interai-risk-oracle 0.1.2-beta

package/LICENSE

@@ -0,0 +1,11 @@
+InterAI Public Interface License Notice
+
+Copyright (c) InterAILabs.
+
+This package contains client code for integrating with the hosted InterAI Risk
+Oracle API. It may be used, copied, modified, and distributed for that purpose,
+provided that this notice is retained. The hosted service internals,
+verification logic, scoring logic, trademarks, and trust intelligence remain
+proprietary unless a separate written license says otherwise.
+
+This package is provided "as is", without warranties or conditions of any kind.

package/README.md

@@ -0,0 +1,55 @@
+# TypeScript SDK
+
+Typed hosted API client for InterAI Risk Oracle. The package source is
+publish-ready; confirm the package has been released before using the registry
+command below.
+
+```bash
+npm install interai-risk-oracle
+```
+
+```ts
+import { InterAIRiskOracleClient } from "interai-risk-oracle"
+
+const client = new InterAIRiskOracleClient({
+  baseUrl: "https://ai-risk-oracle.fly.dev",
+  apiKey: process.env.INTERAI_API_KEY
+})
+
+const decision = await client.verify({
+  use_case: "agent-before-tool-execution",
+  action: {
+    type: "tool_call",
+    description: "Send account notice",
+    external_side_effect: true
+  },
+  context: {
+    agent_id: "agent_123",
+    environment: "production",
+    user_confirmation: false
+  },
+  policy: {
+    max_risk_level: "medium",
+    require_trust_receipt: true,
+    require_human_review_above: 0.75
+  }
+}, "stable-business-operation-id")
+```
+
+`verify` generates an idempotency key when one is not provided. Supply a stable
+business-operation key when retries must resolve to the same billed result.
+
+For a portable signature check, fetch a lookup and forward its opaque signed
+payload without parsing it:
+
+```ts
+const receipt = await client.getTrustReceipt(decision.trust_receipt_id!)
+const signatureCheck = await client.verifyTrustReceiptSignature(receipt)
+```
+
+Build and inspect the package locally:
+
+```bash
+npm run build
+npm pack --dry-run
+```

