@cendor/guardrails 0.1.0 → 0.3.0

package/dist/adapters.js

@@ -0,0 +1,414 @@
+/**
+ * Opt-in detection-tier adapters — beyond the deterministic tier-0 built-ins in `./rules`. The TS
+ * port of `cendor.guardrails.adapters`.
+ *
+ * These reach past regex/arithmetic to a **local ML classifier**, a **language detector**, a
+ * **hosted moderation endpoint**, and the three **hosted rails** (AWS Bedrock, Azure AI Content
+ * Safety, Google Model Armor) — the detection tier of docs/guardrails.md "Threat model". Each rides a
+ * **bring-your-own** dependency or client — never a hard dependency of this package: a classifier
+ * callable, a `detect` callable, or a provider client you pass in. They are re-exported through
+ * `./rules` (`rules.classifier` / `rules.language` / `rules.openaiModeration` /
+ * `rules.bedrockGuardrail` / `rules.azureContentSafety` / `rules.modelArmor`) and at the package root
+ * (`import { adapters } from '@cendor/guardrails'`).
+ *
+ * **Cloud check, local evidence.** The hosted rails call *your* cloud account (metered by the vendor
+ * — the base package stays local-first and free), but the verdict still runs through the same engine:
+ * every trip emits a local `GuardrailDecision` on the `@cendor/core` bus, so `@cendor/acttrace` chains
+ * it as tamper-evident evidence exactly like a deterministic rule. The reason records only which cloud
+ * policy fired — never the payload. The cloud clients are **duck-typed** (nothing here imports an AWS
+ * / Azure / Google SDK); construct the client and pass it in.
+ *
+ * **Honest claims.** There is **no jailbreak-detection claim** anywhere here. `classifier` is a
+ * generic, license-agnostic contract around a local classifier *you* supply (a prompt-injection
+ * classifier such as PromptGuard, an ONNX model, or a heuristic wires through it). Reproduce a
+ * model's public eval and publish the numbers before citing any detection rate — classifiers are
+ * beaten by mutation/obfuscation attacks, so layer them, don't trust one. See the "Threat model".
+ *
+ * This module imports only `./decision` and reuses `payloadText` from `./rules` (a hoisted function,
+ * so the `rules` ↔ `adapters` re-export cycle is safe at runtime).
+ */
+import { Verdict, defineGuardrail, } from './decision.js';
+import { payloadText } from './rules.js';
+/**
+ * Default the error policy from a guardrail's action: a `block` gate fails **closed**; a `flag`
+ * degrades to advisory (`fail_open`). An explicit `onError` always wins. (Same rule as `rules`.)
+ */
+function resolveOnError(action, onError) {
+    if (onError !== undefined)
+        return onError;
+    return action === 'flag' ? 'fail_open' : 'fail_closed';
+}
+/** Build an adapter's `Guardrail` via the leaf `defineGuardrail`, resolving the error policy. */
+function mk(check, opts) {
+    return defineGuardrail(check, {
+        name: opts.name,
+        stage: opts.stage,
+        timeout: opts.timeout,
+        onError: resolveOnError(opts.action, opts.onError),
+    });
+}
+function get(obj, name, dflt = undefined) {
+    if (obj == null)
+        return dflt;
+    if (obj instanceof Map)
+        return obj.has(name) ? obj.get(name) : dflt;
+    if (typeof obj !== 'object' && typeof obj !== 'function')
+        return dflt;
+    const v = obj[name];
+    return v === undefined ? dflt : v;
+}
+/**
+ * Build a `Verdict.metadata` dict from the **reserved annotation keys** (`severity` / `detected` /
+ * `filtered` / `redacted` / `citation` / `license` — documented in docs/specs/bus-events.md),
+ * dropping any that are `undefined`. Adapters use it so a vendor's detected/severity signal rides
+ * the decision's metadata into the acttrace chain — no shape change, no acttrace edit.
+ */
+function annotation(keys) {
+    const out = {};
+    for (const [k, v] of Object.entries(keys))
+        if (v !== undefined)
+            out[k] = v;
+    return out;
+}
+// --------------------------------------------------------------------------- classifier
+/** Normalise a classifier result (bool / number / `{label: score}`) to `[score, tripped]`. */
+function score(result, label, threshold) {
+    if (typeof result === 'boolean')
+        return [result ? 1 : 0, result];
+    if (typeof result === 'number')
+        return [result, result >= threshold];
+    if (result !== null && typeof result === 'object') {
+        const rec = result;
+        let s;
+        if (label !== undefined) {
+            s = Number(rec[label] ?? 0);
+        }
+        else {
+            const vals = Object.values(rec).map((v) => Number(v));
+            s = vals.length > 0 ? Math.max(...vals) : 0;
+        }
+        return [s, s >= threshold];
+    }
+    throw new TypeError(`classifier returned ${result === null ? 'null' : typeof result}; expected bool, number, or mapping`);
+}
+/**
+ * Wrap a **local classifier** as a guardrail — the generic, license-agnostic contract.
+ *
+ * `classify(text)` returns a float score in `[0, 1]`, a `{label: score}` mapping, or a bool. The
+ * guardrail trips when the (selected `label`'s, else the max) score `>= threshold` (or the bool is
+ * `true`). Bring **any** local classifier — an ONNX model, a transformers.js pipeline, a heuristic,
+ * or a prompt-injection classifier (PromptGuard-class). A remote classifier can hang, so set
+ * `timeout` / `onError` for it. No jailbreak-detection claim — see the module "Threat model" note.
+ */
+export function classifier(classify, opts = {}) {
+    const { threshold = 0.5, label, stage = 'input', action = 'block', name = 'classifier', reason, timeout, onError, } = opts;
+    const check = (payload, _ctx) => {
+        const [s, tripped] = score(classify(payloadText(payload)), label, threshold);
+        if (!tripped)
+            return null;
+        return new Verdict(action, reason ?? `${name}: score ${s.toFixed(2)} >= ${threshold}`);
+    };
+    return mk(check, { name, stage, action, timeout, onError });
+}
+/**
+ * Trip when the payload's detected language is **not** in `allowed` (ISO codes; case-insensitive) —
+ * a guard against the language-switch bypass (smuggling disallowed content in another language). See
+ * the "Threat model".
+ *
+ * `detect(text) -> isoCode` is **bring-your-own**: the TS port bundles no language detector (adding
+ * one would be a heavy dependency), so `detect` is required. Without it the check throws a clear
+ * error, which the guardrail's `onError` policy turns into a block (default) or flag. Language ID on
+ * short/mixed text is unreliable — keep this advisory (`action: 'flag'`) unless you control the input.
