@cendor/guardrails 0.1.0 → 0.2.0

package/dist/policy.js

@@ -0,0 +1,209 @@
+/**
+ * Config-as-data — build a guardrail list from a versioned JSON/YAML policy. The TS port of
+ * `cendor.guardrails.policy`.
+ *
+ * `loadPolicy` reads a policy **document or text** (there is no filesystem in an all-runtime package —
+ * read the file yourself and pass the text/object) and builds the `Guardrail[]` you hand to
+ * `Agent({ guardrails })` / `install()`. The point is **evidence**: the document's content hash and
+ * declared version are stamped into every decision's `metadata` (`policy_hash` / `policy_version`), so
+ * the audit chain proves *which* policy was active. Only the deterministic built-ins are constructible
+ * from data. JSON is built in; for YAML pass a `parse` (e.g. `yaml`'s `parse`).
+ *
+ * ```ts
+ * import { loadPolicy } from '@cendor/guardrails';
+ * const policy = loadPolicy(jsonText);            // or loadPolicy(text, { parse: YAML.parse })
+ * agent = new Agent({ guardrails: policy });
+ * policy.policyHash;    // "sha256:…"   policy.policyVersion; // "2026-07-09"
+ * ```
+ */
+import { normalizeStages } from './decision.js';
+import { jsonSchema, keywordDeny, lengthBounds, regexRule, urlAllowlist, urlDeny, } from './rules.js';
+const arr = (v) => (Array.isArray(v) ? v.map(String) : []);
+const bool = (v) => (v === undefined ? undefined : Boolean(v));
+/** The rules constructible from data alone (deterministic; no callable / client / embedding fn). */
+const POLICY_RULES = {
+    keyword_deny: (a, c) => keywordDeny(arr(a.words), {
+        stage: c.stage,
+        action: c.action,
+        name: c.name,
+        ignoreCase: bool(a.ignore_case ?? a.ignoreCase),
+    }),
+    regex_rule: (a, c) => regexRule(String(a.pattern ?? ''), {
+        stage: c.stage,
+        action: c.action,
+        name: c.name,
+        replacement: a.replacement === undefined ? undefined : String(a.replacement),
+    }),
+    url_allowlist: (a, c) => urlAllowlist(arr(a.domains), { stage: c.stage, action: c.action, name: c.name }),
+    url_deny: (a, c) => urlDeny(arr(a.domains), { stage: c.stage, action: c.action, name: c.name }),
+    length_bounds: (a, c) => lengthBounds({
+        stage: c.stage,
+        action: c.action,
+        name: c.name,
+        maxChars: (a.max_chars ?? a.maxChars),
+        maxTokens: (a.max_tokens ?? a.maxTokens),
+        model: a.model,
+    }),
+    json_schema: (a, c) => jsonSchema((a.schema ?? {}), {
+        stage: c.stage,
+        action: c.action,
+        name: c.name,
+    }),
+};
+/** The rule names a policy document may use (deterministic built-ins only). */
+export const POLICY_RULE_NAMES = Object.keys(POLICY_RULES);
+function canonical(v) {
+    if (v === null || typeof v !== 'object')
+        return JSON.stringify(v) ?? 'null';
+    if (Array.isArray(v))
+        return `[${v.map(canonical).join(',')}]`;
+    const obj = v;
+    const keys = Object.keys(obj).sort();
+    return `{${keys.map((k) => `${JSON.stringify(k)}:${canonical(obj[k])}`).join(',')}}`;
+}
+function coerceStage(stage) {
+    if (Array.isArray(stage))
+        return stage.map(String);
+    if (typeof stage === 'string')
+        return stage;
+    return undefined;
+}
+/**
+ * Build a {@link LoadedPolicy} from a JSON/YAML document (a parsed object, or text parsed with
+ * `JSON.parse` / your `opts.parse`). Every guardrail is stamped with `policy_hash` / `policy_version`
+ * in its metadata, so each decision records which policy was active.
+ *
+ * @throws if the document is malformed or names an unknown / non-declarative rule.
+ */
+export function loadPolicy(source, opts = {}) {
+    const config = typeof source === 'string' ? (opts.parse ?? JSON.parse)(source) : source;
+    if (config === null || typeof config !== 'object' || Array.isArray(config)) {
+        throw new Error('policy document must be an object');
+    }
+    const doc = config;
+    const entries = doc.guardrails;
+    if (!Array.isArray(entries))
+        throw new Error("policy document must have a 'guardrails' array");
+    const policyHash = `sha256:${sha256Hex(canonical(doc))}`;
+    const policyVersion = String(doc.version ?? '');
+    const stamp = { policy_hash: policyHash, policy_version: policyVersion };
+    const guardrails = entries.map((entry, i) => {
+        if (entry === null || typeof entry !== 'object' || Array.isArray(entry)) {
+            throw new Error(`guardrails[${i}] must be an object`);
+        }
+        const e = entry;
+        const rule = String(e.rule);
+        const build = POLICY_RULES[rule];
+        if (build === undefined) {
+            throw new Error(`guardrails[${i}]: unknown or non-declarative rule ${JSON.stringify(rule)}; policy documents support ${POLICY_RULE_NAMES.join(', ')} (rules needing a callable or a client are wired in code)`);
+        }
+        const common = {
+            stage: coerceStage(e.stage),
+            action: e.action,
+            name: e.name,
+        };
+        let g;
+        try {
+            g = build(e.args ?? {}, common);
+        }
+        catch (err) {
+            throw new Error(`guardrails[${i}] (${rule}): bad arguments — ${err.message}`);
+        }
+        // touch normalizeStages defensively so an explicit bad stage array fails here with the index
+        if (common.stage !== undefined)
+            normalizeStages(common.stage);
+        g.metadata = { ...(g.metadata ?? {}), ...stamp };
+        return g;
+    });
+    const policy = guardrails;
+    policy.policyHash = policyHash;
+    policy.policyVersion = policyVersion;
+    return policy;
+}
+// --------------------------------------------------------------------------- SHA-256 (all-runtime)
+//
+// A compact, dependency-free SHA-256 so `loadPolicy` stays SYNC and all-runtime (no node:crypto, no
+// async crypto.subtle). Verified against the standard "" / "abc" vectors in the tests. The hash is
+// canonical-per-language (over TS's canonical JSON); it is not promised byte-identical to Python's.
