@aid-framework/generator-ts-vercel 0.0.0 → 0.1.48

package/dist/emit/file.d.ts

@@ -0,0 +1,64 @@
+/**
+ * Where emitted files live.
+ *
+ * The three roots come from the manifest through `managedRoots`, never from a literal
+ * here, so the plan and `aid gen`'s ownership check cannot disagree about a path. The
+ * per-file paths are derived from those roots for the same reason.
+ *
+ * The one thing this target deliberately does *not* emit is `app/api/<path>/route.ts`.
+ * A7 asks for that shim "that Next actually serves", but `validatePlan` rejects any
+ * path outside the managed roots, and `parseAidManifest` would reject the resulting
+ * manifest on the next run: `ownerForPath` classifies by the first path segment, so
+ * `app/api/...` has no owner. Emitting it would be a hard CLI break, not a cosmetic
+ * deviation. The example therefore hand-writes a one-line re-export under `app/api/`
+ * and the generator emits the handler it delegates to, mirroring how the Python
+ * example hand-writes `app/main.py`. See the README.
+ */
+export declare const MANIFEST_PATH: string;
+export declare const GENERATED_ROOT: string;
+export declare const BUSINESS_ROOT: string;
+/** The manifest's `output.root`: the Next.js App Router directory. */
+export declare const APP_ROOT: string;
+export type FileOwner = 'generated' | 'business';
+export interface EmittedFile {
+    readonly path: string;
+    readonly content: string;
+    readonly owner: FileOwner;
+}
+/** The per-file paths, as one table so a test can assert the layout once. */
+export declare const paths: {
+    readonly generatedIndex: `${string}/index.ts`;
+    readonly schemas: `${string}/schemas.ts`;
+    readonly requests: `${string}/requests.ts`;
+    readonly deps: `${string}/deps.ts`;
+    readonly control: `${string}/control.ts`;
+    readonly guardrails: `${string}/guardrails.ts`;
+    readonly agents: `${string}/agents.ts`;
+    readonly observability: `${string}/observability.ts`;
+    readonly gatewayModels: `${string}/gateway/models.ts`;
+    readonly gatewayIndex: `${string}/gateway/index.ts`;
+    readonly toolsIndex: `${string}/tools/index.ts`;
+    readonly contractsIndex: `${string}/contracts/index.ts`;
+    readonly contractsCitations: `${string}/contracts/citations.ts`;
+    readonly promptsIndex: `${string}/prompts/index.ts`;
+    readonly pipelinesIndex: `${string}/pipelines/index.ts`;
+    readonly routesIndex: `${string}/routes/index.ts`;
+    readonly retrievalBindings: `${string}/retrieval/bindings.ts`;
+    readonly retrievalIndex: `${string}/retrieval/index.ts`;
+    readonly retrievalIngestIndex: `${string}/retrieval/ingest/index.ts`;
+    readonly evalsIndex: `${string}/evals/index.ts`;
+    readonly businessIndex: `${string}/index.ts`;
+    readonly businessToolsIndex: `${string}/tools/index.ts`;
+    readonly businessPromptsIndex: `${string}/prompts/index.ts`;
+};
+export declare function toolAdapterPath(tool: string): string;
+export declare function toolContractPath(tool: string): string;
+export declare function promptPath(prompt: string): string;
+export declare function pipelinePath(pipeline: string): string;
+export declare function routePath(pipeline: string): string;
+export declare function retrievalIngestModulePath(retriever: string): string;
+export declare function evalModulePath(evalId: string): string;
+export declare function businessToolPath(tool: string): string;
+export declare function generated(path: string, content: string): EmittedFile;
+export declare function business(path: string, content: string): EmittedFile;
+//# sourceMappingURL=file.d.ts.map

package/dist/emit/file.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file.d.ts","sourceRoot":"","sources":["../../src/emit/file.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAKH,eAAO,MAAM,aAAa,QAAoD,CAAC;AAC/E,eAAO,MAAM,cAAc,QAAgD,CAAC;AAC5E,eAAO,MAAM,aAAa,QAA+C,CAAC;AAE1E,sEAAsE;AACtE,eAAO,MAAM,QAAQ,QAAiC,CAAC;AAEvD,MAAM,MAAM,SAAS,GAAG,WAAW,GAAG,UAAU,CAAC;AAEjD,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;CAC3B;AAED,6EAA6E;AAC7E,eAAO,MAAM,KAAK;aAChB,cAAc;aACd,OAAO;aACP,QAAQ;aACR,IAAI;aACJ,OAAO;aACP,UAAU;aACV,MAAM;aACN,aAAa;aACb,aAAa;aACb,YAAY;aACZ,UAAU;aACV,cAAc;aACd,kBAAkB;aAClB,YAAY;aACZ,cAAc;aACd,WAAW;aACX,iBAAiB;aACjB,cAAc;aACd,oBAAoB;aACpB,UAAU;aACV,aAAa;aACb,kBAAkB;aAClB,oBAAoB;CACZ,CAAC;AAEX,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEpD;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAErD;AAED,wBAAgB,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAEjD;AAED,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAErD;AAED,wBAAgB,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAElD;AAED,wBAAgB,yBAAyB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAEnE;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAErD;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAErD;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,WAAW,CAEpE;AAED,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,WAAW,CAEnE"}

