sovergate 0.0.0-stage → 0.1.0-alpha.2

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Roberto Postolovski
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,130 @@
-# Temporary Holding Version
+# sovergate
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+TypeScript / JavaScript SDK for [Sovergate](https://sovergate.com): EU AI Act
+Article 12 audit logging for LLM calls, with PII scrubbed inside your own
+infrastructure.
+
+> **Early access.** The SDK is published as an alpha and the hosted ingest
+> service is not generally available yet. APIs may change before 1.0.
+
+## How it works
+
+Your app keeps calling OpenAI or Anthropic directly. Sovergate does not proxy
+or intercept the request. After a call completes, the SDK takes a copy,
+scrubs personal data **locally**, and sends the scrubbed copy to Sovergate in
+the background.
+
+```
+Your app ─────────────────────────────► OpenAI / Anthropic
+              │
+              └──► scrub PII locally ──► Sovergate (async, fire and forget)
+```
+
+## Install
+
+```bash
+npm install sovergate@alpha
+```
+
+Requires Node.js 18+. Ships ESM and CommonJS builds with TypeScript types.
+No runtime dependencies.
+
+## Quick start
+
+```typescript
+import OpenAI from 'openai'
+import { init, instrument } from 'sovergate'
+
+const openai = new OpenAI()
+
+init({ apiKey: 'sov_prod_xxxx' })
+instrument(openai)
+
+// Your existing code is unchanged
+const response = await openai.chat.completions.create({
+  model: 'gpt-4o',
+  messages: [{ role: 'user', content: 'Hello' }],
+})
+// The response is returned immediately; logging happens in the background
+```
+
+Anthropic works the same way:
+
+```typescript
+import Anthropic from '@anthropic-ai/sdk'
+import { init, instrument } from 'sovergate'
+
+const client = new Anthropic()
+init({ apiKey: 'sov_prod_xxxx' })
+instrument(client)
+```
+
+## Options
+
+```typescript
+init({
+  apiKey: 'sov_prod_xxxx',     // required
+  baseUrl: 'https://...',      // default: https://api.sovergate.com
+  debug: true,                 // print SDK internals to console.debug
+})
+```
+
+## What is sent to Sovergate
+
+For each completed call, one JSON record:
+
+| Field | Content |
+|---|---|
+| `model` | Model name returned by the provider |
+| `messages` | Your prompt messages, **after** PII scrubbing |
+| `response` | The model's text output, **after** PII scrubbing |
+| `prompt_tokens`, `completion_tokens` | Token counts from the provider |
+| `latency_ms`, `timestamp` | Call duration and start time |
+| `finish_reason` | Why the model stopped |
+| `pii_detections` | Category and placeholder of each scrubbed item, never the original value |
+
+Never sent: the raw prompt or response, your LLM provider API key, or request
+headers.
+
+### What the scrubber detects
+
+Regex-based, applied to every text part of the prompt and response: email
+addresses, IP addresses, IBANs, phone numbers, dates of birth, ID numbers, and
+names that follow a title (Mr, Mrs, Ms, Dr, Prof). Other personal data, such
+as names without a title, is **not** detected yet, so keep data minimisation in
+mind when you build prompts. The code is in [`src/scrubber.ts`](src/scrubber.ts).
+
+## Guarantees
+
+- Never blocks the event loop: logging runs via `setImmediate`
+- Never throws: if setup fails, the SDK logs a `console.warn` and stays out of the way
+- Leaves your client unchanged: `create()` still returns the provider SDK's own
+  object, so `.withResponse()` and `.asResponse()` keep working
+- 2 second timeout on every HTTP call to Sovergate
+- If Sovergate is unreachable, records are queued in memory (up to 10,000) and
+  retried with exponential backoff
+- A record Sovergate permanently rejects (for example after a key is revoked) is
+  dropped with a `console.warn`, so it never blocks the records behind it
+
+## Current limitations
+
+- Streaming calls (`stream: true`) are passed through untouched but not logged yet.
+- PII placeholders are positional (`[EMAIL_REDACTED_1]`) and not correlatable across logs.
+- The retry queue is in memory, so queued records are lost if the process exits.
+
+## Development
+
+```bash
+npm ci
+npm run typecheck
+npm test
+npm run build
+```
+
+## Security
+
+Please report vulnerabilities privately. See [SECURITY.md](SECURITY.md).
+
+## License
+
+[MIT](LICENSE)

package/dist/index.d.mts

@@ -0,0 +1,19 @@
+interface InitOptions {
+    apiKey: string;
+    baseUrl?: string;
+    debug?: boolean;
+}
+declare function init({ apiKey, baseUrl, debug }: InitOptions): void;
+declare function instrument(client: any): void;
+declare function shutdown(): void;
+
+interface Detection {
+    category: string;
+    placeholder: string;
+}
+interface ScrubResult {
+    text: string;
+    detections: Detection[];
+}
+
+export { type Detection, type InitOptions, type ScrubResult, init, instrument, shutdown };

package/dist/index.d.ts

@@ -0,0 +1,19 @@
+interface InitOptions {
+    apiKey: string;
+    baseUrl?: string;
+    debug?: boolean;
+}
+declare function init({ apiKey, baseUrl, debug }: InitOptions): void;
+declare function instrument(client: any): void;
+declare function shutdown(): void;
+
+interface Detection {
+    category: string;
+    placeholder: string;
+}
+interface ScrubResult {
+    text: string;
+    detections: Detection[];
+}
+
+export { type Detection, type InitOptions, type ScrubResult, init, instrument, shutdown };

package/dist/index.js

@@ -0,0 +1,358 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/index.ts
+var index_exports = {};
+__export(index_exports, {
+  init: () => init,
+  instrument: () => instrument,
+  shutdown: () => shutdown
+});
+module.exports = __toCommonJS(index_exports);
+
+// src/sender.ts
+var BASE_URL = "https://api.sovergate.com";
+var TIMEOUT_MS = 2e3;
+var RETRYABLE_STATUS = /* @__PURE__ */ new Set([408, 425, 429]);
+async function send(apiKey, payload, baseUrl = BASE_URL) {
+  try {
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), TIMEOUT_MS);
+    const response = await fetch(`${baseUrl}/ingest`, {
+      method: "POST",
+      headers: {
+        Authorization: `Bearer ${apiKey}`,
+        "Content-Type": "application/json"
+      },
+      body: JSON.stringify(payload),
+      signal: controller.signal
+    });
+    clearTimeout(timer);
+    if (response.status < 400) return "sent";
+    if (RETRYABLE_STATUS.has(response.status) || response.status >= 500) return "retry";
+    try {
+      console.warn(`[sovergate] ingest rejected a record (HTTP ${response.status}); dropping it`);
+    } catch {
+    }
+    return "drop";
+  } catch {
+    return "retry";
+  }
+}
+
+// src/queue.ts
+var MAX_QUEUE = 1e4;
+var RETRY_DELAYS_S = [1, 2, 4, 8, 16, 30, 60];
+function sleep(ms) {
+  return new Promise((resolve) => setTimeout(resolve, ms));
+}
+var LogQueue = class {
+  sendFn;
+  items = [];
+  draining = false;
+  constructor(sendFn) {
+    this.sendFn = sendFn;
+  }
+  enqueue(payload) {
+    if (this.items.length >= MAX_QUEUE) return;
+    this.items.push(payload);
+    if (!this.draining) {
+      setImmediate(() => void this.drain());
+    }
+  }
+  async drain() {
+    this.draining = true;
+    let retryIndex = 0;
+    while (this.items.length > 0) {
+      let done = false;
+      try {
+        const outcome = await this.sendFn(this.items[0]);
+        done = outcome === true || outcome === "sent" || outcome === "drop";
+      } catch {
+      }
+      if (done) {
+        this.items.shift();
+        retryIndex = 0;
+      } else {
+        const delaySec = RETRY_DELAYS_S[Math.min(retryIndex, RETRY_DELAYS_S.length - 1)];
+        retryIndex++;
+        await sleep(delaySec * 1e3);
+      }
+    }
+    this.draining = false;
+  }
+};
+
+// src/scrubber.ts
+var RULES = [
+  ["email", /\b[A-Za-z0-9._%+\-]+@[A-Za-z0-9.\-]+\.[A-Za-z]{2,}\b/g, "EMAIL_REDACTED"],
+  ["ip", /\b(?:\d{1,3}\.){3}\d{1,3}\b/g, "IP_REDACTED"],
+  ["iban", /\b[A-Z]{2}\d{2}[A-Z0-9]{4,30}\b/g, "IBAN_REDACTED"],
+  // (?<![\w+]) instead of \b so a leading "+" is part of the match, not left behind
+  ["phone", /(?<![\w+])\+?\d[\d\s\-(). ]{5,14}\d\b/g, "PHONE_REDACTED"],
+  ["dob", /\b(?:\d{1,2}[\/\-.]\d{1,2}[\/\-.]\d{2,4}|\d{4}[\/\-.]\d{1,2}[\/\-.]\d{1,2})\b/g, "DOB_REDACTED"],
+  ["id_number", /\b[A-Z]{1,3}\d{6,9}\b/g, "ID_REDACTED"],
+  ["name", /\b(?:Mr|Mrs|Ms|Dr|Prof)\.?\s+[A-Z][a-z]+(?: [A-Z][a-z]+)*\b/g, "NAME_REDACTED"]
+];
+var ScrubContext = class {
+  seen = /* @__PURE__ */ new Map();
+  next = /* @__PURE__ */ new Map();
+  placeholder(base, value) {
+    const key = `${base}\0${value.replace(/[\s-]/g, "").toLowerCase()}`;
+    let n = this.seen.get(key);
+    if (n === void 0) {
+      n = (this.next.get(base) ?? 0) + 1;
+      this.next.set(base, n);
+      this.seen.set(key, n);
+    }
+    return `[${base}_${n}]`;
+  }
+};
+function scrub(text, context = new ScrubContext()) {
+  if (!text) return { text, detections: [] };
+  const detections = [];
+  let result = text;
+  for (const [category, pattern, basePlaceholder] of RULES) {
+    pattern.lastIndex = 0;
+    result = result.replace(pattern, (match) => {
+      const placeholder = context.placeholder(basePlaceholder, match);
+      detections.push({ category, placeholder });
+      return placeholder;
+    });
+  }
+  return { text: result, detections };
+}
+function scrubMessages(messages, context = new ScrubContext()) {
+  const allDetections = [];
+  const scrubbed = [];
+  for (const msg of messages) {
+    const content = msg.content;
+    if (typeof content === "string") {
+      const result = scrub(content, context);
+      scrubbed.push({ ...msg, content: result.text });
