@cogitator-ai/core 0.1.0 → 0.3.0

package/dist/constitutional/critique-reviser.js

@@ -0,0 +1,98 @@
+import { buildCritiquePrompt, buildRevisionPrompt, parseCritiqueResponse } from './prompts';
+import { filterPrinciplesByLayer } from './constitution';
+export class CritiqueReviser {
+    llm;
+    config;
+    constitution;
+    principles;
+    constructor(options) {
+        this.llm = options.llm;
+        this.config = options.config;
+        this.constitution = options.constitution;
+        this.principles = filterPrinciplesByLayer(this.constitution, 'output');
+    }
+    async critiqueAndRevise(response, _context) {
+        let current = response;
+        const history = [];
+        for (let i = 0; i < this.config.maxRevisionIterations; i++) {
+            const selectedPrinciples = this.selectPrinciples(current, i);
+            const critique = await this.critique(current, selectedPrinciples);
+            history.push(critique);
+            if (!critique.isHarmful) {
+                break;
+            }
+            if (critique.harmScores.length > 0) {
+                const maxConfidence = Math.max(...critique.harmScores.map((s) => s.confidence));
+                if (maxConfidence < this.config.revisionConfidenceThreshold) {
+                    break;
+                }
+            }
+            const violatedPrinciples = this.principles.filter((p) => critique.principlesViolated.includes(p.id));
+            if (violatedPrinciples.length === 0) {
+                break;
+            }
+            current = await this.revise(current, critique, violatedPrinciples);
+        }
+        return {
+            original: response,
+            revised: current,
+            iterations: history.length,
+            critiqueHistory: history,
+        };
+    }
+    async critique(response, principles) {
+        const toUse = principles ?? this.principles;
+        const prompt = buildCritiquePrompt(response, toUse);
+        const result = await this.llm.chat({
+            model: this.config.model ?? 'gpt-4o-mini',
+            messages: [{ role: 'user', content: prompt }],
+            temperature: 0,
+            maxTokens: 800,
+        });
+        return parseCritiqueResponse(result.content);
+    }
+    async revise(response, critique, violatedPrinciples) {
+        const prompt = buildRevisionPrompt(response, critique, violatedPrinciples);
+        const result = await this.llm.chat({
+            model: this.config.model ?? 'gpt-4o-mini',
+            messages: [{ role: 'user', content: prompt }],
+            temperature: 0.3,
+            maxTokens: 2000,
+        });
+        return result.content;
+    }
+    selectPrinciples(response, iteration) {
+        if (iteration === 0) {
+            return this.principles.filter((p) => p.severity === 'high');
+        }
+        const lowered = response.toLowerCase();
+        const relevant = this.principles.filter((p) => {
+            for (const category of p.harmCategories ?? []) {
+                if (this.categoryKeywords[category]?.some((kw) => lowered.includes(kw))) {
+                    return true;
+                }
+            }
+            return false;
+        });
+        if (relevant.length > 0) {
+            return relevant;
+        }
+        const shuffled = [...this.principles].sort(() => Math.random() - 0.5);
+        return shuffled.slice(0, Math.min(5, shuffled.length));
+    }
+    categoryKeywords = {
+        violence: ['kill', 'murder', 'weapon', 'attack', 'bomb', 'harm', 'hurt', 'fight'],
+        hate: ['hate', 'racist', 'sexist', 'slur', 'discriminat'],
+        sexual: ['sex', 'porn', 'nude', 'erotic', 'explicit'],
+        'self-harm': ['suicide', 'self-harm', 'cut myself', 'kill myself'],
+        illegal: ['hack', 'steal', 'fraud', 'drug', 'illegal'],
+        privacy: ['password', 'ssn', 'social security', 'credit card', 'address'],
+        misinformation: ['fake', 'conspiracy', 'hoax'],
+        manipulation: ['manipulate', 'deceive', 'trick', 'scam'],
+    };
+    updateConstitution(constitution) {
+        this.constitution = constitution;
+        this.principles = filterPrinciplesByLayer(constitution, 'output');
+    }
+}
+//# sourceMappingURL=critique-reviser.js.map