+ */
+export function language(allowed, opts = {}) {
+    const { detect, stage = 'input', action = 'block', name = 'language', timeout, onError } = opts;
+    const allow = new Set([...allowed].map((a) => a.toLowerCase()));
+    const defaultDetect = (_text) => {
+        throw new Error('language() needs a detector: pass detect=(text) => isoCode. The TS port bundles no ' +
+            'language detector — wire your own (a small langid model, an ONNX/transformers.js classifier).');
+    };
+    const det = detect ?? defaultDetect;
+    const check = (payload, _ctx) => {
+        const text = payloadText(payload).trim();
+        if (!text)
+            return null;
+        const lang = det(text);
+        if (lang && !allow.has(lang.toLowerCase())) {
+            const listed = [...allow]
+                .sort()
+                .map((a) => `'${a}'`)
+                .join(', ');
+            return new Verdict(action, `language '${lang}' not in allowed [${listed}]`);
+        }
+        return null;
+    };
+    return mk(check, { name, stage, action, timeout, onError });
+}
+// --------------------------------------------------------------------------- openai_moderation
+/** The category names an OpenAI moderation result flagged truthy (plain object or class instance). */
+function flaggedCategories(categories) {
+    if (categories == null)
+        return [];
+    let entries;
+    if (categories instanceof Map) {
+        entries = [...categories.entries()];
+    }
+    else if (typeof categories === 'object') {
+        entries = Object.entries(categories);
+    }
+    else {
+        return [];
+    }
+    return entries
+        .filter(([, v]) => Boolean(v))
+        .map(([k]) => k)
+        .sort();
+}
+/**
+ * Trip when OpenAI's **free, non-LLM** moderation endpoint flags the payload — the cheapest hosted
+ * tier. `client` is *your* OpenAI client (needs a key); this calls `client.moderations.create(...)`.
+ *
+ * Restrict to specific `categories` (e.g. `['violence', 'hate']`) or trip on any flag. It is a
+ * network call — bound it with `timeout` and pick an `onError` policy (fail-closed by default for a
+ * block gate). This library stores nothing; the request goes to OpenAI. The client/response are
+ * duck-typed, so any OpenAI-shaped client works.
+ */
+export function openaiModeration(client, opts = {}) {
+    const { model = 'omni-moderation-latest', categories, stage = 'input', action = 'block', name = 'openai_moderation', timeout, onError, } = opts;
+    const cats = categories ? new Set([...categories].map((c) => c.toLowerCase())) : null;
+    const check = async (payload, _ctx) => {
+        const moderations = get(client, 'moderations');
+        if (moderations == null || typeof moderations.create !== 'function') {
+            throw new TypeError('openaiModeration client has no moderations.create()');
+        }
+        const resp = await moderations.create({ model, input: payloadText(payload) });
+        const results = get(resp, 'results') ?? [];
+        if (results.length === 0)
+            return null;
+        const result = results[0];
+        const flagged = flaggedCategories(get(result, 'categories', {}));
+        const ann = annotation({ detected: true, filtered: action !== 'flag' });
+        if (cats !== null) {
+            const hit = flagged.filter((c) => cats.has(c.toLowerCase())).sort();
+            return hit.length > 0
+                ? new Verdict(action, `moderation flagged: ${hit.join(', ')}`, null, ann)
+                : null;
+        }
+        if (get(result, 'flagged', false)) {
+            const names = flagged.join(', ') || 'policy';
+            return new Verdict(action, `moderation flagged: ${names}`, null, ann);
+        }
+        return null;
+    };
+    return mk(check, { name, stage, action, timeout, onError });
+}
+// --------------------------------------------------------------------------- hosted rails
+//
+// Each calls *your* cloud account (metered — cite the vendor's pricing page in the docs) and turns the
+// vendor's verdict into a LOCAL GuardrailDecision → acttrace evidence: "cloud check, local evidence".
+// The clients are duck-typed (no AWS/Azure/Google import here); the JS cloud SDKs are async, so these
+// checks are async — use them via the SDK loop / evaluateAsync (the sync `install()` seam can't run them).
+function uniq(items) {
+    const seen = [];
+    for (const x of items)
+        if (x && !seen.includes(x))
+            seen.push(x);
+    return seen;
+}
+function getList(obj, name) {
+    const v = get(obj, name);
+    return Array.isArray(v) ? v : [];
+}
+/**
+ * AWS Bedrock **`ApplyGuardrail`** as a guardrail — the flagship hosted rail: it evaluates any text
+ * against your pre-configured Bedrock guardrail **independently of any model**, so it works with any
+ * provider. `client` is duck-typed on `applyGuardrail(params) => Promise<resp>` (with aws-sdk v3, pass
+ * `{ applyGuardrail: (p) => client.send(new ApplyGuardrailCommand(p)) }`). `source` is chosen from the
+ * stage (`INPUT`/`OUTPUT`); `action: 'redact'` substitutes Bedrock's masked `outputs` text. Metered
+ * per text unit — set `timeout` / `onError`.
