usertrust 0.1.0

package/dist/snapshot/checkpoint.d.ts

@@ -0,0 +1,22 @@
+export interface SnapshotMeta {
+    name: string;
+    timestamp: string;
+    files: string[];
+    size: number;
+}
+/**
+ * Create a snapshot of the vault state.
+ * Captures audit/, policies/, patterns/, usertrust.config.json, and leases.json.
+ * Excludes tigerbeetle/, snapshots/, and dlq/.
+ */
+export declare function createSnapshot(vaultPath: string, name: string): Promise<SnapshotMeta>;
+/**
+ * Restore the vault state from a named snapshot.
+ * Overwrites existing files with snapshot contents.
+ */
+export declare function restoreSnapshot(vaultPath: string, name: string): Promise<void>;
+/**
+ * List all snapshots in the vault, sorted by timestamp (oldest first).
+ */
+export declare function listSnapshots(vaultPath: string): Promise<SnapshotMeta[]>;
+//# sourceMappingURL=checkpoint.d.ts.map

package/dist/snapshot/checkpoint.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"checkpoint.d.ts","sourceRoot":"","sources":["../../src/snapshot/checkpoint.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,YAAY;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;CACb;AA6GD;;;;GAIG;AACH,wBAAsB,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CA6B3F;AAED;;;GAGG;AACH,wBAAsB,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAqBpF;AAED;;GAEG;AACH,wBAAsB,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CA2B9E"}