package/dist/constitutional/critique-reviser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"critique-reviser.js","sourceRoot":"","sources":["../../src/constitutional/critique-reviser.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,MAAM,WAAW,CAAC;AAC5F,OAAO,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AAQzD,MAAM,OAAO,eAAe;IAClB,GAAG,CAAa;IAChB,MAAM,CAAkB;IACxB,YAAY,CAAe;IAC3B,UAAU,CAA4B;IAE9C,YAAY,OAA+B;QACzC,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;QACvB,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;QACzC,IAAI,CAAC,UAAU,GAAG,uBAAuB,CAAC,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IACzE,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,QAAgB,EAAE,QAAmB;QAC3D,IAAI,OAAO,GAAG,QAAQ,CAAC;QACvB,MAAM,OAAO,GAAqB,EAAE,CAAC;QAErC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,qBAAqB,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3D,MAAM,kBAAkB,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YAC7D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;YAClE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAEvB,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;gBACxB,MAAM;YACR,CAAC;YAED,IAAI,QAAQ,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACnC,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;gBAChF,IAAI,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,2BAA2B,EAAE,CAAC;oBAC5D,MAAM;gBACR,CAAC;YACH,CAAC;YAED,MAAM,kBAAkB,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CACtD,QAAQ,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAC3C,CAAC;YAEF,IAAI,kBAAkB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACpC,MAAM;YACR,CAAC;YAED,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,EAAE,kBAAkB,CAAC,CAAC;QACrE,CAAC;QAED,OAAO;YACL,QAAQ,EAAE,QAAQ;YAClB,OAAO,EAAE,OAAO;YAChB,UAAU,EAAE,OAAO,CAAC,MAAM;YAC1B,eAAe,EAAE,OAAO;SACzB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,QAAQ,CACZ,QAAgB,EAChB,UAAsC;QAEtC,MAAM,KAAK,GAAG,UAAU,IAAI,IAAI,CAAC,UAAU,CAAC;QAC5C,MAAM,MAAM,GAAG,mBAAmB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAEpD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;YACjC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,aAAa;YACzC,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;YAC7C,WAAW,EAAE,CAAC;YACd,SAAS,EAAE,GAAG;SACf,CAAC,CAAC;QAEH,OAAO,qBAAqB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,MAAM,CACV,QAAgB,EAChB,QAAwB,EACxB,kBAA6C;QAE7C,MAAM,MAAM,GAAG,mBAAmB,CAAC,QAAQ,EAAE,QAAQ,EAAE,kBAAkB,CAAC,CAAC;QAE3E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;YACjC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,aAAa;YACzC,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;YAC7C,WAAW,EAAE,GAAG;YAChB,SAAS,EAAE,IAAI;SAChB,CAAC,CAAC;QAEH,OAAO,MAAM,CAAC,OAAO,CAAC;IACxB,CAAC;IAEO,gBAAgB,CAAC,QAAgB,EAAE,SAAiB;QAC1D,IAAI,SAAS,KAAK,CAAC,EAAE,CAAC;YACpB,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC;QAC9D,CAAC;QAED,MAAM,OAAO,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;QACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;YAC5C,KAAK,MAAM,QAAQ,IAAI,CAAC,CAAC,cAAc,IAAI,EAAE,EAAE,CAAC;gBAC9C,IAAI,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;oBACxE,OAAO,IAAI,CAAC;gBACd,CAAC;YACH,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC;QACtE,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IACzD,CAAC;IAEO,gBAAgB,GAA6B;QACnD,QAAQ,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC;QACjF,IAAI,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,CAAC;QACzD,MAAM,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,CAAC;QACrD,WAAW,EAAE,CAAC,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,aAAa,CAAC;QAClE,OAAO,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC;QACtD,OAAO,EAAE,CAAC,UAAU,EAAE,KAAK,EAAE,iBAAiB,EAAE,aAAa,EAAE,SAAS,CAAC;QACzE,cAAc,EAAE,CAAC,MAAM,EAAE,YAAY,EAAE,MAAM,CAAC;QAC9C,YAAY,EAAE,CAAC,YAAY,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,CAAC;KACzD,CAAC;IAEF,kBAAkB,CAAC,YAA0B;QAC3C,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;QACjC,IAAI,CAAC,UAAU,GAAG,uBAAuB,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IACpE,CAAC;CACF"}

package/dist/constitutional/index.d.ts

@@ -0,0 +1,13 @@
+export { ConstitutionalAI } from './constitutional-ai';
+export type { ConstitutionalAIOptions } from './constitutional-ai';
+export { InputFilter } from './input-filter';
+export type { InputFilterOptions } from './input-filter';
+export { OutputFilter } from './output-filter';
+export type { OutputFilterOptions } from './output-filter';
+export { ToolGuard } from './tool-guard';
+export type { ToolGuardOptions } from './tool-guard';
+export { CritiqueReviser } from './critique-reviser';
+export type { CritiqueReviserOptions } from './critique-reviser';
+export { DEFAULT_CONSTITUTION, DEFAULT_PRINCIPLES, createConstitution, extendConstitution, filterPrinciplesByLayer, getPrinciplesByCategory, getPrinciplesBySeverity, } from './constitution';
+export { buildInputEvaluationPrompt, buildOutputEvaluationPrompt, buildCritiquePrompt, buildRevisionPrompt, parseEvaluationResponse, parseCritiqueResponse, } from './prompts';
+//# sourceMappingURL=index.d.ts.map

package/dist/constitutional/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/constitutional/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,YAAY,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAEnE,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,YAAY,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAEzD,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,YAAY,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAE3D,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,YAAY,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAErD,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,YAAY,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAEjE,OAAO,EACL,oBAAoB,EACpB,kBAAkB,EAClB,kBAAkB,EAClB,kBAAkB,EAClB,uBAAuB,EACvB,uBAAuB,EACvB,uBAAuB,GACxB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EACL,0BAA0B,EAC1B,2BAA2B,EAC3B,mBAAmB,EACnB,mBAAmB,EACnB,uBAAuB,EACvB,qBAAqB,GACtB,MAAM,WAAW,CAAC"}

package/dist/constitutional/index.js

@@ -0,0 +1,8 @@
+export { ConstitutionalAI } from './constitutional-ai';
+export { InputFilter } from './input-filter';
+export { OutputFilter } from './output-filter';
+export { ToolGuard } from './tool-guard';
+export { CritiqueReviser } from './critique-reviser';
+export { DEFAULT_CONSTITUTION, DEFAULT_PRINCIPLES, createConstitution, extendConstitution, filterPrinciplesByLayer, getPrinciplesByCategory, getPrinciplesBySeverity, } from './constitution';
+export { buildInputEvaluationPrompt, buildOutputEvaluationPrompt, buildCritiquePrompt, buildRevisionPrompt, parseEvaluationResponse, parseCritiqueResponse, } from './prompts';
+//# sourceMappingURL=index.js.map

