@db-lyon/flowkit 0.13.0 → 0.14.0

package/dist/.tsbuildinfo

@@ -1 +1 @@
-{"root":["../src/index.ts","../src/logger.ts","../src/references.ts","../src/config/deep-merge.ts","../src/config/index.ts","../src/config/loader.ts","../src/config/schema.ts","../src/dag/index.ts","../src/dag/resolver.ts","../src/flow/index.ts","../src/flow/runner.ts","../src/task/agent-prompt-task.ts","../src/task/agent-task.ts","../src/task/base-task.ts","../src/task/concurrency.ts","../src/task/index.ts","../src/task/json-schema.ts","../src/task/llm-provider.ts","../src/task/llm-runner.ts","../src/task/redact.ts","../src/task/registry.ts","../src/task/shell-task.ts","../src/task/shell-termination.ts","../src/task/task-resolution.ts","../src/task/token-ledger.ts"],"version":"5.9.3"}
+{"root":["../src/index.ts","../src/logger.ts","../src/references.ts","../src/config/deep-merge.ts","../src/config/index.ts","../src/config/loader.ts","../src/config/schema.ts","../src/dag/index.ts","../src/dag/resolver.ts","../src/flow/index.ts","../src/flow/runner.ts","../src/guard/index.ts","../src/guard/pipeline.ts","../src/guard/registry.ts","../src/guard/task-guards.ts","../src/guard/types.ts","../src/task/agent-prompt-task.ts","../src/task/agent-task.ts","../src/task/base-task.ts","../src/task/concurrency.ts","../src/task/index.ts","../src/task/json-schema.ts","../src/task/llm-provider.ts","../src/task/llm-runner.ts","../src/task/redact.ts","../src/task/registry.ts","../src/task/shell-task.ts","../src/task/shell-termination.ts","../src/task/task-resolution.ts","../src/task/token-ledger.ts"],"version":"5.9.3"}

package/dist/guard/index.d.ts

@@ -0,0 +1,7 @@
+export { GuardRegistry } from './registry.js';
+export { runGuarded } from './pipeline.js';
+export { discoverTaskGuards } from './task-guards.js';
+export type { DiscoverTaskGuardsOptions, GuardScope, GuardTaskFailure, } from './task-guards.js';
+export { guardContextBase, lazy } from './types.js';
+export type { Guard, GuardContext } from './types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/guard/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/guard/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,YAAY,EACV,yBAAyB,EACzB,UAAU,EACV,gBAAgB,GACjB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,gBAAgB,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AACpD,YAAY,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC"}

package/dist/guard/index.js

@@ -0,0 +1,5 @@
+export { GuardRegistry } from './registry.js';
+export { runGuarded } from './pipeline.js';
+export { discoverTaskGuards } from './task-guards.js';
+export { guardContextBase, lazy } from './types.js';
+//# sourceMappingURL=index.js.map

package/dist/guard/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/guard/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAMtD,OAAO,EAAE,gBAAgB,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC"}

package/dist/guard/pipeline.d.ts

@@ -0,0 +1,22 @@
+import type { GuardRegistry } from './registry.js';
+import type { GuardContext } from './types.js';
+/**
+ * Run one host operation through a guard pipeline.
+ *
+ * Applicability resolves once, up front, so `before` and `after` see the same
+ * set of guards even if a guard's own side effects would change what
+ * `appliesTo` answers (a source-control guard that checks a file out makes it
+ * writable, and must still get its `after` half).
+ *
+ * `before` runs in registration order and any throw denies the operation:
+ * `invoke` never happens and the error propagates unchanged, so the host's own
+ * error type survives. `after` runs in reverse order, innermost guard first,
+ * so a guard's two halves nest rather than interleave. An `after` hook that
+ * returns a value replaces the result for every remaining hook and the caller;
+ * returning nothing leaves it alone.
+ *
+ * With an empty registry this is exactly `invoke()`, so it is always safe to
+ * install on a seam before any guard exists.
+ */
+export declare function runGuarded<Ctx extends GuardContext, TResult>(ctx: Ctx, registry: GuardRegistry<Ctx, TResult>, invoke: () => Promise<TResult>): Promise<TResult>;
+//# sourceMappingURL=pipeline.d.ts.map

package/dist/guard/pipeline.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pipeline.d.ts","sourceRoot":"","sources":["../../src/guard/pipeline.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,KAAK,EAAS,YAAY,EAAE,MAAM,YAAY,CAAC;AAEtD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,UAAU,CAAC,GAAG,SAAS,YAAY,EAAE,OAAO,EAChE,GAAG,EAAE,GAAG,EACR,QAAQ,EAAE,aAAa,CAAC,GAAG,EAAE,OAAO,CAAC,EACrC,MAAM,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,GAC7B,OAAO,CAAC,OAAO,CAAC,CAyBlB"}