package/dist/index.d.ts

@@ -0,0 +1,102 @@
+export type AutonomousRiskLevel = "low" | "medium" | "high";
+export type GatewayDecision = "allow" | "review_required" | "block";
+export type VerifyRequest = {
+    use_case: string;
+    action: {
+        type: string;
+        name?: string;
+        description: string;
+        amount_usd?: number;
+        currency?: string;
+        irreversible?: boolean;
+        external_side_effect?: boolean;
+        [key: string]: unknown;
+    };
+    context?: {
+        agent_id?: string;
+        environment?: string;
+        counterparty_id?: string;
+        user_confirmation?: boolean;
+        [key: string]: unknown;
+    };
+    policy?: {
+        max_risk_level?: AutonomousRiskLevel;
+        require_trust_receipt?: boolean;
+        amount_usd_limit?: number;
+        blocked_action_types?: string[];
+        allowed_action_types?: string[];
+        require_human_review_above?: number;
+        require_user_confirmation_for_irreversible?: boolean;
+        [key: string]: unknown;
+    };
+    domain?: string;
+    mode?: "fast_heuristic" | "semantic_judge";
+};
+export type PolicyViolation = {
+    code: string;
+    message: string;
+    severity: GatewayDecision;
+};
+export type VerifySignals = {
+    semantic_relevance?: number;
+    contradiction_risk?: number;
+    unsupported_specificity?: number;
+    numeric_consistency?: number;
+    overconfidence?: number;
+    has_external_side_effect?: boolean | null;
+    is_irreversible?: boolean | null;
+    involves_money?: boolean;
+    amount_usd?: number | null;
+    requires_user_confirmation?: boolean;
+    has_counterparty?: boolean;
+    environment?: string;
+    action_type?: string | null;
+    unknown_critical_fields?: string[];
+    autonomous_execution_detected?: boolean;
+    [key: string]: unknown;
+};
+export type VerifyResponse = {
+    decision_id: string;
+    request_contract: "autonomous_execution";
+    score: number;
+    risk_level: AutonomousRiskLevel;
+    signals: VerifySignals;
+    recommended_action: GatewayDecision;
+    policy_result: GatewayDecision;
+    policy_violations: PolicyViolation[];
+    trust_receipt_id?: string;
+    trust_receipt?: Record<string, unknown>;
+    [key: string]: unknown;
+};
+export type InterAIClientOptions = {
+    baseUrl: string;
+    apiKey?: string;
+    clientName?: string;
+};
+export type TrustReceiptLookup = {
+    ok: true;
+    receipt: Record<string, unknown> & {
+        receipt_id: string;
+    };
+    verification: {
+        signed: boolean;
+        signature: string | null;
+        signature_alg: "hmac-sha256" | null;
+        signed_payload: string | null;
+    };
+    [key: string]: unknown;
+};
+export declare class InterAIRiskOracleClient {
+    readonly baseUrl: string;
+    readonly apiKey?: string;
+    readonly clientName: string;
+    constructor(options: InterAIClientOptions);
+    private jsonRequest;
+    verify(request: VerifyRequest, idempotencyKey?: string): Promise<VerifyResponse>;
+    getTrustReceipt(receiptId: string): Promise<TrustReceiptLookup>;
+    verifyTrustReceiptSignature(lookup: TrustReceiptLookup): Promise<{
+        valid: boolean;
+        signature_alg: "hmac-sha256";
+    }>;
+}
