langprotect-armor 0.1.0

package/.env.example

@@ -0,0 +1,27 @@
+# ── OpenAI ─────────────────────────────────────────────────────────────────────
+OPENAI_API_KEY=sk-...
+
+# ── Langfuse tracing (required) ────────────────────────────────────────────────
+# Project keys from your Langfuse instance. LANGFUSE_BASEURL points at your
+# self-hosted LangProtect/Langfuse URL (defaults to https://cloud.langfuse.com).
+LANGFUSE_PUBLIC_KEY=pk-lf-...
+LANGFUSE_SECRET_KEY=sk-lf-...
+LANGFUSE_BASEURL=http://localhost:3000
+
+# ── Armour security (optional) ─────────────────────────────────────────────────
+# Set these to enable Armour input/output scanning via setSecurity(true).
+ARMOUR_BASE_URL=https://your-armour-instance.run.app
+ARMOUR_API_KEY=your-armour-api-key
+# true = use sanitized_prompt when available before blocking;
+# false = block immediately on any non-safe status.
+ARMOUR_SECURITY_ON=true
+# true = log only, skip security checks; false = full scanning.
+ARMOUR_TRACE_ONLY=false
+# Armour scan HTTP timeout, in seconds.
+ARMOUR_SCAN_TIMEOUT=60
+
+# ── LangProtect dashboard (used by score()) ────────────────────────────────────
+LANGPROTECT_HOST=http://localhost:8000
+
+# ── LiteLLM proxy (optional — required for non-OpenAI models) ──────────────────
+LITELLM_HOST=http://localhost:4000

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Quokka Labs LLP
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,283 @@
+# LangProtect TypeScript SDK
+
+Self-hosted LLM security and observability SDK. Every model call is scanned by Armour for threats and PII, routed to the right provider, and linked to the LangProtect dashboard — all with a single import change.
+
+---
+
+## Install
+
+```bash
+npm install langprotect-armor
+```
+
+---
+
+## Quick Start
+
+```typescript
+import { init, openai } from "langprotect-armor/langfuse";
+
+init({
+  openaiApiKey:      "sk-...",
+  langfusePublicKey: "pk-lf-...",
+  langfuseSecretKey: "sk-lf-...",
+  langfuseHost:      "http://localhost:3000",
+  armourBaseUrl:     "https://langprotect-xxx.run.app",
+  armourApiKey:      "your-armour-key",
+  securityOn:        true,
+});
+
+const response = await openai.chat.completions.create({
+  model:     "gpt-4o-mini",
+  messages:  [{ role: "user", content: "Hello!" }],
+  sessionId: "sess_001",
+  userId:    "user_42",
+});
+
+console.log(response.choices[0].message.content);
+```
+
+---
+
+## Configuration
+
+All configuration is passed to `init()` — no `.env` file required. `init()` can be called at any point before the first `openai.chat.completions.create()` call.
+
+```typescript
+import { init } from "langprotect-armor/langfuse";
+
+init({
+  // LLM provider
+  openaiApiKey:    "sk-...",
+
+  // Langfuse tracing
+  langfusePublicKey: "pk-lf-...",
+  langfuseSecretKey: "sk-lf-...",
+  langfuseHost:      "http://localhost:3000",   // defaults to Langfuse Cloud if unset
+
+  // Armour security scanning
+  armourBaseUrl:   "https://langprotect-xxx.run.app",
+  armourApiKey:    "your-armour-key",
+  securityOn:      false,   // true  → sanitize/block unsafe input
+                            // false → scanning disabled entirely
+  traceOnly:       false,   // true  → log only, never enforce
+  scanTimeout:     60,      // Armour HTTP timeout in seconds
+
+  // LangProtect dashboard (used by score())
+  langprotectHost: "http://localhost:8000",
+
+  // LiteLLM proxy (optional — enables non-OpenAI models)
+  litellmHost:     "",      // e.g. "http://localhost:4000"
+});
+```
+
+| Parameter | Default | Description |
+|---|---|---|
+| `openaiApiKey` | `""` | OpenAI API key |
+| `langfusePublicKey` | `""` | Langfuse public key (`pk-lf-…`) |
+| `langfuseSecretKey` | `""` | Langfuse secret key (`sk-lf-…`) |
+| `langfuseHost` | `""` | Langfuse base URL (defaults to Langfuse Cloud if unset) |
+| `armourBaseUrl` | `""` | Armour API base URL |
+| `armourApiKey` | `""` | Armour `X-API-Key` header |
+| `securityOn` | `false` | Enforce sanitization / blocking |
+| `traceOnly` | `false` | Log only — never block or sanitize |
+| `scanTimeout` | `60` | Armour HTTP timeout (seconds) |
+| `langprotectHost` | `http://localhost:8000` | Dashboard URL for `score()` |
+| `litellmHost` | `""` | LiteLLM proxy URL for non-OpenAI models |
+
+> Values passed to `init()` override environment variables. Config is read lazily on each call so order of import vs. `init()` does not matter.
+
+---
+
+## Usage
+
+### Chat completions
+
+```typescript
+import { openai } from "langprotect-armor/langfuse";
+
+const response = await openai.chat.completions.create({
+  model:     "gpt-4o",
+  messages:  [{ role: "user", content: "Explain async/await" }],
+  sessionId: "sess_123",
+  userId:    "u_42",
+  metadata:  { turn_number: 1 },
+});
+
+console.log(response.choices[0].message.content);
+```
+
+### Handling blocked responses
+
+When `securityOn: true` and Armour hard-blocks a request, a `BlockedResponse` is returned instead of a normal completion. Use the `in` operator to narrow the type:
+
+```typescript
+import { openai, BlockedResponse } from "langprotect-armor/langfuse";
+
+const response = await openai.chat.completions.create({ ... });
+
+if ("blocked" in response) {
+  console.log(response.content); // "This response has been blocked by security policy."
+} else {
+  console.log(response.choices[0].message.content);
+}
+```
+
+### Toggling security at runtime
+
+```typescript
+import { setSecurity } from "langprotect-armor/langfuse";
+
+setSecurity(true);   // Armour ON
+setSecurity(false);  // Armour OFF
+```
+
+### Feedback scoring
+
+```typescript
+import { score } from "langprotect-armor/langfuse";
+
+await score("trace-id-abc", 1,  "Correct and concise");
+await score("trace-id-abc", -1);
+```
+
+`value` is `1` (positive) or `-1` (negative). Scores are posted to `{langprotectHost}/api/feedback`.
+
+### Supported call parameters
+
+These are stripped before the OpenAI call and used for metadata only:
+
+| Parameter | Type | Description |
+|---|---|---|
+| `sessionId` | `string` | Groups all turns of a conversation |
+| `userId` | `string` | Identifies the end user |
+| `name` | `string` | Trace label |
+| `metadata` | `object` | Any JSON key-value context |
+| `traceId` | `string` | Override the auto-generated UUID |
+| `tags` | `string[]` | Labels for filtering |
+
+---
+
+## Security Scanning
+
+The SDK calls the Armour `/v1/scan` endpoint on every input and output.
+
+### Scan modes
+
+| `traceOnly` | `securityOn` | Behaviour |
+|---|---|---|
+| `true` | any | Log the scan result, always proceed |
+| `false` | `false` | Block if input is not safe, no sanitization |
+| `false` | `true` | Sanitize if possible, block otherwise |
+
+### Anonymization
+
+When Armour returns a `sanitized_prompt` (PII replaced with tokens like `[PERSON_1]`, `[EMAIL_ADDRESS_1]`), the SDK:
+
+1. Replaces the user message with the sanitized version
+2. Injects a system prompt hint so the LLM treats tokens as real values
+3. On the output scan, restores the original values via `sanitized_output` transparently
+
+The caller always receives the deanonymized response.
+
+---
+
+## Model Routing
+
+The SDK detects the provider from the model name and routes accordingly:
+
+| Model prefix | Provider | Route |
+|---|---|---|
+| `gpt-`, `o1`, `o3`, `text-davinci`, `text-embedding` | OpenAI | Direct to OpenAI API |
+| `claude`, `anthropic` | Anthropic | Via LiteLLM proxy |
+| `gemini`, `palm` | Google | Via LiteLLM proxy |
+| `llama`, `mistral`, `mixtral`, `codellama`, `phi`, `qwen` | Ollama | Via LiteLLM proxy |
+| anything else | LiteLLM | Via LiteLLM proxy |
+
+Non-OpenAI models require `litellmHost` to be set.
+
+### Starting LiteLLM
+
+```bash
+litellm --model claude-3-5-sonnet-20241022 --port 4000
+```
+
+Then in `init()`:
+
+```typescript
+init({
+  ...
+  litellmHost: "http://localhost:4000",
+});
+```
+
+### Adding a new model via config
+
+```yaml
+# litellm_config.yaml
+- model_name: phi3
+  litellm_params:
+    model: ollama/phi3
+    api_base: http://localhost:11434
+```
+
+```bash
+ollama pull phi3
+litellm --config litellm_config.yaml --port 4000
+```
+
+---
+
+## Data Flow
+
+```
+Your App
+  openai.chat.completions.create({ model: "gpt-4o", messages: [...] })
+        │
+        ▼
+langprotect SDK
+  1. Armour input scan  →  sanitize / block / log
+  2. LLM call          →  OpenAI direct or LiteLLM proxy
+  3. Armour output scan →  deanonymize + eval trigger
+        │
+        ▼
+  Response returned to caller
+  (eval runs as background task on LangProtect backend)
+```
+
+---
+
+## Build
+
+```bash
+npm run build   # compile TypeScript to dist/
+npm run dev     # watch mode
+```
+
+---
+
+## Troubleshooting
+
+**`blocked` check not working**
+
+Use the `in` operator to type-narrow correctly:
+
+```typescript
+// Wrong — TypeScript will complain
+if (response.blocked) { ... }
+
+// Correct — narrows the else branch to a normal completion
+if ("blocked" in response) { ... }
+```
+
+**Non-OpenAI model fails**
+
+Set `litellmHost` in `init()` and ensure the LiteLLM proxy is running with the model configured.
+
+**Armour scan times out**
+
+Increase `scanTimeout` in `init()` (default 60 s). Check that `armourBaseUrl` is reachable from your environment.
+
+**Module not found: `langprotect-armor/langfuse`**
+
+Run `npm run build` first to compile TypeScript to `dist/`, then the package exports map resolves correctly.