package/dist/emit/file.js

@@ -0,0 +1,80 @@
+/**
+ * Where emitted files live.
+ *
+ * The three roots come from the manifest through `managedRoots`, never from a literal
+ * here, so the plan and `aid gen`'s ownership check cannot disagree about a path. The
+ * per-file paths are derived from those roots for the same reason.
+ *
+ * The one thing this target deliberately does *not* emit is `app/api/<path>/route.ts`.
+ * A7 asks for that shim "that Next actually serves", but `validatePlan` rejects any
+ * path outside the managed roots, and `parseAidManifest` would reject the resulting
+ * manifest on the next run: `ownerForPath` classifies by the first path segment, so
+ * `app/api/...` has no owner. Emitting it would be a hard CLI break, not a cosmetic
+ * deviation. The example therefore hand-writes a one-line re-export under `app/api/`
+ * and the generator emits the handler it delegates to, mirroring how the Python
+ * example hand-writes `app/main.py`. See the README.
+ */
+import { managedRoots } from '@aid-framework/generator-sdk';
+import { TS_VERCEL_MANIFEST } from '../manifest.js';
+export const MANIFEST_PATH = managedRoots(TS_VERCEL_MANIFEST).manifestFilename;
+export const GENERATED_ROOT = managedRoots(TS_VERCEL_MANIFEST).generatedDir;
+export const BUSINESS_ROOT = managedRoots(TS_VERCEL_MANIFEST).businessDir;
+/** The manifest's `output.root`: the Next.js App Router directory. */
+export const APP_ROOT = TS_VERCEL_MANIFEST.output.root;
+/** The per-file paths, as one table so a test can assert the layout once. */
+export const paths = {
+    generatedIndex: `${GENERATED_ROOT}/index.ts`,
+    schemas: `${GENERATED_ROOT}/schemas.ts`,
+    requests: `${GENERATED_ROOT}/requests.ts`,
+    deps: `${GENERATED_ROOT}/deps.ts`,
+    control: `${GENERATED_ROOT}/control.ts`,
+    guardrails: `${GENERATED_ROOT}/guardrails.ts`,
+    agents: `${GENERATED_ROOT}/agents.ts`,
+    observability: `${GENERATED_ROOT}/observability.ts`,
+    gatewayModels: `${GENERATED_ROOT}/gateway/models.ts`,
+    gatewayIndex: `${GENERATED_ROOT}/gateway/index.ts`,
+    toolsIndex: `${GENERATED_ROOT}/tools/index.ts`,
+    contractsIndex: `${GENERATED_ROOT}/contracts/index.ts`,
+    contractsCitations: `${GENERATED_ROOT}/contracts/citations.ts`,
+    promptsIndex: `${GENERATED_ROOT}/prompts/index.ts`,
+    pipelinesIndex: `${GENERATED_ROOT}/pipelines/index.ts`,
+    routesIndex: `${GENERATED_ROOT}/routes/index.ts`,
+    retrievalBindings: `${GENERATED_ROOT}/retrieval/bindings.ts`,
+    retrievalIndex: `${GENERATED_ROOT}/retrieval/index.ts`,
+    retrievalIngestIndex: `${GENERATED_ROOT}/retrieval/ingest/index.ts`,
+    evalsIndex: `${GENERATED_ROOT}/evals/index.ts`,
+    businessIndex: `${BUSINESS_ROOT}/index.ts`,
+    businessToolsIndex: `${BUSINESS_ROOT}/tools/index.ts`,
+    businessPromptsIndex: `${BUSINESS_ROOT}/prompts/index.ts`,
+};
+export function toolAdapterPath(tool) {
+    return `${GENERATED_ROOT}/tools/${tool}.ts`;
+}
+export function toolContractPath(tool) {
+    return `${GENERATED_ROOT}/contracts/${tool}.ts`;
+}
+export function promptPath(prompt) {
+    return `${GENERATED_ROOT}/prompts/${prompt}.ts`;
+}
+export function pipelinePath(pipeline) {
+    return `${GENERATED_ROOT}/pipelines/${pipeline}.ts`;
+}
+export function routePath(pipeline) {
+    return `${GENERATED_ROOT}/routes/${pipeline}.ts`;
+}
+export function retrievalIngestModulePath(retriever) {
+    return `${GENERATED_ROOT}/retrieval/ingest/${retriever}.ts`;
+}
+export function evalModulePath(evalId) {
+    return `${GENERATED_ROOT}/evals/${evalId}.ts`;
+}
+export function businessToolPath(tool) {
+    return `${BUSINESS_ROOT}/tools/${tool}.ts`;
+}
+export function generated(path, content) {
+    return { path, content, owner: 'generated' };
+}
+export function business(path, content) {
+    return { path, content, owner: 'business' };
+}
+//# sourceMappingURL=file.js.map