package/dist/constitutional/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/constitutional/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAGvD,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAG7C,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAG/C,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAGzC,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAGrD,OAAO,EACL,oBAAoB,EACpB,kBAAkB,EAClB,kBAAkB,EAClB,kBAAkB,EAClB,uBAAuB,EACvB,uBAAuB,EACvB,uBAAuB,GACxB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EACL,0BAA0B,EAC1B,2BAA2B,EAC3B,mBAAmB,EACnB,mBAAmB,EACnB,uBAAuB,EACvB,qBAAqB,GACtB,MAAM,WAAW,CAAC"}

package/dist/constitutional/input-filter.d.ts

@@ -0,0 +1,19 @@
+import type { GuardrailConfig, FilterResult, Constitution, LLMBackend } from '@cogitator-ai/types';
+export interface InputFilterOptions {
+    llm: LLMBackend;
+    config: GuardrailConfig;
+    constitution: Constitution;
+}
+export declare class InputFilter {
+    private llm;
+    private config;
+    private constitution;
+    private principles;
+    constructor(options: InputFilterOptions);
+    filter(input: string, context?: string): Promise<FilterResult>;
+    private quickScan;
+    private evaluateWithLLM;
+    private applyThresholds;
+    updateConstitution(constitution: Constitution): void;
+}
+//# sourceMappingURL=input-filter.d.ts.map

package/dist/constitutional/input-filter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"input-filter.d.ts","sourceRoot":"","sources":["../../src/constitutional/input-filter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,eAAe,EACf,YAAY,EAGZ,YAAY,EACZ,UAAU,EACX,MAAM,qBAAqB,CAAC;AAI7B,MAAM,WAAW,kBAAkB;IACjC,GAAG,EAAE,UAAU,CAAC;IAChB,MAAM,EAAE,eAAe,CAAC;IACxB,YAAY,EAAE,YAAY,CAAC;CAC5B;AAED,qBAAa,WAAW;IACtB,OAAO,CAAC,GAAG,CAAa;IACxB,OAAO,CAAC,MAAM,CAAkB;IAChC,OAAO,CAAC,YAAY,CAAe;IACnC,OAAO,CAAC,UAAU,CAA4B;gBAElC,OAAO,EAAE,kBAAkB;IAOjC,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IAcpE,OAAO,CAAC,SAAS;YA8BH,eAAe;IAc7B,OAAO,CAAC,eAAe;IAyBvB,kBAAkB,CAAC,YAAY,EAAE,YAAY,GAAG,IAAI;CAIrD"}

package/dist/constitutional/input-filter.js

@@ -0,0 +1,88 @@
+import { buildInputEvaluationPrompt, parseEvaluationResponse } from './prompts';
+import { filterPrinciplesByLayer } from './constitution';
+export class InputFilter {
+    llm;
+    config;
+    constitution;
+    principles;
+    constructor(options) {
+        this.llm = options.llm;
+        this.config = options.config;
+        this.constitution = options.constitution;
+        this.principles = filterPrinciplesByLayer(this.constitution, 'input');
+    }
+    async filter(input, context) {
+        const quickResult = this.quickScan(input);
+        if (!quickResult.allowed) {
+            return quickResult;
+        }
+        if (this.principles.length === 0) {
+            return { allowed: true, harmScores: [] };
+        }
+        const harmScores = await this.evaluateWithLLM(input, context);
+        return this.applyThresholds(harmScores);
+    }
+    quickScan(input) {
+        const lowered = input.toLowerCase();
+        const patterns = [
+            { pattern: /how\s+to\s+(make|build|create)\s+(a\s+)?bomb/i, category: 'violence' },
+            { pattern: /how\s+to\s+kill\s+(myself|someone)/i, category: 'violence' },
+            { pattern: /how\s+to\s+hack\s+(into|a)/i, category: 'illegal' },
+            { pattern: /child\s+porn(ography)?/i, category: 'sexual' },
+            { pattern: /ways\s+to\s+commit\s+suicide/i, category: 'self-harm' },
+        ];
+        for (const { pattern, category } of patterns) {
+            if (pattern.test(lowered)) {
+                return {
+                    allowed: false,
+                    harmScores: [
+                        {
+                            category,
+                            severity: 'high',
+                            confidence: 0.95,
+                            reasoning: 'Matched explicit harmful pattern',
+                        },
+                    ],
+                    blockedReason: `Input contains potentially harmful content (${category})`,
+                };
+            }
+        }
+        return { allowed: true, harmScores: [] };
+    }
+    async evaluateWithLLM(input, _context) {
+        const prompt = buildInputEvaluationPrompt(input, this.principles);
+        const response = await this.llm.chat({
+            model: this.config.model ?? 'gpt-4o-mini',
+            messages: [{ role: 'user', content: prompt }],
+            temperature: 0,
+            maxTokens: 500,
+        });
+        const result = parseEvaluationResponse(response.content);
+        return result.harmScores;
+    }
+    applyThresholds(harmScores) {
+        const thresholds = this.config.thresholds;
+        const severityOrder = { low: 1, medium: 2, high: 3 };
+        const violations = harmScores.filter((score) => {
+            const threshold = thresholds[score.category] ?? 'high';
+            return severityOrder[score.severity] >= severityOrder[threshold];
+        });
+        if (violations.length === 0) {
+            return { allowed: true, harmScores };
+        }
+        if (this.config.strictMode) {
+            const categories = [...new Set(violations.map((v) => v.category))];
+            return {
+                allowed: false,
+                harmScores,
+                blockedReason: `Input violates safety policies: ${categories.join(', ')}`,
+            };
+        }
+        return { allowed: true, harmScores };
+    }
+    updateConstitution(constitution) {
+        this.constitution = constitution;
+        this.principles = filterPrinciplesByLayer(constitution, 'input');
+    }
+}
+//# sourceMappingURL=input-filter.js.map

