sovergate 0.0.0-stage → 0.1.0-alpha.1

package/README.md

@@ -1,3 +1,65 @@
-# Temporary Holding Version
+# sovergate — TypeScript SDK
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+EU AI Act Article 12 compliance — automatic, non-invasive audit logging for LLM calls.
+
+## Install
+
+```bash
+npm install sovergate
+```
+
+Requires Node.js 18+.
+
+## Quick start
+
+```typescript
+import OpenAI from 'openai'
+import { init, instrument } from 'sovergate'
+
+const openai = new OpenAI()
+
+init({ apiKey: 'sov_prod_xxxx' })
+instrument(openai)
+
+// Your existing code is completely unchanged
+const response = await openai.chat.completions.create({
+  model: 'gpt-4o',
+  messages: [{ role: 'user', content: 'Hello' }],
+})
+// Response returned immediately — logging fires in background
+```
+
+Anthropic works the same way:
+
+```typescript
+import Anthropic from '@anthropic-ai/sdk'
+import { init, instrument } from 'sovergate'
+
+const client = new Anthropic()
+init({ apiKey: 'sov_prod_xxxx' })
+instrument(client)
+```
+
+## Options
+
+```typescript
+init({
+  apiKey: 'sov_prod_xxxx',     // required
+  baseUrl: 'https://...',       // default: https://api.sovergate.com
+  debug: true,                  // print SDK internals to console.debug
+})
+```
+
+## Guarantees
+
+- Never blocks the event loop — logging runs via `setImmediate`
+- Never throws — if setup fails, the SDK logs a `console.warn` and stays out of the way
+- Leaves your client unchanged — `create()` still returns the SDK's own object, so `.withResponse()` and `.asResponse()` keep working
+- 2 second timeout on every HTTP call to our servers
+- Queues locally and retries with exponential backoff if our servers are down
+- PII is scrubbed **before** any data leaves your infrastructure
+
+## Current limitations
+
+- Streaming calls (`stream: true`) are passed through untouched but not logged yet.
+- PII placeholders are positional (`[EMAIL_REDACTED_1]`) and not correlatable across logs.

package/dist/index.d.mts

@@ -0,0 +1,19 @@
+interface InitOptions {
+    apiKey: string;
+    baseUrl?: string;
+    debug?: boolean;
+}
+declare function init({ apiKey, baseUrl, debug }: InitOptions): void;
+declare function instrument(client: any): void;
+declare function shutdown(): void;
+
+interface Detection {
+    category: string;
+    placeholder: string;
+}
+interface ScrubResult {
+    text: string;
+    detections: Detection[];
+}
+
+export { type Detection, type InitOptions, type ScrubResult, init, instrument, shutdown };

package/dist/index.d.ts

@@ -0,0 +1,19 @@
+interface InitOptions {
+    apiKey: string;
+    baseUrl?: string;
+    debug?: boolean;
+}
+declare function init({ apiKey, baseUrl, debug }: InitOptions): void;
+declare function instrument(client: any): void;
+declare function shutdown(): void;
+
+interface Detection {
+    category: string;
+    placeholder: string;
+}
+interface ScrubResult {
+    text: string;
+    detections: Detection[];
+}
+
+export { type Detection, type InitOptions, type ScrubResult, init, instrument, shutdown };

package/dist/index.js

@@ -0,0 +1,331 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/index.ts
+var index_exports = {};
+__export(index_exports, {
+  init: () => init,
+  instrument: () => instrument,
+  shutdown: () => shutdown
+});
+module.exports = __toCommonJS(index_exports);
+
+// src/sender.ts
+var BASE_URL = "https://api.sovergate.com";
+var TIMEOUT_MS = 2e3;
+async function send(apiKey, payload, baseUrl = BASE_URL) {
+  try {
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), TIMEOUT_MS);
+    const response = await fetch(`${baseUrl}/ingest`, {
+      method: "POST",
+      headers: {
+        Authorization: `Bearer ${apiKey}`,
+        "Content-Type": "application/json"
+      },
+      body: JSON.stringify(payload),
+      signal: controller.signal
+    });
+    clearTimeout(timer);
+    return response.status < 400;
+  } catch {
+    return false;
+  }
+}
+
+// src/queue.ts
+var MAX_QUEUE = 1e4;
+var RETRY_DELAYS_S = [1, 2, 4, 8, 16, 30, 60];
+function sleep(ms) {
+  return new Promise((resolve) => setTimeout(resolve, ms));
+}
+var LogQueue = class {
+  sendFn;
+  items = [];
+  draining = false;
+  constructor(sendFn) {
+    this.sendFn = sendFn;
+  }
+  enqueue(payload) {
+    if (this.items.length >= MAX_QUEUE) return;
+    this.items.push(payload);
+    if (!this.draining) {
+      setImmediate(() => void this.drain());
+    }
+  }
+  async drain() {
+    this.draining = true;
+    let retryIndex = 0;
+    while (this.items.length > 0) {
+      let success = false;
+      try {
+        success = await this.sendFn(this.items[0]);
+      } catch {
+      }
+      if (success) {
+        this.items.shift();
+        retryIndex = 0;
+      } else {
+        const delaySec = RETRY_DELAYS_S[Math.min(retryIndex, RETRY_DELAYS_S.length - 1)];
+        retryIndex++;
+        await sleep(delaySec * 1e3);
+      }
+    }
+    this.draining = false;
+  }
+};
+
+// src/scrubber.ts
+var RULES = [
+  ["email", /\b[A-Za-z0-9._%+\-]+@[A-Za-z0-9.\-]+\.[A-Za-z]{2,}\b/g, "EMAIL_REDACTED"],
+  ["ip", /\b(?:\d{1,3}\.){3}\d{1,3}\b/g, "IP_REDACTED"],
+  ["iban", /\b[A-Z]{2}\d{2}[A-Z0-9]{4,30}\b/g, "IBAN_REDACTED"],
+  ["phone", /\b(?:\+?\d[\d\s\-(). ]{5,14}\d)\b/g, "PHONE_REDACTED"],
+  ["dob", /\b(?:\d{1,2}[\/\-.]\d{1,2}[\/\-.]\d{2,4}|\d{4}[\/\-.]\d{1,2}[\/\-.]\d{1,2})\b/g, "DOB_REDACTED"],
+  ["id_number", /\b[A-Z]{1,3}\d{6,9}\b/g, "ID_REDACTED"],
+  ["name", /\b(?:Mr|Mrs|Ms|Dr|Prof)\.?\s+[A-Z][a-z]+(?: [A-Z][a-z]+)*\b/g, "NAME_REDACTED"]
+];
+function scrub(text) {
+  if (!text) return { text, detections: [] };
+  const detections = [];
+  const counters = {};
+  let result = text;
+  for (const [category, pattern, basePlaceholder] of RULES) {
+    pattern.lastIndex = 0;
+    result = result.replace(pattern, () => {
+      counters[category] = (counters[category] ?? 0) + 1;
+      const placeholder = `[${basePlaceholder}_${counters[category]}]`;
+      detections.push({ category, placeholder });
+      return placeholder;
+    });
+  }
+  return { text: result, detections };
+}
+function scrubMessages(messages) {
+  const allDetections = [];
+  const scrubbed = [];
+  for (const msg of messages) {
+    const content = msg.content;
+    if (typeof content === "string") {
+      const result = scrub(content);
+      scrubbed.push({ ...msg, content: result.text });
+      allDetections.push(...result.detections);
+    } else if (Array.isArray(content)) {
+      const newBlocks = content.map((block) => {
+        if (block.type === "text" && typeof block.text === "string") {
+          const result = scrub(block.text);
+          allDetections.push(...result.detections);
+          return { ...block, text: result.text };
+        }
+        return block;
+      });
+      scrubbed.push({ ...msg, content: newBlocks });
+    } else {
+      scrubbed.push(msg);
+    }
+  }
+  return [scrubbed, allDetections];
+}
+
+// src/patcher.ts
+var PATCHED = /* @__PURE__ */ Symbol.for("sovergate.patched");
+function utcnow() {
+  return (/* @__PURE__ */ new Date()).toISOString();
+}
+function observe(result, onData) {
+  if (!result || typeof result.then !== "function") return result;
+  let seen = false;
+  const notify = (data) => {
+    if (seen) return;
+    seen = true;
+    try {
+      onData(data);
+    } catch {
+    }
+  };
+  try {
+    return new Proxy(result, {
+      get(target, prop) {
+        const value = Reflect.get(target, prop, target);
+        if (typeof value !== "function") return value;
+        if (prop === "then") {
+          return (onFulfilled, onRejected) => value.call(
+            target,
+            // eslint-disable-next-line @typescript-eslint/no-explicit-any
+            (data) => {
+              notify(data);
+              return typeof onFulfilled === "function" ? onFulfilled(data) : data;
+            },
+            onRejected
+          );
+        }
+        if (prop === "withResponse") {
+          return (...args) => (
+            // eslint-disable-next-line @typescript-eslint/no-explicit-any
+            value.apply(target, args).then((withResponse) => {
+              notify(withResponse?.data);
