@bstockwelldev/prompt-guardrails-core 1.0.0

package/README.md

@@ -0,0 +1,79 @@
+# @bstockwelldev/prompt-guardrails-core
+
+Stateless server-side prompt guardrails: policy, input/output validation, structured invocation, and privacy-safe telemetry.
+
+## Scope
+
+**In scope:** Versioned prompt policy, input validation, structured prompt builders, output validation, JSON repair, telemetry contracts, refusal typing.
+
+**Out of scope:** React, Next.js routes, provider SDKs, domain logic.
+
+## Installation
+
+```bash
+npm install @bstockwelldev/prompt-guardrails-core
+```
+
+**For Vercel/CI:** Use the npm package (`^1.0.0`). For local development before first publish, consumers may use `file:../prompt-guardrails-core`; after publishing, switch to `^1.0.0`.
+
+## Public API
+
+- `createPromptRuntime(config)` – Create guarded prompt runtime
+- `withPromptGuardrails(config, handler)` – Wrap route handlers / server actions
+- `buildStructuredPrompt({ system, userData, context })` – Instruction/data separation
+- `validatePromptInput(input, policy)` – Input guardrails
+- `validatePromptOutput(output, schema, policy)` – Output validation
+- `repairJsonOutput(raw, schemaName)` – JSON repair orchestration
+- `createTelemetryEvent(event)` – Privacy-safe telemetry
+- `PromptGuardrailsError` – Machine-readable refusal reasons
+
+## Usage
+
+```ts
+import {
+  createPromptRuntime,
+  parsePolicyRef,
+  type PromptPolicy,
+} from '@bstockwelldev/prompt-guardrails-core';
+
+const getPolicy: (id: string, version: string) => PromptPolicy | null = (id, version) => {
+  if (id === 'support_chatbot' && version === '1.3.0') {
+    return {
+      id,
+      version,
+      key: `${id}@${version}`,
+      system: 'You are a courteous support agent.',
+      constraints: { maxTokens: 800, allowUrls: false },
+    };
+  }
+  return null;
+};
+
+const runtime = createPromptRuntime({
+  getPolicy,
+  invokeGateway: async ({ messages, policy }) => {
+    // Host app performs actual LLM call
+    return await yourGateway.generateText(messages);
+  },
+});
+
+const result = await runtime.invoke('support_chatbot@1.3.0', userInput, {
+  requestId: 'req-123',
+  tenantId: 'tenant-1',
+});
+```
+
+## Refusal Reasons
+
+- `injection_detected` – Prompt injection pattern detected
+- `url_blocked` – URLs not allowed by policy
+- `policy_disabled` – Prompt disabled or unknown
+- `schema_invalid` – Output failed schema validation
+- `output_leakage_detected` – Output contains disallowed content
+- `input_too_long` – Input exceeds max length
+- `control_characters_blocked` – Disallowed control chars in input
+
+## Repository
+
+- **Source**: https://github.com/bstockwelldev/prompt-guardrails-core
+- **npm**: https://www.npmjs.com/package/@bstockwelldev/prompt-guardrails-core

package/dist/errors.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Machine-readable refusal reasons for prompt guardrails.
+ * Used by host apps for logging, metrics, and user-facing messaging.
+ */
+export type PromptRefusalReason = 'injection_detected' | 'url_blocked' | 'policy_disabled' | 'schema_invalid' | 'output_leakage_detected' | 'input_too_long' | 'control_characters_blocked';
+export declare class PromptGuardrailsError extends Error {
+    readonly reason: PromptRefusalReason;
+    readonly details?: string;
+    constructor(reason: PromptRefusalReason, message: string, details?: string);
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,MAAM,mBAAmB,GAC3B,oBAAoB,GACpB,aAAa,GACb,iBAAiB,GACjB,gBAAgB,GAChB,yBAAyB,GACzB,gBAAgB,GAChB,4BAA4B,CAAC;AAEjC,qBAAa,qBAAsB,SAAQ,KAAK;IAC9C,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC;IACrC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;gBAEd,MAAM,EAAE,mBAAmB,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM;CAO3E"}

package/dist/errors.js

@@ -0,0 +1,10 @@
+export class PromptGuardrailsError extends Error {
+    constructor(reason, message, details) {
+        super(message);
+        this.name = 'PromptGuardrailsError';
+        this.reason = reason;
+        this.details = details;
+        Object.setPrototypeOf(this, PromptGuardrailsError.prototype);
+    }
+}
+//# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAaA,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IAI9C,YAAY,MAA2B,EAAE,OAAe,EAAE,OAAgB;QACxE,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;QACpC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,qBAAqB,CAAC,SAAS,CAAC,CAAC;IAC/D,CAAC;CACF"}

package/dist/index.d.ts

@@ -0,0 +1,20 @@
+/**
+ * @bstockwelldev/prompt-guardrails-core
+ *
+ * Stateless server-side prompt guardrails: policy, input/output validation,
+ * structured invocation, and privacy-safe telemetry.
+ *
+ * The module owns prompt policy and enforcement.
+ * The host app owns provider selection, API keys, routing, auth, and domain orchestration.
+ */
+export { PromptGuardrailsError, type PromptRefusalReason, } from './errors.js';
+export type { PromptPolicy, PolicyRef, PromptInvocation, PromptInvocationResult, PromptTelemetryEvent, OutputSchema, } from './types.js';
+export { validatePromptInput, normalizeWhitespace, stripInvisibleChars, containsUrl, checkInjectionPatterns, scrubSensitiveText, } from './input.js';
+export { validatePromptOutput, repairJsonOutput, parseStructuredOutput, repairMalformedJson, checkLeakagePatterns, } from './output.js';
+export { buildStructuredPrompt, buildMessages, type StructuredPromptInput, } from './prompt.js';
+export { createTelemetryEvent, } from './telemetry.js';
+export { parsePolicyRef, loadPolicyConfig, checkPolicyEnabled, createPromptPolicyRegistry, type PolicyRegistry, type PromptRuntimeConfig, } from './policy.js';
+export { createPromptRuntime, type GatewayAdapter, type CreatePromptRuntimeOptions, } from './runtime.js';
+export { withPromptGuardrails, type InvocationHandler, type InvocationContext, } from './middleware.js';
+export { PromptPolicyEntrySchema, PromptRegistrySchema, PolicyConstraintsSchema, type PromptPolicyEntry, type PolicyConstraints, } from './schemas.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EACL,qBAAqB,EACrB,KAAK,mBAAmB,GACzB,MAAM,aAAa,CAAC;AAErB,YAAY,EACV,YAAY,EACZ,SAAS,EACT,gBAAgB,EAChB,sBAAsB,EACtB,oBAAoB,EACpB,YAAY,GACb,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,mBAAmB,EACnB,WAAW,EACX,sBAAsB,EACtB,kBAAkB,GACnB,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,oBAAoB,EACpB,gBAAgB,EAChB,qBAAqB,EACrB,mBAAmB,EACnB,oBAAoB,GACrB,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,qBAAqB,EACrB,aAAa,EACb,KAAK,qBAAqB,GAC3B,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,oBAAoB,GACrB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,kBAAkB,EAClB,0BAA0B,EAC1B,KAAK,cAAc,EACnB,KAAK,mBAAmB,GACzB,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,mBAAmB,EACnB,KAAK,cAAc,EACnB,KAAK,0BAA0B,GAChC,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,oBAAoB,EACpB,KAAK,iBAAiB,EACtB,KAAK,iBAAiB,GACvB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,uBAAuB,EACvB,oBAAoB,EACpB,uBAAuB,EACvB,KAAK,iBAAiB,EACtB,KAAK,iBAAiB,GACvB,MAAM,cAAc,CAAC"}