package/dist/snapshot/checkpoint.js

@@ -0,0 +1,172 @@
+import { mkdir, readFile, readdir, writeFile } from "node:fs/promises";
+import { join, relative, resolve } from "node:path";
+// ── Constants ──
+const SNAPSHOTS_DIR = "snapshots";
+/** Directories to exclude from snapshots */
+const EXCLUDED_DIRS = new Set(["tigerbeetle", "snapshots", "dlq"]);
+/** Files/directories to include in snapshots */
+const INCLUDED_PATHS = new Set([
+    "audit",
+    "policies",
+    "patterns",
+    "usertrust.config.json",
+    "leases.json",
+]);
+// ── Internals ──
+/**
+ * Recursively collect all files under a directory, returning relative paths.
+ */
+async function collectFiles(basePath, currentPath) {
+    const results = [];
+    let entries;
+    try {
+        entries = await readdir(currentPath, { withFileTypes: true, encoding: "utf-8" });
+    }
+    catch {
+        return results;
+    }
+    for (const entry of entries) {
+        const fullPath = join(currentPath, entry.name);
+        const relPath = relative(basePath, fullPath);
+        if (entry.isDirectory()) {
+            const nested = await collectFiles(basePath, fullPath);
+            results.push(...nested);
+        }
+        else if (entry.isFile()) {
+            results.push(relPath);
+        }
+    }
+    return results;
+}
+/**
+ * Gather all files from the vault that should be included in a snapshot.
+ */
+async function gatherVaultFiles(vaultPath) {
+    const allFiles = [];
+    let topEntries;
+    try {
+        topEntries = await readdir(vaultPath, { withFileTypes: true, encoding: "utf-8" });
+    }
+    catch {
+        return allFiles;
+    }
+    for (const entry of topEntries) {
+        const name = entry.name;
+        if (EXCLUDED_DIRS.has(name)) {
+            continue;
+        }
+        if (!INCLUDED_PATHS.has(name)) {
+            continue;
+        }
+        const fullPath = join(vaultPath, name);
+        if (entry.isDirectory()) {
+            const nested = await collectFiles(vaultPath, fullPath);
+            allFiles.push(...nested);
+        }
+        else if (entry.isFile()) {
+            allFiles.push(name);
+        }
+    }
+    return allFiles.sort();
+}
+function snapshotsDir(vaultPath) {
+    return join(vaultPath, SNAPSHOTS_DIR);
+}
+function snapshotFilePath(vaultPath, name) {
+    return join(snapshotsDir(vaultPath), `${name}.json`);
+}
+function validateSnapshotName(name) {
+    if (name.includes("/") ||
+        name.includes("\\") ||
+        name.includes("..") ||
+        name.includes("\0") ||
+        name.trim() === "") {
+        throw new Error(`Invalid snapshot name: ${name}`);
+    }
+}
+// ── Public API ──
+/**
+ * Create a snapshot of the vault state.
+ * Captures audit/, policies/, patterns/, usertrust.config.json, and leases.json.
+ * Excludes tigerbeetle/, snapshots/, and dlq/.
+ */
+export async function createSnapshot(vaultPath, name) {
+    validateSnapshotName(name);
+    const files = await gatherVaultFiles(vaultPath);
+    const entries = {};
+    let totalSize = 0;
+    for (const relPath of files) {
+        const fullPath = join(vaultPath, relPath);
+        const content = await readFile(fullPath);
+        entries[relPath] = content.toString("base64");
+        totalSize += content.length;
+    }
+    const meta = {
+        name,
+        timestamp: new Date().toISOString(),
+        files,
+        size: totalSize,
+    };
+    const payload = { meta, entries };
+    const dir = snapshotsDir(vaultPath);
+    await mkdir(dir, { recursive: true });
+    const filePath = snapshotFilePath(vaultPath, name);
+    await writeFile(filePath, JSON.stringify(payload, null, "\t"), "utf-8");
+    return meta;
+}
+/**
+ * Restore the vault state from a named snapshot.
+ * Overwrites existing files with snapshot contents.
+ */
+export async function restoreSnapshot(vaultPath, name) {
+    validateSnapshotName(name);
+    const filePath = snapshotFilePath(vaultPath, name);
+    const raw = await readFile(filePath, "utf-8");
+    const payload = JSON.parse(raw);
+    for (const [relPath, b64Content] of Object.entries(payload.entries)) {
+        if (relPath === "" || relPath === ".") {
+            throw new Error("Invalid empty path in snapshot entry");
+        }
+        const fullPath = join(vaultPath, relPath);
+        const resolvedPath = resolve(fullPath);
+        const resolvedVault = resolve(vaultPath);
+        if (!resolvedPath.startsWith(`${resolvedVault}/`)) {
+            throw new Error(`Path traversal detected in snapshot: ${relPath}`);
+        }
+        const dir = join(fullPath, "..");
+        await mkdir(dir, { recursive: true });
+        const content = Buffer.from(b64Content, "base64");
+        await writeFile(fullPath, content);
+    }
+}
+/**
+ * List all snapshots in the vault, sorted by timestamp (oldest first).
+ */
+export async function listSnapshots(vaultPath) {
+    const dir = snapshotsDir(vaultPath);
+    let dirEntries;
+    try {
+        dirEntries = await readdir(dir, { withFileTypes: true, encoding: "utf-8" });
+    }
+    catch {
+        return [];
+    }
+    const metas = [];
+    for (const entry of dirEntries) {
+        const name = entry.name;
+        if (!entry.isFile() || !name.endsWith(".json")) {
+            continue;
+        }
+        try {
+            const raw = await readFile(join(dir, name), "utf-8");
+            const payload = JSON.parse(raw);
+            metas.push(payload.meta);
+        }
+        catch {
+            // Skip corrupt snapshot files
+        }
+    }
+    metas.sort((a, b) => a.timestamp.localeCompare(b.timestamp));
+    return metas;
+}
+//# sourceMappingURL=checkpoint.js.map