+const K = new Uint32Array([
+    0x428a2f98, 0x71374491, 0xb5c0fbcf, 0xe9b5dba5, 0x3956c25b, 0x59f111f1, 0x923f82a4, 0xab1c5ed5,
+    0xd807aa98, 0x12835b01, 0x243185be, 0x550c7dc3, 0x72be5d74, 0x80deb1fe, 0x9bdc06a7, 0xc19bf174,
+    0xe49b69c1, 0xefbe4786, 0x0fc19dc6, 0x240ca1cc, 0x2de92c6f, 0x4a7484aa, 0x5cb0a9dc, 0x76f988da,
+    0x983e5152, 0xa831c66d, 0xb00327c8, 0xbf597fc7, 0xc6e00bf3, 0xd5a79147, 0x06ca6351, 0x14292967,
+    0x27b70a85, 0x2e1b2138, 0x4d2c6dfc, 0x53380d13, 0x650a7354, 0x766a0abb, 0x81c2c92e, 0x92722c85,
+    0xa2bfe8a1, 0xa81a664b, 0xc24b8b70, 0xc76c51a3, 0xd192e819, 0xd6990624, 0xf40e3585, 0x106aa070,
+    0x19a4c116, 0x1e376c08, 0x2748774c, 0x34b0bcb5, 0x391c0cb3, 0x4ed8aa4a, 0x5b9cca4f, 0x682e6ff3,
+    0x748f82ee, 0x78a5636f, 0x84c87814, 0x8cc70208, 0x90befffa, 0xa4506ceb, 0xbef9a3f7, 0xc67178f2,
+]);
+function rotr(x, n) {
+    return (x >>> n) | (x << (32 - n));
+}
+function sha256Hex(input) {
+    const bytes = new TextEncoder().encode(input);
+    const l = bytes.length;
+    const withOne = l + 1;
+    const pad = (56 - (withOne % 64) + 64) % 64;
+    const total = withOne + pad + 8;
+    const msg = new Uint8Array(total);
+    msg.set(bytes);
+    msg[l] = 0x80;
+    const dv = new DataView(msg.buffer);
+    // 64-bit big-endian bit length; inputs here are well under 2^32 bits, so the high word is 0.
+    dv.setUint32(total - 4, (l * 8) >>> 0, false);
+    let h0 = 0x6a09e667;
+    let h1 = 0xbb67ae85;
+    let h2 = 0x3c6ef372;
+    let h3 = 0xa54ff53a;
+    let h4 = 0x510e527f;
+    let h5 = 0x9b05688c;
+    let h6 = 0x1f83d9ab;
+    let h7 = 0x5be0cd19;
+    const w = new Uint32Array(64);
+    for (let i = 0; i < total; i += 64) {
+        for (let t = 0; t < 16; t++)
+            w[t] = dv.getUint32(i + t * 4, false);
+        for (let t = 16; t < 64; t++) {
+            const w15 = w[t - 15];
+            const w2 = w[t - 2];
+            const s0 = rotr(w15, 7) ^ rotr(w15, 18) ^ (w15 >>> 3);
+            const s1 = rotr(w2, 17) ^ rotr(w2, 19) ^ (w2 >>> 10);
+            w[t] = (w[t - 16] + s0 + w[t - 7] + s1) >>> 0;
+        }
+        let a = h0;
+        let b = h1;
+        let c = h2;
+        let d = h3;
+        let e = h4;
+        let f = h5;
+        let g = h6;
+        let h = h7;
+        for (let t = 0; t < 64; t++) {
+            const s1 = rotr(e, 6) ^ rotr(e, 11) ^ rotr(e, 25);
+            const ch = (e & f) ^ (~e & g);
+            const t1 = (h + s1 + ch + K[t] + w[t]) >>> 0;
+            const s0 = rotr(a, 2) ^ rotr(a, 13) ^ rotr(a, 22);
+            const maj = (a & b) ^ (a & c) ^ (b & c);
+            const t2 = (s0 + maj) >>> 0;
+            h = g;
+            g = f;
+            f = e;
+            e = (d + t1) >>> 0;
+            d = c;
+            c = b;
+            b = a;
+            a = (t1 + t2) >>> 0;
+        }
+        h0 = (h0 + a) >>> 0;
+        h1 = (h1 + b) >>> 0;
+        h2 = (h2 + c) >>> 0;
+        h3 = (h3 + d) >>> 0;
+        h4 = (h4 + e) >>> 0;
+        h5 = (h5 + f) >>> 0;
+        h6 = (h6 + g) >>> 0;
+        h7 = (h7 + h) >>> 0;
+    }
+    return [h0, h1, h2, h3, h4, h5, h6, h7]
+        .map((x) => (x >>> 0).toString(16).padStart(8, '0'))
+        .join('');
+}
+//# sourceMappingURL=policy.js.map

package/dist/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../src/policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EAAkB,eAAe,EAAE,MAAM,eAAe,CAAC;AAChE,OAAO,EACL,UAAU,EACV,WAAW,EACX,YAAY,EACZ,SAAS,EACT,YAAY,EACZ,OAAO,GACR,MAAM,YAAY,CAAC;AAmBpB,MAAM,GAAG,GAAG,CAAC,CAAU,EAAY,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAC9E,MAAM,IAAI,GAAG,CAAC,CAAU,EAAuB,EAAE,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;AAE7F,oGAAoG;AACpG,MAAM,YAAY,GAAsD;IACtE,YAAY,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACrB,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE;QACxB,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,UAAU,CAAC;KAChD,CAAC;IACJ,UAAU,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACnB,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE;QACjC,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,WAAW,EAAE,CAAC,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC;KAC7E,CAAC;IACJ,aAAa,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACtB,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAClF,QAAQ,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/F,aAAa,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACtB,YAAY,CAAC;QACX,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,QAAQ,EAAE,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,QAAQ,CAAuB;QAC3D,SAAS,EAAE,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,SAAS,CAAuB;QAC9D,KAAK,EAAE,CAAC,CAAC,KAA2B;KACrC,CAAC;IACJ,WAAW,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACpB,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAA4B,EAAE;QACtD,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,IAAI,EAAE,CAAC,CAAC,IAAI;KACb,CAAC;CACL,CAAC;AAEF,+EAA+E;AAC/E,MAAM,CAAC,MAAM,iBAAiB,GAAsB,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;AAE9E,SAAS,SAAS,CAAC,CAAU;IAC3B,IAAI,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC;IAC5E,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAC/D,MAAM,GAAG,GAAG,CAA4B,CAAC;IACzC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACrC,OAAO,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;AACvF,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACnD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,UAAU,CACxB,MAAwC,EACxC,OAA0B,EAAE;IAE5B,MAAM,MAAM,GAAY,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IACjG,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3E,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvD,CAAC;IACD,MAAM,GAAG,GAAG,MAAiC,CAAC;IAC9C,MAAM,OAAO,GAAG,GAAG,CAAC,UAAU,CAAC;IAC/B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