@adonis-agora/agent 0.34.1 → 0.36.0

package/dist/src/guardrails/engine.js

@@ -0,0 +1,324 @@
+import { detectKeywords, detectRegex } from './detectors/custom.js';
+import { scoreInjection } from './detectors/injection.js';
+import { detectPii } from './detectors/pii.js';
+import { detectSecrets } from './detectors/secrets.js';
+import { scoreToolText } from './detectors/tool-poisoning.js';
+import { matchesAny } from './glob.js';
+import { ACTION_SEVERITY, } from './types.js';
+import { labelFor, Vault } from './vault.js';
+export const DEFAULT_MESSAGES = {
+    llm_request: "This message was blocked by your organization's AI guardrails.",
+    llm_response: "The answer was withheld by your organization's AI guardrails.",
+    tool_args: "This tool call was blocked by your organization's AI guardrails.",
+    tool_result: "The tool's result was withheld by your organization's AI guardrails.",
+    tool_description: "This tool was quarantined by your organization's AI guardrails.",
+};
+export const DEFAULT_APPROVAL_MESSAGE = "This needs approval under your organization's AI guardrails before it can go ahead.";
+/** What replaces an instruction-like finding: it is removed, not tokenized. */
+export const INJECTION_REPLACEMENT = '[removed: suspected prompt injection]';
+const ruleName = (rule) => rule.name ?? rule.id;
+/** Whether a rule's scope covers the context (stage, tool, `when`). Segments are filtered apart. */
+export function ruleApplies(rule, ctx) {
+    if (rule.enabled === false || !rule.stages.includes(ctx.stage))
+        return false;
+    const tools = rule.match?.tools;
+    if (tools?.length) {
+        const toolStage = ctx.stage === 'tool_args' || ctx.stage === 'tool_result' || ctx.stage === 'tool_description';
+        if (!toolStage || !matchesAny(ctx.tool ?? '', tools))
+            return false;
+    }
+    return rule.when === undefined || rule.when(ctx);
+}
+export function orderRules(rules) {
+    return [...rules].sort((a, b) => (a.priority ?? 100) - (b.priority ?? 100) || ruleName(a).localeCompare(ruleName(b)));
+}
+/** Runs one detector on one text. A custom detector's throw is the rule's fail mode to decide. */
+export async function runDetector(spec, text, ctx) {
+    if (!text)
+        return [];
+    switch (spec.kind) {
+        case 'pii':
+            return detectPii(text, spec.types?.length ? spec.types : undefined);
+        case 'secrets':
+            return detectSecrets(text, spec.types?.length ? spec.types : undefined);
+        case 'injection':
+            return scoreInjection(text, spec.threshold ?? 0.5).findings;
+        case 'tool_poisoning':
+            return scoreToolText(text, spec.threshold ?? 0.5).findings;
+        case 'regex':
+            return detectRegex(text, spec.patterns, spec.label ?? 'custom');
+        case 'keywords':
+            return detectKeywords(text, spec.words, spec.label ?? 'keywords');
+        case 'custom':
+            return spec.detect(text, ctx);
+    }
+}
+/**
+ * The in-process detectors of a rule set, as one span locator — what a stream window must never
+ * cut through (see `StreamGuard`'s `locate`). Custom detectors are left out: they may be remote.
+ */
+export function spanLocator(rules) {
+    const specs = rules
+        .flatMap((r) => r.detectors)
+        .filter((d) => d.kind !== 'custom' && d.kind !== 'tool_poisoning');
+    if (specs.length === 0)
+        return undefined;
+    return (text) => specs.flatMap((d) => {
+        switch (d.kind) {
+            case 'pii':
+                return detectPii(text, d.types?.length ? d.types : undefined);
+            case 'secrets':
+                return detectSecrets(text, d.types?.length ? d.types : undefined);
+            case 'regex':
+                return detectRegex(text, d.patterns);
+            case 'keywords':
+                return detectKeywords(text, d.words);
+            case 'injection':
+                return scoreInjection(text, 0).findings;
+            default:
+                return [];
+        }
+    });
+}
+/**
+ * Non-overlapping spans. Overlapping findings are merged into their union (nothing that any
+ * detector found is left uncovered), labelled by the longer finding (ties: the higher score) —
+ * an injected HTML comment that contains an email address is removed as a whole. With `text`, a
+ * merged span's value is re-read from it.
+ */
+export function resolveOverlaps(findings, text) {
+    const sorted = [...findings]
+        .filter((f) => f.spanned !== false && f.end > f.start)
+        .sort((a, b) => a.start - b.start || b.end - a.end || b.score - a.score);
+    const out = [];
+    for (const f of sorted) {
+        const last = out[out.length - 1];
+        if (!last || f.start >= last.end) {
+            out.push({ ...f });