+      allDetections.push(...result.detections);
+    } else if (Array.isArray(content)) {
+      const newBlocks = content.map((block) => {
+        if (block.type === "text" && typeof block.text === "string") {
+          const result = scrub(block.text, context);
+          allDetections.push(...result.detections);
+          return { ...block, text: result.text };
+        }
+        return block;
+      });
+      scrubbed.push({ ...msg, content: newBlocks });
+    } else {
+      scrubbed.push(msg);
+    }
+  }
+  return [scrubbed, allDetections];
+}
+
+// src/patcher.ts
+var PATCHED = /* @__PURE__ */ Symbol.for("sovergate.patched");
+function utcnow() {
+  return (/* @__PURE__ */ new Date()).toISOString();
+}
+function observe(result, onData) {
+  if (!result || typeof result.then !== "function") return result;
+  let seen = false;
+  const notify = (data) => {
+    if (seen) return;
+    seen = true;
+    try {
+      onData(data);
+    } catch {
+    }
+  };
+  try {
+    return new Proxy(result, {
+      get(target, prop) {
+        const value = Reflect.get(target, prop, target);
+        if (typeof value !== "function") return value;
+        if (prop === "then") {
+          return (onFulfilled, onRejected) => value.call(
+            target,
+            // eslint-disable-next-line @typescript-eslint/no-explicit-any
+            (data) => {
+              notify(data);
+              return typeof onFulfilled === "function" ? onFulfilled(data) : data;
+            },
+            onRejected
+          );
+        }
+        if (prop === "withResponse") {
+          return (...args) => (
+            // eslint-disable-next-line @typescript-eslint/no-explicit-any
+            value.apply(target, args).then((withResponse) => {
+              notify(withResponse?.data);
+              return withResponse;
+            })
+          );
+        }
+        return value.bind(target);
+      }
+    });
+  } catch {
+    return result;
+  }
+}
+function isStream(opts) {
+  return opts?.stream === true;
+}
+function patchOpenAI(client, enqueue) {
+  const completions = client.chat.completions;
+  if (completions[PATCHED]) return;
+  const original = completions.create.bind(completions);
+  completions.create = (opts, ...rest) => {
+    const requestAt = utcnow();
+    const t0 = performance.now();
+    const result = original(opts, ...rest);
+    if (isStream(opts)) return result;
+    return observe(result, (response) => {
+      const latencyMs = Math.round(performance.now() - t0);
+      setImmediate(() => {
+        try {
+          const messages = opts?.messages ?? [];
+          const model = opts?.model ?? "";
+          const context = new ScrubContext();
+          const [scrubbedMessages, promptDetections] = scrubMessages(messages, context);
+          const choice = response?.choices?.[0];
+          const responseText = choice?.message?.content ?? "";
+          const scrubbedResult = responseText ? scrub(responseText, context) : null;
+          const scrubbedResponse = scrubbedResult?.text ?? "";
+          const detections = [...promptDetections, ...scrubbedResult?.detections ?? []];
+          const usage = response?.usage;
+          enqueue({
+            model: response?.model ?? model,
+            messages: scrubbedMessages,
+            response: scrubbedResponse,
+            prompt_tokens: usage?.prompt_tokens ?? 0,
+            completion_tokens: usage?.completion_tokens ?? 0,
+            latency_ms: latencyMs,
+            timestamp: requestAt,
+            finish_reason: choice?.finish_reason ?? null,
+            pii_detections: detections.map((d) => ({ category: d.category, placeholder: d.placeholder }))
+          });
+        } catch {
+        }
+      });
+    });
+  };
+  completions[PATCHED] = true;
+}
+function patchAnthropic(client, enqueue) {
+  const messagesApi = client.messages;
+  if (messagesApi[PATCHED]) return;
+  const original = messagesApi.create.bind(messagesApi);
+  messagesApi.create = (opts, ...rest) => {
+    const requestAt = utcnow();
+    const t0 = performance.now();
+    const result = original(opts, ...rest);
+    if (isStream(opts)) return result;
+    return observe(result, (response) => {
+      const latencyMs = Math.round(performance.now() - t0);
+      setImmediate(() => {
+        try {
+          const messages = opts?.messages ?? [];
+          const system = opts?.system;
+          const model = opts?.model ?? "";
+          const allMessages = system ? [{ role: "system", content: system }, ...messages] : messages;
+          const context = new ScrubContext();
+          const [scrubbedMessages, promptDetections] = scrubMessages(allMessages, context);
+          const responseText = (response?.content ?? []).filter((b) => b.type === "text").map((b) => b.text).join("");
+          const scrubbedResult = responseText ? scrub(responseText, context) : null;
+          const scrubbedResponse = scrubbedResult?.text ?? "";
+          const detections = [...promptDetections, ...scrubbedResult?.detections ?? []];
+          const usage = response?.usage;
+          enqueue({
+            model: response?.model ?? model,
+            messages: scrubbedMessages,
+            response: scrubbedResponse,
+            prompt_tokens: usage?.input_tokens ?? 0,
+            completion_tokens: usage?.output_tokens ?? 0,
+            latency_ms: latencyMs,
+            timestamp: requestAt,
+            finish_reason: response?.stop_reason ?? null,
+            pii_detections: detections.map((d) => ({ category: d.category, placeholder: d.placeholder }))
+          });
+        } catch {
+        }
+      });
+    });
+  };
+  messagesApi[PATCHED] = true;
+}
+
+// src/client.ts
+var state = {
+  apiKey: null,
+  baseUrl: "https://api.sovergate.com",
+  queue: null
+};
+function init({ apiKey, baseUrl = "https://api.sovergate.com", debug = false }) {
+  try {
+    state.apiKey = apiKey;
+    state.baseUrl = baseUrl.replace(/\/$/, "");
+    if (debug) {
+      console.debug("[sovergate] init baseUrl=%s", state.baseUrl);
+    }
+    state.queue = new LogQueue((payload) => send(apiKey, payload, state.baseUrl));
+  } catch (err) {
+    state.queue = null;
+    warn("init failed, logging disabled", err);
+  }
+}
+function instrument(client) {
+  if (!state.queue) {
+    warn("instrument() called before init({ apiKey }) \u2014 LLM calls will not be logged");
+    return;
+  }
+  try {
+    const enqueue = state.queue.enqueue.bind(state.queue);
+    if (client?.chat?.completions) {
+      patchOpenAI(client, enqueue);
+      return;
+    }
+    if (client?.messages) {
+      patchAnthropic(client, enqueue);
+      return;
+    }
+    warn(
+      "unsupported client \u2014 LLM calls will not be logged. Pass an OpenAI or Anthropic client instance, or open an issue at https://github.com/sovergate/sdk-js/issues"
+    );
+  } catch (err) {
+    warn("instrument() failed, LLM calls will not be logged", err);
+  }
+}
+function warn(message, err) {
+  try {
+    console.warn(`[sovergate] ${message}`, ...err === void 0 ? [] : [err]);
+  } catch {
+  }
+}
+function shutdown() {
+  state.queue = null;
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  init,
+  instrument,
+  shutdown
+});
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts","../src/sender.ts","../src/queue.ts","../src/scrubber.ts","../src/patcher.ts","../src/client.ts"],"sourcesContent":["export { init, instrument, shutdown } from './client'\nexport type { InitOptions } from './client'\nexport type { Detection, ScrubResult } from './scrubber'\n","const BASE_URL = 'https://api.sovergate.com'\nconst TIMEOUT_MS = 2000\nconst RETRYABLE_STATUS = new Set([408, 425, 429])\n\n/**\n * sent:  accepted by the server\n * retry: temporary failure, keep the record and try again later\n * drop:  permanently rejected, retrying the same record can never succeed\n */\nexport type SendOutcome = 'sent' | 'retry' | 'drop'\n\nexport async function send(\n  apiKey: string,\n  payload: Record<string, unknown>,\n  baseUrl = BASE_URL,\n): Promise<SendOutcome> {\n  try {\n    const controller = new AbortController()\n    const timer = setTimeout(() => controller.abort(), TIMEOUT_MS)\n\n    const response = await fetch(`${baseUrl}/ingest`, {\n      method: 'POST',\n      headers: {\n        Authorization: `Bearer ${apiKey}`,\n        'Content-Type': 'application/json',\n      },\n      body: JSON.stringify(payload),\n      signal: controller.signal,\n    })\n\n    clearTimeout(timer)\n    if (response.status < 400) return 'sent'\n    if (RETRYABLE_STATUS.has(response.status) || response.status >= 500) return 'retry'\n\n    // 400 (invalid record), 401/403 (bad or revoked key), 413 (too large)...\n    // Retrying would block every later record behind this one.\n    try {\n      console.warn(`[sovergate] ingest rejected a record (HTTP ${response.status}); dropping it`)\n    } catch {\n      // never propagate\n    }\n    return 'drop'\n  } catch {\n    return 'retry'\n  }\n}\n","import type { SendOutcome } from './sender'\n\ntype Payload = Record<string, unknown>\ntype SendFn = (payload: Payload) => Promise<SendOutcome | boolean>\n\nconst MAX_QUEUE = 10_000\nconst RETRY_DELAYS_S = [1, 2, 4, 8, 16, 30, 60]\n\nfunction sleep(ms: number): Promise<void> {\n  return new Promise(resolve => setTimeout(resolve, ms))\n}\n\nexport class LogQueue {\n  private readonly sendFn: SendFn\n  private readonly items: Payload[] = []\n  private draining = false\n\n  constructor(sendFn: SendFn) {\n    this.sendFn = sendFn\n  }\n\n  enqueue(payload: Payload): void {\n    if (this.items.length >= MAX_QUEUE) return\n    this.items.push(payload)\n    if (!this.draining) {\n      setImmediate(() => void this.drain())\n    }\n  }\n\n  private async drain(): Promise<void> {\n    this.draining = true\n    let retryIndex = 0\n\n    while (this.items.length > 0) {\n      let done = false\n      try {\n        const outcome = await this.sendFn(this.items[0])\n        // 'sent' and 'drop' both finish this record; true is accepted as 'sent'.