@anvia/core 0.11.2 → 0.12.0

package/dist/{chunk-62RUYGMM.js → chunk-TIH4QM55.js}

@@ -1,16 +1,19 @@
 import {
   Agent,
   normalizeAgentId
-} from "./chunk-N6REB3DH.js";
+} from "./chunk-4AJJIIAQ.js";
 import {
   ToolSet
-} from "./chunk-X3SWV6W6.js";
+} from "./chunk-R7F2JF7J.js";
 import {
   resolveMemoryOptions
 } from "./chunk-M6RPFHG7.js";
 import {
   toProviderJsonSchema
 } from "./chunk-WQKHFADH.js";
+import {
+  appendGuardrailPolicies
+} from "./chunk-YRERPIA5.js";
 
 // src/agent/builder.ts
 var AgentBuilder = class {
@@ -32,6 +35,7 @@ var AgentBuilder = class {
   requestHook;
   schema;
   approvalOptions;
+  guardrailPolicies = [];
   skillInstructionBlocks = [];
   observerRegistrations = [];
   dynamicContextRegistrations = [];
@@ -147,6 +151,10 @@ var AgentBuilder = class {
     this.approvalOptions = options;
     return this;
   }
+  guardrails(policies) {
+    this.guardrailPolicies = appendGuardrailPolicies(this.guardrailPolicies, policies);
+    return this;
+  }
   memory(store, options = {}) {
     this.memoryRegistration = {
       store,
@@ -185,6 +193,7 @@ var AgentBuilder = class {
       outputSchema: this.schema,
       observers: this.observerRegistrations,
       approvals: this.approvalOptions,
+      guardrails: this.guardrailPolicies,
       dynamicContexts: this.dynamicContextRegistrations,
       dynamicTools: this.dynamicToolRegistrations,
       middlewares: this.middlewareRegistrations,
@@ -203,4 +212,4 @@ var AgentBuilder = class {
 export {
   AgentBuilder
 };
-//# sourceMappingURL=chunk-62RUYGMM.js.map
+//# sourceMappingURL=chunk-TIH4QM55.js.map

package/dist/chunk-TIH4QM55.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/agent/builder.ts"],"sourcesContent":["import type { CompletionModel, Document, JsonObject, JsonValue, ToolChoice } from \"../completion\";\nimport { appendGuardrailPolicies } from \"../guardrails\";\nimport type { GuardrailPolicy, GuardrailPolicyInput } from \"../guardrails\";\nimport type { PromptHook } from \"../hooks\";\nimport type { McpServer } from \"../mcp\";\nimport { resolveMemoryOptions } from \"../memory/options\";\nimport type { MemoryOptions, MemoryRegistration, MemoryStore } from \"../memory/types\";\nimport type { AgentObserver, AgentObserverRegistration, ObserveOptions } from \"../observability\";\nimport { toProviderJsonSchema, type ZodSchema } from \"../schema/zod-schema\";\nimport type { SkillSet } from \"../skills\";\nimport type { ToolSearchDocument } from \"../tool/dynamic-tools\";\nimport type { AgentMiddleware, ToolMiddleware } from \"../tool/middleware\";\nimport type { AnyTool, ToolApprovalsOptions } from \"../tool/tool\";\nimport { ToolSet } from \"../tool/tool-set\";\nimport type { VectorSearchIndex } from \"../vector-store\";\nimport { Agent } from \"./agent\";\nimport { normalizeAgentId } from \"./ids\";\nimport type {\n  AgentEventStore,\n  AgentEventStoreOptions,\n  AgentEventStoreRegistration,\n  DynamicContextOptions,\n  DynamicContextRegistration,\n  DynamicToolOptions,\n  DynamicToolRegistration,\n} from \"./types\";\n\nexport class AgentBuilder<M extends CompletionModel = CompletionModel> {\n  private readonly agentId: string;\n  private agentName: string | undefined;\n  private agentDescription: string | undefined;\n  private instructionBlocks: string[] = [];\n  private contextDocs: Document[] = [];\n  private temp: number | undefined;\n  private maxTokenCount: number | undefined;\n  private params: JsonValue | undefined;\n  private choice: ToolChoice | undefined;\n  private turns: number | undefined;\n  private requestHook: PromptHook | undefined;\n  private schema: JsonObject | undefined;\n  private approvalOptions: ToolApprovalsOptions | undefined;\n  private guardrailPolicies: GuardrailPolicy[] = [];\n  private skillInstructionBlocks: string[] = [];\n  private observerRegistrations: AgentObserverRegistration[] = [];\n  private dynamicContextRegistrations: DynamicContextRegistration[] = [];\n  private dynamicToolRegistrations: DynamicToolRegistration[] = [];\n  private middlewareRegistrations: AgentMiddleware[] = [];\n  private memoryRegistration: MemoryRegistration | undefined;\n  private eventStoreRegistration: AgentEventStoreRegistration | undefined;\n  private activeToolSet = new ToolSet();\n\n  constructor(\n    agentId: string,\n    private readonly completionModel: M,\n  ) {\n    this.agentId = normalizeAgentId(agentId);\n  }\n\n  name(name: string): this {\n    this.agentName = name;\n    return this;\n  }\n\n  description(description: string): this {\n    this.agentDescription = description;\n    return this;\n  }\n\n  instructions(instructions: string): this {\n    if (instructions.length > 0) {\n      this.instructionBlocks.push(instructions);\n    }\n    return this;\n  }\n\n  context(text: string, id = `static_doc_${this.contextDocs.length}`): this {\n    this.contextDocs.push({ id, text });\n    return this;\n  }\n\n  dynamicContext<T>(index: VectorSearchIndex<T>, options: DynamicContextOptions<T>): this {\n    this.dynamicContextRegistrations.push({ index, options } as DynamicContextRegistration);\n    return this;\n  }\n\n  dynamicTools(index: VectorSearchIndex<ToolSearchDocument>, options: DynamicToolOptions): this {\n    this.dynamicToolRegistrations.push({ index, options });\n    return this;\n  }\n\n  tool(tool: AnyTool): this {\n    this.activeToolSet.addTool(tool);\n    return this;\n  }\n\n  tools(tools: AnyTool[]): this {\n    this.activeToolSet.addTools(tools);\n    return this;\n  }\n\n  mcp(servers: McpServer[]): this {\n    for (const server of servers) {\n      this.activeToolSet.addTools(server.tools);\n    }\n    return this;\n  }\n\n  skills(skillSet: SkillSet): this {\n    if (skillSet.instructions.length > 0) {\n      this.skillInstructionBlocks.push(skillSet.instructions);\n    }\n    this.activeToolSet.addTools(skillSet.tools);\n    return this;\n  }\n\n  useToolSet(toolSet: ToolSet): this {\n    toolSet.addTools(this.activeToolSet);\n    this.activeToolSet = toolSet;\n    return this;\n  }\n\n  temperature(temperature: number): this {\n    this.temp = temperature;\n    return this;\n  }\n\n  maxTokens(maxTokens: number): this {\n    this.maxTokenCount = maxTokens;\n    return this;\n  }\n\n  additionalParams(params: JsonValue): this {\n    this.params = params;\n    return this;\n  }\n\n  toolChoice(toolChoice: ToolChoice): this {\n    this.choice = toolChoice;\n    return this;\n  }\n\n  defaultMaxTurns(defaultMaxTurns: number): this {\n    this.turns = defaultMaxTurns;\n    return this;\n  }\n\n  hook(hook: PromptHook): this {\n    this.requestHook = hook;\n    return this;\n  }\n\n  middleware(middleware: AgentMiddleware): this {\n    this.middlewareRegistrations.push(middleware);\n    return this;\n  }\n\n  middlewares(middlewares: AgentMiddleware[]): this {\n    this.middlewareRegistrations.push(...middlewares);\n    return this;\n  }\n\n  /**\n   * @deprecated Use `middleware` instead.\n   */\n  toolMiddleware(middleware: ToolMiddleware): this {\n    return this.middleware(middleware);\n  }\n\n  /**\n   * @deprecated Use `middlewares` instead.