package/dist/index.js

@@ -0,0 +1,19 @@
+/**
+ * @bstockwelldev/prompt-guardrails-core
+ *
+ * Stateless server-side prompt guardrails: policy, input/output validation,
+ * structured invocation, and privacy-safe telemetry.
+ *
+ * The module owns prompt policy and enforcement.
+ * The host app owns provider selection, API keys, routing, auth, and domain orchestration.
+ */
+export { PromptGuardrailsError, } from './errors.js';
+export { validatePromptInput, normalizeWhitespace, stripInvisibleChars, containsUrl, checkInjectionPatterns, scrubSensitiveText, } from './input.js';
+export { validatePromptOutput, repairJsonOutput, parseStructuredOutput, repairMalformedJson, checkLeakagePatterns, } from './output.js';
+export { buildStructuredPrompt, buildMessages, } from './prompt.js';
+export { createTelemetryEvent, } from './telemetry.js';
+export { parsePolicyRef, loadPolicyConfig, checkPolicyEnabled, createPromptPolicyRegistry, } from './policy.js';
+export { createPromptRuntime, } from './runtime.js';
+export { withPromptGuardrails, } from './middleware.js';
+export { PromptPolicyEntrySchema, PromptRegistrySchema, PolicyConstraintsSchema, } from './schemas.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EACL,qBAAqB,GAEtB,MAAM,aAAa,CAAC;AAWrB,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,mBAAmB,EACnB,WAAW,EACX,sBAAsB,EACtB,kBAAkB,GACnB,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,oBAAoB,EACpB,gBAAgB,EAChB,qBAAqB,EACrB,mBAAmB,EACnB,oBAAoB,GACrB,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,qBAAqB,EACrB,aAAa,GAEd,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,oBAAoB,GACrB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,kBAAkB,EAClB,0BAA0B,GAG3B,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,mBAAmB,GAGpB,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,oBAAoB,GAGrB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,uBAAuB,EACvB,oBAAoB,EACpB,uBAAuB,GAGxB,MAAM,cAAc,CAAC"}

package/dist/input.d.ts

@@ -0,0 +1,27 @@
+import type { PromptPolicy } from './types.js';
+/**
+ * Z3: Normalize whitespace (collapse runs, trim).
+ */
+export declare function normalizeWhitespace(text: string): string;
+/**
+ * Z3: Strip invisible/control characters.
+ */
+export declare function stripInvisibleChars(text: string): string;
+/**
+ * Z3: Check if text contains URLs.
+ */
+export declare function containsUrl(text: string): boolean;
+/**
+ * Z3: Check for prompt injection patterns.
+ */
+export declare function checkInjectionPatterns(text: string): string | null;
+/**
+ * Z3: Scrub sensitive text for telemetry (redact PII, secrets).
+ */
+export declare function scrubSensitiveText(text: string): string;
+/**
+ * Z2: Validate prompt input against policy.
+ * Throws PromptGuardrailsError on policy violation.
+ */
+export declare function validatePromptInput(input: string, policy: PromptPolicy): string;
+//# sourceMappingURL=input.d.ts.map

package/dist/input.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"input.d.ts","sourceRoot":"","sources":["../src/input.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAc/C;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAExD;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAExD;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEjD;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAMlE;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAevD;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,GAAG,MAAM,CAuC/E"}

package/dist/input.js

@@ -0,0 +1,85 @@
+import { PromptGuardrailsError } from './errors.js';
+const INJECTION_PATTERNS = [
+    { pattern: /(\bsystem|\bassistant|\bdeveloper|\btool)\s*:/i, reason: 'injection_detected' },
+    { pattern: /ignore\s+all\s+previous\s+instructions/i, reason: 'injection_detected' },
+    { pattern: /simulate\s+being\s+a\s+different\s+model/i, reason: 'injection_detected' },
+];
+const URL_PATTERN = /(https?:\/\/|www\.)/i;
+/** Control chars and zero-width chars that can obfuscate injection */
+const CONTROL_CHARS = /[\x00-\x08\x0B\x0C\x0E-\x1F\x7F\u200B-\u200D\uFEFF]/g;
+/**
+ * Z3: Normalize whitespace (collapse runs, trim).
+ */
+export function normalizeWhitespace(text) {
+    return text.replace(/\s+/g, ' ').trim();
+}
+/**
+ * Z3: Strip invisible/control characters.
+ */
+export function stripInvisibleChars(text) {
+    return text.replace(CONTROL_CHARS, '');
+}
+/**
+ * Z3: Check if text contains URLs.
+ */
+export function containsUrl(text) {
+    return URL_PATTERN.test(text);
+}
+/**
+ * Z3: Check for prompt injection patterns.
+ */
+export function checkInjectionPatterns(text) {
+    const lower = text.toLowerCase();
+    for (const { pattern, reason } of INJECTION_PATTERNS) {
+        if (pattern.test(lower))
+            return reason;
+    }
+    return null;
+}
+/**
+ * Z3: Scrub sensitive text for telemetry (redact PII, secrets).
+ */
+export function scrubSensitiveText(text) {
+    let out = text;
+    const secrets = [
+        { rx: /api[_-]?key[:\s]+(\S+)/gi, rep: 'apiKey: [REDACTED]' },
+        { rx: /authorization[:\s]+(Bearer\s+\S+)/gi, rep: 'authorization: [REDACTED]' },
+        { rx: /token[:\s]+(\S+)/gi, rep: 'token: [REDACTED]' },
+    ];
+    const pii = [
+        /\b\d{3}-\d{2}-\d{4}\b/g,
+        /\b\d{12,19}\b/g,
+        /\b[\w.+-]+@[\w.-]+\.[a-zA-Z]{2,}\b/g,
+    ];
+    for (const { rx, rep } of secrets)
+        out = out.replace(rx, rep);
+    for (const rx of pii)
+        out = out.replace(rx, '[REDACTED]');
+    return out.slice(0, 8000);
+}
+/**
+ * Z2: Validate prompt input against policy.
+ * Throws PromptGuardrailsError on policy violation.
+ */
+export function validatePromptInput(input, policy) {
+    let normalized = input;
+    normalized = stripInvisibleChars(normalized);
+    normalized = normalizeWhitespace(normalized);
+    const maxLen = policy.constraints.maxInputLength ?? 64 * 1024;
+    if (normalized.length > maxLen) {
+        throw new PromptGuardrailsError('input_too_long', `Input exceeds max length (${maxLen})`, `length=${normalized.length}`);
+    }
+    const controlCheck = input.replace(CONTROL_CHARS, '');
+    if (controlCheck.length !== input.length) {
+        throw new PromptGuardrailsError('control_characters_blocked', 'Input contains disallowed control characters');
+    }
+    const injectionReason = checkInjectionPatterns(normalized);
+    if (injectionReason) {
+        throw new PromptGuardrailsError('injection_detected', 'Prompt injection pattern detected', injectionReason);
+    }
+    if (!policy.constraints.allowUrls && containsUrl(normalized)) {
+        throw new PromptGuardrailsError('url_blocked', 'URLs not allowed by policy');
+    }
+    return normalized;
+}
+//# sourceMappingURL=input.js.map

package/dist/input.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"input.js","sourceRoot":"","sources":["../src/input.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAEpD,MAAM,kBAAkB,GAA+C;IACrE,EAAE,OAAO,EAAE,gDAAgD,EAAE,MAAM,EAAE,oBAAoB,EAAE;IAC3F,EAAE,OAAO,EAAE,yCAAyC,EAAE,MAAM,EAAE,oBAAoB,EAAE;IACpF,EAAE,OAAO,EAAE,2CAA2C,EAAE,MAAM,EAAE,oBAAoB,EAAE;CACvF,CAAC;AAEF,MAAM,WAAW,GAAG,sBAAsB,CAAC;AAE3C,sEAAsE;AACtE,MAAM,aAAa,GAAG,sDAAsD,CAAC;AAE7E;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AAC1C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,OAAO,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;AACzC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,OAAO,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAChC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAAY;IACjD,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IACjC,KAAK,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,kBAAkB,EAAE,CAAC;QACrD,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,MAAM,CAAC;IACzC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,IAAI,GAAG,GAAG,IAAI,CAAC;IACf,MAAM,OAAO,GAAG;QACd,EAAE,EAAE,EAAE,0BAA0B,EAAE,GAAG,EAAE,oBAAoB,EAAE;QAC7D,EAAE,EAAE,EAAE,qCAAqC,EAAE,GAAG,EAAE,2BAA2B,EAAE;QAC/E,EAAE,EAAE,EAAE,oBAAoB,EAAE,GAAG,EAAE,mBAAmB,EAAE;KACvD,CAAC;IACF,MAAM,GAAG,GAAG;QACV,wBAAwB;QACxB,gBAAgB;QAChB,qCAAqC;KACtC,CAAC;IACF,KAAK,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,OAAO;QAAE,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;IAC9D,KAAK,MAAM,EAAE,IAAI,GAAG;QAAE,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC;IAC1D,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;AAC5B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAa,EAAE,MAAoB;IACrE,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,UAAU,GAAG,mBAAmB,CAAC,UAAU,CAAC,CAAC;IAC7C,UAAU,GAAG,mBAAmB,CAAC,UAAU,CAAC,CAAC;IAE7C,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,cAAc,IAAI,EAAE,GAAG,IAAI,CAAC;IAC9D,IAAI,UAAU,CAAC,MAAM,GAAG,MAAM,EAAE,CAAC;QAC/B,MAAM,IAAI,qBAAqB,CAC7B,gBAAgB,EAChB,6BAA6B,MAAM,GAAG,EACtC,UAAU,UAAU,CAAC,MAAM,EAAE,CAC9B,CAAC;IACJ,CAAC;IAED,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;IACtD,IAAI,YAAY,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;QACzC,MAAM,IAAI,qBAAqB,CAC7B,4BAA4B,EAC5B,8CAA8C,CAC/C,CAAC;IACJ,CAAC;IAED,MAAM,eAAe,GAAG,sBAAsB,CAAC,UAAU,CAAC,CAAC;IAC3D,IAAI,eAAe,EAAE,CAAC;QACpB,MAAM,IAAI,qBAAqB,CAC7B,oBAAoB,EACpB,mCAAmC,EACnC,eAAe,CAChB,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,SAAS,IAAI,WAAW,CAAC,UAAU,CAAC,EAAE,CAAC;QAC7D,MAAM,IAAI,qBAAqB,CAC7B,aAAa,EACb,4BAA4B,CAC7B,CAAC;IACJ,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC"}