package/dist/snapshot/checkpoint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"checkpoint.js","sourceRoot":"","sources":["../../src/snapshot/checkpoint.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACvE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAgBpD,kBAAkB;AAElB,MAAM,aAAa,GAAG,WAAW,CAAC;AAElC,4CAA4C;AAC5C,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,aAAa,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC;AAEnE,gDAAgD;AAChD,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;IAC9B,OAAO;IACP,UAAU;IACV,UAAU;IACV,uBAAuB;IACvB,aAAa;CACb,CAAC,CAAC;AAEH,kBAAkB;AAElB;;GAEG;AACH,KAAK,UAAU,YAAY,CAAC,QAAgB,EAAE,WAAmB;IAChE,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACJ,OAAO,GAAG,MAAM,OAAO,CAAC,WAAW,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;IAClF,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,OAAO,CAAC;IAChB,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,IAAc,CAAC,CAAC;QACzD,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAE7C,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACzB,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;YACtD,OAAO,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,CAAC;QACzB,CAAC;aAAM,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;YAC3B,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACvB,CAAC;IACF,CAAC;IAED,OAAO,OAAO,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,gBAAgB,CAAC,SAAiB;IAChD,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,IAAI,UAAoB,CAAC;IACzB,IAAI,CAAC;QACJ,UAAU,GAAG,MAAM,OAAO,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;IACnF,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,QAAQ,CAAC;IACjB,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAc,CAAC;QAClC,IAAI,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7B,SAAS;QACV,CAAC;QACD,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/B,SAAS;QACV,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAEvC,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACzB,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;YACvD,QAAQ,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,CAAC;QAC1B,CAAC;aAAM,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;YAC3B,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrB,CAAC;IACF,CAAC;IAED,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC;AACxB,CAAC;AAED,SAAS,YAAY,CAAC,SAAiB;IACtC,OAAO,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;AACvC,CAAC;AAED,SAAS,gBAAgB,CAAC,SAAiB,EAAE,IAAY;IACxD,OAAO,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,EAAE,GAAG,IAAI,OAAO,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,oBAAoB,CAAC,IAAY;IACzC,IACC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAClB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QACnB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QACnB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QACnB,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,EACjB,CAAC;QACF,MAAM,IAAI,KAAK,CAAC,0BAA0B,IAAI,EAAE,CAAC,CAAC;IACnD,CAAC;AACF,CAAC;AAED,mBAAmB;AAEnB;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,SAAiB,EAAE,IAAY;IACnE,oBAAoB,CAAC,IAAI,CAAC,CAAC;IAC3B,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,SAAS,CAAC,CAAC;IAChD,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,IAAI,SAAS,GAAG,CAAC,CAAC;IAElB,KAAK,MAAM,OAAO,IAAI,KAAK,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAC1C,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACzC,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC9C,SAAS,IAAI,OAAO,CAAC,MAAM,CAAC;IAC7B,CAAC;IAED,MAAM,IAAI,GAAiB;QAC1B,IAAI;QACJ,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,KAAK;QACL,IAAI,EAAE,SAAS;KACf,CAAC;IAEF,MAAM,OAAO,GAAoB,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IAEnD,MAAM,GAAG,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;IACpC,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAEtC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IACnD,MAAM,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;IAExE,OAAO,IAAI,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,SAAiB,EAAE,IAAY;IACpE,oBAAoB,CAAC,IAAI,CAAC,CAAC;IAC3B,MAAM,QAAQ,GAAG,gBAAgB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IACnD,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC9C,MAAM,OAAO,GAAoB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAoB,CAAC;IAEpE,KAAK,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACrE,IAAI,OAAO,KAAK,EAAE,IAAI,OAAO,KAAK,GAAG,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QACzD,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAC1C,MAAM,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;QACvC,MAAM,aAAa,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;QACzC,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,GAAG,aAAa,GAAG,CAAC,EAAE,CAAC;YACnD,MAAM,IAAI,KAAK,CAAC,wCAAwC,OAAO,EAAE,CAAC,CAAC;QACpE,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACjC,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACtC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QAClD,MAAM,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACpC,CAAC;AACF,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,SAAiB;IACpD,MAAM,GAAG,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;IACpC,IAAI,UAAoB,CAAC;IACzB,IAAI,CAAC;QACJ,UAAU,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;IAC7E,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,EAAE,CAAC;IACX,CAAC;IAED,MAAM,KAAK,GAAmB,EAAE,CAAC;IAEjC,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAc,CAAC;QAClC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAChD,SAAS;QACV,CAAC;QACD,IAAI,CAAC;YACJ,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;YACrD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAoB,CAAC;YACnD,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC;QAAC,MAAM,CAAC;YACR,8BAA8B;QAC/B,CAAC;IACF,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;IAC7D,OAAO,KAAK,CAAC;AACd,CAAC"}