\n   */\n  toolMiddlewares(middlewares: ToolMiddleware[]): this {\n    return this.middlewares(middlewares);\n  }\n\n  observe(observer: AgentObserver, options: ObserveOptions = {}): this {\n    this.observerRegistrations.push({\n      observer,\n      failOnObserverError: options.failOnObserverError,\n    });\n    return this;\n  }\n\n  approvals(options: ToolApprovalsOptions): this {\n    this.approvalOptions = options;\n    return this;\n  }\n\n  guardrails(policies: GuardrailPolicyInput): this {\n    this.guardrailPolicies = appendGuardrailPolicies(this.guardrailPolicies, policies);\n    return this;\n  }\n\n  memory(store: MemoryStore, options: MemoryOptions = {}): this {\n    this.memoryRegistration = {\n      store,\n      options: resolveMemoryOptions(options),\n    };\n    return this;\n  }\n\n  eventStore(store: AgentEventStore, options: AgentEventStoreOptions = {}): this {\n    this.eventStoreRegistration = {\n      store,\n      options: {\n        include: options.include ?? \"all\",\n      },\n    };\n    return this;\n  }\n\n  outputSchema(schema: ZodSchema): this {\n    this.schema = toProviderJsonSchema(schema);\n    return this;\n  }\n\n  build(): Agent<M> {\n    return new Agent({\n      id: this.agentId,\n      name: this.agentName,\n      description: this.agentDescription,\n      model: this.completionModel,\n      instructions: this.buildInstructions(),\n      staticContext: this.contextDocs,\n      temperature: this.temp,\n      maxTokens: this.maxTokenCount,\n      additionalParams: this.params,\n      toolSet: this.activeToolSet,\n      toolChoice: this.choice,\n      defaultMaxTurns: this.turns,\n      hook: this.requestHook,\n      outputSchema: this.schema,\n      observers: this.observerRegistrations,\n      approvals: this.approvalOptions,\n      guardrails: this.guardrailPolicies,\n      dynamicContexts: this.dynamicContextRegistrations,\n      dynamicTools: this.dynamicToolRegistrations,\n      middlewares: this.middlewareRegistrations,\n      memory: this.memoryRegistration,\n      eventStore: this.eventStoreRegistration,\n    });\n  }\n\n  private buildInstructions(): string | undefined {\n    const parts = [...this.instructionBlocks, ...this.skillInstructionBlocks].filter(\n      (part): part is string => part !== undefined && part.length > 0,\n    );\n    return parts.length === 0 ? undefined : parts.join(\"\\n\\n\");\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AA2BO,IAAM,eAAN,MAAgE;AAAA,EAwBrE,YACE,SACiB,iBACjB;AADiB;AAEjB,SAAK,UAAU,iBAAiB,OAAO;AAAA,EACzC;AAAA,EAHmB;AAAA,EAzBF;AAAA,EACT;AAAA,EACA;AAAA,EACA,oBAA8B,CAAC;AAAA,EAC/B,cAA0B,CAAC;AAAA,EAC3B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,oBAAuC,CAAC;AAAA,EACxC,yBAAmC,CAAC;AAAA,EACpC,wBAAqD,CAAC;AAAA,EACtD,8BAA4D,CAAC;AAAA,EAC7D,2BAAsD,CAAC;AAAA,EACvD,0BAA6C,CAAC;AAAA,EAC9C;AAAA,EACA;AAAA,EACA,gBAAgB,IAAI,QAAQ;AAAA,EASpC,KAAK,MAAoB;AACvB,SAAK,YAAY;AACjB,WAAO;AAAA,EACT;AAAA,EAEA,YAAY,aAA2B;AACrC,SAAK,mBAAmB;AACxB,WAAO;AAAA,EACT;AAAA,EAEA,aAAa,cAA4B;AACvC,QAAI,aAAa,SAAS,GAAG;AAC3B,WAAK,kBAAkB,KAAK,YAAY;AAAA,IAC1C;AACA,WAAO;AAAA,EACT;AAAA,EAEA,QAAQ,MAAc,KAAK,cAAc,KAAK,YAAY,MAAM,IAAU;AACxE,SAAK,YAAY,KAAK,EAAE,IAAI,KAAK,CAAC;AAClC,WAAO;AAAA,EACT;AAAA,EAEA,eAAkB,OAA6B,SAAyC;AACtF,SAAK,4BAA4B,KAAK,EAAE,OAAO,QAAQ,CAA+B;AACtF,WAAO;AAAA,EACT;AAAA,EAEA,aAAa,OAA8C,SAAmC;AAC5F,SAAK,yBAAyB,KAAK,EAAE,OAAO,QAAQ,CAAC;AACrD,WAAO;AAAA,EACT;AAAA,EAEA,KAAK,MAAqB;AACxB,SAAK,cAAc,QAAQ,IAAI;AAC/B,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,OAAwB;AAC5B,SAAK,cAAc,SAAS,KAAK;AACjC,WAAO;AAAA,EACT;AAAA,EAEA,IAAI,SAA4B;AAC9B,eAAW,UAAU,SAAS;AAC5B,WAAK,cAAc,SAAS,OAAO,KAAK;AAAA,IAC1C;AACA,WAAO;AAAA,EACT;AAAA,EAEA,OAAO,UAA0B;AAC/B,QAAI,SAAS,aAAa,SAAS,GAAG;AACpC,WAAK,uBAAuB,KAAK,SAAS,YAAY;AAAA,IACxD;AACA,SAAK,cAAc,SAAS,SAAS,KAAK;AAC1C,WAAO;AAAA,EACT;AAAA,EAEA,WAAW,SAAwB;AACjC,YAAQ,SAAS,KAAK,aAAa;AACnC,SAAK,gBAAgB;AACrB,WAAO;AAAA,EACT;AAAA,EAEA,YAAY,aAA2B;AACrC,SAAK,OAAO;AACZ,WAAO;AAAA,EACT;AAAA,EAEA,UAAU,WAAyB;AACjC,SAAK,gBAAgB;AACrB,WAAO;AAAA,EACT;AAAA,EAEA,iBAAiB,QAAyB;AACxC,SAAK,SAAS;AACd,WAAO;AAAA,EACT;AAAA,EAEA,WAAW,YAA8B;AACvC,SAAK,SAAS;AACd,WAAO;AAAA,EACT;AAAA,EAEA,gBAAgB,iBAA+B;AAC7C,SAAK,QAAQ;AACb,WAAO;AAAA,EACT;AAAA,EAEA,KAAK,MAAwB;AAC3B,SAAK,cAAc;AACnB,WAAO;AAAA,EACT;AAAA,EAEA,WAAW,YAAmC;AAC5C,SAAK,wBAAwB,KAAK,UAAU;AAC5C,WAAO;AAAA,EACT;AAAA,EAEA,YAAY,aAAsC;AAChD,SAAK,wBAAwB,KAAK,GAAG,WAAW;AAChD,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAKA,eAAe,YAAkC;AAC/C,WAAO,KAAK,WAAW,UAAU;AAAA,EACnC;AAAA;AAAA;AAAA;AAAA,EAKA,gBAAgB,aAAqC;AACnD,WAAO,KAAK,YAAY,WAAW;AAAA,EACrC;AAAA,EAEA,QAAQ,UAAyB,UAA0B,CAAC,GAAS;AACnE,SAAK,sBAAsB,KAAK;AAAA,MAC9B;AAAA,MACA,qBAAqB,QAAQ;AAAA,IAC/B,CAAC;AACD,WAAO;AAAA,EACT;AAAA,EAEA,UAAU,SAAqC;AAC7C,SAAK,kBAAkB;AACvB,WAAO;AAAA,EACT;AAAA,EAEA,WAAW,UAAsC;AAC/C,SAAK,oBAAoB,wBAAwB,KAAK,mBAAmB,QAAQ;AACjF,WAAO;AAAA,EACT;AAAA,EAEA,OAAO,OAAoB,UAAyB,CAAC,GAAS;AAC5D,SAAK,qBAAqB;AAAA,MACxB;AAAA,MACA,SAAS,qBAAqB,OAAO;AAAA,IACvC;AACA,WAAO;AAAA,EACT;AAAA,EAEA,WAAW,OAAwB,UAAkC,CAAC,GAAS;AAC7E,SAAK,yBAAyB;AAAA,MAC5B;AAAA,MACA,SAAS;AAAA,QACP,SAAS,QAAQ,WAAW;AAAA,MAC9B;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAAA,EAEA,aAAa,QAAyB;AACpC,SAAK,SAAS,qBAAqB,MAAM;AACzC,WAAO;AAAA,EACT;AAAA,EAEA,QAAkB;AAChB,WAAO,IAAI,MAAM;AAAA,MACf,IAAI,KAAK;AAAA,MACT,MAAM,KAAK;AAAA,MACX,aAAa,KAAK;AAAA,MAClB,OAAO,KAAK;AAAA,MACZ,cAAc,KAAK,kBAAkB;AAAA,MACrC,eAAe,KAAK;AAAA,MACpB,aAAa,KAAK;AAAA,MAClB,WAAW,KAAK;AAAA,MAChB,kBAAkB,KAAK;AAAA,MACvB,SAAS,KAAK;AAAA,MACd,YAAY,KAAK;AAAA,MACjB,iBAAiB,KAAK;AAAA,MACtB,MAAM,KAAK;AAAA,MACX,cAAc,KAAK;AAAA,MACnB,WAAW,KAAK;AAAA,MAChB,WAAW,KAAK;AAAA,MAChB,YAAY,KAAK;AAAA,MACjB,iBAAiB,KAAK;AAAA,MACtB,cAAc,KAAK;AAAA,MACnB,aAAa,KAAK;AAAA,MAClB,QAAQ,KAAK;AAAA,MACb,YAAY,KAAK;AAAA,IACnB,CAAC;AAAA,EACH;AAAA,EAEQ,oBAAwC;AAC9C,UAAM,QAAQ,CAAC,GAAG,KAAK,mBAAmB,GAAG,KAAK,sBAAsB,EAAE;AAAA,MACxE,CAAC,SAAyB,SAAS,UAAa,KAAK,SAAS;AAAA,IAChE;AACA,WAAO,MAAM,WAAW,IAAI,SAAY,MAAM,KAAK,MAAM;AAAA,EAC3D;AACF;","names":[]}

package/dist/chunk-YRERPIA5.js

@@ -0,0 +1,451 @@
+// src/guardrails/index.ts
+function defineGuardrailPolicy(options) {
+  return {
+    id: options.id,
+    mode: options.mode ?? "enforce",
+    input: options.input ?? [],
+    tools: options.tools ?? [],
+    toolResults: options.toolResults ?? [],
+    output: options.output ?? []
+  };
+}
+function defineInputGuardrail(guardrail) {
+  return guardrail;
+}
+function defineToolGuardrail(guardrail) {
+  return guardrail;
+}
+function defineToolResultGuardrail(guardrail) {
+  return guardrail;
+}
+function defineOutputGuardrail(guardrail) {
+  return guardrail;
+}
+function allow(options = {}) {
+  return { action: "allow", ...options };
+}
+function block(options) {
+  return { action: "block", ...options };
+}
+var guardrails = {
+  blockText,
+  redactText
+};
+function normalizeGuardrailPolicies(policies) {
+  if (policies === void 0) {
+    return [];
+  }
+  return Array.isArray(policies) ? policies : [policies];
+}
+function appendGuardrailPolicies(current, next) {
+  return [...current, ...normalizeGuardrailPolicies(next)];
+}
+function hasEnforcedOutputGuardrails(policies) {
+  return policies.some((policy) => policy.mode === "enforce" && policy.output.length > 0);
+}
+async function runInputGuardrails(policies, context) {
+  let prompt = context.prompt;
+  let inputText = context.inputText;
+  const decisions = [];
+  for (const policy of policies) {
+    for (const guardrail of policy.input) {
+      const currentContext = { ...context, prompt, inputText };
+      const result = await runGuardrail(
+        policy,
+        guardrail.id,
+        "input",
+        () => guardrail.check(currentContext, inputActions)
+      );
+      decisions.push(result.decision);
+      if (policy.mode === "observe") {
+        continue;
+      }
+      if (result.action.action === "block") {
+        return {
+          prompt,
+          inputText,
+          blocked: true,
+          message: result.action.message,
+          decisions
+        };
+      }
+      if (result.action.action === "rewrite") {
+        if (result.action.prompt !== void 0) {
+          prompt = result.action.prompt;
+          inputText = textFromMessage(prompt);
+        } else if (result.action.inputText !== void 0) {
+          inputText = result.action.inputText;
+          prompt = rewriteMessageText(prompt, inputText);
+        }
+      }
+    }
+  }
+  return { prompt, inputText, blocked: false, decisions };
+}
+async function runToolGuardrails(policies, toolGuardrails, context) {
+  let rawArgs = context.rawArgs;
+  let args = context.args;
+  const decisions = [];
+  for (const entry of toolGuardrailEntries(policies, toolGuardrails, context.toolName)) {
+    const currentContext = { ...context, rawArgs, args };
+    const result = await runGuardrail(
+      entry.policy,
+      entry.guardrail.id,