+              return withResponse;
+            })
+          );
+        }
+        return value.bind(target);
+      }
+    });
+  } catch {
+    return result;
+  }
+}
+function isStream(opts) {
+  return opts?.stream === true;
+}
+function patchOpenAI(client, enqueue) {
+  const completions = client.chat.completions;
+  if (completions[PATCHED]) return;
+  const original = completions.create.bind(completions);
+  completions.create = (opts, ...rest) => {
+    const requestAt = utcnow();
+    const t0 = performance.now();
+    const result = original(opts, ...rest);
+    if (isStream(opts)) return result;
+    return observe(result, (response) => {
+      const latencyMs = Math.round(performance.now() - t0);
+      setImmediate(() => {
+        try {
+          const messages = opts?.messages ?? [];
+          const model = opts?.model ?? "";
+          const [scrubbedMessages, detections] = scrubMessages(messages);
+          const choice = response?.choices?.[0];
+          const responseText = choice?.message?.content ?? "";
+          const scrubbedResponse = responseText ? scrub(responseText).text : "";
+          const usage = response?.usage;
+          enqueue({
+            model: response?.model ?? model,
+            messages: scrubbedMessages,
+            response: scrubbedResponse,
+            prompt_tokens: usage?.prompt_tokens ?? 0,
+            completion_tokens: usage?.completion_tokens ?? 0,
+            latency_ms: latencyMs,
+            timestamp: requestAt,
+            finish_reason: choice?.finish_reason ?? null,
+            pii_detections: detections.map((d) => ({ category: d.category, placeholder: d.placeholder }))
+          });
+        } catch {
+        }
+      });
+    });
+  };
+  completions[PATCHED] = true;
+}
+function patchAnthropic(client, enqueue) {
+  const messagesApi = client.messages;
+  if (messagesApi[PATCHED]) return;
+  const original = messagesApi.create.bind(messagesApi);
+  messagesApi.create = (opts, ...rest) => {
+    const requestAt = utcnow();
+    const t0 = performance.now();
+    const result = original(opts, ...rest);
+    if (isStream(opts)) return result;
+    return observe(result, (response) => {
+      const latencyMs = Math.round(performance.now() - t0);
+      setImmediate(() => {
+        try {
+          const messages = opts?.messages ?? [];
+          const system = opts?.system;
+          const model = opts?.model ?? "";
+          const allMessages = system ? [{ role: "system", content: system }, ...messages] : messages;
+          const [scrubbedMessages, detections] = scrubMessages(allMessages);
+          const responseText = (response?.content ?? []).filter((b) => b.type === "text").map((b) => b.text).join("");
+          const scrubbedResponse = responseText ? scrub(responseText).text : "";
+          const usage = response?.usage;
+          enqueue({
+            model: response?.model ?? model,
+            messages: scrubbedMessages,
+            response: scrubbedResponse,
+            prompt_tokens: usage?.input_tokens ?? 0,
+            completion_tokens: usage?.output_tokens ?? 0,
+            latency_ms: latencyMs,
+            timestamp: requestAt,
+            finish_reason: response?.stop_reason ?? null,
+            pii_detections: detections.map((d) => ({ category: d.category, placeholder: d.placeholder }))
+          });
+        } catch {
+        }
+      });
+    });
+  };
+  messagesApi[PATCHED] = true;
+}
+
+// src/client.ts
+var state = {
+  apiKey: null,
+  baseUrl: "https://api.sovergate.com",
+  queue: null
+};
+function init({ apiKey, baseUrl = "https://api.sovergate.com", debug = false }) {
+  try {
+    state.apiKey = apiKey;
+    state.baseUrl = baseUrl.replace(/\/$/, "");
+    if (debug) {
+      console.debug("[sovergate] init baseUrl=%s", state.baseUrl);
+    }
+    state.queue = new LogQueue((payload) => send(apiKey, payload, state.baseUrl));
+  } catch (err) {
+    state.queue = null;
+    warn("init failed, logging disabled", err);
+  }
+}
+function instrument(client) {
+  if (!state.queue) {
+    warn("instrument() called before init({ apiKey }) \u2014 LLM calls will not be logged");
+    return;
+  }
+  try {
+    const enqueue = state.queue.enqueue.bind(state.queue);
+    if (client?.chat?.completions) {
+      patchOpenAI(client, enqueue);
+      return;
+    }
+    if (client?.messages) {
+      patchAnthropic(client, enqueue);
+      return;
+    }
+    warn(
+      "unsupported client \u2014 LLM calls will not be logged. Pass an OpenAI or Anthropic client instance, or open an issue at https://github.com/sovergate/sdk-js/issues"
+    );
+  } catch (err) {
+    warn("instrument() failed, LLM calls will not be logged", err);
+  }
+}
+function warn(message, err) {
+  try {
+    console.warn(`[sovergate] ${message}`, ...err === void 0 ? [] : [err]);
+  } catch {
+  }
+}
+function shutdown() {
+  state.queue = null;
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  init,
+  instrument,
+  shutdown
+});
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts","../src/sender.ts","../src/queue.ts","../src/scrubber.ts","../src/patcher.ts","../src/client.ts"],"sourcesContent":["export { init, instrument, shutdown } from './client'\nexport type { InitOptions } from './client'\nexport type { Detection, ScrubResult } from './scrubber'\n","const BASE_URL = 'https://api.sovergate.com'\nconst TIMEOUT_MS = 2000\n\nexport async function send(\n  apiKey: string,\n  payload: Record<string, unknown>,\n  baseUrl = BASE_URL,\n): Promise<boolean> {\n  try {\n    const controller = new AbortController()\n    const timer = setTimeout(() => controller.abort(), TIMEOUT_MS)\n\n    const response = await fetch(`${baseUrl}/ingest`, {\n      method: 'POST',\n      headers: {\n        Authorization: `Bearer ${apiKey}`,\n        'Content-Type': 'application/json',\n      },\n      body: JSON.stringify(payload),\n      signal: controller.signal,\n    })\n\n    clearTimeout(timer)\n    return response.status < 400\n  } catch {\n    return false\n  }\n}\n","type Payload = Record<string, unknown>\ntype SendFn = (payload: Payload) => Promise<boolean>\n\nconst MAX_QUEUE = 10_000\nconst RETRY_DELAYS_S = [1, 2, 4, 8, 16, 30, 60]\n\nfunction sleep(ms: number): Promise<void> {\n  return new Promise(resolve => setTimeout(resolve, ms))\n}\n\nexport class LogQueue {\n  private readonly sendFn: SendFn\n  private readonly items: Payload[] = []\n  private draining = false\n\n  constructor(sendFn: SendFn) {\n    this.sendFn = sendFn\n  }\n\n  enqueue(payload: Payload): void {\n    if (this.items.length >= MAX_QUEUE) return\n    this.items.push(payload)\n    if (!this.draining) {\n      setImmediate(() => void this.drain())\n    }\n  }\n\n  private async drain(): Promise<void> {\n    this.draining = true\n    let retryIndex = 0\n\n    while (this.items.length > 0) {\n      let success = false\n      try {\n        success = await this.sendFn(this.items[0])\n      } catch {\n        // never propagate\n      }\n\n      if (success) {\n        this.items.shift()\n        retryIndex = 0\n      } else {\n        const delaySec = RETRY_DELAYS_S[Math.min(retryIndex, RETRY_DELAYS_S.length - 1)]\n        retryIndex++\n        await sleep(delaySec * 1000)\n      }\n    }\n\n    this.draining = false\n  }\n}\n","export interface Detection {\n  category: string\n  placeholder: string\n}\n\nexport interface ScrubResult {\n  text: string\n  detections: Detection[]\n}\n\ntype ContentBlock = { type: string; text?: string } & Record<string, unknown>\nexport type OpenAIMessage = { role: string; content: string | ContentBlock[] } & Record<string, unknown>\n\n// Each rule: [category, regex (must have g flag), placeholder base]\n// Order matters — IP before phone to avoid dotted-quad false matches.\nconst RULES: Array<[string, RegExp, string]> = [\n  ['email',     /\\b[A-Za-z0-9._%+\\-]+@[A-Za-z0-9.\\-]+\\.[A-Za-z]{2,}\\b/g,                              'EMAIL_REDACTED'],\n  ['ip',        /\\b(?:\\d{1,3}\\.){3}\\d{1,3}\\b/g,                                                        'IP_REDACTED'],\n  ['iban',      /\\b[A-Z]{2}\\d{2}[A-Z0-9]{4,30}\\b/g,                                                    'IBAN_REDACTED'],\n  ['phone',     /\\b(?:\\+?