package/dist/langfuse/armour.d.ts

@@ -0,0 +1,41 @@
+/**
+ * langprotect-armor/langfuse/armour — Armour security scanning.
+ *
+ * All config is read lazily via getConfig() on each call, so init() values
+ * take effect immediately without requiring a specific import order.
+ *
+ * Environment variables (overridden by init()):
+ *   ARMOUR_BASE_URL    — Armour API base URL
+ *   ARMOUR_API_KEY     — Armour API key (X-API-Key header)
+ *   ARMOUR_TRACE_ONLY  — "true" = log only, skip security checks
+ *   ARMOUR_SECURITY_ON — "true" = enable full Armour scanning
+ *   ARMOUR_SCAN_TIMEOUT — scan HTTP timeout in seconds (default 60)
+ */
+export declare function setSecurity(enabled: boolean): void;
+export declare function isSecurityOn(): boolean;
+export declare function isTraceOnly(): boolean;
+export declare class BlockedResponse {
+    readonly blocked = true;
+    readonly content: string;
+    readonly model: string;
+    readonly usage: {
+        prompt_tokens: number;
+        completion_tokens: number;
+        total_tokens: number;
+    };
+    constructor(model?: string);
+}
+export interface ArmourScanResult {
+    status: string;
+    risk_score?: number;
+    request_id?: string;
+    sanitized_prompt?: string;
+    sanitized_output?: string;
+}
+export declare function callArmourScan(userInput: string, sessionId: string, userId: string, options?: {
+    aiResponse?: string;
+    scanType?: "input" | "output";
+    traceId?: string;
+    evalTrace?: Record<string, unknown>;
+}): Promise<ArmourScanResult>;
+//# sourceMappingURL=armour.d.ts.map

package/dist/langfuse/armour.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"armour.d.ts","sourceRoot":"","sources":["../../src/langfuse/armour.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AASH,wBAAgB,WAAW,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAElD;AAED,wBAAgB,YAAY,IAAI,OAAO,CAEtC;AAED,wBAAgB,WAAW,IAAI,OAAO,CAErC;AAED,qBAAa,eAAe;IAC1B,QAAQ,CAAC,OAAO,QAAQ;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE;QAAE,aAAa,EAAE,MAAM,CAAC;QAAC,iBAAiB,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,CAAC;gBAE/E,KAAK,SAAK;CAKvB;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAa,MAAM,CAAC;IAC1B,UAAU,CAAC,EAAQ,MAAM,CAAC;IAC1B,UAAU,CAAC,EAAQ,MAAM,CAAC;IAC1B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,wBAAsB,cAAc,CAClC,SAAS,EAAG,MAAM,EAClB,SAAS,EAAG,MAAM,EAClB,MAAM,EAAM,MAAM,EAClB,OAAO,GAAE;IACP,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAI,OAAO,GAAG,QAAQ,CAAC;IAChC,OAAO,CAAC,EAAK,MAAM,CAAC;IACpB,SAAS,CAAC,EAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjC,GACL,OAAO,CAAC,gBAAgB,CAAC,CA4C3B"}

package/dist/langfuse/armour.js

@@ -0,0 +1,78 @@
+/**
+ * langprotect-armor/langfuse/armour — Armour security scanning.
+ *
+ * All config is read lazily via getConfig() on each call, so init() values
+ * take effect immediately without requiring a specific import order.
+ *
+ * Environment variables (overridden by init()):
+ *   ARMOUR_BASE_URL    — Armour API base URL
+ *   ARMOUR_API_KEY     — Armour API key (X-API-Key header)
+ *   ARMOUR_TRACE_ONLY  — "true" = log only, skip security checks
+ *   ARMOUR_SECURITY_ON — "true" = enable full Armour scanning
+ *   ARMOUR_SCAN_TIMEOUT — scan HTTP timeout in seconds (default 60)
+ */
+import { getConfig } from "./config.js";
+const _BLOCKED_MESSAGE = "This response has been blocked by security policy.";
+// Runtime toggle — setSecurity() writes here; takes priority over getConfig().securityOn.
+let _securityOnOverride = null;
+export function setSecurity(enabled) {
+    _securityOnOverride = enabled;
+}
+export function isSecurityOn() {
+    return _securityOnOverride !== null ? _securityOnOverride : getConfig().securityOn;
+}
+export function isTraceOnly() {
+    return getConfig().traceOnly;
+}
+export class BlockedResponse {
+    blocked = true;
+    content;
+    model;
+    usage;
+    constructor(model = "") {
+        this.content = _BLOCKED_MESSAGE;
+        this.model = model;
+        this.usage = { prompt_tokens: 0, completion_tokens: 0, total_tokens: 0 };
+    }
+}
+export async function callArmourScan(userInput, sessionId, userId, options = {}) {
+    const { aiResponse = "", scanType = "input", traceId = "", evalTrace } = options;
+    const { armourBaseUrl, armourApiKey, traceOnly, scanTimeout } = getConfig();
+    if (!armourBaseUrl || !armourApiKey) {
+        return { status: "safe" };
+    }
+    try {
+        const payload = {
+            user_input: userInput,
+            ai_response: aiResponse,
+            end_user_id: userId,
+            session_id: sessionId,
+            trace_only: traceOnly,
+            trace: traceId,
+        };
+        if (evalTrace !== undefined) {
+            payload.eval_trace = evalTrace;
+        }
+        const response = await fetch(`${armourBaseUrl}/v1/scan`, {
+            method: "POST",
+            headers: {
+                "Content-Type": "application/json",
+                "X-API-Key": armourApiKey,
+            },
+            body: JSON.stringify(payload),
+            signal: AbortSignal.timeout(scanTimeout * 1000),
+        });
+        const result = await response.json();
+        console.log(`[Armour] ${scanType} scan — ` +
+            `status: ${result.status} | ` +
+            `risk_score: ${result.risk_score} | ` +
+            `sanitized_prompt: ${result.sanitized_prompt} | ` +
+            `sanitized_output: ${result.sanitized_output}`);
+        return result;
+    }
+    catch (e) {
+        console.log(`[Armour] ${scanType} scan — exception: ${e}`);
+        return { status: "safe" }; // fail-open
+    }
+}
+//# sourceMappingURL=armour.js.map