package/dist/emit/file.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file.js","sourceRoot":"","sources":["../../src/emit/file.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAC5D,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAEpD,MAAM,CAAC,MAAM,aAAa,GAAG,YAAY,CAAC,kBAAkB,CAAC,CAAC,gBAAgB,CAAC;AAC/E,MAAM,CAAC,MAAM,cAAc,GAAG,YAAY,CAAC,kBAAkB,CAAC,CAAC,YAAY,CAAC;AAC5E,MAAM,CAAC,MAAM,aAAa,GAAG,YAAY,CAAC,kBAAkB,CAAC,CAAC,WAAW,CAAC;AAE1E,sEAAsE;AACtE,MAAM,CAAC,MAAM,QAAQ,GAAG,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC;AAUvD,6EAA6E;AAC7E,MAAM,CAAC,MAAM,KAAK,GAAG;IACnB,cAAc,EAAE,GAAG,cAAc,WAAW;IAC5C,OAAO,EAAE,GAAG,cAAc,aAAa;IACvC,QAAQ,EAAE,GAAG,cAAc,cAAc;IACzC,IAAI,EAAE,GAAG,cAAc,UAAU;IACjC,OAAO,EAAE,GAAG,cAAc,aAAa;IACvC,UAAU,EAAE,GAAG,cAAc,gBAAgB;IAC7C,MAAM,EAAE,GAAG,cAAc,YAAY;IACrC,aAAa,EAAE,GAAG,cAAc,mBAAmB;IACnD,aAAa,EAAE,GAAG,cAAc,oBAAoB;IACpD,YAAY,EAAE,GAAG,cAAc,mBAAmB;IAClD,UAAU,EAAE,GAAG,cAAc,iBAAiB;IAC9C,cAAc,EAAE,GAAG,cAAc,qBAAqB;IACtD,kBAAkB,EAAE,GAAG,cAAc,yBAAyB;IAC9D,YAAY,EAAE,GAAG,cAAc,mBAAmB;IAClD,cAAc,EAAE,GAAG,cAAc,qBAAqB;IACtD,WAAW,EAAE,GAAG,cAAc,kBAAkB;IAChD,iBAAiB,EAAE,GAAG,cAAc,wBAAwB;IAC5D,cAAc,EAAE,GAAG,cAAc,qBAAqB;IACtD,oBAAoB,EAAE,GAAG,cAAc,4BAA4B;IACnE,UAAU,EAAE,GAAG,cAAc,iBAAiB;IAC9C,aAAa,EAAE,GAAG,aAAa,WAAW;IAC1C,kBAAkB,EAAE,GAAG,aAAa,iBAAiB;IACrD,oBAAoB,EAAE,GAAG,aAAa,mBAAmB;CACjD,CAAC;AAEX,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,OAAO,GAAG,cAAc,UAAU,IAAI,KAAK,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,OAAO,GAAG,cAAc,cAAc,IAAI,KAAK,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,MAAc;IACvC,OAAO,GAAG,cAAc,YAAY,MAAM,KAAK,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,QAAgB;IAC3C,OAAO,GAAG,cAAc,cAAc,QAAQ,KAAK,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,QAAgB;IACxC,OAAO,GAAG,cAAc,WAAW,QAAQ,KAAK,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,SAAiB;IACzD,OAAO,GAAG,cAAc,qBAAqB,SAAS,KAAK,CAAC;AAC9D,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,MAAc;IAC3C,OAAO,GAAG,cAAc,UAAU,MAAM,KAAK,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,OAAO,GAAG,aAAa,UAAU,IAAI,KAAK,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,IAAY,EAAE,OAAe;IACrD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,IAAY,EAAE,OAAe;IACpD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;AAC9C,CAAC"}

