@tenova/swt3-ai 0.3.2 → 0.3.4

package/dist/types.d.ts

@@ -1,96 +0,0 @@
-/**
- * SWT3 AI Witness SDK — Type definitions.
- */
-export interface WitnessConfig {
-    endpoint: string;
-    apiKey: string;
-    tenantId: string;
-    clearingLevel: 0 | 1 | 2 | 3;
-    bufferSize: number;
-    flushInterval: number;
-    timeout: number;
-    maxRetries: number;
-    latencyThresholdMs: number;
-    guardrailsRequired: number;
-    guardrailNames: string[];
-    procedures?: string[];
-    factorHandoff?: "file";
-    factorHandoffPath?: string;
-    agentId?: string;
-    signingKey?: string;
-    cycleId?: string;
-}
-export interface WitnessPayload {
-    procedure_id: string;
-    factor_a: number;
-    factor_b: number;
-    factor_c: number;
-    clearing_level: number;
-    anchor_fingerprint: string;
-    anchor_epoch: number;
-    fingerprint_timestamp_ms: number;
-    ai_model_id?: string;
-    ai_prompt_hash?: string;
-    ai_response_hash?: string;
-    ai_system_prompt_hash?: string;
-    ai_latency_ms?: number;
-    ai_input_tokens?: number;
-    ai_output_tokens?: number;
-    ai_context?: {
-        provider?: string;
-        guardrails?: string[];
-        system_fingerprint?: string;
-        tool_name?: string;
-        tool_call_id?: string;
-        access_target?: string;
-        access_scope?: string;
-        access_granted?: boolean;
-        cycle_id?: string;
-    };
-    agent_id?: string;
-    cycle_id?: string;
-    payload_signature?: string;
-}
-export interface WitnessReceipt {
-    procedure_id: string;
-    verdict: "PASS" | "FAIL" | string;
-    swt3_anchor: string;
-    clearing_level: number;
-    witnessed_at: string;
-    verification_url: string;
-    ok: boolean;
-    error?: string;
-}
-export interface BatchResponse {
-    ok: boolean;
-    tenant_id: string;
-    total: number;
-    accepted: number;
-    rejected: number;
-    receipts: WitnessReceipt[];
-}
-export interface InferenceRecord {
-    modelId: string;
-    modelHash: string;
-    promptHash: string;
-    responseHash: string;
-    latencyMs: number;
-    inputTokens?: number;
-    outputTokens?: number;
-    guardrailsActive: number;
-    guardrailsRequired: number;
-    guardrailPassed: boolean;
-    hasRefusal: boolean;
-    provider: string;
-    systemFingerprint?: string;
-    systemPromptHash?: string;
-    guardrailNames: string[];
-    toolName?: string;
-    toolCallId?: string;
-    accessTarget?: string;
-    accessGranted?: boolean;
-    accessScope?: string;
-}
-/** Valid AI procedure IDs from SWT3 Spec v1.2.0 */
-export declare const AI_PROCEDURES: Set<string>;
-//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,cAAc;IAC7B,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;IACvB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,YAAY,EAAE,MAAM,CAAC;IACrB,wBAAwB,EAAE,MAAM,CAAC;IACjC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,UAAU,CAAC,EAAE;QACX,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;QACtB,kBAAkB,CAAC,EAAE,MAAM,CAAC;QAC5B,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,cAAc,CAAC,EAAE,OAAO,CAAC;QACzB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;IACF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,cAAc;IAC7B,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;IAClC,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,MAAM,CAAC;IACzB,EAAE,EAAE,OAAO,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,OAAO,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,cAAc,EAAE,CAAC;CAC5B;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,MAAM,CAAC;IACzB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,eAAe,EAAE,OAAO,CAAC;IACzB,UAAU,EAAE,OAAO,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,mDAAmD;AACnD,eAAO,MAAM,aAAa,aAWxB,CAAC"}

package/dist/types.js

@@ -1,17 +0,0 @@
-/**
- * SWT3 AI Witness SDK — Type definitions.
