monora-ai 2.0.0 → 2.1.3

package/dist/integrations/governance.js

@@ -0,0 +1,208 @@
+"use strict";
+/**
+ * Shared governance helpers for SDK integrations.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.preflightLlmCall = preflightLlmCall;
+exports.postflightLlmCall = postflightLlmCall;
+const runtime_1 = require("../runtime");
+const ids_1 = require("../ids");
+const context_1 = require("../context");
+const data_handling_1 = require("../data_handling");
+const policy_1 = require("../policy");
+function startLlmTrace(spanName) {
+    const currentSpan = (0, context_1.getCurrentSpan)();
+    if (currentSpan) {
+        const span = (0, context_1.startSpan)(spanName);
+        const context = (0, context_1.captureContext)();
+        if (context) {
+            return { span, context, isRoot: false };
+        }
+        const fallback = {
+            currentSpan: span,
+            spanStack: [span],
+            startTime: Date.now(),
+            stepCounter: 0,
+            eventCounter: 0,
+        };
+        return { span, context: fallback, isRoot: false };
+    }
+    const startTime = Date.now();
+    const span = {
+        traceId: (0, ids_1.generateUlid)('trc'),
+        spanId: (0, ids_1.generateUlid)('spn'),
+        parentSpanId: null,
+        name: spanName,
+        metadata: {},
+    };
+    const context = {
+        currentSpan: span,
+        spanStack: [span],
+        startTime,
+        stepCounter: 0,
+        eventCounter: 0,
+    };
+    (0, context_1.recordTraceStart)(span.traceId, startTime);
+    return { span, context, isRoot: true };
+}
+function finalizeLlmTraceSync(trace) {
+    (0, context_1.runInContext)(trace.context, () => {
+        if (trace.isRoot) {
+            (0, context_1.completeTraceSync)(trace.span);
+            return;
+        }
+        (0, context_1.popSpan)();
+    });
+}
+async function finalizeLlmTrace(trace) {
+    const result = (0, context_1.runInContext)(trace.context, () => {
+        if (trace.isRoot) {
+            return (0, context_1.completeTrace)(trace.span);
+        }
+        (0, context_1.popSpan)();
+        return undefined;
+    });
+    if (result && typeof result.then === 'function') {
+        await result;
+    }
+}
+function preflightLlmCall(options) {
+    const { model, requestPayload, dataClassification, purpose, reason, provider, spanName, } = options;
+    const trace = startLlmTrace(spanName);
+    try {
+        const state = (0, context_1.runInContext)(trace.context, () => {
+            const state = (0, runtime_1.ensureState)();
+            if (model) {
+                const registry = state.registry;
+                let matched = false;
+                if (registry) {
+                    const [, resolved, entry] = registry.resolveEntry(model);
+                    matched = resolved;
+                    if (!matched && registry.allowUnknown === false) {
+                        const violation = new policy_1.PolicyViolation('llm_call', model, 'model_registry.unknown_model', `Model '${model}' not found in registry`, new Date().toISOString());
+                        emitPolicyViolation(state, violation, dataClassification, purpose, reason);
+                        (0, runtime_1.notifyViolation)(violation);
+                    }
+                    else if (!matched && registry.allowUnknown) {
+                        emitRegistryOverride(state, model, dataClassification, purpose, reason);
+                    }
+                    void entry;
+                }
+                try {
+                    const violation = state.policyEngine.checkModel(model, dataClassification);
+                    if (violation) {
+                        emitPolicyViolation(state, violation, dataClassification, purpose, reason);
+                        (0, runtime_1.notifyViolation)(violation);