IAE/F,MAAM,UAAU,GAAG,UAAU,SAAS,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;IACzD,MAAM,aAAa,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;IAChD,MAAM,KAAK,GAAG,EAAE,WAAW,EAAE,UAAU,EAAE,cAAc,EAAE,aAAa,EAAE,CAAC;IAEzE,MAAM,UAAU,GAAgB,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE;QACvD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACxE,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,qBAAqB,CAAC,CAAC;QACxD,CAAC;QACD,MAAM,CAAC,GAAG,KAAgC,CAAC;QAC3C,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC5B,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QACjC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CACb,cAAc,CAAC,sCAAsC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,8BAA8B,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,2DAA2D,CAC/L,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAW;YACrB,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC;YAC3B,MAAM,EAAE,CAAC,CAAC,MAA4B;YACtC,IAAI,EAAE,CAAC,CAAC,IAA0B;SACnC,CAAC;QACF,IAAI,CAAY,CAAC;QACjB,IAAI,CAAC;YACH,CAAC,GAAG,KAAK,CAAE,CAAC,CAAC,IAAa,IAAI,EAAE,EAAE,MAAM,CAAC,CAAC;QAC5C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,MAAM,IAAI,sBAAuB,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QAC3F,CAAC;QACD,6FAA6F;QAC7F,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS;YAAE,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC9D,CAAC,CAAC,QAAQ,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC;QACjD,OAAO,CAAC,CAAC;IACX,CAAC,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,UAA0B,CAAC;IAC1C,MAAM,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,MAAM,CAAC,aAAa,GAAG,aAAa,CAAC;IACrC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,oGAAoG;AACpG,EAAE;AACF,oGAAoG;AACpG,mGAAmG;AACnG,oGAAoG;AAEpG,MAAM,CAAC,GAAG,IAAI,WAAW,CAAC;IACxB,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;IAC9F,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;IAC9F,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;IAC9F,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;IAC9F,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;IAC9F,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;IAC9F,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;IAC9F,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;CAC/F,CAAC,CAAC;AAEH,SAAS,IAAI,CAAC,CAAS,EAAE,CAAS;IAChC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,SAAS,CAAC,KAAa;IAC9B,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC9C,MAAM,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC;IACvB,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;IACtB,MAAM,GAAG,GAAG,CAAC,EAAE,GAAG,CAAC,OAAO,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC;IAC5C,MAAM,KAAK,GAAG,OAAO,GAAG,GAAG,GAAG,CAAC,CAAC;IAChC,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;IAClC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACf,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;IACd,MAAM,EAAE,GAAG,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACpC,6FAA6F;IAC7F,EAAE,CAAC,SAAS,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC;IAE9C,IAAI,EAAE,GAAG,UAAU,CAAC;IACpB,IAAI,EAAE,GAAG,UAAU,CAAC;IACpB,IAAI,EAAE,GAAG,UAAU,CAAC;IACpB,IAAI,EAAE,GAAG,UAAU,CAAC;IACpB,IAAI,EAAE,GAAG,UAAU,CAAC;IACpB,IAAI,EAAE,GAAG,UAAU,CAAC;IACpB,IAAI,EAAE,GAAG,UAAU,CAAC;IACpB,IAAI,EAAE,GAAG,UAAU,CAAC;IAEpB,MAAM,CAAC,GAAG,IAAI,WAAW,CAAC,EAAE,CAAC,CAAC;IAC9B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;QACnC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE;YAAE,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;QACnE,KAAK,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;YAC7B,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAE,CAAC;YACvB,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC;YACrB,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC;YACtD,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;YACrD,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAE,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;QAClD,CAAC;QACD,IAAI,CAAC,GAAG,EAAE,CAAC;QACX,IAAI,CAAC,GAAG,EAAE,CAAC;QACX,IAAI,CAAC,GAAG,EAAE,CAAC;QACX,IAAI,CAAC,GAAG,EAAE,CAAC;QACX,IAAI,CAAC,GAAG,EAAE,CAAC;QACX,IAAI,CAAC,GAAG,EAAE,CAAC;QACX,IAAI,CAAC,GAAG,EAAE,CAAC;QACX,IAAI,CAAC,GAAG,EAAE,CAAC;QACX,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;YAC5B,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAClD,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAC9B,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,CAAC;YAC/C,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAClD,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACxC,MAAM,EAAE,GAAG,CAAC,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC;YAC5B,CAAC,GAAG,CAAC,CAAC;YACN,CAAC,GAAG,CAAC,CAAC;YACN,CAAC,GAAG,CAAC,CAAC;YACN,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;YACnB,CAAC,GAAG,CAAC,CAAC;YACN,CAAC,GAAG,CAAC,CAAC;YACN,CAAC,GAAG,CAAC,CAAC;YACN,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;QACD,EAAE,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;QACpB,EAAE,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;QACpB,EAAE,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;QACpB,EAAE,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;QACpB,EAAE,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;QACpB,EAAE,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;QACpB,EAAE,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;QACpB,EAAE,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;IACD,OAAO,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC;SACpC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;SACnD,IAAI,CAAC,EAAE,CAAC,CAAC;AACd,CAAC"}

package/dist/redteam.d.ts

@@ -0,0 +1,63 @@
+/**
+ * Red-team evaluation — measure a guardrail's trip rate against a labeled corpus. The TS port of
+ * `cendor.guardrails.redteam`.