package/dist/guard/pipeline.js

@@ -0,0 +1,45 @@
+/**
+ * Run one host operation through a guard pipeline.
+ *
+ * Applicability resolves once, up front, so `before` and `after` see the same
+ * set of guards even if a guard's own side effects would change what
+ * `appliesTo` answers (a source-control guard that checks a file out makes it
+ * writable, and must still get its `after` half).
+ *
+ * `before` runs in registration order and any throw denies the operation:
+ * `invoke` never happens and the error propagates unchanged, so the host's own
+ * error type survives. `after` runs in reverse order, innermost guard first,
+ * so a guard's two halves nest rather than interleave. An `after` hook that
+ * returns a value replaces the result for every remaining hook and the caller;
+ * returning nothing leaves it alone.
+ *
+ * With an empty registry this is exactly `invoke()`, so it is always safe to
+ * install on a seam before any guard exists.
+ */
+export async function runGuarded(ctx, registry, invoke) {
+    if (registry.size === 0)
+        return invoke();
+    const applicable = [];
+    for (const g of registry.list()) {
+        if (!g.appliesTo || (await g.appliesTo(ctx)))
+            applicable.push(g);
+    }
+    for (const g of applicable) {
+        if (g.before)
+            await g.before(ctx);
+    }
+    // `await` widens a generic TResult to Awaited<TResult>, which an `after`
+    // hook's replacement value is not assignable to. The invoke contract already
+    // fixes the type, so pin it back.
+    let result = (await invoke());
+    for (let i = applicable.length - 1; i >= 0; i--) {
+        const after = applicable[i].after;
+        if (!after)
+            continue;
+        const replaced = await after(ctx, result);
+        if (replaced !== undefined)
+            result = replaced;
+    }
+    return result;
+}
+//# sourceMappingURL=pipeline.js.map

package/dist/guard/pipeline.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pipeline.js","sourceRoot":"","sources":["../../src/guard/pipeline.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,GAAQ,EACR,QAAqC,EACrC,MAA8B;IAE9B,IAAI,QAAQ,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,MAAM,EAAE,CAAC;IAEzC,MAAM,UAAU,GAA0B,EAAE,CAAC;IAC7C,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC;QAChC,IAAI,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YAAE,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACnE,CAAC;IAED,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,IAAI,CAAC,CAAC,MAAM;YAAE,MAAM,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACpC,CAAC;IAED,yEAAyE;IACzE,6EAA6E;IAC7E,kCAAkC;IAClC,IAAI,MAAM,GAAG,CAAC,MAAM,MAAM,EAAE,CAAY,CAAC;IAEzC,KAAK,IAAI,CAAC,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAChD,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QAClC,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC1C,IAAI,QAAQ,KAAK,SAAS;YAAE,MAAM,GAAG,QAAmB,CAAC;IAC3D,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/guard/registry.d.ts

@@ -0,0 +1,20 @@
+import type { Guard, GuardContext } from './types.js';
+/**
+ * An ordered set of guards.
+ *
+ * Order is recomputed on every registration rather than at read time, so the
+ * sequence a caller observes never depends on when it asked. Ties on `order`
+ * break by name, so a registry built from an unordered source (a directory
+ * listing, a task registry) still runs its guards deterministically.
+ */
+export declare class GuardRegistry<Ctx extends GuardContext = GuardContext, TResult = unknown> {
+    private guards;
+    register(guard: Guard<Ctx, TResult>): this;
+    /** Register several at once, in whatever order they arrive. */
+    registerAll(guards: Iterable<Guard<Ctx, TResult>>): this;
+    list(): readonly Guard<Ctx, TResult>[];
+    /** Registered guard names, in run order. For startup logging. */
+    names(): string[];
+    get size(): number;
+}
+//# sourceMappingURL=registry.d.ts.map

package/dist/guard/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/guard/registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAEtD;;;;;;;GAOG;AACH,qBAAa,aAAa,CAAC,GAAG,SAAS,YAAY,GAAG,YAAY,EAAE,OAAO,GAAG,OAAO;IACnF,OAAO,CAAC,MAAM,CAA6B;IAE3C,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI;IAM1C,+DAA+D;IAC/D,WAAW,CAAC,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,GAAG,IAAI;IAKxD,IAAI,IAAI,SAAS,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE;IAItC,iEAAiE;IACjE,KAAK,IAAI,MAAM,EAAE;IAIjB,IAAI,IAAI,IAAI,MAAM,CAEjB;CACF"}

