,MAAM,WAAW,GAAI,CAAC,CAAC,KAAgB,IAAI,KAAK,CAAC;IAEjD,OAAO;QACL,OAAO,EAAE,WAAW;QACpB,SAAS,EAAE,eAAe,CAAC,WAAW,CAAC;QACvC,UAAU;QACV,YAAY,EAAE,eAAe,CAAC,YAAY,CAAC;QAC3C,SAAS,EAAE,SAAS;QACpB,WAAW;QACX,YAAY;QACZ,gBAAgB,EAAE,CAAC;QACnB,kBAAkB,EAAE,CAAC;QACrB,eAAe,EAAE,IAAI;QACrB,UAAU;QACV,QAAQ,EAAE,WAAW;QACrB,gBAAgB;QAChB,cAAc,EAAE,EAAE;KACnB,CAAC;AACJ,CAAC"}

package/dist/adapters/bedrock.d.ts

@@ -1,33 +0,0 @@
-/**
- * SWT3 AI Witness SDK — AWS Bedrock Adapter (ES6 Proxy).
- *
- * Wraps the @aws-sdk/client-bedrock-runtime client so that
- * `client.send(new ConverseCommand(...))` and
- * `client.send(new InvokeModelCommand(...))` are intercepted.
- *
- * AWS Bedrock uses the Command pattern:
- *   const response = await client.send(new ConverseCommand({ modelId, messages }));
- *
- * The adapter intercepts `send()` and checks if the command is a
- * ConverseCommand or InvokeModelCommand to extract factors.
- *
- * Copyright (c) 2026 Tenable Nova LLC. Apache 2.0. Patent pending.
- */
-import type { Witness } from "../witness.js";
-/**
- * Wrap a BedrockRuntimeClient with transparent witnessing.
- *
- * Usage:
- *   import { BedrockRuntimeClient, ConverseCommand } from "@aws-sdk/client-bedrock-runtime";
- *   import { Witness } from "@tenova/swt3-ai";
- *
- *   const witness = new Witness({ endpoint, apiKey, tenantId });
- *   const client = witness.wrap(new BedrockRuntimeClient({ region: "us-east-1" }));
- *
- *   const response = await client.send(new ConverseCommand({
- *     modelId: "anthropic.claude-3-5-sonnet-20241022-v2:0",
- *     messages: [{ role: "user", content: [{ text: "Hello" }] }],
- *   }));
- */
-export declare function wrapBedrock(client: unknown, witness: Witness): unknown;
-//# sourceMappingURL=bedrock.d.ts.map

package/dist/adapters/bedrock.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"bedrock.d.ts","sourceRoot":"","sources":["../../src/adapters/bedrock.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAIH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAE7C;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAatE"}