\n        done = outcome === true || outcome === 'sent' || outcome === 'drop'\n      } catch {\n        // never propagate\n      }\n\n      if (done) {\n        this.items.shift()\n        retryIndex = 0\n      } else {\n        const delaySec = RETRY_DELAYS_S[Math.min(retryIndex, RETRY_DELAYS_S.length - 1)]\n        retryIndex++\n        await sleep(delaySec * 1000)\n      }\n    }\n\n    this.draining = false\n  }\n}\n","export interface Detection {\n  category: string\n  placeholder: string\n}\n\nexport interface ScrubResult {\n  text: string\n  detections: Detection[]\n}\n\ntype ContentBlock = { type: string; text?: string } & Record<string, unknown>\nexport type OpenAIMessage = { role: string; content: string | ContentBlock[] } & Record<string, unknown>\n\n// Each rule: [category, regex (must have g flag), placeholder base]\n// Order matters — IP before phone to avoid dotted-quad false matches.\nconst RULES: Array<[string, RegExp, string]> = [\n  ['email',     /\\b[A-Za-z0-9._%+\\-]+@[A-Za-z0-9.\\-]+\\.[A-Za-z]{2,}\\b/g,                              'EMAIL_REDACTED'],\n  ['ip',        /\\b(?:\\d{1,3}\\.){3}\\d{1,3}\\b/g,                                                        'IP_REDACTED'],\n  ['iban',      /\\b[A-Z]{2}\\d{2}[A-Z0-9]{4,30}\\b/g,                                                    'IBAN_REDACTED'],\n  // (?<![\\w+]) instead of \\b so a leading \"+\" is part of the match, not left behind\n  ['phone',     /(?<![\\w+])\\+?\\d[\\d\\s\\-(). ]{5,14}\\d\\b/g,                                            'PHONE_REDACTED'],\n  ['dob',       /\\b(?:\\d{1,2}[\\/\\-.]\\d{1,2}[\\/\\-.]\\d{2,4}|\\d{4}[\\/\\-.]\\d{1,2}[\\/\\-.]\\d{1,2})\\b/g,   'DOB_REDACTED'],\n  ['id_number', /\\b[A-Z]{1,3}\\d{6,9}\\b/g,                                                              'ID_REDACTED'],\n  ['name',      /\\b(?:Mr|Mrs|Ms|Dr|Prof)\\.?\\s+[A-Z][a-z]+(?: [A-Z][a-z]+)*\\b/g,                       'NAME_REDACTED'],\n]\n\n/**\n * Numbers placeholders across one whole record (all messages and the response),\n * so the same value always gets the same placeholder and two different values\n * never share one.\n */\nexport class ScrubContext {\n  private readonly seen = new Map<string, number>()\n  private readonly next = new Map<string, number>()\n\n  placeholder(base: string, value: string): string {\n    const key = `${base}\\u0000${value.replace(/[\\s-]/g, '').toLowerCase()}`\n    let n = this.seen.get(key)\n    if (n === undefined) {\n      n = (this.next.get(base) ?? 0) + 1\n      this.next.set(base, n)\n      this.seen.set(key, n)\n    }\n    return `[${base}_${n}]`\n  }\n}\n\nexport function scrub(text: string, context: ScrubContext = new ScrubContext()): ScrubResult {\n  if (!text) return { text, detections: [] }\n\n  const detections: Detection[] = []\n\n  let result = text\n  for (const [category, pattern, basePlaceholder] of RULES) {\n    pattern.lastIndex = 0\n    result = result.replace(pattern, match => {\n      const placeholder = context.placeholder(basePlaceholder, match)\n      detections.push({ category, placeholder })\n      return placeholder\n    })\n  }\n\n  return { text: result, detections }\n}\n\nexport function scrubMessages(\n  messages: OpenAIMessage[],\n  context: ScrubContext = new ScrubContext(),\n): [OpenAIMessage[], Detection[]] {\n  const allDetections: Detection[] = []\n  const scrubbed: OpenAIMessage[] = []\n\n  for (const msg of messages) {\n    const content = msg.content\n    if (typeof content === 'string') {\n      const result = scrub(content, context)\n      scrubbed.push({ ...msg, content: result.text })\n      allDetections.push(...result.detections)\n    } else if (Array.isArray(content)) {\n      const newBlocks = content.map(block => {\n        if (block.type === 'text' && typeof block.text === 'string') {\n          const result = scrub(block.text, context)\n          allDetections.push(...result.detections)\n          return { ...block, text: result.text }\n        }\n        return block\n      })\n      scrubbed.push({ ...msg, content: newBlocks })\n    } else {\n      scrubbed.push(msg)\n    }\n  }\n\n  return [scrubbed, allDetections]\n}\n","import { ScrubContext, scrub, scrubMessages } from './scrubber'\n\ntype Enqueue = (payload: Record<string, unknown>) => void\n\nconst PATCHED = Symbol.for('sovergate.patched')\n\nfunction utcnow(): string {\n  return new Date().toISOString()\n}\n\n/**\n * Returns the provider's own result unchanged in behaviour, but notifies `onData`\n * the first time the app reads the parsed result (await / .then / .withResponse).\n *\n * The OpenAI and Anthropic SDKs return an APIPromise with extra methods\n * (.withResponse(), .asResponse()) and parse the body lazily. Wrapping create()\n * in an async function would drop those methods, and reading the result eagerly\n * would consume the body before an app calling .asResponse() can. A Proxy keeps\n * the original object, its prototype and its laziness intact.\n */\n// eslint-disable-next-line @typescript-eslint/no-explicit-any\nfunction observe(result: any, onData: (data: any) => void): any {\n  if (!result || typeof result.then !== 'function') return result\n\n  let seen = false\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any\n  const notify = (data: any): void => {\n    if (seen) return\n    seen = true\n    try {\n      onData(data)\n    } catch {\n      // never let logging errors surface to the caller\n    }\n  }\n\n  try {\n    return new Proxy(result, {\n      get(target, prop) {\n        const value = Reflect.get(target, prop, target)\n        if (typeof value !== 'function') return value\n\n        if (prop === 'then') {\n          // eslint-disable-next-line @typescript-eslint/no-explicit-any\n          return (onFulfilled?: any, onRejected?: any) =>\n            value.call(\n              target,\n              // eslint-disable-next-line @typescript-eslint/no-explicit-any\n              (data: any) => {\n                notify(data)\n                return typeof onFulfilled === 'function' ? onFulfilled(data) : data\n              },\n              onRejected,\n            )\n        }\n\n        if (prop === 'withResponse') {\n          return (...args: unknown[]) =>\n            // eslint-disable-next-line @typescript-eslint/no-explicit-any\n            value.apply(target, args).then((withResponse: any) => {\n              notify(withResponse?.data)\n              return withResponse\n            })\n        }\n\n        return value.bind(target)\n      },\n    })\n  } catch {\n    return result\n  }\n}\n\n// eslint-disable-next-line @typescript-eslint/no-explicit-any\nfunction isStream(opts: any): boolean {\n  return opts?.stream === true\n}\n\n// eslint-disable-next-line @typescript-eslint/no-explicit-any\nexport function patchOpenAI(client: any, enqueue: Enqueue): void {\n  const completions = client.chat.completions\n  if (completions[PATCHED]) return\n  const original = completions.create.bind(completions)\n\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any\n  completions.create = (opts: any, ...rest: unknown[]) => {\n    const requestAt = utcnow()\n    const t0 = performance.now()\n\n    const result = original(opts, ...rest)\n\n    // Streams can only be read once and belong to the app; they are not logged yet.\n    if (isStream(opts)) return result\n\n    // eslint-disable-next-line @typescript-eslint/no-explicit-any\n    return observe(result, (response: any) => {\n      const latencyMs = Math.round(performance.now() - t0)\n\n      setImmediate(() => {\n        try {\n          const messages = opts?.messages ?? []\n          const model = opts?.model ?? ''\n          const context = new ScrubContext()\n          const [scrubbedMessages, promptDetections] = scrubMessages(messages, context)\n          const choice = response?.choices?.[0]\n          const responseText: string = choice?.message?.content ?? ''\n          const scrubbedResult = responseText ? scrub(responseText, context) : null\n          const scrubbedResponse = scrubbedResult?.text ?? ''\n          const detections = [...promptDetections, ...(scrubbedResult?.detections ?? [])]\n          const usage = response?.usage\n\n          enqueue({\n            model: response?.model ?? model,\n            messages: scrubbedMessages,\n            response: scrubbedResponse,\n            prompt_tokens: usage?.prompt_tokens ?? 0,\n            completion_tokens: usage?.completion_tokens ?? 0,\n            latency_ms: latencyMs,\n            timestamp: requestAt,\n            finish_reason: choice?.finish_reason ?? null,\n            pii_detections: detections.map(d => ({ category: d.category, placeholder: d.placeholder })),\n          })\n        } catch {\n          // never let logging errors surface to the caller\n        }\n      })\n    })\n  }\n  completions[PATCHED] = true\n}\n\n// eslint-disable-next-line @typescript-eslint/no-explicit-any\nexport function patchAnthropic(client: any, enqueue: Enqueue): void {\n  const messagesApi = client.messages\n  if (messagesApi[PATCHED]) return\n  const original = messagesApi.create.bind(messagesApi)\n\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any\n  messagesApi.create = (opts: any, ...rest: unknown[]) => {\n    const requestAt = utcnow()\n    const t0 = performance.now()\n\n    const result = original(opts, ...rest)\n\n    // Streams can only be read once and belong to the app; they are not logged yet.