@wytness/sdk 0.2.0 → 0.2.1

package/dist/index.cjs

@@ -192,15 +192,19 @@ var AuditClient = class {
     this.agentVersion = options.agentVersion ?? "0.1.0";
     this.humanOperatorId = options.humanOperatorId ?? "unknown";
     this._sessionId = (0, import_crypto3.randomUUID)();
-    const keyPath = options.signingKeyPath ?? "./keys/signing.key";
-    if ((0, import_fs2.existsSync)(keyPath)) {
-      const raw = (0, import_fs2.readFileSync)(keyPath);
-      this._secretKey = new Uint8Array(raw);
+    if (options.signingKey) {
+      this._secretKey = new Uint8Array(Buffer.from(options.signingKey, "base64"));
     } else {
-      const kp = generateKeypair();
-      this._secretKey = kp.secretKey;
-      (0, import_fs2.mkdirSync)((0, import_path2.dirname)(keyPath), { recursive: true });
-      (0, import_fs2.writeFileSync)(keyPath, Buffer.from(kp.secretKey));
+      const keyPath = options.signingKeyPath ?? "./keys/signing.key";
+      if ((0, import_fs2.existsSync)(keyPath)) {
+        const raw = (0, import_fs2.readFileSync)(keyPath);
+        this._secretKey = new Uint8Array(raw);
+      } else {
+        const kp = generateKeypair();
+        this._secretKey = kp.secretKey;
+        (0, import_fs2.mkdirSync)((0, import_path2.dirname)(keyPath), { recursive: true });
+        (0, import_fs2.writeFileSync)(keyPath, Buffer.from(kp.secretKey));
+      }
     }
     const fallback = options.fallbackLogPath ?? "./audit_fallback.jsonl";
     if (options.httpApiKey) {
@@ -216,12 +220,17 @@ var AuditClient = class {
   get sessionId() {
     return this._sessionId;
   }
+  /** Record an audit event. Never throws — errors are logged and swallowed. */
   record(event) {
-    const d = { ...event };
-    d["prev_event_hash"] = this._prevEventHash;
-    d["signature"] = signEvent(d, this._secretKey);
-    this._prevEventHash = computeEventHash(d);
-    this._emit(d);
+    try {
+      const d = { ...event };
+      d["prev_event_hash"] = this._prevEventHash;
+      d["signature"] = signEvent(d, this._secretKey);
+      this._prevEventHash = computeEventHash(d);
+      this._emit(d);
+    } catch (e) {
+      console.error(`wytness: failed to record event: ${e}`);
+    }
   }
 };
 
@@ -238,41 +247,47 @@ function sanitise(params) {
 function hashValue(value) {
   return (0, import_crypto4.createHash)("sha256").update(JSON.stringify(value, null, 0)).digest("hex");
 }
+function recordEvent(client, toolName, taskId, args, start, status, errorCode, result) {
+  const params = {};
+  args.forEach((arg, i) => {
+    params[`arg${i}`] = arg;
+  });
+  const event = AuditEventSchema.parse({
+    agent_id: client.agentId,
+    agent_version: client.agentVersion,
+    human_operator_id: client.humanOperatorId,
+    task_id: taskId,
+    session_id: client.sessionId,
+    tool_name: toolName,
+    tool_parameters: sanitise(params),
+    inputs_hash: hashValue(args),
+    outputs_hash: result != null ? hashValue(result) : "",
+    status,
+    error_code: errorCode,
+    duration_ms: Math.round(performance.now() - start)
+  });
+  client.record(event);
+}
 function wrapFn(client, fn, toolName, taskId) {
   const wrapped = function(...args) {
     const start = performance.now();
-    let status = "success";
-    let errorCode = null;
     let result;
-    const inputsHash = hashValue(args);
     try {
       result = fn.apply(this, args);
     } catch (e) {
-      status = "failure";
-      errorCode = e.constructor.name;
+      recordEvent(client, toolName, taskId, args, start, "failure", e.constructor.name, null);
       throw e;
-    } finally {
-      const durationMs = Math.round(performance.now() - start);
-      const params = {};
-      args.forEach((arg, i) => {
-        params[`arg${i}`] = arg;
-      });
-      const event = AuditEventSchema.parse({
-        agent_id: client.agentId,
-        agent_version: client.agentVersion,
-        human_operator_id: client.humanOperatorId,
-        task_id: taskId,
-        session_id: client.sessionId,
-        tool_name: toolName,
-        tool_parameters: sanitise(params),
-        inputs_hash: inputsHash,
-        outputs_hash: result != null ? hashValue(result) : "",
-        status,
-        error_code: errorCode,
-        duration_ms: durationMs
+    }
+    if (result && typeof result.then === "function") {
+      return result.then((resolved) => {
+        recordEvent(client, toolName, taskId, args, start, "success", null, resolved);
+        return resolved;
+      }).catch((e) => {
+        recordEvent(client, toolName, taskId, args, start, "failure", e.constructor.name, null);
+        throw e;
       });
-      client.record(event);
     }
+    recordEvent(client, toolName, taskId, args, start, "success", null, result);
     return result;
   };
   Object.defineProperty(wrapped, "name", { value: toolName });