package/dist/adapters/bedrock.js

@@ -1,259 +0,0 @@
-/**
- * SWT3 AI Witness SDK — AWS Bedrock Adapter (ES6 Proxy).
- *
- * Wraps the @aws-sdk/client-bedrock-runtime client so that
- * `client.send(new ConverseCommand(...))` and
- * `client.send(new InvokeModelCommand(...))` are intercepted.
- *
- * AWS Bedrock uses the Command pattern:
- *   const response = await client.send(new ConverseCommand({ modelId, messages }));
- *
- * The adapter intercepts `send()` and checks if the command is a
- * ConverseCommand or InvokeModelCommand to extract factors.
- *
- * Copyright (c) 2026 Tenable Nova LLC. Apache 2.0. Patent pending.
- */
-import { sha256Truncated } from "../fingerprint.js";
-/**
- * Wrap a BedrockRuntimeClient with transparent witnessing.
- *
- * Usage:
- *   import { BedrockRuntimeClient, ConverseCommand } from "@aws-sdk/client-bedrock-runtime";
- *   import { Witness } from "@tenova/swt3-ai";
- *
- *   const witness = new Witness({ endpoint, apiKey, tenantId });
- *   const client = witness.wrap(new BedrockRuntimeClient({ region: "us-east-1" }));
- *
- *   const response = await client.send(new ConverseCommand({
- *     modelId: "anthropic.claude-3-5-sonnet-20241022-v2:0",
- *     messages: [{ role: "user", content: [{ text: "Hello" }] }],
- *   }));
- */
-export function wrapBedrock(client, witness) {
-    return new Proxy(client, {
-        get(target, prop) {
-            if (typeof prop === "symbol")
-                return Reflect.get(target, prop);
-            const real = Reflect.get(target, prop);
-            if (prop === "send" && typeof real === "function") {
-                return createSendInterceptor(real, witness, target);
-            }
-            return real;
-        },
-    });
-}
-function createSendInterceptor(realSend, witness, thisArg) {
-    return async function interceptedSend(...args) {
-        const command = args[0];
-        if (!command)
-            return realSend.call(thisArg, ...args);
-        // Detect command type by constructor name
-        const commandName = command.constructor?.name ?? "";
-        if (commandName === "ConverseCommand") {
-            return handleConverse(realSend, thisArg, command, witness, args);
-        }
-        if (commandName === "InvokeModelCommand") {
-            return handleInvokeModel(realSend, thisArg, command, witness, args);
-        }
-        // Not a command we intercept — pass through
-        return realSend.call(thisArg, ...args);
-    };
-}
-// ── Converse Command Handler ──────────────────────────────────────
-async function handleConverse(realSend, thisArg, command, witness, args) {
-    const input = command.input ?? command;
-    const modelId = input.modelId ?? "unknown";
-    const messages = input.messages ?? [];
-    const promptText = extractConversePrompt(messages);
-    const promptHash = sha256Truncated(promptText);
-    const start = performance.now();
-    const response = await realSend.call(thisArg, ...args);
-    const elapsedMs = Math.round(performance.now() - start);
-    const resp = response;
-    const record = extractConverseRecord(resp, modelId, promptHash, elapsedMs);
-    witness.record(record);
-    return response;
-}
-// ── InvokeModel Command Handler ──────────────────────────────────
-async function handleInvokeModel(realSend, thisArg, command, witness, args) {
-    const input = command.input ?? command;
-    const modelId = input.modelId ?? "unknown";
-    // Parse the body to get prompt
-    let body = {};
-    const rawBody = input.body;
-    if (typeof rawBody === "string") {
-        try {
-            body = JSON.parse(rawBody);
-        }
-        catch { /* empty */ }
-    }
-    else if (rawBody instanceof Uint8Array) {
-        try {
-            body = JSON.parse(new TextDecoder().decode(rawBody));
-        }
-        catch { /* empty */ }
-    }
-    const promptText = extractInvokePrompt(body, modelId);
-    const promptHash = sha256Truncated(promptText);
-    const start = performance.now();
-    const response = await realSend.call(thisArg, ...args);
-    const elapsedMs = Math.round(performance.now() - start);
-    const resp = response;
-    const record = extractInvokeRecord(resp, modelId, promptHash, elapsedMs);
-    witness.record(record);
-    return response;
-}
-// ── Prompt Extraction ─────────────────────────────────────────────
-function extractConversePrompt(messages) {
-    const parts = [];
-    for (const msg of messages) {
-        const m = msg;
-        const content = m.content;
-        if (Array.isArray(content)) {
-            for (const block of content) {
-                const b = block;
-                if (b.text)
-                    parts.push(b.text);