package/dist/constitutional/input-filter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"input-filter.js","sourceRoot":"","sources":["../../src/constitutional/input-filter.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,0BAA0B,EAAE,uBAAuB,EAAE,MAAM,WAAW,CAAC;AAChF,OAAO,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AAQzD,MAAM,OAAO,WAAW;IACd,GAAG,CAAa;IAChB,MAAM,CAAkB;IACxB,YAAY,CAAe;IAC3B,UAAU,CAA4B;IAE9C,YAAY,OAA2B;QACrC,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;QACvB,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;QACzC,IAAI,CAAC,UAAU,GAAG,uBAAuB,CAAC,IAAI,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IACxE,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAAa,EAAE,OAAgB;QAC1C,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC1C,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;YACzB,OAAO,WAAW,CAAC;QACrB,CAAC;QAED,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;QAC3C,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAC9D,OAAO,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;IAC1C,CAAC;IAEO,SAAS,CAAC,KAAa;QAC7B,MAAM,OAAO,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;QACpC,MAAM,QAAQ,GAAG;YACf,EAAE,OAAO,EAAE,+CAA+C,EAAE,QAAQ,EAAE,UAAmB,EAAE;YAC3F,EAAE,OAAO,EAAE,qCAAqC,EAAE,QAAQ,EAAE,UAAmB,EAAE;YACjF,EAAE,OAAO,EAAE,6BAA6B,EAAE,QAAQ,EAAE,SAAkB,EAAE;YACxE,EAAE,OAAO,EAAE,yBAAyB,EAAE,QAAQ,EAAE,QAAiB,EAAE;YACnE,EAAE,OAAO,EAAE,+BAA+B,EAAE,QAAQ,EAAE,WAAoB,EAAE;SAC7E,CAAC;QAEF,KAAK,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,QAAQ,EAAE,CAAC;YAC7C,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC1B,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,UAAU,EAAE;wBACV;4BACE,QAAQ;4BACR,QAAQ,EAAE,MAAM;4BAChB,UAAU,EAAE,IAAI;4BAChB,SAAS,EAAE,kCAAkC;yBAC9C;qBACF;oBACD,aAAa,EAAE,+CAA+C,QAAQ,GAAG;iBAC1E,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;IAC3C,CAAC;IAEO,KAAK,CAAC,eAAe,CAAC,KAAa,EAAE,QAAiB;QAC5D,MAAM,MAAM,GAAG,0BAA0B,CAAC,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QAElE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;YACnC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,aAAa;YACzC,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;YAC7C,WAAW,EAAE,CAAC;YACd,SAAS,EAAE,GAAG;SACf,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,uBAAuB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACzD,OAAO,MAAM,CAAC,UAAU,CAAC;IAC3B,CAAC;IAEO,eAAe,CAAC,UAAuB;QAC7C,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC;QAC1C,MAAM,aAAa,GAA2B,EAAE,GAAG,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QAE7E,MAAM,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;YAC7C,MAAM,SAAS,GAAG,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC;YACvD,OAAO,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,aAAa,CAAC,SAAS,CAAC,CAAC;QACnE,CAAC,CAAC,CAAC;QAEH,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;QACvC,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;YAC3B,MAAM,UAAU,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;YACnE,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,UAAU;gBACV,aAAa,EAAE,mCAAmC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;aAC1E,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IACvC,CAAC;IAED,kBAAkB,CAAC,YAA0B;QAC3C,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;QACjC,IAAI,CAAC,UAAU,GAAG,uBAAuB,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IACnE,CAAC;CACF"}

package/dist/constitutional/output-filter.d.ts

@@ -0,0 +1,19 @@
+import type { GuardrailConfig, FilterResult, Constitution, LLMBackend, Message } from '@cogitator-ai/types';
+export interface OutputFilterOptions {
+    llm: LLMBackend;
+    config: GuardrailConfig;
+    constitution: Constitution;
+}
+export declare class OutputFilter {
+    private llm;
+    private config;
+    private constitution;
+    private principles;
+    constructor(options: OutputFilterOptions);
+    filter(output: string, context: Message[]): Promise<FilterResult>;
+    private quickScan;
+    private evaluateWithLLM;
+    private applyThresholds;
+    updateConstitution(constitution: Constitution): void;
+}
+//# sourceMappingURL=output-filter.d.ts.map

package/dist/constitutional/output-filter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"output-filter.d.ts","sourceRoot":"","sources":["../../src/constitutional/output-filter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,eAAe,EACf,YAAY,EAGZ,YAAY,EACZ,UAAU,EACV,OAAO,EACR,MAAM,qBAAqB,CAAC;AAI7B,MAAM,WAAW,mBAAmB;IAClC,GAAG,EAAE,UAAU,CAAC;IAChB,MAAM,EAAE,eAAe,CAAC;IACxB,YAAY,EAAE,YAAY,CAAC;CAC5B;AAED,qBAAa,YAAY;IACvB,OAAO,CAAC,GAAG,CAAa;IACxB,OAAO,CAAC,MAAM,CAAkB;IAChC,OAAO,CAAC,YAAY,CAAe;IACnC,OAAO,CAAC,UAAU,CAA4B;gBAElC,OAAO,EAAE,mBAAmB;IAOlC,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,YAAY,CAAC;IAcvE,OAAO,CAAC,SAAS;YA6BH,eAAe;IAc7B,OAAO,CAAC,eAAe;IAyBvB,kBAAkB,CAAC,YAAY,EAAE,YAAY,GAAG,IAAI;CAIrD"}