- */
-/** Valid AI procedure IDs from SWT3 Spec v1.2.0 */
-export const AI_PROCEDURES = new Set([
-    "AI-INF.1", "AI-INF.2", "AI-INF.3",
-    "AI-MDL.1", "AI-MDL.2", "AI-MDL.3",
-    "AI-GRD.1", "AI-GRD.2", "AI-GRD.3",
-    "AI-FAIR.1", "AI-FAIR.2",
-    "AI-DATA.1", "AI-DATA.2",
-    "AI-HITL.1", "AI-HITL.2",
-    "AI-EXPL.1", "AI-EXPL.2",
-    "AI-TOOL.1",
-    "AI-ID.1",
-    "AI-ACC.1",
-]);
-//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAiGH,mDAAmD;AACnD,MAAM,CAAC,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC;IACnC,UAAU,EAAE,UAAU,EAAE,UAAU;IAClC,UAAU,EAAE,UAAU,EAAE,UAAU;IAClC,UAAU,EAAE,UAAU,EAAE,UAAU;IAClC,WAAW,EAAE,WAAW;IACxB,WAAW,EAAE,WAAW;IACxB,WAAW,EAAE,WAAW;IACxB,WAAW,EAAE,WAAW;IACxB,WAAW;IACX,SAAS;IACT,UAAU;CACX,CAAC,CAAC"}

package/dist/witness.d.ts

@@ -1,114 +0,0 @@
-/**
- * SWT3 AI Witness SDK — Core Witness class.
- *
- * Usage:
- *   import { Witness } from "@tenova/swt3-ai";
- *   import OpenAI from "openai";
- *
- *   const witness = new Witness({
- *     endpoint: "https://sovereign.tenova.io",
- *     apiKey: "axm_live_...",
- *     tenantId: "YOUR_TENANT_ID",
- *   });
- *
- *   const client = witness.wrap(new OpenAI()) as OpenAI;
- *   const response = await client.chat.completions.create({ ... });
- *
- *   // Graceful shutdown
- *   await witness.flush();
- *
- * Copyright (c) 2026 Tenable Nova LLC. Apache 2.0. Patent pending.
- */
-import { type VercelOnFinishOptions } from "./adapters/vercel-ai.js";
-import type { WitnessReceipt, InferenceRecord } from "./types.js";
-export interface WitnessOptions {
-    endpoint: string;
-    apiKey: string;
-    tenantId: string;
-    clearingLevel?: 0 | 1 | 2 | 3;
-    bufferSize?: number;
-    flushInterval?: number;
-    timeout?: number;
-    maxRetries?: number;
-    latencyThresholdMs?: number;
-    guardrailsRequired?: number;
-    guardrailNames?: string[];
-    procedures?: string[];
-    factorHandoff?: "file";
-    factorHandoffPath?: string;
-    agentId?: string;
-    signingKey?: string;
-    cycleId?: string;
-}
-export declare class Witness {
-    private config;
-    private buffer;
-    private handoffWarned;
-    constructor(options: WitnessOptions);
-    /**
-     * Wrap an AI client with transparent witnessing.
-     *
-     * Supported: OpenAI, Anthropic
-     * Returns a proxy that behaves identically to the original client.
-     *
-     * Usage:
-     *   const client = witness.wrap(new OpenAI()) as OpenAI;
-     *   const client = witness.wrap(new Anthropic()) as Anthropic;
-     */
-    wrap(client: unknown): unknown;
-    /**
-     * Wrap a function as a witnessed tool call (AI-TOOL.1).
-     *
-     * Usage:
-     *   const search = witness.wrapTool(searchDatabase, "search_db");
-     *   const result = await search("SELECT ...");
-     *
-     * Each call mints an AI-TOOL.1 anchor with:
-     *   factor_a = 1 (tool was called)
-     *   factor_b = latency_ms
-     *   factor_c = 1 if succeeded, 0 if exception raised
-     */
-    wrapTool<T extends (...args: any[]) => any>(fn: T, toolName?: string): T;
-    /**
-     * Wrap a function as a witnessed access attempt (AI-ACC.1).
-     *
-     * Usage:
-     *   const queryDb = witness.wrapAccess(dbQuery, "prod-database", "read-only analytics");
-     *   const result = await queryDb("SELECT ...");
-     *
-     * Each call mints an AI-ACC.1 anchor with:
-     *   factor_a = 1 (access attempt occurred)
-     *   factor_b = 1 if within declared scope (or no scope set), 0 if out of scope
-     *   factor_c = 1 if access granted, 0 if denied/failed
-     */
-    wrapAccess<T extends (...args: any[]) => any>(fn: T, resourceName?: string, scope?: string): T;
-    /**
-     * Record a witnessed inference. Extracts factors, applies clearing,
-     * and enqueues payloads for background flush.