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../index.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,mBAAmB,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAA;AAC3D,MAAM,MAAM,eAAe,GAAG,OAAO,GAAG,iBAAiB,GAAG,OAAO,CAAA;AAEnE,MAAM,MAAM,aAAa,GAAG;IAC1B,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE;QACN,IAAI,EAAE,MAAM,CAAA;QACZ,IAAI,CAAC,EAAE,MAAM,CAAA;QACb,WAAW,EAAE,MAAM,CAAA;QACnB,UAAU,CAAC,EAAE,MAAM,CAAA;QACnB,QAAQ,CAAC,EAAE,MAAM,CAAA;QACjB,YAAY,CAAC,EAAE,OAAO,CAAA;QACtB,oBAAoB,CAAC,EAAE,OAAO,CAAA;QAC9B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;KACvB,CAAA;IACD,OAAO,CAAC,EAAE;QACR,QAAQ,CAAC,EAAE,MAAM,CAAA;QACjB,WAAW,CAAC,EAAE,MAAM,CAAA;QACpB,eAAe,CAAC,EAAE,MAAM,CAAA;QACxB,iBAAiB,CAAC,EAAE,OAAO,CAAA;QAC3B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;KACvB,CAAA;IACD,MAAM,CAAC,EAAE;QACP,cAAc,CAAC,EAAE,mBAAmB,CAAA;QACpC,qBAAqB,CAAC,EAAE,OAAO,CAAA;QAC/B,gBAAgB,CAAC,EAAE,MAAM,CAAA;QACzB,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAA;QAC/B,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAA;QAC/B,0BAA0B,CAAC,EAAE,MAAM,CAAA;QACnC,0CAA0C,CAAC,EAAE,OAAO,CAAA;QACpD,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;KACvB,CAAA;IACD,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,IAAI,CAAC,EAAE,gBAAgB,GAAG,gBAAgB,CAAA;CAC3C,CAAA;AAED,MAAM,MAAM,eAAe,GAAG;IAC5B,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;IACf,QAAQ,EAAE,eAAe,CAAA;CAC1B,CAAA;AAED,MAAM,MAAM,aAAa,GAAG;IAC1B,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B,uBAAuB,CAAC,EAAE,MAAM,CAAA;IAChC,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,wBAAwB,CAAC,EAAE,OAAO,GAAG,IAAI,CAAA;IACzC,eAAe,CAAC,EAAE,OAAO,GAAG,IAAI,CAAA;IAChC,cAAc,CAAC,EAAE,OAAO,CAAA;IACxB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,0BAA0B,CAAC,EAAE,OAAO,CAAA;IACpC,gBAAgB,CAAC,EAAE,OAAO,CAAA;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,uBAAuB,CAAC,EAAE,MAAM,EAAE,CAAA;IAClC,6BAA6B,CAAC,EAAE,OAAO,CAAA;IACvC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CACvB,CAAA;AAED,MAAM,MAAM,cAAc,GAAG;IAC3B,WAAW,EAAE,MAAM,CAAA;IACnB,gBAAgB,EAAE,sBAAsB,CAAA;IACxC,KAAK,EAAE,MAAM,CAAA;IACb,UAAU,EAAE,mBAAmB,CAAA;IAC/B,OAAO,EAAE,aAAa,CAAA;IACtB,kBAAkB,EAAE,eAAe,CAAA;IACnC,aAAa,EAAE,eAAe,CAAA;IAC9B,iBAAiB,EAAE,eAAe,EAAE,CAAA;IACpC,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACvC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CACvB,CAAA;AAED,MAAM,MAAM,oBAAoB,GAAG;IACjC,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB,CAAA;AAED,MAAM,MAAM,kBAAkB,GAAG;IAC/B,EAAE,EAAE,IAAI,CAAA;IACR,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG;QAAE,UAAU,EAAE,MAAM,CAAA;KAAE,CAAA;IACzD,YAAY,EAAE;QACZ,MAAM,EAAE,OAAO,CAAA;QACf,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;QACxB,aAAa,EAAE,aAAa,GAAG,IAAI,CAAA;QACnC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAA;KAC9B,CAAA;IACD,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CACvB,CAAA;AAOD,qBAAa,uBAAuB;IAClC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;gBAEf,OAAO,EAAE,oBAAoB;YAM3B,WAAW;IAsBnB,MAAM,CACV,OAAO,EAAE,aAAa,EACtB,cAAc,SAA0B,GACvC,OAAO,CAAC,cAAc,CAAC;IAWpB,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAM/D,2BAA2B,CAC/B,MAAM,EAAE,kBAAkB,GACzB,OAAO,CAAC;QAAE,KAAK,EAAE,OAAO,CAAC;QAAC,aAAa,EAAE,aAAa,CAAA;KAAE,CAAC;CAgB7D"}