\\d[\\d\\s\\-(). ]{5,14}\\d)\\b/g,                                                  'PHONE_REDACTED'],\n  ['dob',       /\\b(?:\\d{1,2}[\\/\\-.]\\d{1,2}[\\/\\-.]\\d{2,4}|\\d{4}[\\/\\-.]\\d{1,2}[\\/\\-.]\\d{1,2})\\b/g,   'DOB_REDACTED'],\n  ['id_number', /\\b[A-Z]{1,3}\\d{6,9}\\b/g,                                                              'ID_REDACTED'],\n  ['name',      /\\b(?:Mr|Mrs|Ms|Dr|Prof)\\.?\\s+[A-Z][a-z]+(?: [A-Z][a-z]+)*\\b/g,                       'NAME_REDACTED'],\n]\n\nexport function scrub(text: string): ScrubResult {\n  if (!text) return { text, detections: [] }\n\n  const detections: Detection[] = []\n  const counters: Record<string, number> = {}\n\n  let result = text\n  for (const [category, pattern, basePlaceholder] of RULES) {\n    pattern.lastIndex = 0\n    result = result.replace(pattern, () => {\n      counters[category] = (counters[category] ?? 0) + 1\n      const placeholder = `[${basePlaceholder}_${counters[category]}]`\n      detections.push({ category, placeholder })\n      return placeholder\n    })\n  }\n\n  return { text: result, detections }\n}\n\nexport function scrubMessages(messages: OpenAIMessage[]): [OpenAIMessage[], Detection[]] {\n  const allDetections: Detection[] = []\n  const scrubbed: OpenAIMessage[] = []\n\n  for (const msg of messages) {\n    const content = msg.content\n    if (typeof content === 'string') {\n      const result = scrub(content)\n      scrubbed.push({ ...msg, content: result.text })\n      allDetections.push(...result.detections)\n    } else if (Array.isArray(content)) {\n      const newBlocks = content.map(block => {\n        if (block.type === 'text' && typeof block.text === 'string') {\n          const result = scrub(block.text)\n          allDetections.push(...result.detections)\n          return { ...block, text: result.text }\n        }\n        return block\n      })\n      scrubbed.push({ ...msg, content: newBlocks })\n    } else {\n      scrubbed.push(msg)\n    }\n  }\n\n  return [scrubbed, allDetections]\n}\n","import { scrub, scrubMessages } from './scrubber'\n\ntype Enqueue = (payload: Record<string, unknown>) => void\n\nconst PATCHED = Symbol.for('sovergate.patched')\n\nfunction utcnow(): string {\n  return new Date().toISOString()\n}\n\n/**\n * Returns the provider's own result unchanged in behaviour, but notifies `onData`\n * the first time the app reads the parsed result (await / .then / .withResponse).\n *\n * The OpenAI and Anthropic SDKs return an APIPromise with extra methods\n * (.withResponse(), .asResponse()) and parse the body lazily. Wrapping create()\n * in an async function would drop those methods, and reading the result eagerly\n * would consume the body before an app calling .asResponse() can. A Proxy keeps\n * the original object, its prototype and its laziness intact.\n */\n// eslint-disable-next-line @typescript-eslint/no-explicit-any\nfunction observe(result: any, onData: (data: any) => void): any {\n  if (!result || typeof result.then !== 'function') return result\n\n  let seen = false\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any\n  const notify = (data: any): void => {\n    if (seen) return\n    seen = true\n    try {\n      onData(data)\n    } catch {\n      // never let logging errors surface to the caller\n    }\n  }\n\n  try {\n    return new Proxy(result, {\n      get(target, prop) {\n        const value = Reflect.get(target, prop, target)\n        if (typeof value !== 'function') return value\n\n        if (prop === 'then') {\n          // eslint-disable-next-line @typescript-eslint/no-explicit-any\n          return (onFulfilled?: any, onRejected?: any) =>\n            value.call(\n              target,\n              // eslint-disable-next-line @typescript-eslint/no-explicit-any\n              (data: any) => {\n                notify(data)\n                return typeof onFulfilled === 'function' ? onFulfilled(data) : data\n              },\n              onRejected,\n            )\n        }\n\n        if (prop === 'withResponse') {\n          return (...args: unknown[]) =>\n            // eslint-disable-next-line @typescript-eslint/no-explicit-any\n            value.apply(target, args).then((withResponse: any) => {\n              notify(withResponse?.data)\n              return withResponse\n            })\n        }\n\n        return value.bind(target)\n      },\n    })\n  } catch {\n    return result\n  }\n}\n\n// eslint-disable-next-line @typescript-eslint/no-explicit-any\nfunction isStream(opts: any): boolean {\n  return opts?.stream === true\n}\n\n// eslint-disable-next-line @typescript-eslint/no-explicit-any\nexport function patchOpenAI(client: any, enqueue: Enqueue): void {\n  const completions = client.chat.completions\n  if (completions[PATCHED]) return\n  const original = completions.create.bind(completions)\n\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any\n  completions.create = (opts: any, ...rest: unknown[]) => {\n    const requestAt = utcnow()\n    const t0 = performance.now()\n\n    const result = original(opts, ...rest)\n\n    // Streams can only be read once and belong to the app; they are not logged yet.\n    if (isStream(opts)) return result\n\n    // eslint-disable-next-line @typescript-eslint/no-explicit-any\n    return observe(result, (response: any) => {\n      const latencyMs = Math.round(performance.now() - t0)\n\n      setImmediate(() => {\n        try {\n          const messages = opts?.messages ?? []\n          const model = opts?.model ?? ''\n          const [scrubbedMessages, detections] = scrubMessages(messages)\n          const choice = response?.choices?.[0]\n          const responseText: string = choice?.message?.content ?? ''\n          const scrubbedResponse = responseText ? scrub(responseText).text : ''\n          const usage = response?.usage\n\n          enqueue({\n            model: response?.model ?? model,\n            messages: scrubbedMessages,\n            response: scrubbedResponse,\n            prompt_tokens: usage?.prompt_tokens ?? 0,\n            completion_tokens: usage?.completion_tokens ?? 0,\n            latency_ms: latencyMs,\n            timestamp: requestAt,\n            finish_reason: choice?.finish_reason ?? null,\n            pii_detections: detections.map(d => ({ category: d.category, placeholder: d.placeholder })),\n          })\n        } catch {\n          // never let logging errors surface to the caller\n        }\n      })\n    })\n  }\n  completions[PATCHED] = true\n}\n\n// eslint-disable-next-line @typescript-eslint/no-explicit-any\nexport function patchAnthropic(client: any, enqueue: Enqueue): void {\n  const messagesApi = client.messages\n  if (messagesApi[PATCHED]) return\n  const original = messagesApi.create.bind(messagesApi)\n\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any\n  messagesApi.create = (opts: any, ...rest: unknown[]) => {\n    const requestAt = utcnow()\n    const t0 = performance.now()\n\n    const result = original(opts, ...rest)\n\n    // Streams can only be read once and belong to the app; they are not logged yet.\n    if (isStream(opts)) return result\n\n    // eslint-disable-next-line @typescript-eslint/no-explicit-any\n    return observe(result, (response: any) => {\n      const latencyMs = Math.round(performance.now() - t0)\n\n      setImmediate(() => {\n        try {\n          const messages = opts?.messages ?? []\n          const system = opts?.system\n          const model = opts?.model ?? ''\n\n          const allMessages = system\n            ? [{ role: 'system', content: system }, ...messages]\n            : messages\n\n          const [scrubbedMessages, detections] = scrubMessages(allMessages)\n\n          const responseText: string = (response?.content ?? [])\n            // eslint-disable-next-line @typescript-eslint/no-explicit-any\n            .filter((b: any) => b.type === 'text')\n            // eslint-disable-next-line @typescript-eslint/no-explicit-any\n            .map((b: any) => b.text as string)\n            .join('')\n\n          const scrubbedResponse = responseText ? scrub(responseText).text : ''\n          const usage = response?.usage\n\n          enqueue({\n            model: response?.model ?? model,\n            messages: scrubbedMessages,\n            response: scrubbedResponse,\n            prompt_tokens: usage?.input_tokens ?? 