@clampd/sdk 0.14.0 → 0.15.1

package/dist/_frameworkAdapters.d.ts

@@ -0,0 +1,93 @@
+/**
+ * Framework tool-object adapters and the unregistered-tool detector.
+ *
+ * Mirrors `clampd._framework_adapters` in the Python SDK. Two
+ * unrelated-but-thin concerns live here so we don't multiply tiny
+ * helper modules:
+ *
+ *   1. {@link extractToolDescriptor} — duck-type a LangChain
+ *      `BaseTool` / OpenAI tool def / Anthropic tool def into a
+ *      plain `{ name, description, paramSchema }` triple. Used by
+ *      the `registerTool(toolObject, opts)` overload so callers can
+ *      pass their existing framework tool object instead of
+ *      restating its name / description / schema.
+ *
+ *   2. {@link raiseIfUnregistered} — convert the gateway's
+ *      `denial_reason` strings starting with `tool_not_registered:`
+ *      or `tool_not_classified:` into a typed
+ *      {@link ClampdUnregisteredToolError}. Centralised here so
+ *      every wrapper that calls `client.proxy()` can short-circuit
+ *      with the same exception, ahead of throwing the more general
+ *      {@link ClampdBlockedError}.
+ *
+ * Pure TypeScript — no framework imports. Every shape check is duck
+ * typing so loading the SDK does not require LangChain / OpenAI /
+ * Anthropic SDKs to be installed.
+ */
+import type { ProxyResponse } from "./client.js";
+/**
+ * Plain triple extracted from an arbitrary framework tool object.
+ *
+ * `paramSchema` is whatever the framework gave us (zod schema, JSON
+ * Schema, ad-hoc dict). Downstream code that hashes it (`contractHash`)
+ * tolerates anything serialisable; LangChain `zod` schemas are passed
+ * through `_zodToJsonSchema` first so the hash stays stable across
+ * runs.
+ */
+export interface ExtractedDescriptor {
+    name: string;
+    description: string;
+    paramSchema: object;
+}
+/**
+ * Detect and extract `{ name, description, paramSchema }` from a
+ * LangChain `BaseTool`, OpenAI tool def, Anthropic tool def, or
+ * Vercel AI SDK tool def.
+ *
+ * Returns `null` when the value doesn't look like any known tool
+ * shape — caller should fall through to the `(name, opts)` overload
+ * or raise.
+ *
+ * Detection rules (duck typing — order matters, most specific first):
+ *
+ *   - OpenAI tool def: `{ type: 'function', function: { name, ... } }`
+ *   - Anthropic tool def: `{ name, input_schema }` (no `function` key)
+ *   - LangChain BaseTool: has `.name` plus either `.schema` (zod) or
+ *     `.args_schema` (legacy)
+ *   - Vercel AI SDK: has `.parameters` plus `.execute`/`.description`
+ *     (handled via the LangChain branch since `.name` is keyed
+ *     externally for Vercel; if `.name` is missing, returns `null`)
+ */
+export declare function extractToolDescriptor(value: unknown): ExtractedDescriptor | null;
+/**
+ * Inspect a {@link ProxyResponse} and throw
+ * {@link ClampdUnregisteredToolError} if the gateway denied the call
+ * specifically because the tool descriptor is missing or unclassified.
+ *
+ * No-op for any other denial reason — the caller is expected to throw
+ * its own {@link ClampdBlockedError} downstream.
+ *
+ * Detection is string-prefix on `denial_reason`:
+ *
+ *   - `tool_not_registered:<name>` — descriptor missing entirely
+ *   - `tool_not_classified:<name>` — descriptor exists but rejected
+ *     classification at registration time
+ *
+ * Mirrors the prefix scheme used by the Python SDK's
+ * `_raise_if_unregistered`.
+ */
+export declare function raiseIfUnregistered(toolName: string, resp: ProxyResponse | undefined): void;
+/**
+ * Maps `toolName -> contractHash` for every successful
+ * `registerTool()` call in this process. The OpenAI / Anthropic /
+ * LangChain wrappers prefer this cached hash over computing one on
+ * the fly — that way the hash sent to the gateway exactly matches
+ * the hash that was registered, even when the wrapper has incomplete
+ * information about the tool's parameter schema (e.g. LangChain
+ * callbacks don't surface the pydantic schema through `serialized`).
+ *
+ * Mirrors `clampd._framework_adapters._registered_descriptors` in the
+ * Python SDK.
+ */
+export declare const _registeredDescriptors: Map<string, string>;
+//# sourceMappingURL=_frameworkAdapters.d.ts.map

package/dist/_frameworkAdapters.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"_frameworkAdapters.d.ts","sourceRoot":"","sources":["../src/_frameworkAdapters.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAKjD;;;;;;;;GAQG;AACH,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;CACrB;AA0CD;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,mBAAmB,GAAG,IAAI,CAgDhF;AAID;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,aAAa,GAAG,SAAS,GAC9B,IAAI,CAUN;AAID;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,sBAAsB,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAa,CAAC"}