+ */
+export function bedrockGuardrail(client, guardrailId, opts = {}) {
+    const { stage = 'input', action = 'block', name = 'bedrock_guardrail', timeout, onError } = opts;
+    const check = async (payload, ctx) => {
+        const source = opts.source ?? (ctx.stage === 'output' || ctx.stage === 'tool_output' ? 'OUTPUT' : 'INPUT');
+        const apply = get(client, 'applyGuardrail');
+        if (typeof apply !== 'function') {
+            throw new TypeError('bedrockGuardrail client has no applyGuardrail(params) method');
+        }
+        const resp = await apply.call(client, {
+            guardrailIdentifier: guardrailId,
+            guardrailVersion: opts.guardrailVersion ?? 'DRAFT',
+            source,
+            content: [{ text: { text: payloadText(payload) } }],
+        });
+        if (get(resp, 'action') !== 'GUARDRAIL_INTERVENED')
+            return null;
+        const reason = bedrockReason(resp);
+        if (action === 'redact') {
+            const masked = bedrockMasked(resp);
+            if (masked != null) {
+                return new Verdict('redact', reason, masked, {
+                    detected: true,
+                    filtered: true,
+                    redacted: true,
+                });
+            }
+        }
+        return new Verdict(action, reason, null, { detected: true, filtered: true });
+    };
+    return mk(check, { name, stage, action, timeout, onError });
+}
+function bedrockReason(resp) {
+    const actionReason = get(resp, 'actionReason');
+    if (typeof actionReason === 'string' && actionReason) {
+        return `Bedrock guardrail intervened: ${actionReason}`;
+    }
+    const labels = bedrockAssessmentLabels(resp);
+    return `Bedrock guardrail intervened: ${labels.length ? labels.join(', ') : 'policy'}`;
+}
+function bedrockAssessmentLabels(resp) {
+    const labels = [];
+    for (const a of getList(resp, 'assessments')) {
+        for (const t of getList(get(a, 'topicPolicy'), 'topics')) {
+            if (get(t, 'name'))
+                labels.push(`topic:${get(t, 'name')}`);
+        }
+        for (const f of getList(get(a, 'contentPolicy'), 'filters')) {
+            if (get(f, 'type'))
+                labels.push(`content:${get(f, 'type')}`);
+        }
+        const sp = get(a, 'sensitiveInformationPolicy');
+        for (const e of getList(sp, 'piiEntities')) {
+            if (get(e, 'type'))
+                labels.push(`pii:${get(e, 'type')}`);
+        }
+        for (const r of getList(sp, 'regexes')) {
+            if (get(r, 'name'))
+                labels.push(`regex:${get(r, 'name')}`);
+        }
+        const wp = get(a, 'wordPolicy');
+        if (getList(wp, 'customWords').length)
+            labels.push('word:custom');
+        for (const m of getList(wp, 'managedWordLists')) {
+            if (get(m, 'type'))
+                labels.push(`word:${get(m, 'type')}`);
+        }
+    }
+    return uniq(labels);
+}
+function bedrockMasked(resp) {
+    for (const o of getList(resp, 'outputs')) {
+        const t = get(o, 'text');
+        if (typeof t === 'string' && t)
+            return t;
+    }
+    return null;
+}
+/**
+ * Azure AI Content Safety **Prompt Shields** as a guardrail — detects user-prompt/document
+ * injection & jailbreak attacks. `client` is duck-typed on
+ * `shieldPrompt({ userPrompt, documents }) => Promise<resp>` and trips when the response's
+ * `userPromptAnalysis.attackDetected` (or any `documentsAnalysis[].attackDetected`) is true — a binary
+ * signal, so `block` / `flag` are the meaningful actions. Metered per text record — set `timeout`.
+ */
+export function azureContentSafety(client, opts = {}) {
+    const { stage = 'input', action = 'block', name = 'azure_content_safety', timeout, onError, } = opts;
+    const documents = opts.documents ? [...opts.documents] : [];
+    const check = async (payload, _ctx) => {
+        const shield = get(client, 'shieldPrompt');
+        if (typeof shield !== 'function') {
+            throw new TypeError('azureContentSafety client has no shieldPrompt(options) method');
+        }
+        const resp = await shield.call(client, {
+            userPrompt: payloadText(payload),
+            documents,
+        });
+        const hits = azureAttacks(resp);
+        if (hits.length === 0)
+            return null;
+        return new Verdict(action, `Azure Prompt Shields: attack detected (${hits.join(', ')})`, null, annotation({ detected: true, filtered: action !== 'flag' }));
+    };
+    return mk(check, { name, stage, action, timeout, onError });
+}
+function azureAttacks(resp) {
+    const hits = [];
+    const upa = get(resp, 'userPromptAnalysis') ?? get(resp, 'user_prompt_analysis');
+    if (upa != null && (get(upa, 'attackDetected') || get(upa, 'attack_detected'))) {
+        hits.push('user prompt');
+    }
+    const da = get(resp, 'documentsAnalysis') ?? get(resp, 'documents_analysis');
+    if (Array.isArray(da)) {
+        da.forEach((d, i) => {
+            if (get(d, 'attackDetected') || get(d, 'attack_detected'))
+                hits.push(`document[${i}]`);
+        });
+    }
+    return hits;
+}
+/**
+ * Google Cloud **Model Armor** as a guardrail — screens prompts/responses against a template
+ * (prompt-injection & jailbreak, Sensitive Data Protection, malicious URIs, responsible-AI). `client`
+ * is duck-typed on `sanitizeUserPrompt(request)` / `sanitizeModelResponse(request)`; `template` is the
+ * full resource path `projects/{p}/locations/{l}/templates/{t}`. Trips when
+ * `sanitizationResult.filterMatchState` is `MATCH_FOUND`; the reason lists which filters matched.
+ * Metered per token — set `timeout`.
+ */
+export function modelArmor(client, template, opts = {}) {
+    const { stage = 'input', action = 'block', name = 'model_armor', timeout, onError } = opts;
+    const check = async (payload, ctx) => {
+        const text = payloadText(payload);
+        const isOutput = ctx.stage === 'output' || ctx.stage === 'tool_output';
+        const method = get(client, isOutput ? 'sanitizeModelResponse' : 'sanitizeUserPrompt');