package/dist/streaming.d.ts

@@ -0,0 +1,44 @@
+/**
+ * streaming.ts — Streaming Token Accumulator + GovernedStream Factory
+ *
+ * Per-provider token accumulation for streaming LLM calls. The SDK taps
+ * the stream via an async generator that counts tokens without modifying
+ * the yielded data.
+ *
+ * Provider-specific extraction:
+ *   - Anthropic: message_start (input_tokens), message_delta (output_tokens)
+ *   - OpenAI: usage field on final chunk (prompt_tokens, completion_tokens)
+ *   - Google: usageMetadata field (promptTokenCount, candidatesTokenCount)
+ *
+ * Usage:
+ * ```ts
+ * const governed = createGovernedStream(stream, "anthropic", resolveGov, rejectGov);
+ * for await (const chunk of governed) { process(chunk); }
+ * const receipt = await governed.governance;
+ * ```
+ */
+import type { GovernanceReceipt, LLMClientKind } from "./shared/types.js";
+export interface StreamUsage {
+    inputTokens: number;
+    outputTokens: number;
+}
+export interface GovernedStream<T> extends AsyncIterable<T> {
+    /** Resolves with the governance receipt when the stream completes */
+    governance: Promise<GovernanceReceipt>;
+}
+/**
+ * Wraps a provider stream with token counting.
+ * Yields all chunks unchanged. Calls onComplete with accumulated usage
+ * when the stream ends, or onError on failure.
+ */
+export declare function wrapStream<T>(stream: AsyncIterable<T>, kind: LLMClientKind, onComplete: (usage: StreamUsage) => void, onError: (error: unknown) => void): AsyncIterable<T>;
+/**
+ * Creates a GovernedStream: an AsyncIterable that also exposes a `.governance`
+ * promise resolving to the GovernanceReceipt after the stream completes.
+ *
+ * - `resolveGovernance` is called with final usage when the stream ends.
+ *   It should POST the actual cost and return the receipt.
+ * - `rejectGovernance` is called on stream error. It should VOID the hold.
+ */
+export declare function createGovernedStream<T>(stream: AsyncIterable<T>, kind: LLMClientKind, resolveGovernance: (usage: StreamUsage) => Promise<GovernanceReceipt>, rejectGovernance: (error: unknown) => void): GovernedStream<T>;
+//# sourceMappingURL=streaming.d.ts.map

package/dist/streaming.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"streaming.d.ts","sourceRoot":"","sources":["../src/streaming.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,KAAK,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAI1E,MAAM,WAAW,WAAW;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,cAAc,CAAC,CAAC,CAAE,SAAQ,aAAa,CAAC,CAAC,CAAC;IAC1D,qEAAqE;IACrE,UAAU,EAAE,OAAO,CAAC,iBAAiB,CAAC,CAAC;CACvC;AAqDD;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,CAAC,EAC3B,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC,EACxB,IAAI,EAAE,aAAa,EACnB,UAAU,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,IAAI,EACxC,OAAO,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,GAC/B,aAAa,CAAC,CAAC,CAAC,CAElB;AA6BD;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAAC,CAAC,EACrC,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC,EACxB,IAAI,EAAE,aAAa,EACnB,iBAAiB,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,OAAO,CAAC,iBAAiB,CAAC,EACrE,gBAAgB,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,GACxC,cAAc,CAAC,CAAC,CAAC,CA8BnB"}