+            continue;
+        }
+        const longer = f.end - f.start > last.end - last.start ||
+            (f.end - f.start === last.end - last.start && f.score > last.score)
+            ? f
+            : last;
+        const merged = { ...longer, start: last.start, end: Math.max(last.end, f.end) };
+        if (text !== undefined)
+            merged.value = text.slice(merged.start, merged.end);
+        out[out.length - 1] = merged;
+    }
+    return out;
+}
+/** Placeholder text for a finding. Instruction-like findings are removed, not tokenized. */
+function replacementFor(f, vault, restorable) {
+    if (f.replacement !== undefined)
+        return f.replacement;
+    if (f.detector === 'injection' || f.detector === 'tool_poisoning')
+        return INJECTION_REPLACEMENT;
+    return vault.tokenFor(labelFor(f.category), f.value, restorable);
+}
+export function applyRedactions(text, findings, vault, restorable) {
+    const whole = findings.find((f) => f.spanned === false);
+    if (whole) {
+        return { text: whole.replacement ?? `[removed: ${whole.category}]`, count: 1 };
+    }
+    const spans = resolveOverlaps(findings, text);
+    if (spans.length === 0)
+        return { text, count: 0 };
+    let out = '';
+    let at = 0;
+    for (const f of spans) {
+        out += text.slice(at, f.start) + replacementFor(f, vault, restorable);
+        at = f.end;
+    }
+    return { text: out + text.slice(at), count: spans.length };
+}
+function memoKey(spec) {
+    return spec.kind === 'custom' ? `custom\u0000${spec.name}` : JSON.stringify(spec);
+}
+/**
+ * Evaluates the rules for one stage over a set of segments. Rules run by ascending priority; an
+ * `allow` rule that fires stops evaluation; otherwise every firing rule contributes and the most
+ * severe action wins (block > approve > redact > log). Detector results are shared between rules.
+ *
+ * Blocking applies to the NEWEST turn: content found only in re-sent history (`fresh: false`) was
+ * already refused once, so it is removed one-way instead — the conversation can go on and the value
+ * still never reaches the model.
+ */
+export async function scan(rules, ctx, segments, vault = new Vault(), options = {}) {
+    const started = performance.now();
+    const applicable = orderRules(rules).filter((r) => ruleApplies(r, ctx));
+    const result = {
+        stage: ctx.stage,
+        action: 'allow',
+        segments: segments.map((s) => s.text),
+        changed: false,
+        hits: [],
+        vault,
+        redactions: 0,
+        latencyMs: 0,
+    };
+    if (applicable.length === 0 || segments.length === 0) {
+        result.latencyMs = performance.now() - started;
+        return result;
+    }
+    const stageMessage = options.messages?.[ctx.stage] ?? DEFAULT_MESSAGES[ctx.stage];
+    const restorableStage = (options.restorableStages ?? ['llm_request']).includes(ctx.stage);
+    const memo = new Map();
+    const detect = (spec, index) => {
+        const key = `${index}\u0000${memoKey(spec)}`;
+        let p = memo.get(key);
+        if (!p) {
+            // Wrapped so a synchronous throw becomes a rejection the fail mode can decide on.
+            p = Promise.resolve().then(() => runDetector(spec, segments[index]?.text ?? '', ctx));
+            memo.set(key, p);
+        }
+        return p;
+    };
+    const outcomes = [];
+    for (const rule of applicable) {
+        const sources = rule.match?.sources;
+        const indexes = segments
+            .map((s, i) => ({ s, i }))
+            .filter(({ s }) => !sources?.length || !s.source || sources.includes(s.source))
+            .map(({ i }) => i);
+        const outcome = { rule, bySegment: new Map() };
+        if (rule.detectors.length === 0) {
+            // Scope-only rule: fires for everything in scope (an exemption, or a blanket block/approval).
+            if (rule.action === 'allow' || rule.action === 'block' || rule.action === 'approve')
+                outcomes.push(outcome);
+            if (rule.action === 'allow')
+                break;
+            continue;
+        }
+        const jobs = rule.detectors.flatMap((spec) => indexes.map(async (i) => ({ i, found: await detect(spec, i) })));
+        const settled = await Promise.allSettled(jobs);
+        for (const s of settled) {
+            if (s.status === 'rejected') {
+                outcome.failed = s.reason?.message ?? String(s.reason);
+                continue;
+            }
+            if (s.value.found.length === 0)
+                continue;
+            const list = outcome.bySegment.get(s.value.i) ?? [];
+            list.push(...s.value.found);
+            outcome.bySegment.set(s.value.i, list);
+        }
+        if (outcome.bySegment.size === 0 && !outcome.failed)
+            continue;