package/dist/langfuse/armour.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"armour.js","sourceRoot":"","sources":["../../src/langfuse/armour.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAExC,MAAM,gBAAgB,GAAG,oDAAoD,CAAC;AAE9E,0FAA0F;AAC1F,IAAI,mBAAmB,GAAmB,IAAI,CAAC;AAE/C,MAAM,UAAU,WAAW,CAAC,OAAgB;IAC1C,mBAAmB,GAAG,OAAO,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,YAAY;IAC1B,OAAO,mBAAmB,KAAK,IAAI,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,UAAU,CAAC;AACrF,CAAC;AAED,MAAM,UAAU,WAAW;IACzB,OAAO,SAAS,EAAE,CAAC,SAAS,CAAC;AAC/B,CAAC;AAED,MAAM,OAAO,eAAe;IACjB,OAAO,GAAG,IAAI,CAAC;IACf,OAAO,CAAS;IAChB,KAAK,CAAS;IACd,KAAK,CAA6E;IAE3F,YAAY,KAAK,GAAG,EAAE;QACpB,IAAI,CAAC,OAAO,GAAG,gBAAgB,CAAC;QAChC,IAAI,CAAC,KAAK,GAAK,KAAK,CAAC;QACrB,IAAI,CAAC,KAAK,GAAK,EAAE,aAAa,EAAE,CAAC,EAAE,iBAAiB,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC;IAC7E,CAAC;CACF;AAUD,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,SAAkB,EAClB,SAAkB,EAClB,MAAkB,EAClB,UAKI,EAAE;IAEN,MAAM,EAAE,UAAU,GAAG,EAAE,EAAE,QAAQ,GAAG,OAAO,EAAE,OAAO,GAAG,EAAE,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC;IACjF,MAAM,EAAE,aAAa,EAAE,YAAY,EAAE,SAAS,EAAE,WAAW,EAAE,GAAG,SAAS,EAAE,CAAC;IAE5E,IAAI,CAAC,aAAa,IAAI,CAAC,YAAY,EAAE,CAAC;QACpC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAC5B,CAAC;IAED,IAAI,CAAC;QACH,MAAM,OAAO,GAA4B;YACvC,UAAU,EAAG,SAAS;YACtB,WAAW,EAAE,UAAU;YACvB,WAAW,EAAE,MAAM;YACnB,UAAU,EAAG,SAAS;YACtB,UAAU,EAAG,SAAS;YACtB,KAAK,EAAQ,OAAO;SACrB,CAAC;QACF,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC;QACjC,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,aAAa,UAAU,EAAE;YACvD,MAAM,EAAG,MAAM;YACf,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,WAAW,EAAK,YAAY;aAC7B;YACD,IAAI,EAAI,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;YAC/B,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;SAChD,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAsB,CAAC;QACzD,OAAO,CAAC,GAAG,CACT,YAAY,QAAQ,UAAU;YAC9B,WAAW,MAAM,CAAC,MAAM,KAAK;YAC7B,eAAe,MAAM,CAAC,UAAU,KAAK;YACrC,qBAAqB,MAAM,CAAC,gBAAgB,KAAK;YACjD,qBAAqB,MAAM,CAAC,gBAAgB,EAAE,CAC/C,CAAC;QACF,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,CAAC,GAAG,CAAC,YAAY,QAAQ,sBAAsB,CAAC,EAAE,CAAC,CAAC;QAC3D,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAE,YAAY;IAC1C,CAAC;AACH,CAAC"}

package/dist/langfuse/config.d.ts

@@ -0,0 +1,60 @@
+/**
+ * langprotect-armor/langfuse/config — SDK configuration.
+ *
+ * Stores values set via init() and merges them on top of environment-variable
+ * defaults every time getConfig() is called, so init() values always win and
+ * take effect immediately without requiring a specific import order.
+ */
+export interface LangProtectConfig {
+    openaiApiKey?: string;
+    /** Langfuse project public key (pk-lf-…). Also read from LANGFUSE_PUBLIC_KEY. */
+    langfusePublicKey?: string;
+    /** Langfuse project secret key (sk-lf-…). Also read from LANGFUSE_SECRET_KEY. */
+    langfuseSecretKey?: string;
+    /**
+     * Langfuse base URL. Defaults to https://cloud.langfuse.com.
+     * Set to your self-hosted URL when running LangProtect locally.
+     * Also read from LANGFUSE_BASEURL (JS) / LANGFUSE_HOST (Python parity).
+     */
+    langfuseHost?: string;
+    armourBaseUrl?: string;
+    armourApiKey?: string;
+    /** Enable Armour enforcement — sanitize or block unsafe input (default false). */
+    securityOn?: boolean;
+    /** Log-only mode — scans run but never block or sanitize (default false). */
+    traceOnly?: boolean;
+    /** Armour scan HTTP timeout in seconds (default 60). */
+    scanTimeout?: number;
+    /** LangProtect dashboard URL — used by score() (default http://localhost:8000). */
+    langprotectHost?: string;
+    /** LiteLLM proxy URL — enables non-OpenAI routing when set. */
+    litellmHost?: string;
+}
+type ResolvedConfig = Required<LangProtectConfig>;
+/** Returns the current effective config (env defaults merged with init() overrides). */
+export declare function getConfig(): ResolvedConfig;
+/**
+ * Configure the LangProtect SDK programmatically.
+ *
+ * Call this once at application startup, before any LLM calls. Values passed
+ * here override environment variables and take effect immediately because all
+ * SDK modules read config lazily via getConfig().
+ *
+ * @example
+ * ```typescript
+ * import { init, openai } from "langprotect-armor/langfuse";
+ *
+ * init({
+ *   openaiApiKey:      "sk-...",
+ *   langfusePublicKey: "pk-lf-...",
+ *   langfuseSecretKey: "sk-lf-...",
+ *   langfuseHost:      "https://cloud.langfuse.com",
+ *   armourBaseUrl:     "https://langprotect-xxx.run.app",
+ *   armourApiKey:      "sk-armour-...",
+ *   securityOn:        true,
+ * });
+ * ```
+ */
+export declare function init(cfg: LangProtectConfig): void;
+export {};
+//# sourceMappingURL=config.d.ts.map