+                    }
+                }
+                catch (error) {
+                    if (error instanceof policy_1.PolicyViolation) {
+                        emitPolicyViolation(state, error, dataClassification, purpose, reason);
+                        (0, runtime_1.notifyViolation)(error);
+                    }
+                    throw error;
+                }
+            }
+            const dataHandling = state.dataHandling;
+            if (dataHandling.shouldBlock()) {
+                const matches = dataHandling.inspect('request', requestPayload, dataClassification);
+                if (matches.size > 0) {
+                    const violation = (0, data_handling_1.buildDataViolation)({
+                        eventType: 'llm_call',
+                        classification: dataClassification,
+                        ruleNames: Array.from(matches),
+                        model,
+                    });
+                    const sanitized = dataHandling.sanitizePayload('request', requestPayload, dataClassification);
+                    const body = (0, runtime_1.buildLlmBody)({
+                        model,
+                        provider: provider || 'unknown',
+                        providerMetadata: null,
+                        requestPayload: sanitized.value,
+                        response: null,
+                        durationMs: 0,
+                        status: 'policy_violation',
+                        error: null,
+                    });
+                    body.data_handling = {
+                        action: 'block',
+                        rules: Array.from(matches),
+                        target: 'request',
+                    };
+                    if (sanitized.applied.size > 0) {
+                        body.redaction = {
+                            applied: true,
+                            rules: Array.from(sanitized.applied),
+                            mode: dataHandling.mode,
+                        };
+                    }
+                    const event = state.eventBuilder.build('llm_call', body, {
+                        dataClassification,
+                        purpose,
+                        reason,
+                    });
+                    (0, runtime_1.emitEvent)(event);
+                    (0, runtime_1.notifyViolation)(violation);
+                    throw violation;
+                }
+            }
+            (0, runtime_1.applyQuotaLimits)(state, trace.span.traceId, model, dataClassification, purpose, reason);
+            return state;
+        });
+        return { state, trace };
+    }
+    catch (error) {
+        finalizeLlmTraceSync(trace);
+        throw error;
+    }
+}
+async function postflightLlmCall(options) {
+    const { state, trace, model, response, dataClassification, purpose, reason, error = false, } = options;
+    try {
+        (0, context_1.runInContext)(trace.context, () => {
+            if (error) {
+                (0, runtime_1.applyQuotaLimits)(state, trace.span.traceId, model, dataClassification, purpose, reason, [0, 0], undefined, false);
+                return;
+            }
+            const { tokens, usage } = (0, runtime_1.extractUsageMetrics)(response);
+            const cost = (0, runtime_1.estimateUsageCost)(state, model, usage, tokens);
+            (0, runtime_1.applyQuotaLimits)(state, trace.span.traceId, model, dataClassification, purpose, reason, tokens || [0, 0], cost ?? undefined);
+        });
+    }
+    finally {
+        await finalizeLlmTrace(trace);
+    }
+}
+function emitPolicyViolation(state, violation, dataClassification, purpose, reason) {
+    const body = {
+        model: violation.model,
+        policy_name: violation.policyName,
+        message: violation.message,
+        status: 'policy_violation',
+        error: null,