0,\n            completion_tokens: usage?.output_tokens ?? 0,\n            latency_ms: latencyMs,\n            timestamp: requestAt,\n            finish_reason: response?.stop_reason ?? null,\n            pii_detections: detections.map(d => ({ category: d.category, placeholder: d.placeholder })),\n          })\n        } catch {\n          // never let logging errors surface to the caller\n        }\n      })\n    })\n  }\n  messagesApi[PATCHED] = true\n}\n","import { send } from './sender'\nimport { LogQueue } from './queue'\nimport { patchOpenAI, patchAnthropic } from './patcher'\n\nexport interface InitOptions {\n  apiKey: string\n  baseUrl?: string\n  debug?: boolean\n}\n\nconst state: {\n  apiKey: string | null\n  baseUrl: string\n  queue: LogQueue | null\n} = {\n  apiKey: null,\n  baseUrl: 'https://api.sovergate.com',\n  queue: null,\n}\n\nexport function init({ apiKey, baseUrl = 'https://api.sovergate.com', debug = false }: InitOptions): void {\n  try {\n    state.apiKey = apiKey\n    state.baseUrl = baseUrl.replace(/\\/$/, '')\n\n    if (debug) {\n      console.debug('[sovergate] init baseUrl=%s', state.baseUrl)\n    }\n\n    state.queue = new LogQueue(payload => send(apiKey, payload, state.baseUrl))\n  } catch (err) {\n    // Never let SDK setup break the host app; logging just stays disabled.\n    state.queue = null\n    warn('init failed, logging disabled', err)\n  }\n}\n\n// Never throws: if instrumentation isn't possible, warn and leave the client untouched.\n// eslint-disable-next-line @typescript-eslint/no-explicit-any\nexport function instrument(client: any): void {\n  if (!state.queue) {\n    warn('instrument() called before init({ apiKey }) — LLM calls will not be logged')\n    return\n  }\n\n  try {\n    const enqueue = state.queue.enqueue.bind(state.queue)\n\n    if (client?.chat?.completions) {\n      patchOpenAI(client, enqueue)\n      return\n    }\n\n    if (client?.messages) {\n      patchAnthropic(client, enqueue)\n      return\n    }\n\n    warn(\n      'unsupported client — LLM calls will not be logged. Pass an OpenAI or Anthropic ' +\n      'client instance, or open an issue at https://github.com/sovergate/sdk-js/issues',\n    )\n  } catch (err) {\n    warn('instrument() failed, LLM calls will not be logged', err)\n  }\n}\n\nfunction warn(message: string, err?: unknown): void {\n  try {\n    console.warn(`[sovergate] ${message}`, ...(err === undefined ? [] : [err]))\n  } catch {\n    // never propagate\n  }\n}\n\nexport function shutdown(): void {\n  state.queue = null\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACAA,IAAM,WAAW;AACjB,IAAM,aAAa;AAEnB,eAAsB,KACpB,QACA,SACA,UAAU,UACQ;AAClB,MAAI;AACF,UAAM,aAAa,IAAI,gBAAgB;AACvC,UAAM,QAAQ,WAAW,MAAM,WAAW,MAAM,GAAG,UAAU;AAE7D,UAAM,WAAW,MAAM,MAAM,GAAG,OAAO,WAAW;AAAA,MAChD,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,eAAe,UAAU,MAAM;AAAA,QAC/B,gBAAgB;AAAA,MAClB;AAAA,MACA,MAAM,KAAK,UAAU,OAAO;AAAA,MAC5B,QAAQ,WAAW;AAAA,IACrB,CAAC;AAED,iBAAa,KAAK;AAClB,WAAO,SAAS,SAAS;AAAA,EAC3B,QAAQ;AACN,WAAO;AAAA,EACT;AACF;;;ACxBA,IAAM,YAAY;AAClB,IAAM,iBAAiB,CAAC,GAAG,GAAG,GAAG,GAAG,IAAI,IAAI,EAAE;AAE9C,SAAS,MAAM,IAA2B;AACxC,SAAO,IAAI,QAAQ,aAAW,WAAW,SAAS,EAAE,CAAC;AACvD;AAEO,IAAM,WAAN,MAAe;AAAA,EACH;AAAA,EACA,QAAmB,CAAC;AAAA,EAC7B,WAAW;AAAA,EAEnB,YAAY,QAAgB;AAC1B,SAAK,SAAS;AAAA,EAChB;AAAA,EAEA,QAAQ,SAAwB;AAC9B,QAAI,KAAK,MAAM,UAAU,UAAW;AACpC,SAAK,MAAM,KAAK,OAAO;AACvB,QAAI,CAAC,KAAK,UAAU;AAClB,mBAAa,MAAM,KAAK,KAAK,MAAM,CAAC;AAAA,IACtC;AAAA,EACF;AAAA,EAEA,MAAc,QAAuB;AACnC,SAAK,WAAW;AAChB,QAAI,aAAa;AAEjB,WAAO,KAAK,MAAM,SAAS,GAAG;AAC5B,UAAI,UAAU;AACd,UAAI;AACF,kBAAU,MAAM,KAAK,OAAO,KAAK,MAAM,CAAC,CAAC;AAAA,MAC3C,QAAQ;AAAA,MAER;AAEA,UAAI,SAAS;AACX,aAAK,MAAM,MAAM;AACjB,qBAAa;AAAA,MACf,OAAO;AACL,cAAM,WAAW,eAAe,KAAK,IAAI,YAAY,eAAe,SAAS,CAAC,CAAC;AAC/E;AACA,cAAM,MAAM,WAAW,GAAI;AAAA,MAC7B;AAAA,IACF;AAEA,SAAK,WAAW;AAAA,EAClB;AACF;;;ACpCA,IAAM,QAAyC;AAAA,EAC7C,CAAC,SAAa,yDAAsF,gBAAgB;AAAA,EACpH,CAAC,MAAa,gCAAuF,aAAa;AAAA,EAClH,CAAC,QAAa,oCAAuF,eAAe;AAAA,EACpH,CAAC,SAAa,sCAAuF,gBAAgB;AAAA,EACrH,CAAC,OAAa,kFAAoF,cAAc;AAAA,EAChH,CAAC,aAAa,0BAAuF,aAAa;AAAA,EAClH,CAAC,QAAa,gEAAsF,eAAe;AACrH;AAEO,SAAS,MAAM,MAA2B;AAC/C,MAAI,CAAC,KAAM,QAAO,EAAE,MAAM,YAAY,CAAC,EAAE;AAEzC,QAAM,aAA0B,CAAC;AACjC,QAAM,WAAmC,CAAC;AAE1C,MAAI,SAAS;AACb,aAAW,CAAC,UAAU,SAAS,eAAe,KAAK,OAAO;AACxD,YAAQ,YAAY;AACpB,aAAS,OAAO,QAAQ,SAAS,MAAM;AACrC,eAAS,QAAQ,KAAK,SAAS,QAAQ,KAAK,KAAK;AACjD,YAAM,cAAc,IAAI,eAAe,IAAI,SAAS,QAAQ,CAAC;AAC7D,iBAAW,KAAK,EAAE,UAAU,YAAY,CAAC;AACzC,aAAO;AAAA,IACT,CAAC;AAAA,EACH;AAEA,SAAO,EAAE,MAAM,QAAQ,WAAW;AACpC;AAEO,SAAS,cAAc,UAA2D;AACvF,QAAM,gBAA6B,CAAC;AACpC,QAAM,WAA4B,CAAC;AAEnC,aAAW,OAAO,UAAU;AAC1B,UAAM,UAAU,IAAI;AACpB,QAAI,OAAO,YAAY,UAAU;AAC/B,YAAM,SAAS,MAAM,OAAO;AAC5B,eAAS,KAAK,EAAE,GAAG,KAAK,SAAS,OAAO,KAAK,CAAC;AAC9C,oBAAc,KAAK,GAAG,OAAO,UAAU;AAAA,IACzC,WAAW,MAAM,QAAQ,OAAO,GAAG;AACjC,YAAM,YAAY,QAAQ,IAAI,WAAS;AACrC,YAAI,MAAM,SAAS,UAAU,OAAO,MAAM,SAAS,UAAU;AAC3D,gBAAM,SAAS,MAAM,MAAM,IAAI;AAC/B,wBAAc,KAAK,GAAG,OAAO,UAAU;AACvC,iBAAO,EAAE,GAAG,OAAO,MAAM,OAAO,KAAK;AAAA,QACvC;AACA,eAAO;AAAA,MACT,CAAC;AACD,eAAS,KAAK,EAAE,GAAG,KAAK,SAAS,UAAU,CAAC;AAAA,IAC9C,OAAO;AACL,eAAS,KAAK,GAAG;AAAA,IACnB;AAAA,EACF;AAEA,SAAO,CAAC,UAAU,aAAa;AACjC;;;ACnEA,IAAM,UAAU,uBAAO,IAAI,mBAAmB;AAE9C,SAAS,SAAiB;AACxB,UAAO,oBAAI,KAAK,GAAE,YAAY;AAChC;AAaA,SAAS,QAAQ,QAAa,QAAkC;AAC9D,MAAI,CAAC,UAAU,OAAO,OAAO,SAAS,WAAY,QAAO;AAEzD,MAAI,OAAO;AAEX,QAAM,SAAS,CAAC,SAAoB;AAClC,QAAI,KAAM;AACV,WAAO;AACP,QAAI;AACF,aAAO,IAAI;AAAA,IACb,QAAQ;AAAA,IAER;AAAA,EACF;AAEA,MAAI;AACF,WAAO,IAAI,MAAM,QAAQ;AAAA,MACvB,IAAI,QAAQ,MAAM;AAChB,cAAM,QAAQ,QAAQ,IAAI,QAAQ,MAAM,MAAM;AAC9C,YAAI,OAAO,UAAU,WAAY,QAAO;AAExC,YAAI,SAAS,QAAQ;AAEnB,iBAAO,CAAC,aAAmB,eACzB,MAAM;AAAA,YACJ;AAAA;AAAA,YAEA,CAAC,SAAc;AACb,qBAAO,IAAI;AACX,qBAAO,OAAO,gBAAgB,aAAa,YAAY,IAAI,IAAI;AAAA,YACjE;AAAA,YACA;AAAA,UACF;AAAA,QACJ;AAEA,YAAI,SAAS,gBAAgB;AAC3B,iBAAO,IAAI;AAAA;AAAA,YAET,MAAM,MAAM,QAAQ,IAAI,EAAE,KAAK,CAAC,iBAAsB;AACpD,qBAAO,cAAc,IAAI;AACzB,qBAAO;AAAA,YACT,CAAC;AAAA;AAAA,QACL;AAEA,eAAO,MAAM,KAAK,MAAM;AAAA,MAC1B;AAAA,IACF,CAAC;AAAA,EACH,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAGA,SAAS,SAAS,MAAoB;AACpC,SAAO,MAAM,WAAW;AAC1B;AAGO,SAAS,YAAY,QAAa,SAAwB;AAC/D,QAAM,cAAc,OAAO,KAAK;AAChC,MAAI,YAAY,OAAO,EAAG;AAC1B,QAAM,WAAW,YAAY,OAAO,KAAK,WAAW;AAGpD,cAAY,SAAS,CAAC,SAAc,SAAoB;AACtD,UAAM,YAAY,OAAO;AACzB,UAAM,KAAK,YAAY,IAAI;AAE3B,UAAM,SAAS,SAAS,MAAM,GAAG,IAAI;AAGrC,QAAI,SAAS,IAAI,EAAG,QAAO;AAG3B,WAAO,QAAQ,QAAQ,CAAC,aAAkB;AACxC,YAAM,YAAY,KAAK,MAAM,YAAY,IAAI,IAAI,EAAE;AAEnD,mBAAa,MAAM;AACjB,YAAI;AACF,gBAAM,WAAW,MAAM,YAAY,CAAC;AACpC,gBAAM,QAAQ,MAAM,SAAS;AAC7B,gBAAM,CAAC,kBAAkB,UAAU,IAAI,cAAc,QAAQ;AAC7D,gBAAM,SAAS,UAAU,UAAU,CAAC;AACpC,gBAAM,eAAuB,QAAQ,SAAS,WAAW;AACzD,gBAAM,mBAAmB,eAAe,MAAM,YAAY,EAAE,OAAO;AACnE,gBAAM,QAAQ,UAAU;AAExB,kBAAQ;AAAA,YACN,OAAO,UAAU,SAAS;AAAA,YAC1B,UAAU;AAAA,YACV,UAAU;AAAA,YACV,eAAe,OAAO,iBAAiB;AAAA,YACvC,mBAAmB,OAAO,qBAAqB;AAAA,YAC/C,YAAY;AAAA,YACZ,WAAW;AAAA,YACX,eAAe,QAAQ,iBAAiB;AAAA,YACxC,gBAAgB,WAAW,IAAI,QAAM,EAAE,UAAU,EAAE,UAAU,aAAa,EAAE,YAAY,EAAE;AAAA,UAC5F,CAAC;AAAA,QACH,QAAQ;AAAA,QAER;AAAA,MACF,CAAC;AAAA,IACH,CAAC;AAAA,EACH;AACA,cAAY,OAAO,IAAI;AACzB;AAGO,SAAS,eAAe,QAAa,SAAwB;AAClE,QAAM,cAAc,OAAO;AAC3B,MAAI,YAAY,OAAO,EAAG;AAC1B,QAAM,WAAW,YAAY,OAAO,KAAK,WAAW;AAGpD,cAAY,SAAS,CAAC,SAAc,SAAoB;AACtD,UAAM,YAAY,OAAO;AACzB,UAAM,KAAK,YAAY,IAAI;AAE3B,UAAM,SAAS,SAAS,MAAM,GAAG,IAAI;AAGrC,QAAI,SAAS,IAAI,EAAG,QAAO;AAG3B,WAAO,QAAQ,QAAQ,CAAC,aAAkB;AACxC,YAAM,YAAY,KAAK,MAAM,YAAY,IAAI,IAAI,EAAE;AAEnD,mBAAa,MAAM;AACjB,YAAI;AACF,gBAAM,WAAW,MAAM,YAAY,CAAC;AACpC,gBAAM,SAAS,MAAM;AACrB,gBAAM,QAAQ,MAAM,SAAS;AAE7B,gBAAM,cAAc,SAChB,CAAC,EAAE,MAAM,UAAU,SAAS,OAAO,GAAG,GAAG,QAAQ,IACjD;AAEJ,gBAAM,CAAC,kBAAkB,UAAU,IAAI,cAAc,WAAW;AAEhE,gBAAM,gBAAwB,UAAU,WAAW,CAAC,GAEjD,OAAO,CAAC,MAAW,EAAE,SAAS,MAAM,EAEpC,IAAI,CAAC,MAAW,EAAE,IAAc,EAChC,KAAK,EAAE;AAEV,gBAAM,mBAAmB,eAAe,MAAM,YAAY,EAAE,OAAO;AACnE,gBAAM,QAAQ,UAAU;AAExB,kBAAQ;AAAA,YACN,OAAO,UAAU,SAAS;AAAA,YAC1B,UAAU;AAAA,YACV,UAAU;AAAA,YACV,eAAe,OAAO,gBAAgB;AAAA,YACtC,mBAAmB,OAAO,iBAAiB;AAAA,YAC3C,YAAY;AAAA,YACZ,WAAW;AAAA,YACX,eAAe,UAAU,eAAe;AAAA,YACxC,gBAAgB,WAAW,IAAI,QAAM,EAAE,UAAU,EAAE,UAAU,aAAa,EAAE,YAAY,EAAE;AAAA,UAC5F,CAAC;AAAA,QACH,QAAQ;AAAA,QAER;AAAA,MACF,CAAC;AAAA,IACH,CAAC;AAAA,EACH;AACA,cAAY,OAAO,IAAI;AACzB;;;AClLA,IAAM,QAIF;AAAA,EACF,QAAQ;AAAA,EACR,SAAS;AAAA,EACT,OAAO;AACT;AAEO,SAAS,KAAK,EAAE,QAAQ,UAAU,6BAA6B,QAAQ,MAAM,GAAsB;AACxG,MAAI;AACF,UAAM,SAAS;AACf,UAAM,UAAU,QAAQ,QAAQ,OAAO,EAAE;AAEzC,QAAI,OAAO;AACT,cAAQ,MAAM,+BAA+B,MAAM,OAAO;AAAA,IAC5D;AAEA,UAAM,QAAQ,IAAI,SAAS,aAAW,KAAK,QAAQ,SAAS,MAAM,OAAO,CAAC;AAAA,EAC5E,SAAS,KAAK;AAEZ,UAAM,QAAQ;AACd,SAAK,iCAAiC,GAAG;AAAA,EAC3C;AACF;AAIO,SAAS,WAAW,QAAmB;AAC5C,MAAI,CAAC,MAAM,OAAO;AAChB,SAAK,iFAA4E;AACjF;AAAA,EACF;AAEA,MAAI;AACF,UAAM,UAAU,MAAM,MAAM,QAAQ,KAAK,MAAM,KAAK;AAEpD,QAAI,QAAQ,MAAM,aAAa;AAC7B,kBAAY,QAAQ,OAAO;AAC3B;AAAA,IACF;AAEA,QAAI,QAAQ,UAAU;AACpB,qBAAe,QAAQ,OAAO;AAC9B;AAAA,IACF;AAEA;AAAA,MACE;AAAA,IAEF;AAAA,EACF,SAAS,KAAK;AACZ,SAAK,qDAAqD,GAAG;AAAA,EAC/D;AACF;AAEA,SAAS,KAAK,SAAiB,KAAqB;AAClD,MAAI;AACF,YAAQ,KAAK,eAAe,OAAO,IAAI,GAAI,QAAQ,SAAY,CAAC,IAAI,CAAC,GAAG,CAAE;AAAA,EAC5E,QAAQ;AAAA,EAER;AACF;AAEO,SAAS,WAAiB;AAC/B,QAAM,QAAQ;AAChB;","names":[]}