package/dist/guard/registry.js

@@ -0,0 +1,33 @@
+/**
+ * An ordered set of guards.
+ *
+ * Order is recomputed on every registration rather than at read time, so the
+ * sequence a caller observes never depends on when it asked. Ties on `order`
+ * break by name, so a registry built from an unordered source (a directory
+ * listing, a task registry) still runs its guards deterministically.
+ */
+export class GuardRegistry {
+    guards = [];
+    register(guard) {
+        this.guards.push(guard);
+        this.guards.sort((a, b) => (a.order ?? 0) - (b.order ?? 0) || a.name.localeCompare(b.name));
+        return this;
+    }
+    /** Register several at once, in whatever order they arrive. */
+    registerAll(guards) {
+        for (const g of guards)
+            this.register(g);
+        return this;
+    }
+    list() {
+        return this.guards;
+    }
+    /** Registered guard names, in run order. For startup logging. */
+    names() {
+        return this.guards.map((g) => g.name);
+    }
+    get size() {
+        return this.guards.length;
+    }
+}
+//# sourceMappingURL=registry.js.map

package/dist/guard/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/guard/registry.ts"],"names":[],"mappings":"AAEA;;;;;;;GAOG;AACH,MAAM,OAAO,aAAa;IAChB,MAAM,GAA0B,EAAE,CAAC;IAE3C,QAAQ,CAAC,KAA0B;QACjC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5F,OAAO,IAAI,CAAC;IACd,CAAC;IAED,+DAA+D;IAC/D,WAAW,CAAC,MAAqC;QAC/C,KAAK,MAAM,CAAC,IAAI,MAAM;YAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QACzC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI;QACF,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED,iEAAiE;IACjE,KAAK;QACH,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACxC,CAAC;IAED,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;IAC5B,CAAC;CACF"}

package/dist/guard/task-guards.d.ts

@@ -0,0 +1,89 @@
+/**
+ * Task-backed guards: turn registered tasks into pipeline guards by name.
+ *
+ * A host that already loads tasks from config or from plugins gets guards for
+ * free. Declaring a task named `guard.<name>.<phase>` registers it as a guard;
+ * no separate activation concept, manifest key, or loader is needed, because
+ * the task registry is already the list of everything the host was given.
+ *
+ * `<phase>` is `before` or `after`, optionally suffixed with a scope the host
+ * declared:
+ *
+ *   guard.audit.after         runs after every operation
+ *   guard.p4.beforeWrite      runs before an operation the `write` scope claims
+ *
+ * A `before` guard denies the operation by returning `success: false` or by
+ * throwing. An `after` guard observes the result: it cannot replace it (a task
+ * returns a `TaskResult`, not the host's result type) and a failure is reported
+ * through `onAfterFailure` rather than failing an operation that already
+ * happened.
+ */
+import type { TaskContext } from '../task/base-task.js';
+import type { TaskRegistry } from '../task/registry.js';
+import type { Logger } from '../logger.js';
+import type { Guard, GuardContext } from './types.js';
+/** Predicate deciding whether a scoped guard participates in an operation. */
+export type GuardScope<Ctx extends GuardContext> = (ctx: Ctx) => boolean | Promise<boolean>;
+/** Passed to the host's error factories so it can shape its own message. */
+export interface GuardTaskFailure<Ctx extends GuardContext> {
+    /** The guard's bare name: `p4` for `guard.p4.beforeWrite`. */
+    readonly guard: string;
+    /** The full phase as declared: `beforeWrite`. */
+    readonly phase: string;
+    /** The task name the guard was discovered from. */
+    readonly taskName: string;
+    readonly ctx: Ctx;
+    /** Why it failed: the task's own error, or the exception it threw. */
+    readonly reason: string;
+    /** Present when the guard task threw rather than returning `success: false`. */
+    readonly cause?: Error;
+}
+export interface DiscoverTaskGuardsOptions<Ctx extends GuardContext, TResult = unknown> {
+    /**
+     * Named scope predicates. A task named `guard.x.beforeWrite` resolves against
+     * the `write` key (the suffix's first letter is lowercased). An unknown scope
+     * is an error at discovery time, not a guard that silently runs on
+     * everything.
+     */
+    scopes?: Record<string, GuardScope<Ctx>>;
+    /**
+     * Build the task context for one guard invocation. Called per operation, so
+     * the host can bind the guard to whatever the operation belongs to rather
+     * than to a single ambient target.
+     */
+    contextFor(ctx: Ctx): TaskContext;
+    /**
+     * Build the options handed to the guard task. `result` is present only for
+     * `after` guards.
+     */
+    optionsFor(ctx: Ctx, result?: TResult): Record<string, unknown>;
+    /**
+     * Error thrown when a `before` guard denies.
+     *
+     * This covers a guard task that throws as well as one that returns
+     * `success: false`, because `BaseTask.run` turns an exception into a failed
+     * result. A guard that crashes therefore denies the operation rather than
+     * waving it through, which is the safe direction for the thing standing
+     * between a caller and a mutation. Default: a plain `Error`.
+     */
+    onDeny?(info: GuardTaskFailure<Ctx>): Error;
+    /**
+     * Error thrown when the guard task cannot be constructed at all: an
+     * unresolvable class path, a module that fails to import. Distinct from a
+     * denial, because nothing about the operation was actually evaluated.
+     * Default: a plain `Error`.
+     */
+    onError?(info: GuardTaskFailure<Ctx>): Error;
+    /** Called when an `after` guard reports failure. Default: log at debug. */
+    onAfterFailure?(info: GuardTaskFailure<Ctx>): void;
+    logger?: Logger;
+}
+/**
+ * Build a `Guard` for every `guard.<name>.<phase>` task in `registry`.
+ *
+ * Throws if a task names a scope the host did not declare, so a typo in a
+ * plugin's task name surfaces at startup instead of becoming a guard that runs
+ * on every operation.
+ */
+export declare function discoverTaskGuards<Ctx extends GuardContext, TResult = unknown>(registry: TaskRegistry, options: DiscoverTaskGuardsOptions<Ctx, TResult>): Guard<Ctx, TResult>[];
+//# sourceMappingURL=task-guards.d.ts.map