\n    if (isStream(opts)) return result\n\n    // eslint-disable-next-line @typescript-eslint/no-explicit-any\n    return observe(result, (response: any) => {\n      const latencyMs = Math.round(performance.now() - t0)\n\n      setImmediate(() => {\n        try {\n          const messages = opts?.messages ?? []\n          const system = opts?.system\n          const model = opts?.model ?? ''\n\n          const allMessages = system\n            ? [{ role: 'system', content: system }, ...messages]\n            : messages\n\n          const context = new ScrubContext()\n          const [scrubbedMessages, promptDetections] = scrubMessages(allMessages, context)\n\n          const responseText: string = (response?.content ?? [])\n            // eslint-disable-next-line @typescript-eslint/no-explicit-any\n            .filter((b: any) => b.type === 'text')\n            // eslint-disable-next-line @typescript-eslint/no-explicit-any\n            .map((b: any) => b.text as string)\n            .join('')\n\n          const scrubbedResult = responseText ? scrub(responseText, context) : null\n          const scrubbedResponse = scrubbedResult?.text ?? ''\n          const detections = [...promptDetections, ...(scrubbedResult?.detections ?? [])]\n          const usage = response?.usage\n\n          enqueue({\n            model: response?.model ?? model,\n            messages: scrubbedMessages,\n            response: scrubbedResponse,\n            prompt_tokens: usage?.input_tokens ?? 0,\n            completion_tokens: usage?.output_tokens ?? 0,\n            latency_ms: latencyMs,\n            timestamp: requestAt,\n            finish_reason: response?.stop_reason ?? null,\n            pii_detections: detections.map(d => ({ category: d.category, placeholder: d.placeholder })),\n          })\n        } catch {\n          // never let logging errors surface to the caller\n        }\n      })\n    })\n  }\n  messagesApi[PATCHED] = true\n}\n","import { send } from './sender'\nimport { LogQueue } from './queue'\nimport { patchOpenAI, patchAnthropic } from './patcher'\n\nexport interface InitOptions {\n  apiKey: string\n  baseUrl?: string\n  debug?: boolean\n}\n\nconst state: {\n  apiKey: string | null\n  baseUrl: string\n  queue: LogQueue | null\n} = {\n  apiKey: null,\n  baseUrl: 'https://api.sovergate.com',\n  queue: null,\n}\n\nexport function init({ apiKey, baseUrl = 'https://api.sovergate.com', debug = false }: InitOptions): void {\n  try {\n    state.apiKey = apiKey\n    state.baseUrl = baseUrl.replace(/\\/$/, '')\n\n    if (debug) {\n      console.debug('[sovergate] init baseUrl=%s', state.baseUrl)\n    }\n\n    state.queue = new LogQueue(payload => send(apiKey, payload, state.baseUrl))\n  } catch (err) {\n    // Never let SDK setup break the host app; logging just stays disabled.\n    state.queue = null\n    warn('init failed, logging disabled', err)\n  }\n}\n\n// Never throws: if instrumentation isn't possible, warn and leave the client untouched.\n// eslint-disable-next-line @typescript-eslint/no-explicit-any\nexport function instrument(client: any): void {\n  if (!state.queue) {\n    warn('instrument() called before init({ apiKey }) — LLM calls will not be logged')\n    return\n  }\n\n  try {\n    const enqueue = state.queue.enqueue.bind(state.queue)\n\n    if (client?.chat?.completions) {\n      patchOpenAI(client, enqueue)\n      return\n    }\n\n    if (client?.messages) {\n      patchAnthropic(client, enqueue)\n      return\n    }\n\n    warn(\n      'unsupported client — LLM calls will not be logged. Pass an OpenAI or Anthropic ' +\n      'client instance, or open an issue at https://github.com/sovergate/sdk-js/issues',\n    )\n  } catch (err) {\n    warn('instrument() failed, LLM calls will not be logged', err)\n  }\n}\n\nfunction warn(message: string, err?: unknown): void {\n  try {\n    console.warn(`[sovergate] ${message}`, ...(err === undefined ? [] : [err]))\n  } catch {\n    // never propagate\n  }\n}\n\nexport function shutdown(): void {\n  state.queue = null\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACAA,IAAM,WAAW;AACjB,IAAM,aAAa;AACnB,IAAM,mBAAmB,oBAAI,IAAI,CAAC,KAAK,KAAK,GAAG,CAAC;AAShD,eAAsB,KACpB,QACA,SACA,UAAU,UACY;AACtB,MAAI;AACF,UAAM,aAAa,IAAI,gBAAgB;AACvC,UAAM,QAAQ,WAAW,MAAM,WAAW,MAAM,GAAG,UAAU;AAE7D,UAAM,WAAW,MAAM,MAAM,GAAG,OAAO,WAAW;AAAA,MAChD,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,eAAe,UAAU,MAAM;AAAA,QAC/B,gBAAgB;AAAA,MAClB;AAAA,MACA,MAAM,KAAK,UAAU,OAAO;AAAA,MAC5B,QAAQ,WAAW;AAAA,IACrB,CAAC;AAED,iBAAa,KAAK;AAClB,QAAI,SAAS,SAAS,IAAK,QAAO;AAClC,QAAI,iBAAiB,IAAI,SAAS,MAAM,KAAK,SAAS,UAAU,IAAK,QAAO;AAI5E,QAAI;AACF,cAAQ,KAAK,8CAA8C,SAAS,MAAM,gBAAgB;AAAA,IAC5F,QAAQ;AAAA,IAER;AACA,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;;;ACxCA,IAAM,YAAY;AAClB,IAAM,iBAAiB,CAAC,GAAG,GAAG,GAAG,GAAG,IAAI,IAAI,EAAE;AAE9C,SAAS,MAAM,IAA2B;AACxC,SAAO,IAAI,QAAQ,aAAW,WAAW,SAAS,EAAE,CAAC;AACvD;AAEO,IAAM,WAAN,MAAe;AAAA,EACH;AAAA,EACA,QAAmB,CAAC;AAAA,EAC7B,WAAW;AAAA,EAEnB,YAAY,QAAgB;AAC1B,SAAK,SAAS;AAAA,EAChB;AAAA,EAEA,QAAQ,SAAwB;AAC9B,QAAI,KAAK,MAAM,UAAU,UAAW;AACpC,SAAK,MAAM,KAAK,OAAO;AACvB,QAAI,CAAC,KAAK,UAAU;AAClB,mBAAa,MAAM,KAAK,KAAK,MAAM,CAAC;AAAA,IACtC;AAAA,EACF;AAAA,EAEA,MAAc,QAAuB;AACnC,SAAK,WAAW;AAChB,QAAI,aAAa;AAEjB,WAAO,KAAK,MAAM,SAAS,GAAG;AAC5B,UAAI,OAAO;AACX,UAAI;AACF,cAAM,UAAU,MAAM,KAAK,OAAO,KAAK,MAAM,CAAC,CAAC;AAE/C,eAAO,YAAY,QAAQ,YAAY,UAAU,YAAY;AAAA,MAC/D,QAAQ;AAAA,MAER;AAEA,UAAI,MAAM;AACR,aAAK,MAAM,MAAM;AACjB,qBAAa;AAAA,MACf,OAAO;AACL,cAAM,WAAW,eAAe,KAAK,IAAI,YAAY,eAAe,SAAS,CAAC,CAAC;AAC/E;AACA,cAAM,MAAM,WAAW,GAAI;AAAA,MAC7B;AAAA,IACF;AAEA,SAAK,WAAW;AAAA,EAClB;AACF;;;ACxCA,IAAM,QAAyC;AAAA,EAC7C,CAAC,SAAa,yDAAsF,gBAAgB;AAAA,EACpH,CAAC,MAAa,gCAAuF,aAAa;AAAA,EAClH,CAAC,QAAa,oCAAuF,eAAe;AAAA;AAAA,EAEpH,CAAC,SAAa,0CAAqF,gBAAgB;AAAA,EACnH,CAAC,OAAa,kFAAoF,cAAc;AAAA,EAChH,CAAC,aAAa,0BAAuF,aAAa;AAAA,EAClH,CAAC,QAAa,gEAAsF,eAAe;AACrH;AAOO,IAAM,eAAN,MAAmB;AAAA,EACP,OAAO,oBAAI,IAAoB;AAAA,EAC/B,OAAO,oBAAI,IAAoB;AAAA,EAEhD,YAAY,MAAc,OAAuB;AAC/C,UAAM,MAAM,GAAG,IAAI,KAAS,MAAM,QAAQ,UAAU,EAAE,EAAE,YAAY,CAAC;AACrE,QAAI,IAAI,KAAK,KAAK,IAAI,GAAG;AACzB,QAAI,MAAM,QAAW;AACnB,WAAK,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK;AACjC,WAAK,KAAK,IAAI,MAAM,CAAC;AACrB,WAAK,KAAK,IAAI,KAAK,CAAC;AAAA,IACtB;AACA,WAAO,IAAI,IAAI,IAAI,CAAC;AAAA,EACtB;AACF;AAEO,SAAS,MAAM,MAAc,UAAwB,IAAI,aAAa,GAAgB;AAC3F,MAAI,CAAC,KAAM,QAAO,EAAE,MAAM,YAAY,CAAC,EAAE;AAEzC,QAAM,aAA0B,CAAC;AAEjC,MAAI,SAAS;AACb,aAAW,CAAC,UAAU,SAAS,eAAe,KAAK,OAAO;AACxD,YAAQ,YAAY;AACpB,aAAS,OAAO,QAAQ,SAAS,WAAS;AACxC,YAAM,cAAc,QAAQ,YAAY,iBAAiB,KAAK;AAC9D,iBAAW,KAAK,EAAE,UAAU,YAAY,CAAC;AACzC,aAAO;AAAA,IACT,CAAC;AAAA,EACH;AAEA,SAAO,EAAE,MAAM,QAAQ,WAAW;AACpC;AAEO,SAAS,cACd,UACA,UAAwB,IAAI,aAAa,GACT;AAChC,QAAM,gBAA6B,CAAC;AACpC,QAAM,WAA4B,CAAC;AAEnC,aAAW,OAAO,UAAU;AAC1B,UAAM,UAAU,IAAI;AACpB,QAAI,OAAO,YAAY,UAAU;AAC/B,YAAM,SAAS,MAAM,SAAS,OAAO;AACrC,eAAS,KAAK,EAAE,GAAG,KAAK,SAAS,OAAO,KAAK,CAAC;AAC9C,oBAAc,KAAK,GAAG,OAAO,UAAU;AAAA,IACzC,WAAW,MAAM,QAAQ,OAAO,GAAG;AACjC,YAAM,YAAY,QAAQ,IAAI,WAAS;AACrC,YAAI,MAAM,SAAS,UAAU,OAAO,MAAM,SAAS,UAAU;AAC3D,gBAAM,SAAS,MAAM,MAAM,MAAM,OAAO;AACxC,wBAAc,KAAK,GAAG,OAAO,UAAU;AACvC,iBAAO,EAAE,GAAG,OAAO,MAAM,OAAO,KAAK;AAAA,QACvC;AACA,eAAO;AAAA,MACT,CAAC;AACD,eAAS,KAAK,EAAE,GAAG,KAAK,SAAS,UAAU,CAAC;AAAA,IAC9C,OAAO;AACL,eAAS,KAAK,GAAG;AAAA,IACnB;AAAA,EACF;AAEA,SAAO,CAAC,UAAU,aAAa;AACjC;;;AC1FA,IAAM,UAAU,uBAAO,IAAI,mBAAmB;AAE9C,SAAS,SAAiB;AACxB,UAAO,oBAAI,KAAK,GAAE,YAAY;AAChC;AAaA,SAAS,QAAQ,QAAa,QAAkC;AAC9D,MAAI,CAAC,UAAU,OAAO,OAAO,SAAS,WAAY,QAAO;AAEzD,MAAI,OAAO;AAEX,QAAM,SAAS,CAAC,SAAoB;AAClC,QAAI,KAAM;AACV,WAAO;AACP,QAAI;AACF,aAAO,IAAI;AAAA,IACb,QAAQ;AAAA,IAER;AAAA,EACF;AAEA,MAAI;AACF,WAAO,IAAI,MAAM,QAAQ;AAAA,MACvB,IAAI,QAAQ,MAAM;AAChB,cAAM,QAAQ,QAAQ,IAAI,QAAQ,MAAM,MAAM;AAC9C,YAAI,OAAO,UAAU,WAAY,QAAO;AAExC,YAAI,SAAS,QAAQ;AAEnB,iBAAO,CAAC,aAAmB,eACzB,MAAM;AAAA,YACJ;AAAA;AAAA,YAEA,CAAC,SAAc;AACb,qBAAO,IAAI;AACX,qBAAO,OAAO,gBAAgB,aAAa,YAAY,IAAI,IAAI;AAAA,YACjE;AAAA,YACA;AAAA,UACF;AAAA,QACJ;AAEA,YAAI,SAAS,gBAAgB;AAC3B,iBAAO,IAAI;AAAA;AAAA,YAET,MAAM,MAAM,QAAQ,IAAI,EAAE,KAAK,CAAC,iBAAsB;AACpD,qBAAO,cAAc,IAAI;AACzB,qBAAO;AAAA,YACT,CAAC;AAAA;AAAA,QACL;AAEA,eAAO,MAAM,KAAK,MAAM;AAAA,MAC1B;AAAA,IACF,CAAC;AAAA,EACH,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAGA,SAAS,SAAS,MAAoB;AACpC,SAAO,MAAM,WAAW;AAC1B;AAGO,SAAS,YAAY,QAAa,SAAwB;AAC/D,QAAM,cAAc,OAAO,KAAK;AAChC,MAAI,YAAY,OAAO,EAAG;AAC1B,QAAM,WAAW,YAAY,OAAO,KAAK,WAAW;AAGpD,cAAY,SAAS,CAAC,SAAc,SAAoB;AACtD,UAAM,YAAY,OAAO;AACzB,UAAM,KAAK,YAAY,IAAI;AAE3B,UAAM,SAAS,SAAS,MAAM,GAAG,IAAI;AAGrC,QAAI,SAAS,IAAI,EAAG,QAAO;AAG3B,WAAO,QAAQ,QAAQ,CAAC,aAAkB;AACxC,YAAM,YAAY,KAAK,MAAM,YAAY,IAAI,IAAI,EAAE;AAEnD,mBAAa,MAAM;AACjB,YAAI;AACF,gBAAM,WAAW,MAAM,YAAY,CAAC;AACpC,gBAAM,QAAQ,MAAM,SAAS;AAC7B,gBAAM,UAAU,IAAI,aAAa;AACjC,gBAAM,CAAC,kBAAkB,gBAAgB,IAAI,cAAc,UAAU,OAAO;AAC5E,gBAAM,SAAS,UAAU,UAAU,CAAC;AACpC,gBAAM,eAAuB,QAAQ,SAAS,WAAW;AACzD,gBAAM,iBAAiB,eAAe,MAAM,cAAc,OAAO,IAAI;AACrE,gBAAM,mBAAmB,gBAAgB,QAAQ;AACjD,gBAAM,aAAa,CAAC,GAAG,kBAAkB,GAAI,gBAAgB,cAAc,CAAC,CAAE;AAC9E,gBAAM,QAAQ,UAAU;AAExB,kBAAQ;AAAA,YACN,OAAO,UAAU,SAAS;AAAA,YAC1B,UAAU;AAAA,YACV,UAAU;AAAA,YACV,eAAe,OAAO,iBAAiB;AAAA,YACvC,mBAAmB,OAAO,qBAAqB;AAAA,YAC/C,YAAY;AAAA,YACZ,WAAW;AAAA,YACX,eAAe,QAAQ,iBAAiB;AAAA,YACxC,gBAAgB,WAAW,IAAI,QAAM,EAAE,UAAU,EAAE,UAAU,aAAa,EAAE,YAAY,EAAE;AAAA,UAC5F,CAAC;AAAA,QACH,QAAQ;AAAA,QAER;AAAA,MACF,CAAC;AAAA,IACH,CAAC;AAAA,EACH;AACA,cAAY,OAAO,IAAI;AACzB;AAGO,SAAS,eAAe,QAAa,SAAwB;AAClE,QAAM,cAAc,OAAO;AAC3B,MAAI,YAAY,OAAO,EAAG;AAC1B,QAAM,WAAW,YAAY,OAAO,KAAK,WAAW;AAGpD,cAAY,SAAS,CAAC,SAAc,SAAoB;AACtD,UAAM,YAAY,OAAO;AACzB,UAAM,KAAK,YAAY,IAAI;AAE3B,UAAM,SAAS,SAAS,MAAM,GAAG,IAAI;AAGrC,QAAI,SAAS,IAAI,EAAG,QAAO;AAG3B,WAAO,QAAQ,QAAQ,CAAC,aAAkB;AACxC,YAAM,YAAY,KAAK,MAAM,YAAY,IAAI,IAAI,EAAE;AAEnD,mBAAa,MAAM;AACjB,YAAI;AACF,gBAAM,WAAW,MAAM,YAAY,CAAC;AACpC,gBAAM,SAAS,MAAM;AACrB,gBAAM,QAAQ,MAAM,SAAS;AAE7B,gBAAM,cAAc,SAChB,CAAC,EAAE,MAAM,UAAU,SAAS,OAAO,GAAG,GAAG,QAAQ,IACjD;AAEJ,gBAAM,UAAU,IAAI,aAAa;AACjC,gBAAM,CAAC,kBAAkB,gBAAgB,IAAI,cAAc,aAAa,OAAO;AAE/E,gBAAM,gBAAwB,UAAU,WAAW,CAAC,GAEjD,OAAO,CAAC,MAAW,EAAE,SAAS,MAAM,EAEpC,IAAI,CAAC,MAAW,EAAE,IAAc,EAChC,KAAK,EAAE;AAEV,gBAAM,iBAAiB,eAAe,MAAM,cAAc,OAAO,IAAI;AACrE,gBAAM,mBAAmB,gBAAgB,QAAQ;AACjD,gBAAM,aAAa,CAAC,GAAG,kBAAkB,GAAI,gBAAgB,cAAc,CAAC,CAAE;AAC9E,gBAAM,QAAQ,UAAU;AAExB,kBAAQ;AAAA,YACN,OAAO,UAAU,SAAS;AAAA,YAC1B,UAAU;AAAA,YACV,UAAU;AAAA,YACV,eAAe,OAAO,gBAAgB;AAAA,YACtC,mBAAmB,OAAO,iBAAiB;AAAA,YAC3C,YAAY;AAAA,YACZ,WAAW;AAAA,YACX,eAAe,UAAU,eAAe;AAAA,YACxC,gBAAgB,WAAW,IAAI,QAAM,EAAE,UAAU,EAAE,UAAU,aAAa,EAAE,YAAY,EAAE;AAAA,UAC5F,CAAC;AAAA,QACH,QAAQ;AAAA,QAER;AAAA,MACF,CAAC;AAAA,IACH,CAAC;AAAA,EACH;AACA,cAAY,OAAO,IAAI;AACzB;;;ACxLA,IAAM,QAIF;AAAA,EACF,QAAQ;AAAA,EACR,SAAS;AAAA,EACT,OAAO;AACT;AAEO,SAAS,KAAK,EAAE,QAAQ,UAAU,6BAA6B,QAAQ,MAAM,GAAsB;AACxG,MAAI;AACF,UAAM,SAAS;AACf,UAAM,UAAU,QAAQ,QAAQ,OAAO,EAAE;AAEzC,QAAI,OAAO;AACT,cAAQ,MAAM,+BAA+B,MAAM,OAAO;AAAA,IAC5D;AAEA,UAAM,QAAQ,IAAI,SAAS,aAAW,KAAK,QAAQ,SAAS,MAAM,OAAO,CAAC;AAAA,EAC5E,SAAS,KAAK;AAEZ,UAAM,QAAQ;AACd,SAAK,iCAAiC,GAAG;AAAA,EAC3C;AACF;AAIO,SAAS,WAAW,QAAmB;AAC5C,MAAI,CAAC,MAAM,OAAO;AAChB,SAAK,iFAA4E;AACjF;AAAA,EACF;AAEA,MAAI;AACF,UAAM,UAAU,MAAM,MAAM,QAAQ,KAAK,MAAM,KAAK;AAEpD,QAAI,QAAQ,MAAM,aAAa;AAC7B,kBAAY,QAAQ,OAAO;AAC3B;AAAA,IACF;AAEA,QAAI,QAAQ,UAAU;AACpB,qBAAe,QAAQ,OAAO;AAC9B;AAAA,IACF;AAEA;AAAA,MACE;AAAA,IAEF;AAAA,EACF,SAAS,KAAK;AACZ,SAAK,qDAAqD,GAAG;AAAA,EAC/D;AACF;AAEA,SAAS,KAAK,SAAiB,KAAqB;AAClD,MAAI;AACF,YAAQ,KAAK,eAAe,OAAO,IAAI,GAAI,QAAQ,SAAY,CAAC,IAAI,CAAC,GAAG,CAAE;AAAA,EAC5E,QAAQ;AAAA,EAER;AACF;AAEO,SAAS,WAAiB;AAC/B,QAAM,QAAQ;AAChB;","names":[]}

package/dist/index.mjs

@@ -0,0 +1,329 @@
+// src/sender.ts
+var BASE_URL = "https://api.sovergate.com";
+var TIMEOUT_MS = 2e3;
+var RETRYABLE_STATUS = /* @__PURE__ */ new Set([408, 425, 429]);
+async function send(apiKey, payload, baseUrl = BASE_URL) {
+  try {
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), TIMEOUT_MS);
+    const response = await fetch(`${baseUrl}/ingest`, {
+      method: "POST",
+      headers: {
+        Authorization: `Bearer ${apiKey}`,
+        "Content-Type": "application/json"
+      },
+      body: JSON.stringify(payload),
+      signal: controller.signal
+    });
+    clearTimeout(timer);
+    if (response.status < 400) return "sent";
+    if (RETRYABLE_STATUS.has(response.status) || response.status >= 500) return "retry";
+    try {
+      console.warn(`[sovergate] ingest rejected a record (HTTP ${response.status}); dropping it`);
+    } catch {
+    }
+    return "drop";
+  } catch {
+    return "retry";
+  }
+}
+
+// src/queue.ts
+var MAX_QUEUE = 1e4;
+var RETRY_DELAYS_S = [1, 2, 4, 8, 16, 30, 60];
+function sleep(ms) {
+  return new Promise((resolve) => setTimeout(resolve, ms));
+}
+var LogQueue = class {
+  sendFn;
+  items = [];
+  draining = false;
+  constructor(sendFn) {
+    this.sendFn = sendFn;
+  }
+  enqueue(payload) {
+    if (this.items.length >= MAX_QUEUE) return;
+    this.items.push(payload);
+    if (!this.draining) {
+      setImmediate(() => void this.drain());
+    }
+  }
+  async drain() {
+    this.draining = true;
+    let retryIndex = 0;
+    while (this.items.length > 0) {
+      let done = false;
+      try {
+        const outcome = await this.sendFn(this.items[0]);
+        done = outcome === true || outcome === "sent" || outcome === "drop";
+      } catch {
+      }
+      if (done) {
+        this.items.shift();
+        retryIndex = 0;
+      } else {
+        const delaySec = RETRY_DELAYS_S[Math.min(retryIndex, RETRY_DELAYS_S.length - 1)];
+        retryIndex++;
+        await sleep(delaySec * 1e3);
+      }
+    }
+    this.draining = false;
+  }
+};
+
+// src/scrubber.ts
+var RULES = [
+  ["email", /\b[A-Za-z0-9._%+\-]+@[A-Za-z0-9.\-]+\.[A-Za-z]{2,}\b/g, "EMAIL_REDACTED"],
+  ["ip", /\b(?:\d{1,3}\.){3}\d{1,3}\b/g, "IP_REDACTED"],
+  ["iban", /\b[A-Z]{2}\d{2}[A-Z0-9]{4,30}\b/g, "IBAN_REDACTED"],
+  // (?<![\w+]) instead of \b so a leading "+" is part of the match, not left behind
+  ["phone", /(?<![\w+])\+?\d[\d\s\-(). ]{5,14}\d\b/g, "PHONE_REDACTED"],
+  ["dob", /\b(?:\d{1,2}[\/\-.]\d{1,2}[\/\-.]\d{2,4}|\d{4}[\/\-.]\d{1,2}[\/\-.]\d{1,2})\b/g, "DOB_REDACTED"],
+  ["id_number", /\b[A-Z]{1,3}\d{6,9}\b/g, "ID_REDACTED"],
+  ["name", /\b(?:Mr|Mrs|Ms|Dr|Prof)\.?\s+[A-Z][a-z]+(?: [A-Z][a-z]+)*\b/g, "NAME_REDACTED"]
+];
+var ScrubContext = class {
+  seen = /* @__PURE__ */ new Map();
+  next = /* @__PURE__ */ new Map();
+  placeholder(base, value) {
+    const key = `${base}\0${value.replace(/[\s-]/g, "").toLowerCase()}`;
+    let n = this.seen.get(key);
+    if (n === void 0) {
+      n = (this.next.get(base) ?? 0) + 1;
+      this.next.set(base, n);
+      this.seen.set(key, n);
+    }
+    return `[${base}_${n}]`;
+  }
+};
+function scrub(text, context = new ScrubContext()) {
+  if (!text) return { text, detections: [] };
+  const detections = [];
+  let result = text;
+  for (const [category, pattern, basePlaceholder] of RULES) {
+    pattern.lastIndex = 0;
+    result = result.replace(pattern, (match) => {
+      const placeholder = context.placeholder(basePlaceholder, match);
+      detections.push({ category, placeholder });
+      return placeholder;
+    });
+  }
+  return { text: result, detections };
+}
+function scrubMessages(messages, context = new ScrubContext()) {
+  const allDetections = [];
+  const scrubbed = [];
+  for (const msg of messages) {
+    const content = msg.content;
+    if (typeof content === "string") {
+      const result = scrub(content, context);
+      scrubbed.push({ ...msg, content: result.text });
+      allDetections.push(...result.detections);
+    } else if (Array.isArray(content)) {
+      const newBlocks = content.map((block) => {
+        if (block.type === "text" && typeof block.text === "string") {
+          const result = scrub(block.text, context);
+          allDetections.push(...result.detections);
+          return { ...block, text: result.text };
+        }
+        return block;
+      });
+      scrubbed.push({ ...msg, content: newBlocks });
+    } else {
+      scrubbed.push(msg);
+    }
+  }
+  return [scrubbed, allDetections];
+}
+
+// src/patcher.ts
+var PATCHED = /* @__PURE__ */ Symbol.for("sovergate.patched");
+function utcnow() {
+  return (/* @__PURE__ */ new Date()).toISOString();
+}
+function observe(result, onData) {
+  if (!result || typeof result.then !== "function") return result;
+  let seen = false;
+  const notify = (data) => {
+    if (seen) return;
+    seen = true;
+    try {
+      onData(data);
+    } catch {
+    }
+  };
+  try {
+    return new Proxy(result, {
+      get(target, prop) {
+        const value = Reflect.get(target, prop, target);
+        if (typeof value !== "function") return value;
+        if (prop === "then") {
+          return (onFulfilled, onRejected) => value.call(
+            target,
+            // eslint-disable-next-line @typescript-eslint/no-explicit-any
+            (data) => {
+              notify(data);
+              return typeof onFulfilled === "function" ? onFulfilled(data) : data;
+            },
+            onRejected
+          );
+        }
+        if (prop === "withResponse") {
+          return (...args) => (
+            // eslint-disable-next-line @typescript-eslint/no-explicit-any
+            value.apply(target, args).then((withResponse) => {
+              notify(withResponse?.data);
+              return withResponse;
+            })
+          );
+        }
+        return value.bind(target);
+      }
+    });
+  } catch {
+    return result;
+  }
+}
+function isStream(opts) {
+  return opts?.stream === true;
+}
+function patchOpenAI(client, enqueue) {
+  const completions = client.chat.completions;
+  if (completions[PATCHED]) return;
+  const original = completions.create.bind(completions);
+  completions.create = (opts, ...rest) => {
+    const requestAt = utcnow();
+    const t0 = performance.now();
+    const result = original(opts, ...rest);
+    if (isStream(opts)) return result;
+    return observe(result, (response) => {
+      const latencyMs = Math.round(performance.now() - t0);
+      setImmediate(() => {
+        try {
+          const messages = opts?.messages ?? [];
+          const model = opts?.model ?? "";
+          const context = new ScrubContext();
+          const [scrubbedMessages, promptDetections] = scrubMessages(messages, context);
+          const choice = response?.choices?.[0];
+          const responseText = choice?.message?.content ?? "";
+          const scrubbedResult = responseText ? scrub(responseText, context) : null;
+          const scrubbedResponse = scrubbedResult?.text ?? "";
+          const detections = [...promptDetections, ...scrubbedResult?.detections ?? []];
+          const usage = response?.usage;
+          enqueue({
+            model: response?.model ?? model,
+            messages: scrubbedMessages,
+            response: scrubbedResponse,
+            prompt_tokens: usage?.prompt_tokens ?? 0,
+            completion_tokens: usage?.completion_tokens ?? 0,
+            latency_ms: latencyMs,
+            timestamp: requestAt,
+            finish_reason: choice?.finish_reason ?? null,