+ *
+ * The honest path to *any* detection number: run **your** guardrails over a labeled corpus and
+ * publish the per-category trip rate + false-positive rate, naming the corpus. cendor **vends no
+ * attack data** — `loadCorpus` parses records / text **you** supplied (public sets like AdvBench /
+ * JailbreakBench / HackAPrompt are referenced in the docs; you fetch them under their own licenses).
+ * There is no `node:fs` here — read the file yourself and pass the text or the parsed array. The
+ * report is a measurement tool, not a claim.
+ *
+ * Deterministic guardrails make the run offline + reproducible; a run with an `llmJudge` / hosted
+ * rail should be cassette-recorded so CI stays offline. Imports only `./decision` + the engine.
+ */
+import { type Guardrail } from './decision.js';
+export declare const ATTACK = "attack";
+export declare const BENIGN = "benign";
+/** One labeled probe. `label` is `"attack"` (should trip) or `"benign"` (should pass). */
+export interface AttackCase {
+    text: string;
+    label?: string;
+    category?: string;
+    id?: string;
+}
+/** Counts + rates from a red-team run — no shipped claim; it describes the corpus you name. */
+export declare class RedTeamReport {
+    total: number;
+    attacks: number;
+    benign: number;
+    caught: number;
+    falsePositives: number;
+    /** category → `[attacks, caught]`. */
+    byCategory: Record<string, [number, number]>;
+    /** Recall on attack cases (caught / attacks); `0` when there are no attacks. */
+    get tripRate(): number;
+    /** Fraction of benign cases that tripped; `0` when there are no benign cases. */
+    get falsePositiveRate(): number;
+    /** A one-line, corpus-agnostic summary (safe to log — no case text). */
+    summary(): string;
+}
+export interface LoadCorpusOptions {
+    /** For a text `source`: `"jsonl"` / `"json"` / `"csv"` (default `"jsonl"`). Ignored for an array. */
+    format?: 'jsonl' | 'json' | 'csv';
+}
+/**
+ * Build a labeled corpus from an **array** of records (already parsed) or a **text** blob you read
+ * yourself — `jsonl` (one object per line), `json` (an array), or `csv` (a header row). Each record
+ * needs a `text` field; `label` (default `"attack"`) / `category` / `id` are optional. No `node:fs`.
+ */
+export declare function loadCorpus(source: readonly unknown[] | string, opts?: LoadCorpusOptions): AttackCase[];
+/**
+ * Run `guardrails` over each case at `stage` and tally trip rate + false positives. A case trips
+ * when any guardrail blocks/redacts/flags it (a `block` throws `GuardrailTripped` — counted as a
+ * trip, not an error). Sync only — for an `async` check use {@link runRedteamAsync}.
+ */
+export declare function runRedteam(guardrails: readonly Guardrail[], cases: Iterable<AttackCase>, opts?: {
+    stage?: string;
+}): RedTeamReport;
+/** Async counterpart of {@link runRedteam} — awaits `async` checks (an `llmJudge` / hosted rail). */
+export declare function runRedteamAsync(guardrails: readonly Guardrail[], cases: Iterable<AttackCase>, opts?: {
+    stage?: string;
+}): Promise<RedTeamReport>;
+//# sourceMappingURL=redteam.d.ts.map

package/dist/redteam.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redteam.d.ts","sourceRoot":"","sources":["../src/redteam.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,KAAK,SAAS,EAAoB,MAAM,eAAe,CAAC;AAGjE,eAAO,MAAM,MAAM,WAAW,CAAC;AAC/B,eAAO,MAAM,MAAM,WAAW,CAAC;AAE/B,0FAA0F;AAC1F,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,EAAE,CAAC,EAAE,MAAM,CAAC;CACb;AAED,+FAA+F;AAC/F,qBAAa,aAAa;IACxB,KAAK,SAAK;IACV,OAAO,SAAK;IACZ,MAAM,SAAK;IACX,MAAM,SAAK;IACX,cAAc,SAAK;IACnB,sCAAsC;IACtC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAM;IAElD,gFAAgF;IAChF,IAAI,QAAQ,IAAI,MAAM,CAErB;IAED,iFAAiF;IACjF,IAAI,iBAAiB,IAAI,MAAM,CAE9B;IAED,wEAAwE;IACxE,OAAO,IAAI,MAAM;CAOlB;AAgCD,MAAM,WAAW,iBAAiB;IAChC,qGAAqG;IACrG,MAAM,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,KAAK,CAAC;CACnC;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CACxB,MAAM,EAAE,SAAS,OAAO,EAAE,GAAG,MAAM,EACnC,IAAI,GAAE,iBAAsB,GAC3B,UAAU,EAAE,CAiBd;AAiBD;;;;GAIG;AACH,wBAAgB,UAAU,CACxB,UAAU,EAAE,SAAS,SAAS,EAAE,EAChC,KAAK,EAAE,QAAQ,CAAC,UAAU,CAAC,EAC3B,IAAI,GAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAA;CAAO,GAC5B,aAAa,CAcf;AAED,qGAAqG;AACrG,wBAAsB,eAAe,CACnC,UAAU,EAAE,SAAS,SAAS,EAAE,EAChC,KAAK,EAAE,QAAQ,CAAC,UAAU,CAAC,EAC3B,IAAI,GAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAA;CAAO,GAC5B,OAAO,CAAC,aAAa,CAAC,CAcxB"}

package/dist/redteam.js

@@ -0,0 +1,154 @@
+/**
+ * Red-team evaluation — measure a guardrail's trip rate against a labeled corpus. The TS port of
+ * `cendor.guardrails.redteam`.