package/dist/constitutional/output-filter.js

@@ -0,0 +1,86 @@
+import { buildOutputEvaluationPrompt, parseEvaluationResponse } from './prompts';
+import { filterPrinciplesByLayer } from './constitution';
+export class OutputFilter {
+    llm;
+    config;
+    constitution;
+    principles;
+    constructor(options) {
+        this.llm = options.llm;
+        this.config = options.config;
+        this.constitution = options.constitution;
+        this.principles = filterPrinciplesByLayer(this.constitution, 'output');
+    }
+    async filter(output, context) {
+        const quickResult = this.quickScan(output);
+        if (!quickResult.allowed) {
+            return quickResult;
+        }
+        if (this.principles.length === 0) {
+            return { allowed: true, harmScores: [] };
+        }
+        const harmScores = await this.evaluateWithLLM(output, context);
+        return this.applyThresholds(harmScores);
+    }
+    quickScan(output) {
+        const lowered = output.toLowerCase();
+        const patterns = [
+            { pattern: /rm\s+-rf\s+\/(?!\w)/i, category: 'illegal' },
+            { pattern: /format\s+c:/i, category: 'illegal' },
+            { pattern: /sudo\s+rm\s+-rf/i, category: 'illegal' },
+        ];
+        for (const { pattern, category } of patterns) {
+            if (pattern.test(lowered)) {
+                return {
+                    allowed: false,
+                    harmScores: [
+                        {
+                            category,
+                            severity: 'high',
+                            confidence: 0.95,
+                            reasoning: 'Contains dangerous system command',
+                        },
+                    ],
+                    blockedReason: 'Output contains potentially dangerous commands',
+                };
+            }
+        }
+        return { allowed: true, harmScores: [] };
+    }
+    async evaluateWithLLM(output, context) {
+        const prompt = buildOutputEvaluationPrompt(output, context, this.principles);
+        const response = await this.llm.chat({
+            model: this.config.model ?? 'gpt-4o-mini',
+            messages: [{ role: 'user', content: prompt }],
+            temperature: 0,
+            maxTokens: 500,
+        });
+        const result = parseEvaluationResponse(response.content);
+        return result.harmScores;
+    }
+    applyThresholds(harmScores) {
+        const thresholds = this.config.thresholds;
+        const severityOrder = { low: 1, medium: 2, high: 3 };
+        const violations = harmScores.filter((score) => {
+            const threshold = thresholds[score.category] ?? 'high';
+            return severityOrder[score.severity] >= severityOrder[threshold];
+        });
+        if (violations.length === 0) {
+            return { allowed: true, harmScores };
+        }
+        if (this.config.strictMode) {
+            const categories = [...new Set(violations.map((v) => v.category))];
+            return {
+                allowed: false,
+                harmScores,
+                blockedReason: `Output violates safety policies: ${categories.join(', ')}`,
+            };
+        }
+        return { allowed: true, harmScores };
+    }
+    updateConstitution(constitution) {
+        this.constitution = constitution;
+        this.principles = filterPrinciplesByLayer(constitution, 'output');
+    }
+}
+//# sourceMappingURL=output-filter.js.map

package/dist/constitutional/output-filter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"output-filter.js","sourceRoot":"","sources":["../../src/constitutional/output-filter.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,2BAA2B,EAAE,uBAAuB,EAAE,MAAM,WAAW,CAAC;AACjF,OAAO,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AAQzD,MAAM,OAAO,YAAY;IACf,GAAG,CAAa;IAChB,MAAM,CAAkB;IACxB,YAAY,CAAe;IAC3B,UAAU,CAA4B;IAE9C,YAAY,OAA4B;QACtC,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;QACvB,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;QACzC,IAAI,CAAC,UAAU,GAAG,uBAAuB,CAAC,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IACzE,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAAc,EAAE,OAAkB;QAC7C,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAC3C,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;YACzB,OAAO,WAAW,CAAC;QACrB,CAAC;QAED,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;QAC3C,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC/D,OAAO,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;IAC1C,CAAC;IAEO,SAAS,CAAC,MAAc;QAC9B,MAAM,OAAO,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;QAErC,MAAM,QAAQ,GAAG;YACf,EAAE,OAAO,EAAE,sBAAsB,EAAE,QAAQ,EAAE,SAAkB,EAAE;YACjE,EAAE,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,SAAkB,EAAE;YACzD,EAAE,OAAO,EAAE,kBAAkB,EAAE,QAAQ,EAAE,SAAkB,EAAE;SAC9D,CAAC;QAEF,KAAK,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,QAAQ,EAAE,CAAC;YAC7C,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC1B,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,UAAU,EAAE;wBACV;4BACE,QAAQ;4BACR,QAAQ,EAAE,MAAM;4BAChB,UAAU,EAAE,IAAI;4BAChB,SAAS,EAAE,mCAAmC;yBAC/C;qBACF;oBACD,aAAa,EAAE,gDAAgD;iBAChE,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;IAC3C,CAAC;IAEO,KAAK,CAAC,eAAe,CAAC,MAAc,EAAE,OAAkB;QAC9D,MAAM,MAAM,GAAG,2BAA2B,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QAE7E,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;YACnC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,aAAa;YACzC,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;YAC7C,WAAW,EAAE,CAAC;YACd,SAAS,EAAE,GAAG;SACf,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,uBAAuB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACzD,OAAO,MAAM,CAAC,UAAU,CAAC;IAC3B,CAAC;IAEO,eAAe,CAAC,UAAuB;QAC7C,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC;QAC1C,MAAM,aAAa,GAA2B,EAAE,GAAG,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QAE7E,MAAM,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;YAC7C,MAAM,SAAS,GAAG,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC;YACvD,OAAO,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,aAAa,CAAC,SAAS,CAAC,CAAC;QACnE,CAAC,CAAC,CAAC;QAEH,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;QACvC,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;YAC3B,MAAM,UAAU,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;YACnE,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,UAAU;gBACV,aAAa,EAAE,oCAAoC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;aAC3E,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IACvC,CAAC;IAED,kBAAkB,CAAC,YAA0B;QAC3C,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;QACjC,IAAI,CAAC,UAAU,GAAG,uBAAuB,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IACpE,CAAC;CACF"}