package/dist/index.d.cts

@@ -104,6 +104,7 @@ interface AuditClientOptions {
     agentId: string;
     agentVersion?: string;
     humanOperatorId?: string;
+    signingKey?: string;
     signingKeyPath?: string;
     fallbackLogPath?: string;
     httpApiKey?: string;
@@ -119,6 +120,7 @@ declare class AuditClient {
     private _emit;
     constructor(options: AuditClientOptions);
     get sessionId(): string;
+    /** Record an audit event. Never throws — errors are logged and swallowed. */
     record(event: AuditEvent): void;
 }
 
@@ -127,7 +129,7 @@ interface AuditToolOptions {
     taskId?: string;
 }
 /**
- * Wrap a function with audit logging.
+ * Wrap a function with audit logging. Works with both sync and async functions.
  *
  * Supports two calling styles:
  *

package/dist/index.d.ts

@@ -104,6 +104,7 @@ interface AuditClientOptions {
     agentId: string;
     agentVersion?: string;
     humanOperatorId?: string;
+    signingKey?: string;
     signingKeyPath?: string;
     fallbackLogPath?: string;
     httpApiKey?: string;
@@ -119,6 +120,7 @@ declare class AuditClient {
     private _emit;
     constructor(options: AuditClientOptions);
     get sessionId(): string;
+    /** Record an audit event. Never throws — errors are logged and swallowed. */
     record(event: AuditEvent): void;
 }
 
@@ -127,7 +129,7 @@ interface AuditToolOptions {
     taskId?: string;
 }
 /**
- * Wrap a function with audit logging.
+ * Wrap a function with audit logging. Works with both sync and async functions.
  *
  * Supports two calling styles:
  *