+        if (typeof method !== 'function') {
+            throw new TypeError('modelArmor client is missing sanitizeUserPrompt/sanitizeModelResponse');
+        }
+        const request = isOutput
+            ? { name: template, modelResponseData: { text } }
+            : { name: template, userPromptData: { text } };
+        const resp = await method.call(client, request);
+        const matched = modelArmorMatches(resp);
+        if (matched.length === 0)
+            return null;
+        return new Verdict(action, `Model Armor matched: ${matched.join(', ')}`, null, annotation({ detected: true, filtered: action !== 'flag' }));
+    };
+    return mk(check, { name, stage, action, timeout, onError });
+}
+const MATCH_FOUND = 'MATCH_FOUND';
+function matchFound(state) {
+    const name = state?.name ?? (typeof state === 'string' ? state : undefined);
+    return name === MATCH_FOUND; // "NO_MATCH_FOUND" !== "MATCH_FOUND"
+}
+function modelArmorMatches(resp) {
+    const sr = get(resp, 'sanitizationResult') ?? get(resp, 'sanitization_result');
+    if (sr == null)
+        return [];
+    const top = get(sr, 'filterMatchState') ?? get(sr, 'filter_match_state');
+    if (!matchFound(top))
+        return [];
+    const fr = get(sr, 'filterResults') ?? get(sr, 'filter_results');
+    if (fr == null)
+        return ['filter'];
+    const entries = fr instanceof Map
+        ? [...fr.entries()]
+        : typeof fr === 'object'
+            ? Object.entries(fr)
+            : [];
+    const matched = entries.filter(([, v]) => containsMatch(v)).map(([k]) => String(k));
+    return matched.length ? matched : ['filter'];
+}
+function containsMatch(val, depth = 0) {
+    if (val == null || depth > 6)
+        return false;
+    const st = get(val, 'match_state') ?? get(val, 'matchState');
+    if (st != null && matchFound(st))
+        return true;
+    if (Array.isArray(val))
+        return val.some((v) => containsMatch(v, depth + 1));
+    if (val instanceof Map)
+        return [...val.values()].some((v) => containsMatch(v, depth + 1));
+    if (typeof val === 'object') {
+        return Object.values(val).some((v) => containsMatch(v, depth + 1));
+    }
+    return false;
+}
+//# sourceMappingURL=adapters.js.map

package/dist/adapters.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapters.js","sourceRoot":"","sources":["../src/adapters.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,OAAO,EAKL,OAAO,EACP,eAAe,GAChB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAKzC;;;GAGG;AACH,SAAS,cAAc,CAAC,MAAc,EAAE,OAAiB;IACvD,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC;IAC1C,OAAO,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,aAAa,CAAC;AACzD,CAAC;AAED,iGAAiG;AACjG,SAAS,EAAE,CACT,KAAY,EACZ,IAAyF;IAEzF,OAAO,eAAe,CAAC,KAAK,EAAE;QAC5B,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,OAAO,EAAE,cAAc,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC;KACnD,CAAC,CAAC;AACL,CAAC;AAED,SAAS,GAAG,CAAC,GAAY,EAAE,IAAY,EAAE,OAAgB,SAAS;IAChE,IAAI,GAAG,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC;IAC7B,IAAI,GAAG,YAAY,GAAG;QAAE,OAAO,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACpE,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,OAAO,GAAG,KAAK,UAAU;QAAE,OAAO,IAAI,CAAC;IACtE,MAAM,CAAC,GAAI,GAA+B,CAAC,IAAI,CAAC,CAAC;IACjD,OAAO,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AACpC,CAAC;AAED;;;;;GAKG;AACH,SAAS,UAAU,CAAC,IAA6B;IAC/C,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,IAAI,CAAC,KAAK,SAAS;YAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC3E,OAAO,GAAG,CAAC;AACb,CAAC;AAED,yFAAyF;AAEzF,8FAA8F;AAC9F,SAAS,KAAK,CAAC,MAAe,EAAE,KAAyB,EAAE,SAAiB;IAC1E,IAAI,OAAO,MAAM,KAAK,SAAS;QAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IACjE,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,CAAC,MAAM,EAAE,MAAM,IAAI,SAAS,CAAC,CAAC;IACrE,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAClD,MAAM,GAAG,GAAG,MAAiC,CAAC;QAC9C,IAAI,CAAS,CAAC;QACd,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9B,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YACtD,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9C,CAAC;QACD,OAAO,CAAC,CAAC,EAAE,CAAC,IAAI,SAAS,CAAC,CAAC;IAC7B,CAAC;IACD,MAAM,IAAI,SAAS,CACjB,uBAAuB,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,MAAM,qCAAqC,CACrG,CAAC;AACJ,CAAC;AAkBD;;;;;;;;GAQG;AACH,MAAM,UAAU,UAAU,CACxB,QAAqE,EACrE,OAA0B,EAAE;IAE5B,MAAM,EACJ,SAAS,GAAG,GAAG,EACf,KAAK,EACL,KAAK,GAAG,OAAO,EACf,MAAM,GAAG,OAAO,EAChB,IAAI,GAAG,YAAY,EACnB,MAAM,EACN,OAAO,EACP,OAAO,GACR,GAAG,IAAI,CAAC;IACT,MAAM,KAAK,GAAU,CAAC,OAAgB,EAAE,IAAa,EAAE,EAAE;QACvD,MAAM,CAAC,CAAC,EAAE,OAAO,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;QAC7E,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAC1B,OAAO,IAAI,OAAO,CAAC,MAAM,EAAE,MAAM,IAAI,GAAG,IAAI,WAAW,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,SAAS,EAAE,CAAC,CAAC;IACzF,CAAC,CAAC;IACF,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;AAC9D,CAAC;AAcD;;;;;;;;;GASG;AACH,MAAM,UAAU,QAAQ,CAAC,OAAyB,EAAE,OAAwB,EAAE;IAC5E,MAAM,EAAE,MAAM,EAAE,KAAK,GAAG,OAAO,EAAE,MAAM,GAAG,OAAO,EAAE,IAAI,GAAG,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IAChG,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IAChE,MAAM,aAAa,GAAG,CAAC,KAAa,EAAU,EAAE;QAC9C,MAAM,IAAI,KAAK,CACb,qFAAqF;YACnF,+FAA+F,CAClG,CAAC;IACJ,CAAC,CAAC;IACF,MAAM,GAAG,GAAG,MAAM,IAAI,aAAa,CAAC;IACpC,MAAM,KAAK,GAAU,CAAC,OAAgB,EAAE,IAAa,EAAE,EAAE;QACvD,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QACzC,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QACvB,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;QACvB,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;YAC3C,MAAM,MAAM,GAAG,CAAC,GAAG,KAAK,CAAC;iBACtB,IAAI,EAAE;iBACN,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC;iBACpB,IAAI,CAAC,IAAI,CAAC,CAAC;YACd,OAAO,IAAI,OAAO,CAAC,MAAM,EAAE,aAAa,IAAI,qBAAqB,MAAM,GAAG,CAAC,CAAC;QAC9E,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IACF,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;AAC9D,CAAC;AAED,gGAAgG;AAEhG,sGAAsG;AACtG,SAAS,iBAAiB,CAAC,UAAmB;IAC5C,IAAI,UAAU,IAAI,IAAI;QAAE,OAAO,EAAE,CAAC;IAClC,IAAI,OAA4B,CAAC;IACjC,IAAI,UAAU,YAAY,GAAG,EAAE,CAAC;