-     *
-     * If factorHandoff is configured, factors are written to the handoff
-     * destination BEFORE clearing proceeds. If the handoff fails, the
-     * payload is NOT transmitted.
-     */
-    record(inference: InferenceRecord): void;
-    /**
-     * Create a Vercel AI SDK `onFinish` callback for streamText / generateText.
-     *
-     * Usage:
-     *   const result = await streamText({
-     *     model: openai("gpt-4o"),
-     *     prompt: myPrompt,
-     *     onFinish: witness.vercelOnFinish({ promptText: myPrompt }),
-     *   });
-     */
-    vercelOnFinish(options?: VercelOnFinishOptions): (result: unknown) => void;
-    /** Force-flush all buffered payloads. */
-    flush(): Promise<WitnessReceipt[]>;
-    /** Stop the witness and flush remaining payloads. */
-    stop(): Promise<WitnessReceipt[]>;
-    /** Number of payloads waiting. */
-    get pending(): number;
-    /** All receipts from completed flushes. */
-    get receipts(): WitnessReceipt[];
-}
-//# sourceMappingURL=witness.d.ts.map

package/dist/witness.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"witness.d.ts","sourceRoot":"","sources":["../src/witness.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAUH,OAAO,EAAwB,KAAK,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAC3F,OAAO,KAAK,EAAiC,cAAc,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAEjG,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC9B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,qBAAa,OAAO;IAClB,OAAO,CAAC,MAAM,CAAgB;IAC9B,OAAO,CAAC,MAAM,CAAgB;IAC9B,OAAO,CAAC,aAAa,CAAS;gBAElB,OAAO,EAAE,cAAc;IAmCnC;;;;;;;;;OASG;IACH,IAAI,CAAC,MAAM,EAAE,OAAO,GAAG,OAAO;IAyB9B;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,CAAC,SAAS,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,GAAG,EAAE,EAAE,EAAE,CAAC,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,CAAC;IAiExE;;;;;;;;;;;OAWG;IACH,UAAU,CAAC,CAAC,SAAS,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,GAAG,EAC1C,EAAE,EAAE,CAAC,EACL,YAAY,CAAC,EAAE,MAAM,EACrB,KAAK,CAAC,EAAE,MAAM,GACb,CAAC;IAiEJ;;;;;;;OAOG;IACH,MAAM,CAAC,SAAS,EAAE,eAAe,GAAG,IAAI;IAsCxC;;;;;;;;;OASG;IACH,cAAc,CAAC,OAAO,CAAC,EAAE,qBAAqB,GAAG,CAAC,MAAM,EAAE,OAAO,KAAK,IAAI;IAI1E,yCAAyC;IACnC,KAAK,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;IAIxC,qDAAqD;IAC/C,IAAI,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;IAIvC,kCAAkC;IAClC,IAAI,OAAO,IAAI,MAAM,CAEpB;IAED,2CAA2C;IAC3C,IAAI,QAAQ,IAAI,cAAc,EAAE,CAE/B;CACF"}

package/dist/witness.js

@@ -1,291 +0,0 @@
-/**
- * SWT3 AI Witness SDK — Core Witness class.
- *
- * Usage:
- *   import { Witness } from "@tenova/swt3-ai";
- *   import OpenAI from "openai";
- *
- *   const witness = new Witness({
- *     endpoint: "https://sovereign.tenova.io",
- *     apiKey: "axm_live_...",
- *     tenantId: "YOUR_TENANT_ID",
- *   });
- *
- *   const client = witness.wrap(new OpenAI()) as OpenAI;
- *   const response = await client.chat.completions.create({ ... });
- *
- *   // Graceful shutdown
- *   await witness.flush();
- *
- * Copyright (c) 2026 Tenable Nova LLC. Apache 2.0. Patent pending.