package/dist/middleware.d.ts

@@ -0,0 +1,29 @@
+import type { PromptRuntimeConfig } from './policy.js';
+import type { PromptInvocationResult } from './types.js';
+export type InvocationContext = {
+    requestId: string;
+    tenantId?: string;
+    userId?: string;
+};
+export type InvocationHandler<TInput, TOutput, TData = unknown> = (input: TInput, context: InvocationContext, result: PromptInvocationResult<TData>) => Promise<TOutput>;
+/**
+ * Wrap an invocation handler with prompt guardrails.
+ * Host apps use this for route handlers and server actions.
+ * The guardrails run the full flow (validate input, invoke gateway, validate output);
+ * the handler receives the result and returns the response.
+ */
+export declare function withPromptGuardrails<TInput, TOutput, TData = unknown>(config: PromptRuntimeConfig & {
+    invokeGateway: import('./runtime.js').GatewayAdapter;
+    /** Extract policyRef from input */
+    getPolicyRef: (input: TInput) => string;
+    /** Extract user data from input */
+    getUserData: (input: TInput) => string;
+    /** Optional: extract context from input */
+    getContext?: (input: TInput) => {
+        tenantId?: string;
+        userId?: string;
+    };
+    /** Optional: output schema for structured validation */
+    outputSchema?: import('./types.js').OutputSchema<TData>;
+}, handler: InvocationHandler<TInput, TOutput, TData>): (input: TInput, context: InvocationContext) => Promise<TOutput>;
+//# sourceMappingURL=middleware.d.ts.map

package/dist/middleware.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware.d.ts","sourceRoot":"","sources":["../src/middleware.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AACvD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAGzD,MAAM,MAAM,iBAAiB,GAAG;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,iBAAiB,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,GAAG,OAAO,IAAI,CAChE,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,iBAAiB,EAC1B,MAAM,EAAE,sBAAsB,CAAC,KAAK,CAAC,KAClC,OAAO,CAAC,OAAO,CAAC,CAAC;AAEtB;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,GAAG,OAAO,EACnE,MAAM,EAAE,mBAAmB,GAAG;IAC5B,aAAa,EAAE,OAAO,cAAc,EAAE,cAAc,CAAC;IACrD,mCAAmC;IACnC,YAAY,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,CAAC;IACxC,mCAAmC;IACnC,WAAW,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,CAAC;IACvC,2CAA2C;IAC3C,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACvE,wDAAwD;IACxD,YAAY,CAAC,EAAE,OAAO,YAAY,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC;CACzD,EACD,OAAO,EAAE,iBAAiB,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,GACjD,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,KAAK,OAAO,CAAC,OAAO,CAAC,CA0BjE"}

package/dist/middleware.js

@@ -0,0 +1,31 @@
+import { createPromptRuntime } from './runtime.js';
+/**
+ * Wrap an invocation handler with prompt guardrails.
+ * Host apps use this for route handlers and server actions.
+ * The guardrails run the full flow (validate input, invoke gateway, validate output);
+ * the handler receives the result and returns the response.
+ */
+export function withPromptGuardrails(config, handler) {
+    const runtime = createPromptRuntime({
+        getPolicy: config.getPolicy,
+        isPromptEnabled: config.isPromptEnabled,
+        onTelemetry: config.onTelemetry,
+        invokeGateway: config.invokeGateway,
+    });
+    return async (input, ctx) => {
+        const policyRef = config.getPolicyRef(input);
+        const userData = config.getUserData(input);
+        const context = config.getContext?.(input) ?? {};
+        const result = await runtime.invoke(policyRef, userData, {
+            requestId: ctx.requestId,
+            tenantId: context.tenantId ?? ctx.tenantId,
+            userId: context.userId ?? ctx.userId,
+            outputSchema: config.outputSchema,
+        });
+        if (!result.success && result.refused) {
+            throw new Error(`Prompt guardrails refused: ${result.reason}`);
+        }
+        return handler(input, ctx, result);
+    };
+}
+//# sourceMappingURL=middleware.js.map

package/dist/middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware.js","sourceRoot":"","sources":["../src/middleware.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAcnD;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAClC,MAUC,EACD,OAAkD;IAElD,MAAM,OAAO,GAAG,mBAAmB,CAAC;QAClC,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,eAAe,EAAE,MAAM,CAAC,eAAe;QACvC,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,aAAa,EAAE,MAAM,CAAC,aAAa;KACpC,CAAC,CAAC;IAEH,OAAO,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QAC1B,MAAM,SAAS,GAAG,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QAC7C,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QAC3C,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAEjD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,MAAM,CAAQ,SAAS,EAAE,QAAQ,EAAE;YAC9D,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ;YAC1C,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM;YACpC,YAAY,EAAE,MAAM,CAAC,YAAY;SAClC,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACtC,MAAM,IAAI,KAAK,CAAC,8BAA8B,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QACjE,CAAC;QAED,OAAO,OAAO,CAAC,KAAK,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;IACrC,CAAC,CAAC;AACJ,CAAC"}

package/dist/output.d.ts

@@ -0,0 +1,28 @@
+import type { OutputSchema } from './types.js';
+/**
+ * Z3: Parse JSON from text, stripping markdown fences.
+ */
+export declare function parseStructuredOutput<T>(text: string): T | null;
+/**
+ * Z2: Repair malformed JSON from LLM output.
+ */
+export declare function repairMalformedJson<T>(raw: string): T | null;
+/**
+ * Z3: Check output for leakage patterns (secrets, PII).
+ */
+export declare function checkLeakagePatterns(text: string): string | null;
+/**
+ * Z2: Validate prompt output against schema and policy.
+ */
+export declare function validatePromptOutput<T>(raw: string, schema: OutputSchema<T>): {
+    ok: true;
+    data: T;
+} | {
+    ok: false;
+    reason: 'schema_invalid' | 'output_leakage_detected';
+};
+/**
+ * Z2: Repair JSON output with optional schema validation.
+ */
+export declare function repairJsonOutput<T>(raw: string, schema: OutputSchema<T>): T | null;
+//# sourceMappingURL=output.d.ts.map

package/dist/output.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"output.d.ts","sourceRoot":"","sources":["../src/output.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAO/C;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,GAAG,CAAC,GAAG,IAAI,CAiB/D;AAmBD;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,GAAG,CAAC,GAAG,IAAI,CAsB5D;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAKhE;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,CAAC,EACpC,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,GACtB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,CAAC,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,gBAAgB,GAAG,yBAAyB,CAAA;CAAE,CAmB7F;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,CAAC,EAChC,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,GACtB,CAAC,GAAG,IAAI,CAOV"}