package/dist/langfuse/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/langfuse/config.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,MAAM,WAAW,iBAAiB;IAChC,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB,iFAAiF;IACjF,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,iFAAiF;IACjF,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAG,MAAM,CAAC;IACvB,kFAAkF;IAClF,UAAU,CAAC,EAAK,OAAO,CAAC;IACxB,6EAA6E;IAC7E,SAAS,CAAC,EAAM,OAAO,CAAC;IACxB,wDAAwD;IACxD,WAAW,CAAC,EAAI,MAAM,CAAC;IACvB,mFAAmF;IACnF,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,+DAA+D;IAC/D,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,KAAK,cAAc,GAAG,QAAQ,CAAC,iBAAiB,CAAC,CAAC;AAuBlD,wFAAwF;AACxF,wBAAgB,SAAS,IAAI,cAAc,CAQ1C;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,IAAI,CAAC,GAAG,EAAE,iBAAiB,GAAG,IAAI,CAgBjD"}

package/dist/langfuse/config.js

@@ -0,0 +1,80 @@
+/**
+ * langprotect-armor/langfuse/config — SDK configuration.
+ *
+ * Stores values set via init() and merges them on top of environment-variable
+ * defaults every time getConfig() is called, so init() values always win and
+ * take effect immediately without requiring a specific import order.
+ */
+// Values explicitly set via init() — merged on top of env-var defaults.
+let _override = {};
+function _fromEnv() {
+    return {
+        openaiApiKey: process.env.OPENAI_API_KEY ?? "",
+        langfusePublicKey: process.env.LANGFUSE_PUBLIC_KEY ?? "",
+        langfuseSecretKey: process.env.LANGFUSE_SECRET_KEY ?? "",
+        langfuseHost: (process.env.LANGFUSE_BASEURL ?? process.env.LANGFUSE_HOST ?? "").replace(/\/$/, ""),
+        armourBaseUrl: (process.env.ARMOUR_BASE_URL ?? "").replace(/\/$/, ""),
+        armourApiKey: process.env.ARMOUR_API_KEY ?? "",
+        securityOn: (process.env.ARMOUR_SECURITY_ON ?? "false").toLowerCase() === "true",
+        traceOnly: (process.env.ARMOUR_TRACE_ONLY ?? "false").toLowerCase() === "true",
+        scanTimeout: parseInt(process.env.ARMOUR_SCAN_TIMEOUT ?? "60", 10),
+        langprotectHost: process.env.LANGPROTECT_HOST ?? "http://localhost:8000",
+        litellmHost: (process.env.LITELLM_HOST ?? "").trim(),
+    };
+}
+const _stripSlash = (v) => v.replace(/\/$/, "");
+/** Returns the current effective config (env defaults merged with init() overrides). */
+export function getConfig() {
+    const merged = { ..._fromEnv(), ..._override };
+    // Normalize URL fields — init() overrides may carry a trailing slash that would
+    // otherwise produce double-slash request paths (e.g. host//v1/scan).
+    merged.langfuseHost = _stripSlash(merged.langfuseHost);
+    merged.armourBaseUrl = _stripSlash(merged.armourBaseUrl);
+    merged.langprotectHost = _stripSlash(merged.langprotectHost);
+    return merged;
+}
+/**
+ * Configure the LangProtect SDK programmatically.
+ *
+ * Call this once at application startup, before any LLM calls. Values passed
+ * here override environment variables and take effect immediately because all
+ * SDK modules read config lazily via getConfig().
+ *
+ * @example
+ * ```typescript
+ * import { init, openai } from "langprotect-armor/langfuse";
+ *
+ * init({
+ *   openaiApiKey:      "sk-...",
+ *   langfusePublicKey: "pk-lf-...",
+ *   langfuseSecretKey: "sk-lf-...",
+ *   langfuseHost:      "https://cloud.langfuse.com",
+ *   armourBaseUrl:     "https://langprotect-xxx.run.app",
+ *   armourApiKey:      "sk-armour-...",
+ *   securityOn:        true,
+ * });
+ * ```
+ */
+export function init(cfg) {
+    _override = { ..._override, ...cfg };
+    // Mirror to env vars so that the Langfuse SDK (which reads process.env
+    // on client construction) picks up the values set here.
+    if (cfg.langfusePublicKey)
+        process.env.LANGFUSE_PUBLIC_KEY = cfg.langfusePublicKey;
+    if (cfg.langfuseSecretKey)
+        process.env.LANGFUSE_SECRET_KEY = cfg.langfuseSecretKey;
+    if (cfg.langfuseHost) {
+        const host = cfg.langfuseHost.replace(/\/$/, "");
+        process.env.LANGFUSE_BASEURL = host;
+        process.env.LANGFUSE_HOST = host;
+    }
+    if (cfg.openaiApiKey)
+        process.env.OPENAI_API_KEY = cfg.openaiApiKey;
+    if (cfg.armourBaseUrl)
+        process.env.ARMOUR_BASE_URL = cfg.armourBaseUrl.replace(/\/$/, "");
+    if (cfg.armourApiKey)
+        process.env.ARMOUR_API_KEY = cfg.armourApiKey;
+    if (cfg.litellmHost !== undefined)
+        process.env.LITELLM_HOST = cfg.litellmHost;
+}
+//# sourceMappingURL=config.js.map

package/dist/langfuse/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/langfuse/config.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAgCH,wEAAwE;AACxE,IAAI,SAAS,GAAsB,EAAE,CAAC;AAEtC,SAAS,QAAQ;IACf,OAAO;QACL,YAAY,EAAO,OAAO,CAAC,GAAG,CAAC,cAAc,IAAiB,EAAE;QAChE,iBAAiB,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAY,EAAE;QAChE,iBAAiB,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAY,EAAE;QAChE,YAAY,EAAO,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;QACvG,aAAa,EAAM,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,IAAK,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;QAC1E,YAAY,EAAO,OAAO,CAAC,GAAG,CAAC,cAAc,IAAiB,EAAE;QAChE,UAAU,EAAS,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,OAAO,CAAC,CAAC,WAAW,EAAE,KAAK,MAAM;QACvF,SAAS,EAAU,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAK,OAAO,CAAC,CAAC,WAAW,EAAE,KAAK,MAAM;QACvF,WAAW,EAAQ,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,IAAI,EAAE,EAAE,CAAC;QACxE,eAAe,EAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,uBAAuB;QAC1E,WAAW,EAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;KAC3D,CAAC;AACJ,CAAC;AAED,MAAM,WAAW,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AAExD,wFAAwF;AACxF,MAAM,UAAU,SAAS;IACvB,MAAM,MAAM,GAAG,EAAE,GAAG,QAAQ,EAAE,EAAE,GAAG,SAAS,EAAE,CAAC;IAC/C,gFAAgF;IAChF,qEAAqE;IACrE,MAAM,CAAC,YAAY,GAAM,WAAW,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAC1D,MAAM,CAAC,aAAa,GAAK,WAAW,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IAC3D,MAAM,CAAC,eAAe,GAAG,WAAW,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;IAC7D,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,UAAU,IAAI,CAAC,GAAsB;IACzC,SAAS,GAAG,EAAE,GAAG,SAAS,EAAE,GAAG,GAAG,EAAE,CAAC;IAErC,uEAAuE;IACvE,wDAAwD;IACxD,IAAI,GAAG,CAAC,iBAAiB;QAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB,GAAG,GAAG,CAAC,iBAAiB,CAAC;IACnF,IAAI,GAAG,CAAC,iBAAiB;QAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB,GAAG,GAAG,CAAC,iBAAiB,CAAC;IACnF,IAAI,GAAG,CAAC,YAAY,EAAE,CAAC;QACrB,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACjD,OAAO,CAAC,GAAG,CAAC,gBAAgB,GAAG,IAAI,CAAC;QACpC,OAAO,CAAC,GAAG,CAAC,aAAa,GAAM,IAAI,CAAC;IACtC,CAAC;IACD,IAAI,GAAG,CAAC,YAAY;QAAG,OAAO,CAAC,GAAG,CAAC,cAAc,GAAS,GAAG,CAAC,YAAY,CAAC;IAC3E,IAAI,GAAG,CAAC,aAAa;QAAE,OAAO,CAAC,GAAG,CAAC,eAAe,GAAS,GAAG,CAAC,aAAa,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAChG,IAAI,GAAG,CAAC,YAAY;QAAG,OAAO,CAAC,GAAG,CAAC,cAAc,GAAU,GAAG,CAAC,YAAY,CAAC;IAC5E,IAAI,GAAG,CAAC,WAAW,KAAK,SAAS;QAAE,OAAO,CAAC,GAAG,CAAC,YAAY,GAAG,GAAG,CAAC,WAAW,CAAC;AAChF,CAAC"}