package/dist/index.mjs

@@ -0,0 +1,302 @@
+// src/sender.ts
+var BASE_URL = "https://api.sovergate.com";
+var TIMEOUT_MS = 2e3;
+async function send(apiKey, payload, baseUrl = BASE_URL) {
+  try {
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), TIMEOUT_MS);
+    const response = await fetch(`${baseUrl}/ingest`, {
+      method: "POST",
+      headers: {
+        Authorization: `Bearer ${apiKey}`,
+        "Content-Type": "application/json"
+      },
+      body: JSON.stringify(payload),
+      signal: controller.signal
+    });
+    clearTimeout(timer);
+    return response.status < 400;
+  } catch {
+    return false;
+  }
+}
+
+// src/queue.ts
+var MAX_QUEUE = 1e4;
+var RETRY_DELAYS_S = [1, 2, 4, 8, 16, 30, 60];
+function sleep(ms) {
+  return new Promise((resolve) => setTimeout(resolve, ms));
+}
+var LogQueue = class {
+  sendFn;
+  items = [];
+  draining = false;
+  constructor(sendFn) {
+    this.sendFn = sendFn;
+  }
+  enqueue(payload) {
+    if (this.items.length >= MAX_QUEUE) return;
+    this.items.push(payload);
+    if (!this.draining) {
+      setImmediate(() => void this.drain());
+    }
+  }
+  async drain() {
+    this.draining = true;
+    let retryIndex = 0;
+    while (this.items.length > 0) {
+      let success = false;
+      try {
+        success = await this.sendFn(this.items[0]);
+      } catch {
+      }
+      if (success) {
+        this.items.shift();
+        retryIndex = 0;
+      } else {
+        const delaySec = RETRY_DELAYS_S[Math.min(retryIndex, RETRY_DELAYS_S.length - 1)];
+        retryIndex++;
+        await sleep(delaySec * 1e3);
+      }
+    }
+    this.draining = false;
+  }
+};
+
+// src/scrubber.ts
+var RULES = [
+  ["email", /\b[A-Za-z0-9._%+\-]+@[A-Za-z0-9.\-]+\.[A-Za-z]{2,}\b/g, "EMAIL_REDACTED"],
+  ["ip", /\b(?:\d{1,3}\.){3}\d{1,3}\b/g, "IP_REDACTED"],
+  ["iban", /\b[A-Z]{2}\d{2}[A-Z0-9]{4,30}\b/g, "IBAN_REDACTED"],
+  ["phone", /\b(?:\+?\d[\d\s\-(). ]{5,14}\d)\b/g, "PHONE_REDACTED"],
+  ["dob", /\b(?:\d{1,2}[\/\-.]\d{1,2}[\/\-.]\d{2,4}|\d{4}[\/\-.]\d{1,2}[\/\-.]\d{1,2})\b/g, "DOB_REDACTED"],
+  ["id_number", /\b[A-Z]{1,3}\d{6,9}\b/g, "ID_REDACTED"],
+  ["name", /\b(?:Mr|Mrs|Ms|Dr|Prof)\.?\s+[A-Z][a-z]+(?: [A-Z][a-z]+)*\b/g, "NAME_REDACTED"]
+];
+function scrub(text) {
+  if (!text) return { text, detections: [] };
+  const detections = [];
+  const counters = {};
+  let result = text;
+  for (const [category, pattern, basePlaceholder] of RULES) {
+    pattern.lastIndex = 0;
+    result = result.replace(pattern, () => {
+      counters[category] = (counters[category] ?? 0) + 1;
+      const placeholder = `[${basePlaceholder}_${counters[category]}]`;
+      detections.push({ category, placeholder });
+      return placeholder;
+    });
+  }
+  return { text: result, detections };
+}
+function scrubMessages(messages) {
+  const allDetections = [];
+  const scrubbed = [];
+  for (const msg of messages) {
+    const content = msg.content;
+    if (typeof content === "string") {
+      const result = scrub(content);
+      scrubbed.push({ ...msg, content: result.text });
+      allDetections.push(...result.detections);
+    } else if (Array.isArray(content)) {
+      const newBlocks = content.map((block) => {
+        if (block.type === "text" && typeof block.text === "string") {
+          const result = scrub(block.text);
+          allDetections.push(...result.detections);
+          return { ...block, text: result.text };
+        }
+        return block;
+      });
+      scrubbed.push({ ...msg, content: newBlocks });
+    } else {
+      scrubbed.push(msg);
+    }
+  }
+  return [scrubbed, allDetections];
+}
+
+// src/patcher.ts
+var PATCHED = /* @__PURE__ */ Symbol.for("sovergate.patched");
+function utcnow() {
+  return (/* @__PURE__ */ new Date()).toISOString();
+}
+function observe(result, onData) {
+  if (!result || typeof result.then !== "function") return result;
+  let seen = false;
+  const notify = (data) => {
+    if (seen) return;
+    seen = true;
+    try {
+      onData(data);
+    } catch {
+    }
+  };
+  try {
+    return new Proxy(result, {
+      get(target, prop) {
+        const value = Reflect.get(target, prop, target);
+        if (typeof value !== "function") return value;
+        if (prop === "then") {
+          return (onFulfilled, onRejected) => value.call(
+            target,
+            // eslint-disable-next-line @typescript-eslint/no-explicit-any
+            (data) => {
+              notify(data);
+              return typeof onFulfilled === "function" ? onFulfilled(data) : data;
+            },
+            onRejected
+          );
+        }
+        if (prop === "withResponse") {
+          return (...args) => (
+            // eslint-disable-next-line @typescript-eslint/no-explicit-any
+            value.apply(target, args).then((withResponse) => {
+              notify(withResponse?.data);
+              return withResponse;
+            })
+          );
+        }
+        return value.bind(target);
+      }
+    });
+  } catch {
+    return result;
+  }
+}
+function isStream(opts) {
+  return opts?.stream === true;
+}
+function patchOpenAI(client, enqueue) {
+  const completions = client.chat.completions;
+  if (completions[PATCHED]) return;
+  const original = completions.create.bind(completions);
+  completions.create = (opts, ...rest) => {
+    const requestAt = utcnow();
+    const t0 = performance.now();
+    const result = original(opts, ...rest);
+    if (isStream(opts)) return result;
+    return observe(result, (response) => {
+      const latencyMs = Math.round(performance.now() - t0);
+      setImmediate(() => {
+        try {
+          const messages = opts?.messages ?? [];
+          const model = opts?.model ?? "";
+          const [scrubbedMessages, detections] = scrubMessages(messages);
+          const choice = response?.choices?.[0];
+          const responseText = choice?.message?.content ?? "";
+          const scrubbedResponse = responseText ? scrub(responseText).text : "";
+          const usage = response?.usage;
+          enqueue({
+            model: response?.model ?? model,
+            messages: scrubbedMessages,
+            response: scrubbedResponse,
+            prompt_tokens: usage?.prompt_tokens ?? 0,
+            completion_tokens: usage?.completion_tokens ?? 0,
+            latency_ms: latencyMs,
+            timestamp: requestAt,
+            finish_reason: choice?.finish_reason ?? null,
+            pii_detections: detections.map((d) => ({ category: d.category, placeholder: d.placeholder }))
+          });
+        } catch {
+        }
+      });
+    });
+  };
+  completions[PATCHED] = true;
+}
+function patchAnthropic(client, enqueue) {
+  const messagesApi = client.messages;
+  if (messagesApi[PATCHED]) return;
+  const original = messagesApi.create.bind(messagesApi);
+  messagesApi.create = (opts, ...rest) => {
+    const requestAt = utcnow();
+    const t0 = performance.now();
+    const result = original(opts, ...rest);
+    if (isStream(opts)) return result;
+    return observe(result, (response) => {
+      const latencyMs = Math.round(performance.now() - t0);
+      setImmediate(() => {