-            }
-        }
-        else if (typeof content === "string") {
-            parts.push(content);
-        }
-    }
-    return parts.join("\n");
-}
-function extractInvokePrompt(body, modelId) {
-    // Anthropic on Bedrock
-    const messages = body.messages;
-    if (messages?.length) {
-        const parts = [];
-        for (const msg of messages) {
-            const m = msg;
-            const content = m.content;
-            if (typeof content === "string") {
-                parts.push(content);
-            }
-            else if (Array.isArray(content)) {
-                for (const block of content) {
-                    const b = block;
-                    if (b.type === "text" && b.text)
-                        parts.push(b.text);
-                }
-            }
-        }
-        if (parts.length)
-            return parts.join("\n");
-    }
-    // Amazon Titan
-    if (body.inputText)
-        return body.inputText;
-    // Meta Llama
-    if (body.prompt)
-        return body.prompt;
-    return JSON.stringify(body);
-}
-// ── Record Extraction ─────────────────────────────────────────────
-function extractConverseRecord(response, modelId, promptHash, elapsedMs) {
-    let responseText = "";
-    let hasRefusal = false;
-    const output = response.output;
-    const message = output?.message;
-    const content = message?.content;
-    if (content) {
-        for (const block of content) {
-            if (block.text)
-                responseText += block.text;
-        }
-    }
-    const stopReason = response.stopReason;
-    if (stopReason === "content_filtered")
-        hasRefusal = true;
-    const usage = response.usage;
-    const inputTokens = usage?.inputTokens;
-    const outputTokens = usage?.outputTokens;
-    return {
-        modelId: modelId,
-        modelHash: sha256Truncated(modelId),
-        promptHash: promptHash,
-        responseHash: sha256Truncated(responseText || ""),
-        latencyMs: elapsedMs,
-        inputTokens: inputTokens ?? undefined,
-        outputTokens: outputTokens ?? undefined,
-        hasRefusal: hasRefusal,
-        provider: "bedrock",
-        systemFingerprint: undefined,
-        guardrailsActive: 0,
-        guardrailsRequired: 0,
-        guardrailPassed: true,
-        guardrailNames: [],
-    };
-}
-function extractInvokeRecord(response, modelId, promptHash, elapsedMs) {
-    let responseText = "";
-    let hasRefusal = false;
-    let inputTokens = null;
-    let outputTokens = null;
-    try {
-        let body = {};
-        const rawBody = response.body;
-        if (rawBody instanceof Uint8Array) {
-            body = JSON.parse(new TextDecoder().decode(rawBody));
-        }
-        else if (typeof rawBody === "string") {
-            body = JSON.parse(rawBody);
-        }
-        // Anthropic on Bedrock
-        if (body.content) {
-            const content = body.content;
-            if (Array.isArray(content)) {
-                for (const block of content) {
-                    if (block.type === "text" && block.text)
-                        responseText += block.text;
-                }
-            }
-            else if (typeof content === "string") {
-                responseText = content;
-            }
-        }
-        // Amazon Titan
-        else if (body.results) {
-            const results = body.results;
-            if (results[0]?.outputText)
-                responseText = results[0].outputText;
-        }
-        // Meta Llama
-        else if (body.generation) {
-            responseText = body.generation;
-        }
-        // Usage
-        const usage = body.usage;
-        if (usage) {
-            inputTokens = (usage.input_tokens ?? usage.inputTokens ?? null);
-            outputTokens = (usage.output_tokens ?? usage.outputTokens ?? null);
-        }
-        // Refusal
-        const stopReason = (body.stop_reason ?? body.stopReason ?? "");
-        if (stopReason.toLowerCase().includes("content_filter"))
-            hasRefusal = true;
-    }
-    catch {
-        // Parse failure — still witness with what we have
-    }
-    return {
-        modelId: modelId,
-        modelHash: sha256Truncated(modelId),
-        promptHash: promptHash,
-        responseHash: sha256Truncated(responseText || ""),
-        latencyMs: elapsedMs,
-        inputTokens: inputTokens ?? undefined,
-        outputTokens: outputTokens ?? undefined,
-        hasRefusal: hasRefusal,
-        provider: "bedrock",
-        systemFingerprint: undefined,
-        guardrailsActive: 0,
-        guardrailsRequired: 0,
-        guardrailPassed: true,
-        guardrailNames: [],
-    };
-}
-//# sourceMappingURL=bedrock.js.map