package/dist/guard/task-guards.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"task-guards.d.ts","sourceRoot":"","sources":["../../src/guard/task-guards.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAE3C,OAAO,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAKtD,8EAA8E;AAC9E,MAAM,MAAM,UAAU,CAAC,GAAG,SAAS,YAAY,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;AAE5F,4EAA4E;AAC5E,MAAM,WAAW,gBAAgB,CAAC,GAAG,SAAS,YAAY;IACxD,8DAA8D;IAC9D,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,iDAAiD;IACjD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,mDAAmD;IACnD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC;IAClB,sEAAsE;IACtE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,gFAAgF;IAChF,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC;CACxB;AAED,MAAM,WAAW,yBAAyB,CAAC,GAAG,SAAS,YAAY,EAAE,OAAO,GAAG,OAAO;IACpF;;;;;OAKG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;IACzC;;;;OAIG;IACH,UAAU,CAAC,GAAG,EAAE,GAAG,GAAG,WAAW,CAAC;IAClC;;;OAGG;IACH,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChE;;;;;;;;OAQG;IACH,MAAM,CAAC,CAAC,IAAI,EAAE,gBAAgB,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IAC5C;;;;;OAKG;IACH,OAAO,CAAC,CAAC,IAAI,EAAE,gBAAgB,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IAC7C,2EAA2E;IAC3E,cAAc,CAAC,CAAC,IAAI,EAAE,gBAAgB,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;IACnD,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAOD;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,SAAS,YAAY,EAAE,OAAO,GAAG,OAAO,EAC5E,QAAQ,EAAE,YAAY,EACtB,OAAO,EAAE,yBAAyB,CAAC,GAAG,EAAE,OAAO,CAAC,GAC/C,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,CA4EvB"}