package/dist/output.js

@@ -0,0 +1,111 @@
+const FENCE_REGEX = /^```(?:json)?\s*\n?(.*?)\n?\s*```$/s;
+const TRAILING_COMMA_REGEX = /,\s*([}\]])/g;
+const DISALLOWED_OUTPUT = [/password/i, /private key/i, /how to hack/i];
+/**
+ * Z3: Parse JSON from text, stripping markdown fences.
+ */
+export function parseStructuredOutput(text) {
+    let jsonStr = text.trim();
+    const match = jsonStr.match(FENCE_REGEX);
+    if (match?.[1])
+        jsonStr = match[1].trim();
+    else if (jsonStr.startsWith('```')) {
+        const first = jsonStr.indexOf('\n');
+        if (first !== -1) {
+            jsonStr = jsonStr.slice(first + 1).trim();
+            if (jsonStr.endsWith('```'))
+                jsonStr = jsonStr.slice(0, -3).trim();
+        }
+    }
+    try {
+        return JSON.parse(jsonStr);
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Z3: Fix trailing commas in JSON string.
+ */
+function fixTrailingCommas(jsonStr) {
+    return jsonStr.replace(TRAILING_COMMA_REGEX, '$1');
+}
+/**
+ * Z3: Extract JSON object between first { and last }.
+ */
+function extractJsonObject(text) {
+    const first = text.indexOf('{');
+    const last = text.lastIndexOf('}');
+    if (first === -1 || last <= first)
+        return null;
+    return text.slice(first, last + 1);
+}
+/**
+ * Z2: Repair malformed JSON from LLM output.
+ */
+export function repairMalformedJson(raw) {
+    let jsonStr = raw.trim();
+    const match = jsonStr.match(FENCE_REGEX);
+    if (match?.[1])
+        jsonStr = match[1].trim();
+    const attempts = [
+        () => JSON.parse(jsonStr),
+        () => JSON.parse(fixTrailingCommas(jsonStr)),
+        () => {
+            const extracted = extractJsonObject(jsonStr);
+            return extracted ? JSON.parse(extracted) : null;
+        },
+    ];
+    for (const attempt of attempts) {
+        try {
+            return attempt();
+        }
+        catch {
+            continue;
+        }
+    }
+    return null;
+}
+/**
+ * Z3: Check output for leakage patterns (secrets, PII).
+ */
+export function checkLeakagePatterns(text) {
+    for (const rx of DISALLOWED_OUTPUT) {
+        if (rx.test(text))
+            return 'output_leakage_detected';
+    }
+    return null;
+}
+/**
+ * Z2: Validate prompt output against schema and policy.
+ */
+export function validatePromptOutput(raw, schema) {
+    const leakage = checkLeakagePatterns(raw);
+    if (leakage) {
+        return { ok: false, reason: 'output_leakage_detected' };
+    }
+    let parsed = parseStructuredOutput(raw);
+    if (parsed === null)
+        parsed = repairMalformedJson(raw);
+    if (parsed === null) {
+        return { ok: false, reason: 'schema_invalid' };
+    }
+    const result = schema.safeParse(parsed);
+    if (!result.success) {
+        return { ok: false, reason: 'schema_invalid' };
+    }
+    return { ok: true, data: result.data };
+}
+/**
+ * Z2: Repair JSON output with optional schema validation.
+ */
+export function repairJsonOutput(raw, schema) {
+    let parsed = parseStructuredOutput(raw);
+    if (parsed === null)
+        parsed = repairMalformedJson(raw);
+    if (parsed === null)
+        return null;
+    const result = schema.safeParse(parsed);
+    return result.success ? result.data : null;
+}
+//# sourceMappingURL=output.js.map

package/dist/output.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"output.js","sourceRoot":"","sources":["../src/output.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,GAAG,qCAAqC,CAAC;AAC1D,MAAM,oBAAoB,GAAG,cAAc,CAAC;AAC5C,MAAM,iBAAiB,GAAG,CAAC,WAAW,EAAE,cAAc,EAAE,cAAc,CAAC,CAAC;AAExE;;GAEG;AACH,MAAM,UAAU,qBAAqB,CAAI,IAAY;IACnD,IAAI,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC1B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IACzC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC;QAAE,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACrC,IAAI,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;YACjB,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAC1C,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAAE,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACrE,CAAC;IACH,CAAC;IAED,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAM,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,iBAAiB,CAAC,OAAe;IACxC,OAAO,OAAO,CAAC,OAAO,CAAC,oBAAoB,EAAE,IAAI,CAAC,CAAC;AACrD,CAAC;AAED;;GAEG;AACH,SAAS,iBAAiB,CAAC,IAAY;IACrC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,KAAK,KAAK,CAAC,CAAC,IAAI,IAAI,IAAI,KAAK;QAAE,OAAO,IAAI,CAAC;IAC/C,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC;AACrC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAI,GAAW;IAChD,IAAI,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACzB,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IACzC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC;QAAE,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAE1C,MAAM,QAAQ,GAAG;QACf,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAM;QAC9B,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAM;QACjD,GAAG,EAAE;YACH,MAAM,SAAS,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;YAC7C,OAAO,SAAS,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,SAAS,CAAO,CAAC,CAAC,CAAC,IAAI,CAAC;QACzD,CAAC;KACF,CAAC;IAEF,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,CAAC;YACH,OAAO,OAAO,EAAE,CAAC;QACnB,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,KAAK,MAAM,EAAE,IAAI,iBAAiB,EAAE,CAAC;QACnC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,yBAAyB,CAAC;IACtD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAClC,GAAW,EACX,MAAuB;IAEvB,MAAM,OAAO,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;IAC1C,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC;IAC1D,CAAC;IAED,IAAI,MAAM,GAAa,qBAAqB,CAAI,GAAG,CAAC,CAAC;IACrD,IAAI,MAAM,KAAK,IAAI;QAAE,MAAM,GAAG,mBAAmB,CAAI,GAAG,CAAC,CAAC;IAE1D,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;IACjD,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACxC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;IACjD,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;AACzC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAC9B,GAAW,EACX,MAAuB;IAEvB,IAAI,MAAM,GAAa,qBAAqB,CAAI,GAAG,CAAC,CAAC;IACrD,IAAI,MAAM,KAAK,IAAI;QAAE,MAAM,GAAG,mBAAmB,CAAI,GAAG,CAAC,CAAC;IAC1D,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAEjC,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACxC,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7C,CAAC"}

package/dist/policy.d.ts

@@ -0,0 +1,28 @@
+import type { PromptPolicy, PolicyRef } from './types.js';
+/**
+ * Z3: Parse policy reference "id@version" or "id@v1.2.3".
+ */
+export declare function parsePolicyRef(policy: string): PolicyRef;
+export type PolicyRegistry = (id: string, version: string) => PromptPolicy | null;
+export type PromptRuntimeConfig = {
+    /** Resolve policy by id and version */
+    getPolicy: PolicyRegistry;
+    /** Optional: check if prompt is enabled (feature flag) */
+    isPromptEnabled?: (id: string, version: string) => boolean;
+    /** Optional: emit telemetry events */
+    onTelemetry?: (event: import('./types.js').PromptTelemetryEvent) => void;
+};
+/**
+ * Z2: Load policy config from registry.
+ */
+export declare function loadPolicyConfig(policyRef: string, getPolicy: PolicyRegistry): PromptPolicy;
+/**
+ * Z2: Check if policy is enabled (when feature flag provided).
+ */
+export declare function checkPolicyEnabled(policy: PromptPolicy, isEnabled?: (id: string, version: string) => boolean): boolean;
+/**
+ * Create a PolicyRegistry from registry JSON.
+ * Host apps can load and validate their registry, then pass the result.
+ */
+export declare function createPromptPolicyRegistry(registry: unknown): PolicyRegistry;
+//# sourceMappingURL=policy.d.ts.map

package/dist/policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../src/policy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAG1D;;GAEG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CASxD;AAED,MAAM,MAAM,cAAc,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,YAAY,GAAG,IAAI,CAAC;AAElF,MAAM,MAAM,mBAAmB,GAAG;IAChC,uCAAuC;IACvC,SAAS,EAAE,cAAc,CAAC;IAC1B,0DAA0D;IAC1D,eAAe,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC;IAC3D,sCAAsC;IACtC,WAAW,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,YAAY,EAAE,oBAAoB,KAAK,IAAI,CAAC;CAC1E,CAAC;AAEF;;GAEG;AACH,wBAAgB,gBAAgB,CAC9B,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,cAAc,GACxB,YAAY,CAOd;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,YAAY,EACpB,SAAS,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,OAAO,GACnD,OAAO,CAGT;AAED;;;GAGG;AACH,wBAAgB,0BAA0B,CACxC,QAAQ,EAAE,OAAO,GAChB,cAAc,CAmBhB"}