+        outcomes.push(outcome);
+        if (rule.action === 'allow' && outcome.bySegment.size > 0)
+            break;
+    }
+    // Combine: most severe action; redactions of every redact rule.
+    const redactBySegment = new Map();
+    for (const o of outcomes) {
+        const { rule } = o;
+        const name = ruleName(rule);
+        const failMode = rule.options?.failMode ?? 'open';
+        let action = rule.action;
+        if (o.failed) {
+            result.hits.push({
+                ruleId: rule.id,
+                ruleName: name,
+                action: failMode === 'closed' ? 'block' : 'log',
+                detector: 'detector_error',
+                category: 'error.detector_unavailable',
+                score: 0,
+                count: 1,
+                values: [],
+                fresh: true,
+                error: o.failed.slice(0, 300),
+                failMode,
+            });
+            if (failMode === 'closed' && o.bySegment.size === 0)
+                action = 'block';
+            else if (o.bySegment.size === 0)
+                continue;
+        }
+        const historyOnly = (action === 'block' || action === 'approve') &&
+            o.bySegment.size > 0 &&
+            [...o.bySegment.keys()].every((i) => segments[i]?.fresh === false);
+        if (historyOnly) {
+            action = 'redact';
+            for (const [i, findings] of o.bySegment) {
+                const entry = redactBySegment.get(i) ?? { findings: [], restorable: false };
+                entry.findings.push(...findings);
+                redactBySegment.set(i, entry);
+            }
+        }
+        if (ACTION_SEVERITY[action] > ACTION_SEVERITY[result.action]) {
+            result.action = action;
+            if (action === 'block' || action === 'approve') {
+                result.decisive = {
+                    id: rule.id,
+                    name,
+                    message: rule.options?.message ||
+                        (o.failed && o.bySegment.size === 0
+                            ? `${stageMessage} (a required check could not run)`
+                            : action === 'approve'
+                                ? (options.approvalMessage ?? DEFAULT_APPROVAL_MESSAGE)
+                                : stageMessage),
+                };
+            }
+        }
+        if (o.bySegment.size === 0 && rule.detectors.length === 0) {
+            result.hits.push({
+                ruleId: rule.id,
+                ruleName: name,
+                action,
+                detector: 'scope',
+                category: 'scope.match',
+                score: 1,
+                count: 1,
+                values: [],
+                fresh: true,
+            });
+            continue;
+        }
+        // Hits: one per category per rule, with distinct values and whether any occurrence is fresh.
+        const grouped = new Map();
+        for (const [i, findings] of o.bySegment) {
+            for (const f of findings) {
+                const hit = grouped.get(f.category) ?? {
+                    ruleId: rule.id,
+                    ruleName: name,
+                    action,
+                    detector: f.detector,
+                    category: f.category,
+                    score: 0,
+                    count: 0,
+                    values: [],
+                    fresh: false,
+                };
+                hit.count++;
+                hit.score = Math.max(hit.score, f.score);
+                if (f.value && !hit.values.includes(f.value) && hit.values.length < 20)
+                    hit.values.push(f.value);
+                if (segments[i]?.fresh !== false)
+                    hit.fresh = true;
+                grouped.set(f.category, hit);
+            }
+            if (action === 'redact' && !historyOnly) {
+                const entry = redactBySegment.get(i) ?? { findings: [], restorable: false };
+                entry.findings.push(...findings);
+                entry.restorable ||= restorableStage && rule.options?.restore !== false;
+                redactBySegment.set(i, entry);
+            }
+        }
+        result.hits.push(...grouped.values());
+    }
+    if (result.action !== 'block' && result.action !== 'approve') {
+        for (const [i, { findings, restorable }] of redactBySegment) {
+            const original = segments[i]?.text ?? '';
+            const { text, count } = applyRedactions(original, findings, vault, restorable);
+            if (count > 0 && text !== original) {
+                result.segments[i] = text;
+                result.redactions += count;
+                result.changed = true;
+            }
+        }
+    }
+    result.latencyMs = performance.now() - started;
+    return result;
+}
+//# sourceMappingURL=engine.js.map