package/dist/langfuse/index.d.ts

@@ -0,0 +1,60 @@
+/**
+ * langprotect-armor/langfuse — public interface for LangProtect SDK.
+ *
+ * Architecture:
+ *   User code → LangProtect proxy → observeOpenAI (Langfuse tracing) → OpenAI API
+ *                                 ↓
+ *                        Armour input / output scan
+ *
+ * Langfuse handles full LLM tracing (input, output, tokens, latency, cost).
+ * Armour adds security enforcement: PII detection, prompt-injection defence, policy checks.
+ *
+ * @example
+ * ```typescript
+ * import { init, openai } from "langprotect-armor/langfuse";
+ *
+ * init({
+ *   openaiApiKey:      "sk-...",
+ *   langfusePublicKey: "pk-lf-...",
+ *   langfuseSecretKey: "sk-lf-...",
+ *   langfuseHost:      "https://cloud.langfuse.com",
+ *   armourBaseUrl:     "https://langprotect-xxx.run.app",
+ *   armourApiKey:      "sk-armour-...",
+ *   securityOn:        true,
+ * });
+ *
+ * const response = await openai.chat.completions.create({
+ *   model:     "gpt-4o",
+ *   messages:  [{ role: "user", content: "Hello!" }],
+ *   sessionId: "sess-123",
+ *   userId:    "user-42",
+ * });
+ *
+ * if ("blocked" in response && response.blocked) {
+ *   console.log(response.content);
+ * }
+ * ```
+ */
+import type { ChatCompletionCreateParamsNonStreaming, ChatCompletion } from "openai/resources/chat/completions";
+import { BlockedResponse } from "./armour.js";
+export { init } from "./config.js";
+export { setSecurity } from "./armour.js";
+export { score } from "./tracing.js";
+export { BlockedResponse } from "./armour.js";
+type TracingParams = {
+    name?: string;
+    sessionId?: string;
+    userId?: string;
+    tags?: string[];
+    metadata?: Record<string, unknown>;
+    traceId?: string;
+};
+type CreateParams = Omit<ChatCompletionCreateParamsNonStreaming, "stream" | "metadata"> & TracingParams;
+export declare const openai: {
+    chat: {
+        completions: {
+            create(params: CreateParams): Promise<ChatCompletion | BlockedResponse>;
+        };
+    };
+};
+//# sourceMappingURL=index.d.ts.map

package/dist/langfuse/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/langfuse/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAKH,OAAO,KAAK,EACV,sCAAsC,EACtC,cAAc,EACf,MAAM,mCAAmC,CAAC;AAE3C,OAAO,EAAkB,eAAe,EAA6B,MAAM,aAAa,CAAC;AAIzF,OAAO,EAAE,IAAI,EAAE,MAAiB,aAAa,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAU,aAAa,CAAC;AAC9C,OAAO,EAAE,KAAK,EAAE,MAAgB,cAAc,CAAC;AAC/C,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AA0C9C,KAAK,aAAa,GAAG;IACnB,IAAI,CAAC,EAAO,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAK,MAAM,CAAC;IACnB,IAAI,CAAC,EAAO,MAAM,EAAE,CAAC;IACrB,QAAQ,CAAC,EAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpC,OAAO,CAAC,EAAI,MAAM,CAAC;CACpB,CAAC;AAKF,KAAK,YAAY,GAAG,IAAI,CAAC,sCAAsC,EAAE,QAAQ,GAAG,UAAU,CAAC,GAAG,aAAa,CAAC;AA0JxG,eAAO,MAAM,MAAM;;;2BAvJI,YAAY,GAAG,OAAO,CAAC,cAAc,GAAG,eAAe,CAAC;;;CA2J9E,CAAC"}