+ *
+ * The honest path to *any* detection number: run **your** guardrails over a labeled corpus and
+ * publish the per-category trip rate + false-positive rate, naming the corpus. cendor **vends no
+ * attack data** — `loadCorpus` parses records / text **you** supplied (public sets like AdvBench /
+ * JailbreakBench / HackAPrompt are referenced in the docs; you fetch them under their own licenses).
+ * There is no `node:fs` here — read the file yourself and pass the text or the parsed array. The
+ * report is a measurement tool, not a claim.
+ *
+ * Deterministic guardrails make the run offline + reproducible; a run with an `llmJudge` / hosted
+ * rail should be cassette-recorded so CI stays offline. Imports only `./decision` + the engine.
+ */
+import { GuardrailTripped } from './decision.js';
+import { apply, applyAsync } from './index.js';
+export const ATTACK = 'attack';
+export const BENIGN = 'benign';
+/** Counts + rates from a red-team run — no shipped claim; it describes the corpus you name. */
+export class RedTeamReport {
+    total = 0;
+    attacks = 0;
+    benign = 0;
+    caught = 0; // attack cases that tripped (true positives)
+    falsePositives = 0; // benign cases that tripped
+    /** category → `[attacks, caught]`. */
+    byCategory = {};
+    /** Recall on attack cases (caught / attacks); `0` when there are no attacks. */
+    get tripRate() {
+        return this.attacks ? this.caught / this.attacks : 0;
+    }
+    /** Fraction of benign cases that tripped; `0` when there are no benign cases. */
+    get falsePositiveRate() {
+        return this.benign ? this.falsePositives / this.benign : 0;
+    }
+    /** A one-line, corpus-agnostic summary (safe to log — no case text). */
+    summary() {
+        const pct = (x) => `${(x * 100).toFixed(1)}%`;
+        return (`${this.total} cases: trip rate ${pct(this.tripRate)} (${this.caught}/${this.attacks} attacks), ` +
+            `false-positive rate ${pct(this.falsePositiveRate)} (${this.falsePositives}/${this.benign} benign)`);
+    }
+}
+function toCase(row) {
+    if (row === null || typeof row !== 'object') {
+        throw new Error(`each corpus record must be an object, got ${row === null ? 'null' : typeof row}`);
+    }
+    const r = row;
+    if (!('text' in r))
+        throw new Error("each corpus record needs a 'text' field");
+    return {
+        text: String(r.text),
+        label: r.label === undefined ? ATTACK : String(r.label),
+        category: r.category === undefined ? '' : String(r.category),
+        id: r.id === undefined ? '' : String(r.id),
+    };
+}
+function parseCsv(text) {
+    const lines = text.split(/\r?\n/).filter((l) => l.trim());
+    if (lines.length === 0)
+        return [];
+    const header = lines[0].split(',').map((h) => h.trim());
+    return lines.slice(1).map((line) => {
+        const cols = line.split(',');
+        const row = {};
+        header.forEach((h, i) => {
+            row[h] = (cols[i] ?? '').trim();
+        });
+        return row;
+    });
+}
+/**
+ * Build a labeled corpus from an **array** of records (already parsed) or a **text** blob you read
+ * yourself — `jsonl` (one object per line), `json` (an array), or `csv` (a header row). Each record
+ * needs a `text` field; `label` (default `"attack"`) / `category` / `id` are optional. No `node:fs`.
+ */
+export function loadCorpus(source, opts = {}) {
+    if (Array.isArray(source))
+        return source.map(toCase);
+    const text = source;
+    const fmt = opts.format ?? 'jsonl';
+    let rows;
+    if (fmt === 'jsonl') {
+        rows = text
+            .split(/\r?\n/)
+            .filter((l) => l.trim())
+            .map((l) => JSON.parse(l));
+    }
+    else if (fmt === 'json') {
+        const data = JSON.parse(text);
+        rows = Array.isArray(data) ? data : [data];
+    }
+    else {
+        rows = parseCsv(text);
+    }
+    return rows.map(toCase);
+}
+function tally(report, c, tripped) {
+    report.total += 1;
+    const label = c.label ?? ATTACK;
+    if (label === ATTACK) {
+        report.attacks += 1;
+        if (tripped)
+            report.caught += 1;
+        const cat = c.category ?? '';
+        const [a, caught] = report.byCategory[cat] ?? [0, 0];
+        report.byCategory[cat] = [a + 1, caught + (tripped ? 1 : 0)];
+    }
+    else if (label === BENIGN) {
+        report.benign += 1;
+        if (tripped)
+            report.falsePositives += 1;
+    }
+}
+/**
+ * Run `guardrails` over each case at `stage` and tally trip rate + false positives. A case trips
+ * when any guardrail blocks/redacts/flags it (a `block` throws `GuardrailTripped` — counted as a
+ * trip, not an error). Sync only — for an `async` check use {@link runRedteamAsync}.