package/dist/src/guardrails/engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.js","sourceRoot":"","sources":["../../../src/guardrails/engine.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpE,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AAC9D,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EACL,eAAe,GAQhB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAqD7C,MAAM,CAAC,MAAM,gBAAgB,GAAmC;IAC9D,WAAW,EAAE,gEAAgE;IAC7E,YAAY,EAAE,+DAA+D;IAC7E,SAAS,EAAE,kEAAkE;IAC7E,WAAW,EAAE,sEAAsE;IACnF,gBAAgB,EAAE,iEAAiE;CACpF,CAAC;AAEF,MAAM,CAAC,MAAM,wBAAwB,GACnC,qFAAqF,CAAC;AAExF,+EAA+E;AAC/E,MAAM,CAAC,MAAM,qBAAqB,GAAG,uCAAuC,CAAC;AAE7E,MAAM,QAAQ,GAAG,CAAyB,IAAsB,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,EAAE,CAAC;AAE1F,oGAAoG;AACpG,MAAM,UAAU,WAAW,CAAyB,IAAsB,EAAE,GAAM;IAChF,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7E,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC;IAChC,IAAI,KAAK,EAAE,MAAM,EAAE,CAAC;QAClB,MAAM,SAAS,GACb,GAAG,CAAC,KAAK,KAAK,WAAW,IAAI,GAAG,CAAC,KAAK,KAAK,aAAa,IAAI,GAAG,CAAC,KAAK,KAAK,kBAAkB,CAAC;QAC/F,IAAI,CAAC,SAAS,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,EAAE,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;IACrE,CAAC;IACD,OAAO,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,UAAU,CACxB,KAAkC;IAElC,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CACpB,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,IAAI,GAAG,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAC9F,CAAC;AACJ,CAAC;AAED,kGAAkG;AAClG,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,IAAqB,EACrB,IAAY,EACZ,GAAM;IAEN,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IACrB,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,KAAK,KAAK;YACR,OAAO,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACtE,KAAK,SAAS;YACZ,OAAO,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAC1E,KAAK,WAAW;YACd,OAAO,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC;QAC9D,KAAK,gBAAgB;YACnB,OAAO,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC;QAC7D,KAAK,OAAO;YACV,OAAO,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,KAAK,IAAI,QAAQ,CAAC,CAAC;QAClE,KAAK,UAAU;YACb,OAAO,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,UAAU,CAAC,CAAC;QACpE,KAAK,QAAQ;YACX,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAClC,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CACzB,KAAkC;IAElC,MAAM,KAAK,GAAG,KAAK;SAChB,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;SAC3B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,KAAK,gBAAgB,CAAC,CAAC;IACrE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACzC,OAAO,CAAC,IAAI,EAAE,EAAE,CACd,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE;QAClB,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;YACf,KAAK,KAAK;gBACR,OAAO,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YAChE,KAAK,SAAS;gBACZ,OAAO,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YACpE,KAAK,OAAO;gBACV,OAAO,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC;YACvC,KAAK,UAAU;gBACb,OAAO,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;YACvC,KAAK,WAAW;gBACd,OAAO,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;YAC1C;gBACE,OAAO,EAAE,CAAC;QACd,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,QAA4B,EAAE,IAAa;IACzE,MAAM,MAAM,GAAG,CAAC,GAAG,QAAQ,CAAC;SACzB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,KAAK,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC;SACrD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;IAC3E,MAAM,GAAG,GAAc,EAAE,CAAC;IAC1B,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACjC,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;YACjC,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;YACnB,SAAS;QACX,CAAC;QACD,MAAM,MAAM,GACV,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,KAAK;YACvC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;YACjE,CAAC,CAAC,CAAC;YACH,CAAC,CAAC,IAAI,CAAC;QACX,MAAM,MAAM,GAAY,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;QACzF,IAAI,IAAI,KAAK,SAAS;YAAE,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;QAC5E,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC;IAC/B,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,4FAA4F;AAC5F,SAAS,cAAc,CAAC,CAAU,EAAE,KAAY,EAAE,UAAmB;IACnE,IAAI,CAAC,CAAC,WAAW,KAAK,SAAS;QAAE,OAAO,CAAC,CAAC,WAAW,CAAC;IACtD,IAAI,CAAC,CAAC,QAAQ,KAAK,WAAW,IAAI,CAAC,CAAC,QAAQ,KAAK,gBAAgB;QAAE,OAAO,qBAAqB,CAAC;IAChG,OAAO,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,IAAY,EACZ,QAA4B,EAC5B,KAAY,EACZ,UAAmB;IAEnB,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC;IACxD,IAAI,KAAK,EAAE,CAAC;QACV,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,WAAW,IAAI,aAAa,KAAK,CAAC,QAAQ,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;IACjF,CAAC;IACD,MAAM,KAAK,GAAG,eAAe,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC9C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;IAClD,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,EAAE,GAAG,CAAC,CAAC;IACX,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,cAAc,CAAC,CAAC,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;QACtE,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC;IACb,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;AAC7D,CAAC;AASD,SAAS,OAAO,CAAyB,IAAqB;IAC5D,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,eAAe,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;AACpF,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,IAAI,CACxB,KAAkC,EAClC,GAAM,EACN,QAA4B,EAC5B,KAAK,GAAU,IAAI,KAAK,EAAE,EAC1B,OAAO,GAAgB,EAAE;IAEzB,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;IAClC,MAAM,UAAU,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IACxE,MAAM,MAAM,GAAe;QACzB,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,MAAM,EAAE,OAAO;QACf,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QACrC,OAAO,EAAE,KAAK;QACd,IAAI,EAAE,EAAE;QACR,KAAK;QACL,UAAU,EAAE,CAAC;QACb,SAAS,EAAE,CAAC;KACb,CAAC;IACF,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrD,MAAM,CAAC,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;QAC/C,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,MAAM,YAAY,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAClF,MAAM,eAAe,GAAG,CAAC,OAAO,CAAC,gBAAgB,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAE1F,MAAM,IAAI,GAAG,IAAI,GAAG,EAA8B,CAAC;IACnD,MAAM,MAAM,GAAG,CAAC,IAAqB,EAAE,KAAa,EAAE,EAAE;QACtD,MAAM,GAAG,GAAG,GAAG,KAAK,SAAS,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