package/dist/langfuse/index.js

@@ -0,0 +1,218 @@
+/**
+ * langprotect-armor/langfuse — public interface for LangProtect SDK.
+ *
+ * Architecture:
+ *   User code → LangProtect proxy → observeOpenAI (Langfuse tracing) → OpenAI API
+ *                                 ↓
+ *                        Armour input / output scan
+ *
+ * Langfuse handles full LLM tracing (input, output, tokens, latency, cost).
+ * Armour adds security enforcement: PII detection, prompt-injection defence, policy checks.
+ *
+ * @example
+ * ```typescript
+ * import { init, openai } from "langprotect-armor/langfuse";
+ *
+ * init({
+ *   openaiApiKey:      "sk-...",
+ *   langfusePublicKey: "pk-lf-...",
+ *   langfuseSecretKey: "sk-lf-...",
+ *   langfuseHost:      "https://cloud.langfuse.com",
+ *   armourBaseUrl:     "https://langprotect-xxx.run.app",
+ *   armourApiKey:      "sk-armour-...",
+ *   securityOn:        true,
+ * });
+ *
+ * const response = await openai.chat.completions.create({
+ *   model:     "gpt-4o",
+ *   messages:  [{ role: "user", content: "Hello!" }],
+ *   sessionId: "sess-123",
+ *   userId:    "user-42",
+ * });
+ *
+ * if ("blocked" in response && response.blocked) {
+ *   console.log(response.content);
+ * }
+ * ```
+ */
+import { randomUUID } from "node:crypto";
+import OpenAI from "openai";
+import { observeOpenAI } from "@langfuse/openai";
+import { callArmourScan, BlockedResponse, isSecurityOn, isTraceOnly } from "./armour.js";
+import { detectProvider, getLitellmClient } from "./routing.js";
+import { getConfig } from "./config.js";
+export { init } from "./config.js";
+export { setSecurity } from "./armour.js";
+export { score } from "./tracing.js";
+export { BlockedResponse } from "./armour.js";
+const _ANONYMIZATION_HINT = "Some values in this conversation have been anonymized with tokens " +
+    "such as [PERSON_1], [EMAIL_ADDRESS_1], [PHONE_NUMBER_1], [DATE_TIME_1], etc. " +
+    "These tokens represent real values. Respond naturally and reference them " +
+    "as-is when needed — do not ask the user to provide the actual values.";
+/**
+ * Return the scannable text of a chat message's content.
+ *
+ * OpenAI message content is either a plain string or, for multimodal input, an
+ * array of content parts (text parts plus image parts). We concatenate the text
+ * parts so the Armour scan always receives a string. Missing content yields "".
+ */
+function extractText(content) {
+    if (content == null)
+        return "";
+    if (typeof content === "string")
+        return content;
+    if (Array.isArray(content)) {
+        return content
+            .filter((p) => typeof p === "object" && p !== null && p.type === "text")
+            .map(p => p.text)
+            .join(" ");
+    }
+    return String(content);
+}
+// Base OpenAI client — constructed lazily on first use (never at import time) so
+// that init({ openaiApiKey }) can run first. Constructing at module load would
+// throw if OPENAI_API_KEY is not already in the environment. Wrapped per-call
+// with observeOpenAI for Langfuse tracing.
+let _client = null;
+function getClient() {
+    if (_client === null) {
+        const { openaiApiKey } = getConfig();
+        _client = new OpenAI(openaiApiKey ? { apiKey: openaiApiKey } : {});
+    }
+    return _client;
+}
+const _completions = {
+    async create(params) {
+        // Streaming is not supported: the SDK needs the full completion to run the
+        // Armour output scan and trigger evaluations. The type already excludes
+        // `stream`, but guard at runtime for plain-JS callers who bypass the types.
+        if (params.stream) {
+            throw new Error("langprotect: streaming responses are not supported (stream: true). " +
+                "The Armour output scan requires the complete response. Remove `stream` " +
+                "or call the OpenAI client directly for streaming.");
+        }
+        const { name, sessionId = "", userId = "", tags, traceId = "", metadata: rawMetadata, ...openaiParams } = params;
+        const model = params.model ?? "";
+        const effectiveTraceId = traceId || randomUUID();
+        const _startMs = Date.now();
+        const metadata = { ...(rawMetadata ?? {}) };
+        if (sessionId)
+            metadata.session_id ??= sessionId;
+        if (userId)
+            metadata.user_id ??= userId;
+        if (tags)
+            metadata.tags ??= tags;
+        // ── Armour input scan ──────────────────────────────────────────────────
+        const messages = [...(params.messages ?? [])];
+        const lastUser = [...messages].reverse().find(m => m.role === "user");
+        const userInput = extractText(lastUser?.content);
+        const inputScan = await callArmourScan(userInput, sessionId, userId, {
+            scanType: "input",
+            traceId: effectiveTraceId,
+        });
+        const sanitized = inputScan.sanitized_prompt;
+        Object.assign(metadata, {
+            armour_input_status: inputScan.status,
+            armour_risk_score: inputScan.risk_score ?? 0,
+            armour_request_id: inputScan.request_id,
+            armour_sanitized: sanitized !== undefined,
+        });
+        let usedSanitizedPrompt = false;
+        if (!isTraceOnly() && inputScan.status !== "safe") {
+            if (isSecurityOn() && sanitized) {
+                const idx = [...messages].reverse().findIndex(m => m.role === "user");
+                if (idx !== -1) {
+                    const realIdx = messages.length - 1 - idx;
+                    messages[realIdx] = { ...messages[realIdx], content: sanitized };
+                }
+                const sysIdx = messages.findIndex(m => m.role === "system");
+                if (sysIdx !== -1) {
+                    const existing = messages[sysIdx].content ?? "";
+                    messages[sysIdx] = {
+                        ...messages[sysIdx],
+                        content: `${existing}\n\n${_ANONYMIZATION_HINT}`,
+                    };
+                }
+                else {
+                    messages.unshift({ role: "system", content: _ANONYMIZATION_HINT });
+                }
+                openaiParams.messages = messages;
+                usedSanitizedPrompt = true;
+            }
+            else {
+                return new BlockedResponse(model);
+            }
+        }
+        // ── LLM call via observeOpenAI (Langfuse traces automatically) ────────
+        // observeOpenAI wraps the OpenAI client for this call only, capturing
+        // input, output, tokens, latency, and cost in the Langfuse dashboard.
+        // We pass effectiveTraceId as traceName so the Langfuse trace is findable
+        // by the same ID used in the Armour scan.
+        let response;
+        const litellmClient = getLitellmClient();
+        if (litellmClient && detectProvider(model) !== "openai") {
+            // LiteLLM path: wrap the LiteLLM client with observeOpenAI too.
+            const tracedLitellm = observeOpenAI(litellmClient, {
+                traceName: effectiveTraceId,
+                sessionId: sessionId || undefined,
+                userId: userId || undefined,
+                tags: tags || undefined,
+                generationName: name || "chat",
+                generationMetadata: metadata,
+            });
+            response = await tracedLitellm.chat.completions.create(openaiParams);
+        }
+        else {
+            const tracedClient = observeOpenAI(getClient(), {
+                traceName: effectiveTraceId,
+                sessionId: sessionId || undefined,
+                userId: userId || undefined,
+                tags: tags || undefined,
+                generationName: name || "chat",
+                generationMetadata: metadata,
+            });
+            response = await tracedClient.chat.completions.create(openaiParams);
+        }
+        // ── Collect trace metrics for Armour eval trigger ─────────────────────
+        const latency = Date.now() - _startMs;
+        const inTok = response.usage?.prompt_tokens ?? 0;
+        const outTok = response.usage?.completion_tokens ?? 0;
+        const outModel = response.model ?? model;
+        // ── Armour output scan + server-side eval trigger ─────────────────────
+        let aiReply = response.choices[0]?.message.content ?? "";
+        const evalTracePayload = {
+            trace_id: effectiveTraceId,
+            input: userInput,
+            output: aiReply,
+            model: outModel,
+            latency_ms: latency,
+            prompt_tokens: inTok,
+            completion_tokens: outTok,
+            cost_usd: null,
+            session_id: sessionId,
+            user_id: userId,
+            metadata,
+        };
+        const outputScan = await callArmourScan("", sessionId, userId, {
+            aiResponse: aiReply,
+            scanType: "output",
+            traceId: effectiveTraceId,
+            evalTrace: evalTracePayload,
+        });
+        // ── De-anonymization — restore real values in the AI reply ────────────
+        if (usedSanitizedPrompt && outputScan.sanitized_output) {
+            aiReply = outputScan.sanitized_output;
+            if (response.choices[0]?.message) {
+                response.choices[0].message.content = aiReply;
+            }
+            console.log("[Armour] deanonymization — restored=yes");
+        }
+        return response;
+    },
+};
+export const openai = {
+    chat: {
+        completions: _completions,
+    },
+};
+//# sourceMappingURL=index.js.map