QAC9B,OAAO,GAAG,CAAC,GAAG,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC;IACtC,CAAC;SAAM,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;QAC1C,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,UAAqC,CAAC,CAAC;IAClE,CAAC;SAAM,CAAC;QACN,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,OAAO;SACX,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;SAC7B,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;SACf,IAAI,EAAE,CAAC;AACZ,CAAC;AAaD;;;;;;;;GAQG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAe,EAAE,OAAgC,EAAE;IAClF,MAAM,EACJ,KAAK,GAAG,wBAAwB,EAChC,UAAU,EACV,KAAK,GAAG,OAAO,EACf,MAAM,GAAG,OAAO,EAChB,IAAI,GAAG,mBAAmB,EAC1B,OAAO,EACP,OAAO,GACR,GAAG,IAAI,CAAC;IACT,MAAM,IAAI,GAAG,UAAU,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACtF,MAAM,KAAK,GAAU,KAAK,EAAE,OAAgB,EAAE,IAAa,EAAE,EAAE;QAC7D,MAAM,WAAW,GAAG,GAAG,CAAC,MAAM,EAAE,aAAa,CAEhC,CAAC;QACd,IAAI,WAAW,IAAI,IAAI,IAAI,OAAO,WAAW,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YACpE,MAAM,IAAI,SAAS,CAAC,qDAAqD,CAAC,CAAC;QAC7E,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC9E,MAAM,OAAO,GAAI,GAAG,CAAC,IAAI,EAAE,SAAS,CAA2B,IAAI,EAAE,CAAC;QACtE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACtC,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QAC1B,MAAM,OAAO,GAAG,iBAAiB,CAAC,GAAG,CAAC,MAAM,EAAE,YAAY,EAAE,EAAE,CAAC,CAAC,CAAC;QACjE,MAAM,GAAG,GAAG,UAAU,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,KAAK,MAAM,EAAE,CAAC,CAAC;QACxE,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACpE,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC;gBACnB,CAAC,CAAC,IAAI,OAAO,CAAC,MAAM,EAAE,uBAAuB,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC;gBACzE,CAAC,CAAC,IAAI,CAAC;QACX,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,EAAE,CAAC;YAClC,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC;YAC7C,OAAO,IAAI,OAAO,CAAC,MAAM,EAAE,uBAAuB,KAAK,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;QACxE,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IACF,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;AAC9D,CAAC;AAED,2FAA2F;AAC3F,EAAE;AACF,uGAAuG;AACvG,sGAAsG;AACtG,sGAAsG;AACtG,2GAA2G;AAE3G,SAAS,IAAI,CAAC,KAAuB;IACnC,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,KAAK,MAAM,CAAC,IAAI,KAAK;QAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;YAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAChE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,OAAO,CAAC,GAAY,EAAE,IAAY;IACzC,MAAM,CAAC,GAAG,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACzB,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACnC,CAAC;AAaD;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAC9B,MAAe,EACf,WAAmB,EACnB,OAAgC,EAAE;IAElC,MAAM,EAAE,KAAK,GAAG,OAAO,EAAE,MAAM,GAAG,OAAO,EAAE,IAAI,GAAG,mBAAmB,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IACjG,MAAM,KAAK,GAAU,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE;QAC1C,MAAM,MAAM,GACV,IAAI,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,KAAK,KAAK,QAAQ,IAAI,GAAG,CAAC,KAAK,KAAK,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QAC9F,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;QAC5C,IAAI,OAAO,KAAK,KAAK,UAAU,EAAE,CAAC;YAChC,MAAM,IAAI,SAAS,CAAC,8DAA8D,CAAC,CAAC;QACtF,CAAC;QACD,MAAM,IAAI,GAAG,MAAO,KAAiC,CAAC,IAAI,CAAC,MAAM,EAAE;YACjE,mBAAmB,EAAE,WAAW;YAChC,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,IAAI,OAAO;YAClD,MAAM;YACN,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;SACpD,CAAC,CAAC;QACH,IAAI,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,KAAK,sBAAsB;YAAE,OAAO,IAAI,CAAC;QAChE,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;YACxB,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;YACnC,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;gBACnB,OAAO,IAAI,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE;oBAC3C,QAAQ,EAAE,IAAI;oBACd,QAAQ,EAAE,IAAI;oBACd,QAAQ,EAAE,IAAI;iBACf,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,OAAO,IAAI,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/E,CAAC,CAAC;IACF,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;AAC9D,CAAC;AAED,SAAS,aAAa,CAAC,IAAa;IAClC,MAAM,YAAY,GAAG,GAAG,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;IAC/C,IAAI,OAAO,YAAY,KAAK,QAAQ,IAAI,YAAY,EAAE,CAAC;QACrD,OAAO,iCAAiC,YAAY,EAAE,CAAC;IACzD,CAAC;IACD,MAAM,MAAM,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAC;IAC7C,OAAO,iCAAiC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;AACzF,CAAC;AAED,SAAS,uBAAuB,CAAC,IAAa;IAC5C,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,IAAI,EAAE,aAAa,CAAC,EAAE,CAAC;QAC7C,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,aAAa,CAAC,EAAE,QAAQ,CAAC,EAAE,CAAC;YACzD,IAAI,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC;gBAAE,MAAM,CAAC,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QAC7D,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,eAAe,CAAC,EAAE,SAAS,CAAC,EAAE,CAAC;YAC5D,IAAI,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC;gBAAE,MAAM,CAAC,IAAI,CAAC,WAAW,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QAC/D,CAAC;QACD,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC,EAAE,4BAA4B,CAAC,CAAC;QAChD,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,EAAE,EAAE,aAAa,CAAC,EAAE,CAAC;YAC3C,IAAI,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC;gBAAE,MAAM,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QAC3D,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,EAAE,EAAE,SAAS,CAAC,EAAE,CAAC;YACvC,IAAI,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC;gBAAE,MAAM,CAAC,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QAC7D,CAAC;QACD,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC;QAChC,IAAI,OAAO,CAAC,EAAE,EAAE,aAAa,CAAC,CAAC,MAAM;YAAE,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAClE,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,EAAE,EAAE,kBAAkB,CAAC,EAAE,CAAC;YAChD,IAAI,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC;gBAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC;AACtB,CAAC;AAED,SAAS,aAAa,CAAC,IAAa;IAClC,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,CAAC;QACzC,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACzB,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC;YAAE,OAAO,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAWD;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAChC,MAAe,EACf,OAAkC,EAAE;IAEpC,MAAM,EACJ,KAAK,GAAG,OAAO,EACf,MAAM,GAAG,OAAO,EAChB,IAAI,GAAG,sBAAsB,EAC7B,OAAO,EACP,OAAO,GACR,GAAG,IAAI,CAAC;IACT,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5D,MAAM,KAAK,GAAU,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;QAC3C,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;QAC3C,IAAI,OAAO,MAAM,KAAK,UAAU,EAAE,CAAC;YACjC,MAAM,IAAI,SAAS,CAAC,+DAA+D,CAAC,CAAC;QACvF,CAAC;QACD,MAAM,IAAI,GAAG,MAAO,MAAkC,CAAC,IAAI,CAAC,MAAM,EAAE;YAClE,UAAU,EAAE,WAAW,CAAC,OAAO,CAAC;YAChC,SAAS;SACV,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACnC,OAAO,IAAI,OAAO,CAChB,MAAM,EACN,0CAA0C,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAC5D,IAAI,EACJ,UAAU,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,KAAK,MAAM,EAAE,CAAC,CAC5D,CAAC;IACJ,CAAC,CAAC;IACF,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;AAC9D,CAAC;AAED,SAAS,YAAY,CAAC,IAAa;IACjC,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,EAAE,oBAAoB,CAAC,IAAI,GAAG,CAAC,IAAI,EAAE,sBAAsB,CAAC,CAAC;IACjF,IAAI,GAAG,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,gBAAgB,CAAC,IAAI,GAAG,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC,EAAE,CAAC;QAC/E,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC3B,CAAC;IACD,MAAM,EAAE,GAAG,GAAG,CAAC,IAAI,EAAE,mBAAmB,CAAC,IAAI,GAAG,CAAC,IAAI,EAAE,oBAAoB,CAAC,CAAC;IAC7E,IAAI,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;QACtB,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YAClB,IAAI,GAAG,CAAC,CAAC,EAAE,gBAAgB,CAAC,IAAI,GAAG,CAAC,CAAC,EAAE,iBAAiB,CAAC;gBAAE,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QACzF,CAAC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAUD;;;;;;;GAOG;AACH,MAAM,UAAU,UAAU,CACxB,MAAe,EACf,QAAgB,EAChB,OAA0B,EAAE;IAE5B,MAAM,EAAE,KAAK,GAAG,OAAO,EAAE,MAAM,GAAG,OAAO,EAAE,IAAI,GAAG,aAAa,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IAC3F,MAAM,KAAK,GAAU,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE;QAC1C,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;QAClC,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,KAAK,QAAQ,IAAI,GAAG,CAAC,KAAK,KAAK,aAAa,CAAC;QACvE,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC;QACtF,IAAI,OAAO,MAAM,KAAK,UAAU,EAAE,CAAC;YACjC,MAAM,IAAI,SAAS,CAAC,uEAAuE,CAAC,CAAC;QAC/F,CAAC;QACD,MAAM,OAAO,GAAG,QAAQ;YACtB,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,iBAAiB,EAAE,EAAE,IAAI,EAAE,EAAE;YACjD,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,cAAc,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC;QACjD,MAAM,IAAI,GAAG,MAAO,MAAkC,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC7E,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACtC,OAAO,IAAI,OAAO,CAChB,MAAM,EACN,wBAAwB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAC5C,IAAI,EACJ,UAAU,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,KAAK,MAAM,EAAE,CAAC,CAC5D,CAAC;IACJ,CAAC,CAAC;IACF,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;AAC9D,CAAC;AAED,MAAM,WAAW,GAAG,aAAa,CAAC;AAElC,SAAS,UAAU,CAAC,KAAc;IAChC,MAAM,IAAI,GACP,KAA2B,EAAE,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACxF,OAAO,IAAI,KAAK,WAAW,CAAC,CAAC,qCAAqC;AACpE,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAa;IACtC,MAAM,EAAE,GAAG,GAAG,CAAC,IAAI,EAAE,oBAAoB,CAAC,IAAI,GAAG,CAAC,IAAI,EAAE,qBAAqB,CAAC,CAAC;IAC/E,IAAI,EAAE,IAAI,IAAI;QAAE,OAAO,EAAE,CAAC;IAC1B,MAAM,GAAG,GAAG,GAAG,CAAC,EAAE,EAAE,kBAAkB,CAAC,IAAI,GAAG,CAAC,EAAE,EAAE,oBAAoB,CAAC,CAAC;IACzE,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IAChC,MAAM,EAAE,GAAG,GAAG,CAAC,EAAE,EAAE,eAAe,CAAC,IAAI,GAAG,CAAC,EAAE,EAAE,gBAAgB,CAAC,CAAC;IACjE,IAAI,EAAE,IAAI,IAAI;QAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IAClC,MAAM,OAAO,GACX,EAAE,YAAY,GAAG;QACf,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;QACnB,CAAC,CAAC,OAAO,EAAE,KAAK,QAAQ;YACtB,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAA6B,CAAC;YAC/C,CAAC,CAAC,EAAE,CAAC;IACX,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IACpF,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,aAAa,CAAC,GAAY,EAAE,KAAK,GAAG,CAAC;IAC5C,IAAI,GAAG,IAAI,IAAI,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3C,MAAM,EAAE,GAAG,GAAG,CAAC,GAAG,EAAE,aAAa,CAAC,IAAI,GAAG,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IAC7D,IAAI,EAAE,IAAI,IAAI,IAAI,UAAU,CAAC,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9C,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;IAC5E,IAAI,GAAG,YAAY,GAAG;QAAE,OAAO,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;IAC1F,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5B,OAAO,MAAM,CAAC,MAAM,CAAC,GAA8B,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;IAChG,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/decision.d.ts

@@ -11,18 +11,38 @@ export type Stage = (typeof STAGES)[number];
 /** What a tripped check does (mirrors acttrace's action vocabulary). */
 export declare const ACTIONS: readonly ["block", "redact", "flag"];
 export type Action = (typeof ACTIONS)[number];
+/**
+ * What to do when a check *itself* errors or times out (as opposed to returning a verdict).
+ * `fail_closed` treats the error as a block (fail-safe — the default for a gate you rely on);
+ * `fail_open` records the failure as a `flag` and lets the call proceed (so a flaky tier-3/4 judge
+ * outage degrades to advisory rather than silently disabling the agent). Either way the failure is
+ * emitted as a `GuardrailDecision`, so the audit chain records that the check could not run —
+ * evidence, not a swallowed exception.
+ */
+export declare const ON_ERROR: readonly ["fail_closed", "fail_open"];
+export type OnError = (typeof ON_ERROR)[number];
 /** Coerce a stage spec (a single stage or a collection) to a validated array. */
 export declare function normalizeStages(stage: string | readonly string[]): string[];
 /**
  * What a check returns to *trip* a guardrail. Return `null` to pass.
  * `action`: `"block"` (fail-closed), `"redact"` (replace the payload with `replacement`), or
  * `"flag"` (record + continue). Keep `reason` free of raw secret values.