package/dist/policy.js

@@ -0,0 +1,60 @@
+import { PromptRegistrySchema } from './schemas.js';
+/**
+ * Z3: Parse policy reference "id@version" or "id@v1.2.3".
+ */
+export function parsePolicyRef(policy) {
+    const atIndex = policy.indexOf('@');
+    if (atIndex === -1) {
+        throw new Error(`Invalid policy reference: ${policy}`);
+    }
+    const idPart = policy.slice(0, atIndex);
+    let versionPart = policy.slice(atIndex + 1);
+    if (versionPart.startsWith('v'))
+        versionPart = versionPart.slice(1);
+    return { id: idPart, version: versionPart, key: policy };
+}
+/**
+ * Z2: Load policy config from registry.
+ */
+export function loadPolicyConfig(policyRef, getPolicy) {
+    const ref = parsePolicyRef(policyRef);
+    const policy = getPolicy(ref.id, ref.version);
+    if (!policy) {
+        throw new Error(`Unknown policy ${policyRef}`);
+    }
+    return policy;
+}
+/**
+ * Z2: Check if policy is enabled (when feature flag provided).
+ */
+export function checkPolicyEnabled(policy, isEnabled) {
+    if (!isEnabled)
+        return true;
+    return isEnabled(policy.id, policy.version);
+}
+/**
+ * Create a PolicyRegistry from registry JSON.
+ * Host apps can load and validate their registry, then pass the result.
+ */
+export function createPromptPolicyRegistry(registry) {
+    const entries = PromptRegistrySchema.parse(registry);
+    return (id, version) => {
+        const entry = entries.find((e) => e.id === id && e.version === version);
+        if (!entry)
+            return null;
+        return {
+            id: entry.id,
+            version: entry.version,
+            key: `${entry.id}@${entry.version}`,
+            system: entry.system,
+            constraints: {
+                maxTokens: entry.constraints.maxTokens,
+                temperature: entry.constraints.temperature,
+                allowUrls: entry.constraints.allowUrls ?? false,
+                maxInputLength: entry.constraints.maxInputLength,
+                tools: entry.constraints.tools,
+            },
+        };
+    };
+}
+//# sourceMappingURL=policy.js.map

package/dist/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../src/policy.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAEpD;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,MAAc;IAC3C,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,OAAO,KAAK,CAAC,CAAC,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,6BAA6B,MAAM,EAAE,CAAC,CAAC;IACzD,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IACxC,IAAI,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC;IAC5C,IAAI,WAAW,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,WAAW,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACpE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC;AAC3D,CAAC;AAaD;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAC9B,SAAiB,EACjB,SAAyB;IAEzB,MAAM,GAAG,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC;IACtC,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;IAC9C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,kBAAkB,SAAS,EAAE,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAChC,MAAoB,EACpB,SAAoD;IAEpD,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IAC5B,OAAO,SAAS,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;AAC9C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,0BAA0B,CACxC,QAAiB;IAEjB,MAAM,OAAO,GAAG,oBAAoB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACrD,OAAO,CAAC,EAAU,EAAE,OAAe,EAAuB,EAAE;QAC1D,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC;QACxE,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QACxB,OAAO;YACL,EAAE,EAAE,KAAK,CAAC,EAAE;YACZ,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,GAAG,EAAE,GAAG,KAAK,CAAC,EAAE,IAAI,KAAK,CAAC,OAAO,EAAE;YACnC,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,WAAW,EAAE;gBACX,SAAS,EAAE,KAAK,CAAC,WAAW,CAAC,SAAS;gBACtC,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,WAAW;gBAC1C,SAAS,EAAE,KAAK,CAAC,WAAW,CAAC,SAAS,IAAI,KAAK;gBAC/C,cAAc,EAAE,KAAK,CAAC,WAAW,CAAC,cAAc;gBAChD,KAAK,EAAE,KAAK,CAAC,WAAW,CAAC,KAAK;aAC/B;SACF,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC"}

package/dist/prompt.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Build a structured prompt with clear separation of system instructions
+ * from user data. Uses XML-style delimiters for robustness.
+ */
+export type StructuredPromptInput = {
+    system: string;
+    userData: string;
+    context?: string;
+};
+/**
+ * Build a structured prompt with instruction/data separation.
+ * System instructions remain separate; user data is wrapped in delimiters.
+ */
+export declare function buildStructuredPrompt(input: StructuredPromptInput): string;
+/**
+ * Build messages array for SDK consumers (system + user).
+ */
+export declare function buildMessages(input: StructuredPromptInput): Array<{
+    role: 'user' | 'system';
+    content: string;
+}>;
+//# sourceMappingURL=prompt.d.ts.map

package/dist/prompt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt.d.ts","sourceRoot":"","sources":["../src/prompt.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,MAAM,qBAAqB,GAAG;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAOF;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,qBAAqB,GAAG,MAAM,CAU1E;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,qBAAqB,GAAG,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,GAAG,QAAQ,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,CAU/G"}

package/dist/prompt.js

@@ -0,0 +1,34 @@
+/**
+ * Build a structured prompt with clear separation of system instructions
+ * from user data. Uses XML-style delimiters for robustness.
+ */
+const USER_DATA_START = '<user_data>';
+const USER_DATA_END = '</user_data>';
+const CONTEXT_START = '<context>';
+const CONTEXT_END = '</context>';
+/**
+ * Build a structured prompt with instruction/data separation.
+ * System instructions remain separate; user data is wrapped in delimiters.
+ */
+export function buildStructuredPrompt(input) {
+    const parts = [input.system];
+    if (input.context?.trim()) {
+        parts.push(`${CONTEXT_START}\n${input.context.trim()}\n${CONTEXT_END}`);
+    }
+    parts.push(`${USER_DATA_START}\n${input.userData.trim()}\n${USER_DATA_END}`);
+    return parts.join('\n\n');
+}
+/**
+ * Build messages array for SDK consumers (system + user).
+ */
+export function buildMessages(input) {
+    const systemParts = [input.system];
+    if (input.context?.trim()) {
+        systemParts.push(`${CONTEXT_START}\n${input.context.trim()}\n${CONTEXT_END}`);
+    }
+    return [
+        { role: 'system', content: systemParts.join('\n\n') },
+        { role: 'user', content: input.userData.trim() },
+    ];
+}
+//# sourceMappingURL=prompt.js.map

package/dist/prompt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt.js","sourceRoot":"","sources":["../src/prompt.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAQH,MAAM,eAAe,GAAG,aAAa,CAAC;AACtC,MAAM,aAAa,GAAG,cAAc,CAAC;AACrC,MAAM,aAAa,GAAG,WAAW,CAAC;AAClC,MAAM,WAAW,GAAG,YAAY,CAAC;AAEjC;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAA4B;IAChE,MAAM,KAAK,GAAa,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAEvC,IAAI,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC;QAC1B,KAAK,CAAC,IAAI,CAAC,GAAG,aAAa,KAAK,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,WAAW,EAAE,CAAC,CAAC;IAC1E,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,GAAG,eAAe,KAAK,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,aAAa,EAAE,CAAC,CAAC;IAE7E,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAC5B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,KAA4B;IACxD,MAAM,WAAW,GAAa,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC7C,IAAI,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC;QAC1B,WAAW,CAAC,IAAI,CAAC,GAAG,aAAa,KAAK,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,WAAW,EAAE,CAAC,CAAC;IAChF,CAAC;IAED,OAAO;QACL,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE;QACrD,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE;KACjD,CAAC;AACJ,CAAC"}

package/dist/runtime.d.ts

@@ -0,0 +1,29 @@
+import type { PromptPolicy, PromptInvocationResult } from './types.js';
+import type { OutputSchema } from './types.js';
+import { type PromptRuntimeConfig } from './policy.js';
+export type GatewayAdapter = (params: {
+    messages: Array<{
+        role: 'user' | 'system';
+        content: string;
+    }>;
+    policy: PromptPolicy;
+    requestId: string;
+}) => Promise<string>;
+export type CreatePromptRuntimeOptions = PromptRuntimeConfig & {
+    /** Host-provided gateway that performs the actual LLM call */
+    invokeGateway: GatewayAdapter;
+};
+/**
+ * Z1: Create a guarded prompt runtime.
+ * Orchestrates: load policy → validate input → invoke gateway → validate output → emit telemetry.
+ */
+export declare function createPromptRuntime(config: CreatePromptRuntimeOptions): {
+    invoke<T>(policyRef: string, userData: string, options?: {
+        systemContext?: string;
+        outputSchema?: OutputSchema<T>;
+        requestId?: string;
+        tenantId?: string;
+        userId?: string;
+    }): Promise<PromptInvocationResult<T>>;
+};
+//# sourceMappingURL=runtime.d.ts.map