+      "tool",
+      () => entry.guardrail.check(currentContext, toolActions)
+    );
+    decisions.push(result.decision);
+    if (entry.policy.mode === "observe") {
+      continue;
+    }
+    if (result.action.action === "block") {
+      return {
+        rawArgs,
+        blocked: true,
+        message: result.action.message,
+        decisions
+      };
+    }
+    if (result.action.action === "request_approval") {
+      return {
+        rawArgs,
+        blocked: false,
+        approval: {
+          reason: result.action.reason,
+          rejectMessage: result.action.rejectMessage
+        },
+        decisions
+      };
+    }
+    if (result.action.action === "rewrite") {
+      rawArgs = typeof result.action.args === "string" ? result.action.args : JSON.stringify(result.action.args);
+      try {
+        args = JSON.parse(rawArgs);
+      } catch {
+        args = rawArgs;
+      }
+    }
+  }
+  return { rawArgs, blocked: false, decisions };
+}
+async function runToolResultGuardrails(policies, toolGuardrails, context) {
+  let result = context.result;
+  let structuredResult = context.structuredResult;
+  const decisions = [];
+  for (const entry of toolResultGuardrailEntries(policies, toolGuardrails, context.toolName)) {
+    const currentContext = { ...context, result, structuredResult };
+    const guardrailResult = await runGuardrail(
+      entry.policy,
+      entry.guardrail.id,
+      "tool_result",
+      () => entry.guardrail.check(currentContext, toolResultActions)
+    );
+    decisions.push(guardrailResult.decision);
+    if (entry.policy.mode === "observe") {
+      continue;
+    }
+    if (guardrailResult.action.action === "block") {
+      return {
+        result,
+        structuredResult,
+        blocked: true,
+        message: guardrailResult.action.message,
+        decisions
+      };
+    }
+    if (guardrailResult.action.action === "rewrite") {
+      if (guardrailResult.action.structuredResult !== void 0) {
+        structuredResult = guardrailResult.action.structuredResult;
+        result = textFromToolResultContent(structuredResult);
+      } else if (guardrailResult.action.result !== void 0) {
+        result = guardrailResult.action.result;
+        structuredResult = void 0;
+      }
+    }
+  }
+  return { result, structuredResult, blocked: false, decisions };
+}
+async function runOutputGuardrails(policies, context) {
+  let outputText = context.outputText;
+  const decisions = [];
+  for (const policy of policies) {
+    for (const guardrail of policy.output) {
+      const currentContext = { ...context, outputText };
+      const result = await runGuardrail(
+        policy,
+        guardrail.id,
+        "output",
+        () => guardrail.check(currentContext, outputActions)
+      );
+      decisions.push(result.decision);
+      if (policy.mode === "observe") {
+        continue;
+      }
+      if (result.action.action === "block") {
+        return {
+          outputText,
+          blocked: true,
+          message: result.action.message,
+          decisions
+        };
+      }
+      if (result.action.action === "rewrite") {
+        outputText = result.action.outputText;
+      }
+    }
+  }
+  return { outputText, blocked: false, decisions };
+}
+async function runGuardrail(policy, guardrailId, boundary, run) {
+  const startedAt = Date.now();
+  try {
+    const action = await run() ?? allow();
+    return {
+      action,
+      decision: decisionRecord({
+        policy,
+        guardrailId,
+        boundary,
+        action,
+        latencyMs: Date.now() - startedAt
+      })
+    };
+  } catch (error) {
+    const message = error instanceof Error ? error.message : String(error);
+    if (policy.mode === "observe") {
+      return {
+        action: allow(),
+        decision: {
+          policyId: policy.id,
+          guardrailId,
+          boundary,
+          mode: policy.mode,
+          action: "error",
+          applied: false,
+          reason: message,
+          latencyMs: Date.now() - startedAt
+        }
+      };
+    }
+    throw error;
+  }
+}
+function decisionRecord(args) {
+  const applied = args.policy.mode === "enforce" && args.action.action !== "allow";
+  const record = {
+    policyId: args.policy.id,
+    guardrailId: args.guardrailId,
+    boundary: args.boundary,
+    mode: args.policy.mode,
+    action: args.action.action,
+    applied,
+    latencyMs: args.latencyMs
+  };
+  if (args.action.reason !== void 0) record.reason = args.action.reason;
+  if ("message" in args.action && typeof args.action.message === "string") {
+    record.message = args.action.message;
+  }
+  if (args.action.metadata !== void 0) record.metadata = args.action.metadata;
+  return record;
+}
+var commonActions = {
+  allow,
+  block
+};
+var inputActions = {
+  ...commonActions,
+  rewrite(options) {
+    return { action: "rewrite", ...options };
+  }
+};
+var toolActions = {
+  ...commonActions,
+  rewrite(options) {
+    return { action: "rewrite", ...options };
+  },
+  requestApproval(options = {}) {
+    return { action: "request_approval", ...options };
+  }
+};
+var toolResultActions = {
+  ...commonActions,
+  rewrite(options) {
+    return { action: "rewrite", ...options };
+  }
+};
+var outputActions = {
+  ...commonActions,
+  rewrite(options) {
+    return { action: "rewrite", ...options };
+  }
+};
+function toolGuardrailEntries(policies, toolGuardrails, toolName) {
+  return [
+    ...policies.flatMap(
+      (policy) => policy.tools.filter((guardrail) => matchesTool(guardrail.tool, toolName)).map((guardrail) => ({ policy, guardrail }))
+    ),
+    ...toolGuardrails.map((guardrail) => ({
+      policy: defineGuardrailPolicy({
+        id: `tool:${toolName}:${guardrail.id}`,
+        tools: [guardrail]
+      }),
+      guardrail
+    }))
+  ];
+}
+function toolResultGuardrailEntries(policies, toolGuardrails, toolName) {
+  return [
+    ...policies.flatMap(
+      (policy) => policy.toolResults.filter((guardrail) => matchesTool(guardrail.tool, toolName)).map((guardrail) => ({ policy, guardrail }))
+    ),
+    ...toolGuardrails.map((guardrail) => ({
+      policy: defineGuardrailPolicy({
+        id: `tool:${toolName}:${guardrail.id}`,
+        toolResults: [guardrail]
+      }),
+      guardrail
+    }))
+  ];
+}
+function matchesTool(tool, toolName) {
+  if (tool === void 0) {
+    return true;
+  }
+  return Array.isArray(tool) ? tool.includes(toolName) : tool === toolName;
+}
+function blockText(options) {
+  return textPatternGuardrail(options, "block");
+}
+function redactText(options) {
+  return textPatternGuardrail(options, "rewrite");
+}
+function textPatternGuardrail(options, action) {
+  if (options.boundary === "input") {
+    return defineInputGuardrail({
+      id: options.id,
+      check(ctx, actions) {
+        return textPatternAction(
+          ctx.inputText,
+          options,
+          action,
+          (value) => actions.rewrite({ inputText: value, reason: options.reason })
+        );
+      }
+    });
+  }
+  if (options.boundary === "output") {
+    return defineOutputGuardrail({
+      id: options.id,
+      check(ctx, actions) {
+        return textPatternAction(
+          ctx.outputText,
+          options,
+          action,
+          (value) => actions.rewrite({ outputText: value, reason: options.reason })
+        );
+      }
+    });
+  }
+  return defineToolResultGuardrail({
+    id: options.id,
+    check(ctx, actions) {
+      return textPatternAction(
+        ctx.result,
+        options,
+        action,
+        (value) => actions.rewrite({ result: value, reason: options.reason })
+      );
+    }
+  });
+}
+function textPatternAction(text, options, action, rewrite) {
+  const matched = options.patterns.some((pattern) => textPatternMatches(text, pattern));
+  if (!matched) {
+    return allow();
+  }
+  if (action === "block") {
+    return block({
+      reason: options.reason,