+ *
+ * `metadata` is a per-result annotation dict merged into this decision's
+ * {@link GuardrailDecision.metadata} — the channel a check uses to attach the **reserved annotation
+ * keys** (`severity` / `detected` / `filtered` / `redacted` / `citation` / `license`, documented in
+ * docs/specs/bus-events.md). Unlike the static `Guardrail.metadata` (constant per guardrail — e.g.
+ * `loadPolicy`'s `policy_hash`), this is computed per verdict, so a hosted-rail adapter can record
+ * the vendor's severity/labels for this specific check. `Verdict` is never serialized (only
+ * `GuardrailDecision` is), so this adds no wire change. Layered *under* the caller's per-call
+ * `Context.metadata` (context still wins a key clash) — see the engine's `emit`.
  */
 export declare class Verdict {
     readonly action: Action;
     readonly reason: string;
     readonly replacement: unknown;
-    constructor(action: Action, reason?: string, replacement?: unknown);
+    readonly metadata: Record<string, unknown>;
+    constructor(action: Action, reason?: string, replacement?: unknown, metadata?: Record<string, unknown>);
 }
 /** Everything a check knows about *where* it runs, beyond the payload. All fields optional. */
 export interface Context {
@@ -30,6 +50,12 @@ export interface Context {
     agent?: string;
     tool?: string;
     toolArgs?: unknown;
+    /**
+     * The user's originating instruction/intent for the run, when the caller knows it. An alignment
+     * check (`judge.taskAdherence`) compares a proposed tool call against it. Empty by default; a
+     * standalone check ignores it. (`@cendor/sdk` auto-threading is a deferred parity tail — 🚧.)
+     */
+    instruction?: string;
     traceId?: string;
     metadata?: Record<string, unknown>;
 }
@@ -40,14 +66,48 @@ export interface Guardrail {
     name: string;
     stages: string[];
     check: Check;
+    /**
+     * Optional per-check wall-clock limit in **seconds**. Meant for slow tier-3/4 checks (an LLM
+     * judge, a hosted rail); deterministic built-ins run in microseconds and leave it `undefined`.
+     * Enforced on the **async** path only (`evaluateAsync`) — JS has no threads, so there is no true
+     * sync timeout (see `evaluate`). On the async path a coroutine check is bounded via
+     * `Promise.race`; on a throw/timeout the `onError` policy decides.
+     */
+    timeout?: number;
+    /**
+     * What to do when the check *throws* or *times out*: `"fail_closed"` (default — treat it as a
+     * block) or `"fail_open"` (record a `flag` and proceed). Rule factories pick the safe default for
+     * their action; set it explicitly for a bring-your-own judge so an outage degrades to advisory
+     * instead of a hard stop (or vice-versa).
+     */
+    onError?: OnError;
+    /**
+     * Static key/values merged into every `GuardrailDecision` this guardrail emits (under the caller's
+     * per-call `Context.metadata`, which wins a key clash). `loadPolicy` uses it to stamp
+     * `policy_hash` / `policy_version` so the audit chain proves which policy was active; also handy
+     * for a severity, owner, or ticket id. Keep values small and payload-free.
+     */
+    metadata?: Record<string, unknown>;
 }
 export interface DefineGuardrailOptions {
     stage?: string | readonly string[];
     name?: string;
+    /** Per-check wall-clock limit in seconds (async path only); positive or `undefined`. */
+    timeout?: number;
+    /** Error/timeout policy (default `"fail_closed"`). */
+    onError?: OnError;
+    /** Static metadata merged into every decision this guardrail emits (see {@link Guardrail.metadata}). */
+    metadata?: Record<string, unknown>;
 }
+/**
+ * Validate a guardrail's execution policy (mirrors Python's `Guardrail.__post_init__`). Throws on an
+ * unknown `onError` or a non-positive `timeout`.
+ */
+export declare function validateExecutionPolicy(timeout: number | undefined, onError: OnError): void;
 /**
  * Turn a `check(payload, ctx)` function into a `Guardrail` (the TS analogue of Python's
- * `@guardrail` decorator — JS has no function decorators).
+ * `@guardrail` decorator — JS has no function decorators). `timeout` / `onError` set the per-check
+ * execution policy (see {@link Guardrail}).
  */
 export declare function defineGuardrail(check: Check, opts?: DefineGuardrailOptions): Guardrail;
 export interface GuardrailDecisionInit {

package/dist/decision.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"decision.d.ts","sourceRoot":"","sources":["../src/decision.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,yDAAyD;AACzD,eAAO,MAAM,MAAM,0DAA2D,CAAC;AAC/E,MAAM,MAAM,KAAK,GAAG,CAAC,OAAO,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC;AAE5C,wEAAwE;AACxE,eAAO,MAAM,OAAO,sCAAuC,CAAC;AAC5D,MAAM,MAAM,MAAM,GAAG,CAAC,OAAO,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC;AAE9C,iFAAiF;AACjF,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,GAAG,MAAM,EAAE,CAS3E;AAED;;;;GAIG;AACH,qBAAa,OAAO;IAClB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;gBAElB,MAAM,EAAE,MAAM,EAAE,MAAM,SAAK,EAAE,WAAW,GAAE,OAAc;CAUrE;AAED,+FAA+F;AAC/F,MAAM,WAAW,OAAO;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,4GAA4G;AAC5G,MAAM,MAAM,KAAK,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,KAAK,OAAO,GAAG,IAAI,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;AAEjG,sGAAsG;AACtG,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,KAAK,EAAE,KAAK,CAAC;CACd;AAED,MAAM,WAAW,sBAAsB;IACrC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,CAAC;IACnC,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,GAAE,sBAA2B,GAAG,SAAS,CAM1F;AAED,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,EAAE,CAAC,EAAE,IAAI,CAAC;IACV,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED;;;;GAIG;AACH,qBAAa,iBAAiB;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,EAAE,EAAE,IAAI,GAAG,IAAI,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;gBAEtB,IAAI,EAAE,qBAAqB;CAWxC;AAED,mGAAmG;AACnG,qBAAa,gBAAiB,SAAQ,KAAK;IACzC,QAAQ,CAAC,SAAS,EAAE,iBAAiB,EAAE,CAAC;gBAE5B,SAAS,EAAE,iBAAiB,EAAE;CAW3C"}