- */
-import { randomUUID } from "node:crypto";
-import { sha256Truncated } from "./fingerprint.js";
-import { extractPayloads } from "./clearing.js";
-import { WitnessBuffer } from "./buffer.js";
-import { writeHandoffFiles } from "./handoff.js";
-import { wrapOpenAI } from "./adapters/openai.js";
-import { wrapAnthropic } from "./adapters/anthropic.js";
-import { wrapBedrock } from "./adapters/bedrock.js";
-import { createVercelOnFinish } from "./adapters/vercel-ai.js";
-export class Witness {
-    config;
-    buffer;
-    handoffWarned = false;
-    constructor(options) {
-        if (!options.endpoint)
-            throw new Error("endpoint is required");
-        if (!options.apiKey)
-            throw new Error("apiKey is required");
-        if (!options.apiKey.startsWith("axm_"))
-            throw new Error("apiKey must start with 'axm_'");
-        if (!options.tenantId)
-            throw new Error("tenantId is required");
-        if (options.factorHandoff && options.factorHandoff !== "file") {
-            throw new Error("factorHandoff must be 'file' (other methods planned for v0.4.0)");
-        }
-        if (options.factorHandoff === "file" && !options.factorHandoffPath) {
-            throw new Error("factorHandoffPath is required when factorHandoff is 'file'");
-        }
-        this.config = {
-            endpoint: options.endpoint.replace(/\/+$/, ""),
-            apiKey: options.apiKey,
-            tenantId: options.tenantId,
-            clearingLevel: options.clearingLevel ?? 1,
-            bufferSize: options.bufferSize ?? 10,
-            flushInterval: options.flushInterval ?? 5.0,
-            timeout: options.timeout ?? 10000,
-            maxRetries: options.maxRetries ?? 3,
-            latencyThresholdMs: options.latencyThresholdMs ?? 30000,
-            guardrailsRequired: options.guardrailsRequired ?? 0,
-            guardrailNames: options.guardrailNames ?? [],
-            procedures: options.procedures,
-            factorHandoff: options.factorHandoff,
-            factorHandoffPath: options.factorHandoffPath,
-            agentId: options.agentId,
-            signingKey: options.signingKey,
-            cycleId: options.cycleId,
-        };
-        this.buffer = new WitnessBuffer(this.config);
-    }
-    /**
-     * Wrap an AI client with transparent witnessing.
-     *
-     * Supported: OpenAI, Anthropic
-     * Returns a proxy that behaves identically to the original client.
-     *
-     * Usage:
-     *   const client = witness.wrap(new OpenAI()) as OpenAI;
-     *   const client = witness.wrap(new Anthropic()) as Anthropic;
-     */
-    wrap(client) {
-        const proto = Object.getPrototypeOf(client);
-        const name = proto?.constructor?.name ?? "";
-        const obj = client;
-        // OpenAI: has client.chat.completions
-        if (name === "OpenAI" || obj?.chat) {
-            return wrapOpenAI(client, this);
-        }
-        // Anthropic: has client.messages
-        if (name === "Anthropic" || (obj?.messages && !obj?.chat)) {
-            return wrapAnthropic(client, this);
-        }
-        // AWS Bedrock: has client.send and client.config
-        if (name === "BedrockRuntimeClient" || (obj?.send && obj?.config)) {
-            return wrapBedrock(client, this);
-        }
-        throw new TypeError(`Unsupported client: ${name || "unknown"}. Supported: OpenAI, Anthropic, BedrockRuntimeClient.`);
-    }
-    /**
-     * Wrap a function as a witnessed tool call (AI-TOOL.1).