package/dist/_frameworkAdapters.js

@@ -0,0 +1,177 @@
+/**
+ * Framework tool-object adapters and the unregistered-tool detector.
+ *
+ * Mirrors `clampd._framework_adapters` in the Python SDK. Two
+ * unrelated-but-thin concerns live here so we don't multiply tiny
+ * helper modules:
+ *
+ *   1. {@link extractToolDescriptor} — duck-type a LangChain
+ *      `BaseTool` / OpenAI tool def / Anthropic tool def into a
+ *      plain `{ name, description, paramSchema }` triple. Used by
+ *      the `registerTool(toolObject, opts)` overload so callers can
+ *      pass their existing framework tool object instead of
+ *      restating its name / description / schema.
+ *
+ *   2. {@link raiseIfUnregistered} — convert the gateway's
+ *      `denial_reason` strings starting with `tool_not_registered:`
+ *      or `tool_not_classified:` into a typed
+ *      {@link ClampdUnregisteredToolError}. Centralised here so
+ *      every wrapper that calls `client.proxy()` can short-circuit
+ *      with the same exception, ahead of throwing the more general
+ *      {@link ClampdBlockedError}.
+ *
+ * Pure TypeScript — no framework imports. Every shape check is duck
+ * typing so loading the SDK does not require LangChain / OpenAI /
+ * Anthropic SDKs to be installed.
+ */
+import { ClampdUnregisteredToolError } from "./errors.js";
+import { createRequire } from "node:module";
+const _moduleRequire = createRequire(import.meta.url);
+/**
+ * Best-effort conversion of a zod schema to a JSON Schema dict.
+ *
+ * zod 4 ships `z.toJSONSchema()`; we resolve it lazily because the SDK
+ * lists zod as an optional peer dep. Returns `{}` if anything fails so
+ * the caller still gets a stable (if less informative) descriptor.
+ *
+ * Sync resolution via `createRequire` is deliberate: `extractToolDescriptor`
+ * runs inside `registerTool()` which is already async, but the rest of the
+ * SDK (notably the LangChain callback fast-path) treats descriptor
+ * extraction as a synchronous step. Dynamic `import()` would force every
+ * caller to await, which would ripple through the whole adapter surface
+ * for no real benefit — `node:module.createRequire` gives us the same
+ * lazy-load semantics with a sync return.
+ */
+function zodToJsonSchema(schema) {
+    if (!schema || typeof schema !== "object")
+        return {};
+    // Heuristic: zod schemas have `_def` and `parse`.
+    const maybeZod = schema;
+    if (!maybeZod._def || typeof maybeZod.parse !== "function")
+        return {};
+    try {
+        const zodMod = _moduleRequire("zod");
+        const z = zodMod.z;
+        if (z?.toJSONSchema) {
+            const out = z.toJSONSchema(schema);
+            if (out && typeof out === "object")
+                return out;
+        }
+    }
+    catch {
+        // Either zod isn't installed or it's an older version without
+        // toJSONSchema — fall through to {}.
+    }
+    return {};
+}
+/**
+ * Detect and extract `{ name, description, paramSchema }` from a
+ * LangChain `BaseTool`, OpenAI tool def, Anthropic tool def, or
+ * Vercel AI SDK tool def.
+ *
+ * Returns `null` when the value doesn't look like any known tool
+ * shape — caller should fall through to the `(name, opts)` overload
+ * or raise.
+ *
+ * Detection rules (duck typing — order matters, most specific first):
+ *
+ *   - OpenAI tool def: `{ type: 'function', function: { name, ... } }`
+ *   - Anthropic tool def: `{ name, input_schema }` (no `function` key)
+ *   - LangChain BaseTool: has `.name` plus either `.schema` (zod) or
+ *     `.args_schema` (legacy)
+ *   - Vercel AI SDK: has `.parameters` plus `.execute`/`.description`
+ *     (handled via the LangChain branch since `.name` is keyed
+ *     externally for Vercel; if `.name` is missing, returns `null`)
+ */
+export function extractToolDescriptor(value) {
+    if (!value || typeof value !== "object")
+        return null;
+    const v = value;
+    // OpenAI: { type: 'function', function: { name, description, parameters } }
+    if (v.type === "function" && v.function && typeof v.function === "object") {
+        const fn = v.function;
+        if (typeof fn.name === "string") {
+            return {
+                name: fn.name,
+                description: typeof fn.description === "string" ? fn.description : "",
+                paramSchema: fn.parameters ?? {},
+            };
+        }
+    }
+    // Anthropic: { name, description, input_schema }
+    if (typeof v.name === "string" && v.input_schema && typeof v.input_schema === "object") {
+        return {
+            name: v.name,
+            description: typeof v.description === "string" ? v.description : "",
+            paramSchema: v.input_schema,
+        };
+    }
+    // LangChain BaseTool: .name + (.schema (zod) | .args_schema (legacy))
+    if (typeof v.name === "string" && (v.schema !== undefined || v.args_schema !== undefined)) {
+        const schema = v.schema ?? v.args_schema;
+        let paramSchema;
+        if (schema && typeof schema === "object") {
+            // zod schema?
+            const maybeZod = schema;
+            if (maybeZod._def && typeof maybeZod.parse === "function") {
+                paramSchema = zodToJsonSchema(schema);
+            }
+            else {
+                paramSchema = schema;
+            }
+        }
+        else {
+            paramSchema = {};
+        }
+        return {
+            name: v.name,
+            description: typeof v.description === "string" ? v.description : "",
+            paramSchema,
+        };
+    }
+    return null;
+}
+// ── Unregistered-tool detection ─────────────────────────────────────
+/**
+ * Inspect a {@link ProxyResponse} and throw
+ * {@link ClampdUnregisteredToolError} if the gateway denied the call
+ * specifically because the tool descriptor is missing or unclassified.
+ *
+ * No-op for any other denial reason — the caller is expected to throw
+ * its own {@link ClampdBlockedError} downstream.
+ *
+ * Detection is string-prefix on `denial_reason`:
+ *
+ *   - `tool_not_registered:<name>` — descriptor missing entirely
+ *   - `tool_not_classified:<name>` — descriptor exists but rejected
+ *     classification at registration time
+ *
+ * Mirrors the prefix scheme used by the Python SDK's
+ * `_raise_if_unregistered`.
+ */
+export function raiseIfUnregistered(toolName, resp) {
+    if (!resp || resp.allowed)
+        return;
+    const reason = resp.denial_reason;
+    if (typeof reason !== "string")
+        return;
+    if (reason.startsWith("tool_not_registered:") ||
+        reason.startsWith("tool_not_classified:")) {
+        throw new ClampdUnregisteredToolError(toolName);
+    }
+}
+// ── Process-local descriptor cache ──────────────────────────────────
+/**
+ * Maps `toolName -> contractHash` for every successful
+ * `registerTool()` call in this process. The OpenAI / Anthropic /
+ * LangChain wrappers prefer this cached hash over computing one on
+ * the fly — that way the hash sent to the gateway exactly matches
+ * the hash that was registered, even when the wrapper has incomplete
+ * information about the tool's parameter schema (e.g. LangChain
+ * callbacks don't surface the pydantic schema through `serialized`).
+ *
+ * Mirrors `clampd._framework_adapters._registered_descriptors` in the
+ * Python SDK.
+ */
+export const _registeredDescriptors = new Map();
+//# sourceMappingURL=_frameworkAdapters.js.map

package/dist/_frameworkAdapters.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_frameworkAdapters.js","sourceRoot":"","sources":["../src/_frameworkAdapters.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAGH,OAAO,EAAE,2BAA2B,EAAE,MAAM,aAAa,CAAC;AAmB1D,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5C,MAAM,cAAc,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAEtD;;;;;;;;;;;;;;GAcG;AACH,SAAS,eAAe,CAAC,MAAe;IACtC,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IACrD,kDAAkD;IAClD,MAAM,QAAQ,GAAG,MAA6C,CAAC;IAC/D,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,OAAO,QAAQ,CAAC,KAAK,KAAK,UAAU;QAAE,OAAO,EAAE,CAAC;IACtE,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAElC,CAAC;QACF,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC;QACnB,IAAI,CAAC,EAAE,YAAY,EAAE,CAAC;YACpB,MAAM,GAAG,GAAG,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;YACnC,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;gBAAE,OAAO,GAAa,CAAC;QAC3D,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,8DAA8D;QAC9D,qCAAqC;IACvC,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAc;IAClD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACrD,MAAM,CAAC,GAAG,KAAgC,CAAC;IAE3C,4EAA4E;IAC5E,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,CAAC,QAAQ,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1E,MAAM,EAAE,GAAG,CAAC,CAAC,QAAmC,CAAC;QACjD,IAAI,OAAO,EAAE,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAChC,OAAO;gBACL,IAAI,EAAE,EAAE,CAAC,IAAI;gBACb,WAAW,EAAE,OAAO,EAAE,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE;gBACrE,WAAW,EAAG,EAAE,CAAC,UAAiC,IAAI,EAAE;aACzD,CAAC;QACJ,CAAC;IACH,CAAC;IAED,iDAAiD;IACjD,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,YAAY,IAAI,OAAO,CAAC,CAAC,YAAY,KAAK,QAAQ,EAAE,CAAC;QACvF,OAAO;YACL,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,WAAW,EAAE,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE;YACnE,WAAW,EAAE,CAAC,CAAC,YAAsB;SACtC,CAAC;IACJ,CAAC;IAED,sEAAsE;IACtE,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,CAAC,WAAW,KAAK,SAAS,CAAC,EAAE,CAAC;QAC1F,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,WAAW,CAAC;QACzC,IAAI,WAAmB,CAAC;QACxB,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YACzC,cAAc;YACd,MAAM,QAAQ,GAAG,MAA6C,CAAC;YAC/D,IAAI,QAAQ,CAAC,IAAI,IAAI,OAAO,QAAQ,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;gBAC1D,WAAW,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;YACxC,CAAC;iBAAM,CAAC;gBACN,WAAW,GAAG,MAAgB,CAAC;YACjC,CAAC;QACH,CAAC;aAAM,CAAC;YACN,WAAW,GAAG,EAAE,CAAC;QACnB,CAAC;QACD,OAAO;YACL,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,WAAW,EAAE,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE;YACnE,WAAW;SACZ,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,uEAAuE;AAEvE;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,mBAAmB,CACjC,QAAgB,EAChB,IAA+B;IAE/B,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO;QAAE,OAAO;IAClC,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC;IAClC,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO;IACvC,IACE,MAAM,CAAC,UAAU,CAAC,sBAAsB,CAAC;QACzC,MAAM,CAAC,UAAU,CAAC,sBAAsB,CAAC,EACzC,CAAC;QACD,MAAM,IAAI,2BAA2B,CAAC,QAAQ,CAAC,CAAC;IAClD,CAAC;AACH,CAAC;AAED,uEAAuE;AAEvE;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAwB,IAAI,GAAG,EAAE,CAAC"}

package/dist/errors.d.ts

@@ -26,4 +26,27 @@ export declare class ClampdClassificationError extends Error {
     readonly operation: string;
     constructor(category: string, subcategory: string, operation: string);
 }
+/**
+ * Thrown when a tool call is denied because the gateway has no descriptor
+ * registered for that tool name (or the descriptor failed classification
+ * and was rejected at registration time).
+ *
+ * Distinct from {@link import("./interceptor.js").ClampdBlockedError}
+ * (which signals a policy / risk / scope decision against a *known*
+ * tool) — this error means the tool is unknown to Clampd and the fix
+ * is to register it at module load time, not to relax a policy.
+ *
+ * The SDK raises this when the gateway returns
+ * `denial_reason` starting with `"tool_not_registered:"` or
+ * `"tool_not_classified:"`. Mirrors
+ * `clampd._errors.ClampdUnregisteredToolError` in the Python SDK so
+ * cross-language docs / examples stay in lockstep.
+ */
+export declare class ClampdUnregisteredToolError extends Error {
+    readonly toolName: string;
+    readonly hint: string;
+    constructor(toolName: string, opts?: {
+        hint?: string;
+    });
+}
 //# sourceMappingURL=errors.d.ts.map