+            pii_detections: detections.map((d) => ({ category: d.category, placeholder: d.placeholder }))
+          });
+        } catch {
+        }
+      });
+    });
+  };
+  completions[PATCHED] = true;
+}
+function patchAnthropic(client, enqueue) {
+  const messagesApi = client.messages;
+  if (messagesApi[PATCHED]) return;
+  const original = messagesApi.create.bind(messagesApi);
+  messagesApi.create = (opts, ...rest) => {
+    const requestAt = utcnow();
+    const t0 = performance.now();
+    const result = original(opts, ...rest);
+    if (isStream(opts)) return result;
+    return observe(result, (response) => {
+      const latencyMs = Math.round(performance.now() - t0);
+      setImmediate(() => {
+        try {
+          const messages = opts?.messages ?? [];
+          const system = opts?.system;
+          const model = opts?.model ?? "";
+          const allMessages = system ? [{ role: "system", content: system }, ...messages] : messages;
+          const context = new ScrubContext();
+          const [scrubbedMessages, promptDetections] = scrubMessages(allMessages, context);
+          const responseText = (response?.content ?? []).filter((b) => b.type === "text").map((b) => b.text).join("");
+          const scrubbedResult = responseText ? scrub(responseText, context) : null;
+          const scrubbedResponse = scrubbedResult?.text ?? "";
+          const detections = [...promptDetections, ...scrubbedResult?.detections ?? []];
+          const usage = response?.usage;
+          enqueue({
+            model: response?.model ?? model,
+            messages: scrubbedMessages,
+            response: scrubbedResponse,
+            prompt_tokens: usage?.input_tokens ?? 0,
+            completion_tokens: usage?.output_tokens ?? 0,
+            latency_ms: latencyMs,
+            timestamp: requestAt,
+            finish_reason: response?.stop_reason ?? null,
+            pii_detections: detections.map((d) => ({ category: d.category, placeholder: d.placeholder }))
+          });
+        } catch {
+        }
+      });
+    });
+  };
+  messagesApi[PATCHED] = true;
+}
+
+// src/client.ts
+var state = {
+  apiKey: null,
+  baseUrl: "https://api.sovergate.com",
+  queue: null
+};
+function init({ apiKey, baseUrl = "https://api.sovergate.com", debug = false }) {
+  try {
+    state.apiKey = apiKey;
+    state.baseUrl = baseUrl.replace(/\/$/, "");
+    if (debug) {
+      console.debug("[sovergate] init baseUrl=%s", state.baseUrl);
+    }
+    state.queue = new LogQueue((payload) => send(apiKey, payload, state.baseUrl));
+  } catch (err) {
+    state.queue = null;
+    warn("init failed, logging disabled", err);
+  }
+}
+function instrument(client) {
+  if (!state.queue) {
+    warn("instrument() called before init({ apiKey }) \u2014 LLM calls will not be logged");
+    return;
+  }
+  try {
+    const enqueue = state.queue.enqueue.bind(state.queue);
+    if (client?.chat?.completions) {
+      patchOpenAI(client, enqueue);
+      return;
+    }
+    if (client?.messages) {
+      patchAnthropic(client, enqueue);
+      return;
+    }
+    warn(
+      "unsupported client \u2014 LLM calls will not be logged. Pass an OpenAI or Anthropic client instance, or open an issue at https://github.com/sovergate/sdk-js/issues"
+    );
+  } catch (err) {
+    warn("instrument() failed, LLM calls will not be logged", err);
+  }
+}
+function warn(message, err) {
+  try {
+    console.warn(`[sovergate] ${message}`, ...err === void 0 ? [] : [err]);
+  } catch {
+  }
+}
+function shutdown() {
+  state.queue = null;
+}
+export {
+  init,
+  instrument,
+  shutdown
+};
+//# sourceMappingURL=index.mjs.map

package/dist/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/sender.ts","../src/queue.ts","../src/scrubber.ts","../src/patcher.ts","../src/client.ts"],"sourcesContent":["const BASE_URL = 'https://api.sovergate.com'\nconst TIMEOUT_MS = 2000\nconst RETRYABLE_STATUS = new Set([408, 425, 429])\n\n/**\n * sent:  accepted by the server\n * retry: temporary failure, keep the record and try again later\n * drop:  permanently rejected, retrying the same record can never succeed\n */\nexport type SendOutcome = 'sent' | 'retry' | 'drop'\n\nexport async function send(\n  apiKey: string,\n  payload: Record<string, unknown>,\n  baseUrl = BASE_URL,\n): Promise<SendOutcome> {\n  try {\n    const controller = new AbortController()\n    const timer = setTimeout(() => controller.abort(), TIMEOUT_MS)\n\n    const response = await fetch(`${baseUrl}/ingest`, {\n      method: 'POST',\n      headers: {\n        Authorization: `Bearer ${apiKey}`,\n        'Content-Type': 'application/json',\n      },\n      body: JSON.stringify(payload),\n      signal: controller.signal,\n    })\n\n    clearTimeout(timer)\n    if (response.status < 400) return 'sent'\n    if (RETRYABLE_STATUS.has(response.status) || response.status >= 500) return 'retry'\n\n    // 400 (invalid record), 401/403 (bad or revoked key), 413 (too large)...\n    // Retrying would block every later record behind this one.\n    try {\n      console.warn(`[sovergate] ingest rejected a record (HTTP ${response.status}); dropping it`)\n    } catch {\n      // never propagate\n    }\n    return 'drop'\n  } catch {\n    return 'retry'\n  }\n}\n","import type { SendOutcome } from './sender'\n\ntype Payload = Record<string, unknown>\ntype SendFn = (payload: Payload) => Promise<SendOutcome | boolean>\n\nconst MAX_QUEUE = 10_000\nconst RETRY_DELAYS_S = [1, 2, 4, 8, 16, 30, 60]\n\nfunction sleep(ms: number): Promise<void> {\n  return new Promise(resolve => setTimeout(resolve, ms))\n}\n\nexport class LogQueue {\n  private readonly sendFn: SendFn\n  private readonly items: Payload[] = []\n  private draining = false\n\n  constructor(sendFn: SendFn) {\n    this.sendFn = sendFn\n  }\n\n  enqueue(payload: Payload): void {\n    if (this.items.length >= MAX_QUEUE) return\n    this.items.push(payload)\n    if (!this.draining) {\n      setImmediate(() => void this.drain())\n    }\n  }\n\n  private async drain(): Promise<void> {\n    this.draining = true\n    let retryIndex = 0\n\n    while (this.items.length > 0) {\n      let done = false\n      try {\n        const outcome = await this.sendFn(this.items[0])\n        // 'sent' and 'drop' both finish this record; true is accepted as 'sent'.\n        done = outcome === true || outcome === 'sent' || outcome === 'drop'\n      } catch {\n        // never propagate\n      }\n\n      if (done) {\n        this.items.shift()\n        retryIndex = 0\n      } else {\n        const delaySec = RETRY_DELAYS_S[Math.min(retryIndex, RETRY_DELAYS_S.length - 1)]\n        retryIndex++\n        await sleep(delaySec * 1000)\n      }\n    }\n\n    this.draining = false\n  }\n}\n","export interface Detection {\n  category: string\n  placeholder: string\n}\n\nexport interface ScrubResult {\n  text: string\n  detections: Detection[]\n}\n\ntype ContentBlock = { type: string; text?: string } & Record<string, unknown>\nexport type OpenAIMessage = { role: string; content: string | ContentBlock[] } & Record<string, unknown>\n\n// Each rule: [category, regex (must have g flag), placeholder base]\n// Order matters — IP before phone to avoid dotted-quad false matches.\nconst RULES: Array<[string, RegExp, string]> = [\n  ['email',     /\\b[A-Za-z0-9._%+\\-]+@[A-Za-z0-9.\\-]+\\.[A-Za-z]{2,}\\b/g,                              'EMAIL_REDACTED'],\n  ['ip',        /\\b(?:\\d{1,3}\\.){3}\\d{1,3}\\b/g,                                                        'IP_REDACTED'],\n  ['iban',      /\\b[A-Z]{2}\\d{2}[A-Z0-9]{4,30}\\b/g,                                                    'IBAN_REDACTED'],\n  // (?<![\\w+]) instead of \\b so a leading \"+\" is part of the match, not left behind\n  ['phone',     /(?<![\\w+])\\+?\\d[\\d\\s\\-(). ]{5,14}\\d\\b/g,                                            'PHONE_REDACTED'],\n  ['dob',       /\\b(?:\\d{1,2}[\\/\\-.]\\d{1,2}[\\/\\-.]\\d{2,4}|\\d{4}[\\/\\-.]\\d{1,2}[\\/\\-.]\\d{1,2})\\b/g,   'DOB_REDACTED'],\n  ['id_number', /\\b[A-Z]{1,3}\\d{6,9}\\b/g,                                                              'ID_REDACTED'],\n  ['name',      /\\b(?:Mr|Mrs|Ms|Dr|Prof)\\.?\\s+[A-Z][a-z]+(?: [A-Z][a-z]+)*\\b/g,                       'NAME_REDACTED'],\n]\n\n/**\n * Numbers placeholders across one whole record (all messages and the response),\n * so the same value always gets the same placeholder and two different values\n * never share one.\n */\nexport class ScrubContext {\n  private readonly seen = new Map<string, number>()\n  private readonly next = new Map<string, number>()\n\n  placeholder(base: string, value: string): string {\n    const key = `${base}\\u0000${value.replace(/[\\s-]/g, '').toLowerCase()}`\n    let n = this.seen.get(key)\n    if (n === undefined) {\n      n = (this.next.get(base) ?? 