Measure local runs

python -m pip install https://docs.soterias.io/downloads/api-preview/soterias_local-0.1.0rc5%2Bapi2-cp311-abi3-win_amd64.whl

npm install https://docs.soterias.io/downloads/api-preview/soterias-core-0.1.0-rc.5-api.2.tgz
npm install --save-dev typescript@5.8.3 @types/node@24

"""A complete local application: Python chunks on the feature pages use this source."""
import asyncio
import json
from pathlib import Path
import sqlite3
import tempfile

from soterias import Soterias

import assert from 'node:assert/strict';
import fs from 'node:fs';
import os from 'node:os';
import path from 'node:path';
import { DatabaseSync } from 'node:sqlite';
import { Soterias } from '@soterias/core';

# %% Create an application and an ordinary database
# Soterias observes this existing code; it does not secure these direct writes.
root = Path(tempfile.mkdtemp(prefix="soterias-invoices-"))
database = sqlite3.connect(root / "invoices.sqlite3")
database.execute("CREATE TABLE invoices (id INTEGER PRIMARY KEY, cents INTEGER)")
sdk = Soterias(workflow="invoices", directory=root / "metrics")


def post_invoice(cents):
    row = database.execute("INSERT INTO invoices(cents) VALUES (?)", (cents,))
    database.commit()
    return {"id": row.lastrowid, "cents": cents}

// %% Create an application and an ordinary database
// Soterias observes this existing code; it does not secure these direct writes.
const root = fs.mkdtempSync(path.join(os.tmpdir(), 'soterias-invoices-'));
const database = new DatabaseSync(path.join(root, 'invoices.sqlite3'));
database.exec('CREATE TABLE invoices (id INTEGER PRIMARY KEY, cents INTEGER)');
const sdk = new Soterias({ workflow: 'invoices', directory: path.join(root, 'metrics') });

function postInvoice(cents: number) {
  const row = database.prepare('INSERT INTO invoices(cents) VALUES (?)').run(cents);
  return { id: Number(row.lastInsertRowid), cents };
}

try {

# %% Observe synchronous and asynchronous calls
# Repeating the same input still runs the write twice.
first = sdk.invoke(post_invoice, 1500)
second = sdk.invoke(post_invoice, 1500)
assert first["id"] != second["id"]
tracked_post = sdk.track(post_invoice)
assert tracked_post(500)["cents"] == 500


async def review_invoices():
    await asyncio.sleep(0)
    return database.execute("SELECT SUM(cents) FROM invoices").fetchone()[0]


async def finish():
    try:
        total = await sdk.ainvoke(review_invoices)
        assert total == 3500
        tracked_review = sdk.track_async(review_invoices)
        assert await tracked_review() == total
        await sdk.flush()
        summary = sdk.summary()
        assert summary["counts"]["raw"] == 5

  // %% Observe synchronous and asynchronous calls
  // Repeating the same input still runs the write twice.
  const first = sdk.invoke(postInvoice, 1500);
  const second = sdk.invoke(postInvoice, 1500);
  assert.notEqual(first.id, second.id);
  const trackedPost = sdk.track(postInvoice);
  assert.equal(trackedPost(500).cents, 500);
  const total = await sdk.invokeAsync(async () => {
    await Promise.resolve();
    return database.prepare('SELECT SUM(cents) AS total FROM invoices').get()!.total;
  });
  assert.equal(total, 3500);
  const trackedReview = sdk.trackAsync(async () => total);
  assert.equal(await trackedReview(), total);
  await sdk.flush();
  const summary = sdk.summary();
  assert.equal(summary.counts.raw, 5);

        # %% Inspect and export local measurements
        # Each export is explicit; nothing is uploaded.
        for name, export in (
            ("runs.json", sdk.metrics.export_json()),
            ("runs.csv", sdk.metrics.export_csv()),
            ("runs.otlp.json", sdk.metrics.export_otlp()),
        ):
            (root / name).write_bytes(export.data)
        print(json.dumps({"status": "PASS", "total_cents": total,
                          "runs": summary["counts"]["raw"], "directory": str(root)}))
    finally:

  // %% Inspect and export local measurements
  // Each export is explicit; nothing is uploaded.
  for (const [name, page] of [
    ['runs.json', sdk.metrics.exportJson()],
    ['runs.csv', sdk.metrics.exportCsv()],
    ['runs.otlp.json', sdk.metrics.exportOtlp()],
  ] as const) fs.writeFileSync(path.join(root, name), page.data);
  console.log(JSON.stringify({ status: 'PASS', total_cents: total,
    runs: summary.counts.raw, directory: root }));
} finally {

        # %% Close the runtime and database
        # Wait for pending recordings before leaving the process.
        await sdk.close_async()
        database.close()


asyncio.run(finish())

  // %% Close the runtime and database
  // Wait for pending recordings before leaving the process.
  await sdk.closeAsync();
  database.close();
}

import { Soterias, observe, canonicalize, Metrics, audit, HistoricalPolicyInputs } from '@soterias/core';
import fs from 'node:fs';
import os from 'node:os';
import path from 'node:path';
import { McpServer } from '@modelcontextprotocol/server';
import { serveStdio } from '@modelcontextprotocol/server/stdio';
import * as z from 'zod/v4';

// Trusted startup: paths, trust and credentials are fixed by the host.
const root = fs.mkdtempSync(path.join(os.tmpdir(), 'soterias-mcp-'));
const sdk = new Soterias({workflow: 'invoice-tools', directory: path.join(root, 'metrics')});
const sum = input => input.cents.reduce((a, b) => a + b, 0);

// Agent input is bounded data. It cannot replace host configuration or trust.
const handle = serveStdio(() => {
  const server = new McpServer({name: 'soterias-metrics', version: '1.0.0'});
  server.registerTool('invoice_metrics', {
    description: 'Use metrics through the host-selected native SDK.',
    inputSchema: z.object({cents: z.array(z.number().int().min(0).max(1000000)).max(100)}).strict(),
  }, async input => {
    try {
      const result = await (async () => {
        sdk.invoke(sum, input);
return sdk.summary();

      })();
      return {content: [{type: 'text', text: JSON.stringify(result, (_key, value) => typeof value === 'bigint' ? value.toString() : value)}]};
    } catch {
      return {isError: true, content: [{type: 'text', text: 'feature_request_refused'}]};
    }
  });
  return server;
}, {maxSubscriptions: 0});
process.stdin.once('end', () => {
  void (async () => { await handle.close(); await sdk.closeAsync(); })();
});

import { Client } from '@modelcontextprotocol/client';
import { StdioClientTransport } from '@modelcontextprotocol/client/stdio';
import { fileURLToPath } from 'node:url';

const client = new Client({name: 'feature-example', version: '1.0.0'});
try {
  await client.connect(new StdioClientTransport({
    command: process.execPath,
    args: [fileURLToPath(new URL('./mcp.mjs', import.meta.url))],
    env: Object.fromEntries(Object.entries(process.env).filter(([, value]) => value !== undefined)),
  }));
  const result = await client.callTool({name: 'invoice_metrics', arguments: {cents: [500, 1000]}});
  if (result.isError) throw new Error('Feature request refused');
  console.log(JSON.stringify(result));
} finally { await client.close(); }