package/dist/guard/task-guards.js

@@ -0,0 +1,83 @@
+import { noopLogger } from '../logger.js';
+/** `guard.<name>.<before|after><Scope?>` */
+const GUARD_TASK_RE = /^guard\.(.+)\.(before|after)([A-Za-z][A-Za-z0-9]*)?$/;
+/** Turn `beforeWrite` into the `write` scope key. */
+function scopeKey(suffix) {
+    return suffix.charAt(0).toLowerCase() + suffix.slice(1);
+}
+/**
+ * Build a `Guard` for every `guard.<name>.<phase>` task in `registry`.
+ *
+ * Throws if a task names a scope the host did not declare, so a typo in a
+ * plugin's task name surfaces at startup instead of becoming a guard that runs
+ * on every operation.
+ */
+export function discoverTaskGuards(registry, options) {
+    const log = options.logger ?? noopLogger;
+    const scopes = options.scopes ?? {};
+    const guards = [];
+    for (const taskName of registry.listRegistered()) {
+        const match = GUARD_TASK_RE.exec(taskName);
+        if (!match)
+            continue;
+        const [, name, phase, suffix] = match;
+        const fullPhase = `${phase}${suffix ?? ''}`;
+        let appliesTo;
+        if (suffix) {
+            const key = scopeKey(suffix);
+            appliesTo = scopes[key];
+            if (!appliesTo) {
+                const known = Object.keys(scopes);
+                throw new Error(`Task '${taskName}' declares guard scope '${key}', which is not registered. ` +
+                    (known.length ? `Known scopes: ${known.join(', ')}.` : 'No scopes are registered.'));
+            }
+        }
+        const fail = (ctx, reason, cause) => ({
+            guard: name,
+            phase: fullPhase,
+            taskName,
+            ctx,
+            reason,
+            cause,
+        });
+        const runTask = async (ctx, result) => {
+            try {
+                const task = await registry.create(taskName, options.contextFor(ctx), options.optionsFor(ctx, result));
+                return await task.run();
+            }
+            catch (e) {
+                const cause = e instanceof Error ? e : new Error(String(e));
+                const info = fail(ctx, cause.message, cause);
+                throw options.onError?.(info) ?? new Error(`guard '${name}' errored: ${cause.message}`);
+            }
+        };
+        const guard = { name: `${name}.${fullPhase}`, appliesTo };
+        if (phase === 'before') {
+            guard.before = async (ctx) => {
+                const r = await runTask(ctx);
+                if (!r.success) {
+                    const reason = r.error?.message ?? `denied by guard '${name}'`;
+                    const info = fail(ctx, reason, r.error);
+                    throw options.onDeny?.(info) ?? new Error(`blocked by guard '${name}': ${reason}`);
+                }
+                log.debug(`guard '${name}' allowed the operation`);
+            };
+        }
+        else {
+            guard.after = async (ctx, result) => {
+                const r = await runTask(ctx, result);
+                if (r.success)
+                    return;
+                const reason = r.error?.message ?? 'unknown failure';
+                const info = fail(ctx, reason, r.error);
+                if (options.onAfterFailure)
+                    options.onAfterFailure(info);
+                else
+                    log.debug(`after-guard '${name}' reported failure: ${reason}`);
+            };
+        }
+        guards.push(guard);
+    }
+    return guards;
+}
+//# sourceMappingURL=task-guards.js.map

package/dist/guard/task-guards.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"task-guards.js","sourceRoot":"","sources":["../../src/guard/task-guards.ts"],"names":[],"mappings":"AAuBA,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAG1C,4CAA4C;AAC5C,MAAM,aAAa,GAAG,sDAAsD,CAAC;AA6D7E,qDAAqD;AACrD,SAAS,QAAQ,CAAC,MAAc;IAC9B,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAC1D,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAChC,QAAsB,EACtB,OAAgD;IAEhD,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,IAAI,UAAU,CAAC;IACzC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC;IACpC,MAAM,MAAM,GAA0B,EAAE,CAAC;IAEzC,KAAK,MAAM,QAAQ,IAAI,QAAQ,CAAC,cAAc,EAAE,EAAE,CAAC;QACjD,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC3C,IAAI,CAAC,KAAK;YAAE,SAAS;QAErB,MAAM,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,KAAK,CAAC;QACtC,MAAM,SAAS,GAAG,GAAG,KAAK,GAAG,MAAM,IAAI,EAAE,EAAE,CAAC;QAE5C,IAAI,SAAsC,CAAC;QAC3C,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC7B,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;YACxB,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAClC,MAAM,IAAI,KAAK,CACb,SAAS,QAAQ,2BAA2B,GAAG,8BAA8B;oBAC3E,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,iBAAiB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,2BAA2B,CAAC,CACtF,CAAC;YACJ,CAAC;QACH,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,GAAQ,EAAE,MAAc,EAAE,KAAa,EAAyB,EAAE,CAAC,CAAC;YAChF,KAAK,EAAE,IAAI;YACX,KAAK,EAAE,SAAS;YAChB,QAAQ;YACR,GAAG;YACH,MAAM;YACN,KAAK;SACN,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,KAAK,EAAE,GAAQ,EAAE,MAAgB,EAAE,EAAE;YACnD,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,MAAM,CAChC,QAAQ,EACR,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EACvB,OAAO,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,CAChC,CAAC;gBACF,OAAO,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC;YAC1B,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,MAAM,KAAK,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC5D,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;gBAC7C,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC,UAAU,IAAI,cAAc,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YAC1F,CAAC;QACH,CAAC,CAAC;QAEF,MAAM,KAAK,GAAwB,EAAE,IAAI,EAAE,GAAG,IAAI,IAAI,SAAS,EAAE,EAAE,SAAS,EAAE,CAAC;QAE/E,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;YACvB,KAAK,CAAC,MAAM,GAAG,KAAK,EAAE,GAAG,EAAE,EAAE;gBAC3B,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC;gBAC7B,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;oBACf,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,EAAE,OAAO,IAAI,oBAAoB,IAAI,GAAG,CAAC;oBAC/D,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;oBACxC,MAAM,OAAO,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC,qBAAqB,IAAI,MAAM,MAAM,EAAE,CAAC,CAAC;gBACrF,CAAC;gBACD,GAAG,CAAC,KAAK,CAAC,UAAU,IAAI,yBAAyB,CAAC,CAAC;YACrD,CAAC,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,KAAK,GAAG,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE;gBAClC,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;gBACrC,IAAI,CAAC,CAAC,OAAO;oBAAE,OAAO;gBACtB,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,EAAE,OAAO,IAAI,iBAAiB,CAAC;gBACrD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;gBACxC,IAAI,OAAO,CAAC,cAAc;oBAAE,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;;oBACpD,GAAG,CAAC,KAAK,CAAC,gBAAgB,IAAI,uBAAuB,MAAM,EAAE,CAAC,CAAC;YACtE,CAAC,CAAC;QACJ,CAAC;QAED,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/guard/types.d.ts