0) + 1\n      this.next.set(base, n)\n      this.seen.set(key, n)\n    }\n    return `[${base}_${n}]`\n  }\n}\n\nexport function scrub(text: string, context: ScrubContext = new ScrubContext()): ScrubResult {\n  if (!text) return { text, detections: [] }\n\n  const detections: Detection[] = []\n\n  let result = text\n  for (const [category, pattern, basePlaceholder] of RULES) {\n    pattern.lastIndex = 0\n    result = result.replace(pattern, match => {\n      const placeholder = context.placeholder(basePlaceholder, match)\n      detections.push({ category, placeholder })\n      return placeholder\n    })\n  }\n\n  return { text: result, detections }\n}\n\nexport function scrubMessages(\n  messages: OpenAIMessage[],\n  context: ScrubContext = new ScrubContext(),\n): [OpenAIMessage[], Detection[]] {\n  const allDetections: Detection[] = []\n  const scrubbed: OpenAIMessage[] = []\n\n  for (const msg of messages) {\n    const content = msg.content\n    if (typeof content === 'string') {\n      const result = scrub(content, context)\n      scrubbed.push({ ...msg, content: result.text })\n      allDetections.push(...result.detections)\n    } else if (Array.isArray(content)) {\n      const newBlocks = content.map(block => {\n        if (block.type === 'text' && typeof block.text === 'string') {\n          const result = scrub(block.text, context)\n          allDetections.push(...result.detections)\n          return { ...block, text: result.text }\n        }\n        return block\n      })\n      scrubbed.push({ ...msg, content: newBlocks })\n    } else {\n      scrubbed.push(msg)\n    }\n  }\n\n  return [scrubbed, allDetections]\n}\n","import { ScrubContext, scrub, scrubMessages } from './scrubber'\n\ntype Enqueue = (payload: Record<string, unknown>) => void\n\nconst PATCHED = Symbol.for('sovergate.patched')\n\nfunction utcnow(): string {\n  return new Date().toISOString()\n}\n\n/**\n * Returns the provider's own result unchanged in behaviour, but notifies `onData`\n * the first time the app reads the parsed result (await / .then / .withResponse).\n *\n * The OpenAI and Anthropic SDKs return an APIPromise with extra methods\n * (.withResponse(), .asResponse()) and parse the body lazily. Wrapping create()\n * in an async function would drop those methods, and reading the result eagerly\n * would consume the body before an app calling .asResponse() can. A Proxy keeps\n * the original object, its prototype and its laziness intact.\n */\n// eslint-disable-next-line @typescript-eslint/no-explicit-any\nfunction observe(result: any, onData: (data: any) => void): any {\n  if (!result || typeof result.then !== 'function') return result\n\n  let seen = false\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any\n  const notify = (data: any): void => {\n    if (seen) return\n    seen = true\n    try {\n      onData(data)\n    } catch {\n      // never let logging errors surface to the caller\n    }\n  }\n\n  try {\n    return new Proxy(result, {\n      get(target, prop) {\n        const value = Reflect.get(target, prop, target)\n        if (typeof value !== 'function') return value\n\n        if (prop === 'then') {\n          // eslint-disable-next-line @typescript-eslint/no-explicit-any\n          return (onFulfilled?: any, onRejected?: any) =>\n            value.call(\n              target,\n              // eslint-disable-next-line @typescript-eslint/no-explicit-any\n              (data: any) => {\n                notify(data)\n                return typeof onFulfilled === 'function' ? onFulfilled(data) : data\n              },\n              onRejected,\n            )\n        }\n\n        if (prop === 'withResponse') {\n          return (...args: unknown[]) =>\n            // eslint-disable-next-line @typescript-eslint/no-explicit-any\n            value.apply(target, args).then((withResponse: any) => {\n              notify(withResponse?.data)\n              return withResponse\n            })\n        }\n\n        return value.bind(target)\n      },\n    })\n  } catch {\n    return result\n  }\n}\n\n// eslint-disable-next-line @typescript-eslint/no-explicit-any\nfunction isStream(opts: any): boolean {\n  return opts?.stream === true\n}\n\n// eslint-disable-next-line @typescript-eslint/no-explicit-any\nexport function patchOpenAI(client: any, enqueue: Enqueue): void {\n  const completions = client.chat.completions\n  if (completions[PATCHED]) return\n  const original = completions.create.bind(completions)\n\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any\n  completions.create = (opts: any, ...rest: unknown[]) => {\n    const requestAt = utcnow()\n    const t0 = performance.now()\n\n    const result = original(opts, ...rest)\n\n    // Streams can only be read once and belong to the app; they are not logged yet.\n    if (isStream(opts)) return result\n\n    // eslint-disable-next-line @typescript-eslint/no-explicit-any\n    return observe(result, (response: any) => {\n      const latencyMs = Math.round(performance.now() - t0)\n\n      setImmediate(() => {\n        try {\n          const messages = opts?.messages ?? []\n          const model = opts?.model ?? ''\n          const context = new ScrubContext()\n          const [scrubbedMessages, promptDetections] = scrubMessages(messages, context)\n          const choice = response?.choices?.[0]\n          const responseText: string = choice?.message?.content ?? ''\n          const scrubbedResult = responseText ? scrub(responseText, context) : null\n          const scrubbedResponse = scrubbedResult?.text ?? ''\n          const detections = [...promptDetections, ...(scrubbedResult?.detections ?? [])]\n          const usage = response?.usage\n\n          enqueue({\n            model: response?.model ?? model,\n            messages: scrubbedMessages,\n            response: scrubbedResponse,\n            prompt_tokens: usage?.prompt_tokens ?? 0,\n            completion_tokens: usage?.completion_tokens ?? 0,\n            latency_ms: latencyMs,\n            timestamp: requestAt,\n            finish_reason: choice?.finish_reason ?? null,\n            pii_detections: detections.map(d => ({ category: d.category, placeholder: d.placeholder })),\n          })\n        } catch {\n          // never let logging errors surface to the caller\n        }\n      })\n    })\n  }\n  completions[PATCHED] = true\n}\n\n// eslint-disable-next-line @typescript-eslint/no-explicit-any\nexport function patchAnthropic(client: any, enqueue: Enqueue): void {\n  const messagesApi = client.messages\n  if (messagesApi[PATCHED]) return\n  const original = messagesApi.create.bind(messagesApi)\n\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any\n  messagesApi.create = (opts: any, ...rest: unknown[]) => {\n    const requestAt = utcnow()\n    const t0 = performance.now()\n\n    const result = original(opts, ...rest)\n\n    // Streams can only be read once and belong to the app; they are not logged yet.\n    if (isStream(opts)) return result\n\n    // eslint-disable-next-line @typescript-eslint/no-explicit-any\n    return observe(result, (response: any) => {\n      const latencyMs = Math.round(performance.now() - t0)\n\n      setImmediate(() => {\n        try {\n          const messages = opts?.messages ?? []\n          const system = opts?.system\n          const model = opts?.model ?? ''\n\n          const allMessages = system\n            ? [{ role: 'system', content: system }, ...messages]\n            : messages\n\n          const context = new ScrubContext()\n          const [scrubbedMessages, promptDetections] = scrubMessages(allMessages, context)\n\n          const responseText: string = (response?.content ?? [])\n            // eslint-disable-next-line @typescript-eslint/no-explicit-any\n            .filter((b: any) => b.type === 'text')\n            // eslint-disable-next-line @typescript-eslint/no-explicit-any\n            .map((b: any) => b.text as string)\n            .join('')\n\n          const scrubbedResult = responseText ? scrub(responseText, context) : null\n          const scrubbedResponse = scrubbedResult?.text ?? ''\n          const detections = [...promptDetections, ...(scrubbedResult?.detections ?? [])]\n          const usage = response?.usage\n\n          enqueue({\n            model: response?.model ?? model,\n            messages: scrubbedMessages,\n            response: scrubbedResponse,\n            prompt_tokens: usage?.input_tokens ?? 0,\n            completion_tokens: usage?.output_tokens ?? 0,\n            latency_ms: latencyMs,\n            timestamp: requestAt,\n            finish_reason: response?.stop_reason ?? null,\n            pii_detections: detections.map(d => ({ category: d.category, placeholder: d.placeholder })),\n          })\n        } catch {\n          // never let logging errors surface to the caller\n        }\n      })\n    })\n  }\n  messagesApi[PATCHED] = true\n}\n","import { send } from './sender'\nimport { LogQueue } from './queue'\nimport { patchOpenAI, patchAnthropic } from './patcher'\n\nexport interface InitOptions {\n  apiKey: string\n  baseUrl?: string\n  debug?: boolean\n}\n\nconst state: {\n  apiKey: string | null\n  baseUrl: string\n  queue: LogQueue | null\n} = {\n  apiKey: null,\n  baseUrl: 'https://api.sovergate.com',\n  queue: null,\n}\n\nexport function init({ apiKey, baseUrl = 'https://api.sovergate.com', debug = false }: InitOptions): void {\n  try {\n    state.apiKey = apiKey\n    state.baseUrl = baseUrl.replace(/\\/$/, '')\n\n    if (debug) {\n      console.debug('[sovergate] init baseUrl=%s', state.baseUrl)\n    }\n\n    state.queue = new LogQueue(payload => send(apiKey, payload, state.baseUrl))\n  } catch (err) {\n    // Never let SDK setup break the host app; logging just stays disabled.\n    state.queue = null\n    warn('init failed, logging disabled', err)\n  }\n}\n\n// Never throws: if instrumentation isn't possible, warn and leave the client untouched.\n// eslint-disable-next-line @typescript-eslint/no-explicit-any\nexport function instrument(client: any): void {\n  if (!state.queue) {\n    warn('instrument() called before init({ apiKey }) — LLM calls will not be logged')\n    return\n  }\n\n  try {\n    const enqueue = state.queue.enqueue.bind(state.queue)\n\n    if (client?.chat?.completions) {\n      patchOpenAI(client, enqueue)\n      return\n    }\n\n    if (client?.messages) {\n      patchAnthropic(client, enqueue)\n      return\n    }\n\n    warn(\n      'unsupported client — LLM calls will not be logged. Pass an OpenAI or Anthropic ' +\n      'client instance, or open an issue at https://github.com/sovergate/sdk-js/issues',\n    )\n  } catch (err) {\n    warn('instrument() failed, LLM calls will not be logged', err)\n  }\n}\n\nfunction warn(message: string, err?: unknown): void {\n  try {\n    console.warn(`[sovergate] ${message}`, ...