package/dist/emit/guardrails.d.ts

@@ -0,0 +1,45 @@
+/**
+ * `app/generated/guardrails.ts`: the spec's guardrails, and the check that runs them.
+ *
+ * The runtime ships the engine (`GuardrailEngine`); this module is wiring, not
+ * semantics. Each IR declaration becomes one `GuardrailDefinition` -- a value the runtime
+ * evaluates -- and the two functions below are the whole of what the generated code adds:
+ * log what fired, refuse what must stop, and hand back the verdict whose payload the
+ * caller is allowed to use.
+ *
+ * ## Every declaration applies to every route
+ *
+ * The IR attaches a guardrail to a *prompt* or an *agent*; a `PipelineShape` has no
+ * `guardrails` field, and the gate that requires an `input` stage for a `specVersion`
+ * >= 0.2 HTTP `generate` route is document-global. So there is no reference a per-pipeline
+ * attachment could come from, and the honest reading is the only one available: an `input`
+ * guardrail inspects the prompt text of every HTTP `generate` route in this app, and an
+ * `input` guardrail an agent declares inspects pipeline input too.
+ *
+ * A `guard` *step* is the one exception, and it is the opposite case: the step names a
+ * guardrail and a stage, so it runs that declaration alone through `BY_ID` instead of
+ * running the stage's whole table. That is why `BY_ID` is exported here.
+ *
+ * ## What a stage's payload is
+ *
+ * `{ text }` for `input`, `output` and `retrieval`; the tool's own arguments for
+ * `tool-call`. That is the runtime's shape, and it is why a `redact` action has to name
+ * `text` on the first three -- the validator refuses anything else at plan time.
+ */
+import type { GuardrailShape, IR } from '@aid-framework/ir';
+import { type EmittedFile } from './file.js';
+/** The stages a declaration may name, in the order the runtime lists them. */
+export declare const STAGES: readonly ['input', 'output', 'retrieval', 'tool-call'];
+export type GuardrailStage = (typeof STAGES)[number];
+/** The module constant holding one stage's declarations. */
+export declare function stageTable(stage: GuardrailStage): string;
+/** The declarations a stage runs, in id order. */
+export declare function stageGuardrails(ir: IR, stage: GuardrailStage): GuardrailShape[];
+/** The declarations the spec makes, in id order. */
+export declare function orderedGuardrails(ir: IR): GuardrailShape[];
+/** Whether this app declares a guardrail at all, which is what decides the file. */
+export declare function hasGuardrails(ir: IR): boolean;
+/** Whether any declaration names this stage. */
+export declare function usesStage(ir: IR, stage: GuardrailStage): boolean;
+export declare function emitGuardrails(ir: IR): EmittedFile;
+//# sourceMappingURL=guardrails.d.ts.map

package/dist/emit/guardrails.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"guardrails.d.ts","sourceRoot":"","sources":["../../src/emit/guardrails.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,EAAE,EAAE,MAAM,mBAAmB,CAAC;AAG5D,OAAO,EAAE,KAAK,WAAW,EAAoB,MAAM,WAAW,CAAC;AAU/D,8EAA8E;AAC9E,eAAO,MAAM,MAAM,YAAI,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,CAAU,CAAC;AAC7E,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC;AAErD,4DAA4D;AAC5D,wBAAgB,UAAU,CAAC,KAAK,EAAE,cAAc,GAAG,MAAM,CAExD;AAED,kDAAkD;AAClD,wBAAgB,eAAe,CAAC,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,cAAc,GAAG,cAAc,EAAE,CAE/E;AAED,oDAAoD;AACpD,wBAAgB,iBAAiB,CAAC,EAAE,EAAE,EAAE,GAAG,cAAc,EAAE,CAE1D;AAED,oFAAoF;AACpF,wBAAgB,aAAa,CAAC,EAAE,EAAE,EAAE,GAAG,OAAO,CAE7C;AAED,gDAAgD;AAChD,wBAAgB,SAAS,CAAC,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,cAAc,GAAG,OAAO,CAEhE;AAmGD,wBAAgB,cAAc,CAAC,EAAE,EAAE,EAAE,GAAG,WAAW,CAmElD"}