+        try {
+          const messages = opts?.messages ?? [];
+          const system = opts?.system;
+          const model = opts?.model ?? "";
+          const allMessages = system ? [{ role: "system", content: system }, ...messages] : messages;
+          const [scrubbedMessages, detections] = scrubMessages(allMessages);
+          const responseText = (response?.content ?? []).filter((b) => b.type === "text").map((b) => b.text).join("");
+          const scrubbedResponse = responseText ? scrub(responseText).text : "";
+          const usage = response?.usage;
+          enqueue({
+            model: response?.model ?? model,
+            messages: scrubbedMessages,
+            response: scrubbedResponse,
+            prompt_tokens: usage?.input_tokens ?? 0,
+            completion_tokens: usage?.output_tokens ?? 0,
+            latency_ms: latencyMs,
+            timestamp: requestAt,
+            finish_reason: response?.stop_reason ?? null,
+            pii_detections: detections.map((d) => ({ category: d.category, placeholder: d.placeholder }))
+          });
+        } catch {
+        }
+      });
+    });
+  };
+  messagesApi[PATCHED] = true;
+}
+
+// src/client.ts
+var state = {
+  apiKey: null,
+  baseUrl: "https://api.sovergate.com",
+  queue: null
+};
+function init({ apiKey, baseUrl = "https://api.sovergate.com", debug = false }) {
+  try {
+    state.apiKey = apiKey;
+    state.baseUrl = baseUrl.replace(/\/$/, "");
+    if (debug) {
+      console.debug("[sovergate] init baseUrl=%s", state.baseUrl);
+    }
+    state.queue = new LogQueue((payload) => send(apiKey, payload, state.baseUrl));
+  } catch (err) {
+    state.queue = null;
+    warn("init failed, logging disabled", err);
+  }
+}
+function instrument(client) {
+  if (!state.queue) {
+    warn("instrument() called before init({ apiKey }) \u2014 LLM calls will not be logged");
+    return;
+  }
+  try {
+    const enqueue = state.queue.enqueue.bind(state.queue);
+    if (client?.chat?.completions) {
+      patchOpenAI(client, enqueue);
+      return;
+    }
+    if (client?.messages) {
+      patchAnthropic(client, enqueue);
+      return;
+    }
+    warn(
+      "unsupported client \u2014 LLM calls will not be logged. Pass an OpenAI or Anthropic client instance, or open an issue at https://github.com/sovergate/sdk-js/issues"
+    );
+  } catch (err) {
+    warn("instrument() failed, LLM calls will not be logged", err);
+  }
+}
+function warn(message, err) {
+  try {
+    console.warn(`[sovergate] ${message}`, ...err === void 0 ? [] : [err]);
+  } catch {
+  }
+}
+function shutdown() {
+  state.queue = null;
+}
+export {
+  init,
+  instrument,
+  shutdown
+};
+//# sourceMappingURL=index.mjs.map

package/dist/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/sender.ts","../src/queue.ts","../src/scrubber.ts","../src/patcher.ts","../src/client.ts"],"sourcesContent":["const BASE_URL = 'https://api.sovergate.com'\nconst TIMEOUT_MS = 2000\n\nexport async function send(\n  apiKey: string,\n  payload: Record<string, unknown>,\n  baseUrl = BASE_URL,\n): Promise<boolean> {\n  try {\n    const controller = new AbortController()\n    const timer = setTimeout(() => controller.abort(), TIMEOUT_MS)\n\n    const response = await fetch(`${baseUrl}/ingest`, {\n      method: 'POST',\n      headers: {\n        Authorization: `Bearer ${apiKey}`,\n        'Content-Type': 'application/json',\n      },\n      body: JSON.stringify(payload),\n      signal: controller.signal,\n    })\n\n    clearTimeout(timer)\n    return response.status < 400\n  } catch {\n    return false\n  }\n}\n","type Payload = Record<string, unknown>\ntype SendFn = (payload: Payload) => Promise<boolean>\n\nconst MAX_QUEUE = 10_000\nconst RETRY_DELAYS_S = [1, 2, 4, 8, 16, 30, 60]\n\nfunction sleep(ms: number): Promise<void> {\n  return new Promise(resolve => setTimeout(resolve, ms))\n}\n\nexport class LogQueue {\n  private readonly sendFn: SendFn\n  private readonly items: Payload[] = []\n  private draining = false\n\n  constructor(sendFn: SendFn) {\n    this.sendFn = sendFn\n  }\n\n  enqueue(payload: Payload): void {\n    if (this.items.length >= MAX_QUEUE) return\n    this.items.push(payload)\n    if (!this.draining) {\n      setImmediate(() => void this.drain())\n    }\n  }\n\n  private async drain(): Promise<void> {\n    this.draining = true\n    let retryIndex = 0\n\n    while (this.items.length > 0) {\n      let success = false\n      try {\n        success = await this.sendFn(this.items[0])\n      } catch {\n        // never propagate\n      }\n\n      if (success) {\n        this.items.shift()\n        retryIndex = 0\n      } else {\n        const delaySec = RETRY_DELAYS_S[Math.min(retryIndex, RETRY_DELAYS_S.length - 1)]\n        retryIndex++\n        await sleep(delaySec * 1000)\n      }\n    }\n\n    this.draining = false\n  }\n}\n","export interface Detection {\n  category: string\n  placeholder: string\n}\n\nexport interface ScrubResult {\n  text: string\n  detections: Detection[]\n}\n\ntype ContentBlock = { type: string; text?: string } & Record<string, unknown>\nexport type OpenAIMessage = { role: string; content: string | ContentBlock[] } & Record<string, unknown>\n\n// Each rule: [category, regex (must have g flag), placeholder base]\n// Order matters — IP before phone to avoid dotted-quad false matches.\nconst RULES: Array<[string, RegExp, string]> = [\n  ['email',     /\\b[A-Za-z0-9._%+\\-]+@[A-Za-z0-9.\\-]+\\.[A-Za-z]{2,}\\b/g,                              'EMAIL_REDACTED'],\n  ['ip',        /\\b(?:\\d{1,3}\\.){3}\\d{1,3}\\b/g,                                                        'IP_REDACTED'],\n  ['iban',      /\\b[A-Z]{2}\\d{2}[A-Z0-9]{4,30}\\b/g,                                                    'IBAN_REDACTED'],\n  ['phone',     /\\b(?:\\+?\\d[\\d\\s\\-(). ]{5,14}\\d)\\b/g,                                                  'PHONE_REDACTED'],\n  ['dob',       /\\b(?:\\d{1,2}[\\/\\-.]\\d{1,2}[\\/\\-.]\\d{2,4}|\\d{4}[\\/\\-.]\\d{1,2}[\\/\\-.]\\d{1,2})\\b/g,   'DOB_REDACTED'],\n  ['id_number', /\\b[A-Z]{1,3}\\d{6,9}\\b/g,                                                              'ID_REDACTED'],\n  ['name',      /\\b(?:Mr|Mrs|Ms|Dr|Prof)\\.?\\s+[A-Z][a-z]+(?: [A-Z][a-z]+)*\\b/g,                       'NAME_REDACTED'],\n]\n\nexport function scrub(text: string): ScrubResult {\n  if (!text) return { text, detections: [] }\n\n  const detections: Detection[] = []\n  const counters: Record<string, number> = {}\n\n  let result = text\n  for (const [category, pattern, basePlaceholder] of RULES) {\n    pattern.lastIndex = 0\n    result = result.replace(pattern, () => {\n      counters[category] = (counters[category] ?? 0) + 1\n      const placeholder = `[${basePlaceholder}_${counters[category]}]`\n      detections.push({ category, placeholder })\n      return placeholder\n    })\n  }\n\n  return { text: result, detections }\n}\n\nexport function scrubMessages(messages: OpenAIMessage[]): [OpenAIMessage[], Detection[]] {\n  const allDetections: Detection[] = []\n  const scrubbed: OpenAIMessage[] = []\n\n  for (const msg of messages) {\n    const content = msg.content\n    if (typeof content === 'string') {\n      const result = scrub(content)\n      scrubbed.push({ ...msg, content: result.text })\n      allDetections.push(...result.detections)\n    } else if (Array.isArray(content)) {\n      const newBlocks = content.map(block => {\n        if (block.type === 'text' && typeof block.text === 'string') {\n          const result = scrub(block.text)\n          allDetections.push(...result.detections)\n          return { ...block, text: result.text }\n        }\n        return block\n      })\n      scrubbed.push({ ...msg, content: newBlocks })\n    } else {\n      scrubbed.push(msg)\n    }\n  }\n\n  return [scrubbed, allDetections]\n}\n","import { scrub, scrubMessages } from './scrubber'\n\ntype Enqueue = (payload: Record<string, unknown>) => void\n\nconst PATCHED = Symbol.for('sovergate.patched')\n\nfunction utcnow(): string {\n  return new Date().toISOString()\n}\n\n/**\n * Returns the provider's own result unchanged in behaviour, but notifies `onData`\n * the first time the app reads the parsed result (await / .then / .withResponse).