package/dist/index.js

@@ -147,15 +147,19 @@ var AuditClient = class {
     this.agentVersion = options.agentVersion ?? "0.1.0";
     this.humanOperatorId = options.humanOperatorId ?? "unknown";
     this._sessionId = randomUUID2();
-    const keyPath = options.signingKeyPath ?? "./keys/signing.key";
-    if (existsSync(keyPath)) {
-      const raw = readFileSync(keyPath);
-      this._secretKey = new Uint8Array(raw);
+    if (options.signingKey) {
+      this._secretKey = new Uint8Array(Buffer.from(options.signingKey, "base64"));
     } else {
-      const kp = generateKeypair();
-      this._secretKey = kp.secretKey;
-      mkdirSync2(dirname2(keyPath), { recursive: true });
-      writeFileSync(keyPath, Buffer.from(kp.secretKey));
+      const keyPath = options.signingKeyPath ?? "./keys/signing.key";
+      if (existsSync(keyPath)) {
+        const raw = readFileSync(keyPath);
+        this._secretKey = new Uint8Array(raw);
+      } else {
+        const kp = generateKeypair();
+        this._secretKey = kp.secretKey;
+        mkdirSync2(dirname2(keyPath), { recursive: true });
+        writeFileSync(keyPath, Buffer.from(kp.secretKey));
+      }
     }
     const fallback = options.fallbackLogPath ?? "./audit_fallback.jsonl";
     if (options.httpApiKey) {
@@ -171,12 +175,17 @@ var AuditClient = class {
   get sessionId() {
     return this._sessionId;
   }
+  /** Record an audit event. Never throws — errors are logged and swallowed. */
   record(event) {
-    const d = { ...event };
-    d["prev_event_hash"] = this._prevEventHash;
-    d["signature"] = signEvent(d, this._secretKey);
-    this._prevEventHash = computeEventHash(d);
-    this._emit(d);
+    try {
+      const d = { ...event };
+      d["prev_event_hash"] = this._prevEventHash;
+      d["signature"] = signEvent(d, this._secretKey);
+      this._prevEventHash = computeEventHash(d);
+      this._emit(d);
+    } catch (e) {
+      console.error(`wytness: failed to record event: ${e}`);
+    }
   }
 };
 
@@ -193,41 +202,47 @@ function sanitise(params) {
 function hashValue(value) {
   return createHash2("sha256").update(JSON.stringify(value, null, 0)).digest("hex");
 }
+function recordEvent(client, toolName, taskId, args, start, status, errorCode, result) {
+  const params = {};
+  args.forEach((arg, i) => {
+    params[`arg${i}`] = arg;
+  });
+  const event = AuditEventSchema.parse({
+    agent_id: client.agentId,
+    agent_version: client.agentVersion,
+    human_operator_id: client.humanOperatorId,
+    task_id: taskId,
+    session_id: client.sessionId,
+    tool_name: toolName,
+    tool_parameters: sanitise(params),
+    inputs_hash: hashValue(args),
+    outputs_hash: result != null ? hashValue(result) : "",
+    status,
+    error_code: errorCode,
+    duration_ms: Math.round(performance.now() - start)
+  });
+  client.record(event);
+}
 function wrapFn(client, fn, toolName, taskId) {
   const wrapped = function(...args) {
     const start = performance.now();
-    let status = "success";
-    let errorCode = null;
     let result;
-    const inputsHash = hashValue(args);
     try {
       result = fn.apply(this, args);
     } catch (e) {
-      status = "failure";
-      errorCode = e.constructor.name;
+      recordEvent(client, toolName, taskId, args, start, "failure", e.constructor.name, null);
       throw e;
-    } finally {
-      const durationMs = Math.round(performance.now() - start);
-      const params = {};
-      args.forEach((arg, i) => {
-        params[`arg${i}`] = arg;
-      });
-      const event = AuditEventSchema.parse({
-        agent_id: client.agentId,
-        agent_version: client.agentVersion,
-        human_operator_id: client.humanOperatorId,
-        task_id: taskId,
-        session_id: client.sessionId,
-        tool_name: toolName,
-        tool_parameters: sanitise(params),
-        inputs_hash: inputsHash,
-        outputs_hash: result != null ? hashValue(result) : "",
-        status,
-        error_code: errorCode,
-        duration_ms: durationMs
+    }
+    if (result && typeof result.then === "function") {
+      return result.then((resolved) => {
+        recordEvent(client, toolName, taskId, args, start, "success", null, resolved);
+        return resolved;
+      }).catch((e) => {
+        recordEvent(client, toolName, taskId, args, start, "failure", e.constructor.name, null);
+        throw e;
       });
-      client.record(event);
     }
+    recordEvent(client, toolName, taskId, args, start, "success", null, result);
     return result;
   };
   Object.defineProperty(wrapped, "name", { value: toolName });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wytness/sdk",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "description": "TypeScript SDK for Wytness — audit logging for AI agents with cryptographic signing and chain integrity",
   "license": "MIT",
   "author": "Wytness <hello@wytness.dev>",