package/dist/constitutional/prompts.d.ts

@@ -0,0 +1,11 @@
+import type { ConstitutionalPrinciple, HarmScore, CritiqueResult, Message } from '@cogitator-ai/types';
+export declare function buildInputEvaluationPrompt(input: string, principles: ConstitutionalPrinciple[]): string;
+export declare function buildOutputEvaluationPrompt(output: string, context: Message[], principles: ConstitutionalPrinciple[]): string;
+export declare function buildCritiquePrompt(response: string, principles: ConstitutionalPrinciple[]): string;
+export declare function buildRevisionPrompt(response: string, critique: CritiqueResult, principles: ConstitutionalPrinciple[]): string;
+export declare function parseEvaluationResponse(content: string): {
+    isHarmful: boolean;
+    harmScores: HarmScore[];
+};
+export declare function parseCritiqueResponse(content: string): CritiqueResult;
+//# sourceMappingURL=prompts.d.ts.map

package/dist/constitutional/prompts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompts.d.ts","sourceRoot":"","sources":["../../src/constitutional/prompts.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,uBAAuB,EACvB,SAAS,EACT,cAAc,EAGd,OAAO,EACR,MAAM,qBAAqB,CAAC;AAE7B,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,MAAM,EACb,UAAU,EAAE,uBAAuB,EAAE,GACpC,MAAM,CAiCR;AAED,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,OAAO,EAAE,EAClB,UAAU,EAAE,uBAAuB,EAAE,GACpC,MAAM,CAyCR;AAED,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,uBAAuB,EAAE,GACpC,MAAM,CAkCR;AAED,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,cAAc,EACxB,UAAU,EAAE,uBAAuB,EAAE,GACpC,MAAM,CA0BR;AAED,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,MAAM,GAAG;IACxD,SAAS,EAAE,OAAO,CAAC;IACnB,UAAU,EAAE,SAAS,EAAE,CAAC;CACzB,CAeA;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,cAAc,CAwBrE"}