package/dist/errors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH;;;;;;;;;;;GAWG;AACH,qBAAa,yBAA0B,SAAQ,KAAK;IAClD,SAAgB,QAAQ,EAAE,MAAM,CAAC;IACjC,SAAgB,WAAW,EAAE,MAAM,CAAC;IACpC,SAAgB,SAAS,EAAE,MAAM,CAAC;gBAEtB,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM;CAYrE"}
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH;;;;;;;;;;;GAWG;AACH,qBAAa,yBAA0B,SAAQ,KAAK;IAClD,SAAgB,QAAQ,EAAE,MAAM,CAAC;IACjC,SAAgB,WAAW,EAAE,MAAM,CAAC;IACpC,SAAgB,SAAS,EAAE,MAAM,CAAC;gBAEtB,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM;CAYrE;AAED;;;;;;;;;;;;;;;GAeG;AACH,qBAAa,2BAA4B,SAAQ,KAAK;IACpD,SAAgB,QAAQ,EAAE,MAAM,CAAC;IACjC,SAAgB,IAAI,EAAE,MAAM,CAAC;gBAEjB,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE;CASvD"}

package/dist/errors.js

@@ -35,4 +35,32 @@ export class ClampdClassificationError extends Error {
         this.operation = operation;
     }
 }
+/**
+ * Thrown when a tool call is denied because the gateway has no descriptor
+ * registered for that tool name (or the descriptor failed classification
+ * and was rejected at registration time).
+ *
+ * Distinct from {@link import("./interceptor.js").ClampdBlockedError}
+ * (which signals a policy / risk / scope decision against a *known*
+ * tool) — this error means the tool is unknown to Clampd and the fix
+ * is to register it at module load time, not to relax a policy.
+ *
+ * The SDK raises this when the gateway returns
+ * `denial_reason` starting with `"tool_not_registered:"` or
+ * `"tool_not_classified:"`. Mirrors
+ * `clampd._errors.ClampdUnregisteredToolError` in the Python SDK so
+ * cross-language docs / examples stay in lockstep.
+ */
+export class ClampdUnregisteredToolError extends Error {
+    toolName;
+    hint;
+    constructor(toolName, opts) {
+        const hint = opts?.hint ??
+            `Call clampd.registerTool('${toolName}', { category, subcategory, operation }) at module load time.`;
+        super(`Tool '${toolName}' is not registered with Clampd. ${hint}`);
+        this.name = "ClampdUnregisteredToolError";
+        this.toolName = toolName;
+        this.hint = hint;
+    }
+}
 //# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -1 +1 @@
-{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,yBAA0B,SAAQ,KAAK;IAClC,QAAQ,CAAS;IACjB,WAAW,CAAS;IACpB,SAAS,CAAS;IAElC,YAAY,QAAgB,EAAE,WAAmB,EAAE,SAAiB;QAClE,KAAK,CACH,6CAA6C,QAAQ,oBAAoB,WAAW,kBAAkB,SAAS,MAAM;YACnH,kCAAkC;YAClC,yEAAyE;YACzE,yFAAyF,CAC5F,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAC;QACxC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC7B,CAAC;CACF"}
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,yBAA0B,SAAQ,KAAK;IAClC,QAAQ,CAAS;IACjB,WAAW,CAAS;IACpB,SAAS,CAAS;IAElC,YAAY,QAAgB,EAAE,WAAmB,EAAE,SAAiB;QAClE,KAAK,CACH,6CAA6C,QAAQ,oBAAoB,WAAW,kBAAkB,SAAS,MAAM;YACnH,kCAAkC;YAClC,yEAAyE;YACzE,yFAAyF,CAC5F,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAC;QACxC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC7B,CAAC;CACF;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,OAAO,2BAA4B,SAAQ,KAAK;IACpC,QAAQ,CAAS;IACjB,IAAI,CAAS;IAE7B,YAAY,QAAgB,EAAE,IAAwB;QACpD,MAAM,IAAI,GACR,IAAI,EAAE,IAAI;YACV,6BAA6B,QAAQ,+DAA+D,CAAC;QACvG,KAAK,CAAC,SAAS,QAAQ,oCAAoC,IAAI,EAAE,CAAC,CAAC;QACnE,IAAI,CAAC,IAAI,GAAG,6BAA6B,CAAC;QAC1C,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF"}

package/dist/generated/taxonomy-data.d.ts

@@ -1,5 +1,9 @@
 export interface SubcategorySpec {
     readonly operations: readonly string[];
+    /** Subset of `operations` that mean external-egress (data leaving the org boundary). */
+    readonly egress: readonly string[];
+    /** Subset of `operations` that ALWAYS produce sensitive data. Sets sticky session-level taint flag. */
+    readonly sensitive_source: readonly string[];
 }
 export interface CategorySpec {
     readonly description: string;

package/dist/generated/taxonomy-data.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"taxonomy-data.d.ts","sourceRoot":"","sources":["../../src/generated/taxonomy-data.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;CACxC;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;CACzD;AAED,eAAO,MAAM,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAiGjD,CAAC"}
+{"version":3,"file":"taxonomy-data.d.ts","sourceRoot":"","sources":["../../src/generated/taxonomy-data.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,wFAAwF;IACxF,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,uGAAuG;IACvG,QAAQ,CAAC,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;CAC9C;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;CACzD;AAED,eAAO,MAAM,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAiGjD,CAAC"}

package/dist/generated/taxonomy-data.js

@@ -7,97 +7,97 @@ export const TAXONOMY = {
     agent: {
         description: "Agent delegation, A2A handoff, spawn",
         subcategories: {
-            a2a: { operations: ["read", "write"] },
-            config: { operations: ["read", "write"] },
-            delegate: { operations: ["write"] },
-            spawn: { operations: ["write"] },
+            a2a: { operations: ["read", "write"], egress: [], sensitive_source: [] },
+            config: { operations: ["read", "write"], egress: [], sensitive_source: [] },
+            delegate: { operations: ["write"], egress: [], sensitive_source: [] },
+            spawn: { operations: ["write"], egress: [], sensitive_source: [] },
         },
     },
     auth: {
         description: "Secrets, credentials, tokens, OAuth flows",
         subcategories: {
-            credential: { operations: ["read", "write", "delete"] },
-            oauth: { operations: ["read", "write"] },
-            secret: { operations: ["read", "write", "delete"] },
-            token: { operations: ["read", "write", "delete", "refresh"] },
+            credential: { operations: ["read", "write", "delete"], egress: [], sensitive_source: ["read"] },
+            oauth: { operations: ["read", "write"], egress: [], sensitive_source: ["read"] },
+            secret: { operations: ["read", "write", "delete"], egress: [], sensitive_source: ["read"] },
+            token: { operations: ["read", "write", "delete", "refresh"], egress: [], sensitive_source: ["read"] },
         },
     },
     browser: {
         description: "Browser automation, page navigation, scraping",
         subcategories: {
-            page: { operations: ["read", "write"] },
-            screenshot: { operations: ["read"] },
+            page: { operations: ["read", "write"], egress: [], sensitive_source: [] },
+            screenshot: { operations: ["read"], egress: [], sensitive_source: [] },
         },
     },
     cloud: {
         description: "Cloud infra, deploys, IAM, object storage",
         subcategories: {
-            deploy: { operations: ["read", "write", "destructive"] },
-            iam: { operations: ["read", "write", "delete"] },
-            infra: { operations: ["read", "write", "destructive"] },
+            deploy: { operations: ["read", "write", "destructive"], egress: [], sensitive_source: [] },
+            iam: { operations: ["read", "write", "delete"], egress: [], sensitive_source: ["read"] },
+            infra: { operations: ["read", "write", "destructive"], egress: [], sensitive_source: [] },
         },
     },
     comms: {
         description: "Email, chat, SMS, notifications — anything agent says to humans or other systems",
         subcategories: {
-            email: { operations: ["read", "send", "delete"] },
-            messaging: { operations: ["read", "send", "delete"] },
-            notification: { operations: ["send"] },
-            slack: { operations: ["read", "send", "delete"] },
-            sms: { operations: ["read", "send"] },
+            email: { operations: ["read", "send", "delete"], egress: ["send"], sensitive_source: [] },
+            messaging: { operations: ["read", "send", "delete"], egress: ["send"], sensitive_source: [] },
+            notification: { operations: ["send"], egress: ["send"], sensitive_source: [] },
+            slack: { operations: ["read", "send", "delete"], egress: ["send"], sensitive_source: [] },
+            sms: { operations: ["read", "send"], egress: ["send"], sensitive_source: [] },
         },
     },
     db: {
         description: "Database queries, mutations, schema operations",
         subcategories: {
-            mutate: { operations: ["write", "delete", "destructive"] },
-            query: { operations: ["read"] },
-            schema: { operations: ["read", "destructive"] },
+            mutate: { operations: ["write", "delete", "destructive"], egress: [], sensitive_source: [] },
+            query: { operations: ["read"], egress: [], sensitive_source: [] },
+            schema: { operations: ["read", "destructive"], egress: [], sensitive_source: ["read"] },
         },
     },
     exec: {
         description: "Shell commands, code evaluation, function invocation",
         subcategories: {
-            code: { operations: ["run"] },
-            function: { operations: ["run"] },
-            shell: { operations: ["run", "destructive"] },
+            code: { operations: ["run"], egress: [], sensitive_source: [] },
+            function: { operations: ["run"], egress: [], sensitive_source: [] },
+            shell: { operations: ["run", "destructive"], egress: [], sensitive_source: [] },
         },
     },
     fs: {
         description: "Filesystem, blob / object storage",
         subcategories: {
-            blob: { operations: ["read", "write", "delete"] },
-            file: { operations: ["read", "write", "delete"] },
+            blob: { operations: ["read", "write", "delete"], egress: ["write"], sensitive_source: [] },
+            file: { operations: ["read", "write", "delete"], egress: [], sensitive_source: [] },
         },
     },
     llm: {
         description: "LLM prompt / completion, embeddings",
         subcategories: {
-            embedding: { operations: ["read", "write"] },
-            input: { operations: ["write"] },
-            output: { operations: ["read"] },
+            embedding: { operations: ["read", "write"], egress: [], sensitive_source: [] },
+            input: { operations: ["write"], egress: [], sensitive_source: [] },
+            output: { operations: ["read"], egress: [], sensitive_source: [] },
         },
     },
     net: {
         description: "HTTP, webhooks, raw-socket, DNS",
         subcategories: {
-            dns: { operations: ["read"] },
-            http: { operations: ["read", "write"] },
-            socket: { operations: ["read", "write"] },
+            dns: { operations: ["read"], egress: [], sensitive_source: [] },
+            http: { operations: ["read", "write"], egress: ["write"], sensitive_source: [] },
+            socket: { operations: ["read", "write"], egress: ["write"], sensitive_source: [] },
         },
     },
     payment: {
         description: "Payments, billing, refunds, financial transactions",
         subcategories: {
-            billing: { operations: ["read", "write"] },
-            invoice: { operations: ["read", "write"] },
-            transaction: { operations: ["read", "write", "destructive"] },
+            billing: { operations: ["read", "write"], egress: [], sensitive_source: [] },
+            invoice: { operations: ["read", "write"], egress: [], sensitive_source: [] },
+            transaction: { operations: ["read", "write", "destructive"], egress: [], sensitive_source: [] },
         },
     },
     scm: {
         description: "Git / VCS — push, commit, branch management",
         subcategories: {
-            git: { operations: ["read", "write", "delete"] },
+            git: { operations: ["read", "write", "delete"], egress: [], sensitive_source: [] },
         },
     },
 };