package/dist/runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../src/runtime.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,sBAAsB,EAAwB,MAAM,YAAY,CAAC;AAC7F,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE/C,OAAO,EAAwC,KAAK,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAM7F,MAAM,MAAM,cAAc,GAAG,CAAC,MAAM,EAAE;IACpC,QAAQ,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,GAAG,QAAQ,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC9D,MAAM,EAAE,YAAY,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;CACnB,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;AAEtB,MAAM,MAAM,0BAA0B,GAAG,mBAAmB,GAAG;IAC7D,8DAA8D;IAC9D,aAAa,EAAE,cAAc,CAAC;CAC/B,CAAC;AAEF;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,0BAA0B;WAIrD,CAAC,aACD,MAAM,YACP,MAAM,YACN;QACR,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,YAAY,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC;QAC/B,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,GACA,OAAO,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC;EAwIxC"}

package/dist/runtime.js

@@ -0,0 +1,144 @@
+import { randomUUID } from 'crypto';
+import { PromptGuardrailsError } from './errors.js';
+import { loadPolicyConfig, checkPolicyEnabled } from './policy.js';
+import { validatePromptInput } from './input.js';
+import { validatePromptOutput } from './output.js';
+import { buildMessages } from './prompt.js';
+import { createTelemetryEvent } from './telemetry.js';
+/**
+ * Z1: Create a guarded prompt runtime.
+ * Orchestrates: load policy → validate input → invoke gateway → validate output → emit telemetry.
+ */
+export function createPromptRuntime(config) {
+    const { getPolicy, isPromptEnabled, onTelemetry, invokeGateway } = config;
+    return {
+        async invoke(policyRef, userData, options) {
+            const requestId = options?.requestId ?? randomUUID();
+            let policy;
+            try {
+                policy = loadPolicyConfig(policyRef, getPolicy);
+            }
+            catch (err) {
+                return {
+                    success: false,
+                    refused: true,
+                    reason: 'policy_disabled',
+                    requestId,
+                    message: err instanceof Error ? err.message : String(err),
+                };
+            }
+            if (!checkPolicyEnabled(policy, isPromptEnabled)) {
+                return {
+                    success: false,
+                    refused: true,
+                    reason: 'policy_disabled',
+                    requestId,
+                };
+            }
+            let validatedInput;
+            try {
+                validatedInput = validatePromptInput(userData, policy);
+            }
+            catch (err) {
+                if (err instanceof PromptGuardrailsError) {
+                    onTelemetry?.(createTelemetryEvent({
+                        requestId,
+                        policyRef,
+                        promptId: policy.id,
+                        promptVersion: policy.version,
+                        promptText: userData,
+                        outputText: '',
+                        latencyMs: 0,
+                        tenantId: options?.tenantId,
+                        userId: options?.userId,
+                        policyHit: err.reason,
+                    }));
+                    return {
+                        success: false,
+                        refused: true,
+                        reason: err.reason,
+                        requestId,
+                        message: err.message,
+                    };
+                }
+                throw err;
+            }
+            const messages = buildMessages({
+                system: policy.system,
+                userData: validatedInput,
+                context: options?.systemContext,
+            });
+            const start = Date.now();
+            let rawOutput;
+            try {
+                rawOutput = await invokeGateway({
+                    messages,
+                    policy,
+                    requestId,
+                });
+            }
+            catch (err) {
+                throw err;
+            }
+            const latencyMs = Date.now() - start;
+            if (options?.outputSchema) {
+                const validated = validatePromptOutput(rawOutput, options.outputSchema);
+                if (!validated.ok) {
+                    onTelemetry?.(createTelemetryEvent({
+                        requestId,
+                        policyRef,
+                        promptId: policy.id,
+                        promptVersion: policy.version,
+                        promptText: validatedInput,
+                        outputText: rawOutput,
+                        latencyMs,
+                        tenantId: options?.tenantId,
+                        userId: options?.userId,
+                        policyHit: validated.reason,
+                    }));
+                    return {
+                        success: false,
+                        refused: true,
+                        reason: validated.reason,
+                        requestId,
+                    };
+                }
+                onTelemetry?.(createTelemetryEvent({
+                    requestId,
+                    policyRef,
+                    promptId: policy.id,
+                    promptVersion: policy.version,
+                    promptText: validatedInput,
+                    outputText: rawOutput,
+                    latencyMs,
+                    tenantId: options?.tenantId,
+                    userId: options?.userId,
+                }));
+                return {
+                    success: true,
+                    data: validated.data,
+                    requestId,
+                    refused: false,
+                };
+            }
+            onTelemetry?.(createTelemetryEvent({
+                requestId,
+                policyRef,
+                promptId: policy.id,
+                promptVersion: policy.version,
+                promptText: validatedInput,
+                outputText: rawOutput,
+                latencyMs,
+                tenantId: options?.tenantId,
+                userId: options?.userId,
+            }));
+            return {
+                success: true,
+                data: rawOutput,
+                requestId,
+                refused: false,
+            };
+        },
+    };
+}
+//# sourceMappingURL=runtime.js.map

package/dist/runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.js","sourceRoot":"","sources":["../src/runtime.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAGpC,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAA4B,MAAM,aAAa,CAAC;AAC7F,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AACjD,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAatD;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAkC;IACpE,MAAM,EAAE,SAAS,EAAE,eAAe,EAAE,WAAW,EAAE,aAAa,EAAE,GAAG,MAAM,CAAC;IAE1E,OAAO;QACL,KAAK,CAAC,MAAM,CACV,SAAiB,EACjB,QAAgB,EAChB,OAMC;YAED,MAAM,SAAS,GAAG,OAAO,EAAE,SAAS,IAAI,UAAU,EAAE,CAAC;YAErD,IAAI,MAAoB,CAAC;YACzB,IAAI,CAAC;gBACH,MAAM,GAAG,gBAAgB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;YAClD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,OAAO,EAAE,IAAI;oBACb,MAAM,EAAE,iBAAiB;oBACzB,SAAS;oBACT,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;iBAC1D,CAAC;YACJ,CAAC;YAED,IAAI,CAAC,kBAAkB,CAAC,MAAM,EAAE,eAAe,CAAC,EAAE,CAAC;gBACjD,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,OAAO,EAAE,IAAI;oBACb,MAAM,EAAE,iBAAiB;oBACzB,SAAS;iBACV,CAAC;YACJ,CAAC;YAED,IAAI,cAAsB,CAAC;YAC3B,IAAI,CAAC;gBACH,cAAc,GAAG,mBAAmB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YACzD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,GAAG,YAAY,qBAAqB,EAAE,CAAC;oBACzC,WAAW,EAAE,CAAC,oBAAoB,CAAC;wBACjC,SAAS;wBACT,SAAS;wBACT,QAAQ,EAAE,MAAM,CAAC,EAAE;wBACnB,aAAa,EAAE,MAAM,CAAC,OAAO;wBAC7B,UAAU,EAAE,QAAQ;wBACpB,UAAU,EAAE,EAAE;wBACd,SAAS,EAAE,CAAC;wBACZ,QAAQ,EAAE,OAAO,EAAE,QAAQ;wBAC3B,MAAM,EAAE,OAAO,EAAE,MAAM;wBACvB,SAAS,EAAE,GAAG,CAAC,MAAM;qBACtB,CAAC,CAAC,CAAC;oBACJ,OAAO;wBACL,OAAO,EAAE,KAAK;wBACd,OAAO,EAAE,IAAI;wBACb,MAAM,EAAE,GAAG,CAAC,MAAM;wBAClB,SAAS;wBACT,OAAO,EAAE,GAAG,CAAC,OAAO;qBACrB,CAAC;gBACJ,CAAC;gBACD,MAAM,GAAG,CAAC;YACZ,CAAC;YAED,MAAM,QAAQ,GAAG,aAAa,CAAC;gBAC7B,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,QAAQ,EAAE,cAAc;gBACxB,OAAO,EAAE,OAAO,EAAE,aAAa;aAChC,CAAC,CAAC;YAEH,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACzB,IAAI,SAAiB,CAAC;YACtB,IAAI,CAAC;gBACH,SAAS,GAAG,MAAM,aAAa,CAAC;oBAC9B,QAAQ;oBACR,MAAM;oBACN,SAAS;iBACV,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,GAAG,CAAC;YACZ,CAAC;YAED,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;YAErC,IAAI,OAAO,EAAE,YAAY,EAAE,CAAC;gBAC1B,MAAM,SAAS,GAAG,oBAAoB,CAAC,SAAS,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;gBACxE,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;oBAClB,WAAW,EAAE,CAAC,oBAAoB,CAAC;wBACjC,SAAS;wBACT,SAAS;wBACT,QAAQ,EAAE,MAAM,CAAC,EAAE;wBACnB,aAAa,EAAE,MAAM,CAAC,OAAO;wBAC7B,UAAU,EAAE,cAAc;wBAC1B,UAAU,EAAE,SAAS;wBACrB,SAAS;wBACT,QAAQ,EAAE,OAAO,EAAE,QAAQ;wBAC3B,MAAM,EAAE,OAAO,EAAE,MAAM;wBACvB,SAAS,EAAE,SAAS,CAAC,MAAM;qBAC5B,CAAC,CAAC,CAAC;oBACJ,OAAO;wBACL,OAAO,EAAE,KAAK;wBACd,OAAO,EAAE,IAAI;wBACb,MAAM,EAAE,SAAS,CAAC,MAAM;wBACxB,SAAS;qBACV,CAAC;gBACJ,CAAC;gBAED,WAAW,EAAE,CAAC,oBAAoB,CAAC;oBACjC,SAAS;oBACT,SAAS;oBACT,QAAQ,EAAE,MAAM,CAAC,EAAE;oBACnB,aAAa,EAAE,MAAM,CAAC,OAAO;oBAC7B,UAAU,EAAE,cAAc;oBAC1B,UAAU,EAAE,SAAS;oBACrB,SAAS;oBACT,QAAQ,EAAE,OAAO,EAAE,QAAQ;oBAC3B,MAAM,EAAE,OAAO,EAAE,MAAM;iBACxB,CAAC,CAAC,CAAC;gBAEJ,OAAO;oBACL,OAAO,EAAE,IAAI;oBACb,IAAI,EAAE,SAAS,CAAC,IAAI;oBACpB,SAAS;oBACT,OAAO,EAAE,KAAK;iBACf,CAAC;YACJ,CAAC;YAED,WAAW,EAAE,CAAC,oBAAoB,CAAC;gBACjC,SAAS;gBACT,SAAS;gBACT,QAAQ,EAAE,MAAM,CAAC,EAAE;gBACnB,aAAa,EAAE,MAAM,CAAC,OAAO;gBAC7B,UAAU,EAAE,cAAc;gBAC1B,UAAU,EAAE,SAAS;gBACrB,SAAS;gBACT,QAAQ,EAAE,OAAO,EAAE,QAAQ;gBAC3B,MAAM,EAAE,OAAO,EAAE,MAAM;aACxB,CAAC,CAAC,CAAC;YAEJ,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE,SAAc;gBACpB,SAAS;gBACT,OAAO,EAAE,KAAK;aACf,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/schemas.d.ts