package/dist/constitutional/prompts.js

@@ -0,0 +1,202 @@
+export function buildInputEvaluationPrompt(input, principles) {
+    const principlesList = principles.map((p) => `- ${p.name}: ${p.description}`).join('\n');
+    return `You are a content safety evaluator. Analyze the following user input for potential policy violations.
+
+PRINCIPLES TO CHECK:
+${principlesList}
+
+USER INPUT:
+"""
+${input}
+"""
+
+Evaluate whether this input attempts to elicit harmful content. Consider:
+1. Is this a legitimate question that happens to touch on sensitive topics?
+2. Is there clear malicious intent to generate harmful content?
+3. Would answering this request violate any of the listed principles?
+
+Respond in JSON format:
+{
+  "isHarmful": boolean,
+  "harmScores": [
+    {
+      "category": "violence" | "hate" | "sexual" | "self-harm" | "illegal" | "privacy" | "misinformation" | "manipulation",
+      "severity": "low" | "medium" | "high",
+      "confidence": number (0-1),
+      "principleViolated": "principle-id" | null,
+      "reasoning": "brief explanation"
+    }
+  ]
+}
+
+If the input is benign, return: {"isHarmful": false, "harmScores": []}`;
+}
+export function buildOutputEvaluationPrompt(output, context, principles) {
+    const principlesList = principles
+        .map((p) => `- ${p.name} (${p.id}): ${p.critiquePrompt}`)
+        .join('\n');
+    const contextStr = context
+        .slice(-4)
+        .map((m) => `[${m.role}]: ${m.content.slice(0, 200)}${m.content.length > 200 ? '...' : ''}`)
+        .join('\n');
+    return `You are a content safety evaluator. Analyze the following AI response for policy violations.
+
+PRINCIPLES TO CHECK:
+${principlesList}
+
+CONVERSATION CONTEXT:
+${contextStr}
+
+AI RESPONSE TO EVALUATE:
+"""
+${output}
+"""
+
+For each principle, determine if the response violates it. Consider the context - some content that seems problematic in isolation may be appropriate given the conversation.
+
+Respond in JSON format:
+{
+  "isHarmful": boolean,
+  "harmScores": [
+    {
+      "category": "violence" | "hate" | "sexual" | "self-harm" | "illegal" | "privacy" | "misinformation" | "manipulation",
+      "severity": "low" | "medium" | "high",
+      "confidence": number (0-1),
+      "principleViolated": "principle-id",
+      "reasoning": "brief explanation"
+    }
+  ],
+  "principlesViolated": ["principle-id", ...]
+}
+
+If the response is safe, return: {"isHarmful": false, "harmScores": [], "principlesViolated": []}`;
+}
+export function buildCritiquePrompt(response, principles) {
+    const critiques = principles.map((p) => `- ${p.name}: ${p.critiquePrompt}`).join('\n');
+    return `You are a thoughtful AI safety reviewer. Critique the following response against these principles:
+
+${critiques}
+
+RESPONSE TO CRITIQUE:
+"""
+${response}
+"""
+
+Provide a thoughtful analysis:
+1. Does this response violate any of the listed principles?
+2. What specific parts are problematic?
+3. How severe are the issues?
+
+Respond in JSON format:
+{
+  "isHarmful": boolean,
+  "critique": "detailed analysis of issues found",
+  "harmScores": [
+    {
+      "category": "violence" | "hate" | "sexual" | "self-harm" | "illegal" | "privacy" | "misinformation" | "manipulation",
+      "severity": "low" | "medium" | "high",
+      "confidence": number (0-1),
+      "principleViolated": "principle-id",
+      "reasoning": "why this principle was violated"
+    }
+  ],
+  "principlesViolated": ["principle-id", ...]
+}
+
+If no violations found: {"isHarmful": false, "critique": "No issues found", "harmScores": [], "principlesViolated": []}`;
+}
+export function buildRevisionPrompt(response, critique, principles) {
+    const violatedPrinciples = principles
+        .filter((p) => critique.principlesViolated.includes(p.id))
+        .map((p) => `- ${p.name}: ${p.revisionPrompt}`)
+        .join('\n');
+    return `You are a helpful AI assistant. Your previous response had some issues that need to be addressed.
+
+ORIGINAL RESPONSE:
+"""
+${response}
+"""
+
+CRITIQUE:
+${critique.critique}
+
+REVISION GUIDELINES:
+${violatedPrinciples}
+
+Please rewrite the response to:
+1. Address the legitimate parts of the user's request
+2. Avoid the issues identified in the critique
+3. Follow the revision guidelines above
+4. Maintain a helpful and respectful tone
+
+Provide ONLY the revised response, no explanations or meta-commentary:`;
+}
+export function parseEvaluationResponse(content) {
+    const cleaned = content
+        .replace(/```json\n?/g, '')
+        .replace(/```\n?/g, '')
+        .trim();
+    try {
+        const parsed = JSON.parse(cleaned);
+        return {
+            isHarmful: Boolean(parsed.isHarmful),
+            harmScores: (parsed.harmScores ?? []).map(normalizeHarmScore),
+        };
+    }
+    catch {
+        return { isHarmful: false, harmScores: [] };
+    }
+}
+export function parseCritiqueResponse(content) {
+    const cleaned = content
+        .replace(/```json\n?/g, '')
+        .replace(/```\n?/g, '')
+        .trim();
+    try {
+        const parsed = JSON.parse(cleaned);
+        return {
+            isHarmful: Boolean(parsed.isHarmful),
+            critique: String(parsed.critique ?? ''),
+            harmScores: (parsed.harmScores ?? []).map(normalizeHarmScore),
+            principlesViolated: Array.isArray(parsed.principlesViolated)
+                ? parsed.principlesViolated.filter((p) => typeof p === 'string')
+                : [],
+        };
+    }
+    catch {
+        return {
+            isHarmful: false,
+            critique: 'Failed to parse critique response',
+            harmScores: [],
+            principlesViolated: [],
+        };
+    }
+}
+function normalizeHarmScore(raw) {
+    const obj = raw;
+    return {
+        category: normalizeCategory(obj.category),
+        severity: normalizeSeverity(obj.severity),
+        confidence: Math.max(0, Math.min(1, Number(obj.confidence) || 0)),
+        principleViolated: typeof obj.principleViolated === 'string' ? obj.principleViolated : undefined,
+        reasoning: typeof obj.reasoning === 'string' ? obj.reasoning : undefined,
+    };
+}
+function normalizeCategory(value) {
+    const valid = [
+        'violence',
+        'hate',
+        'sexual',
+        'self-harm',
+        'illegal',
+        'privacy',
+        'misinformation',
+        'manipulation',
+    ];
+    return valid.includes(value) ? value : 'manipulation';
+}
+function normalizeSeverity(value) {
+    const valid = ['low', 'medium', 'high'];
+    return valid.includes(value) ? value : 'low';
+}
+//# sourceMappingURL=prompts.js.map