package/dist/generated/taxonomy-data.js.map

@@ -1 +1 @@
-{"version":3,"file":"taxonomy-data.js","sourceRoot":"","sources":["../../src/generated/taxonomy-data.ts"],"names":[],"mappings":"AAAA,oEAAoE;AACpE,sEAAsE;AACtE,mEAAmE;AACnE,wEAAwE;AACxE,oCAAoC;AAWpC,MAAM,CAAC,MAAM,QAAQ,GAAiC;IACpD,KAAK,EAAE;QACL,WAAW,EAAE,sCAAsC;QACnD,aAAa,EAAE;YACb,GAAG,EAAE,EAAE,UAAU,EAAE,CAAC,MAAM,EAAE,OAAO,CAAU,EAAE;YAC/C,MAAM,EAAE,EAAE,UAAU,EAAE,CAAC,MAAM,EAAE,OAAO,CAAU,EAAE;YAClD,QAAQ,EAAE,EAAE,UAAU,EAAE,CAAC,OAAO,CAAU,EAAE;YAC5C,KAAK,EAAE,EAAE,UAAU,EAAE,CAAC,OAAO,CAAU,EAAE;SAC1C;KACF;IACD,IAAI,EAAE;QACJ,WAAW,EAAE,2CAA2C;QACxD,aAAa,EAAE;YACb,UAAU,EAAE,EAAE,UAAU,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAU,EAAE;YAChE,KAAK,EAAE,EAAE,UAAU,EAAE,CAAC,MAAM,EAAE,OAAO,CAAU,EAAE;YACjD,MAAM,EAAE,EAAE,UAAU,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAU,EAAE;YAC5D,KAAK,EAAE,EAAE,UAAU,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,CAAU,EAAE;SACvE;KACF;IACD,OAAO,EAAE;QACP,WAAW,EAAE,+CAA+C;QAC5D,aAAa,EAAE;YACb,IAAI,EAAE,EAAE,UAAU,EAAE,CAAC,MAAM,EAAE,OAAO,CAAU,EAAE;YAChD,UAAU,EAAE,EAAE,UAAU,EAAE,CAAC,MAAM,CAAU,EAAE;SAC9C;KACF;IACD,KAAK,EAAE;QACL,WAAW,EAAE,2CAA2C;QACxD,aAAa,EAAE;YACb,MAAM,EAAE,EAAE,UAAU,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,aAAa,CAAU,EAAE;YACjE,GAAG,EAAE,EAAE,UAAU,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAU,EAAE;YACzD,KAAK,EAAE,EAAE,UAAU,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,aAAa,CAAU,EAAE;SACjE;KACF;IACD,KAAK,EAAE;QACL,WAAW,EAAE,kFAAkF;QAC/F,aAAa,EAAE;YACb,KAAK,EAAE,EAAE,UAAU,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAU,EAAE;YAC1D,SAAS,EAAE,EAAE,UAAU,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAU,EAAE;YAC9D,YAAY,EAAE,EAAE,UAAU,EAAE,CAAC,MAAM,CAAU,EAAE;YAC/C,KAAK,EAAE,EAAE,UAAU,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAU,EAAE;YAC1D,GAAG,EAAE,EAAE,UAAU,EAAE,CAAC,MAAM,EAAE,MAAM,CAAU,EAAE;SAC/C;KACF;IACD,EAAE,EAAE;QACF,WAAW,EAAE,gDAAgD;QAC7D,aAAa,EAAE;YACb,MAAM,EAAE,EAAE,UAAU,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,aAAa,CAAU,EAAE;YACnE,KAAK,EAAE,EAAE,UAAU,EAAE,CAAC,MAAM,CAAU,EAAE;YACxC,MAAM,EAAE,EAAE,UAAU,EAAE,CAAC,MAAM,EAAE,aAAa,CAAU,EAAE;SACzD;KACF;IACD,IAAI,EAAE;QACJ,WAAW,EAAE,sDAAsD;QACnE,aAAa,EAAE;YACb,IAAI,EAAE,EAAE,UAAU,EAAE,CAAC,KAAK,CAAU,EAAE;YACtC,QAAQ,EAAE,EAAE,UAAU,EAAE,CAAC,KAAK,CAAU,EAAE;YAC1C,KAAK,EAAE,EAAE,UAAU,EAAE,CAAC,KAAK,EAAE,aAAa,CAAU,EAAE;SACvD;KACF;IACD,EAAE,EAAE;QACF,WAAW,EAAE,mCAAmC;QAChD,aAAa,EAAE;YACb,IAAI,EAAE,EAAE,UAAU,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAU,EAAE;YAC1D,IAAI,EAAE,EAAE,UAAU,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAU,EAAE;SAC3D;KACF;IACD,GAAG,EAAE;QACH,WAAW,EAAE,qCAAqC;QAClD,aAAa,EAAE;YACb,SAAS,EAAE,EAAE,UAAU,EAAE,CAAC,MAAM,EAAE,OAAO,CAAU,EAAE;YACrD,KAAK,EAAE,EAAE,UAAU,EAAE,CAAC,OAAO,CAAU,EAAE;YACzC,MAAM,EAAE,EAAE,UAAU,EAAE,CAAC,MAAM,CAAU,EAAE;SAC1C;KACF;IACD,GAAG,EAAE;QACH,WAAW,EAAE,iCAAiC;QAC9C,aAAa,EAAE;YACb,GAAG,EAAE,EAAE,UAAU,EAAE,CAAC,MAAM,CAAU,EAAE;YACtC,IAAI,EAAE,EAAE,UAAU,EAAE,CAAC,MAAM,EAAE,OAAO,CAAU,EAAE;YAChD,MAAM,EAAE,EAAE,UAAU,EAAE,CAAC,MAAM,EAAE,OAAO,CAAU,EAAE;SACnD;KACF;IACD,OAAO,EAAE;QACP,WAAW,EAAE,oDAAoD;QACjE,aAAa,EAAE;YACb,OAAO,EAAE,EAAE,UAAU,EAAE,CAAC,MAAM,EAAE,OAAO,CAAU,EAAE;YACnD,OAAO,EAAE,EAAE,UAAU,EAAE,CAAC,MAAM,EAAE,OAAO,CAAU,EAAE;YACnD,WAAW,EAAE,EAAE,UAAU,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,aAAa,CAAU,EAAE;SACvE;KACF;IACD,GAAG,EAAE;QACH,WAAW,EAAE,6CAA6C;QAC1D,aAAa,EAAE;YACb,GAAG,EAAE,EAAE,UAAU,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAU,EAAE;SAC1D;KACF;CACF,CAAC"}
+{"version":3,"file":"taxonomy-data.js","sourceRoot":"","sources":["../../src/generated/taxonomy-data.ts"],"names":[],"mappings":"AAAA,oEAAoE;AACpE,sEAAsE;AACtE,mEAAmE;AACnE,wEAAwE;AACxE,oCAAoC;AAepC,MAAM,CAAC,MAAM,QAAQ,GAAiC;IACpD,KAAK,EAAE;QACL,WAAW,EAAE,sCAAsC;QACnD,aAAa,EAAE;YACb,GAAG,EAAE,EAAE,UAAU,EAAE,CAAC,MAAM,EAAE,OAAO,CAAU,EAAE,MAAM,EAAE,EAAW,EAAE,gBAAgB,EAAE,EAAW,EAAE;YACnG,MAAM,EAAE,EAAE,UAAU,EAAE,CAAC,MAAM,EAAE,OAAO,CAAU,EAAE,MAAM,EAAE,EAAW,EAAE,gBAAgB,EAAE,EAAW,EAAE;YACtG,QAAQ,EAAE,EAAE,UAAU,EAAE,CAAC,OAAO,CAAU,EAAE,MAAM,EAAE,EAAW,EAAE,gBAAgB,EAAE,EAAW,EAAE;YAChG,KAAK,EAAE,EAAE,UAAU,EAAE,CAAC,OAAO,CAAU,EAAE,MAAM,EAAE,EAAW,EAAE,gBAAgB,EAAE,EAAW,EAAE;SAC9F;KACF;IACD,IAAI,EAAE;QACJ,WAAW,EAAE,2CAA2C;QACxD,aAAa,EAAE;YACb,UAAU,EAAE,EAAE,UAAU,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAU,EAAE,MAAM,EAAE,EAAW,EAAE,gBAAgB,EAAE,CAAC,MAAM,CAAU,EAAE;YAC1H,KAAK,EAAE,EAAE,UAAU,EAAE,CAAC,MAAM,EAAE,OAAO,CAAU,EAAE,MAAM,EAAE,EAAW,EAAE,gBAAgB,EAAE,CAAC,MAAM,CAAU,EAAE;YAC3G,MAAM,EAAE,EAAE,UAAU,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAU,EAAE,MAAM,EAAE,EAAW,EAAE,gBAAgB,EAAE,CAAC,MAAM,CAAU,EAAE;YACtH,KAAK,EAAE,EAAE,UAAU,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,CAAU,EAAE,MAAM,EAAE,EAAW,EAAE,gBAAgB,EAAE,CAAC,MAAM,CAAU,EAAE;SACjI;KACF;IACD,OAAO,EAAE;QACP,WAAW,EAAE,+CAA+C;QAC5D,aAAa,EAAE;YACb,IAAI,EAAE,EAAE,UAAU,EAAE,CAAC,MAAM,EAAE,OAAO,CAAU,EAAE,MAAM,EAAE,EAAW,EAAE,gBAAgB,EAAE,EAAW,EAAE;YACpG,UAAU,EAAE,EAAE,UAAU,EAAE,CAAC,MAAM,CAAU,EAAE,MAAM,EAAE,EAAW,EAAE,gBAAgB,EAAE,EAAW,EAAE;SAClG;KACF;IACD,KAAK,EAAE;QACL,WAAW,EAAE,2CAA2C;QACxD,aAAa,EAAE;YACb,MAAM,EAAE,EAAE,UAAU,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,aAAa,CAAU,EAAE,MAAM,EAAE,EAAW,EAAE,gBAAgB,EAAE,EAAW,EAAE;YACrH,GAAG,EAAE,EAAE,UAAU,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAU,EAAE,MAAM,EAAE,EAAW,EAAE,gBAAgB,EAAE,CAAC,MAAM,CAAU,EAAE;YACnH,KAAK,EAAE,EAAE,UAAU,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,aAAa,CAAU,EAAE,MAAM,EAAE,EAAW,EAAE,gBAAgB,EAAE,EAAW,EAAE;SACrH;KACF;IACD,KAAK,EAAE;QACL,WAAW,EAAE,kFAAkF;QAC/F,aAAa,EAAE;YACb,KAAK,EAAE,EAAE,UAAU,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAU,EAAE,MAAM,EAAE,CAAC,MAAM,CAAU,EAAE,gBAAgB,EAAE,EAAW,EAAE;YACpH,SAAS,EAAE,EAAE,UAAU,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAU,EAAE,MAAM,EAAE,CAAC,MAAM,CAAU,EAAE,gBAAgB,EAAE,EAAW,EAAE;YACxH,YAAY,EAAE,EAAE,UAAU,EAAE,CAAC,MAAM,CAAU,EAAE,MAAM,EAAE,CAAC,MAAM,CAAU,EAAE,gBAAgB,EAAE,EAAW,EAAE;YACzG,KAAK,EAAE,EAAE,UAAU,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAU,EAAE,MAAM,EAAE,CAAC,MAAM,CAAU,EAAE,gBAAgB,EAAE,EAAW,EAAE;YACpH,GAAG,EAAE,EAAE,UAAU,EAAE,CAAC,MAAM,EAAE,MAAM,CAAU,EAAE,MAAM,EAAE,CAAC,MAAM,CAAU,EAAE,gBAAgB,EAAE,EAAW,EAAE;SACzG;KACF;IACD,EAAE,EAAE;QACF,WAAW,EAAE,gDAAgD;QAC7D,aAAa,EAAE;YACb,MAAM,EAAE,EAAE,UAAU,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,aAAa,CAAU,EAAE,MAAM,EAAE,EAAW,EAAE,gBAAgB,EAAE,EAAW,EAAE;YACvH,KAAK,EAAE,EAAE,UAAU,EAAE,CAAC,MAAM,CAAU,EAAE,MAAM,EAAE,EAAW,EAAE,gBAAgB,EAAE,EAAW,EAAE;YAC5F,MAAM,EAAE,EAAE,UAAU,EAAE,CAAC,MAAM,EAAE,aAAa,CAAU,EAAE,MAAM,EAAE,EAAW,EAAE,gBAAgB,EAAE,CAAC,MAAM,CAAU,EAAE;SACnH;KACF;IACD,IAAI,EAAE;QACJ,WAAW,EAAE,sDAAsD;QACnE,aAAa,EAAE;YACb,IAAI,EAAE,EAAE,UAAU,EAAE,CAAC,KAAK,CAAU,EAAE,MAAM,EAAE,EAAW,EAAE,gBAAgB,EAAE,EAAW,EAAE;YAC1F,QAAQ,EAAE,EAAE,UAAU,EAAE,CAAC,KAAK,CAAU,EAAE,MAAM,EAAE,EAAW,EAAE,gBAAgB,EAAE,EAAW,EAAE;YAC9F,KAAK,EAAE,EAAE,UAAU,EAAE,CAAC,KAAK,EAAE,aAAa,CAAU,EAAE,MAAM,EAAE,EAAW,EAAE,gBAAgB,EAAE,EAAW,EAAE;SAC3G;KACF;IACD,EAAE,EAAE;QACF,WAAW,EAAE,mCAAmC;QAChD,aAAa,EAAE;YACb,IAAI,EAAE,EAAE,UAAU,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAU,EAAE,MAAM,EAAE,CAAC,OAAO,CAAU,EAAE,gBAAgB,EAAE,EAAW,EAAE;YACrH,IAAI,EAAE,EAAE,UAAU,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAU,EAAE,MAAM,EAAE,EAAW,EAAE,gBAAgB,EAAE,EAAW,EAAE;SAC/G;KACF;IACD,GAAG,EAAE;QACH,WAAW,EAAE,qCAAqC;QAClD,aAAa,EAAE;YACb,SAAS,EAAE,EAAE,UAAU,EAAE,CAAC,MAAM,EAAE,OAAO,CAAU,EAAE,MAAM,EAAE,EAAW,EAAE,gBAAgB,EAAE,EAAW,EAAE;YACzG,KAAK,EAAE,EAAE,UAAU,EAAE,CAAC,OAAO,CAAU,EAAE,MAAM,EAAE,EAAW,EAAE,gBAAgB,EAAE,EAAW,EAAE;YAC7F,MAAM,EAAE,EAAE,UAAU,EAAE,CAAC,MAAM,CAAU,EAAE,MAAM,EAAE,EAAW,EAAE,gBAAgB,EAAE,EAAW,EAAE;SAC9F;KACF;IACD,GAAG,EAAE;QACH,WAAW,EAAE,iCAAiC;QAC9C,aAAa,EAAE;YACb,GAAG,EAAE,EAAE,UAAU,EAAE,CAAC,MAAM,CAAU,EAAE,MAAM,EAAE,EAAW,EAAE,gBAAgB,EAAE,EAAW,EAAE;YAC1F,IAAI,EAAE,EAAE,UAAU,EAAE,CAAC,MAAM,EAAE,OAAO,CAAU,EAAE,MAAM,EAAE,CAAC,OAAO,CAAU,EAAE,gBAAgB,EAAE,EAAW,EAAE;YAC3G,MAAM,EAAE,EAAE,UAAU,EAAE,CAAC,MAAM,EAAE,OAAO,CAAU,EAAE,MAAM,EAAE,CAAC,OAAO,CAAU,EAAE,gBAAgB,EAAE,EAAW,EAAE;SAC9G;KACF;IACD,OAAO,EAAE;QACP,WAAW,EAAE,oDAAoD;QACjE,aAAa,EAAE;YACb,OAAO,EAAE,EAAE,UAAU,EAAE,CAAC,MAAM,EAAE,OAAO,CAAU,EAAE,MAAM,EAAE,EAAW,EAAE,gBAAgB,EAAE,EAAW,EAAE;YACvG,OAAO,EAAE,EAAE,UAAU,EAAE,CAAC,MAAM,EAAE,OAAO,CAAU,EAAE,MAAM,EAAE,EAAW,EAAE,gBAAgB,EAAE,EAAW,EAAE;YACvG,WAAW,EAAE,EAAE,UAAU,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,aAAa,CAAU,EAAE,MAAM,EAAE,EAAW,EAAE,gBAAgB,EAAE,EAAW,EAAE;SAC3H;KACF;IACD,GAAG,EAAE;QACH,WAAW,EAAE,6CAA6C;QAC1D,aAAa,EAAE;YACb,GAAG,EAAE,EAAE,UAAU,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAU,EAAE,MAAM,EAAE,EAAW,EAAE,gBAAgB,EAAE,EAAW,EAAE;SAC9G;KACF;CACF,CAAC"}