+    };
+    const event = state.eventBuilder.build('llm_call', body, {
+        dataClassification,
+        purpose,
+        reason,
+    });
+    (0, runtime_1.emitEvent)(event);
+}
+function emitRegistryOverride(state, model, dataClassification, purpose, reason) {
+    const registry = state.registry;
+    const body = {
+        model,
+        action: 'allow_unknown_model',
+        status: 'policy_override',
+        registry_version: registry?.version ?? null,
+        registry_hash: registry?.registryHash ?? null,
+        actor: 'system',
+        reason: reason || null,
+    };
+    const event = state.eventBuilder.build('model_registry_update', body, {
+        dataClassification,
+        purpose,
+        reason,
+    });
+    (0, runtime_1.emitEvent)(event);
+}

package/dist/integrations/langchain.d.ts

@@ -36,7 +36,11 @@ export declare class MonoraCallbackHandler {
     readonly capturePrompts: boolean;
     readonly captureCompletions: boolean;
     private runMap;
+    private runContexts;
+    private llmRuns;
     constructor(options?: MonoraCallbackHandlerOptions);
+    private ensureRunContext;
+    private finalizeRunContext;
     handleChainStart(chain: {
         name?: string;
         id?: string[];
@@ -53,6 +57,9 @@ export declare class MonoraCallbackHandler {
     handleLLMEnd(output: {
         generations?: Array<Array<{
             text?: string;
+            message?: {
+                content?: string;
+            };
         }>>;
         llmOutput?: {
             token_usage?: Record<string, number>;

package/dist/integrations/langchain.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"langchain.d.ts","sourceRoot":"","sources":["../../src/integrations/langchain.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAKH,MAAM,WAAW,4BAA4B;IAC3C,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B;AAED;;;;GAIG;AACH,qBAAa,qBAAqB;IAChC,QAAQ,CAAC,IAAI,2BAA2B;IACxC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;IACjC,QAAQ,CAAC,kBAAkB,EAAE,OAAO,CAAC;IACrC,OAAO,CAAC,MAAM,CAAkC;gBAEpC,OAAO,GAAE,4BAAiC;IAQhD,gBAAgB,CACpB,KAAK,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,EAAE,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,EACvC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAC3B,KAAK,EAAE,MAAM,EACb,WAAW,CAAC,EAAE,MAAM,EACpB,IAAI,CAAC,EAAE,MAAM,EAAE,EACf,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAC7B,OAAO,CAAC,IAAI,CAAC;IA0BV,cAAc,CAClB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAC5B,KAAK,EAAE,MAAM,EACb,WAAW,CAAC,EAAE,MAAM,GACnB,OAAO,CAAC,IAAI,CAAC;IAwBV,gBAAgB,CACpB,KAAK,EAAE,KAAK,EACZ,KAAK,EAAE,MAAM,EACb,WAAW,CAAC,EAAE,MAAM,GACnB,OAAO,CAAC,IAAI,CAAC;IA0BV,cAAc,CAClB,GAAG,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE;YAAE,UAAU,CAAC,EAAE,MAAM,CAAC;YAAC,KAAK,CAAC,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,EACxE,OAAO,EAAE,MAAM,EAAE,EACjB,KAAK,EAAE,MAAM,EACb,WAAW,CAAC,EAAE,MAAM,EACpB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EACjC,IAAI,CAAC,EAAE,MAAM,EAAE,EACf,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAC7B,OAAO,CAAC,IAAI,CAAC;IAwCV,YAAY,CAChB,MAAM,EAAE;QACN,WAAW,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC;YAAE,IAAI,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC,CAAC;QAC9C,SAAS,CAAC,EAAE;YAAE,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;SAAE,CAAC;KACtD,EACD,KAAK,EAAE,MAAM,EACb,WAAW,CAAC,EAAE,MAAM,GACnB,OAAO,CAAC,IAAI,CAAC;IAyCV,cAAc,CAClB,KAAK,EAAE,KAAK,EACZ,KAAK,EAAE,MAAM,EACb,WAAW,CAAC,EAAE,MAAM,GACnB,OAAO,CAAC,IAAI,CAAC;IAyBV,eAAe,CACnB,IAAI,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,EACvB,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,MAAM,EACb,WAAW,CAAC,EAAE,MAAM,EACpB,IAAI,CAAC,EAAE,MAAM,EAAE,EACf,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAC7B,OAAO,CAAC,IAAI,CAAC;IAgCV,aAAa,CACjB,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