package/dist/emit/guardrails.js

@@ -0,0 +1,192 @@
+/**
+ * `app/generated/guardrails.ts`: the spec's guardrails, and the check that runs them.
+ *
+ * The runtime ships the engine (`GuardrailEngine`); this module is wiring, not
+ * semantics. Each IR declaration becomes one `GuardrailDefinition` -- a value the runtime
+ * evaluates -- and the two functions below are the whole of what the generated code adds:
+ * log what fired, refuse what must stop, and hand back the verdict whose payload the
+ * caller is allowed to use.
+ *
+ * ## Every declaration applies to every route
+ *
+ * The IR attaches a guardrail to a *prompt* or an *agent*; a `PipelineShape` has no
+ * `guardrails` field, and the gate that requires an `input` stage for a `specVersion`
+ * >= 0.2 HTTP `generate` route is document-global. So there is no reference a per-pipeline
+ * attachment could come from, and the honest reading is the only one available: an `input`
+ * guardrail inspects the prompt text of every HTTP `generate` route in this app, and an
+ * `input` guardrail an agent declares inspects pipeline input too.
+ *
+ * A `guard` *step* is the one exception, and it is the opposite case: the step names a
+ * guardrail and a stage, so it runs that declaration alone through `BY_ID` instead of
+ * running the stage's whole table. That is why `BY_ID` is exported here.
+ *
+ * ## What a stage's payload is
+ *
+ * `{ text }` for `input`, `output` and `retrieval`; the tool's own arguments for
+ * `tool-call`. That is the runtime's shape, and it is why a `redact` action has to name
+ * `text` on the first three -- the validator refuses anything else at plan time.
+ */
+import { stringLiteral } from '../names.js';
+import { generated, paths } from './file.js';
+import { arrayLiteral, compareNames, importStatement, moduleText, objectLiteral, } from './text.js';
+/** The stages a declaration may name, in the order the runtime lists them. */
+export const STAGES = ['input', 'output', 'retrieval', 'tool-call'];
+/** The module constant holding one stage's declarations. */
+export function stageTable(stage) {
+    return `${stage.replace('-', '_').toUpperCase()}_GUARDRAILS`;
+}
+/** The declarations a stage runs, in id order. */
+export function stageGuardrails(ir, stage) {
+    return orderedGuardrails(ir).filter((guardrail) => guardrail.stages.includes(stage));
+}
+/** The declarations the spec makes, in id order. */
+export function orderedGuardrails(ir) {
+    return [...(ir.guardrails ?? [])].sort((a, b) => compareNames(a.id, b.id));
+}
+/** Whether this app declares a guardrail at all, which is what decides the file. */
+export function hasGuardrails(ir) {
+    return orderedGuardrails(ir).length > 0;
+}
+/** Whether any declaration names this stage. */
+export function usesStage(ir, stage) {
+    return stageGuardrails(ir, stage).length > 0;
+}
+function stringArray(values) {
+    return arrayLiteral(values.map((value) => stringLiteral(value)), '  ');
+}
+/**
+ * The `GuardrailDefinition` literal for one declaration.
+ *
+ * The IR's `onFail` block is nested and the runtime's definition is flat, so this is where
+ * the two shapes meet -- the same projection the Python emitter makes. `fallbackPrompt` is
+ * written as `undefined` rather than omitted because the runtime field is required and
+ * reads it to decide whether a fallback prompt substitutes for the blocked one.
+ */
+function definition(guardrail) {
+    const entries = [
+        ['id', stringLiteral(guardrail.id)],
+        ['stages', stringArray(guardrail.stages)],
+        ['policies', stringArray(guardrail.policies)],
+        ['action', stringLiteral(guardrail.action)],
+        ['redact', stringArray(guardrail.redact)],
+        ['tools', stringArray(guardrail.tools)],
+        ['message', stringLiteral(guardrail.onFail.message)],
+        [
+            'fallbackPrompt',
+            guardrail.onFail.fallbackPrompt === undefined
+                ? 'undefined'
+                : stringLiteral(guardrail.onFail.fallbackPrompt),
+        ],
+        ['log', guardrail.onFail.log ? 'true' : 'false'],
+    ];
+    return objectLiteral(entries, '  ');
+}
+/**
+ * The stage tables, emitted only for stages that have something in them.
+ *
+ * A table nothing reads is a name a reader has to check before deciding it does not
+ * matter, so an app whose guardrails are all `input`-stage carries no `output` table.
+ */
+function tables(ir) {
+    return STAGES.filter((stage) => usesStage(ir, stage)).map((stage) => `export const ${stageTable(stage)}: readonly GuardrailDefinition[] = byStage(${stringLiteral(stage)});`);
+}
+const ENFORCE = [
+    '/**',
+    ' * Log what fired, refuse what must stop, and return the verdict whose payload is safe',
+    ' * to use. A caller that keeps its own copy of the text has skipped a `redact`.',
+    ' *',
+    ' * `escalate` stops here too: a pipeline route has no checkpoint to resume from, so a',