package/dist/streaming.js

@@ -0,0 +1,123 @@
+/**
+ * streaming.ts — Streaming Token Accumulator + GovernedStream Factory
+ *
+ * Per-provider token accumulation for streaming LLM calls. The SDK taps
+ * the stream via an async generator that counts tokens without modifying
+ * the yielded data.
+ *
+ * Provider-specific extraction:
+ *   - Anthropic: message_start (input_tokens), message_delta (output_tokens)
+ *   - OpenAI: usage field on final chunk (prompt_tokens, completion_tokens)
+ *   - Google: usageMetadata field (promptTokenCount, candidatesTokenCount)
+ *
+ * Usage:
+ * ```ts
+ * const governed = createGovernedStream(stream, "anthropic", resolveGov, rejectGov);
+ * for await (const chunk of governed) { process(chunk); }
+ * const receipt = await governed.governance;
+ * ```
+ */
+// ── Token extraction ──
+function extractTokensFromChunk(chunk, kind) {
+    if (chunk == null || typeof chunk !== "object") {
+        return { inputTokens: 0, outputTokens: 0 };
+    }
+    const c = chunk;
+    if (kind === "anthropic") {
+        if (c.type === "message_start" && c.message != null && typeof c.message === "object") {
+            const msg = c.message;
+            if (msg.usage != null && typeof msg.usage === "object") {
+                const usage = msg.usage;
+                return { inputTokens: usage.input_tokens ?? 0, outputTokens: 0 };
+            }
+        }
+        if (c.type === "message_delta") {
+            if (c.usage != null && typeof c.usage === "object") {
+                const usage = c.usage;
+                return { inputTokens: 0, outputTokens: usage.output_tokens ?? 0 };
+            }
+        }
+        return { inputTokens: 0, outputTokens: 0 };
+    }
+    if (kind === "openai") {
+        if (c.usage != null && typeof c.usage === "object") {
+            const usage = c.usage;
+            return {
+                inputTokens: usage.prompt_tokens ?? 0,
+                outputTokens: usage.completion_tokens ?? 0,
+            };
+        }
+        return { inputTokens: 0, outputTokens: 0 };
+    }
+    // google
+    if (c.usageMetadata != null && typeof c.usageMetadata === "object") {
+        const meta = c.usageMetadata;
+        return {
+            inputTokens: meta.promptTokenCount ?? 0,
+            outputTokens: meta.candidatesTokenCount ?? 0,
+        };
+    }
+    return { inputTokens: 0, outputTokens: 0 };
+}
+// ── Stream wrapper ──
+/**
+ * Wraps a provider stream with token counting.
+ * Yields all chunks unchanged. Calls onComplete with accumulated usage
+ * when the stream ends, or onError on failure.
+ */
+export function wrapStream(stream, kind, onComplete, onError) {
+    return wrapStreamImpl(stream, kind, onComplete, onError);
+}
+async function* wrapStreamImpl(stream, kind, onComplete, onError) {
+    let inputTokens = 0;
+    let outputTokens = 0;
+    try {
+        for await (const chunk of stream) {
+            const tokens = extractTokensFromChunk(chunk, kind);
+            // Use latest non-zero value (providers report cumulative or final)
+            if (tokens.inputTokens > 0)
+                inputTokens = tokens.inputTokens;
+            if (tokens.outputTokens > 0)
+                outputTokens = tokens.outputTokens;
+            yield chunk;
+        }
+        onComplete({ inputTokens, outputTokens });
+    }
+    catch (err) {
+        onError(err);
+        throw err;
+    }
+}
+// ── GovernedStream factory ──
+/**
+ * Creates a GovernedStream: an AsyncIterable that also exposes a `.governance`
+ * promise resolving to the GovernanceReceipt after the stream completes.
+ *
+ * - `resolveGovernance` is called with final usage when the stream ends.
+ *   It should POST the actual cost and return the receipt.
+ * - `rejectGovernance` is called on stream error. It should VOID the hold.
+ */
+export function createGovernedStream(stream, kind, resolveGovernance, rejectGovernance) {
+    let governanceResolve;
+    let governanceReject;
+    const governancePromise = new Promise((resolve, reject) => {
+        governanceResolve = resolve;
+        governanceReject = reject;
+    });
+    const wrapped = wrapStream(stream, kind, (usage) => {
+        resolveGovernance(usage)
+            .then((receipt) => {
+            governanceResolve(receipt);
+        })
+            .catch((err) => {
+            governanceReject(err);
+        });
+    }, (error) => {
+        rejectGovernance(error);
+        governanceReject(error);
+    });
+    return Object.assign(wrapped, {
+        governance: governancePromise,
+    });
+}
+//# sourceMappingURL=streaming.js.map