7C,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACtB,IAAI,CAAC,CAAC,EAAE,CAAC;YACP,kFAAkF;YAClF,CAAC,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,IAAI,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC;YACtF,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACnB,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC,CAAC;IAEF,MAAM,QAAQ,GAAqB,EAAE,CAAC;IACtC,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC;QACpC,MAAM,OAAO,GAAG,QAAQ;aACrB,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;aACzB,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;aAC9E,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;QACrB,MAAM,OAAO,GAAmB,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC;QAC/D,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChC,8FAA8F;YAC9F,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;gBACjF,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACzB,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO;gBAAE,MAAM;YACnC,SAAS;QACX,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAC3C,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAChE,CAAC;QACF,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAC/C,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,IAAI,CAAC,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;gBAC5B,OAAO,CAAC,MAAM,GAAI,CAAC,CAAC,MAAgB,EAAE,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;gBAClE,SAAS;YACX,CAAC;YACD,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YACzC,MAAM,IAAI,GAAG,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACpD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC5B,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QACzC,CAAC;QACD,IAAI,OAAO,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM;YAAE,SAAS;QAC9D,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACvB,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,IAAI,OAAO,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC;YAAE,MAAM;IACnE,CAAC;IAED,gEAAgE;IAChE,MAAM,eAAe,GAAG,IAAI,GAAG,EAAwD,CAAC;IACxF,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;QACnB,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,QAAQ,IAAI,MAAM,CAAC;QAClD,IAAI,MAAM,GAAoB,IAAI,CAAC,MAAM,CAAC;QAC1C,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;gBACf,MAAM,EAAE,IAAI,CAAC,EAAE;gBACf,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAE,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK;gBAC/C,QAAQ,EAAE,gBAAgB;gBAC1B,QAAQ,EAAE,4BAA4B;gBACtC,KAAK,EAAE,CAAC;gBACR,KAAK,EAAE,CAAC;gBACR,MAAM,EAAE,EAAE;gBACV,KAAK,EAAE,IAAI;gBACX,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;gBAC7B,QAAQ;aACT,CAAC,CAAC;YACH,IAAI,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC;gBAAE,MAAM,GAAG,OAAO,CAAC;iBACjE,IAAI,CAAC,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC;gBAAE,SAAS;QAC5C,CAAC;QACD,MAAM,WAAW,GACf,CAAC,MAAM,KAAK,OAAO,IAAI,MAAM,KAAK,SAAS,CAAC;YAC5C,CAAC,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC;YACpB,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,KAAK,CAAC,CAAC;QACrE,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,GAAG,QAAQ,CAAC;YAClB,KAAK,MAAM,CAAC,CAAC,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,CAAC;gBACxC,MAAM,KAAK,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;gBAC5E,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC;gBACjC,eAAe,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;YAChC,CAAC;QACH,CAAC;QACD,IAAI,eAAe,CAAC,MAAM,CAAC,GAAG,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YAC7D,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC;YACvB,IAAI,MAAM,KAAK,OAAO,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC/C,MAAM,CAAC,QAAQ,GAAG;oBAChB,EAAE,EAAE,IAAI,CAAC,EAAE;oBACX,IAAI;oBACJ,OAAO,EACL,IAAI,CAAC,OAAO,EAAE,OAAO;wBACrB,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC;4BACjC,CAAC,CAAC,GAAG,YAAY,mCAAmC;4BACpD,CAAC,CAAC,MAAM,KAAK,SAAS;gCACpB,CAAC,CAAC,CAAC,OAAO,CAAC,eAAe,IAAI,wBAAwB,CAAC;gCACvD,CAAC,CAAC,YAAY,CAAC;iBACtB,CAAC;YACJ,CAAC;QACH,CAAC;QACD,IAAI,CAAC,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1D,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;gBACf,MAAM,EAAE,IAAI,CAAC,EAAE;gBACf,QAAQ,EAAE,IAAI;gBACd,MAAM;gBACN,QAAQ,EAAE,OAAO;gBACjB,QAAQ,EAAE,aAAa;gBACvB,KAAK,EAAE,CAAC;gBACR,KAAK,EAAE,CAAC;gBACR,MAAM,EAAE,EAAE;gBACV,KAAK,EAAE,IAAI;aACZ,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,6FAA6F;QAC7F,MAAM,OAAO,GAAG,IAAI,GAAG,EAAoB,CAAC;QAC5C,KAAK,MAAM,CAAC,CAAC,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,CAAC;YACxC,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;gBACzB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI;oBACrC,MAAM,EAAE,IAAI,CAAC,EAAE;oBACf,QAAQ,EAAE,IAAI;oBACd,MAAM;oBACN,QAAQ,EAAE,CAAC,CAAC,QAAQ;oBACpB,QAAQ,EAAE,CAAC,CAAC,QAAQ;oBACpB,KAAK,EAAE,CAAC;oBACR,KAAK,EAAE,CAAC;oBACR,MAAM,EAAE,EAAE;oBACV,KAAK,EAAE,KAAK;iBACb,CAAC;gBACF,GAAG,CAAC,KAAK,EAAE,CAAC;gBACZ,GAAG,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;gBACzC,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,EAAE;oBACpE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;gBAC3B,IAAI,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,KAAK;oBAAE,GAAG,CAAC,KAAK,GAAG,IAAI,CAAC;gBACnD,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;YAC/B,CAAC;YACD,IAAI,MAAM,KAAK,QAAQ,IAAI,CAAC,WAAW,EAAE,CAAC;gBACxC,MAAM,KAAK,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;gBAC5E,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC;gBACjC,KAAK,CAAC,UAAU,KAAK,eAAe,IAAI,IAAI,CAAC,OAAO,EAAE,OAAO,KAAK,KAAK,CAAC;gBACxE,eAAe,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;YAChC,CAAC;QACH,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACxC,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC7D,KAAK,MAAM,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,IAAI,eAAe,EAAE,CAAC;YAC5D,MAAM,QAAQ,GAAG,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC;YACzC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,eAAe,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;YAC/E,IAAI,KAAK,GAAG,CAAC,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACnC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;gBAC1B,MAAM,CAAC,UAAU,IAAI,KAAK,CAAC;gBAC3B,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;YACxB,CAAC;QACH,CAAC;IACH,CAAC;IACD,MAAM,CAAC,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;IAC/C,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/src/guardrails/glob.d.ts