+      message: options.message
+    });
+  }
+  let current = text;
+  for (const pattern of options.patterns) {
+    current = replaceTextPattern(current, pattern, options.replacement ?? "[redacted]");
+  }
+  return rewrite(current);
+}
+function textPatternMatches(text, pattern) {
+  if (typeof pattern === "string") {
+    return text.includes(pattern);
+  }
+  pattern.lastIndex = 0;
+  const matched = pattern.test(text);
+  pattern.lastIndex = 0;
+  return matched;
+}
+function replaceTextPattern(text, pattern, replacement) {
+  if (typeof pattern === "string") {
+    return text.split(pattern).join(replacement);
+  }
+  pattern.lastIndex = 0;
+  const flags = pattern.flags.replace("y", "");
+  const globalFlags = flags.includes("g") ? flags : `${flags}g`;
+  return text.replace(new RegExp(pattern.source, globalFlags), replacement);
+}
+function textFromMessage(message) {
+  if (message.role === "system") {
+    return message.content;
+  }
+  return message.content.flatMap((content) => {
+    if (content.type === "text") {
+      return [content.text];
+    }
+    if (content.type === "document" && content.source.type === "text") {
+      return [content.source.text];
+    }
+    return [];
+  }).join("\n");
+}
+function rewriteMessageText(message, text) {
+  if (message.role === "system") {
+    return { ...message, content: text };
+  }
+  if (message.role === "user") {
+    return {
+      ...message,
+      content: [
+        { type: "text", text },
+        ...message.content.filter(
+          (item) => item.type !== "text" && !(item.type === "document" && item.source.type === "text")
+        )
+      ]
+    };
+  }
+  if (message.role === "assistant") {
+    return { ...message, content: [{ type: "text", text }] };
+  }
+  return message;
+}
+function textFromToolResultContent(content) {
+  return content.map((item) => item.type === "text" ? item.text : "[image]").join("\n");
+}
+
+export {
+  defineGuardrailPolicy,
+  defineInputGuardrail,
+  defineToolGuardrail,
+  defineToolResultGuardrail,
+  defineOutputGuardrail,
+  allow,
+  block,
+  guardrails,
+  normalizeGuardrailPolicies,
+  appendGuardrailPolicies,
+  hasEnforcedOutputGuardrails,
+  runInputGuardrails,
+  runToolGuardrails,
+  runToolResultGuardrails,
+  runOutputGuardrails
+};
+//# sourceMappingURL=chunk-YRERPIA5.js.map

package/dist/chunk-YRERPIA5.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/guardrails/index.ts"],"sourcesContent":["import type { JsonObject, JsonValue, Message, ToolResultContent, Usage } from \"../completion\";\n\ntype MaybePromise<T> = T | Promise<T>;\n\nexport type GuardrailMode = \"enforce\" | \"observe\";\n\nexport type GuardrailBoundary = \"input\" | \"tool\" | \"tool_result\" | \"output\";\n\nexport type GuardrailRunContext = {\n  agentId: string;\n  runId: string;\n  sessionId?: string | undefined;\n  metadata?: JsonObject | undefined;\n};\n\nexport type GuardrailDecisionRecord = {\n  policyId: string;\n  guardrailId: string;\n  boundary: GuardrailBoundary;\n  mode: GuardrailMode;\n  action: GuardrailActionName;\n  applied: boolean;\n  reason?: string | undefined;\n  message?: string | undefined;\n  metadata?: JsonObject | undefined;\n  latencyMs: number;\n};\n\nexport type GuardrailActionName = \"allow\" | \"block\" | \"rewrite\" | \"request_approval\" | \"error\";\n\nexport type GuardrailActionBase = {\n  reason?: string | undefined;\n  metadata?: JsonObject | undefined;\n};\n\nexport type GuardrailAllow = GuardrailActionBase & {\n  action: \"allow\";\n};\n\nexport type GuardrailBlock = GuardrailActionBase & {\n  action: \"block\";\n  reason: string;\n  message?: string | undefined;\n};\n\nexport type InputGuardrailRewrite = GuardrailActionBase & {\n  action: \"rewrite\";\n  prompt?: Message | undefined;\n  inputText?: string | undefined;\n};\n\nexport type ToolGuardrailRewrite = GuardrailActionBase & {\n  action: \"rewrite\";\n  args: JsonValue | string;\n};\n\nexport type ToolResultGuardrailRewrite = GuardrailActionBase & {\n  action: \"rewrite\";\n  result?: string | undefined;\n  structuredResult?: ToolResultContent[] | undefined;\n};\n\nexport type OutputGuardrailRewrite = GuardrailActionBase & {\n  action: \"rewrite\";\n  outputText: string;\n};\n\nexport type ToolGuardrailApprovalRequest = GuardrailActionBase & {\n  action: \"request_approval\";\n  reason?: string | undefined;\n  rejectMessage?: string | undefined;\n};\n\nexport type InputGuardrailResult = GuardrailAllow | GuardrailBlock | InputGuardrailRewrite;\nexport type ToolGuardrailResult =\n  | GuardrailAllow\n  | GuardrailBlock\n  | ToolGuardrailRewrite\n  | ToolGuardrailApprovalRequest;\nexport type ToolResultGuardrailResult =\n  | GuardrailAllow\n  | GuardrailBlock\n  | ToolResultGuardrailRewrite;\nexport type OutputGuardrailResult = GuardrailAllow | GuardrailBlock | OutputGuardrailRewrite;\n\nexport type GuardrailCommonActions = {\n  allow(options?: GuardrailActionBase): GuardrailAllow;\n  block(options: Omit<GuardrailBlock, \"action\">): GuardrailBlock;\n};\n\nexport type InputGuardrailActions = GuardrailCommonActions & {\n  rewrite(options: Omit<InputGuardrailRewrite, \"action\">): InputGuardrailRewrite;\n};\n\nexport type ToolGuardrailActions = GuardrailCommonActions & {\n  rewrite(options: Omit<ToolGuardrailRewrite, \"action\">): ToolGuardrailRewrite;\n  requestApproval(\n    options?: Omit<ToolGuardrailApprovalRequest, \"action\">,\n  ): ToolGuardrailApprovalRequest;\n};\n\nexport type ToolResultGuardrailActions = GuardrailCommonActions & {\n  rewrite(options: Omit<ToolResultGuardrailRewrite, \"action\">): ToolResultGuardrailRewrite;\n};\n\nexport type OutputGuardrailActions = GuardrailCommonActions & {\n  rewrite(options: Omit<OutputGuardrailRewrite, \"action\">): OutputGuardrailRewrite;\n};\n\nexport type InputGuardrailContext = {\n  prompt: Message;\n  history: Message[];\n  inputText: string;\n  run: GuardrailRunContext;\n};\n\nexport type ToolGuardrailContext<Args = unknown> = {\n  toolName: string;\n  args: Args;\n  rawArgs: string;\n  toolCallId?: string | undefined;\n  internalCallId: string;\n  turn: number;\n  run: GuardrailRunContext;\n};\n\nexport type ToolResultGuardrailContext<Args = unknown> = {\n  toolName: string;\n  args: Args;\n  rawArgs: string;\n  result: string;\n  structuredResult?: ToolResultContent[] | undefined;\n  toolCallId?: string | undefined;\n  internalCallId: string;\n  turn: number;\n  run: GuardrailRunContext;\n};\n\nexport type OutputGuardrailContext = {\n  outputText: string;\n  messages: Message[];\n  usage: Usage;\n  run: GuardrailRunContext;\n};\n\nexport type InputGuardrail = {\n  id: string;\n  check(\n    context: InputGuardrailContext,\n    actions: InputGuardrailActions,\n  ): MaybePromise<InputGuardrailResult | undefined>;\n};\n\nexport type ToolGuardrail<Args = unknown> = {\n  id: string;\n  tool?: string | string[] | undefined;\n  check(\n    context: ToolGuardrailContext<Args>,\n    actions: ToolGuardrailActions,\n  ): MaybePromise<ToolGuardrailResult | undefined>;\n};\n\nexport type ToolResultGuardrail<Args = unknown> = {\n  id: string;\n  tool?: string | string[] | undefined;\n  check(\n    context: ToolResultGuardrailContext<Args>,\n    actions: ToolResultGuardrailActions,\n  ): MaybePromise<ToolResultGuardrailResult | undefined>;\n};\n\nexport type OutputGuardrail = {\n  id: string;\n  check(\n    context: OutputGuardrailContext,\n    actions: OutputGuardrailActions,\n  ): MaybePromise<OutputGuardrailResult | undefined>;\n};\n\nexport type GuardrailPolicy = {\n  id: string;\n  mode: GuardrailMode;\n  input: InputGuardrail[];\n  tools: ToolGuardrail[];\n  toolResults: ToolResultGuardrail[];\n  output: OutputGuardrail[];\n};\n\nexport type GuardrailPolicyOptions = {\n  id: string;\n  mode?: GuardrailMode | undefined;\n  input?: InputGuardrail[] | undefined;\n  tools?: ToolGuardrail[] | undefined;\n  toolResults?: ToolResultGuardrail[] | undefined;\n  output?: OutputGuardrail[] | undefined;\n};\n\nexport type GuardrailPolicyInput = GuardrailPolicy | GuardrailPolicy[];\n\nexport type InputGuardrailRunResult = {\n  prompt: Message;\n  inputText: string;\n  blocked: boolean;\n  message?: string | undefined;\n  decisions: GuardrailDecisionRecord[];\n};\n\nexport type ToolGuardrailRunResult = {\n  rawArgs: string;\n  blocked: boolean;\n  message?: string | undefined;\n  approval?: { reason?: string | undefined; rejectMessage?: string | undefined } | undefined;\n  decisions: GuardrailDecisionRecord[];\n};\n\nexport type ToolResultGuardrailRunResult = {\n  result: string;\n  structuredResult?: ToolResultContent[] | undefined;\n  blocked: boolean;\n  message?: string | undefined;\n  decisions: GuardrailDecisionRecord[];\n};\n\nexport type OutputGuardrailRunResult = {\n  outputText: string;\n  blocked: boolean;\n  message?: string | undefined;\n  decisions: GuardrailDecisionRecord[];\n};\n\nexport function defineGuardrailPolicy(options: GuardrailPolicyOptions): GuardrailPolicy {\n  return {\n    id: options.id,\n    mode: options.mode ?? \"enforce\",\n    input: options.input ?? [],\n    tools: options.tools ?? [],\n    toolResults: options.toolResults ?? [],\n    output: options.output ?? [],\n  };\n}\n\nexport function defineInputGuardrail(guardrail: InputGuardrail): InputGuardrail {\n  return guardrail;\n}\n\nexport function defineToolGuardrail<Args = unknown>(\n  guardrail: ToolGuardrail<Args>,\n): ToolGuardrail<Args> {\n  return guardrail;\n}\n\nexport function defineToolResultGuardrail<Args = unknown>(\n  guardrail: ToolResultGuardrail<Args>,\n): ToolResultGuardrail<Args> {\n  return guardrail;\n}\n\nexport function defineOutputGuardrail(guardrail: OutputGuardrail): OutputGuardrail {\n  return guardrail;\n}\n\nexport function allow(options: GuardrailActionBase = {}): GuardrailAllow {\n  return { action: \"allow\", ...options };\n}\n\nexport function block(options: Omit<GuardrailBlock, \"action\">): GuardrailBlock {\n  return { action: \"block\", ...options };\n}\n\nexport const guardrails = {\n  blockText,\n  redactText,\n};\n\nexport function normalizeGuardrailPolicies(\n  policies: GuardrailPolicyInput | undefined,\n): GuardrailPolicy[] {\n  if (policies === undefined) {\n    return [];\n  }\n  return Array.isArray(policies) ? policies : [policies];\n}\n\nexport function appendGuardrailPolicies(\n  current: GuardrailPolicy[],\n  next: GuardrailPolicyInput,\n): GuardrailPolicy[] {\n  return [...current, ...normalizeGuardrailPolicies(next)];\n}\n\nexport function hasEnforcedOutputGuardrails(policies: GuardrailPolicy[]): boolean {\n  return policies.some((policy) => policy.mode === \"enforce\" && policy.output.length > 0);\n}\n\nexport async function runInputGuardrails(\n  policies: GuardrailPolicy[],\n  context: InputGuardrailContext,\n): Promise<InputGuardrailRunResult> {\n  let prompt = context.prompt;\n  let inputText = context.inputText;\n  const decisions: GuardrailDecisionRecord[] = [];\n\n  for (const policy of policies) {\n    for (const guardrail of policy.input) {\n      const currentContext = { ...context, prompt, inputText };\n      const result = await runGuardrail(policy, guardrail.id, \"input\", () =>\n        guardrail.check(currentContext, inputActions),\n      );\n      decisions.push(result.decision);\n\n      if (policy.mode === \"observe\") {\n        continue;\n      }\n      if (result.action.action === \"block\") {\n        return {\n          prompt,\n          inputText,\n          blocked: true,\n          message: result.action.message,\n          decisions,\n        };\n      }\n      if (result.action.action === \"rewrite\") {\n        if (result.action.prompt !== undefined) {\n          prompt = result.action.prompt;\n          inputText = textFromMessage(prompt);\n        } else if (result.action.inputText !== undefined) {\n          inputText = result.action.inputText;\n          prompt = rewriteMessageText(prompt, inputText);\n        }\n      }\n    }\n  }\n\n  return { prompt, inputText, blocked: false, decisions };\n}\n\nexport async function runToolGuardrails<Args>(\n  policies: GuardrailPolicy[],\n  toolGuardrails: ToolGuardrail<Args>[],\n  context: ToolGuardrailContext<Args>,\n): Promise<ToolGuardrailRunResult> {\n  let rawArgs = context.rawArgs;\n  let args = context.args;\n  const decisions: GuardrailDecisionRecord[] = [];\n\n  for (const entry of toolGuardrailEntries(policies, toolGuardrails, context.toolName)) {\n    const currentContext = { ...context, rawArgs, args };\n    const result = await runGuardrail(entry.policy, entry.guardrail.id, \"tool\", () =>\n      entry.guardrail.check(currentContext, toolActions),\n    );\n    decisions.push(result.decision);\n\n    if (entry.policy.mode === \"observe\") {\n      continue;\n    }\n    if (result.action.action === \"block\") {\n      return {\n        rawArgs,\n        blocked: true,\n        message: result.action.message,\n        decisions,\n      };\n    }\n    if (result.action.action === \"request_approval\") {\n      return {\n        rawArgs,\n        blocked: false,\n        approval: {\n          reason: result.action.reason,\n          rejectMessage: result.action.rejectMessage,\n        },\n        decisions,\n      };\n    }\n    if (result.action.action === \"rewrite\") {\n      rawArgs =\n        typeof result.action.args === \"string\"\n          ? result.action.args\n          : JSON.stringify(result.action.args);\n      try {\n        args = JSON.parse(rawArgs) as Args;\n      } catch {\n        args = rawArgs as Args;\n      }\n    }\n  }\n\n  return { rawArgs, blocked: false, decisions };\n}\n\nexport async function runToolResultGuardrails<Args>(\n  policies: GuardrailPolicy[],\n  toolGuardrails: ToolResultGuardrail<Args>[],\n  context: ToolResultGuardrailContext<Args>,\n): Promise<ToolResultGuardrailRunResult> {\n  let result = context.result;\n  let structuredResult = context.structuredResult;\n  const decisions: GuardrailDecisionRecord[] = [];\n\n  for (const entry of toolResultGuardrailEntries(policies, toolGuardrails, context.toolName)) {\n    const currentContext = { ...context, result, structuredResult };\n    const guardrailResult = await runGuardrail(\n      entry.policy,\n      entry.guardrail.id,\n      \"tool_result\",\n      () => entry.guardrail.check(currentContext, toolResultActions),\n    );\n    decisions.push(guardrailResult.decision);\n\n    if (entry.policy.mode === \"observe\") {\n      continue;\n    }\n    if (guardrailResult.action.action === \"block\") {\n      return {\n        result,\n        structuredResult,\n        blocked: true,\n        message: guardrailResult.action.message,\n        decisions,\n      };\n    }\n    if (guardrailResult.action.action === \"rewrite\") {\n      if (guardrailResult.action.structuredResult !== undefined) {\n        structuredResult = guardrailResult.action.structuredResult;\n        result = textFromToolResultContent(structuredResult);\n      } else if (guardrailResult.action.result !