-     *
-     * Usage:
-     *   const search = witness.wrapTool(searchDatabase, "search_db");
-     *   const result = await search("SELECT ...");
-     *
-     * Each call mints an AI-TOOL.1 anchor with:
-     *   factor_a = 1 (tool was called)
-     *   factor_b = latency_ms
-     *   factor_c = 1 if succeeded, 0 if exception raised
-     */
-    wrapTool(fn, toolName) {
-        const name = toolName ?? fn.name ?? "anonymous";
-        const self = this;
-        const wrapper = function (...args) {
-            const callId = randomUUID().replace(/-/g, "").slice(0, 12);
-            const start = performance.now();
-            let succeeded = true;
-            let result;
-            const finish = () => {
-                const elapsedMs = Math.round(performance.now() - start);
-                const inputHash = sha256Truncated(JSON.stringify(args));
-                const outputHash = sha256Truncated(succeeded ? JSON.stringify(result) : "ERROR");
-                const record = {
-                    modelId: name,
-                    modelHash: sha256Truncated(name),
-                    promptHash: inputHash,
-                    responseHash: outputHash,
-                    latencyMs: elapsedMs,
-                    guardrailsActive: 0,
-                    guardrailsRequired: 0,
-                    guardrailPassed: true,
-                    hasRefusal: !succeeded,
-                    provider: "tool",
-                    guardrailNames: [],
-                    toolName: name,
-                    toolCallId: callId,
-                };
-                self.record(record);
-            };
-            try {
-                result = fn.apply(this, args);
-            }
-            catch (err) {
-                succeeded = false;
-                finish();
-                throw err;
-            }
-            // Handle async functions (Promise detection)
-            if (result && typeof result.then === "function") {
-                return result.then((v) => {
-                    result = v;
-                    finish();
-                    return v;
-                }, (err) => {
-                    succeeded = false;
-                    finish();
-                    throw err;
-                });
-            }
-            finish();
-            return result;
-        };
-        return wrapper;
-    }
-    /**
-     * Wrap a function as a witnessed access attempt (AI-ACC.1).
-     *
-     * Usage:
-     *   const queryDb = witness.wrapAccess(dbQuery, "prod-database", "read-only analytics");
-     *   const result = await queryDb("SELECT ...");
-     *
-     * Each call mints an AI-ACC.1 anchor with:
-     *   factor_a = 1 (access attempt occurred)
-     *   factor_b = 1 if within declared scope (or no scope set), 0 if out of scope
-     *   factor_c = 1 if access granted, 0 if denied/failed
-     */
-    wrapAccess(fn, resourceName, scope) {
-        const name = resourceName ?? fn.name ?? "unknown-resource";
-        const self = this;
-        const wrapper = function (...args) {
-            const start = performance.now();
-            let granted = true;
-            let result;
-            const finish = () => {
-                const elapsedMs = Math.round(performance.now() - start);
-                const inputHash = sha256Truncated(JSON.stringify(args));
-                const outputHash = sha256Truncated(granted ? JSON.stringify(result) : "ACCESS_DENIED");
-                const record = {
-                    modelId: name,
-                    modelHash: sha256Truncated(name),
-                    promptHash: inputHash,
-                    responseHash: outputHash,
-                    latencyMs: elapsedMs,
-                    guardrailsActive: 0,
-                    guardrailsRequired: 0,
-                    guardrailPassed: true,
-                    hasRefusal: !granted,
-                    provider: "access",
-                    guardrailNames: [],
-                    accessTarget: name,
-                    accessGranted: granted,
-                    accessScope: scope,
-                };
-                self.record(record);
-            };
-            try {
-                result = fn.apply(this, args);
-            }
-            catch (err) {
-                granted = false;
-                finish();
-                throw err;
-            }
-            // Handle async functions (Promise detection)
-            if (result && typeof result.then === "function") {
-                return result.then((v) => {
-                    result = v;
-                    finish();
-                    return v;
-                }, (err) => {
-                    granted = false;
-                    finish();
-                    throw err;
-                });
-            }
-            finish();
-            return result;
-        };
-        return wrapper;
-    }
-    /**
-     * Record a witnessed inference. Extracts factors, applies clearing,
-     * and enqueues payloads for background flush.
-     *
-     * If factorHandoff is configured, factors are written to the handoff
-     * destination BEFORE clearing proceeds. If the handoff fails, the
-     * payload is NOT transmitted.
-     */
-    record(inference) {
-        // Merge guardrail config
-        if (this.config.guardrailNames.length > 0 && inference.guardrailNames.length === 0) {
-            inference.guardrailNames = this.config.guardrailNames;
-            inference.guardrailsActive = this.config.guardrailNames.length;
-            inference.guardrailsRequired = this.config.guardrailsRequired;
-        }
-        const payloads = extractPayloads(inference, this.config.tenantId, this.config.clearingLevel, this.config.latencyThresholdMs, this.config.guardrailsRequired, this.config.procedures, this.config.agentId, this.config.signingKey, this.config.cycleId);
-        // Factor handoff: write full (uncleared) data to custody destination
-        // BEFORE enqueuing the cleared payload for transmission.
-        // If this fails, we do NOT proceed.