@@ -0,0 +1,4 @@
+/** Minimal glob: `*` matches any run of characters, `?` a single one. Case-sensitive. */
+export declare function globToRegExp(pattern: string): RegExp;
+export declare function matchesAny(value: string, patterns: readonly string[] | undefined): boolean;
+//# sourceMappingURL=glob.d.ts.map

package/dist/src/guardrails/glob.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"glob.d.ts","sourceRoot":"","sources":["../../../src/guardrails/glob.ts"],"names":[],"mappings":"AAEA,yFAAyF;AACzF,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAWpD;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,GAAG,OAAO,CAG1F"}

package/dist/src/guardrails/glob.js

@@ -0,0 +1,20 @@
+const cache = new Map();
+/** Minimal glob: `*` matches any run of characters, `?` a single one. Case-sensitive. */
+export function globToRegExp(pattern) {
+    let re = cache.get(pattern);
+    if (!re) {
+        const body = pattern
+            .replace(/[.+^${}()|[\]\\]/g, '\\$&')
+            .replace(/\*/g, '.*')
+            .replace(/\?/g, '.');
+        re = new RegExp(`^${body}$`);
+        cache.set(pattern, re);
+    }
+    return re;
+}
+export function matchesAny(value, patterns) {
+    if (!patterns || patterns.length === 0)
+        return true;
+    return patterns.some((p) => globToRegExp(p).test(value));
+}
+//# sourceMappingURL=glob.js.map

package/dist/src/guardrails/glob.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"glob.js","sourceRoot":"","sources":["../../../src/guardrails/glob.ts"],"names":[],"mappings":"AAAA,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;AAExC,yFAAyF;AACzF,MAAM,UAAU,YAAY,CAAC,OAAe;IAC1C,IAAI,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC5B,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,MAAM,IAAI,GAAG,OAAO;aACjB,OAAO,CAAC,mBAAmB,EAAE,MAAM,CAAC;aACpC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC;aACpB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACvB,EAAE,GAAG,IAAI,MAAM,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC;QAC7B,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAAa,EAAE,QAAuC;IAC/E,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpD,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;AAC3D,CAAC"}