package/dist/constitutional/prompts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompts.js","sourceRoot":"","sources":["../../src/constitutional/prompts.ts"],"names":[],"mappings":"AASA,MAAM,UAAU,0BAA0B,CACxC,KAAa,EACb,UAAqC;IAErC,MAAM,cAAc,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEzF,OAAO;;;EAGP,cAAc;;;;EAId,KAAK;;;;;;;;;;;;;;;;;;;;;;uEAsBgE,CAAC;AACxE,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,MAAc,EACd,OAAkB,EAClB,UAAqC;IAErC,MAAM,cAAc,GAAG,UAAU;SAC9B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,cAAc,EAAE,CAAC;SACxD,IAAI,CAAC,IAAI,CAAC,CAAC;IAEd,MAAM,UAAU,GAAG,OAAO;SACvB,KAAK,CAAC,CAAC,CAAC,CAAC;SACT,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;SAC3F,IAAI,CAAC,IAAI,CAAC,CAAC;IAEd,OAAO;;;EAGP,cAAc;;;EAGd,UAAU;;;;EAIV,MAAM;;;;;;;;;;;;;;;;;;;;kGAoB0F,CAAC;AACnG,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,QAAgB,EAChB,UAAqC;IAErC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEvF,OAAO;;EAEP,SAAS;;;;EAIT,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;wHAwB8G,CAAC;AACzH,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,QAAgB,EAChB,QAAwB,EACxB,UAAqC;IAErC,MAAM,kBAAkB,GAAG,UAAU;SAClC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;SACzD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,cAAc,EAAE,CAAC;SAC9C,IAAI,CAAC,IAAI,CAAC,CAAC;IAEd,OAAO;;;;EAIP,QAAQ;;;;EAIR,QAAQ,CAAC,QAAQ;;;EAGjB,kBAAkB;;;;;;;;uEAQmD,CAAC;AACxE,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,OAAe;IAIrD,MAAM,OAAO,GAAG,OAAO;SACpB,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC;SAC1B,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC;SACtB,IAAI,EAAE,CAAC;IAEV,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACnC,OAAO;YACL,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC;YACpC,UAAU,EAAE,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC;SAC9D,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;IAC9C,CAAC;AACH,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,OAAe;IACnD,MAAM,OAAO,GAAG,OAAO;SACpB,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC;SAC1B,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC;SACtB,IAAI,EAAE,CAAC;IAEV,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACnC,OAAO;YACL,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC;YACpC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC;YACvC,UAAU,EAAE,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC;YAC7D,kBAAkB,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,kBAAkB,CAAC;gBAC1D,CAAC,CAAC,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAU,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;gBACzE,CAAC,CAAC,EAAE;SACP,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,SAAS,EAAE,KAAK;YAChB,QAAQ,EAAE,mCAAmC;YAC7C,UAAU,EAAE,EAAE;YACd,kBAAkB,EAAE,EAAE;SACvB,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,GAAY;IACtC,MAAM,GAAG,GAAG,GAA8B,CAAC;IAC3C,OAAO;QACL,QAAQ,EAAE,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC;QACzC,QAAQ,EAAE,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC;QACzC,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;QACjE,iBAAiB,EACf,OAAO,GAAG,CAAC,iBAAiB,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS;QAC/E,SAAS,EAAE,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;KACzE,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,MAAM,KAAK,GAAmB;QAC5B,UAAU;QACV,MAAM;QACN,QAAQ;QACR,WAAW;QACX,SAAS;QACT,SAAS;QACT,gBAAgB;QAChB,cAAc;KACf,CAAC;IACF,OAAO,KAAK,CAAC,QAAQ,CAAC,KAAqB,CAAC,CAAC,CAAC,CAAE,KAAsB,CAAC,CAAC,CAAC,cAAc,CAAC;AAC1F,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,MAAM,KAAK,GAAe,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IACpD,OAAO,KAAK,CAAC,QAAQ,CAAC,KAAiB,CAAC,CAAC,CAAC,CAAE,KAAkB,CAAC,CAAC,CAAC,KAAK,CAAC;AACzE,CAAC"}

package/dist/constitutional/tool-guard.d.ts

@@ -0,0 +1,18 @@
+import type { GuardrailConfig, ToolGuardResult, Tool, ToolContext, Constitution } from '@cogitator-ai/types';
+export interface ToolGuardOptions {
+    config: GuardrailConfig;
+    constitution: Constitution;
+}
+export declare class ToolGuard {
+    private config;
+    constructor(options: ToolGuardOptions);
+    evaluate(tool: Tool, args: Record<string, unknown>, _context: ToolContext): Promise<ToolGuardResult>;
+    private checkApproval;
+    private assessRisk;
+    private checkDangerousOperation;
+    private isDangerousCommand;
+    private isDangerousPath;
+    private requestApproval;
+    updateConstitution(_constitution: Constitution): void;
+}
+//# sourceMappingURL=tool-guard.d.ts.map

package/dist/constitutional/tool-guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-guard.d.ts","sourceRoot":"","sources":["../../src/constitutional/tool-guard.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,eAAe,EACf,eAAe,EAEf,IAAI,EACJ,WAAW,EACX,YAAY,EACb,MAAM,qBAAqB,CAAC;AAE7B,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,eAAe,CAAC;IACxB,YAAY,EAAE,YAAY,CAAC;CAC5B;AAED,qBAAa,SAAS;IACpB,OAAO,CAAC,MAAM,CAAkB;gBAEpB,OAAO,EAAE,gBAAgB;IAI/B,QAAQ,CACZ,IAAI,EAAE,IAAI,EACV,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,QAAQ,EAAE,WAAW,GACpB,OAAO,CAAC,eAAe,CAAC;IAuD3B,OAAO,CAAC,aAAa;IAOrB,OAAO,CAAC,UAAU;IAoBlB,OAAO,CAAC,uBAAuB;IAkB/B,OAAO,CAAC,kBAAkB;IAe1B,OAAO,CAAC,eAAe;YAcT,eAAe;IAW7B,kBAAkB,CAAC,aAAa,EAAE,YAAY,GAAG,IAAI;CACtD"}