@@ -0,0 +1,49 @@
+/**
+ * Guards - a before/after pipeline around an arbitrary host operation.
+ *
+ * A guard sits on a seam the host already has (an RPC call, a write, a command
+ * dispatch) and may veto it, act on it, or observe its result. The pipeline
+ * knows nothing about what any guard does: access policy, source control,
+ * audit, rate limiting and approval gating are all just guards.
+ *
+ * Guards are generic over the host's per-call context. Flowkit requires only a
+ * `meta` scratch map; everything else (method name, params, connection handles,
+ * lazily computed enrichment) belongs to the host's own context type.
+ *
+ * These are distinct from `FlowRunnerHooks`, which fire around flow steps.
+ * A guard wraps one host operation and can deny it; a hook observes a step.
+ */
+/** The minimum a host context must provide. Extend it with whatever the host needs. */
+export interface GuardContext {
+    /** Scratch space shared across guards for the life of one operation. */
+    readonly meta: Map<string, unknown>;
+}
+/**
+ * A guard on the pipeline. Every hook is optional; a guard with neither
+ * `before` nor `after` is inert but still legal (useful while wiring one up).
+ */
+export interface Guard<Ctx extends GuardContext = GuardContext, TResult = unknown> {
+    /** Stable identifier, used for logging and to break ordering ties. */
+    readonly name: string;
+    /** Lower runs first in `before` and last in `after`. Default 0. */
+    readonly order?: number;
+    /** Whether this guard participates in a given operation. Default: always. */
+    appliesTo?(ctx: Ctx): boolean | Promise<boolean>;
+    /** Runs before the operation. Throw to DENY it; side effects are allowed. */
+    before?(ctx: Ctx): Promise<void>;
+    /** Runs after a successful operation. Return a value to replace the result. */
+    after?(ctx: Ctx, result: TResult): Promise<TResult | void>;
+}
+/** Create the base context fields. Spread the result into the host's own context object. */
+export declare function guardContextBase(): GuardContext;
+/**
+ * Wrap a pure computation so it runs at most once per operation, caching into
+ * the context's `meta` map under `key`.
+ *
+ * Guard contexts commonly carry enrichment that is expensive to compute and
+ * that most guards never look at (which files a call touches, who the caller
+ * is). Deferring it means a guard that ignores the enrichment pays nothing,
+ * and a pipeline of guards that all consult it pays once.
+ */
+export declare function lazy<T>(ctx: GuardContext, key: string, compute: () => T): () => T;
+//# sourceMappingURL=types.d.ts.map

package/dist/guard/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/guard/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,uFAAuF;AACvF,MAAM,WAAW,YAAY;IAC3B,wEAAwE;IACxE,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACrC;AAED;;;GAGG;AACH,MAAM,WAAW,KAAK,CAAC,GAAG,SAAS,YAAY,GAAG,YAAY,EAAE,OAAO,GAAG,OAAO;IAC/E,sEAAsE;IACtE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,mEAAmE;IACnE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,6EAA6E;IAC7E,SAAS,CAAC,CAAC,GAAG,EAAE,GAAG,GAAG,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACjD,6EAA6E;IAC7E,MAAM,CAAC,CAAC,GAAG,EAAE,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACjC,+EAA+E;IAC/E,KAAK,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;CAC5D;AAED,4FAA4F;AAC5F,wBAAgB,gBAAgB,IAAI,YAAY,CAE/C;AAED;;;;;;;;GAQG;AACH,wBAAgB,IAAI,CAAC,CAAC,EAAE,GAAG,EAAE,YAAY,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,GAAG,MAAM,CAAC,CAOjF"}