+ */
+export function runRedteam(guardrails, cases, opts = {}) {
+    const stage = opts.stage ?? 'input';
+    const report = new RedTeamReport();
+    for (const c of cases) {
+        let tripped;
+        try {
+            tripped = apply(guardrails, stage, c.text).length > 0;
+        }
+        catch (err) {
+            if (!(err instanceof GuardrailTripped))
+                throw err;
+            tripped = true;
+        }
+        tally(report, c, tripped);
+    }
+    return report;
+}
+/** Async counterpart of {@link runRedteam} — awaits `async` checks (an `llmJudge` / hosted rail). */
+export async function runRedteamAsync(guardrails, cases, opts = {}) {
+    const stage = opts.stage ?? 'input';
+    const report = new RedTeamReport();
+    for (const c of cases) {
+        let tripped;
+        try {
+            tripped = (await applyAsync(guardrails, stage, c.text)).length > 0;
+        }
+        catch (err) {
+            if (!(err instanceof GuardrailTripped))
+                throw err;
+            tripped = true;
+        }
+        tally(report, c, tripped);
+    }
+    return report;
+}
+//# sourceMappingURL=redteam.js.map

package/dist/redteam.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redteam.js","sourceRoot":"","sources":["../src/redteam.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAkB,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACjE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAE/C,MAAM,CAAC,MAAM,MAAM,GAAG,QAAQ,CAAC;AAC/B,MAAM,CAAC,MAAM,MAAM,GAAG,QAAQ,CAAC;AAU/B,+FAA+F;AAC/F,MAAM,OAAO,aAAa;IACxB,KAAK,GAAG,CAAC,CAAC;IACV,OAAO,GAAG,CAAC,CAAC;IACZ,MAAM,GAAG,CAAC,CAAC;IACX,MAAM,GAAG,CAAC,CAAC,CAAC,6CAA6C;IACzD,cAAc,GAAG,CAAC,CAAC,CAAC,4BAA4B;IAChD,sCAAsC;IACtC,UAAU,GAAqC,EAAE,CAAC;IAElD,gFAAgF;IAChF,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IACvD,CAAC;IAED,iFAAiF;IACjF,IAAI,iBAAiB;QACnB,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7D,CAAC;IAED,wEAAwE;IACxE,OAAO;QACL,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC;QACtD,OAAO,CACL,GAAG,IAAI,CAAC,KAAK,qBAAqB,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO,aAAa;YACjG,uBAAuB,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,KAAK,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,MAAM,UAAU,CACpG,CAAC;IACJ,CAAC;CACF;AAED,SAAS,MAAM,CAAC,GAAY;IAC1B,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CACb,6CAA6C,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE,CAClF,CAAC;IACJ,CAAC;IACD,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC/E,OAAO;QACL,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;QACpB,KAAK,EAAE,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;QACvD,QAAQ,EAAE,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC;QAC5D,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;KAC3C,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY;IAC5B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC1D,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAClC,MAAM,MAAM,GAAI,KAAK,CAAC,CAAC,CAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACpE,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACjC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,GAAG,GAA2B,EAAE,CAAC;QACvC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YACtB,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAClC,CAAC,CAAC,CAAC;QACH,OAAO,GAAG,CAAC;IACb,CAAC,CAAC,CAAC;AACL,CAAC;AAOD;;;;GAIG;AACH,MAAM,UAAU,UAAU,CACxB,MAAmC,EACnC,OAA0B,EAAE;IAE5B,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACrD,MAAM,IAAI,GAAG,MAAgB,CAAC;IAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC;IACnC,IAAI,IAAe,CAAC;IACpB,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;QACpB,IAAI,GAAG,IAAI;aACR,KAAK,CAAC,OAAO,CAAC;aACd,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;aACvB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/B,CAAC;SAAM,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC7C,CAAC;SAAM,CAAC;QACN,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC;IACD,OAAO,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,KAAK,CAAC,MAAqB,EAAE,CAAa,EAAE,OAAgB;IACnE,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC;IAClB,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,IAAI,MAAM,CAAC;IAChC,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;QACrB,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC;QACpB,IAAI,OAAO;YAAE,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC;QAChC,MAAM,GAAG,GAAG,CAAC,CAAC,QAAQ,IAAI,EAAE,CAAC;QAC7B,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACrD,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/D,CAAC;SAAM,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;QAC5B,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC;QACnB,IAAI,OAAO;YAAE,MAAM,CAAC,cAAc,IAAI,CAAC,CAAC;IAC1C,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,UAAU,CACxB,UAAgC,EAChC,KAA2B,EAC3B,OAA2B,EAAE;IAE7B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,OAAO,CAAC;IACpC,MAAM,MAAM,GAAG,IAAI,aAAa,EAAE,CAAC;IACnC,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,OAAgB,CAAC;QACrB,IAAI,CAAC;YACH,OAAO,GAAG,KAAK,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;QACxD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,CAAC,GAAG,YAAY,gBAAgB,CAAC;gBAAE,MAAM,GAAG,CAAC;YAClD,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;QACD,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC;IAC5B,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,qGAAqG;AACrG,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,UAAgC,EAChC,KAA2B,EAC3B,OAA2B,EAAE;IAE7B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,OAAO,CAAC;IACpC,MAAM,MAAM,GAAG,IAAI,aAAa,EAAE,CAAC;IACnC,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,OAAgB,CAAC;QACrB,IAAI,CAAC;YACH,OAAO,GAAG,CAAC,MAAM,UAAU,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;QACrE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,CAAC,GAAG,YAAY,gBAAgB,CAAC;gBAAE,MAAM,GAAG,CAAC;YAClD,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;QACD,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC;IAC5B,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/rules.d.ts

@@ -1,4 +1,4 @@
-import { type Check, type Context, type Guardrail, Verdict } from './decision.js';
+import { type Check, type Context, type Guardrail, type OnError, Verdict } from './decision.js';
 type Stage = string | readonly string[];
 /** Flatten a payload (string, chat-message array, or a single message object) to scannable text. */
 export declare function payloadText(payload: unknown): string;
@@ -51,13 +51,26 @@ export declare function jsonSchema(schema: Record<string, unknown>, opts?: JsonS
 export interface CustomOptions {
     stage?: Stage;
     name?: string;
+    /** Per-check wall-clock limit in seconds (async path only). */
+    timeout?: number;
+    /** Error/timeout policy (default `"fail_closed"`). */
+    onError?: OnError;
 }
-/** Wrap any `fn(payload, ctx) -> Verdict | null` as a `Guardrail` (sync or async). */
+/**
+ * Wrap any `fn(payload, ctx) -> Verdict | null` as a `Guardrail` (sync or async). Your `fn` is
+ * arbitrary code, so it can throw or hang: `timeout` (seconds, async path) bounds it and `onError`
+ * (`"fail_closed"` default / `"fail_open"`) decides what a throw or timeout does — either way the
+ * failure is recorded as a decision.
+ */
 export declare function custom(fn: Check, opts?: CustomOptions): Guardrail;
 export interface LlmJudgeOptions {
     stage?: Stage;
     action?: 'block' | 'redact' | 'flag';
     name?: string;
+    /** Per-check wall-clock limit in seconds (async path only). */
+    timeout?: number;
+    /** Error/timeout policy; defaults from `action` (flag → `fail_open`, else `fail_closed`). */
+    onError?: OnError;
 }
 /**
  * Adapter **contract** for a bring-your-own model judge — not a built-in classifier. `judge` is
@@ -66,5 +79,6 @@ export interface LlmJudgeOptions {
  * no model here: the extra call costs real tokens and latency — measure it. See "Honest limits".
