@agenttrail/guardrails 0.2.5 → 0.2.7

package/dist/guardrails.d.cts

@@ -1,5 +1,5 @@
-import { M as MatchCondition, F as Fixture, R as Rule } from './schema-B2pYoi9Z.cjs';
-export { A as Action, a as FixtureInput, b as Fixtures, c as Match, O as OWASP_AGENTIC, d as OWASP_IDS, e as OWASP_LLM, f as OWASP_SOURCES, g as OwaspId, h as OwaspRisk, i as RuleInput, S as Severity, j as isOwaspId, o as owaspIndex, k as owaspTitle } from './schema-B2pYoi9Z.cjs';
+import { M as MatchCondition, F as Fixture, R as Rule } from './schema-DmT-Vm1T.cjs';
+export { A as Action, a as FixtureInput, b as Fixtures, c as Match, O as OWASP_AGENTIC, d as OWASP_IDS, e as OWASP_LLM, f as OWASP_SOURCES, g as OwaspId, h as OwaspRisk, i as RuleInput, S as Severity, j as isOwaspId, o as owaspIndex, k as owaspTitle } from './schema-DmT-Vm1T.cjs';
 import 'zod';
 
 /**
@@ -360,7 +360,7 @@ declare function mentions(text: string): Fixture[];
  * Pinned to `package.json`'s `version` by `__tests__/stamp.test.ts` — this is a copy
  * of that value, not an independent one, and the test is what makes the copy safe.
  */
-declare const CATALOG_VERSION = "0.2.5";
+declare const CATALOG_VERSION = "0.2.7";
 /**
  * When the guardrails in this catalog reached their current state, as an ISO-8601
  * instant. The question it answers is not "when did this reach a registry" but "how
@@ -370,7 +370,7 @@ declare const CATALOG_VERSION = "0.2.5";
  * the guard handles a missing date, and a wrong date that looks right is worse than
  * a missing one.
  */
-declare const CATALOG_PUBLISHED_AT = "2026-10-22T11:20:35Z";
+declare const CATALOG_PUBLISHED_AT = "2026-11-06T07:10:34Z";
 
 /**
  * The corpus itself — guardrails only, and **deliberately free of zod**.

package/dist/guardrails.d.ts

@@ -1,5 +1,5 @@
-import { M as MatchCondition, F as Fixture, R as Rule } from './schema-B2pYoi9Z.js';
-export { A as Action, a as FixtureInput, b as Fixtures, c as Match, O as OWASP_AGENTIC, d as OWASP_IDS, e as OWASP_LLM, f as OWASP_SOURCES, g as OwaspId, h as OwaspRisk, i as RuleInput, S as Severity, j as isOwaspId, o as owaspIndex, k as owaspTitle } from './schema-B2pYoi9Z.js';
+import { M as MatchCondition, F as Fixture, R as Rule } from './schema-DmT-Vm1T.js';
+export { A as Action, a as FixtureInput, b as Fixtures, c as Match, O as OWASP_AGENTIC, d as OWASP_IDS, e as OWASP_LLM, f as OWASP_SOURCES, g as OwaspId, h as OwaspRisk, i as RuleInput, S as Severity, j as isOwaspId, o as owaspIndex, k as owaspTitle } from './schema-DmT-Vm1T.js';
 import 'zod';
 
 /**
@@ -360,7 +360,7 @@ declare function mentions(text: string): Fixture[];
  * Pinned to `package.json`'s `version` by `__tests__/stamp.test.ts` — this is a copy
  * of that value, not an independent one, and the test is what makes the copy safe.
  */
-declare const CATALOG_VERSION = "0.2.5";
+declare const CATALOG_VERSION = "0.2.7";
 /**
  * When the guardrails in this catalog reached their current state, as an ISO-8601
  * instant. The question it answers is not "when did this reach a registry" but "how
@@ -370,7 +370,7 @@ declare const CATALOG_VERSION = "0.2.5";
  * the guard handles a missing date, and a wrong date that looks right is worse than
  * a missing one.
  */
-declare const CATALOG_PUBLISHED_AT = "2026-10-22T11:20:35Z";
+declare const CATALOG_PUBLISHED_AT = "2026-11-06T07:10:34Z";
 
 /**
  * The corpus itself — guardrails only, and **deliberately free of zod**.

package/dist/guardrails.js

@@ -23,7 +23,7 @@ import {
   mentions,
   pwsh,
   rulesForPack
-} from "./chunk-SLJLCAZK.js";
+} from "./chunk-3BH4CH3D.js";
 import {
   OWASP_AGENTIC,
   OWASP_IDS,

package/dist/index.cjs

@@ -24,6 +24,8 @@ __export(src_exports, {
   ActionSchema: () => ActionSchema,
   CATALOG_PUBLISHED_AT: () => CATALOG_PUBLISHED_AT,
   CATALOG_VERSION: () => CATALOG_VERSION,
+  CHANNELS: () => CHANNELS,
+  ChannelSchema: () => ChannelSchema,
   DETAIL_MATCHES_MAX_PATTERNS: () => DETAIL_MATCHES_MAX_PATTERNS,
   DETAIL_MATCHES_MAX_PATTERN_LENGTH: () => DETAIL_MATCHES_MAX_PATTERN_LENGTH,
   FixtureSchema: () => FixtureSchema,
@@ -4058,8 +4060,8 @@ function owaspTitle(id) {
 }
 
 // src/stamp.ts
-var CATALOG_VERSION = "0.2.5";
-var CATALOG_PUBLISHED_AT = "2026-10-22T11:20:35Z";
+var CATALOG_VERSION = "0.2.7";
+var CATALOG_PUBLISHED_AT = "2026-11-06T07:10:34Z";
 
 // src/rules.ts
 var RULES_BY_PACK = {
@@ -4166,14 +4168,23 @@ var DetailMatchPatternSchema = import_zod.z.string().min(1).max(DETAIL_MATCHES_M
     });
   }
 });
+var CHANNELS = ["command", "content"];
+var ChannelSchema = import_zod.z.enum(CHANNELS);
 var MatchConditionSchema = import_zod.z.object({
   kind: import_zod.z.string().min(1),
   label: import_zod.z.string().min(1).optional(),
   detail_contains: import_zod.z.array(import_zod.z.string().min(1)).min(1).optional(),
   detail_matches: import_zod.z.array(DetailMatchPatternSchema).min(1).max(DETAIL_MATCHES_MAX_PATTERNS).optional(),
-  file_glob: import_zod.z.string().min(1).optional()
+  file_glob: import_zod.z.string().min(1).optional(),
+  channel: ChannelSchema.optional()
 }).strict().superRefine((condition, ctx) => {
   const hasCommandMatcher = condition.detail_contains !== void 0 || condition.detail_matches !== void 0;
+  if (condition.channel !== void 0 && !hasCommandMatcher) {
+    ctx.addIssue({
+      code: import_zod.z.ZodIssueCode.custom,
+      message: "`channel` says which text detail_contains / detail_matches read, so a condition carrying it needs one of them"
+    });
+  }
   if (hasCommandMatcher && condition.file_glob !== void 0) {
     ctx.addIssue({
       code: import_zod.z.ZodIssueCode.custom,