-        if (this.config.factorHandoff === "file" && this.config.factorHandoffPath) {
-            writeHandoffFiles(payloads, inference, this.config.tenantId, this.config.factorHandoffPath);
-            if (!this.handoffWarned) {
-                this.handoffWarned = true;
-                console.info(`\n  [SWT3] ${payloads.length} anchors saved locally to ${this.config.factorHandoffPath}` +
-                    `\n  [SWT3] \u26a0 Local anchors won\u2019t survive a compliance audit.` +
-                    `\n  [SWT3] Connect to Axiom Engine \u2192 https://sovereign.tenova.io/signup?ref=sdk (free)\n`);
-            }
-        }
-        this.buffer.enqueueMany(payloads);
-    }
-    /**
-     * Create a Vercel AI SDK `onFinish` callback for streamText / generateText.
-     *
-     * Usage:
-     *   const result = await streamText({
-     *     model: openai("gpt-4o"),
-     *     prompt: myPrompt,
-     *     onFinish: witness.vercelOnFinish({ promptText: myPrompt }),
-     *   });
-     */
-    vercelOnFinish(options) {
-        return createVercelOnFinish(this, options);
-    }
-    /** Force-flush all buffered payloads. */
-    async flush() {
-        return this.buffer.flush();
-    }
-    /** Stop the witness and flush remaining payloads. */
-    async stop() {
-        return this.buffer.stop();
-    }
-    /** Number of payloads waiting. */
-    get pending() {
-        return this.buffer.pending;
-    }
-    /** All receipts from completed flushes. */
-    get receipts() {
-        return this.buffer.receipts;
-    }
-}
-//# sourceMappingURL=witness.js.map

package/dist/witness.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"witness.js","sourceRoot":"","sources":["../src/witness.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACxD,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,oBAAoB,EAA8B,MAAM,yBAAyB,CAAC;AAuB3F,MAAM,OAAO,OAAO;IACV,MAAM,CAAgB;IACtB,MAAM,CAAgB;IACtB,aAAa,GAAG,KAAK,CAAC;IAE9B,YAAY,OAAuB;QACjC,IAAI,CAAC,OAAO,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAC/D,IAAI,CAAC,OAAO,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;QAC3D,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QACzF,IAAI,CAAC,OAAO,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAC/D,IAAI,OAAO,CAAC,aAAa,IAAI,OAAO,CAAC,aAAa,KAAK,MAAM,EAAE,CAAC;YAC9D,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;QACrF,CAAC;QACD,IAAI,OAAO,CAAC,aAAa,KAAK,MAAM,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE,CAAC;YACnE,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;QAChF,CAAC;QAED,IAAI,CAAC,MAAM,GAAG;YACZ,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YAC9C,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,aAAa,EAAE,OAAO,CAAC,aAAa,IAAI,CAAC;YACzC,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,EAAE;YACpC,aAAa,EAAE,OAAO,CAAC,aAAa,IAAI,GAAG;YAC3C,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,KAAK;YACjC,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,CAAC;YACnC,kBAAkB,EAAE,OAAO,CAAC,kBAAkB,IAAI,KAAK;YACvD,kBAAkB,EAAE,OAAO,CAAC,kBAAkB,IAAI,CAAC;YACnD,cAAc,EAAE,OAAO,CAAC,cAAc,IAAI,EAAE;YAC5C,