@agenttrail/guardrails 0.2.5 → 0.2.7

package/README.md

@@ -348,6 +348,9 @@ Guardrails are meant to be contributed. The bar is not "clever regex"; it is **d
 thing, and stay quiet on the near-miss**.
 
 **1. Write it**, following the shape above. Give it a `description` that says what it misses.
+If you already use it with the guard, `agenttrail-guard guardrails export <id>` writes it in
+this library's format; [Submit a guardrail](CONTRIBUTING.md#submit-a-guardrail) walks through
+it.
 
 **2. Check the shape locally:**
 
@@ -398,8 +401,9 @@ so the guardrail matches nothing, forever, with no error anywhere. Write a singl
 
 ### Ready to open a pull request?
 
-[CONTRIBUTING.md](CONTRIBUTING.md) has a pre-submission checklist, local build and test
-commands, and where to report what. Please follow the [Code of Conduct](CODE_OF_CONDUCT.md),
+[CONTRIBUTING.md](CONTRIBUTING.md) walks through
+[submitting a guardrail](CONTRIBUTING.md#submit-a-guardrail) step by step, and has a
+pre-submission checklist, local build and test commands, and where to report what. Please follow the [Code of Conduct](CODE_OF_CONDUCT.md),
 and report vulnerabilities privately as described in [SECURITY.md](SECURITY.md).
 
 ## Stability and versioning
@@ -485,6 +489,11 @@ follow from that:
    merely *names* a command in a text field (`{"title":"fix the rm -rf / bug"}`) is matched the same
    as one that runs it; a JSON blob cannot be told apart from a shell-running MCP server.
 
+A condition can say which text it reads with `channel`: `command` (the text a call runs) or `content`
+(the call's whole input). When it is omitted the channel is `command`, unless the condition's `label`
+starts with `mcp__`, which makes it `content`. A condition carrying `channel` needs `detail_contains` or
+`detail_matches`. Versions up to and including 0.2.6 reject the field.
+
 File guardrails match by path on whichever file tool a client uses. No guardrail is shell-only by design; a
 guardrail that does not reach the MCP channel does so because its pattern, not its label, does not match
 the serialized shape.

package/dist/{chunk-SLJLCAZK.js → chunk-3BH4CH3D.js}

@@ -3924,8 +3924,8 @@ function isPack(value) {
 }
 
 // src/stamp.ts
-var CATALOG_VERSION = "0.2.5";
-var CATALOG_PUBLISHED_AT = "2026-10-22T11:20:35Z";
+var CATALOG_VERSION = "0.2.7";
+var CATALOG_PUBLISHED_AT = "2026-11-06T07:10:34Z";
 
 // src/rules.ts
 var RULES_BY_PACK = {
@@ -3975,4 +3975,4 @@ export {
   getRule,
   rulesForPack
 };
-//# sourceMappingURL=chunk-SLJLCAZK.js.map
+//# sourceMappingURL=chunk-3BH4CH3D.js.map