\n *\n * The OpenAI and Anthropic SDKs return an APIPromise with extra methods\n * (.withResponse(), .asResponse()) and parse the body lazily. Wrapping create()\n * in an async function would drop those methods, and reading the result eagerly\n * would consume the body before an app calling .asResponse() can. A Proxy keeps\n * the original object, its prototype and its laziness intact.\n */\n// eslint-disable-next-line @typescript-eslint/no-explicit-any\nfunction observe(result: any, onData: (data: any) => void): any {\n  if (!result || typeof result.then !== 'function') return result\n\n  let seen = false\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any\n  const notify = (data: any): void => {\n    if (seen) return\n    seen = true\n    try {\n      onData(data)\n    } catch {\n      // never let logging errors surface to the caller\n    }\n  }\n\n  try {\n    return new Proxy(result, {\n      get(target, prop) {\n        const value = Reflect.get(target, prop, target)\n        if (typeof value !== 'function') return value\n\n        if (prop === 'then') {\n          // eslint-disable-next-line @typescript-eslint/no-explicit-any\n          return (onFulfilled?: any, onRejected?: any) =>\n            value.call(\n              target,\n              // eslint-disable-next-line @typescript-eslint/no-explicit-any\n              (data: any) => {\n                notify(data)\n                return typeof onFulfilled === 'function' ? onFulfilled(data) : data\n              },\n              onRejected,\n            )\n        }\n\n        if (prop === 'withResponse') {\n          return (...args: unknown[]) =>\n            // eslint-disable-next-line @typescript-eslint/no-explicit-any\n            value.apply(target, args).then((withResponse: any) => {\n              notify(withResponse?.data)\n              return withResponse\n            })\n        }\n\n        return value.bind(target)\n      },\n    })\n  } catch {\n    return result\n  }\n}\n\n// eslint-disable-next-line @typescript-eslint/no-explicit-any\nfunction isStream(opts: any): boolean {\n  return opts?.stream === true\n}\n\n// eslint-disable-next-line @typescript-eslint/no-explicit-any\nexport function patchOpenAI(client: any, enqueue: Enqueue): void {\n  const completions = client.chat.completions\n  if (completions[PATCHED]) return\n  const original = completions.create.bind(completions)\n\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any\n  completions.create = (opts: any, ...rest: unknown[]) => {\n    const requestAt = utcnow()\n    const t0 = performance.now()\n\n    const result = original(opts, ...rest)\n\n    // Streams can only be read once and belong to the app; they are not logged yet.\n    if (isStream(opts)) return result\n\n    // eslint-disable-next-line @typescript-eslint/no-explicit-any\n    return observe(result, (response: any) => {\n      const latencyMs = Math.round(performance.now() - t0)\n\n      setImmediate(() => {\n        try {\n          const messages = opts?.messages ?? []\n          const model = opts?.model ?? ''\n          const [scrubbedMessages, detections] = scrubMessages(messages)\n          const choice = response?.choices?.[0]\n          const responseText: string = choice?.message?.content ?? ''\n          const scrubbedResponse = responseText ? scrub(responseText).text : ''\n          const usage = response?.usage\n\n          enqueue({\n            model: response?.model ?? model,\n            messages: scrubbedMessages,\n            response: scrubbedResponse,\n            prompt_tokens: usage?.prompt_tokens ?? 0,\n            completion_tokens: usage?.completion_tokens ?? 0,\n            latency_ms: latencyMs,\n            timestamp: requestAt,\n            finish_reason: choice?.finish_reason ?? null,\n            pii_detections: detections.map(d => ({ category: d.category, placeholder: d.placeholder })),\n          })\n        } catch {\n          // never let logging errors surface to the caller\n        }\n      })\n    })\n  }\n  completions[PATCHED] = true\n}\n\n// eslint-disable-next-line @typescript-eslint/no-explicit-any\nexport function patchAnthropic(client: any, enqueue: Enqueue): void {\n  const messagesApi = client.messages\n  if (messagesApi[PATCHED]) return\n  const original = messagesApi.create.bind(messagesApi)\n\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any\n  messagesApi.create = (opts: any, ...rest: unknown[]) => {\n    const requestAt = utcnow()\n    const t0 = performance.now()\n\n    const result = original(opts, ...rest)\n\n    // Streams can only be read once and belong to the app; they are not logged yet.\n    if (isStream(opts)) return result\n\n    // eslint-disable-next-line @typescript-eslint/no-explicit-any\n    return observe(result, (response: any) => {\n      const latencyMs = Math.round(performance.now() - t0)\n\n      setImmediate(() => {\n        try {\n          const messages = opts?.messages ?? []\n          const system = opts?.system\n          const model = opts?.model ?? ''\n\n          const allMessages = system\n            ? [{ role: 'system', content: system }, ...messages]\n            : messages\n\n          const [scrubbedMessages, detections] = scrubMessages(allMessages)\n\n          const responseText: string = (response?.content ?? [])\n            // eslint-disable-next-line @typescript-eslint/no-explicit-any\n            .filter((b: any) => b.type === 'text')\n            // eslint-disable-next-line @typescript-eslint/no-explicit-any\n            .map((b: any) => b.text as string)\n            .join('')\n\n          const scrubbedResponse = responseText ? scrub(responseText).text : ''\n          const usage = response?.usage\n\n          enqueue({\n            model: response?.model ?? model,\n            messages: scrubbedMessages,\n            response: scrubbedResponse,\n            prompt_tokens: usage?.input_tokens ?? 0,\n            completion_tokens: usage?.output_tokens ?? 0,\n            latency_ms: latencyMs,\n            timestamp: requestAt,\n            finish_reason: response?.stop_reason ?? null,\n            pii_detections: detections.map(d => ({ category: d.category, placeholder: d.placeholder })),\n          })\n        } catch {\n          // never let logging errors surface to the caller\n        }\n      })\n    })\n  }\n  messagesApi[PATCHED] = true\n}\n","import { send } from './sender'\nimport { LogQueue } from './queue'\nimport { patchOpenAI, patchAnthropic } from './patcher'\n\nexport interface InitOptions {\n  apiKey: string\n  baseUrl?: string\n  debug?: boolean\n}\n\nconst state: {\n  apiKey: string | null\n  baseUrl: string\n  queue: LogQueue | null\n} = {\n  apiKey: null,\n  baseUrl: 'https://api.sovergate.com',\n  queue: null,\n}\n\nexport function init({ apiKey, baseUrl = 'https://api.sovergate.com', debug = false }: InitOptions): void {\n  try {\n    state.apiKey = apiKey\n    state.baseUrl = baseUrl.replace(/\\/$/, '')\n\n    if (debug) {\n      console.debug('[sovergate] init baseUrl=%s', state.baseUrl)\n    }\n\n    state.queue = new LogQueue(payload => send(apiKey, payload, state.baseUrl))\n  } catch (err) {\n    // Never let SDK setup break the host app; logging just stays disabled.\n    state.queue = null\n    warn('init failed, logging disabled', err)\n  }\n}\n\n// Never throws: if instrumentation isn't possible, warn and leave the client untouched.\n// eslint-disable-next-line @typescript-eslint/no-explicit-any\nexport function instrument(client: any): void {\n  if (!state.queue) {\n    warn('instrument() called before init({ apiKey }) — LLM calls will not be logged')\n    return\n  }\n\n  try {\n    const enqueue = state.queue.enqueue.bind(state.queue)\n\n    if (client?.chat?.completions) {\n      patchOpenAI(client, enqueue)\n      return\n    }\n\n    if (client?.messages) {\n      patchAnthropic(client, enqueue)\n      return\n    }\n\n    warn(\n      'unsupported client — LLM calls will not be logged. Pass an OpenAI or Anthropic ' +\n      'client instance, or open an issue at https://github.com/sovergate/sdk-js/issues',\n    )\n  } catch (err) {\n    warn('instrument() failed, LLM calls will not be logged', err)\n  }\n}\n\nfunction warn(message: string, err?: unknown): void {\n  try {\n    console.warn(`[sovergate] ${message}`, ...