package/dist/src/guardrails/index.d.ts

@@ -0,0 +1,20 @@
+/**
+ * `@adonis-agora/agent/guardrails` — PII, secret, prompt-injection and tool-poisoning detection, a
+ * rule engine with reversible redaction, and the adapter onto the agent loop's processor seams.
+ *
+ * A port of `@dudousxd/nestjs-agent-core/guardrails` (the reference implementation, see PARITY.md):
+ * the detectors and the engine are the same code. The provider wire-format helpers and the SSE
+ * `StreamGuard` live only there, since nothing in this package proxies raw provider traffic.
+ */
+export { type AgentGuardContext, createGuardrails, GuardrailBlockedError, type GuardrailEvent, type GuardrailEventHit, type GuardrailRulesSource, Guardrails, type GuardrailsOptions, type InjectionShorthand, InMemoryVaultStore, type PiiShorthand, type SecretsShorthand, screenToolDefinition, shorthandRules, type ToolPoisoningShorthand, type VaultStore, } from './agent.js';
+export { compileGuardPattern, detectKeywords, detectRegex, fold } from './detectors/custom.js';
+export { decodeTagChars, INJECTION_SIGNALS, type InjectionResult, type Signal, scoreInjection, } from './detectors/injection.js';
+export { cardBrand, cnpjValid, cpfValid, detectPii, ibanValid, isIPv4, luhnValid, phoneValid, ssnValid, } from './detectors/pii.js';
+export { detectSecrets, entropy } from './detectors/secrets.js';
+export { type PoisoningResult, scoreToolText, type ToolDefinitionText, toolText, } from './detectors/tool-poisoning.js';
+export { applyRedactions, DEFAULT_APPROVAL_MESSAGE, DEFAULT_MESSAGES, type GuardHit, INJECTION_REPLACEMENT, orderRules, resolveOverlaps, ruleApplies, runDetector, type ScanOptions, type ScanResult, scan, spanLocator, } from './engine.js';
+export { globToRegExp, matchesAny } from './glob.js';
+export { jsonSlots, type Slot } from './segments.js';
+export { ACTION_SEVERITY, type CustomDetector, type DetectorKind, type DetectorSpec, type Finding, GUARDRAIL_STAGES, type GuardContext, type GuardrailAction, type GuardrailMatch, type GuardrailOptions, type GuardrailRule, type GuardrailStage, PII_TYPES, type PiiType, SECRET_TYPES, type SecretType, type Segment, type SegmentSource, } from './types.js';
+export { labelFor, Vault, type VaultSnapshot } from './vault.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/src/guardrails/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/guardrails/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EACL,KAAK,iBAAiB,EACtB,gBAAgB,EAChB,qBAAqB,EACrB,KAAK,cAAc,EACnB,KAAK,iBAAiB,EACtB,KAAK,oBAAoB,EACzB,UAAU,EACV,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACvB,kBAAkB,EAClB,KAAK,YAAY,EACjB,KAAK,gBAAgB,EACrB,oBAAoB,EACpB,cAAc,EACd,KAAK,sBAAsB,EAC3B,KAAK,UAAU,GAChB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,uBAAuB,CAAC;AAC/F,OAAO,EACL,cAAc,EACd,iBAAiB,EACjB,KAAK,eAAe,EACpB,KAAK,MAAM,EACX,cAAc,GACf,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,SAAS,EACT,SAAS,EACT,QAAQ,EACR,SAAS,EACT,SAAS,EACT,MAAM,EACN,SAAS,EACT,UAAU,EACV,QAAQ,GACT,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AAChE,OAAO,EACL,KAAK,eAAe,EACpB,aAAa,EACb,KAAK,kBAAkB,EACvB,QAAQ,GACT,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,eAAe,EACf,wBAAwB,EACxB,gBAAgB,EAChB,KAAK,QAAQ,EACb,qBAAqB,EACrB,UAAU,EACV,eAAe,EACf,WAAW,EACX,WAAW,EACX,KAAK,WAAW,EAChB,KAAK,UAAU,EACf,IAAI,EACJ,WAAW,GACZ,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACrD,OAAO,EAAE,SAAS,EAAE,KAAK,IAAI,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,EACL,eAAe,EACf,KAAK,cAAc,EACnB,KAAK,YAAY,EACjB,KAAK,YAAY,EACjB,KAAK,OAAO,EACZ,gBAAgB,EAChB,KAAK,YAAY,EACjB,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACrB,KAAK,aAAa,EAClB,KAAK,cAAc,EACnB,SAAS,EACT,KAAK,OAAO,EACZ,YAAY,EACZ,KAAK,UAAU,EACf,KAAK,OAAO,EACZ,KAAK,aAAa,GACnB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,aAAa,EAAE,MAAM,YAAY,CAAC"}

package/dist/src/guardrails/index.js

@@ -0,0 +1,20 @@
+/**
+ * `@adonis-agora/agent/guardrails` — PII, secret, prompt-injection and tool-poisoning detection, a
+ * rule engine with reversible redaction, and the adapter onto the agent loop's processor seams.
+ *
+ * A port of `@dudousxd/nestjs-agent-core/guardrails` (the reference implementation, see PARITY.md):
+ * the detectors and the engine are the same code. The provider wire-format helpers and the SSE
+ * `StreamGuard` live only there, since nothing in this package proxies raw provider traffic.
+ */
+export { createGuardrails, GuardrailBlockedError, Guardrails, InMemoryVaultStore, screenToolDefinition, shorthandRules, } from './agent.js';
+export { compileGuardPattern, detectKeywords, detectRegex, fold } from './detectors/custom.js';
+export { decodeTagChars, INJECTION_SIGNALS, scoreInjection, } from './detectors/injection.js';
+export { cardBrand, cnpjValid, cpfValid, detectPii, ibanValid, isIPv4, luhnValid, phoneValid, ssnValid, } from './detectors/pii.js';
+export { detectSecrets, entropy } from './detectors/secrets.js';
+export { scoreToolText, toolText, } from './detectors/tool-poisoning.js';
+export { applyRedactions, DEFAULT_APPROVAL_MESSAGE, DEFAULT_MESSAGES, INJECTION_REPLACEMENT, orderRules, resolveOverlaps, ruleApplies, runDetector, scan, spanLocator, } from './engine.js';
+export { globToRegExp, matchesAny } from './glob.js';
+export { jsonSlots } from './segments.js';
+export { ACTION_SEVERITY, GUARDRAIL_STAGES, PII_TYPES, SECRET_TYPES, } from './types.js';
+export { labelFor, Vault } from './vault.js';
+//# sourceMappingURL=index.js.map