(err === undefined ? [] : [err]))\n  } catch {\n    // never propagate\n  }\n}\n\nexport function shutdown(): void {\n  state.queue = null\n}\n"],"mappings":";AAAA,IAAM,WAAW;AACjB,IAAM,aAAa;AACnB,IAAM,mBAAmB,oBAAI,IAAI,CAAC,KAAK,KAAK,GAAG,CAAC;AAShD,eAAsB,KACpB,QACA,SACA,UAAU,UACY;AACtB,MAAI;AACF,UAAM,aAAa,IAAI,gBAAgB;AACvC,UAAM,QAAQ,WAAW,MAAM,WAAW,MAAM,GAAG,UAAU;AAE7D,UAAM,WAAW,MAAM,MAAM,GAAG,OAAO,WAAW;AAAA,MAChD,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,eAAe,UAAU,MAAM;AAAA,QAC/B,gBAAgB;AAAA,MAClB;AAAA,MACA,MAAM,KAAK,UAAU,OAAO;AAAA,MAC5B,QAAQ,WAAW;AAAA,IACrB,CAAC;AAED,iBAAa,KAAK;AAClB,QAAI,SAAS,SAAS,IAAK,QAAO;AAClC,QAAI,iBAAiB,IAAI,SAAS,MAAM,KAAK,SAAS,UAAU,IAAK,QAAO;AAI5E,QAAI;AACF,cAAQ,KAAK,8CAA8C,SAAS,MAAM,gBAAgB;AAAA,IAC5F,QAAQ;AAAA,IAER;AACA,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;;;ACxCA,IAAM,YAAY;AAClB,IAAM,iBAAiB,CAAC,GAAG,GAAG,GAAG,GAAG,IAAI,IAAI,EAAE;AAE9C,SAAS,MAAM,IAA2B;AACxC,SAAO,IAAI,QAAQ,aAAW,WAAW,SAAS,EAAE,CAAC;AACvD;AAEO,IAAM,WAAN,MAAe;AAAA,EACH;AAAA,EACA,QAAmB,CAAC;AAAA,EAC7B,WAAW;AAAA,EAEnB,YAAY,QAAgB;AAC1B,SAAK,SAAS;AAAA,EAChB;AAAA,EAEA,QAAQ,SAAwB;AAC9B,QAAI,KAAK,MAAM,UAAU,UAAW;AACpC,SAAK,MAAM,KAAK,OAAO;AACvB,QAAI,CAAC,KAAK,UAAU;AAClB,mBAAa,MAAM,KAAK,KAAK,MAAM,CAAC;AAAA,IACtC;AAAA,EACF;AAAA,EAEA,MAAc,QAAuB;AACnC,SAAK,WAAW;AAChB,QAAI,aAAa;AAEjB,WAAO,KAAK,MAAM,SAAS,GAAG;AAC5B,UAAI,OAAO;AACX,UAAI;AACF,cAAM,UAAU,MAAM,KAAK,OAAO,KAAK,MAAM,CAAC,CAAC;AAE/C,eAAO,YAAY,QAAQ,YAAY,UAAU,YAAY;AAAA,MAC/D,QAAQ;AAAA,MAER;AAEA,UAAI,MAAM;AACR,aAAK,MAAM,MAAM;AACjB,qBAAa;AAAA,MACf,OAAO;AACL,cAAM,WAAW,eAAe,KAAK,IAAI,YAAY,eAAe,SAAS,CAAC,CAAC;AAC/E;AACA,cAAM,MAAM,WAAW,GAAI;AAAA,MAC7B;AAAA,IACF;AAEA,SAAK,WAAW;AAAA,EAClB;AACF;;;ACxCA,IAAM,QAAyC;AAAA,EAC7C,CAAC,SAAa,yDAAsF,gBAAgB;AAAA,EACpH,CAAC,MAAa,gCAAuF,aAAa;AAAA,EAClH,CAAC,QAAa,oCAAuF,eAAe;AAAA;AAAA,EAEpH,CAAC,SAAa,0CAAqF,gBAAgB;AAAA,EACnH,CAAC,OAAa,kFAAoF,cAAc;AAAA,EAChH,CAAC,aAAa,0BAAuF,aAAa;AAAA,EAClH,CAAC,QAAa,gEAAsF,eAAe;AACrH;AAOO,IAAM,eAAN,MAAmB;AAAA,EACP,OAAO,oBAAI,IAAoB;AAAA,EAC/B,OAAO,oBAAI,IAAoB;AAAA,EAEhD,YAAY,MAAc,OAAuB;AAC/C,UAAM,MAAM,GAAG,IAAI,KAAS,MAAM,QAAQ,UAAU,EAAE,EAAE,YAAY,CAAC;AACrE,QAAI,IAAI,KAAK,KAAK,IAAI,GAAG;AACzB,QAAI,MAAM,QAAW;AACnB,WAAK,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK;AACjC,WAAK,KAAK,IAAI,MAAM,CAAC;AACrB,WAAK,KAAK,IAAI,KAAK,CAAC;AAAA,IACtB;AACA,WAAO,IAAI,IAAI,IAAI,CAAC;AAAA,EACtB;AACF;AAEO,SAAS,MAAM,MAAc,UAAwB,IAAI,aAAa,GAAgB;AAC3F,MAAI,CAAC,KAAM,QAAO,EAAE,MAAM,YAAY,CAAC,EAAE;AAEzC,QAAM,aAA0B,CAAC;AAEjC,MAAI,SAAS;AACb,aAAW,CAAC,UAAU,SAAS,eAAe,KAAK,OAAO;AACxD,YAAQ,YAAY;AACpB,aAAS,OAAO,QAAQ,SAAS,WAAS;AACxC,YAAM,cAAc,QAAQ,YAAY,iBAAiB,KAAK;AAC9D,iBAAW,KAAK,EAAE,UAAU,YAAY,CAAC;AACzC,aAAO;AAAA,IACT,CAAC;AAAA,EACH;AAEA,SAAO,EAAE,MAAM,QAAQ,WAAW;AACpC;AAEO,SAAS,cACd,UACA,UAAwB,IAAI,aAAa,GACT;AAChC,QAAM,gBAA6B,CAAC;AACpC,QAAM,WAA4B,CAAC;AAEnC,aAAW,OAAO,UAAU;AAC1B,UAAM,UAAU,IAAI;AACpB,QAAI,OAAO,YAAY,UAAU;AAC/B,YAAM,SAAS,MAAM,SAAS,OAAO;AACrC,eAAS,KAAK,EAAE,GAAG,KAAK,SAAS,OAAO,KAAK,CAAC;AAC9C,oBAAc,KAAK,GAAG,OAAO,UAAU;AAAA,IACzC,WAAW,MAAM,QAAQ,OAAO,GAAG;AACjC,YAAM,YAAY,QAAQ,IAAI,WAAS;AACrC,YAAI,MAAM,SAAS,UAAU,OAAO,MAAM,SAAS,UAAU;AAC3D,gBAAM,SAAS,MAAM,MAAM,MAAM,OAAO;AACxC,wBAAc,KAAK,GAAG,OAAO,UAAU;AACvC,iBAAO,EAAE,GAAG,OAAO,MAAM,OAAO,KAAK;AAAA,QACvC;AACA,eAAO;AAAA,MACT,CAAC;AACD,eAAS,KAAK,EAAE,GAAG,KAAK,SAAS,UAAU,CAAC;AAAA,IAC9C,OAAO;AACL,eAAS,KAAK,GAAG;AAAA,IACnB;AAAA,EACF;AAEA,SAAO,CAAC,UAAU,aAAa;AACjC;;;AC1FA,IAAM,UAAU,uBAAO,IAAI,mBAAmB;AAE9C,SAAS,SAAiB;AACxB,UAAO,oBAAI,KAAK,GAAE,YAAY;AAChC;AAaA,SAAS,QAAQ,QAAa,QAAkC;AAC9D,MAAI,CAAC,UAAU,OAAO,OAAO,SAAS,WAAY,QAAO;AAEzD,MAAI,OAAO;AAEX,QAAM,SAAS,CAAC,SAAoB;AAClC,QAAI,KAAM;AACV,WAAO;AACP,QAAI;AACF,aAAO,IAAI;AAAA,IACb,QAAQ;AAAA,IAER;AAAA,EACF;AAEA,MAAI;AACF,WAAO,IAAI,MAAM,QAAQ;AAAA,MACvB,IAAI,QAAQ,MAAM;AAChB,cAAM,QAAQ,QAAQ,IAAI,QAAQ,MAAM,MAAM;AAC9C,YAAI,OAAO,UAAU,WAAY,QAAO;AAExC,YAAI,SAAS,QAAQ;AAEnB,iBAAO,CAAC,aAAmB,eACzB,MAAM;AAAA,YACJ;AAAA;AAAA,YAEA,CAAC,SAAc;AACb,qBAAO,IAAI;AACX,qBAAO,OAAO,gBAAgB,aAAa,YAAY,IAAI,IAAI;AAAA,YACjE;AAAA,YACA;AAAA,UACF;AAAA,QACJ;AAEA,YAAI,SAAS,gBAAgB;AAC3B,iBAAO,IAAI;AAAA;AAAA,YAET,MAAM,MAAM,QAAQ,IAAI,EAAE,KAAK,CAAC,iBAAsB;AACpD,qBAAO,cAAc,IAAI;AACzB,qBAAO;AAAA,YACT,CAAC;AAAA;AAAA,QACL;AAEA,eAAO,MAAM,KAAK,MAAM;AAAA,MAC1B;AAAA,IACF,CAAC;AAAA,EACH,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAGA,SAAS,SAAS,MAAoB;AACpC,SAAO,MAAM,WAAW;AAC1B;AAGO,SAAS,YAAY,QAAa,SAAwB;AAC/D,QAAM,cAAc,OAAO,KAAK;AAChC,MAAI,YAAY,OAAO,EAAG;AAC1B,QAAM,WAAW,YAAY,OAAO,KAAK,WAAW;AAGpD,cAAY,SAAS,CAAC,SAAc,SAAoB;AACtD,UAAM,YAAY,OAAO;AACzB,UAAM,KAAK,YAAY,IAAI;AAE3B,UAAM,SAAS,SAAS,MAAM,GAAG,IAAI;AAGrC,QAAI,SAAS,IAAI,EAAG,QAAO;AAG3B,WAAO,QAAQ,QAAQ,CAAC,aAAkB;AACxC,YAAM,YAAY,KAAK,MAAM,YAAY,IAAI,IAAI,EAAE;AAEnD,mBAAa,MAAM;AACjB,YAAI;AACF,gBAAM,WAAW,MAAM,YAAY,CAAC;AACpC,gBAAM,QAAQ,MAAM,SAAS;AAC7B,gBAAM,UAAU,IAAI,aAAa;AACjC,gBAAM,CAAC,kBAAkB,gBAAgB,IAAI,cAAc,UAAU,OAAO;AAC5E,gBAAM,SAAS,UAAU,UAAU,CAAC;AACpC,gBAAM,eAAuB,QAAQ,SAAS,WAAW;AACzD,gBAAM,iBAAiB,eAAe,MAAM,cAAc,OAAO,IAAI;AACrE,gBAAM,mBAAmB,gBAAgB,QAAQ;AACjD,gBAAM,aAAa,CAAC,GAAG,kBAAkB,GAAI,gBAAgB,cAAc,CAAC,CAAE;AAC9E,gBAAM,QAAQ,UAAU;AAExB,kBAAQ;AAAA,YACN,OAAO,UAAU,SAAS;AAAA,YAC1B,UAAU;AAAA,YACV,UAAU;AAAA,YACV,eAAe,OAAO,iBAAiB;AAAA,YACvC,mBAAmB,OAAO,qBAAqB;AAAA,YAC/C,YAAY;AAAA,YACZ,WAAW;AAAA,YACX,eAAe,QAAQ,iBAAiB;AAAA,YACxC,gBAAgB,WAAW,IAAI,QAAM,EAAE,UAAU,EAAE,UAAU,aAAa,EAAE,YAAY,EAAE;AAAA,UAC5F,CAAC;AAAA,QACH,QAAQ;AAAA,QAER;AAAA,MACF,CAAC;AAAA,IACH,CAAC;AAAA,EACH;AACA,cAAY,OAAO,IAAI;AACzB;AAGO,SAAS,eAAe,QAAa,SAAwB;AAClE,QAAM,cAAc,OAAO;AAC3B,MAAI,YAAY,OAAO,EAAG;AAC1B,QAAM,WAAW,YAAY,OAAO,KAAK,WAAW;AAGpD,cAAY,SAAS,CAAC,SAAc,SAAoB;AACtD,UAAM,YAAY,OAAO;AACzB,UAAM,KAAK,YAAY,IAAI;AAE3B,UAAM,SAAS,SAAS,MAAM,GAAG,IAAI;AAGrC,QAAI,SAAS,IAAI,EAAG,QAAO;AAG3B,WAAO,QAAQ,QAAQ,CAAC,aAAkB;AACxC,YAAM,YAAY,KAAK,MAAM,YAAY,IAAI,IAAI,EAAE;AAEnD,mBAAa,MAAM;AACjB,YAAI;AACF,gBAAM,WAAW,MAAM,YAAY,CAAC;AACpC,gBAAM,SAAS,MAAM;AACrB,gBAAM,QAAQ,MAAM,SAAS;AAE7B,gBAAM,cAAc,SAChB,CAAC,EAAE,MAAM,UAAU,SAAS,OAAO,GAAG,GAAG,QAAQ,IACjD;AAEJ,gBAAM,UAAU,IAAI,aAAa;AACjC,gBAAM,CAAC,kBAAkB,gBAAgB,IAAI,cAAc,aAAa,OAAO;AAE/E,gBAAM,gBAAwB,UAAU,WAAW,CAAC,GAEjD,OAAO,CAAC,MAAW,EAAE,SAAS,MAAM,EAEpC,IAAI,CAAC,MAAW,EAAE,IAAc,EAChC,KAAK,EAAE;AAEV,gBAAM,iBAAiB,eAAe,MAAM,cAAc,OAAO,IAAI;AACrE,gBAAM,mBAAmB,gBAAgB,QAAQ;AACjD,gBAAM,aAAa,CAAC,GAAG,kBAAkB,GAAI,gBAAgB,cAAc,CAAC,CAAE;AAC9E,gBAAM,QAAQ,UAAU;AAExB,kBAAQ;AAAA,YACN,OAAO,UAAU,SAAS;AAAA,YAC1B,UAAU;AAAA,YACV,UAAU;AAAA,YACV,eAAe,OAAO,gBAAgB;AAAA,YACtC,mBAAmB,OAAO,iBAAiB;AAAA,YAC3C,YAAY;AAAA,YACZ,WAAW;AAAA,YACX,eAAe,UAAU,eAAe;AAAA,YACxC,gBAAgB,WAAW,IAAI,QAAM,EAAE,UAAU,EAAE,UAAU,aAAa,EAAE,YAAY,EAAE;AAAA,UAC5F,CAAC;AAAA,QACH,QAAQ;AAAA,QAER;AAAA,MACF,CAAC;AAAA,IACH,CAAC;AAAA,EACH;AACA,cAAY,OAAO,IAAI;AACzB;;;ACxLA,IAAM,QAIF;AAAA,EACF,QAAQ;AAAA,EACR,SAAS;AAAA,EACT,OAAO;AACT;AAEO,SAAS,KAAK,EAAE,QAAQ,UAAU,6BAA6B,QAAQ,MAAM,GAAsB;AACxG,MAAI;AACF,UAAM,SAAS;AACf,UAAM,UAAU,QAAQ,QAAQ,OAAO,EAAE;AAEzC,QAAI,OAAO;AACT,cAAQ,MAAM,+BAA+B,MAAM,OAAO;AAAA,IAC5D;AAEA,UAAM,QAAQ,IAAI,SAAS,aAAW,KAAK,QAAQ,SAAS,MAAM,OAAO,CAAC;AAAA,EAC5E,SAAS,KAAK;AAEZ,UAAM,QAAQ;AACd,SAAK,iCAAiC,GAAG;AAAA,EAC3C;AACF;AAIO,SAAS,WAAW,QAAmB;AAC5C,MAAI,CAAC,MAAM,OAAO;AAChB,SAAK,iFAA4E;AACjF;AAAA,EACF;AAEA,MAAI;AACF,UAAM,UAAU,MAAM,MAAM,QAAQ,KAAK,MAAM,KAAK;AAEpD,QAAI,QAAQ,MAAM,aAAa;AAC7B,kBAAY,QAAQ,OAAO;AAC3B;AAAA,IACF;AAEA,QAAI,QAAQ,UAAU;AACpB,qBAAe,QAAQ,OAAO;AAC9B;AAAA,IACF;AAEA;AAAA,MACE;AAAA,IAEF;AAAA,EACF,SAAS,KAAK;AACZ,SAAK,qDAAqD,GAAG;AAAA,EAC/D;AACF;AAEA,SAAS,KAAK,SAAiB,KAAqB;AAClD,MAAI;AACF,YAAQ,KAAK,eAAe,OAAO,IAAI,GAAI,QAAQ,SAAY,CAAC,IAAI,CAAC,GAAG,CAAE;AAAA,EAC5E,QAAQ;AAAA,EAER;AACF;AAEO,SAAS,WAAiB;AAC/B,QAAM,QAAQ;AAChB;","names":[]}

package/package.json

@@ -1,6 +1,73 @@
 {
   "name": "sovergate",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.1.0-alpha.2",
+  "description": "EU AI Act compliance SDK — automatic, non-invasive audit logging for LLM calls",
+  "main": "./dist/index.js",
+  "module": "./dist/index.mjs",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "import": {
+        "types": "./dist/index.d.mts",
+        "default": "./dist/index.mjs"
+      },
+      "require": {
+        "types": "./dist/index.d.ts",
+        "default": "./dist/index.js"
+      }
+    },
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "dist"
+  ],
+  "sideEffects": false,
+  "scripts": {
+    "build": "tsup",
+    "typecheck": "tsc --noEmit",
+    "test": "jest --testEnvironment node",
+    "test:watch": "jest --watch",
+    "prepublishOnly": "npm run typecheck && npm run build"
+  },
+  "keywords": [
+    "eu-ai-act",
+    "compliance",
+    "gdpr",
+    "llm",
+    "audit",
+    "openai",
+    "anthropic",
+    "pii",
+    "observability"
+  ],
+  "license": "MIT",
+  "author": "Roberto Postolovski",
+  "homepage": "https://sovergate.com",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/sovergate/sdk-js.git"
+  },
+  "bugs": {
+    "url": "https://github.com/sovergate/sdk-js/issues"
+  },
+  "engines": {
+    "node": ">=18"
+  },
+  "devDependencies": {
+    "@anthropic-ai/sdk": "^1.3.0",
+    "@types/jest": "^29.5.0",
+    "@types/node": "^20.0.0",
+    "jest": "^29.5.0",
+    "openai": "^7.43.0",
+    "ts-jest": "^29.1.0",
+    "tsup": "^8.5.1",
+    "typescript": "^5.0.0"
+  },
+  "jest": {
+    "preset": "ts-jest",
+    "testEnvironment": "node",
+    "testMatch": [
+      "**/tests/**/*.test.ts"
+    ]
+  }
+}