(err === undefined ? [] : [err]))\n  } catch {\n    // never propagate\n  }\n}\n\nexport function shutdown(): void {\n  state.queue = null\n}\n"],"mappings":";AAAA,IAAM,WAAW;AACjB,IAAM,aAAa;AAEnB,eAAsB,KACpB,QACA,SACA,UAAU,UACQ;AAClB,MAAI;AACF,UAAM,aAAa,IAAI,gBAAgB;AACvC,UAAM,QAAQ,WAAW,MAAM,WAAW,MAAM,GAAG,UAAU;AAE7D,UAAM,WAAW,MAAM,MAAM,GAAG,OAAO,WAAW;AAAA,MAChD,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,eAAe,UAAU,MAAM;AAAA,QAC/B,gBAAgB;AAAA,MAClB;AAAA,MACA,MAAM,KAAK,UAAU,OAAO;AAAA,MAC5B,QAAQ,WAAW;AAAA,IACrB,CAAC;AAED,iBAAa,KAAK;AAClB,WAAO,SAAS,SAAS;AAAA,EAC3B,QAAQ;AACN,WAAO;AAAA,EACT;AACF;;;ACxBA,IAAM,YAAY;AAClB,IAAM,iBAAiB,CAAC,GAAG,GAAG,GAAG,GAAG,IAAI,IAAI,EAAE;AAE9C,SAAS,MAAM,IAA2B;AACxC,SAAO,IAAI,QAAQ,aAAW,WAAW,SAAS,EAAE,CAAC;AACvD;AAEO,IAAM,WAAN,MAAe;AAAA,EACH;AAAA,EACA,QAAmB,CAAC;AAAA,EAC7B,WAAW;AAAA,EAEnB,YAAY,QAAgB;AAC1B,SAAK,SAAS;AAAA,EAChB;AAAA,EAEA,QAAQ,SAAwB;AAC9B,QAAI,KAAK,MAAM,UAAU,UAAW;AACpC,SAAK,MAAM,KAAK,OAAO;AACvB,QAAI,CAAC,KAAK,UAAU;AAClB,mBAAa,MAAM,KAAK,KAAK,MAAM,CAAC;AAAA,IACtC;AAAA,EACF;AAAA,EAEA,MAAc,QAAuB;AACnC,SAAK,WAAW;AAChB,QAAI,aAAa;AAEjB,WAAO,KAAK,MAAM,SAAS,GAAG;AAC5B,UAAI,UAAU;AACd,UAAI;AACF,kBAAU,MAAM,KAAK,OAAO,KAAK,MAAM,CAAC,CAAC;AAAA,MAC3C,QAAQ;AAAA,MAER;AAEA,UAAI,SAAS;AACX,aAAK,MAAM,MAAM;AACjB,qBAAa;AAAA,MACf,OAAO;AACL,cAAM,WAAW,eAAe,KAAK,IAAI,YAAY,eAAe,SAAS,CAAC,CAAC;AAC/E;AACA,cAAM,MAAM,WAAW,GAAI;AAAA,MAC7B;AAAA,IACF;AAEA,SAAK,WAAW;AAAA,EAClB;AACF;;;ACpCA,IAAM,QAAyC;AAAA,EAC7C,CAAC,SAAa,yDAAsF,gBAAgB;AAAA,EACpH,CAAC,MAAa,gCAAuF,aAAa;AAAA,EAClH,CAAC,QAAa,oCAAuF,eAAe;AAAA,EACpH,CAAC,SAAa,sCAAuF,gBAAgB;AAAA,EACrH,CAAC,OAAa,kFAAoF,cAAc;AAAA,EAChH,CAAC,aAAa,0BAAuF,aAAa;AAAA,EAClH,CAAC,QAAa,gEAAsF,eAAe;AACrH;AAEO,SAAS,MAAM,MAA2B;AAC/C,MAAI,CAAC,KAAM,QAAO,EAAE,MAAM,YAAY,CAAC,EAAE;AAEzC,QAAM,aAA0B,CAAC;AACjC,QAAM,WAAmC,CAAC;AAE1C,MAAI,SAAS;AACb,aAAW,CAAC,UAAU,SAAS,eAAe,KAAK,OAAO;AACxD,YAAQ,YAAY;AACpB,aAAS,OAAO,QAAQ,SAAS,MAAM;AACrC,eAAS,QAAQ,KAAK,SAAS,QAAQ,KAAK,KAAK;AACjD,YAAM,cAAc,IAAI,eAAe,IAAI,SAAS,QAAQ,CAAC;AAC7D,iBAAW,KAAK,EAAE,UAAU,YAAY,CAAC;AACzC,aAAO;AAAA,IACT,CAAC;AAAA,EACH;AAEA,SAAO,EAAE,MAAM,QAAQ,WAAW;AACpC;AAEO,SAAS,cAAc,UAA2D;AACvF,QAAM,gBAA6B,CAAC;AACpC,QAAM,WAA4B,CAAC;AAEnC,aAAW,OAAO,UAAU;AAC1B,UAAM,UAAU,IAAI;AACpB,QAAI,OAAO,YAAY,UAAU;AAC/B,YAAM,SAAS,MAAM,OAAO;AAC5B,eAAS,KAAK,EAAE,GAAG,KAAK,SAAS,OAAO,KAAK,CAAC;AAC9C,oBAAc,KAAK,GAAG,OAAO,UAAU;AAAA,IACzC,WAAW,MAAM,QAAQ,OAAO,GAAG;AACjC,YAAM,YAAY,QAAQ,IAAI,WAAS;AACrC,YAAI,MAAM,SAAS,UAAU,OAAO,MAAM,SAAS,UAAU;AAC3D,gBAAM,SAAS,MAAM,MAAM,IAAI;AAC/B,wBAAc,KAAK,GAAG,OAAO,UAAU;AACvC,iBAAO,EAAE,GAAG,OAAO,MAAM,OAAO,KAAK;AAAA,QACvC;AACA,eAAO;AAAA,MACT,CAAC;AACD,eAAS,KAAK,EAAE,GAAG,KAAK,SAAS,UAAU,CAAC;AAAA,IAC9C,OAAO;AACL,eAAS,KAAK,GAAG;AAAA,IACnB;AAAA,EACF;AAEA,SAAO,CAAC,UAAU,aAAa;AACjC;;;ACnEA,IAAM,UAAU,uBAAO,IAAI,mBAAmB;AAE9C,SAAS,SAAiB;AACxB,UAAO,oBAAI,KAAK,GAAE,YAAY;AAChC;AAaA,SAAS,QAAQ,QAAa,QAAkC;AAC9D,MAAI,CAAC,UAAU,OAAO,OAAO,SAAS,WAAY,QAAO;AAEzD,MAAI,OAAO;AAEX,QAAM,SAAS,CAAC,SAAoB;AAClC,QAAI,KAAM;AACV,WAAO;AACP,QAAI;AACF,aAAO,IAAI;AAAA,IACb,QAAQ;AAAA,IAER;AAAA,EACF;AAEA,MAAI;AACF,WAAO,IAAI,MAAM,QAAQ;AAAA,MACvB,IAAI,QAAQ,MAAM;AAChB,cAAM,QAAQ,QAAQ,IAAI,QAAQ,MAAM,MAAM;AAC9C,YAAI,OAAO,UAAU,WAAY,QAAO;AAExC,YAAI,SAAS,QAAQ;AAEnB,iBAAO,CAAC,aAAmB,eACzB,MAAM;AAAA,YACJ;AAAA;AAAA,YAEA,CAAC,SAAc;AACb,qBAAO,IAAI;AACX,qBAAO,OAAO,gBAAgB,aAAa,YAAY,IAAI,IAAI;AAAA,YACjE;AAAA,YACA;AAAA,UACF;AAAA,QACJ;AAEA,YAAI,SAAS,gBAAgB;AAC3B,iBAAO,IAAI;AAAA;AAAA,YAET,MAAM,MAAM,QAAQ,IAAI,EAAE,KAAK,CAAC,iBAAsB;AACpD,qBAAO,cAAc,IAAI;AACzB,qBAAO;AAAA,YACT,CAAC;AAAA;AAAA,QACL;AAEA,eAAO,MAAM,KAAK,MAAM;AAAA,MAC1B;AAAA,IACF,CAAC;AAAA,EACH,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAGA,SAAS,SAAS,MAAoB;AACpC,SAAO,MAAM,WAAW;AAC1B;AAGO,SAAS,YAAY,QAAa,SAAwB;AAC/D,QAAM,cAAc,OAAO,KAAK;AAChC,MAAI,YAAY,OAAO,EAAG;AAC1B,QAAM,WAAW,YAAY,OAAO,KAAK,WAAW;AAGpD,cAAY,SAAS,CAAC,SAAc,SAAoB;AACtD,UAAM,YAAY,OAAO;AACzB,UAAM,KAAK,YAAY,IAAI;AAE3B,UAAM,SAAS,SAAS,MAAM,GAAG,IAAI;AAGrC,QAAI,SAAS,IAAI,EAAG,QAAO;AAG3B,WAAO,QAAQ,QAAQ,CAAC,aAAkB;AACxC,YAAM,YAAY,KAAK,MAAM,YAAY,IAAI,IAAI,EAAE;AAEnD,mBAAa,MAAM;AACjB,YAAI;AACF,gBAAM,WAAW,MAAM,YAAY,CAAC;AACpC,gBAAM,QAAQ,MAAM,SAAS;AAC7B,gBAAM,CAAC,kBAAkB,UAAU,IAAI,cAAc,QAAQ;AAC7D,gBAAM,SAAS,UAAU,UAAU,CAAC;AACpC,gBAAM,eAAuB,QAAQ,SAAS,WAAW;AACzD,gBAAM,mBAAmB,eAAe,MAAM,YAAY,EAAE,OAAO;AACnE,gBAAM,QAAQ,UAAU;AAExB,kBAAQ;AAAA,YACN,OAAO,UAAU,SAAS;AAAA,YAC1B,UAAU;AAAA,YACV,UAAU;AAAA,YACV,eAAe,OAAO,iBAAiB;AAAA,YACvC,mBAAmB,OAAO,qBAAqB;AAAA,YAC/C,YAAY;AAAA,YACZ,WAAW;AAAA,YACX,eAAe,QAAQ,iBAAiB;AAAA,YACxC,gBAAgB,WAAW,IAAI,QAAM,EAAE,UAAU,EAAE,UAAU,aAAa,EAAE,YAAY,EAAE;AAAA,UAC5F,CAAC;AAAA,QACH,QAAQ;AAAA,QAER;AAAA,MACF,CAAC;AAAA,IACH,CAAC;AAAA,EACH;AACA,cAAY,OAAO,IAAI;AACzB;AAGO,SAAS,eAAe,QAAa,SAAwB;AAClE,QAAM,cAAc,OAAO;AAC3B,MAAI,YAAY,OAAO,EAAG;AAC1B,QAAM,WAAW,YAAY,OAAO,KAAK,WAAW;AAGpD,cAAY,SAAS,CAAC,SAAc,SAAoB;AACtD,UAAM,YAAY,OAAO;AACzB,UAAM,KAAK,YAAY,IAAI;AAE3B,UAAM,SAAS,SAAS,MAAM,GAAG,IAAI;AAGrC,QAAI,SAAS,IAAI,EAAG,QAAO;AAG3B,WAAO,QAAQ,QAAQ,CAAC,aAAkB;AACxC,YAAM,YAAY,KAAK,MAAM,YAAY,IAAI,IAAI,EAAE;AAEnD,mBAAa,MAAM;AACjB,YAAI;AACF,gBAAM,WAAW,MAAM,YAAY,CAAC;AACpC,gBAAM,SAAS,MAAM;AACrB,gBAAM,QAAQ,MAAM,SAAS;AAE7B,gBAAM,cAAc,SAChB,CAAC,EAAE,MAAM,UAAU,SAAS,OAAO,GAAG,GAAG,QAAQ,IACjD;AAEJ,gBAAM,CAAC,kBAAkB,UAAU,IAAI,cAAc,WAAW;AAEhE,gBAAM,gBAAwB,UAAU,WAAW,CAAC,GAEjD,OAAO,CAAC,MAAW,EAAE,SAAS,MAAM,EAEpC,IAAI,CAAC,MAAW,EAAE,IAAc,EAChC,KAAK,EAAE;AAEV,gBAAM,mBAAmB,eAAe,MAAM,YAAY,EAAE,OAAO;AACnE,gBAAM,QAAQ,UAAU;AAExB,kBAAQ;AAAA,YACN,OAAO,UAAU,SAAS;AAAA,YAC1B,UAAU;AAAA,YACV,UAAU;AAAA,YACV,eAAe,OAAO,gBAAgB;AAAA,YACtC,mBAAmB,OAAO,iBAAiB;AAAA,YAC3C,YAAY;AAAA,YACZ,WAAW;AAAA,YACX,eAAe,UAAU,eAAe;AAAA,YACxC,gBAAgB,WAAW,IAAI,QAAM,EAAE,UAAU,EAAE,UAAU,aAAa,EAAE,YAAY,EAAE;AAAA,UAC5F,CAAC;AAAA,QACH,QAAQ;AAAA,QAER;AAAA,MACF,CAAC;AAAA,IACH,CAAC;AAAA,EACH;AACA,cAAY,OAAO,IAAI;AACzB;;;AClLA,IAAM,QAIF;AAAA,EACF,QAAQ;AAAA,EACR,SAAS;AAAA,EACT,OAAO;AACT;AAEO,SAAS,KAAK,EAAE,QAAQ,UAAU,6BAA6B,QAAQ,MAAM,GAAsB;AACxG,MAAI;AACF,UAAM,SAAS;AACf,UAAM,UAAU,QAAQ,QAAQ,OAAO,EAAE;AAEzC,QAAI,OAAO;AACT,cAAQ,MAAM,+BAA+B,MAAM,OAAO;AAAA,IAC5D;AAEA,UAAM,QAAQ,IAAI,SAAS,aAAW,KAAK,QAAQ,SAAS,MAAM,OAAO,CAAC;AAAA,EAC5E,SAAS,KAAK;AAEZ,UAAM,QAAQ;AACd,SAAK,iCAAiC,GAAG;AAAA,EAC3C;AACF;AAIO,SAAS,WAAW,QAAmB;AAC5C,MAAI,CAAC,MAAM,OAAO;AAChB,SAAK,iFAA4E;AACjF;AAAA,EACF;AAEA,MAAI;AACF,UAAM,UAAU,MAAM,MAAM,QAAQ,KAAK,MAAM,KAAK;AAEpD,QAAI,QAAQ,MAAM,aAAa;AAC7B,kBAAY,QAAQ,OAAO;AAC3B;AAAA,IACF;AAEA,QAAI,QAAQ,UAAU;AACpB,qBAAe,QAAQ,OAAO;AAC9B;AAAA,IACF;AAEA;AAAA,MACE;AAAA,IAEF;AAAA,EACF,SAAS,KAAK;AACZ,SAAK,qDAAqD,GAAG;AAAA,EAC/D;AACF;AAEA,SAAS,KAAK,SAAiB,KAAqB;AAClD,MAAI;AACF,YAAQ,KAAK,eAAe,OAAO,IAAI,GAAI,QAAQ,SAAY,CAAC,IAAI,CAAC,GAAG,CAAE;AAAA,EAC5E,QAAQ;AAAA,EAER;AACF;AAEO,SAAS,WAAiB;AAC/B,QAAM,QAAQ;AAChB;","names":[]}

package/package.json

@@ -1,6 +1,60 @@
 {
   "name": "sovergate",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.1.0-alpha.1",
+  "description": "EU AI Act compliance SDK — automatic, non-invasive audit logging for LLM calls",
+  "main": "./dist/index.js",
+  "module": "./dist/index.mjs",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "import": {
+        "types": "./dist/index.d.mts",
+        "default": "./dist/index.mjs"
+      },
+      "require": {
+        "types": "./dist/index.d.ts",
+        "default": "./dist/index.js"
+      }
+    },
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "dist"
+  ],
+  "sideEffects": false,
+  "scripts": {
+    "build": "tsup",
+    "typecheck": "tsc --noEmit",
+    "test": "jest --testEnvironment node",
+    "test:watch": "jest --watch",
+    "prepublishOnly": "npm run typecheck && npm run build"
+  },
+  "keywords": [
+    "eu-ai-act",
+    "compliance",
+    "gdpr",
+    "llm",
+    "audit"
+  ],
+  "license": "MIT",
+  "engines": {
+    "node": ">=18"
+  },
+  "devDependencies": {
+    "@anthropic-ai/sdk": "^1.3.0",
+    "@types/jest": "^29.5.0",
+    "@types/node": "^20.0.0",
+    "jest": "^29.5.0",
+    "openai": "^7.43.0",
+    "ts-jest": "^29.1.0",
+    "tsup": "^8.5.1",
+    "typescript": "^5.0.0"
+  },
+  "jest": {
+    "preset": "ts-jest",
+    "testEnvironment": "node",
+    "testMatch": [
+      "**/tests/**/*.test.ts"
+    ]
+  }
+}