package/dist/langfuse/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/langfuse/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAQ,aAAa,CAAC;AAC3C,OAAO,MAAM,MAAgB,QAAQ,CAAC;AACtC,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAMjD,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACzF,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAiC,cAAc,CAAC;AAC3F,OAAO,EAAE,SAAS,EAAE,MAAwD,aAAa,CAAC;AAE1F,OAAO,EAAE,IAAI,EAAE,MAAiB,aAAa,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAU,aAAa,CAAC;AAC9C,OAAO,EAAE,KAAK,EAAE,MAAgB,cAAc,CAAC;AAC/C,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE9C,MAAM,mBAAmB,GACvB,oEAAoE;IACpE,+EAA+E;IAC/E,2EAA2E;IAC3E,uEAAuE,CAAC;AAE1E;;;;;;GAMG;AACH,SAAS,WAAW,CAAC,OAAgB;IACnC,IAAI,OAAO,IAAI,IAAI;QAAE,OAAO,EAAE,CAAC;IAC/B,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC;IAChD,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,OAAO,OAAO;aACX,MAAM,CAAC,CAAC,CAAC,EAAuC,EAAE,CACjD,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAK,CAAuB,CAAC,IAAI,KAAK,MAAM,CAAC;aACjF,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;aAChB,IAAI,CAAC,GAAG,CAAC,CAAC;IACf,CAAC;IACD,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC;AACzB,CAAC;AAED,iFAAiF;AACjF,+EAA+E;AAC/E,8EAA8E;AAC9E,2CAA2C;AAC3C,IAAI,OAAO,GAAkB,IAAI,CAAC;AAClC,SAAS,SAAS;IAChB,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,MAAM,EAAE,YAAY,EAAE,GAAG,SAAS,EAAE,CAAC;QACrC,OAAO,GAAG,IAAI,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAiBD,MAAM,YAAY,GAAG;IACnB,KAAK,CAAC,MAAM,CAAC,MAAoB;QAC/B,2EAA2E;QAC3E,wEAAwE;QACxE,4EAA4E;QAC5E,IAAK,MAA+B,CAAC,MAAM,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CACb,qEAAqE;gBACrE,yEAAyE;gBACzE,mDAAmD,CACpD,CAAC;QACJ,CAAC;QAED,MAAM,EACJ,IAAI,EACJ,SAAS,GAAI,EAAE,EACf,MAAM,GAAO,EAAE,EACf,IAAI,EACJ,OAAO,GAAM,EAAE,EACf,QAAQ,EAAG,WAAW,EACtB,GAAG,YAAY,EAChB,GAAG,MAAM,CAAC;QAEX,MAAM,KAAK,GAAc,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;QAC5C,MAAM,gBAAgB,GAAG,OAAO,IAAI,UAAU,EAAE,CAAC;QACjD,MAAM,QAAQ,GAAW,IAAI,CAAC,GAAG,EAAE,CAAC;QAEpC,MAAM,QAAQ,GAA4B,EAAE,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,EAAE,CAAC;QACrE,IAAI,SAAS;YAAE,QAAQ,CAAC,UAAU,KAAK,SAAS,CAAC;QACjD,IAAI,MAAM;YAAK,QAAQ,CAAC,OAAO,KAAQ,MAAM,CAAC;QAC9C,IAAI,IAAI;YAAO,QAAQ,CAAC,IAAI,KAAW,IAAI,CAAC;QAE5C,0EAA0E;QAC1E,MAAM,QAAQ,GAAI,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAC;QAC/C,MAAM,QAAQ,GAAI,CAAC,GAAG,QAAQ,CAAC,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC;QACvE,MAAM,SAAS,GAAG,WAAW,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAEjD,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE;YACnE,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAG,gBAAgB;SAC3B,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,SAAS,CAAC,gBAAgB,CAAC;QAE7C,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE;YACtB,mBAAmB,EAAE,SAAS,CAAC,MAAM;YACrC,iBAAiB,EAAI,SAAS,CAAC,UAAU,IAAK,CAAC;YAC/C,iBAAiB,EAAI,SAAS,CAAC,UAAU;YACzC,gBAAgB,EAAK,SAAS,KAAK,SAAS;SAC7C,CAAC,CAAC;QAEH,IAAI,mBAAmB,GAAG,KAAK,CAAC;QAChC,IAAI,CAAC,WAAW,EAAE,IAAI,SAAS,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAClD,IAAI,YAAY,EAAE,IAAI,SAAS,EAAE,CAAC;gBAChC,MAAM,GAAG,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC;gBACtE,IAAI,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC;oBACf,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,GAAG,GAAG,CAAC;oBAC1C,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;gBACnE,CAAC;gBACD,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;gBAC5D,IAAI,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;oBAClB,MAAM,QAAQ,GAAI,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAkB,IAAI,EAAE,CAAC;oBAC5D,QAAQ,CAAC,MAAM,CAAC,GAAG;wBACjB,GAAG,QAAQ,CAAC,MAAM,CAAC;wBACnB,OAAO,EAAE,GAAG,QAAQ,OAAO,mBAAmB,EAAE;qBACjD,CAAC;gBACJ,CAAC;qBAAM,CAAC;oBACN,QAAQ,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC,CAAC;gBACrE,CAAC;gBACD,YAAY,CAAC,QAAQ,GAAG,QAAwC,CAAC;gBACjE,mBAAmB,GAAK,IAAI,CAAC;YAC/B,CAAC;iBAAM,CAAC;gBACN,OAAO,IAAI,eAAe,CAAC,KAAK,CAAC,CAAC;YACpC,CAAC;QACH,CAAC;QAED,yEAAyE;QACzE,sEAAsE;QACtE,sEAAsE;QACtE,0EAA0E;QAC1E,0CAA0C;QAC1C,IAAI,QAAwB,CAAC;QAC7B,MAAM,aAAa,GAAG,gBAAgB,EAAE,CAAC;QAEzC,IAAI,aAAa,IAAI,cAAc,CAAC,KAAK,CAAC,KAAK,QAAQ,EAAE,CAAC;YACxD,gEAAgE;YAChE,MAAM,aAAa,GAAG,aAAa,CAAC,aAAa,EAAE;gBACjD,SAAS,EAAW,gBAAgB;gBACpC,SAAS,EAAW,SAAS,IAAK,SAAS;gBAC3C,MAAM,EAAc,MAAM,IAAQ,SAAS;gBAC3C,IAAI,EAAgB,IAAI,IAAU,SAAS;gBAC3C,cAAc,EAAM,IAAI,IAAU,MAAM;gBACxC,kBAAkB,EAAE,QAAQ;aAC7B,CAAC,CAAC;YACH,QAAQ,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CACpD,YAAsD,CACrC,CAAC;QACtB,CAAC;aAAM,CAAC;YACN,MAAM,YAAY,GAAG,aAAa,CAAC,SAAS,EAAE,EAAE;gBAC9C,SAAS,EAAW,gBAAgB;gBACpC,SAAS,EAAW,SAAS,IAAK,SAAS;gBAC3C,MAAM,EAAc,MAAM,IAAQ,SAAS;gBAC3C,IAAI,EAAgB,IAAI,IAAU,SAAS;gBAC3C,cAAc,EAAM,IAAI,IAAU,MAAM;gBACxC,kBAAkB,EAAE,QAAQ;aAC7B,CAAC,CAAC;YACH,QAAQ,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CACnD,YAAsD,CACrC,CAAC;QACtB,CAAC;QAED,yEAAyE;QACzE,MAAM,OAAO,GAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC;QACvC,MAAM,KAAK,GAAM,QAAQ,CAAC,KAAK,EAAE,aAAa,IAAQ,CAAC,CAAC;QACxD,MAAM,MAAM,GAAK,QAAQ,CAAC,KAAK,EAAE,iBAAiB,IAAI,CAAC,CAAC;QACxD,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,IAAI,KAAK,CAAC;QAEzC,yEAAyE;QACzE,IAAI,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC;QACzD,MAAM,gBAAgB,GAA4B;YAChD,QAAQ,EAAW,gBAAgB;YACnC,KAAK,EAAc,SAAS;YAC5B,MAAM,EAAa,OAAO;YAC1B,KAAK,EAAc,QAAQ;YAC3B,UAAU,EAAS,OAAO;YAC1B,aAAa,EAAM,KAAK;YACxB,iBAAiB,EAAE,MAAM;YACzB,QAAQ,EAAW,IAAI;YACvB,UAAU,EAAS,SAAS;YAC5B,OAAO,EAAY,MAAM;YACzB,QAAQ;SACT,CAAC;QAEF,MAAM,UAAU,GAAG,MAAM,cAAc,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE;YAC7D,UAAU,EAAE,OAAO;YACnB,QAAQ,EAAI,QAAQ;YACpB,OAAO,EAAK,gBAAgB;YAC5B,SAAS,EAAG,gBAAgB;SAC7B,CAAC,CAAC;QAEH,yEAAyE;QACzE,IAAI,mBAAmB,IAAI,UAAU,CAAC,gBAAgB,EAAE,CAAC;YACvD,OAAO,GAAG,UAAU,CAAC,gBAAgB,CAAC;YACtC,IAAI,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;gBACjC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,GAAG,OAAO,CAAC;YAChD,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,yCAAyC,CAAC,CAAC;QACzD,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,MAAM,GAAG;IACpB,IAAI,EAAE;QACJ,WAAW,EAAE,YAAY;KAC1B;CACF,CAAC"}