== undefined) {\n        result = guardrailResult.action.result;\n        structuredResult = undefined;\n      }\n    }\n  }\n\n  return { result, structuredResult, blocked: false, decisions };\n}\n\nexport async function runOutputGuardrails(\n  policies: GuardrailPolicy[],\n  context: OutputGuardrailContext,\n): Promise<OutputGuardrailRunResult> {\n  let outputText = context.outputText;\n  const decisions: GuardrailDecisionRecord[] = [];\n\n  for (const policy of policies) {\n    for (const guardrail of policy.output) {\n      const currentContext = { ...context, outputText };\n      const result = await runGuardrail(policy, guardrail.id, \"output\", () =>\n        guardrail.check(currentContext, outputActions),\n      );\n      decisions.push(result.decision);\n\n      if (policy.mode === \"observe\") {\n        continue;\n      }\n      if (result.action.action === \"block\") {\n        return {\n          outputText,\n          blocked: true,\n          message: result.action.message,\n          decisions,\n        };\n      }\n      if (result.action.action === \"rewrite\") {\n        outputText = result.action.outputText;\n      }\n    }\n  }\n\n  return { outputText, blocked: false, decisions };\n}\n\ntype RunGuardrailResult<TAction extends { action: GuardrailActionName }> = {\n  action: TAction;\n  decision: GuardrailDecisionRecord;\n};\n\nasync function runGuardrail<TAction extends { action: GuardrailActionName } & GuardrailActionBase>(\n  policy: GuardrailPolicy,\n  guardrailId: string,\n  boundary: GuardrailBoundary,\n  run: () => MaybePromise<TAction | undefined>,\n): Promise<RunGuardrailResult<TAction | GuardrailAllow>> {\n  const startedAt = Date.now();\n  try {\n    const action = (await run()) ?? allow();\n    return {\n      action,\n      decision: decisionRecord({\n        policy,\n        guardrailId,\n        boundary,\n        action,\n        latencyMs: Date.now() - startedAt,\n      }),\n    };\n  } catch (error) {\n    const message = error instanceof Error ? error.message : String(error);\n    if (policy.mode === \"observe\") {\n      return {\n        action: allow(),\n        decision: {\n          policyId: policy.id,\n          guardrailId,\n          boundary,\n          mode: policy.mode,\n          action: \"error\",\n          applied: false,\n          reason: message,\n          latencyMs: Date.now() - startedAt,\n        },\n      };\n    }\n    throw error;\n  }\n}\n\nfunction decisionRecord(args: {\n  policy: GuardrailPolicy;\n  guardrailId: string;\n  boundary: GuardrailBoundary;\n  action: GuardrailAllow | GuardrailBlock | ({ action: GuardrailActionName } & GuardrailActionBase);\n  latencyMs: number;\n}): GuardrailDecisionRecord {\n  const applied = args.policy.mode === \"enforce\" && args.action.action !== \"allow\";\n  const record: GuardrailDecisionRecord = {\n    policyId: args.policy.id,\n    guardrailId: args.guardrailId,\n    boundary: args.boundary,\n    mode: args.policy.mode,\n    action: args.action.action,\n    applied,\n    latencyMs: args.latencyMs,\n  };\n  if (args.action.reason !== undefined) record.reason = args.action.reason;\n  if (\"message\" in args.action && typeof args.action.message === \"string\") {\n    record.message = args.action.message;\n  }\n  if (args.action.metadata !== undefined) record.metadata = args.action.metadata;\n  return record;\n}\n\nconst commonActions: GuardrailCommonActions = {\n  allow,\n  block,\n};\n\nconst inputActions: InputGuardrailActions = {\n  ...commonActions,\n  rewrite(options) {\n    return { action: \"rewrite\", ...options };\n  },\n};\n\nconst toolActions: ToolGuardrailActions = {\n  ...commonActions,\n  rewrite(options) {\n    return { action: \"rewrite\", ...options };\n  },\n  requestApproval(options = {}) {\n    return { action: \"request_approval\", ...options };\n  },\n};\n\nconst toolResultActions: ToolResultGuardrailActions = {\n  ...commonActions,\n  rewrite(options) {\n    return { action: \"rewrite\", ...options };\n  },\n};\n\nconst outputActions: OutputGuardrailActions = {\n  ...commonActions,\n  rewrite(options) {\n    return { action: \"rewrite\", ...options };\n  },\n};\n\nfunction toolGuardrailEntries<Args>(\n  policies: GuardrailPolicy[],\n  toolGuardrails: ToolGuardrail<Args>[],\n  toolName: string,\n): Array<{ policy: GuardrailPolicy; guardrail: ToolGuardrail<Args> }> {\n  return [\n    ...policies.flatMap((policy) =>\n      policy.tools\n        .filter((guardrail) => matchesTool(guardrail.tool, toolName))\n        .map((guardrail) => ({ policy, guardrail: guardrail as ToolGuardrail<Args> })),\n    ),\n    ...toolGuardrails.map((guardrail) => ({\n      policy: defineGuardrailPolicy({\n        id: `tool:${toolName}:${guardrail.id}`,\n        tools: [guardrail],\n      }),\n      guardrail,\n    })),\n  ];\n}\n\nfunction toolResultGuardrailEntries<Args>(\n  policies: GuardrailPolicy[],\n  toolGuardrails: ToolResultGuardrail<Args>[],\n  toolName: string,\n): Array<{ policy: GuardrailPolicy; guardrail: ToolResultGuardrail<Args> }> {\n  return [\n    ...policies.flatMap((policy) =>\n      policy.toolResults\n        .filter((guardrail) => matchesTool(guardrail.tool, toolName))\n        .map((guardrail) => ({ policy, guardrail: guardrail as ToolResultGuardrail<Args> })),\n    ),\n    ...toolGuardrails.map((guardrail) => ({\n      policy: defineGuardrailPolicy({\n        id: `tool:${toolName}:${guardrail.id}`,\n        toolResults: [guardrail],\n      }),\n      guardrail,\n    })),\n  ];\n}\n\nfunction matchesTool(tool: string | string[] | undefined, toolName: string): boolean {\n  if (tool === undefined) {\n    return true;\n  }\n  return Array.isArray(tool) ? tool.includes(toolName) : tool === toolName;\n}\n\ntype TextPatternBoundary = \"input\" | \"output\" | \"tool_result\";\n\ntype TextPatternGuardrailFor<Boundary extends TextPatternBoundary> = Boundary extends \"input\"\n  ? InputGuardrail\n  : Boundary extends \"output\"\n    ? OutputGuardrail\n    : ToolResultGuardrail;\n\ntype TextPatternGuardrailOptions<Boundary extends TextPatternBoundary = TextPatternBoundary> = {\n  id: string;\n  boundary: Boundary;\n  patterns: Array<string | RegExp>;\n  reason: string;\n  message?: string | undefined;\n};\n\ntype TextPatternRedactOptions<Boundary extends TextPatternBoundary = TextPatternBoundary> =\n  TextPatternGuardrailOptions<Boundary> & { replacement?: string | undefined };\n\nfunction blockText<Boundary extends TextPatternBoundary>(\n  options: TextPatternGuardrailOptions<Boundary>,\n): TextPatternGuardrailFor<Boundary> {\n  return textPatternGuardrail(options, \"block\");\n}\n\nfunction redactText<Boundary extends TextPatternBoundary>(\n  options: TextPatternRedactOptions<Boundary>,\n): TextPatternGuardrailFor<Boundary> {\n  return textPatternGuardrail(options, \"rewrite\");\n}\n\nfunction textPatternGuardrail<Boundary extends TextPatternBoundary>(\n  options: TextPatternRedactOptions<Boundary>,\n  action: \"block\" | \"rewrite\",\n): TextPatternGuardrailFor<Boundary> {\n  if (options.boundary === \"input\") {\n    return defineInputGuardrail({\n      id: options.id,\n      check(ctx, actions) {\n        return textPatternAction(ctx.inputText, options, action, (value) =>\n          actions.rewrite({ inputText: value, reason: options.reason }),\n        );\n      },\n    }) as TextPatternGuardrailFor<Boundary>;\n  }\n  if (options.boundary === \"output\") {\n    return defineOutputGuardrail({\n      id: options.id,\n      check(ctx, actions) {\n        return textPatternAction(ctx.outputText, options, action, (value) =>\n          actions.rewrite({ outputText: value, reason: options.reason }),\n        );\n      },\n    }) as TextPatternGuardrailFor<Boundary>;\n  }\n  return defineToolResultGuardrail({\n    id: options.id,\n    check(ctx, actions) {\n      return textPatternAction(ctx.result, options, action, (value) =>\n        actions.rewrite({ result: value, reason: options.reason }),\n      );\n    },\n  }) as TextPatternGuardrailFor<Boundary>;\n}\n\nfunction textPatternAction<TRewrite>(\n  text: string,\n  options: TextPatternGuardrailOptions & { replacement?: string | undefined },\n  action: \"block\" | \"rewrite\",\n  rewrite: (value: string) => TRewrite,\n): GuardrailAllow | GuardrailBlock | TRewrite {\n  const matched = options.patterns.some((pattern) => textPatternMatches(text, pattern));\n  if (!matched) {\n    return allow();\n  }\n  if (action === \"block\") {\n    return block({\n      reason: options.reason,\n      message: options.message,\n    });\n  }\n  let current = text;\n  for (const pattern of options.patterns) {\n    current = replaceTextPattern(current, pattern, options.replacement ?? \"[redacted]\");\n  }\n  return rewrite(current);\n}\n\nfunction textPatternMatches(text: string, pattern: string | RegExp): boolean {\n  if (typeof pattern === \"string\") {\n    return text.includes(pattern);\n  }\n  pattern.lastIndex = 0;\n  const matched = pattern.test(text);\n  pattern.lastIndex = 0;\n  return matched;\n}\n\nfunction replaceTextPattern(text: string, pattern: string | RegExp, replacement: string): string {\n  if (typeof pattern === \"string\") {\n    return text.split(pattern).join(replacement);\n  }\n  pattern.lastIndex = 0;\n  const flags = pattern.flags.replace(\"y\", \"\");\n  const globalFlags = flags.includes(\"g\") ? flags : `${flags}g`;\n  return text.replace(new RegExp(pattern.source, globalFlags), replacement);\n}\n\nfunction textFromMessage(message: Message): string {\n  if (message.role === \"system\") {\n    return message.content;\n  }\n  return message.content\n    .flatMap((content) => {\n      if (content.type === \"text\") {\n        return [content.text];\n      }\n      if (content.type === \"document\" && content.source.type === \"text\") {\n        return [content.source.text];\n      }\n      return [];\n    })\n    .join(\"\\n\");\n}\n\nfunction rewriteMessageText(message: Message, text: string): Message {\n  if (message.role === \"system\") {\n    return { ...message, content: text };\n  }\n  if (message.role === \"user\") {\n    return {\n      ...message,\n      content: [\n        { type: \"text\", text },\n        ...message.content.filter(\n          (item) =>\n            item.type !== \"text\" && !(item.type === \"document\" && item.source.type === \"text\"),\n        ),\n      ],\n    };\n  }\n  if (message.role === \"assistant\") {\n    return { ...message, content: [{ type: \"text\", text }] };\n  }\n  return message;\n}\n\nfunction textFromToolResultContent(content: ToolResultContent[]): string {\n  return content.map((item) => (item.type === \"text\" ? item.text : \"[image]\")).join(\"\\n\");\n}\n"],"mappings":";AAsOO,SAAS,sBAAsB,SAAkD;AACtF,SAAO;AAAA,IACL,IAAI,QAAQ;AAAA,IACZ,MAAM,QAAQ,QAAQ;AAAA,IACtB,OAAO,QAAQ,SAAS,CAAC;AAAA,IACzB,OAAO,QAAQ,SAAS,CAAC;AAAA,IACzB,aAAa,QAAQ,eAAe,CAAC;AAAA,IACrC,QAAQ,QAAQ,UAAU,CAAC;AAAA,EAC7B;AACF;AAEO,SAAS,qBAAqB,WAA2C;AAC9E,SAAO;AACT;AAEO,SAAS,oBACd,WACqB;AACrB,SAAO;AACT;AAEO,SAAS,0BACd,WAC2B;AAC3B,SAAO;AACT;AAEO,SAAS,sBAAsB,WAA6C;AACjF,SAAO;AACT;AAEO,SAAS,MAAM,UAA+B,CAAC,GAAmB;AACvE,SAAO,EAAE,QAAQ,SAAS,GAAG,QAAQ;AACvC;AAEO,SAAS,MAAM,SAAyD;AAC7E,SAAO,EAAE,QAAQ,SAAS,GAAG,QAAQ;AACvC;AAEO,IAAM,aAAa;AAAA,EACxB;AAAA,EACA;AACF;AAEO,SAAS,2BACd,UACmB;AACnB,MAAI,aAAa,QAAW;AAC1B,WAAO,CAAC;AAAA,EACV;AACA,SAAO,MAAM,QAAQ,QAAQ,IAAI,WAAW,CAAC,QAAQ;AACvD;AAEO,SAAS,wBACd,SACA,MACmB;AACnB,SAAO,CAAC,GAAG,SAAS,GAAG,2BAA2B,IAAI,CAAC;AACzD;AAEO,SAAS,4BAA4B,UAAsC;AAChF,SAAO,SAAS,KAAK,CAAC,WAAW,OAAO,SAAS,aAAa,OAAO,OAAO,SAAS,CAAC;AACxF;AAEA,eAAsB,mBACpB,UACA,SACkC;AAClC,MAAI,SAAS,QAAQ;AACrB,MAAI,YAAY,QAAQ;AACxB,QAAM,YAAuC,CAAC;AAE9C,aAAW,UAAU,UAAU;AAC7B,eAAW,aAAa,OAAO,OAAO;AACpC,YAAM,iBAAiB,EAAE,GAAG,SAAS,QAAQ,UAAU;AACvD,YAAM,SAAS,MAAM;AAAA,QAAa;AAAA,QAAQ,UAAU;AAAA,QAAI;AAAA,QAAS,MAC/D,UAAU,MAAM,gBAAgB,YAAY;AAAA,MAC9C;AACA,gBAAU,KAAK,OAAO,QAAQ;AAE9B,UAAI,OAAO,SAAS,WAAW;AAC7B;AAAA,MACF;AACA,UAAI,OAAO,OAAO,WAAW,SAAS;AACpC,eAAO;AAAA,UACL;AAAA,UACA;AAAA,UACA,SAAS;AAAA,UACT,SAAS,OAAO,OAAO;AAAA,UACvB;AAAA,QACF;AAAA,MACF;AACA,UAAI,OAAO,OAAO,WAAW,WAAW;AACtC,YAAI,OAAO,OAAO,WAAW,QAAW;AACtC,mBAAS,OAAO,OAAO;AACvB,sBAAY,gBAAgB,MAAM;AAAA,QACpC,WAAW,OAAO,OAAO,cAAc,QAAW;AAChD,sBAAY,OAAO,OAAO;AAC1B,mBAAS,mBAAmB,QAAQ,SAAS;AAAA,QAC/C;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,SAAO,EAAE,QAAQ,WAAW,SAAS,OAAO,UAAU;AACxD;AAEA,eAAsB,kBACpB,UACA,gBACA,SACiC;AACjC,MAAI,UAAU,QAAQ;AACtB,MAAI,OAAO,QAAQ;AACnB,QAAM,YAAuC,CAAC;AAE9C,aAAW,SAAS,qBAAqB,UAAU,gBAAgB,QAAQ,QAAQ,GAAG;AACpF,UAAM,iBAAiB,EAAE,GAAG,SAAS,SAAS,KAAK;AACnD,UAAM,SAAS,MAAM;AAAA,MAAa,MAAM;AAAA,MAAQ,MAAM,UAAU;AAAA,MAAI;AAAA,MAAQ,MAC1E,MAAM,UAAU,MAAM,gBAAgB,WAAW;AAAA,IACnD;AACA,cAAU,KAAK,OAAO,QAAQ;AAE9B,QAAI,MAAM,OAAO,SAAS,WAAW;AACnC;AAAA,IACF;AACA,QAAI,OAAO,OAAO,WAAW,SAAS;AACpC,aAAO;AAAA,QACL;AAAA,QACA,SAAS;AAAA,QACT,SAAS,OAAO,OAAO;AAAA,QACvB;AAAA,MACF;AAAA,IACF;AACA,QAAI,OAAO,OAAO,WAAW,oBAAoB;AAC/C,aAAO;AAAA,QACL;AAAA,QACA,SAAS;AAAA,QACT,UAAU;AAAA,UACR,QAAQ,OAAO,OAAO;AAAA,UACtB,eAAe,OAAO,OAAO;AAAA,QAC/B;AAAA,QACA;AAAA,MACF;AAAA,IACF;AACA,QAAI,OAAO,OAAO,WAAW,WAAW;AACtC,gBACE,OAAO,OAAO,OAAO,SAAS,WAC1B,OAAO,OAAO,OACd,KAAK,UAAU,OAAO,OAAO,IAAI;AACvC,UAAI;AACF,eAAO,KAAK,MAAM,OAAO;AAAA,MAC3B,QAAQ;AACN,eAAO;AAAA,MACT;AAAA,IACF;AAAA,EACF;AAEA,SAAO,EAAE,SAAS,SAAS,OAAO,UAAU;AAC9C;AAEA,eAAsB,wBACpB,UACA,gBACA,SACuC;AACvC,MAAI,SAAS,QAAQ;AACrB,MAAI,mBAAmB,QAAQ;AAC/B,QAAM,YAAuC,CAAC;AAE9C,aAAW,SAAS,2BAA2B,UAAU,gBAAgB,QAAQ,QAAQ,GAAG;AAC1F,UAAM,iBAAiB,EAAE,GAAG,SAAS,QAAQ,iBAAiB;AAC9D,UAAM,kBAAkB,MAAM;AAAA,MAC5B,MAAM;AAAA,MACN,MAAM,UAAU;AAAA,MAChB;AAAA,MACA,MAAM,MAAM,UAAU,MAAM,gBAAgB,iBAAiB;AAAA,IAC/D;AACA,cAAU,KAAK,gBAAgB,QAAQ;AAEvC,QAAI,MAAM,OAAO,SAAS,WAAW;AACnC;AAAA,IACF;AACA,QAAI,gBAAgB,OAAO,WAAW,SAAS;AAC7C,aAAO;AAAA,QACL;AAAA,QACA;AAAA,QACA,SAAS;AAAA,QACT,SAAS,gBAAgB,OAAO;AAAA,QAChC;AAAA,MACF;AAAA,IACF;AACA,QAAI,gBAAgB,OAAO,WAAW,WAAW;AAC/C,UAAI,gBAAgB,OAAO,qBAAqB,QAAW;AACzD,2BAAmB,gBAAgB,OAAO;AAC1C,iBAAS,0BAA0B,gBAAgB;AAAA,MACrD,WAAW,gBAAgB,OAAO,WAAW,QAAW;AACtD,iBAAS,gBAAgB,OAAO;AAChC,2BAAmB;AAAA,MACrB;AAAA,IACF;AAAA,EACF;AAEA,SAAO,EAAE,QAAQ,kBAAkB,SAAS,OAAO,UAAU;AAC/D;AAEA,eAAsB,oBACpB,UACA,SACmC;AACnC,MAAI,aAAa,QAAQ;AACzB,QAAM,YAAuC,CAAC;AAE9C,aAAW,UAAU,UAAU;AAC7B,eAAW,aAAa,OAAO,QAAQ;AACrC,YAAM,iBAAiB,EAAE,GAAG,SAAS,WAAW;AAChD,YAAM,SAAS,MAAM;AAAA,QAAa;AAAA,QAAQ,UAAU;AAAA,QAAI;AAAA,QAAU,MAChE,UAAU,MAAM,gBAAgB,aAAa;AAAA,MAC/C;AACA,gBAAU,KAAK,OAAO,QAAQ;AAE9B,UAAI,OAAO,SAAS,WAAW;AAC7B;AAAA,MACF;AACA,UAAI,OAAO,OAAO,WAAW,SAAS;AACpC,eAAO;AAAA,UACL;AAAA,UACA,SAAS;AAAA,UACT,SAAS,OAAO,OAAO;AAAA,UACvB;AAAA,QACF;AAAA,MACF;AACA,UAAI,OAAO,OAAO,WAAW,WAAW;AACtC,qBAAa,OAAO,OAAO;AAAA,MAC7B;AAAA,IACF;AAAA,EACF;AAEA,SAAO,EAAE,YAAY,SAAS,OAAO,UAAU;AACjD;AAOA,eAAe,aACb,QACA,aACA,UACA,KACuD;AACvD,QAAM,YAAY,KAAK,IAAI;AAC3B,MAAI;AACF,UAAM,SAAU,MAAM,IAAI,KAAM,MAAM;AACtC,WAAO;AAAA,MACL;AAAA,MACA,UAAU,eAAe;AAAA,QACvB;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA,WAAW,KAAK,IAAI,IAAI;AAAA,MAC1B,CAAC;AAAA,IACH;AAAA,EACF,SAAS,OAAO;AACd,UAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACrE,QAAI,OAAO,SAAS,WAAW;AAC7B,aAAO;AAAA,QACL,QAAQ,MAAM;AAAA,QACd,UAAU;AAAA,UACR,UAAU,OAAO;AAAA,UACjB;AAAA,UACA;AAAA,UACA,MAAM,OAAO;AAAA,UACb,QAAQ;AAAA,UACR,SAAS;AAAA,UACT,QAAQ;AAAA,UACR,WAAW,KAAK,IAAI,IAAI;AAAA,QAC1B;AAAA,MACF;AAAA,IACF;AACA,UAAM;AAAA,EACR;AACF;AAEA,SAAS,eAAe,MAMI;AAC1B,QAAM,UAAU,KAAK,OAAO,SAAS,aAAa,KAAK,OAAO,WAAW;AACzE,QAAM,SAAkC;AAAA,IACtC,UAAU,KAAK,OAAO;AAAA,IACtB,aAAa,KAAK;AAAA,IAClB,UAAU,KAAK;AAAA,IACf,MAAM,KAAK,OAAO;AAAA,IAClB,QAAQ,KAAK,OAAO;AAAA,IACpB;AAAA,IACA,WAAW,KAAK;AAAA,EAClB;AACA,MAAI,KAAK,OAAO,WAAW,OAAW,QAAO,SAAS,KAAK,OAAO;AAClE,MAAI,aAAa,KAAK,UAAU,OAAO,KAAK,OAAO,YAAY,UAAU;AACvE,WAAO,UAAU,KAAK,OAAO;AAAA,EAC/B;AACA,MAAI,KAAK,OAAO,aAAa,OAAW,QAAO,WAAW,KAAK,OAAO;AACtE,SAAO;AACT;AAEA,IAAM,gBAAwC;AAAA,EAC5C;AAAA,EACA;AACF;AAEA,IAAM,eAAsC;AAAA,EAC1C,GAAG;AAAA,EACH,QAAQ,SAAS;AACf,WAAO,EAAE,QAAQ,WAAW,GAAG,QAAQ;AAAA,EACzC;AACF;AAEA,IAAM,cAAoC;AAAA,EACxC,GAAG;AAAA,EACH,QAAQ,SAAS;AACf,WAAO,EAAE,QAAQ,WAAW,GAAG,QAAQ;AAAA,EACzC;AAAA,EACA,gBAAgB,UAAU,CAAC,GAAG;AAC5B,WAAO,EAAE,QAAQ,oBAAoB,GAAG,QAAQ;AAAA,EAClD;AACF;AAEA,IAAM,oBAAgD;AAAA,EACpD,GAAG;AAAA,EACH,QAAQ,SAAS;AACf,WAAO,EAAE,QAAQ,WAAW,GAAG,QAAQ;AAAA,EACzC;AACF;AAEA,IAAM,gBAAwC;AAAA,EAC5C,GAAG;AAAA,EACH,QAAQ,SAAS;AACf,WAAO,EAAE,QAAQ,WAAW,GAAG,QAAQ;AAAA,EACzC;AACF;AAEA,SAAS,qBACP,UACA,gBACA,UACoE;AACpE,SAAO;AAAA,IACL,GAAG,SAAS;AAAA,MAAQ,CAAC,WACnB,OAAO,MACJ,OAAO,CAAC,cAAc,YAAY,UAAU,MAAM,QAAQ,CAAC,EAC3D,IAAI,CAAC,eAAe,EAAE,QAAQ,UAA4C,EAAE;AAAA,IACjF;AAAA,IACA,GAAG,eAAe,IAAI,CAAC,eAAe;AAAA,MACpC,QAAQ,sBAAsB;AAAA,QAC5B,IAAI,QAAQ,QAAQ,IAAI,UAAU,EAAE;AAAA,QACpC,OAAO,CAAC,SAAS;AAAA,MACnB,CAAC;AAAA,MACD;AAAA,IACF,EAAE;AAAA,EACJ;AACF;AAEA,SAAS,2BACP,UACA,gBACA,UAC0E;AAC1E,SAAO;AAAA,IACL,GAAG,SAAS;AAAA,MAAQ,CAAC,WACnB,OAAO,YACJ,OAAO,CAAC,cAAc,YAAY,UAAU,MAAM,QAAQ,CAAC,EAC3D,IAAI,CAAC,eAAe,EAAE,QAAQ,UAAkD,EAAE;AAAA,IACvF;AAAA,IACA,GAAG,eAAe,IAAI,CAAC,eAAe;AAAA,MACpC,QAAQ,sBAAsB;AAAA,QAC5B,IAAI,QAAQ,