@@ -0,0 +1,124 @@
+import { z } from 'zod';
+/**
+ * Zod schema for prompt policy constraints.
+ */
+export declare const PolicyConstraintsSchema: z.ZodObject<{
+    maxTokens: z.ZodNumber;
+    temperature: z.ZodOptional<z.ZodNumber>;
+    allowUrls: z.ZodDefault<z.ZodBoolean>;
+    maxInputLength: z.ZodOptional<z.ZodNumber>;
+    tools: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+}, "strip", z.ZodTypeAny, {
+    maxTokens: number;
+    allowUrls: boolean;
+    temperature?: number | undefined;
+    maxInputLength?: number | undefined;
+    tools?: string[] | undefined;
+}, {
+    maxTokens: number;
+    temperature?: number | undefined;
+    allowUrls?: boolean | undefined;
+    maxInputLength?: number | undefined;
+    tools?: string[] | undefined;
+}>;
+/**
+ * Zod schema for a single prompt policy entry.
+ */
+export declare const PromptPolicyEntrySchema: z.ZodObject<{
+    id: z.ZodString;
+    version: z.ZodString;
+    system: z.ZodString;
+    constraints: z.ZodObject<{
+        maxTokens: z.ZodNumber;
+        temperature: z.ZodOptional<z.ZodNumber>;
+        allowUrls: z.ZodDefault<z.ZodBoolean>;
+        maxInputLength: z.ZodOptional<z.ZodNumber>;
+        tools: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    }, "strip", z.ZodTypeAny, {
+        maxTokens: number;
+        allowUrls: boolean;
+        temperature?: number | undefined;
+        maxInputLength?: number | undefined;
+        tools?: string[] | undefined;
+    }, {
+        maxTokens: number;
+        temperature?: number | undefined;
+        allowUrls?: boolean | undefined;
+        maxInputLength?: number | undefined;
+        tools?: string[] | undefined;
+    }>;
+}, "strip", z.ZodTypeAny, {
+    system: string;
+    id: string;
+    version: string;
+    constraints: {
+        maxTokens: number;
+        allowUrls: boolean;
+        temperature?: number | undefined;
+        maxInputLength?: number | undefined;
+        tools?: string[] | undefined;
+    };
+}, {
+    system: string;
+    id: string;
+    version: string;
+    constraints: {
+        maxTokens: number;
+        temperature?: number | undefined;
+        allowUrls?: boolean | undefined;
+        maxInputLength?: number | undefined;
+        tools?: string[] | undefined;
+    };
+}>;
+/**
+ * Zod schema for a prompt policy registry (array of entries).
+ */
+export declare const PromptRegistrySchema: z.ZodArray<z.ZodObject<{
+    id: z.ZodString;
+    version: z.ZodString;
+    system: z.ZodString;
+    constraints: z.ZodObject<{
+        maxTokens: z.ZodNumber;
+        temperature: z.ZodOptional<z.ZodNumber>;
+        allowUrls: z.ZodDefault<z.ZodBoolean>;
+        maxInputLength: z.ZodOptional<z.ZodNumber>;
+        tools: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    }, "strip", z.ZodTypeAny, {
+        maxTokens: number;
+        allowUrls: boolean;
+        temperature?: number | undefined;
+        maxInputLength?: number | undefined;
+        tools?: string[] | undefined;
+    }, {
+        maxTokens: number;
+        temperature?: number | undefined;
+        allowUrls?: boolean | undefined;
+        maxInputLength?: number | undefined;
+        tools?: string[] | undefined;
+    }>;
+}, "strip", z.ZodTypeAny, {
+    system: string;
+    id: string;
+    version: string;
+    constraints: {
+        maxTokens: number;
+        allowUrls: boolean;
+        temperature?: number | undefined;
+        maxInputLength?: number | undefined;
+        tools?: string[] | undefined;
+    };
+}, {
+    system: string;
+    id: string;
+    version: string;
+    constraints: {
+        maxTokens: number;
+        temperature?: number | undefined;
+        allowUrls?: boolean | undefined;
+        maxInputLength?: number | undefined;
+        tools?: string[] | undefined;
+    };
+}>, "many">;
+export type PromptPolicyEntry = z.infer<typeof PromptPolicyEntrySchema>;
+export type PolicyConstraints = z.infer<typeof PolicyConstraintsSchema>;
+//# sourceMappingURL=schemas.d.ts.map

package/dist/schemas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schemas.d.ts","sourceRoot":"","sources":["../src/schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;GAEG;AACH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;EAMlC,CAAC;AAEH;;GAEG;AACH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAKlC,CAAC;AAEH;;GAEG;AACH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;WAA0C,CAAC;AAE5E,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AACxE,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC"}

package/dist/schemas.js

@@ -0,0 +1,25 @@
+import { z } from 'zod';
+/**
+ * Zod schema for prompt policy constraints.
+ */
+export const PolicyConstraintsSchema = z.object({
+    maxTokens: z.number().int().positive(),
+    temperature: z.number().min(0).max(2).optional(),
+    allowUrls: z.boolean().default(false),
+    maxInputLength: z.number().int().positive().optional(),
+    tools: z.array(z.string()).optional(),
+});
+/**
+ * Zod schema for a single prompt policy entry.
+ */
+export const PromptPolicyEntrySchema = z.object({
+    id: z.string().min(1),
+    version: z.string().regex(/^\d+\.\d+\.\d+$/, 'version must be semver (e.g. 1.2.3)'),
+    system: z.string().min(1),
+    constraints: PolicyConstraintsSchema,
+});
+/**
+ * Zod schema for a prompt policy registry (array of entries).
+ */
+export const PromptRegistrySchema = z.array(PromptPolicyEntrySchema).min(1);
+//# sourceMappingURL=schemas.js.map