package/dist/langfuse/routing.d.ts

@@ -0,0 +1,11 @@
+/**
+ * langprotect-armor/langfuse/routing — Model provider detection and LiteLLM client setup.
+ *
+ * Environment variables (overridden by init()):
+ *   LITELLM_HOST — LiteLLM proxy base URL (optional; required for non-OpenAI models)
+ */
+import OpenAI from "openai";
+/** Returns the LiteLLM client if a host is configured, otherwise null. */
+export declare function getLitellmClient(): OpenAI | null;
+export declare function detectProvider(model: string): string;
+//# sourceMappingURL=routing.d.ts.map

package/dist/langfuse/routing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"routing.d.ts","sourceRoot":"","sources":["../../src/langfuse/routing.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,MAAM,MAAY,QAAQ,CAAC;AAOlC,0EAA0E;AAC1E,wBAAgB,gBAAgB,IAAI,MAAM,GAAG,IAAI,CAQhD;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAapD"}

package/dist/langfuse/routing.js

@@ -0,0 +1,37 @@
+/**
+ * langprotect-armor/langfuse/routing — Model provider detection and LiteLLM client setup.
+ *
+ * Environment variables (overridden by init()):
+ *   LITELLM_HOST — LiteLLM proxy base URL (optional; required for non-OpenAI models)
+ */
+import OpenAI from "openai";
+import { getConfig } from "./config.js";
+// Cached per litellmHost value so we don't recreate on every call.
+let _cachedHost = "";
+let _cachedClient = null;
+/** Returns the LiteLLM client if a host is configured, otherwise null. */
+export function getLitellmClient() {
+    const host = getConfig().litellmHost;
+    if (!host)
+        return null;
+    if (host !== _cachedHost) {
+        _cachedHost = host;
+        _cachedClient = new OpenAI({ baseURL: `${host}/v1`, apiKey: "anything" });
+    }
+    return _cachedClient;
+}
+export function detectProvider(model) {
+    const m = (model ?? "").toLowerCase();
+    if (m.startsWith("gpt-") || m.startsWith("o1") || m.startsWith("o3") ||
+        m.startsWith("text-davinci") || m.startsWith("text-embedding"))
+        return "openai";
+    if (m.startsWith("claude") || m.startsWith("anthropic"))
+        return "anthropic";
+    if (m.startsWith("gemini") || m.startsWith("palm"))
+        return "google";
+    if (m.startsWith("llama") || m.startsWith("mistral") || m.startsWith("mixtral") ||
+        m.startsWith("codellama") || m.startsWith("phi") || m.startsWith("qwen"))
+        return "ollama";
+    return "litellm";
+}
+//# sourceMappingURL=routing.js.map

package/dist/langfuse/routing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routing.js","sourceRoot":"","sources":["../../src/langfuse/routing.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,MAAM,MAAY,QAAQ,CAAC;AAClC,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAExC,mEAAmE;AACnE,IAAI,WAAW,GAAK,EAAE,CAAC;AACvB,IAAI,aAAa,GAAkB,IAAI,CAAC;AAExC,0EAA0E;AAC1E,MAAM,UAAU,gBAAgB;IAC9B,MAAM,IAAI,GAAG,SAAS,EAAE,CAAC,WAAW,CAAC;IACrC,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;QACzB,WAAW,GAAK,IAAI,CAAC;QACrB,aAAa,GAAG,IAAI,MAAM,CAAC,EAAE,OAAO,EAAE,GAAG,IAAI,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,aAAa,CAAC;AACvB,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAa;IAC1C,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACtC,IACE,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC;QAChE,CAAC,CAAC,UAAU,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,gBAAgB,CAAC;QAC9D,OAAO,QAAQ,CAAC;IAClB,IAAI,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,WAAW,CAAC;QAAE,OAAO,WAAW,CAAC;IAC5E,IAAI,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC;QAAQ,OAAO,QAAQ,CAAC;IAC1E,IACE,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC;QAC3E,CAAC,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC;QACxE,OAAO,QAAQ,CAAC;IAClB,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/langfuse/tracing.d.ts

@@ -0,0 +1,8 @@
+/**
+ * langprotect-armor/langfuse/tracing — Feedback scoring.
+ *
+ * Environment variables (overridden by init()):
+ *   LANGPROTECT_HOST  (default: http://localhost:8000)
+ */
+export declare function score(traceId: string, value: number, comment?: string): Promise<void>;
+//# sourceMappingURL=tracing.d.ts.map

package/dist/langfuse/tracing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tracing.d.ts","sourceRoot":"","sources":["../../src/langfuse/tracing.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,wBAAsB,KAAK,CACzB,OAAO,EAAE,MAAM,EACf,KAAK,EAAI,MAAM,EACf,OAAO,SAAK,GACX,OAAO,CAAC,IAAI,CAAC,CAYf"}

package/dist/langfuse/tracing.js

@@ -0,0 +1,22 @@
+/**
+ * langprotect-armor/langfuse/tracing — Feedback scoring.
+ *
+ * Environment variables (overridden by init()):
+ *   LANGPROTECT_HOST  (default: http://localhost:8000)
+ */
+import { getConfig } from "./config.js";
+export async function score(traceId, value, comment = "") {
+    const host = getConfig().langprotectHost;
+    try {
+        await fetch(`${host}/api/feedback`, {
+            method: "POST",
+            headers: { "Content-Type": "application/json" },
+            body: JSON.stringify({ trace_id: traceId, value, comment }),
+            signal: AbortSignal.timeout(5_000),
+        });
+    }
+    catch {
+        // fail-open — scoring errors must never surface to the caller
+    }
+}
+//# sourceMappingURL=tracing.js.map

package/dist/langfuse/tracing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tracing.js","sourceRoot":"","sources":["../../src/langfuse/tracing.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAExC,MAAM,CAAC,KAAK,UAAU,KAAK,CACzB,OAAe,EACf,KAAe,EACf,OAAO,GAAG,EAAE;IAEZ,MAAM,IAAI,GAAG,SAAS,EAAE,CAAC,eAAe,CAAC;IACzC,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,GAAG,IAAI,eAAe,EAAE;YAClC,MAAM,EAAG,MAAM;YACf,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAK,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;YAC9D,MAAM,EAAG,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC;SACpC,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,8DAA8D;IAChE,CAAC;AACH,CAAC"}

package/package.json

@@ -0,0 +1,43 @@
+{
+  "name": "langprotect-armor",
+  "version": "0.1.0",
+  "description": "Self-hosted LLM observability SDK — trace any model call to your own dashboard",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/Quokka-Labs-LLP/langprotect-armor-sdk.git",
+    "directory": "typescript"
+  },
+  "homepage": "https://github.com/Quokka-Labs-LLP/langprotect-armor-sdk#readme",
+  "type": "module",
+  "main": "./dist/langfuse/index.js",
+  "types": "./dist/langfuse/index.d.ts",
+  "exports": {
+    "./langfuse": {
+      "types": "./dist/langfuse/index.d.ts",
+      "import": "./dist/langfuse/index.js"
+    }
+  },
+  "engines": {
+    "node": ">=18"
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE",
+    ".env.example"
+  ],
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsc --watch",
+    "prepublishOnly": "npm run build"
+  },
+  "dependencies": {
+    "@langfuse/openai": "^5.4.1",
+    "openai": ">=4 <6"
+  },
+  "devDependencies": {
+    "@types/node": "^20.0.0",
+    "typescript": "^5.0.0"
+  }
+}