package/dist/streaming.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"streaming.js","sourceRoot":"","sources":["../src/streaming.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAgBH,yBAAyB;AAEzB,SAAS,sBAAsB,CAAC,KAAc,EAAE,IAAmB;IAClE,IAAI,KAAK,IAAI,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,OAAO,EAAE,WAAW,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC;IAC5C,CAAC;IAED,MAAM,CAAC,GAAG,KAAgC,CAAC;IAE3C,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;QAC1B,IAAI,CAAC,CAAC,IAAI,KAAK,eAAe,IAAI,CAAC,CAAC,OAAO,IAAI,IAAI,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YACtF,MAAM,GAAG,GAAG,CAAC,CAAC,OAAkC,CAAC;YACjD,IAAI,GAAG,CAAC,KAAK,IAAI,IAAI,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;gBACxD,MAAM,KAAK,GAAG,GAAG,CAAC,KAA+B,CAAC;gBAClD,OAAO,EAAE,WAAW,EAAE,KAAK,CAAC,YAAY,IAAI,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC;YAClE,CAAC;QACF,CAAC;QACD,IAAI,CAAC,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;YAChC,IAAI,CAAC,CAAC,KAAK,IAAI,IAAI,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;gBACpD,MAAM,KAAK,GAAG,CAAC,CAAC,KAA+B,CAAC;gBAChD,OAAO,EAAE,WAAW,EAAE,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,aAAa,IAAI,CAAC,EAAE,CAAC;YACnE,CAAC;QACF,CAAC;QACD,OAAO,EAAE,WAAW,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC;IAC5C,CAAC;IAED,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACvB,IAAI,CAAC,CAAC,KAAK,IAAI,IAAI,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YACpD,MAAM,KAAK,GAAG,CAAC,CAAC,KAA+B,CAAC;YAChD,OAAO;gBACN,WAAW,EAAE,KAAK,CAAC,aAAa,IAAI,CAAC;gBACrC,YAAY,EAAE,KAAK,CAAC,iBAAiB,IAAI,CAAC;aAC1C,CAAC;QACH,CAAC;QACD,OAAO,EAAE,WAAW,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC;IAC5C,CAAC;IAED,SAAS;IACT,IAAI,CAAC,CAAC,aAAa,IAAI,IAAI,IAAI,OAAO,CAAC,CAAC,aAAa,KAAK,QAAQ,EAAE,CAAC;QACpE,MAAM,IAAI,GAAG,CAAC,CAAC,aAAuC,CAAC;QACvD,OAAO;YACN,WAAW,EAAE,IAAI,CAAC,gBAAgB,IAAI,CAAC;YACvC,YAAY,EAAE,IAAI,CAAC,oBAAoB,IAAI,CAAC;SAC5C,CAAC;IACH,CAAC;IAED,OAAO,EAAE,WAAW,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC;AAC5C,CAAC;AAED,uBAAuB;AAEvB;;;;GAIG;AACH,MAAM,UAAU,UAAU,CACzB,MAAwB,EACxB,IAAmB,EACnB,UAAwC,EACxC,OAAiC;IAEjC,OAAO,cAAc,CAAC,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;AAC1D,CAAC;AAED,KAAK,SAAS,CAAC,CAAC,cAAc,CAC7B,MAAwB,EACxB,IAAmB,EACnB,UAAwC,EACxC,OAAiC;IAEjC,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,IAAI,YAAY,GAAG,CAAC,CAAC;IAErB,IAAI,CAAC;QACJ,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAClC,MAAM,MAAM,GAAG,sBAAsB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YACnD,mEAAmE;YACnE,IAAI,MAAM,CAAC,WAAW,GAAG,CAAC;gBAAE,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;YAC7D,IAAI,MAAM,CAAC,YAAY,GAAG,CAAC;gBAAE,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;YAEhE,MAAM,KAAK,CAAC;QACb,CAAC;QACD,UAAU,CAAC,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC,CAAC;IAC3C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,CAAC;QACb,MAAM,GAAG,CAAC;IACX,CAAC;AACF,CAAC;AAED,+BAA+B;AAE/B;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CACnC,MAAwB,EACxB,IAAmB,EACnB,iBAAqE,EACrE,gBAA0C;IAE1C,IAAI,iBAAwD,CAAC;IAC7D,IAAI,gBAA2C,CAAC;IAEhD,MAAM,iBAAiB,GAAG,IAAI,OAAO,CAAoB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC5E,iBAAiB,GAAG,OAAO,CAAC;QAC5B,gBAAgB,GAAG,MAAM,CAAC;IAC3B,CAAC,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,UAAU,CACzB,MAAM,EACN,IAAI,EACJ,CAAC,KAAK,EAAE,EAAE;QACT,iBAAiB,CAAC,KAAK,CAAC;aACtB,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE;YACjB,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAC5B,CAAC,CAAC;aACD,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;YACvB,gBAAgB,CAAC,GAAG,CAAC,CAAC;QACvB,CAAC,CAAC,CAAC;IACL,CAAC,EACD,CAAC,KAAK,EAAE,EAAE;QACT,gBAAgB,CAAC,KAAK,CAAC,CAAC;QACxB,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC,CACD,CAAC;IAEF,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE;QAC7B,UAAU,EAAE,iBAAiB;KAC7B,CAAsB,CAAC;AACzB,CAAC"}