  */
 export declare function llmJudge(judge: (payload: unknown, ctx: Context) => Verdict | boolean | string | null | Promise<Verdict | boolean | string | null>, opts?: LlmJudgeOptions): Guardrail;
-export {};
+export { classifier, language, openaiModeration, bedrockGuardrail, azureContentSafety, modelArmor, } from './adapters.js';
+export { groundedness, deniedTopics } from './semantic.js';
 //# sourceMappingURL=rules.d.ts.map

package/dist/rules.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"rules.d.ts","sourceRoot":"","sources":["../src/rules.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,KAAK,KAAK,EAAE,KAAK,OAAO,EAAE,KAAK,SAAS,EAAE,OAAO,EAAmB,MAAM,eAAe,CAAC;AAGnG,KAAK,KAAK,GAAG,MAAM,GAAG,SAAS,MAAM,EAAE,CAAC;AAIxC,oGAAoG;AACpG,wBAAgB,WAAW,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,CAepD;AAiDD,MAAM,WAAW,kBAAkB;IACjC,KAAK,CAAC,EAAE,KAAK,CAAC;IACd,MAAM,CAAC,EAAE,OAAO,GAAG,QAAQ,GAAG,MAAM,CAAC;IACrC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,iFAAiF;AACjF,wBAAgB,WAAW,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,IAAI,GAAE,kBAAuB,GAAG,SAAS,CAyB7F;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,CAAC,EAAE,OAAO,GAAG,QAAQ,GAAG,MAAM,CAAC;IACrC,KAAK,CAAC,EAAE,KAAK,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,8FAA8F;AAC9F,wBAAgB,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,IAAI,GAAE,gBAAqB,GAAG,SAAS,CAuB1F;AAoBD,MAAM,WAAW,cAAc;IAC7B,KAAK,CAAC,EAAE,KAAK,CAAC;IACd,MAAM,CAAC,EAAE,OAAO,GAAG,QAAQ,GAAG,MAAM,CAAC;IACrC,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,0EAA0E;AAC1E,wBAAgB,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,IAAI,GAAE,cAAmB,GAAG,SAAS,CAW5F;AAED,sEAAsE;AACtE,wBAAgB,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,IAAI,GAAE,cAAmB,GAAG,SAAS,CAWvF;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,KAAK,CAAC;IACd,MAAM,CAAC,EAAE,OAAO,GAAG,QAAQ,GAAG,MAAM,CAAC;IACrC,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,iGAAiG;AACjG,wBAAgB,YAAY,CAAC,IAAI,GAAE,mBAAwB,GAAG,SAAS,CAwBtE;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,CAAC,EAAE,KAAK,CAAC;IACd,MAAM,CAAC,EAAE,OAAO,GAAG,QAAQ,GAAG,MAAM,CAAC;IACrC,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CACxB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,IAAI,GAAE,iBAAsB,GAC3B,SAAS,CAgBX;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,CAAC,EAAE,KAAK,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,sFAAsF;AACtF,wBAAgB,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,GAAE,aAAkB,GAAG,SAAS,CAErE;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,CAAC,EAAE,KAAK,CAAC;IACd,MAAM,CAAC,EAAE,OAAO,GAAG,QAAQ,GAAG,MAAM,CAAC;IACrC,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;;;;GAKG;AACH,wBAAgB,QAAQ,CACtB,KAAK,EAAE,CACL,OAAO,EAAE,OAAO,EAChB,GAAG,EAAE,OAAO,KACT,OAAO,GAAG,OAAO,GAAG,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,OAAO,GAAG,OAAO,GAAG,MAAM,GAAG,IAAI,CAAC,EACnF,IAAI,GAAE,eAAoB,GACzB,SAAS,CAIX"}
+{"version":3,"file":"rules.d.ts","sourceRoot":"","sources":["../src/rules.ts"],"names":[],"mappings":"AAUA,OAAO,EACL,KAAK,KAAK,EACV,KAAK,OAAO,EACZ,KAAK,SAAS,EACd,KAAK,OAAO,EACZ,OAAO,EAGR,MAAM,eAAe,CAAC;AAGvB,KAAK,KAAK,GAAG,MAAM,GAAG,SAAS,MAAM,EAAE,CAAC;AAIxC,oGAAoG;AACpG,wBAAgB,WAAW,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,CAepD;AAyED,MAAM,WAAW,kBAAkB;IACjC,KAAK,CAAC,EAAE,KAAK,CAAC;IACd,MAAM,CAAC,EAAE,OAAO,GAAG,QAAQ,GAAG,MAAM,CAAC;IACrC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,iFAAiF;AACjF,wBAAgB,WAAW,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,IAAI,GAAE,kBAAuB,GAAG,SAAS,CAyB7F;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,CAAC,EAAE,OAAO,GAAG,QAAQ,GAAG,MAAM,CAAC;IACrC,KAAK,CAAC,EAAE,KAAK,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,8FAA8F;AAC9F,wBAAgB,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,IAAI,GAAE,gBAAqB,GAAG,SAAS,CAuB1F;AAoBD,MAAM,WAAW,cAAc;IAC7B,KAAK,CAAC,EAAE,KAAK,CAAC;IACd,MAAM,CAAC,EAAE,OAAO,GAAG,QAAQ,GAAG,MAAM,CAAC;IACrC,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,0EAA0E;AAC1E,wBAAgB,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,IAAI,GAAE,cAAmB,GAAG,SAAS,CAW5F;AAED,sEAAsE;AACtE,wBAAgB,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,IAAI,GAAE,cAAmB,GAAG,SAAS,CAWvF;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,KAAK,CAAC;IACd,MAAM,CAAC,EAAE,OAAO,GAAG,QAAQ,GAAG,MAAM,CAAC;IACrC,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,iGAAiG;AACjG,wBAAgB,YAAY,CAAC,IAAI,GAAE,mBAAwB,GAAG,SAAS,CAwBtE;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,CAAC,EAAE,KAAK,CAAC;IACd,MAAM,CAAC,EAAE,OAAO,GAAG,QAAQ,GAAG,MAAM,CAAC;IACrC,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CACxB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,IAAI,GAAE,iBAAsB,GAC3B,SAAS,CAgBX;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,CAAC,EAAE,KAAK,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,+DAA+D;IAC/D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,sDAAsD;IACtD,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED;;;;;GAKG;AACH,wBAAgB,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,GAAE,aAAkB,GAAG,SAAS,CAKrE;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,CAAC,EAAE,KAAK,CAAC;IACd,MAAM,CAAC,EAAE,OAAO,GAAG,QAAQ,GAAG,MAAM,CAAC;IACrC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,+DAA+D;IAC/D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,6FAA6F;IAC7F,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED;;;;;GAKG;AACH,wBAAgB,QAAQ,CACtB,KAAK,EAAE,CACL,OAAO,EAAE,OAAO,EAChB,GAAG,EAAE,OAAO,KACT,OAAO,GAAG,OAAO,GAAG,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,OAAO,GAAG,OAAO,GAAG,MAAM,GAAG,IAAI,CAAC,EACnF,IAAI,GAAE,eAAoB,GACzB,SAAS,CAOX;AAkED,OAAO,EACL,UAAU,EACV,QAAQ,EACR,gBAAgB,EAChB,gBAAgB,EAChB,kBAAkB,EAClB,UAAU,GACX,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC"}

package/dist/rules.js

@@ -8,7 +8,7 @@
  * adversarial attack — see docs/guardrails.md "Honest limits".