,EACb,WAAW,CAAC,EAAE,MAAM,GACnB,OAAO,CAAC,IAAI,CAAC;IAuBV,eAAe,CACnB,KAAK,EAAE,KAAK,EACZ,KAAK,EAAE,MAAM,EACb,WAAW,CAAC,EAAE,MAAM,GACnB,OAAO,CAAC,IAAI,CAAC;IAyBV,oBAAoB,CACxB,SAAS,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,EAC5B,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,MAAM,EACb,WAAW,CAAC,EAAE,MAAM,EACpB,IAAI,CAAC,EAAE,MAAM,EAAE,EACf,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAC7B,OAAO,CAAC,IAAI,CAAC;IA8BV,kBAAkB,CACtB,SAAS,EAAE,KAAK,CAAC;QAAE,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;KAAE,CAAC,EAC1E,KAAK,EAAE,MAAM,EACb,WAAW,CAAC,EAAE,MAAM,GACnB,OAAO,CAAC,IAAI,CAAC;IAoCV,oBAAoB,CACxB,KAAK,EAAE,KAAK,EACZ,KAAK,EAAE,MAAM,EACb,WAAW,CAAC,EAAE,MAAM,GACnB,OAAO,CAAC,IAAI,CAAC;CAwBjB"}
+{"version":3,"file":"langchain.d.ts","sourceRoot":"","sources":["../../src/integrations/langchain.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAiBH,MAAM,WAAW,4BAA4B;IAC3C,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B;AAQD;;;;GAIG;AACH,qBAAa,qBAAqB;IAChC,QAAQ,CAAC,IAAI,2BAA2B;IACxC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;IACjC,QAAQ,CAAC,kBAAkB,EAAE,OAAO,CAAC;IACrC,OAAO,CAAC,MAAM,CAAkC;IAChD,OAAO,CAAC,WAAW,CAAsC;IACzD,OAAO,CAAC,OAAO,CAOD;gBAEF,OAAO,GAAE,4BAAiC;IAOtD,OAAO,CAAC,gBAAgB;YAiDV,kBAAkB;IAmB1B,gBAAgB,CACpB,KAAK,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,EAAE,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,EACvC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAC3B,KAAK,EAAE,MAAM,EACb,WAAW,CAAC,EAAE,MAAM,EACpB,IAAI,CAAC,EAAE,MAAM,EAAE,EACf,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAC7B,OAAO,CAAC,IAAI,CAAC;IA8BV,cAAc,CAClB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAC5B,KAAK,EAAE,MAAM,EACb,WAAW,CAAC,EAAE,MAAM,GACnB,OAAO,CAAC,IAAI,CAAC;IAkCV,gBAAgB,CACpB,KAAK,EAAE,KAAK,EACZ,KAAK,EAAE,MAAM,EACb,WAAW,CAAC,EAAE,MAAM,GACnB,OAAO,CAAC,IAAI,CAAC;IAoCV,cAAc,CAClB,GAAG,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE;YAAE,UAAU,CAAC,EAAE,MAAM,CAAC;YAAC,KAAK,CAAC,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,EACxE,OAAO,EAAE,MAAM,EAAE,EACjB,KAAK,EAAE,MAAM,EACb,WAAW,CAAC,EAAE,MAAM,EACpB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EACjC,IAAI,CAAC,EAAE,MAAM,EAAE,EACf,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAC7B,OAAO,CAAC,IAAI,CAAC;IA0DV,YAAY,CAChB,MAAM,EAAE;QACN,WAAW,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC;YAAE,IAAI,CAAC,EAAE,MAAM,CAAC;YAAC,OAAO,CAAC,EAAE;gBAAE,OAAO,CAAC,EAAE,MAAM,CAAA;aAAE,CAAA;SAAE,CAAC,CAAC,CAAC;QAC9E,SAAS,CAAC,EAAE;YAAE,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;SAAE,CAAC;KACtD,EACD,KAAK,EAAE,MAAM,EACb,WAAW,CAAC,EAAE,MAAM,GACnB,OAAO,CAAC,IAAI,CAAC;IA8FV,cAAc,CAClB,KAAK,EAAE,KAAK,EACZ,KAAK,EAAE,MAAM,EACb,WAAW,CAAC,EAAE,MAAM,GACnB,OAAO,CAAC,IAAI,CAAC;IAsDV,eAAe,CACnB,IAAI,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,EACvB,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,MAAM,EACb,WAAW,CAAC,EAAE,MAAM,EACpB,IAAI,CAAC,EAAE,MAAM,EAAE,EACf,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAC7B,OAAO,CAAC,IAAI,CAAC;IAoCV,aAAa,CACjB,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,EACb,WAAW,CAAC,EAAE,MAAM,GACnB,OAAO,CAAC,IAAI,CAAC;IAiCV,eAAe,CACnB,KAAK,EAAE,KAAK,EACZ,KAAK,EAAE,MAAM,EACb,WAAW,CAAC,EAAE,MAAM,GACnB,OAAO,CAAC,IAAI,CAAC;IAmCV,oBAAoB,CACxB,SAAS,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,EAC5B,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,MAAM,EACb,WAAW,CAAC,EAAE,MAAM,EACpB,IAAI,CAAC,EAAE,MAAM,EAAE,EACf,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAC7B,OAAO,CAAC,IAAI,CAAC;IAkCV,kBAAkB,CACtB,SAAS,EAAE,KAAK,CAAC;QAAE,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;KAAE,CAAC,EAC1E,KAAK,EAAE,MAAM,EACb,WAAW,CAAC,EAAE,MAAM,GACnB,OAAO,CAAC,IAAI,CAAC;IAmDV,oBAAoB,CACxB,KAAK,EAAE,KAAK,EACZ,KAAK,EAAE,MAAM,EACb,WAAW,CAAC,EAAE,MAAM,GACnB,OAAO,CAAC,IAAI,CAAC;CAkCjB"}