+    ' * question to a human is a question nobody is asked. The validator refuses an',
+    ' * `escalate` declaration at plan time; this is the backstop for a table edited by hand.',
+    ' */',
+    'export function enforceGuardrail(verdict: GuardrailVerdict): GuardrailVerdict {',
+    '  for (const record of verdict.records) {',
+    '    if (BY_ID.get(record.guardrail)?.log === true) {',
+    '      console.warn(',
+    // biome-ignore lint/suspicious/noTemplateCurlyInString: emitted source, not interpolation
+    '        `guardrail ${record.guardrail} fired at the ${record.stage} stage: ${record.message}` +',
+    // biome-ignore lint/suspicious/noTemplateCurlyInString: emitted source, not interpolation
+    "          ` (${record.policies.join(', ')})`,",
+    '      );',
+    '    }',
+    '  }',
+    '  const deciding = verdict.deciding;',
+    '  if (deciding !== undefined && STOPPING.has(deciding.action)) {',
+    '    throw new GuardrailBlockedError(deciding.guardrail, deciding.stage, deciding.message);',
+    '  }',
+    '  return verdict;',
+    '}',
+].join('\n');
+const BLOCK = [
+    '/**',
+    " * The guardrail block inside an error's `cause` chain, or `undefined`. A step re-raises",
+    ' * whatever it caught as a `PipelineError`, so a block reaches a route wrapped;',
+    ' * unwrapping it is what lets the route answer 4xx for a refused input instead of',
+    ' * blaming the model with a 502.',
+    ' */',
+    'export function guardrailBlock(error: unknown): GuardrailBlockedError | undefined {',
+    '  const seen = new Set<unknown>();',
+    '  let current: unknown = error;',
+    '  while (current instanceof Error && !seen.has(current)) {',
+    '    if (current instanceof GuardrailBlockedError) return current;',
+    '    seen.add(current);',
+    '    current = current.cause;',
+    '  }',
+    '  return undefined;',
+    '}',
+].join('\n');
+export function emitGuardrails(ir) {
+    const definitions = orderedGuardrails(ir).map(definition);
+    return generated(paths.guardrails, moduleText(importStatement('@aid-framework/runtime', [
+        { name: 'ConfigurationError', type: false },
+        { name: 'GuardrailBlockedError', type: false },
+        { name: 'GuardrailDefinition', type: true },
+        { name: 'GuardrailEngine', type: false },
+        { name: 'GuardrailVerdict', type: true },
+    ]), [
+        '/**',
+        ' * Every guardrail the spec declares, in id order.',
+        ' *',
+        ' * An `input` or `output` declaration applies to *every* generated route, not to the',
+        ' * prompt or agent that named it: the IR attaches a guardrail to a prompt, and the gate',
+        ' * that requires an `input` stage is document-wide, so there is no narrower unit to',
+        ' * scope it to. A guardrail evaluates the payload the runtime defines -- `{ text }` for',
+        ' * `input`, `output` and `retrieval`, the tool arguments for `tool-call` -- which is why',
+        ' * a `redact` action names `text` on the first three.',
+        ' */',
+        definitions.length === 0
+            ? 'export const GUARDRAILS: readonly GuardrailDefinition[] = [];'
+            : [
+                'export const GUARDRAILS: readonly GuardrailDefinition[] = [',
+                ...definitions.map((text) => `  ${text},`),
+                '];',
+            ].join('\n'),
+    ].join('\n'), [
+        '/** The actions that stop the request instead of annotating it. */',
+        "const STOPPING = new Set(['block', 'escalate']);",
+    ].join('\n'), [
+        '/** The declarations by id, which is how a `guard` step names one. */',
+        'export const BY_ID: ReadonlyMap<string, GuardrailDefinition> = new Map(',
+        '  GUARDRAILS.map((guardrail) => [guardrail.id, guardrail] as const),',
+        ');',
+    ].join('\n'), [
+        "/** The engine every call site shares, over this app's declarations. */",
+        'export const ENGINE = new GuardrailEngine(BY_ID);',
+    ].join('\n'), [
+        '/** The declarations that run at one stage. */',
+        'function byStage(stage: string): readonly GuardrailDefinition[] {',
+        '  return GUARDRAILS.filter((guardrail) => guardrail.stages.includes(stage));',
+        '}',
+    ].join('\n'), [
+        '/** One declaration by id, which is how a `guard` step names one. */',
+        'export function guardrailById(id: string): GuardrailDefinition {',
+        '  const found = BY_ID.get(id);',
+        '  if (found === undefined) {',
+        // biome-ignore lint/suspicious/noTemplateCurlyInString: this is emitted source, not interpolation
+        '    throw new ConfigurationError(`no guardrail ${JSON.stringify(id)} is declared`);',
+        '  }',
+        '  return found;',
+        '}',
+    ].join('\n'), tables(ir).join('\n\n'), ENFORCE, BLOCK));
+}
+//# sourceMappingURL=guardrails.js.map