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,aAAa,EAAE,OAAO,CAAC,aAAa;YACpC,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;YAC5C,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,OAAO,EAAE,OAAO,CAAC,OAAO;SACzB,CAAC;QAEF,IAAI,CAAC,MAAM,GAAG,IAAI,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC/C,CAAC;IAED;;;;;;;;;OASG;IACH,IAAI,CAAC,MAAe;QAClB,MAAM,KAAK,GAAG,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QAC5C,MAAM,IAAI,GAAG,KAAK,EAAE,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC;QAC5C,MAAM,GAAG,GAAG,MAAiC,CAAC;QAE9C,sCAAsC;QACtC,IAAI,IAAI,KAAK,QAAQ,IAAI,GAAG,EAAE,IAAI,EAAE,CAAC;YACnC,OAAO,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAClC,CAAC;QAED,iCAAiC;QACjC,IAAI,IAAI,KAAK,WAAW,IAAI,CAAC,GAAG,EAAE,QAAQ,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC;YAC1D,OAAO,aAAa,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACrC,CAAC;QAED,iDAAiD;QACjD,IAAI,IAAI,KAAK,sBAAsB,IAAI,CAAC,GAAG,EAAE,IAAI,IAAK,GAA+B,EAAE,MAAM,CAAC,EAAE,CAAC;YAC/F,OAAO,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACnC,CAAC;QAED,MAAM,IAAI,SAAS,CACjB,uBAAuB,IAAI,IAAI,SAAS,uDAAuD,CAChG,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;OAWG;IACH,QAAQ,CAAoC,EAAK,EAAE,QAAiB;QAClE,MAAM,IAAI,GAAG,QAAQ,IAAI,EAAE,CAAC,IAAI,IAAI,WAAW,CAAC;QAChD,MAAM,IAAI,GAAG,IAAI,CAAC;QAElB,MAAM,OAAO,GAAG,UAAqB,GAAG,IAAW;YACjD,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC3D,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;YAChC,IAAI,SAAS,GAAG,IAAI,CAAC;YACrB,IAAI,MAAW,CAAC;YAEhB,MAAM,MAAM,GAAG,GAAG,EAAE;gBAClB,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC;gBACxD,MAAM,SAAS,GAAG,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;gBACxD,MAAM,UAAU,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;gBAEjF,MAAM,MAAM,GAAoB;oBAC9B,OAAO,EAAE,IAAI;oBACb,SAAS,EAAE,eAAe,CAAC,IAAI,CAAC;oBAChC,UAAU,EAAE,SAAS;oBACrB,YAAY,EAAE,UAAU;oBACxB,SAAS,EAAE,SAAS;oBACpB,gBAAgB,EAAE,CAAC;oBACnB,kBAAkB,EAAE,CAAC;oBACrB,eAAe,EAAE,IAAI;oBACrB,UAAU,EAAE,CAAC,SAAS;oBACtB,QAAQ,EAAE,MAAM;oBAChB,cAAc,EAAE,EAAE;oBAClB,QAAQ,EAAE,IAAI;oBACd,UAAU,EAAE,MAAM;iBACnB,CAAC;gBAEF,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACtB,CAAC,CAAC;YAEF,IAAI,CAAC;gBACH,MAAM,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAChC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,SAAS,GAAG,KAAK,CAAC;gBAClB,MAAM,EAAE,CAAC;gBACT,MAAM,GAAG,CAAC;YACZ,CAAC;YAED,6CAA6C;YAC7C,IAAI,MAAM,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;gBAChD,OAAO,MAAM,CAAC,IAAI,CAChB,CAAC,CAAM,EAAE,EAAE;oBACT,MAAM,GAAG,CAAC,CAAC;oBACX,MAAM,EAAE,CAAC;oBACT,OAAO,CAAC,CAAC;gBACX,CAAC,EACD,CAAC,GAAQ,EAAE,EAAE;oBACX,SAAS,GAAG,KAAK,CAAC;oBAClB,MAAM,EAAE,CAAC;oBACT,MAAM,GAAG,CAAC;gBACZ,CAAC,CACF,CAAC;YACJ,CAAC;YAED,MAAM,EAAE,CAAC;YACT,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC;QAEF,OAAO,OAAuB,CAAC;IACjC,CAAC;IAED;;;;;;;;;;;OAWG;IACH,UAAU,CACR,EAAK,EACL,YAAqB,EACrB,KAAc;QAEd,MAAM,IAAI,GAAG,YAAY,IAAI,EAAE,CAAC,IAAI,IAAI,kBAAkB,CAAC;QAC3D,MAAM,IAAI,GAAG,IAAI,CAAC;QAElB,MAAM,OAAO,GAAG,UAAqB,GAAG,IAAW;YACjD,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;YAChC,IAAI,OAAO,GAAG,IAAI,CAAC;YACnB,IAAI,MAAW,CAAC;YAEhB,MAAM,MAAM,GAAG,GAAG,EAAE;gBAClB,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC;gBACxD,MAAM,SAAS,GAAG,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;gBACxD,MAAM,UAAU,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;gBAEvF,MAAM,MAAM,GAAoB;oBAC9B,OAAO,EAAE,IAAI;oBACb,SAAS,EAAE,eAAe,CAAC,IAAI,CAAC;oBAChC,UAAU,EAAE,SAAS;oBACrB,YAAY,EAAE,UAAU;oBACxB,SAAS,EAAE,SAAS;oBACpB,gBAAgB,EAAE,CAAC;oBACnB,kBAAkB,EAAE,CAAC;oBACrB,eAAe,EAAE,IAAI;oBACrB,UAAU,EAAE,CAAC,OAAO;oBACpB,QAAQ,EAAE,QAAQ;oBAClB,cAAc,EAAE,EAAE;oBAClB,YAAY,EAAE,IAAI;oBAClB,aAAa,EAAE,OAAO;oBACtB,WAAW,EAAE,KAAK;iBACnB,CAAC;gBAEF,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACtB,CAAC,CAAC;YAEF,IAAI,CAAC;gBACH,MAAM,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAChC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,GAAG,KAAK,CAAC;gBAChB,MAAM,EAAE,CAAC;gBACT,MAAM,GAAG,CAAC;YACZ,CAAC;YAED,6CAA6C;YAC7C,IAAI,MAAM,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;gBAChD,OAAO,MAAM,CAAC,IAAI,CAChB,CAAC,CAAM,EAAE,EAAE;oBACT,MAAM,GAAG,CAAC,CAAC;oBACX,MAAM,EAAE,CAAC;oBACT,OAAO,CAAC,CAAC;gBACX,CAAC,EACD,CAAC,GAAQ,EAAE,EAAE;oBACX,OAAO,GAAG,KAAK,CAAC;oBAChB,MAAM,EAAE,CAAC;oBACT,MAAM,GAAG,CAAC;gBACZ,CAAC,CACF,CAAC;YACJ,CAAC;YAED,MAAM,EAAE,CAAC;YACT,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC;QAEF,OAAO,OAAuB,CAAC;IACjC,CAAC;IAED;;;;;;;OAOG;IACH,MAAM,CAAC,SAA0B;QAC/B,yBAAyB;QACzB,IAAI,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,IAAI,SAAS,CAAC,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnF,SAAS,CAAC,cAAc,GAAG,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC;YACtD,SAAS,CAAC,gBAAgB,GAAG,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC;YAC/D,SAAS,CAAC,kBAAkB,GAAG,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC;QAChE,CAAC;QAED,MAAM,QAAQ,GAAG,eAAe,CAC9B,SAAS,EACT,IAAI,CAAC,MAAM,CAAC,QAAQ,EACpB,IAAI,CAAC,MAAM,CAAC,aAAa,EACzB,IAAI,CAAC,MAAM,CAAC,kBAAkB,EAC9B,IAAI,CAAC,MAAM,CAAC,kBAAkB,EAC9B,IAAI,CAAC,MAAM,CAAC,UAAU,EACtB,IAAI,CAAC,MAAM,CAAC,OAAO,EACnB,IAAI,CAAC,MAAM,CAAC,UAAU,EACtB,IAAI,CAAC,MAAM,CAAC,OAAO,CACpB,CAAC;QAEF,qEAAqE;QACrE,yDAAyD;QACzD,oCAAoC;QACpC,IAAI,IAAI,CAAC,MAAM,CAAC,aAAa,KAAK,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC;YAC1E,iBAAiB,CAAC,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;YAC5F,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;gBACxB,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;gBAC1B,OAAO,CAAC,IAAI,CACV,cAAc,QAAQ,CAAC,MAAM,6BAA6B,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE;oBACzF,wEAAwE;oBACxE,+FAA+F,CAChG,CAAC;YACJ,CAAC;QACH,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;IACpC,CAAC;IAED;;;;;;;;;OASG;IACH,cAAc,CAAC,OAA+B;QAC5C,OAAO,oBAAoB,CAAC,IAAI,EAAE,OAAO,CAA8B,CAAC;IAC1E,CAAC;IAED,yCAAyC;IACzC,KAAK,CAAC,KAAK;QACT,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;IAC7B,CAAC;IAED,qDAAqD;IACrD,KAAK,CAAC,IAAI;QACR,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAC5B,CAAC;IAED,kCAAkC;IAClC,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;IAC7B,CAAC;IAED,2CAA2C;IAC3C,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;IAC9B,CAAC;CACF"}