package/dist/guardrails.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"guardrails.d.ts","sourceRoot":"","sources":["../src/guardrails.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,YAAY,EAAqB,MAAM,aAAa,CAAC;AAO9D,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAI/D;;;;;;;;;GASG;AACH,wBAAsB,eAAe,CACnC,MAAM,EAAE,YAAY,EACpB,IAAI,EAAE,MAAM,EACZ,YAAY,EAAE,OAAO,EACrB,SAAS,GAAE,MAAW,EACtB,QAAQ,GAAE,OAAe,EACzB,UAAU,GAAE,MAAW,GACtB,OAAO,CAAC,IAAI,CAAC,CAcf;AAID;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,IAAI,CAarF;AAID;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,GAAG,MAAM,EAAE,GAAG,SAAS,CAOxG;AAED;;;;;GAKG;AACH,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,GAAG,MAAM,EAAE,GAAG,SAAS,CAO3G;AAID;;GAEG;AACH,wBAAsB,eAAe,CACnC,MAAM,EAAE,YAAY,EACpB,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EACxC,QAAQ,EAAE,OAAO,GAChB,OAAO,CAAC,IAAI,CAAC,CA0Bf;AAED;;;GAGG;AACH,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,YAAY,EACpB,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EACxC,QAAQ,EAAE,OAAO,GAChB,OAAO,CAAC,IAAI,CAAC,CAmCf;AAID;;GAEG;AACH,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,YAAY,EACpB,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,OAAO,GAChB,OAAO,CAAC,IAAI,CAAC,CAmBf;AAID;;GAEG;AACH,wBAAsB,2BAA2B,CAC/C,MAAM,EAAE,YAAY,EACpB,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,OAAO,EACjB,eAAe,CAAC,EAAE,MAAM,EAAE,GACzB,OAAO,CAAC,IAAI,CAAC,CAwBf"}
+{"version":3,"file":"guardrails.d.ts","sourceRoot":"","sources":["../src/guardrails.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,YAAY,EAAqB,MAAM,aAAa,CAAC;AAQ9D,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAI/D;;;;;;;;;GASG;AACH,wBAAsB,eAAe,CACnC,MAAM,EAAE,YAAY,EACpB,IAAI,EAAE,MAAM,EACZ,YAAY,EAAE,OAAO,EACrB,SAAS,GAAE,MAAW,EACtB,QAAQ,GAAE,OAAe,EACzB,UAAU,GAAE,MAAW,GACtB,OAAO,CAAC,IAAI,CAAC,CAcf;AAID;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,IAAI,CAarF;AAID;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,GAAG,MAAM,EAAE,GAAG,SAAS,CAOxG;AAED;;;;;GAKG;AACH,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,GAAG,MAAM,EAAE,GAAG,SAAS,CAO3G;AAID;;GAEG;AACH,wBAAsB,eAAe,CACnC,MAAM,EAAE,YAAY,EACpB,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EACxC,QAAQ,EAAE,OAAO,GAChB,OAAO,CAAC,IAAI,CAAC,CA+Bf;AAED;;;GAGG;AACH,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,YAAY,EACpB,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EACxC,QAAQ,EAAE,OAAO,GAChB,OAAO,CAAC,IAAI,CAAC,CAoCf;AAID;;GAEG;AACH,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,YAAY,EACpB,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,OAAO,GAChB,OAAO,CAAC,IAAI,CAAC,CAoBf;AAID;;GAEG;AACH,wBAAsB,2BAA2B,CAC/C,MAAM,EAAE,YAAY,EACpB,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,OAAO,EACjB,eAAe,CAAC,EAAE,MAAM,EAAE,GACzB,OAAO,CAAC,IAAI,CAAC,CA+Bf"}

package/dist/guardrails.js

@@ -10,6 +10,7 @@ import { ClampdBlockedError } from "./interceptor.js";
 import { scanForSchemaInjection } from "./schema-injection.js";
 import { withDelegation, getDelegation } from "./delegation.js";
 import { setScopeToken } from "./tool-verify.js";
+import { raiseIfUnregistered, _registeredDescriptors } from "./_frameworkAdapters.js";
 // Re-export scanForSchemaInjection so callers that import from guardrails.js get it
 export { scanForSchemaInjection } from "./schema-injection.js";
 // ── Response inspection helper ────────────────────────────────────
@@ -111,11 +112,16 @@ export async function scanInputOpenAI(client, messages, failOpen) {
     try {
         const inputResult = await client.scanInput(userMessages, messages.length);
         if (!inputResult.allowed) {
+            // Lift the ScanResponse fields (notably matched_rules) onto the
+            // synthesized ProxyResponse so the resulting ClampdBlockedError
+            // carries the same `.matchedRules` / `.response` ergonomic
+            // surface as a real proxy denial.
             throw new ClampdBlockedError({
                 request_id: "scan-input",
                 allowed: false,
                 risk_score: inputResult.risk_score,
                 denial_reason: inputResult.denial_reason || "Input blocked by guardrail",
+                matched_rules: inputResult.matched_rules ?? [],
                 latency_ms: inputResult.latency_ms,
                 degraded_stages: [],
                 session_flags: [],
@@ -159,6 +165,7 @@ export async function scanInputAnthropic(client, messages, failOpen) {
                 allowed: false,
                 risk_score: inputResult.risk_score,
                 denial_reason: inputResult.denial_reason || "Input blocked by guardrail",
+                matched_rules: inputResult.matched_rules ?? [],
                 latency_ms: inputResult.latency_ms,
                 degraded_stages: [],
                 session_flags: [],
@@ -187,6 +194,7 @@ export async function scanOutputContent(client, content, failOpen) {
                 allowed: false,
                 risk_score: outputResult.risk_score,
                 denial_reason: outputResult.denial_reason || "Output blocked by guardrail",
+                matched_rules: outputResult.matched_rules ?? [],
                 latency_ms: outputResult.latency_ms,
                 degraded_stages: [],
                 session_flags: [],
@@ -215,7 +223,14 @@ export async function guardToolCallWithDelegation(client, agentId, toolName, too
             };
         }
         try {
-            const res = await client.proxy(toolName, proxyParams, targetUrl, undefined, undefined, authorizedTools);
+            // Prefer the descriptor hash captured at registerTool() time over
+            // recomputing from partial info — framework callbacks (notably
+            // LangChain's on_tool_start) only see name + description, never
+            // the parameter schema, so an on-the-fly hash would miss the
+            // registered one and trip rug-pull detection.
+            const registeredHash = _registeredDescriptors.get(toolName);
+            const res = await client.proxy(toolName, proxyParams, targetUrl, undefined, registeredHash, authorizedTools);
+            raiseIfUnregistered(toolName, res);
             if (res.allowed && res.scope_token) {
                 setScopeToken(res.scope_token);
             }