package/package.json

@@ -0,0 +1,54 @@
+{
+	"name": "usertrust",
+	"version": "0.1.0",
+	"description": "Financial governance for AI agents. Every LLM call becomes an immutable, auditable transaction.",
+	"license": "Apache-2.0",
+	"author": "Usertools, Inc. <hello@usertools.ai> (https://usertrust.ai)",
+	"homepage": "https://usertrust.ai",
+	"repository": {
+		"type": "git",
+		"url": "git+https://github.com/usertools-ai/usertrust.git",
+		"directory": "packages/core"
+	},
+	"bugs": "https://github.com/usertools-ai/usertrust/issues",
+	"keywords": [
+		"ai",
+		"governance",
+		"llm",
+		"audit",
+		"financial",
+		"agent",
+		"budget",
+		"token",
+		"anthropic",
+		"openai",
+		"tigerbeetle",
+		"ledger"
+	],
+	"type": "module",
+	"main": "dist/index.js",
+	"types": "dist/index.d.ts",
+	"bin": { "usertrust": "./dist/cli/main.js" },
+	"exports": {
+		".": { "import": "./dist/index.js", "types": "./dist/index.d.ts" }
+	},
+	"dependencies": {
+		"tigerbeetle-node": "^0.16.0",
+		"minimatch": "^10.0.0",
+		"zod": "^3.23.0",
+		"yaml": "^2.7.0"
+	},
+	"scripts": {
+		"build": "tsc",
+		"prepublishOnly": "tsc"
+	},
+	"files": ["dist"],
+	"peerDependencies": {
+		"@anthropic-ai/sdk": ">=0.30.0",
+		"openai": ">=4.70.0"
+	},
+	"peerDependenciesMeta": {
+		"@anthropic-ai/sdk": { "optional": true },
+		"openai": { "optional": true }
+	}
+}