QAAQ,IAAI,UAAU,EAAE;AAAA,QACpC,aAAa,CAAC,SAAS;AAAA,MACzB,CAAC;AAAA,MACD;AAAA,IACF,EAAE;AAAA,EACJ;AACF;AAEA,SAAS,YAAY,MAAqC,UAA2B;AACnF,MAAI,SAAS,QAAW;AACtB,WAAO;AAAA,EACT;AACA,SAAO,MAAM,QAAQ,IAAI,IAAI,KAAK,SAAS,QAAQ,IAAI,SAAS;AAClE;AAqBA,SAAS,UACP,SACmC;AACnC,SAAO,qBAAqB,SAAS,OAAO;AAC9C;AAEA,SAAS,WACP,SACmC;AACnC,SAAO,qBAAqB,SAAS,SAAS;AAChD;AAEA,SAAS,qBACP,SACA,QACmC;AACnC,MAAI,QAAQ,aAAa,SAAS;AAChC,WAAO,qBAAqB;AAAA,MAC1B,IAAI,QAAQ;AAAA,MACZ,MAAM,KAAK,SAAS;AAClB,eAAO;AAAA,UAAkB,IAAI;AAAA,UAAW;AAAA,UAAS;AAAA,UAAQ,CAAC,UACxD,QAAQ,QAAQ,EAAE,WAAW,OAAO,QAAQ,QAAQ,OAAO,CAAC;AAAA,QAC9D;AAAA,MACF;AAAA,IACF,CAAC;AAAA,EACH;AACA,MAAI,QAAQ,aAAa,UAAU;AACjC,WAAO,sBAAsB;AAAA,MAC3B,IAAI,QAAQ;AAAA,MACZ,MAAM,KAAK,SAAS;AAClB,eAAO;AAAA,UAAkB,IAAI;AAAA,UAAY;AAAA,UAAS;AAAA,UAAQ,CAAC,UACzD,QAAQ,QAAQ,EAAE,YAAY,OAAO,QAAQ,QAAQ,OAAO,CAAC;AAAA,QAC/D;AAAA,MACF;AAAA,IACF,CAAC;AAAA,EACH;AACA,SAAO,0BAA0B;AAAA,IAC/B,IAAI,QAAQ;AAAA,IACZ,MAAM,KAAK,SAAS;AAClB,aAAO;AAAA,QAAkB,IAAI;AAAA,QAAQ;AAAA,QAAS;AAAA,QAAQ,CAAC,UACrD,QAAQ,QAAQ,EAAE,QAAQ,OAAO,QAAQ,QAAQ,OAAO,CAAC;AAAA,MAC3D;AAAA,IACF;AAAA,EACF,CAAC;AACH;AAEA,SAAS,kBACP,MACA,SACA,QACA,SAC4C;AAC5C,QAAM,UAAU,QAAQ,SAAS,KAAK,CAAC,YAAY,mBAAmB,MAAM,OAAO,CAAC;AACpF,MAAI,CAAC,SAAS;AACZ,WAAO,MAAM;AAAA,EACf;AACA,MAAI,WAAW,SAAS;AACtB,WAAO,MAAM;AAAA,MACX,QAAQ,QAAQ;AAAA,MAChB,SAAS,QAAQ;AAAA,IACnB,CAAC;AAAA,EACH;AACA,MAAI,UAAU;AACd,aAAW,WAAW,QAAQ,UAAU;AACtC,cAAU,mBAAmB,SAAS,SAAS,QAAQ,eAAe,YAAY;AAAA,EACpF;AACA,SAAO,QAAQ,OAAO;AACxB;AAEA,SAAS,mBAAmB,MAAc,SAAmC;AAC3E,MAAI,OAAO,YAAY,UAAU;AAC/B,WAAO,KAAK,SAAS,OAAO;AAAA,EAC9B;AACA,UAAQ,YAAY;AACpB,QAAM,UAAU,QAAQ,KAAK,IAAI;AACjC,UAAQ,YAAY;AACpB,SAAO;AACT;AAEA,SAAS,mBAAmB,MAAc,SAA0B,aAA6B;AAC/F,MAAI,OAAO,YAAY,UAAU;AAC/B,WAAO,KAAK,MAAM,OAAO,EAAE,KAAK,WAAW;AAAA,EAC7C;AACA,UAAQ,YAAY;AACpB,QAAM,QAAQ,QAAQ,MAAM,QAAQ,KAAK,EAAE;AAC3C,QAAM,cAAc,MAAM,SAAS,GAAG,IAAI,QAAQ,GAAG,KAAK;AAC1D,SAAO,KAAK,QAAQ,IAAI,OAAO,QAAQ,QAAQ,WAAW,GAAG,WAAW;AAC1E;AAEA,SAAS,gBAAgB,SAA0B;AACjD,MAAI,QAAQ,SAAS,UAAU;AAC7B,WAAO,QAAQ;AAAA,EACjB;AACA,SAAO,QAAQ,QACZ,QAAQ,CAAC,YAAY;AACpB,QAAI,QAAQ,SAAS,QAAQ;AAC3B,aAAO,CAAC,QAAQ,IAAI;AAAA,IACtB;AACA,QAAI,QAAQ,SAAS,cAAc,QAAQ,OAAO,SAAS,QAAQ;AACjE,aAAO,CAAC,QAAQ,OAAO,IAAI;AAAA,IAC7B;AACA,WAAO,CAAC;AAAA,EACV,CAAC,EACA,KAAK,IAAI;AACd;AAEA,SAAS,mBAAmB,SAAkB,MAAuB;AACnE,MAAI,QAAQ,SAAS,UAAU;AAC7B,WAAO,EAAE,GAAG,SAAS,SAAS,KAAK;AAAA,EACrC;AACA,MAAI,QAAQ,SAAS,QAAQ;AAC3B,WAAO;AAAA,MACL,GAAG;AAAA,MACH,SAAS;AAAA,QACP,EAAE,MAAM,QAAQ,KAAK;AAAA,QACrB,GAAG,QAAQ,QAAQ;AAAA,UACjB,CAAC,SACC,KAAK,SAAS,UAAU,EAAE,KAAK,SAAS,cAAc,KAAK,OAAO,SAAS;AAAA,QAC/E;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACA,MAAI,QAAQ,SAAS,aAAa;AAChC,WAAO,EAAE,GAAG,SAAS,SAAS,CAAC,EAAE,MAAM,QAAQ,KAAK,CAAC,EAAE;AAAA,EACzD;AACA,SAAO;AACT;AAEA,SAAS,0BAA0B,SAAsC;AACvE,SAAO,QAAQ,IAAI,CAAC,SAAU,KAAK,SAAS,SAAS,KAAK,OAAO,SAAU,EAAE,KAAK,IAAI;AACxF;","names":[]}

package/dist/{chunk-V3WTT7TE.js → chunk-ZGIE73BH.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-YK4WAAS4.js";
 import {
   createTool
-} from "./chunk-5EDHXYH5.js";
+} from "./chunk-PGFYN5ZX.js";
 import {
   isRecord
 } from "./chunk-MMHG7WAM.js";
@@ -395,4 +395,4 @@ export {
   SkillValidationError,
   skill
 };
-//# sourceMappingURL=chunk-V3WTT7TE.js.map
+//# sourceMappingURL=chunk-ZGIE73BH.js.map

package/dist/completion/index.d.ts

@@ -1,12 +1,14 @@
-export { C as CreateCompletionBaseOptions, a as CreateCompletionInput, b as CreateCompletionOptions, c as CreateCompletionResult, d as CreateCompletionStreamOptions, e as CreateParsedCompletionOptions, f as CreateParsedCompletionResult, g as createCompletion, h as createCompletionStream, i as createParsedCompletion, j as isStreamingCompletionModel } from '../create-completion-BEbtU5pX.js';
-import { D as Document, M as Message, C as CompletionModel, h as ToolDefinition, n as ToolChoice, e as JsonValue, J as JsonObject, b as CompletionRequest, c as CompletionResponse } from '../types-C8loR4il.js';
-export { A as AssistantContent, a as AssistantMessage, r as CompletionCapabilityError, t as CompletionModelCapabilities, p as CompletionStreamEvent, u as DocumentContent, I as ImageContent, v as ImageDetail, d as JsonPrimitive, R as Reasoning, w as ReasoningContent, x as ReasoningContentType, o as StreamingCompletionModel, S as SystemMessage, T as Text, f as ToolCall, g as ToolContent, y as ToolFunction, i as ToolMessage, j as ToolResult, k as ToolResultContent, U as Usage, l as UserContent, m as UserMessage, z as assertCompletionRequestSupported, q as isToolResultContentArray, B as reasoningDisplayText, s as serializeToolResultOutput, E as textFromAssistantContent } from '../types-C8loR4il.js';
+export { C as CreateCompletionBaseOptions, a as CreateCompletionInput, b as CreateCompletionOptions, c as CreateCompletionResult, d as CreateCompletionStreamOptions, e as CreateParsedCompletionOptions, f as CreateParsedCompletionResult, g as createCompletion, h as createCompletionStream, i as createParsedCompletion, j as isStreamingCompletionModel } from '../create-completion-Y6YsYbQB.js';
+import { D as Document, M as Message, C as CompletionModel, h as ToolDefinition, n as ToolChoice, e as JsonValue, J as JsonObject, b as CompletionRequest, c as CompletionResponse } from '../types-q9G7Bvwl.js';
+export { A as AssistantContent, a as AssistantMessage, r as CompletionCapabilityError, t as CompletionModelCapabilities, p as CompletionStreamEvent, u as DocumentContent, I as ImageContent, v as ImageDetail, d as JsonPrimitive, R as Reasoning, w as ReasoningContent, x as ReasoningContentType, o as StreamingCompletionModel, S as SystemMessage, T as Text, f as ToolCall, g as ToolContent, y as ToolFunction, i as ToolMessage, j as ToolResult, k as ToolResultContent, U as Usage, l as UserContent, m as UserMessage, z as assertCompletionRequestSupported, q as isToolResultContentArray, B as reasoningDisplayText, s as serializeToolResultOutput, E as textFromAssistantContent } from '../types-q9G7Bvwl.js';
 import '../zod-schema-C7F4clpm.js';
 import 'zod';
 
 declare function normalizeDocuments(documents: Document[]): Message | undefined;
 declare function formatDocument(document: Document): string;
 
+type ModelNameOf<M extends CompletionModel> = M extends CompletionModel<unknown, infer ModelName> ? ModelName : string;
+type RawResponseOf<M extends CompletionModel> = M extends CompletionModel<infer RawResponse, infer _ModelName> ? RawResponse : unknown;
 declare class CompletionRequestBuilder<M extends CompletionModel = CompletionModel> {
     private readonly model;
     private readonly promptMessage;
@@ -21,7 +23,7 @@ declare class CompletionRequestBuilder<M extends CompletionModel = CompletionMod
     private params;
     private schema;
     constructor(model: M, promptMessage: Message);
-    modelOverride(model: string | undefined): this;
+    modelOverride(model: ModelNameOf<M> | undefined): this;
     instructions(instructions: string | undefined): this;
     messages(messages: Message[]): this;
     documents(documents: Document[]): this;
@@ -31,8 +33,8 @@ declare class CompletionRequestBuilder<M extends CompletionModel = CompletionMod
     toolChoice(toolChoice: ToolChoice | undefined): this;
     additionalParams(additionalParams: JsonValue | undefined): this;
     outputSchema(outputSchema: JsonObject | undefined): this;
-    build(): CompletionRequest;
-    send(): Promise<CompletionResponse>;
+    build(): CompletionRequest<ModelNameOf<M>>;
+    send(): Promise<CompletionResponse<RawResponseOf<M>>>;
     private buildInstructions;
 }
 

package/dist/completion/index.js

@@ -6,7 +6,7 @@ import {
   formatDocument,
   isStreamingCompletionModel,
   normalizeDocuments
-} from "../chunk-5G3VME2D.js";
+} from "../chunk-SRBW3LD7.js";
 import {
   AssistantContent,
   CompletionCapabilityError,
@@ -19,7 +19,7 @@ import {
   reasoningDisplayText,
   serializeToolResultOutput,
   textFromAssistantContent
-} from "../chunk-WJO6NVE2.js";
+} from "../chunk-5LFGEMIW.js";
 import "../chunk-WQKHFADH.js";
 export {
   AssistantContent,