package/dist/guardrails.js.map

@@ -1 +1 @@
-{"version":3,"file":"guardrails.js","sourceRoot":"","sources":["../src/guardrails.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChE,OAAO,EAAE,aAAa,EAAkB,MAAM,kBAAkB,CAAC;AAEjE,oFAAoF;AACpF,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAE/D,qEAAqE;AAErE;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAAoB,EACpB,IAAY,EACZ,YAAqB,EACrB,YAAoB,EAAE,EACtB,WAAoB,KAAK,EACzB,aAAqB,EAAE;IAEvB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,YAAY,EAAE,SAAS,IAAI,SAAS,EAAE,UAAU,IAAI,SAAS,CAAC,CAAC;QACtG,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;YACjB,MAAM,IAAI,kBAAkB,CAAC,GAAG,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,YAAY,kBAAkB;YAAE,MAAM,CAAC,CAAC;QAC7C,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,kBAAkB,CAAC;gBAC1C,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG;gBACpD,aAAa,EAAE,+BAA+B,CAAC,EAAE,EAAE,UAAU,EAAE,CAAC;gBAChE,eAAe,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE;aACvC,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,oEAAoE;AAEpE;;;;;;;;GAQG;AACH,MAAM,UAAU,sBAAsB,CAAC,QAAwC;IAC7E,MAAM,cAAc,GAAG,sBAAsB,CAAC,QAAQ,CAAC,CAAC;IACxD,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,IAAI,cAAc,CAAC,CAAC,CAAC,CAAC,SAAS,IAAI,IAAI,EAAE,CAAC;QACrE,MAAM,IAAI,kBAAkB,CAAC;YAC3B,UAAU,EAAE,kBAAkB;YAC9B,OAAO,EAAE,KAAK;YACd,UAAU,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,SAAS;YACvC,aAAa,EAAE,8BAA8B,cAAc,CAAC,CAAC,CAAC,CAAC,SAAS,cAAc,cAAc,CAAC,CAAC,CAAC,CAAC,cAAc,GAAG;YACzH,UAAU,EAAE,CAAC;YACb,eAAe,EAAE,EAAE;YACnB,aAAa,EAAE,EAAE;SAClB,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,oEAAoE;AAEpE;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAA2C;IAChF,MAAM,KAAK,GAAG,MAAM,EAAE,KAAmD,CAAC;IAC1E,IAAI,CAAC,KAAK,EAAE,MAAM;QAAE,OAAO,SAAS,CAAC;IACrC,MAAM,KAAK,GAAG,KAAK;SAChB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAE,CAAC,CAAC,QAAgD,EAAE,IAA0B,CAAC;SAC3F,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACnC,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,yBAAyB,CAAC,MAA2C;IACnF,MAAM,KAAK,GAAG,MAAM,EAAE,KAAmD,CAAC;IAC1E,IAAI,CAAC,KAAK,EAAE,MAAM;QAAE,OAAO,SAAS,CAAC;IACrC,MAAM,KAAK,GAAG,KAAK;SAChB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAA0B,CAAC;SACxC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACnC,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9C,CAAC;AAED,mEAAmE;AAEnE;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAAoB,EACpB,QAAwC,EACxC,QAAiB;IAEjB,MAAM,YAAY,GAAG,QAAQ;SAC1B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC;SAC9E,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;SACjF,MAAM,CAAC,OAAO,CAAC;SACf,IAAI,CAAC,IAAI,CAAC,CAAC;IAEd,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE;QAAE,OAAO;IAEjC,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC1E,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;YACzB,MAAM,IAAI,kBAAkB,CAAC;gBAC3B,UAAU,EAAE,YAAY;gBACxB,OAAO,EAAE,KAAK;gBACd,UAAU,EAAE,WAAW,CAAC,UAAU;gBAClC,aAAa,EAAE,WAAW,CAAC,aAAa,IAAI,4BAA4B;gBACxE,UAAU,EAAE,WAAW,CAAC,UAAU;gBAClC,eAAe,EAAE,EAAE;gBACnB,aAAa,EAAE,EAAE;aAClB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,YAAY,kBAAkB;YAAE,MAAM,CAAC,CAAC;QAC7C,IAAI,CAAC,QAAQ;YAAE,MAAM,CAAC,CAAC;IACzB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,MAAoB,EACpB,QAAwC,EACxC,QAAiB;IAEjB,MAAM,YAAY,GAAG,QAAQ;SAC1B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC;SAC9E,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACT,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ;YAAE,OAAO,CAAC,CAAC,OAAO,CAAC;QACpD,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7B,OAAQ,CAAC,CAAC,OAA0C;iBACjD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC;iBAChC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;iBAClB,IAAI,CAAC,IAAI,CAAC,CAAC;QAChB,CAAC;QACD,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IACnC,CAAC,CAAC;SACD,MAAM,CAAC,OAAO,CAAC;SACf,IAAI,CAAC,IAAI,CAAC,CAAC;IAEd,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE;QAAE,OAAO;IAEjC,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC1E,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;YACzB,MAAM,IAAI,kBAAkB,CAAC;gBAC3B,UAAU,EAAE,YAAY;gBACxB,OAAO,EAAE,KAAK;gBACd,UAAU,EAAE,WAAW,CAAC,UAAU;gBAClC,aAAa,EAAE,WAAW,CAAC,aAAa,IAAI,4BAA4B;gBACxE,UAAU,EAAE,WAAW,CAAC,UAAU;gBAClC,eAAe,EAAE,EAAE;gBACnB,aAAa,EAAE,EAAE;aAClB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,YAAY,kBAAkB;YAAE,MAAM,CAAC,CAAC;QAC7C,IAAI,CAAC,QAAQ;YAAE,MAAM,CAAC,CAAC;IACzB,CAAC;AACH,CAAC;AAED,mEAAmE;AAEnE;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,MAAoB,EACpB,OAAe,EACf,QAAiB;IAEjB,IAAI,CAAC,OAAO;QAAE,OAAO;IACrB,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QACtD,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;YAC1B,MAAM,IAAI,kBAAkB,CAAC;gBAC3B,UAAU,EAAE,aAAa;gBACzB,OAAO,EAAE,KAAK;gBACd,UAAU,EAAE,YAAY,CAAC,UAAU;gBACnC,aAAa,EAAE,YAAY,CAAC,aAAa,IAAI,6BAA6B;gBAC1E,UAAU,EAAE,YAAY,CAAC,UAAU;gBACnC,eAAe,EAAE,EAAE;gBACnB,aAAa,EAAE,EAAE;aAClB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,YAAY,kBAAkB;YAAE,MAAM,CAAC,CAAC;QAC7C,IAAI,CAAC,QAAQ;YAAE,MAAM,CAAC,CAAC;IACzB,CAAC;AACH,CAAC;AAED,mEAAmE;AAEnE;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,MAAoB,EACpB,OAAe,EACf,QAAgB,EAChB,QAAiC,EACjC,SAAiB,EACjB,QAAiB,EACjB,eAA0B;IAE1B,MAAM,cAAc,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE;QACvC,MAAM,UAAU,GAAG,aAAa,EAAE,CAAC;QACnC,MAAM,WAAW,GAA4B,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7D,IAAI,UAAU,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9C,WAAW,CAAC,WAAW,GAAG;gBACxB,gBAAgB,EAAE,UAAU,CAAC,KAAK;gBAClC,mBAAmB,EAAE,UAAU,CAAC,OAAO;aACxC,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC;YACxG,IAAI,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;gBACnC,aAAa,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YACjC,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;gBACjB,MAAM,IAAI,kBAAkB,CAAC,GAAG,CAAC,CAAC;YACpC,CAAC;QACH,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,YAAY,kBAAkB;gBAAE,MAAM,CAAC,CAAC;YAC7C,IAAI,CAAC,QAAQ;gBAAE,MAAM,CAAC,CAAC;QACzB,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"guardrails.js","sourceRoot":"","sources":["../src/guardrails.