package/dist/guard/types.js

@@ -0,0 +1,38 @@
+/**
+ * Guards - a before/after pipeline around an arbitrary host operation.
+ *
+ * A guard sits on a seam the host already has (an RPC call, a write, a command
+ * dispatch) and may veto it, act on it, or observe its result. The pipeline
+ * knows nothing about what any guard does: access policy, source control,
+ * audit, rate limiting and approval gating are all just guards.
+ *
+ * Guards are generic over the host's per-call context. Flowkit requires only a
+ * `meta` scratch map; everything else (method name, params, connection handles,
+ * lazily computed enrichment) belongs to the host's own context type.
+ *
+ * These are distinct from `FlowRunnerHooks`, which fire around flow steps.
+ * A guard wraps one host operation and can deny it; a hook observes a step.
+ */
+/** Create the base context fields. Spread the result into the host's own context object. */
+export function guardContextBase() {
+    return { meta: new Map() };
+}
+/**
+ * Wrap a pure computation so it runs at most once per operation, caching into
+ * the context's `meta` map under `key`.
+ *
+ * Guard contexts commonly carry enrichment that is expensive to compute and
+ * that most guards never look at (which files a call touches, who the caller
+ * is). Deferring it means a guard that ignores the enrichment pays nothing,
+ * and a pipeline of guards that all consult it pays once.
+ */
+export function lazy(ctx, key, compute) {
+    return () => {
+        if (ctx.meta.has(key))
+            return ctx.meta.get(key);
+        const value = compute();
+        ctx.meta.set(key, value);
+        return value;
+    };
+}
+//# sourceMappingURL=types.js.map

package/dist/guard/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/guard/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAyBH,4FAA4F;AAC5F,MAAM,UAAU,gBAAgB;IAC9B,OAAO,EAAE,IAAI,EAAE,IAAI,GAAG,EAAmB,EAAE,CAAC;AAC9C,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,IAAI,CAAI,GAAiB,EAAE,GAAW,EAAE,OAAgB;IACtE,OAAO,GAAG,EAAE;QACV,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAM,CAAC;QACrD,MAAM,KAAK,GAAG,OAAO,EAAE,CAAC;QACxB,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACzB,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;AACJ,CAAC"}

package/dist/index.d.ts

@@ -24,6 +24,12 @@ export { redact, truncate, preview } from './task/redact.js';
 export type { LLMProvider, LLMCompletionRequest, LLMCompletionResponse, LLMMessage, LLMRole, LLMToolCall, LLMToolDefinition, LLMToolChoice, LLMToolHandler, } from './task/llm-provider.js';
 export { FlowRunner } from './flow/runner.js';
 export type { FlowRunOptions, FlowStepResult, FlowRunResult, FlowRunnerHooks, FlowRunnerConfig, PlanStep, HookPhase, HookError, RollbackResult, } from './flow/runner.js';
+export { GuardRegistry } from './guard/registry.js';
+export { runGuarded } from './guard/pipeline.js';
+export { discoverTaskGuards } from './guard/task-guards.js';
+export type { DiscoverTaskGuardsOptions, GuardScope, GuardTaskFailure, } from './guard/task-guards.js';
+export { guardContextBase, lazy } from './guard/types.js';
+export type { Guard, GuardContext } from './guard/types.js';
 export { resolveReferences } from './references.js';
 export type { ReferenceableStep, ReferenceContext } from './references.js';
 export { topologicalSort, CircularDependencyError, MissingDependencyError, } from './dag/resolver.js';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACnD,OAAO,EACL,iBAAiB,EACjB,oBAAoB,EACpB,cAAc,EACd,oBAAoB,EACpB,eAAe,EACf,iBAAiB,EACjB,qBAAqB,EACrB,kBAAkB,GACnB,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EACV,WAAW,EACX,cAAc,EACd,QAAQ,EACR,cAAc,EACd,SAAS,EACT,WAAW,EACX,eAAe,EACf,YAAY,GACb,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAC7E,YAAY,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAG1E,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAC/C,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACnF,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,YAAY,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,YAAY,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAC9D,YAAY,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AACtE,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,YAAY,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAC5E,OAAO,EACL,aAAa,EACb,cAAc,EACd,eAAe,EACf,qBAAqB,GACtB,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EAAE,aAAa,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACxF,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACnE,YAAY,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAC/E,OAAO,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AACjD,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,eAAe,EACf,cAAc,GACf,MAAM,wBAAwB,CAAC;AAChC,YAAY,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC7D,YAAY,EACV,WAAW,EACX,oBAAoB,EACpB,qBAAqB,EACrB,UAAU,EACV,OAAO,EACP,WAAW,EACX,iBAAiB,EACjB,aAAa,EACb,cAAc,GACf,MAAM,wBAAwB,CAAC;AAGhC,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,YAAY,EACV,cAAc,EACd,cAAc,EACd,aAAa,EACb,eAAe,EACf,gBAAgB,EAChB,QAAQ,EACR,SAAS,EACT,SAAS,EACT,cAAc,GACf,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,YAAY,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAG3E,OAAO,EACL,eAAe,EACf,uBAAuB,EACvB,sBAAsB,GACvB,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAGjD,YAAY,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACnD,OAAO,EACL,iBAAiB,EACjB,oBAAoB,EACpB,cAAc,EACd,oBAAoB,EACpB,eAAe,EACf,iBAAiB,EACjB,qBAAqB,EACrB,kBAAkB,GACnB,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EACV,WAAW,EACX,cAAc,EACd,QAAQ,EACR,cAAc,EACd,SAAS,EACT,WAAW,EACX,eAAe,EACf,YAAY,GACb,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAC7E,YAAY,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAG1E,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAC/C,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACnF,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,YAAY,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,YAAY,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAC9D,YAAY,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AACtE,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,YAAY,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAC5E,OAAO,EACL,aAAa,EACb,cAAc,EACd,eAAe,EACf,qBAAqB,GACtB,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EAAE,aAAa,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACxF,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACnE,YAAY,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAC/E,OAAO,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AACjD,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,eAAe,EACf,cAAc,GACf,MAAM,wBAAwB,CAAC;AAChC,YAAY,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC7D,YAAY,EACV,WAAW,EACX,oBAAoB,EACpB,qBAAqB,EACrB,UAAU,EACV,OAAO,EACP,WAAW,EACX,iBAAiB,EACjB,aAAa,EACb,cAAc,GACf,MAAM,wBAAwB,CAAC;AAGhC,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,YAAY,EACV,cAAc,EACd,cAAc,EACd,aAAa,EACb,eAAe,EACf,gBAAgB,EAChB,QAAQ,EACR,SAAS,EACT,SAAS,EACT,cAAc,GACf,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,YAAY,EACV,yBAAyB,EACzB,UAAU,EACV,gBAAgB,GACjB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,gBAAgB,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC1D,YAAY,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAG5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,YAAY,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAG3E,OAAO,EACL,eAAe,EACf,uBAAuB,EACvB,sBAAsB,GACvB,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAGjD,YAAY,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC"}