package/dist/index.js

@@ -0,0 +1,66 @@
+function defaultIdempotencyKey() {
+    const random = globalThis.crypto?.randomUUID?.();
+    return random || `interai-${Date.now().toString(36)}-${Math.random().toString(36).slice(2, 12)}`;
+}
+export class InterAIRiskOracleClient {
+    baseUrl;
+    apiKey;
+    clientName;
+    constructor(options) {
+        this.baseUrl = options.baseUrl.replace(/\/$/, "");
+        this.apiKey = options.apiKey;
+        this.clientName = options.clientName || "typescript-sdk/0.1.2-beta";
+    }
+    async jsonRequest(path, init) {
+        const response = await fetch(`${this.baseUrl}${path}`, {
+            ...init,
+            headers: {
+                ...(this.apiKey ? { authorization: `Bearer ${this.apiKey}` } : {}),
+                "x-interai-client": this.clientName,
+                ...(init?.headers || {})
+            }
+        });
+        const text = await response.text();
+        let body;
+        try {
+            body = text ? JSON.parse(text) : null;
+        }
+        catch {
+            body = { error: "invalid_json_response", raw: text.slice(0, 500) };
+        }
+        if (!response.ok) {
+            throw new Error(`InterAI request failed: ${response.status} ${JSON.stringify(body)}`);
+        }
+        return body;
+    }
+    async verify(request, idempotencyKey = defaultIdempotencyKey()) {
+        return this.jsonRequest("/verify", {
+            method: "POST",
+            headers: {
+                "content-type": "application/json",
+                "x-idempotency-key": idempotencyKey
+            },
+            body: JSON.stringify(request)
+        });
+    }
+    async getTrustReceipt(receiptId) {
+        return this.jsonRequest(`/trust/receipts/${encodeURIComponent(receiptId)}`);
+    }
+    async verifyTrustReceiptSignature(lookup) {
+        const { receipt, verification } = lookup;
+        if (!verification.signature || !verification.signed_payload) {
+            throw new Error("Trust receipt is not signed");
+        }
+        return this.jsonRequest("/trust/verify-signature", {
+            method: "POST",
+            headers: { "content-type": "application/json" },
+            body: JSON.stringify({
+                receipt_id: receipt.receipt_id,
+                signed_payload: verification.signed_payload,
+                signature: verification.signature,
+                signature_alg: verification.signature_alg
+            })
+        });
+    }
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../index.ts"],"names":[],"mappings":"AA6FA,SAAS,qBAAqB;IAC5B,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,EAAE,UAAU,EAAE,EAAE,CAAA;IAChD,OAAO,MAAM,IAAI,WAAW,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAA;AAClG,CAAC;AAED,MAAM,OAAO,uBAAuB;IACzB,OAAO,CAAQ;IACf,MAAM,CAAS;IACf,UAAU,CAAQ;IAE3B,YAAY,OAA6B;QACvC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;QACjD,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAA;QAC5B,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,2BAA2B,CAAA;IACrE,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,IAAY,EAAE,IAAkB;QACxD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,EAAE;YACrD,GAAG,IAAI;YACP,OAAO,EAAE;gBACP,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAClE,kBAAkB,EAAE,IAAI,CAAC,UAAU;gBACnC,GAAG,CAAC,IAAI,EAAE,OAAO,IAAI,EAAE,CAAC;aACzB;SACF,CAAC,CAAA;QACF,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;QAClC,IAAI,IAAa,CAAA;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;QACvC,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,GAAG,EAAE,KAAK,EAAE,uBAAuB,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAA;QACpE,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,2BAA2B,QAAQ,CAAC,MAAM,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QACvF,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC;IAED,KAAK,CAAC,MAAM,CACV,OAAsB,EACtB,cAAc,GAAG,qBAAqB,EAAE;QAExC,OAAO,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE;YACjC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,mBAAmB,EAAE,cAAc;aACpC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;SAC9B,CAA4B,CAAA;IAC/B,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,SAAiB;QACrC,OAAO,IAAI,CAAC,WAAW,CACrB,mBAAmB,kBAAkB,CAAC,SAAS,CAAC,EAAE,CACpB,CAAA;IAClC,CAAC;IAED,KAAK,CAAC,2BAA2B,CAC/B,MAA0B;QAE1B,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,GAAG,MAAM,CAAA;QACxC,IAAI,CAAC,YAAY,CAAC,SAAS,IAAI,CAAC,YAAY,CAAC,cAAc,EAAE,CAAC;YAC5D,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAA;QAChD,CAAC;QACD,OAAO,IAAI,CAAC,WAAW,CAAC,yBAAyB,EAAE;YACjD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,cAAc,EAAE,YAAY,CAAC,cAAc;gBAC3C,SAAS,EAAE,YAAY,CAAC,SAAS;gBACjC,aAAa,EAAE,YAAY,CAAC,aAAa;aAC1C,CAAC;SACH,CAA8D,CAAA;IACjE,CAAC;CACF"}

package/package.json

@@ -0,0 +1,51 @@
+{
+  "name": "interai-risk-oracle",
+  "version": "0.1.2-beta",
+  "description": "TypeScript client and policy-gate helpers for the hosted InterAI Risk Oracle API.",
+  "homepage": "https://ai-risk-oracle.fly.dev/",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/InterAILabs/ai-risk-oracle.git",
+    "directory": "sdk/typescript"
+  },
+  "bugs": {
+    "url": "https://github.com/InterAILabs/ai-risk-oracle/issues"
+  },
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "prepack": "npm run build"
+  },
+  "sideEffects": false,
+  "engines": {
+    "node": ">=20"
+  },
+  "license": "SEE LICENSE IN LICENSE",
+  "publishConfig": {
+    "access": "public"
+  },
+  "keywords": [
+    "interai",
+    "risk-oracle",
+    "autonomous-agents",
+    "trust-receipts",
+    "policy-enforcement"
+  ],
+  "devDependencies": {
+    "typescript": "^5.0.0"
+  }
+}