package/dist/src/guardrails/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/guardrails/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAEL,gBAAgB,EAChB,qBAAqB,EAIrB,UAAU,EAGV,kBAAkB,EAGlB,oBAAoB,EACpB,cAAc,GAGf,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,uBAAuB,CAAC;AAC/F,OAAO,EACL,cAAc,EACd,iBAAiB,EAGjB,cAAc,GACf,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,SAAS,EACT,SAAS,EACT,QAAQ,EACR,SAAS,EACT,SAAS,EACT,MAAM,EACN,SAAS,EACT,UAAU,EACV,QAAQ,GACT,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AAChE,OAAO,EAEL,aAAa,EAEb,QAAQ,GACT,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,eAAe,EACf,wBAAwB,EACxB,gBAAgB,EAEhB,qBAAqB,EACrB,UAAU,EACV,eAAe,EACf,WAAW,EACX,WAAW,EAGX,IAAI,EACJ,WAAW,GACZ,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACrD,OAAO,EAAE,SAAS,EAAa,MAAM,eAAe,CAAC;AACrD,OAAO,EACL,eAAe,EAKf,gBAAgB,EAOhB,SAAS,EAET,YAAY,GAIb,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAsB,MAAM,YAAY,CAAC"}

package/dist/src/guardrails/segments.d.ts

@@ -0,0 +1,14 @@
+import type { Segment, SegmentSource } from './types.js';
+/**
+ * Text slots of structured values (tool arguments, tool results): each slot is a piece of text to
+ * scan plus a setter that writes the (redacted / restored) text back in place.
+ */
+export interface Slot {
+    segment: Segment;
+    set(text: string): void;
+    /** The text lives inside a JSON document (tool-call arguments): restored values are escaped. */
+    json?: boolean;
+}
+/** String leaves of a JSON value (tool arguments, structured results). */
+export declare function jsonSlots(root: unknown, source: SegmentSource, fresh: boolean, replaceRoot?: (v: string) => void): Slot[];
+//# sourceMappingURL=segments.d.ts.map

package/dist/src/guardrails/segments.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"segments.d.ts","sourceRoot":"","sources":["../../../src/guardrails/segments.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAEzD;;;GAGG;AACH,MAAM,WAAW,IAAI;IACnB,OAAO,EAAE,OAAO,CAAC;IACjB,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,gGAAgG;IAChG,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAID,0EAA0E;AAC1E,wBAAgB,SAAS,CACvB,IAAI,EAAE,OAAO,EACb,MAAM,EAAE,aAAa,EACrB,KAAK,EAAE,OAAO,EACd,WAAW,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,IAAI,GAChC,IAAI,EAAE,CAkCR"}

package/dist/src/guardrails/segments.js

@@ -0,0 +1,32 @@
+const MAX_SLOTS = 2_000;
+/** String leaves of a JSON value (tool arguments, structured results). */
+export function jsonSlots(root, source, fresh, replaceRoot) {
+    const out = [];
+    const walk = (value, set, depth) => {
+        if (out.length >= MAX_SLOTS || depth > 10)
+            return;
+        if (typeof value === 'string') {
+            if (value)
+                out.push({ segment: { text: value, source, fresh }, set });
+            return;
+        }
+        if (Array.isArray(value)) {
+            for (let i = 0; i < value.length; i++) {
+                walk(value[i], (t) => {
+                    value[i] = t;
+                }, depth + 1);
+            }
+            return;
+        }
+        if (value && typeof value === 'object') {
+            const o = value;
+            for (const k of Object.keys(o))
+                walk(o[k], (t) => {
+                    o[k] = t;
+                }, depth + 1);
+        }
+    };
+    walk(root, replaceRoot ?? (() => undefined), 0);
+    return out;
+}
+//# sourceMappingURL=segments.js.map

package/dist/src/guardrails/segments.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"segments.js","sourceRoot":"","sources":["../../../src/guardrails/segments.ts"],"names":[],"mappings":"AAaA,MAAM,SAAS,GAAG,KAAK,CAAC;AAExB,0EAA0E;AAC1E,MAAM,UAAU,SAAS,CACvB,IAAa,EACb,MAAqB,EACrB,KAAc,EACd,WAAiC;IAEjC,MAAM,GAAG,GAAW,EAAE,CAAC;IACvB,MAAM,IAAI,GAAG,CAAC,KAAc,EAAE,GAAwB,EAAE,KAAa,EAAE,EAAE;QACvE,IAAI,GAAG,CAAC,MAAM,IAAI,SAAS,IAAI,KAAK,GAAG,EAAE;YAAE,OAAO;QAClD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,IAAI,KAAK;gBAAE,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;YACtE,OAAO;QACT,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACtC,IAAI,CACF,KAAK,CAAC,CAAC,CAAC,EACR,CAAC,CAAC,EAAE,EAAE;oBACJ,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;gBACf,CAAC,EACD,KAAK,GAAG,CAAC,CACV,CAAC;YACJ,CAAC;YACD,OAAO;QACT,CAAC;QACD,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACvC,MAAM,CAAC,GAAG,KAAgC,CAAC;YAC3C,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;gBAC5B,IAAI,CACF,CAAC,CAAC,CAAC,CAAC,EACJ,CAAC,CAAC,EAAE,EAAE;oBACJ,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;gBACX,CAAC,EACD,KAAK,GAAG,CAAC,CACV,CAAC;QACN,CAAC;IACH,CAAC,CAAC;IACF,IAAI,CAAC,IAAI,EAAE,WAAW,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;IAChD,OAAO,GAAG,CAAC;AACb,CAAC"}