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChE,OAAO,EAAE,aAAa,EAAkB,MAAM,kBAAkB,CAAC;AACjE,OAAO,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AAEtF,oFAAoF;AACpF,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAE/D,qEAAqE;AAErE;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAAoB,EACpB,IAAY,EACZ,YAAqB,EACrB,YAAoB,EAAE,EACtB,WAAoB,KAAK,EACzB,aAAqB,EAAE;IAEvB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,YAAY,EAAE,SAAS,IAAI,SAAS,EAAE,UAAU,IAAI,SAAS,CAAC,CAAC;QACtG,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;YACjB,MAAM,IAAI,kBAAkB,CAAC,GAAG,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,YAAY,kBAAkB;YAAE,MAAM,CAAC,CAAC;QAC7C,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,kBAAkB,CAAC;gBAC1C,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG;gBACpD,aAAa,EAAE,+BAA+B,CAAC,EAAE,EAAE,UAAU,EAAE,CAAC;gBAChE,eAAe,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE;aACvC,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,oEAAoE;AAEpE;;;;;;;;GAQG;AACH,MAAM,UAAU,sBAAsB,CAAC,QAAwC;IAC7E,MAAM,cAAc,GAAG,sBAAsB,CAAC,QAAQ,CAAC,CAAC;IACxD,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,IAAI,cAAc,CAAC,CAAC,CAAC,CAAC,SAAS,IAAI,IAAI,EAAE,CAAC;QACrE,MAAM,IAAI,kBAAkB,CAAC;YAC3B,UAAU,EAAE,kBAAkB;YAC9B,OAAO,EAAE,KAAK;YACd,UAAU,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,SAAS;YACvC,aAAa,EAAE,8BAA8B,cAAc,CAAC,CAAC,CAAC,CAAC,SAAS,cAAc,cAAc,CAAC,CAAC,CAAC,CAAC,cAAc,GAAG;YACzH,UAAU,EAAE,CAAC;YACb,eAAe,EAAE,EAAE;YACnB,aAAa,EAAE,EAAE;SAClB,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,oEAAoE;AAEpE;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAA2C;IAChF,MAAM,KAAK,GAAG,MAAM,EAAE,KAAmD,CAAC;IAC1E,IAAI,CAAC,KAAK,EAAE,MAAM;QAAE,OAAO,SAAS,CAAC;IACrC,MAAM,KAAK,GAAG,KAAK;SAChB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAE,CAAC,CAAC,QAAgD,EAAE,IAA0B,CAAC;SAC3F,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACnC,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,yBAAyB,CAAC,MAA2C;IACnF,MAAM,KAAK,GAAG,MAAM,EAAE,KAAmD,CAAC;IAC1E,IAAI,CAAC,KAAK,EAAE,MAAM;QAAE,OAAO,SAAS,CAAC;IACrC,MAAM,KAAK,GAAG,KAAK;SAChB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAA0B,CAAC;SACxC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACnC,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9C,CAAC;AAED,mEAAmE;AAEnE;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAAoB,EACpB,QAAwC,EACxC,QAAiB;IAEjB,MAAM,YAAY,GAAG,QAAQ;SAC1B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC;SAC9E,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;SACjF,MAAM,CAAC,OAAO,CAAC;SACf,IAAI,CAAC,IAAI,CAAC,CAAC;IAEd,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE;QAAE,OAAO;IAEjC,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC1E,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;YACzB,gEAAgE;YAChE,gEAAgE;YAChE,2DAA2D;YAC3D,kCAAkC;YAClC,MAAM,IAAI,kBAAkB,CAAC;gBAC3B,UAAU,EAAE,YAAY;gBACxB,OAAO,EAAE,KAAK;gBACd,UAAU,EAAE,WAAW,CAAC,UAAU;gBAClC,aAAa,EAAE,WAAW,CAAC,aAAa,IAAI,4BAA4B;gBACxE,aAAa,EAAE,WAAW,CAAC,aAAa,IAAI,EAAE;gBAC9C,UAAU,EAAE,WAAW,CAAC,UAAU;gBAClC,eAAe,EAAE,EAAE;gBACnB,aAAa,EAAE,EAAE;aAClB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,YAAY,kBAAkB;YAAE,MAAM,CAAC,CAAC;QAC7C,IAAI,CAAC,QAAQ;YAAE,MAAM,CAAC,CAAC;IACzB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,MAAoB,EACpB,QAAwC,EACxC,QAAiB;IAEjB,MAAM,YAAY,GAAG,QAAQ;SAC1B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC;SAC9E,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACT,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ;YAAE,OAAO,CAAC,CAAC,OAAO,CAAC;QACpD,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7B,OAAQ,CAAC,CAAC,OAA0C;iBACjD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC;iBAChC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;iBAClB,IAAI,CAAC,IAAI,CAAC,CAAC;QAChB,CAAC;QACD,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IACnC,CAAC,CAAC;SACD,MAAM,CAAC,OAAO,CAAC;SACf,IAAI,CAAC,IAAI,CAAC,CAAC;IAEd,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE;QAAE,OAAO;IAEjC,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC1E,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;YACzB,MAAM,IAAI,kBAAkB,CAAC;gBAC3B,UAAU,EAAE,YAAY;gBACxB,OAAO,EAAE,KAAK;gBACd,UAAU,EAAE,WAAW,CAAC,UAAU;gBAClC,aAAa,EAAE,WAAW,CAAC,aAAa,IAAI,4BAA4B;gBACxE,aAAa,EAAE,WAAW,CAAC,aAAa,IAAI,EAAE;gBAC9C,UAAU,EAAE,WAAW,CAAC,UAAU;gBAClC,eAAe,EAAE,EAAE;gBACnB,aAAa,EAAE,EAAE;aAClB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,YAAY,kBAAkB;YAAE,MAAM,CAAC,CAAC;QAC7C,IAAI,CAAC,QAAQ;YAAE,MAAM,CAAC,CAAC;IACzB,CAAC;AACH,CAAC;AAED,mEAAmE;AAEnE;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,MAAoB,EACpB,OAAe,EACf,QAAiB;IAEjB,IAAI,CAAC,OAAO;QAAE,OAAO;IACrB,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QACtD,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;YAC1B,MAAM,IAAI,kBAAkB,CAAC;gBAC3B,UAAU,EAAE,aAAa;gBACzB,OAAO,EAAE,KAAK;gBACd,UAAU,EAAE,YAAY,CAAC,UAAU;gBACnC,aAAa,EAAE,YAAY,CAAC,aAAa,IAAI,6BAA6B;gBAC1E,aAAa,EAAE,YAAY,CAAC,aAAa,IAAI,EAAE;gBAC/C,UAAU,EAAE,YAAY,CAAC,UAAU;gBACnC,eAAe,EAAE,EAAE;gBACnB,aAAa,EAAE,EAAE;aAClB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,YAAY,kBAAkB;YAAE,MAAM,CAAC,CAAC;QAC7C,IAAI,CAAC,QAAQ;YAAE,MAAM,CAAC,CAAC;IACzB,CAAC;AACH,CAAC;AAED,mEAAmE;AAEnE;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,MAAoB,EACpB,OAAe,EACf,QAAgB,EAChB,QAAiC,EACjC,SAAiB,EACjB,QAAiB,EACjB,eAA0B;IAE1B,MAAM,cAAc,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE;QACvC,MAAM,UAAU,GAAG,aAAa,EAAE,CAAC;QACnC,MAAM,WAAW,GAA4B,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7D,IAAI,UAAU,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9C,WAAW,CAAC,WAAW,GAAG;gBACxB,gBAAgB,EAAE,UAAU,CAAC,KAAK;gBAClC,mBAAmB,EAAE,UAAU,CAAC,OAAO;aACxC,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,kEAAkE;YAClE,+DAA+D;YAC/D,gEAAgE;YAChE,6DAA6D;YAC7D,8CAA8C;YAC9C,MAAM,cAAc,GAAG,sBAAsB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC5D,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,SAAS,EAAE,cAAc,EAAE,eAAe,CAAC,CAAC;YAC7G,mBAAmB,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;YACnC,IAAI,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;gBACnC,aAAa,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YACjC,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;gBACjB,MAAM,IAAI,kBAAkB,CAAC,GAAG,CAAC,CAAC;YACpC,CAAC;QACH,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,YAAY,kBAAkB;gBAAE,MAAM,CAAC,CAAC;YAC7C,IAAI,CAAC,QAAQ;gBAAE,MAAM,CAAC,CAAC;QACzB,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}