package/dist/schemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schemas.js","sourceRoot":"","sources":["../src/schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;GAEG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACtC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAChD,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACrC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACtD,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;CACtC,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,iBAAiB,EAAE,qCAAqC,CAAC;IACnF,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,WAAW,EAAE,uBAAuB;CACrC,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC"}

package/dist/telemetry.d.ts

@@ -0,0 +1,20 @@
+import type { PromptTelemetryEvent } from './types.js';
+import type { PromptRefusalReason } from './errors.js';
+/**
+ * Create a privacy-safe telemetry event.
+ * Default: hashed prompt/output only; no raw content.
+ */
+export declare function createTelemetryEvent(params: {
+    requestId: string;
+    policyRef: string;
+    promptId: string;
+    promptVersion: string;
+    promptText: string;
+    outputText: string;
+    latencyMs: number;
+    tenantId?: string;
+    userId?: string;
+    policyHit?: PromptRefusalReason | null;
+    toolNames?: string[];
+}): PromptTelemetryEvent;
+//# sourceMappingURL=telemetry.d.ts.map

package/dist/telemetry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"telemetry.d.ts","sourceRoot":"","sources":["../src/telemetry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AACvD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAevD;;;GAGG;AACH,wBAAgB,oBAAoB,CAClC,MAAM,EAAE;IACN,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,mBAAmB,GAAG,IAAI,CAAC;IACvC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;CACtB,GACA,oBAAoB,CAsBtB"}

package/dist/telemetry.js

@@ -0,0 +1,38 @@
+import { scrubSensitiveText } from './input.js';
+/**
+ * FNV-1a hash for content identification without revealing content.
+ */
+function hash(text) {
+    let value = 0x811c9dc5;
+    for (let i = 0; i < text.length; i++) {
+        value ^= text.charCodeAt(i);
+        value = (value * 0x01000193) >>> 0;
+    }
+    return value.toString(36).padStart(10, '0').slice(-10);
+}
+/**
+ * Create a privacy-safe telemetry event.
+ * Default: hashed prompt/output only; no raw content.
+ */
+export function createTelemetryEvent(params) {
+    const sanitizedPrompt = scrubSensitiveText(params.promptText);
+    const sanitizedOutput = scrubSensitiveText(params.outputText);
+    const tokensIn = Math.ceil(sanitizedPrompt.length / 4);
+    const tokensOut = Math.ceil(sanitizedOutput.length / 4);
+    return {
+        requestId: params.requestId,
+        policyRef: params.policyRef,
+        promptId: params.promptId,
+        promptVersion: params.promptVersion,
+        promptHash: hash(sanitizedPrompt),
+        outputHash: hash(sanitizedOutput),
+        latencyMs: params.latencyMs,
+        tokensIn,
+        tokensOut,
+        tenantId: params.tenantId,
+        userId: params.userId,
+        policyHit: params.policyHit ?? null,
+        toolNames: params.toolNames,
+    };
+}
+//# sourceMappingURL=telemetry.js.map

package/dist/telemetry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"telemetry.js","sourceRoot":"","sources":["../src/telemetry.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAEhD;;GAEG;AACH,SAAS,IAAI,CAAC,IAAY;IACxB,IAAI,KAAK,GAAG,UAAU,CAAC;IACvB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAC5B,KAAK,GAAG,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;AACzD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAClC,MAYC;IAED,MAAM,eAAe,GAAG,kBAAkB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAC9D,MAAM,eAAe,GAAG,kBAAkB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAE9D,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACvD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAExD,OAAO;QACL,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,UAAU,EAAE,IAAI,CAAC,eAAe,CAAC;QACjC,UAAU,EAAE,IAAI,CAAC,eAAe,CAAC;QACjC,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,QAAQ;QACR,SAAS;QACT,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,IAAI;QACnC,SAAS,EAAE,MAAM,CAAC,SAAS;KAC5B,CAAC;AACJ,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,82 @@
+import type { ZodType } from 'zod';
+import type { PromptRefusalReason } from './errors.js';
+/**
+ * Versioned prompt policy contract.
+ * Host apps supply policy data; the shared module validates and enforces it.
+ */
+export type PromptPolicy = {
+    id: string;
+    version: string;
+    key: string;
+    system: string;
+    constraints: {
+        maxTokens: number;
+        temperature?: number;
+        allowUrls?: boolean;
+        maxInputLength?: number;
+        tools?: string[];
+    };
+};
+/**
+ * Policy reference format: "promptId@version" (e.g. "support_chatbot@1.3.0")
+ */
+export type PolicyRef = {
+    id: string;
+    version: string;
+    key: string;
+};
+/**
+ * Request payload for a guarded prompt invocation.
+ */
+export type PromptInvocation = {
+    policyRef: string;
+    policy: PromptPolicy;
+    systemContext?: string;
+    userData: string;
+    messages?: Array<{
+        role: 'user' | 'system';
+        content: string;
+    }>;
+    requestId?: string;
+    tenantId?: string;
+    userId?: string;
+};
+/**
+ * Result of a guarded prompt invocation.
+ */
+export type PromptInvocationResult<T = unknown> = {
+    success: true;
+    data: T;
+    requestId: string;
+    refused: false;
+} | {
+    success: false;
+    refused: true;
+    reason: PromptRefusalReason;
+    requestId: string;
+    message?: string;
+};
+/**
+ * Privacy-safe telemetry event.
+ * Default: hashed payloads only; no raw prompt/response.
+ */
+export type PromptTelemetryEvent = {
+    requestId: string;
+    policyRef: string;
+    promptId: string;
+    promptVersion: string;
+    promptHash: string;
+    outputHash: string;
+    latencyMs: number;
+    tokensIn: number;
+    tokensOut: number;
+    tenantId?: string;
+    userId?: string;
+    policyHit?: PromptRefusalReason | null;
+    toolNames?: string[];
+};
+/**
+ * Schema for structured output validation.
+ */
+export type OutputSchema<T = unknown> = ZodType<T>;
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,KAAK,CAAC;AACnC,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAEvD;;;GAGG;AACH,MAAM,MAAM,YAAY,GAAG;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE;QACX,SAAS,EAAE,MAAM,CAAC;QAClB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,SAAS,CAAC,EAAE,OAAO,CAAC;QACpB,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;KAClB,CAAC;CACH,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,SAAS,GAAG;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;CACb,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,gBAAgB,GAAG;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,YAAY,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,GAAG,QAAQ,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC/D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,sBAAsB,CAAC,CAAC,GAAG,OAAO,IAAI;IAChD,OAAO,EAAE,IAAI,CAAC;IACd,IAAI,EAAE,CAAC,CAAC;IACR,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,KAAK,CAAC;CAChB,GAAG;IACF,OAAO,EAAE,KAAK,CAAC;IACf,OAAO,EAAE,IAAI,CAAC;IACd,MAAM,EAAE,mBAAmB,CAAC;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF;;;GAGG;AACH,MAAM,MAAM,oBAAoB,GAAG;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,mBAAmB,GAAG,IAAI,CAAC;IACvC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;CACtB,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,YAAY,CAAC,CAAC,GAAG,OAAO,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC"}

package/dist/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":""}

package/package.json

@@ -0,0 +1,40 @@
+{
+  "name": "@bstockwelldev/prompt-guardrails-core",
+  "version": "1.0.0",
+  "description": "Stateless server-side prompt guardrails: policy, input/output validation, structured invocation, and privacy-safe telemetry",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "default": "./dist/index.js"
+    }
+  },
+  "files": ["dist"],
+  "scripts": {
+    "build": "tsc",
+    "prepare": "tsc",
+    "typecheck": "tsc --noEmit",
+    "test": "vitest run",
+    "test:watch": "vitest"
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/bstockwelldev/prompt-guardrails-core.git"
+  },
+  "license": "MIT",
+  "keywords": ["prompt", "guardrails", "llm", "validation", "injection", "telemetry"],
+  "dependencies": {
+    "zod": "^3.25.76"
+  },
+  "devDependencies": {
+    "@types/node": "^20.0.0",
+    "typescript": ">=5.3",
+    "vitest": "^2.0.0"
+  },
+  "engines": {
+    "node": ">=20.0.0"
+  }
+}