package/dist/index.js

@@ -15,6 +15,11 @@ export { createLedger, chargeLedger, ledgerExhausted, exhaustedLimit, } from './
 export { redact, truncate, preview } from './task/redact.js';
 // Flow
 export { FlowRunner } from './flow/runner.js';
+// Guard — before/after pipeline around a host operation
+export { GuardRegistry } from './guard/registry.js';
+export { runGuarded } from './guard/pipeline.js';
+export { discoverTaskGuards } from './guard/task-guards.js';
+export { guardContextBase, lazy } from './guard/types.js';
 // References — shared by the task and flow layers
 export { resolveReferences } from './references.js';
 // DAG

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,SAAS;AACT,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACnD,OAAO,EACL,iBAAiB,EACjB,oBAAoB,EACpB,cAAc,EACd,oBAAoB,EACpB,eAAe,EACf,iBAAiB,EACjB,qBAAqB,EACrB,kBAAkB,GACnB,MAAM,oBAAoB,CAAC;AAW5B,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAG7E,OAAO;AACP,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAE/C,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAEjD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAE9D,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAEjD,OAAO,EACL,aAAa,EACb,cAAc,EACd,eAAe,EACf,qBAAqB,GACtB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAEnE,OAAO,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AACjD,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,eAAe,EACf,cAAc,GACf,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAa7D,OAAO;AACP,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAY9C,kDAAkD;AAClD,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAGpD,MAAM;AACN,OAAO,EACL,eAAe,EACf,uBAAuB,EACvB,sBAAsB,GACvB,MAAM,mBAAmB,CAAC;AAK3B,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,SAAS;AACT,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACnD,OAAO,EACL,iBAAiB,EACjB,oBAAoB,EACpB,cAAc,EACd,oBAAoB,EACpB,eAAe,EACf,iBAAiB,EACjB,qBAAqB,EACrB,kBAAkB,GACnB,MAAM,oBAAoB,CAAC;AAW5B,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAG7E,OAAO;AACP,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAE/C,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAEjD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAE9D,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAEjD,OAAO,EACL,aAAa,EACb,cAAc,EACd,eAAe,EACf,qBAAqB,GACtB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAEnE,OAAO,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AACjD,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,eAAe,EACf,cAAc,GACf,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAa7D,OAAO;AACP,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAY9C,wDAAwD;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAM5D,OAAO,EAAE,gBAAgB,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAG1D,kDAAkD;AAClD,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAGpD,MAAM;AACN,OAAO,EACL,eAAe,EACf,uBAAuB,EACvB,sBAAsB,GACvB,MAAM,mBAAmB,CAAC;AAK3B,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC"}