package/dist/emit/guardrails.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"guardrails.js","sourceRoot":"","sources":["../../src/emit/guardrails.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAIH,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAoB,SAAS,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAC/D,OAAO,EACL,YAAY,EACZ,YAAY,EAEZ,eAAe,EACf,UAAU,EACV,aAAa,GACd,MAAM,WAAW,CAAC;AAEnB,8EAA8E;AAC9E,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,CAAU,CAAC;AAG7E,4DAA4D;AAC5D,MAAM,UAAU,UAAU,CAAC,KAAqB;IAC9C,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,aAAa,CAAC;AAC/D,CAAC;AAED,kDAAkD;AAClD,MAAM,UAAU,eAAe,CAAC,EAAM,EAAE,KAAqB;IAC3D,OAAO,iBAAiB,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;AACvF,CAAC;AAED,oDAAoD;AACpD,MAAM,UAAU,iBAAiB,CAAC,EAAM;IACtC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC7E,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,aAAa,CAAC,EAAM;IAClC,OAAO,iBAAiB,CAAC,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;AAC1C,CAAC;AAED,gDAAgD;AAChD,MAAM,UAAU,SAAS,CAAC,EAAM,EAAE,KAAqB;IACrD,OAAO,eAAe,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,WAAW,CAAC,MAAyB;IAC5C,OAAO,YAAY,CACjB,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,EAC3C,IAAI,CACL,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,UAAU,CAAC,SAAyB;IAC3C,MAAM,OAAO,GAAY;QACvB,CAAC,IAAI,EAAE,aAAa,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QACnC,CAAC,QAAQ,EAAE,WAAW,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACzC,CAAC,UAAU,EAAE,WAAW,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAC7C,CAAC,QAAQ,EAAE,aAAa,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAC3C,CAAC,QAAQ,EAAE,WAAW,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACzC,CAAC,OAAO,EAAE,WAAW,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACvC,CAAC,SAAS,EAAE,aAAa,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACpD;YACE,gBAAgB;YAChB,SAAS,CAAC,MAAM,CAAC,cAAc,KAAK,SAAS;gBAC3C,CAAC,CAAC,WAAW;gBACb,CAAC,CAAC,aAAa,CAAC,SAAS,CAAC,MAAM,CAAC,cAAc,CAAC;SACnD;QACD,CAAC,KAAK,EAAE,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;KACjD,CAAC;IACF,OAAO,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;AACtC,CAAC;AAED;;;;;GAKG;AACH,SAAS,MAAM,CAAC,EAAM;IACpB,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,GAAG,CACvD,CAAC,KAAK,EAAE,EAAE,CACR,gBAAgB,UAAU,CAAC,KAAK,CAAC,8CAA8C,aAAa,CAC1F,KAAK,CACN,IAAI,CACR,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,GAAG;IACd,KAAK;IACL,wFAAwF;IACxF,iFAAiF;IACjF,IAAI;IACJ,uFAAuF;IACvF,gFAAgF;IAChF,0FAA0F;IAC1F,KAAK;IACL,iFAAiF;IACjF,2CAA2C;IAC3C,sDAAsD;IACtD,qBAAqB;IACrB,0FAA0F;IAC1F,iGAAiG;IACjG,0FAA0F;IAC1F,+CAA+C;IAC/C,UAAU;IACV,OAAO;IACP,KAAK;IACL,sCAAsC;IACtC,kEAAkE;IAClE,4FAA4F;IAC5F,KAAK;IACL,mBAAmB;IACnB,GAAG;CACJ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEb,MAAM,KAAK,GAAG;IACZ,KAAK;IACL,0FAA0F;IAC1F,iFAAiF;IACjF,mFAAmF;IACnF,kCAAkC;IAClC,KAAK;IACL,qFAAqF;IACrF,oCAAoC;IACpC,iCAAiC;IACjC,4DAA4D;IAC5D,mEAAmE;IACnE,wBAAwB;IACxB,8BAA8B;IAC9B,KAAK;IACL,qBAAqB;IACrB,GAAG;CACJ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEb,MAAM,UAAU,cAAc,CAAC,EAAM;IACnC,MAAM,WAAW,GAAG,iBAAiB,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC1D,OAAO,SAAS,CACd,KAAK,CAAC,UAAU,EAChB,UAAU,CACR,eAAe,CAAC,wBAAwB,EAAE;QACxC,EAAE,IAAI,EAAE,oBAAoB,EAAE,IAAI,EAAE,KAAK,EAAE;QAC3C,EAAE,IAAI,EAAE,uBAAuB,EAAE,IAAI,EAAE,KAAK,EAAE;QAC9C,EAAE,IAAI,EAAE,qBAAqB,EAAE,IAAI,EAAE,IAAI,EAAE;QAC3C,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,KAAK,EAAE;QACxC,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,IAAI,EAAE;KACzC,CAAC,EACF;QACE,KAAK;QACL,oDAAoD;QACpD,IAAI;QACJ,sFAAsF;QACtF,yFAAyF;QACzF,qFAAqF;QACrF,yFAAyF;QACzF,0FAA0F;QAC1F,uDAAuD;QACvD,KAAK;QACL,WAAW,CAAC,MAAM,KAAK,CAAC;YACtB,CAAC,CAAC,+DAA+D;YACjE,CAAC,CAAC;gBACE,6DAA6D;gBAC7D,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,IAAI,GAAG,CAAC;gBAC1C,IAAI;aACL,CAAC,IAAI,CAAC,IAAI,CAAC;KACjB,CAAC,IAAI,CAAC,IAAI,CAAC,EACZ;QACE,oEAAoE;QACpE,kDAAkD;KACnD,CAAC,IAAI,CAAC,IAAI,CAAC,EACZ;QACE,uEAAuE;QACvE,yEAAyE;QACzE,sEAAsE;QACtE,IAAI;KACL,CAAC,IAAI,CAAC,IAAI,CAAC,EACZ;QACE,yEAAyE;QACzE,mDAAmD;KACpD,CAAC,IAAI,CAAC,IAAI,CAAC,EACZ;QACE,gDAAgD;QAChD,mEAAmE;QACnE,8EAA8E;QAC9E,GAAG;KACJ,CAAC,IAAI,CAAC,IAAI,CAAC,EACZ;QACE,sEAAsE;QACtE,kEAAkE;QAClE,gCAAgC;QAChC,8BAA8B;QAC9B,kGAAkG;QAClG,qFAAqF;QACrF,KAAK;QACL,iBAAiB;QACjB,GAAG;KACJ,CAAC,IAAI,CAAC,IAAI,CAAC,EACZ,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EACvB,OAAO,EACP,KAAK,CACN,CACF,CAAC;AACJ,CAAC"}