  */
 import { tokens } from '@cendor/core';
-import { Verdict, normalizeStages } from './decision.js';
+import { Verdict, normalizeStages, validateExecutionPolicy, } from './decision.js';
 // --------------------------------------------------------------------------- payload helpers
 /** Flatten a payload (string, chat-message array, or a single message object) to scannable text. */
 export function payloadText(payload) {
@@ -65,8 +65,28 @@ function redactMessage(msg, sub) {
     }
     return out;
 }
-function mkGuardrail(name, stage, check) {
-    return { name, stages: normalizeStages(stage), check };
+function mkGuardrail(name, stage, check, exec = {}) {
+    const g = { name, stages: normalizeStages(stage), check };
+    // Deterministic built-ins leave the execution policy unset (the engine defaults on_error to
+    // fail_closed); only `custom` / `llmJudge` attach a timeout / on_error.
+    if (exec.onError !== undefined || exec.timeout !== undefined) {
+        const onError = exec.onError ?? 'fail_closed';
+        validateExecutionPolicy(exec.timeout, onError);
+        g.onError = onError;
+        if (exec.timeout !== undefined)
+            g.timeout = exec.timeout;
+    }
+    return g;
+}
+/**
+ * Default the error policy from a guardrail's action: a `block` gate fails **closed** (an errored
+ * check is treated as a block), while a `flag` degrades to advisory (`fail_open`). An explicit
+ * `onError` always wins.
+ */
+function resolveOnError(action, onError) {
+    if (onError !== undefined)
+        return onError;
+    return action === 'flag' ? 'fail_open' : 'fail_closed';
 }
 /** Trip when any of `words` appears (substring, case-insensitive by default). */
 export function keywordDeny(words, opts = {}) {
@@ -193,9 +213,17 @@ export function jsonSchema(schema, opts = {}) {
         return error === null ? null : new Verdict(action, `schema violation: ${error}`);
     });
 }
-/** Wrap any `fn(payload, ctx) -> Verdict | null` as a `Guardrail` (sync or async). */
+/**
+ * Wrap any `fn(payload, ctx) -> Verdict | null` as a `Guardrail` (sync or async). Your `fn` is
+ * arbitrary code, so it can throw or hang: `timeout` (seconds, async path) bounds it and `onError`
+ * (`"fail_closed"` default / `"fail_open"`) decides what a throw or timeout does — either way the
+ * failure is recorded as a decision.
+ */
 export function custom(fn, opts = {}) {
-    return mkGuardrail(opts.name ?? (fn.name || 'custom'), opts.stage ?? 'input', fn);
+    return mkGuardrail(opts.name ?? (fn.name || 'custom'), opts.stage ?? 'input', fn, {
+        timeout: opts.timeout,
+        onError: opts.onError ?? 'fail_closed',
+    });
 }
 /**
  * Adapter **contract** for a bring-your-own model judge — not a built-in classifier. `judge` is
@@ -206,7 +234,10 @@ export function custom(fn, opts = {}) {
 export function llmJudge(judge, opts = {}) {
     const { stage = 'output', action = 'block', name = 'llm_judge' } = opts;
     const check = async (payload, ctx) => coerce(await judge(payload, ctx), action);
-    return mkGuardrail(name, stage, check);
+    return mkGuardrail(name, stage, check, {
+        timeout: opts.timeout,
+        onError: resolveOnError(action, opts.onError),
+    });
 }
 function coerce(result, action) {
     if (result === null || result === false)
@@ -267,4 +298,13 @@ function typeName(d) {
         return 'array';
     return typeof d;
 }
+// --------------------------------------------------------------------------- detection-tier adapters
+//
+// The opt-in detection tier (local ML classifier / language detector / hosted moderation + the three
+// hosted rails) lives in `./adapters`, and the similarity checks (groundedness / deniedTopics) in
+// `./semantic` — each reuses `payloadText` above. Re-exported here so they read as `rules.classifier`
+// / `rules.bedrockGuardrail` / `rules.groundedness` etc. as one surface (like Python's `rules`). Both
+// import only `./decision` + `payloadText` (a hoisted function), so the cycle is runtime-safe.
+export { classifier, language, openaiModeration, bedrockGuardrail, azureContentSafety, modelArmor, } from './adapters.js';
+export { groundedness, deniedTopics } from './semantic.js';
 //# sourceMappingURL=rules.js.map