+{"version":3,"file":"decision.d.ts","sourceRoot":"","sources":["../src/decision.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,yDAAyD;AACzD,eAAO,MAAM,MAAM,0DAA2D,CAAC;AAC/E,MAAM,MAAM,KAAK,GAAG,CAAC,OAAO,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC;AAE5C,wEAAwE;AACxE,eAAO,MAAM,OAAO,sCAAuC,CAAC;AAC5D,MAAM,MAAM,MAAM,GAAG,CAAC,OAAO,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC;AAE9C;;;;;;;GAOG;AACH,eAAO,MAAM,QAAQ,uCAAwC,CAAC;AAC9D,MAAM,MAAM,OAAO,GAAG,CAAC,OAAO,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC;AAEhD,iFAAiF;AACjF,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,GAAG,MAAM,EAAE,CAS3E;AAED;;;;;;;;;;;;;GAaG;AACH,qBAAa,OAAO;IAClB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;gBAGzC,MAAM,EAAE,MAAM,EACd,MAAM,SAAK,EACX,WAAW,GAAE,OAAc,EAC3B,QAAQ,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM;CAYzC;AAED,+FAA+F;AAC/F,MAAM,WAAW,OAAO;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,4GAA4G;AAC5G,MAAM,MAAM,KAAK,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,KAAK,OAAO,GAAG,IAAI,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;AAEjG,sGAAsG;AACtG,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,KAAK,EAAE,KAAK,CAAC;IACb;;;;;;OAMG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;;OAKG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,sBAAsB;IACrC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,CAAC;IACnC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,wFAAwF;IACxF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,sDAAsD;IACtD,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,wGAAwG;IACxG,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI,CAW3F;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,GAAE,sBAA2B,GAAG,SAAS,CAY1F;AAED,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,EAAE,CAAC,EAAE,IAAI,CAAC;IACV,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED;;;;GAIG;AACH,qBAAa,iBAAiB;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,EAAE,EAAE,IAAI,GAAG,IAAI,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;gBAEtB,IAAI,EAAE,qBAAqB;CAWxC;AAED,mGAAmG;AACnG,qBAAa,gBAAiB,SAAQ,KAAK;IACzC,QAAQ,CAAC,SAAS,EAAE,iBAAiB,EAAE,CAAC;gBAE5B,SAAS,EAAE,iBAAiB,EAAE;CAW3C"}

package/dist/decision.js

@@ -9,6 +9,15 @@
 export const STAGES = ['input', 'tool_call', 'tool_output', 'output'];
 /** What a tripped check does (mirrors acttrace's action vocabulary). */
 export const ACTIONS = ['block', 'redact', 'flag'];
+/**
+ * What to do when a check *itself* errors or times out (as opposed to returning a verdict).
+ * `fail_closed` treats the error as a block (fail-safe — the default for a gate you rely on);
+ * `fail_open` records the failure as a `flag` and lets the call proceed (so a flaky tier-3/4 judge
+ * outage degrades to advisory rather than silently disabling the agent). Either way the failure is
+ * emitted as a `GuardrailDecision`, so the audit chain records that the check could not run —
+ * evidence, not a swallowed exception.
+ */
+export const ON_ERROR = ['fail_closed', 'fail_open'];
 /** Coerce a stage spec (a single stage or a collection) to a validated array. */
 export function normalizeStages(stage) {
     const stages = typeof stage === 'string' ? [stage] : [...stage];
@@ -25,30 +34,62 @@ export function normalizeStages(stage) {
  * What a check returns to *trip* a guardrail. Return `null` to pass.
  * `action`: `"block"` (fail-closed), `"redact"` (replace the payload with `replacement`), or
  * `"flag"` (record + continue). Keep `reason` free of raw secret values.
+ *
+ * `metadata` is a per-result annotation dict merged into this decision's
+ * {@link GuardrailDecision.metadata} — the channel a check uses to attach the **reserved annotation
+ * keys** (`severity` / `detected` / `filtered` / `redacted` / `citation` / `license`, documented in
+ * docs/specs/bus-events.md). Unlike the static `Guardrail.metadata` (constant per guardrail — e.g.
+ * `loadPolicy`'s `policy_hash`), this is computed per verdict, so a hosted-rail adapter can record
+ * the vendor's severity/labels for this specific check. `Verdict` is never serialized (only
+ * `GuardrailDecision` is), so this adds no wire change. Layered *under* the caller's per-call
+ * `Context.metadata` (context still wins a key clash) — see the engine's `emit`.
  */
 export class Verdict {
     action;
     reason;
     replacement;
-    constructor(action, reason = '', replacement = null) {
+    metadata;
+    constructor(action, reason = '', replacement = null, metadata = {}) {
         if (!ACTIONS.includes(action)) {
             throw new Error(`unknown action ${JSON.stringify(action)}; must be one of ${ACTIONS.join(', ')}`);
         }
         this.action = action;
         this.reason = reason;
         this.replacement = replacement;
+        this.metadata = metadata;
+    }
+}
+/**
+ * Validate a guardrail's execution policy (mirrors Python's `Guardrail.__post_init__`). Throws on an
+ * unknown `onError` or a non-positive `timeout`.
+ */
+export function validateExecutionPolicy(timeout, onError) {
+    if (!ON_ERROR.includes(onError)) {
+        throw new Error(`unknown onError ${JSON.stringify(onError)}; must be one of ${ON_ERROR.join(', ')}`);
+    }
+    if (timeout !== undefined && !(timeout > 0)) {
+        throw new Error(`timeout must be positive seconds or undefined, got ${JSON.stringify(timeout)}`);
     }
 }
 /**
  * Turn a `check(payload, ctx)` function into a `Guardrail` (the TS analogue of Python's
- * `@guardrail` decorator — JS has no function decorators).
+ * `@guardrail` decorator — JS has no function decorators). `timeout` / `onError` set the per-check
+ * execution policy (see {@link Guardrail}).
  */
 export function defineGuardrail(check, opts = {}) {
-    return {
+    const onError = opts.onError ?? 'fail_closed';
+    validateExecutionPolicy(opts.timeout, onError);
+    const g = {
         name: opts.name ?? (check.name || 'guardrail'),
         stages: normalizeStages(opts.stage ?? 'input'),
         check,
+        onError,
     };
+    if (opts.timeout !== undefined)
+        g.timeout = opts.timeout;
+    if (opts.metadata !== undefined)
+        g.metadata = opts.metadata;
+    return g;
 }
 /**
  * Evidence that a guardrail tripped or flagged — emitted on the `@cendor/core` bus. acttrace