package/dist/emit/infrastructure.d.ts

@@ -0,0 +1,15 @@
+/**
+ * `generated/gateway/models.ts`, `generated/gateway/index.ts`, `generated/deps.ts` and
+ * `generated/observability.ts`.
+ *
+ * The gateway is the seam every generated app is testable through: `deps.ts` resolves a
+ * singleton that a test (or the example's fake gateway) replaces wholesale, and the
+ * model table is plain data so a cost or capability change is a one-line diff.
+ */
+import type { IR } from '@aid-framework/ir';
+import { type EmittedFile } from './file.js';
+export declare function emitGatewayModels(ir: IR): EmittedFile;
+export declare function emitGatewayIndex(ir: IR): EmittedFile;
+export declare function emitDeps(ir: IR): EmittedFile;
+export declare function emitObservability(ir: IR): EmittedFile;
+//# sourceMappingURL=infrastructure.d.ts.map

package/dist/emit/infrastructure.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"infrastructure.d.ts","sourceRoot":"","sources":["../../src/emit/infrastructure.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,EAAE,EAAc,MAAM,mBAAmB,CAAC;AASxD,OAAO,EAAE,KAAK,WAAW,EAAoB,MAAM,WAAW,CAAC;AAsC/D,wBAAgB,iBAAiB,CAAC,EAAE,EAAE,EAAE,GAAG,WAAW,CAyErD;AAaD,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,EAAE,GAAG,WAAW,CA6BpD;AAED,wBAAgB,QAAQ,CAAC,EAAE,EAAE,EAAE,GAAG,WAAW,CA2G5C;AAED,wBAAgB,iBAAiB,CAAC,EAAE,EAAE,EAAE,GAAG,WAAW,CAwCrD"}