@edictum/core 0.1.0 → 0.2.0

package/dist/index.d.cts

@@ -55,7 +55,8 @@ declare function createPrincipal(partial?: Partial<Principal>): Readonly<Princip
  *
  * Throws EdictumConfigError for:
  * - Empty string
- * - Any ASCII control character (code < 0x20 or code === 0x7f)
+ * - Any C0 control character (code < 0x20), DEL/C1 (U+007F-U+009F)
+ * - Unicode line/paragraph separators (U+2028, U+2029)
  * - Forward slash `/`
  * - Backslash `\`
  */
@@ -239,7 +240,7 @@ declare const Verdict: {
 };
 /** Before execution. Safe to deny — tool hasn't run yet. */
 interface Precondition {
-    readonly contractType?: "pre";
+    readonly contractType?: 'pre';
     readonly tool: string;
     readonly check: (envelope: ToolEnvelope) => Verdict | Promise<Verdict>;
     readonly when?: ((envelope: ToolEnvelope) => boolean) | null;
@@ -251,7 +252,7 @@ interface Precondition {
  * On failure for write/irreversible: warn only, NO retry coaching.
  */
 interface Postcondition {
-    readonly contractType: "post";
+    readonly contractType: 'post';
     readonly tool: string;
     readonly check: (envelope: ToolEnvelope, response: unknown) => Verdict | Promise<Verdict>;
     readonly when?: ((envelope: ToolEnvelope) => boolean) | null;
@@ -314,7 +315,7 @@ declare const DEFAULT_LIMITS: OperationLimits;
 type AnyFunction = (...args: any[]) => any;
 /** Registration for a hook callback. */
 interface HookRegistration {
-    readonly phase: "before" | "after";
+    readonly phase: 'before' | 'after';
     readonly tool: string;
     readonly callback: AnyFunction;
     readonly when?: AnyFunction | null;
@@ -515,7 +516,7 @@ interface ContractResult {
     readonly policyError: boolean;
 }
 /** Create a frozen ContractResult with defaults matching the Python dataclass. */
-declare function createContractResult(fields: Pick<ContractResult, "contractId" | "contractType" | "passed"> & Partial<Omit<ContractResult, "contractId" | "contractType" | "passed">>): ContractResult;
+declare function createContractResult(fields: Pick<ContractResult, 'contractId' | 'contractType' | 'passed'> & Partial<Omit<ContractResult, 'contractId' | 'contractType' | 'passed'>>): ContractResult;
 /** Result of dry-run evaluation of a tool call against contracts. */
 interface EvaluationResult {
     readonly verdict: string;
@@ -527,7 +528,7 @@ interface EvaluationResult {
     readonly policyError: boolean;
 }
 /** Create a frozen EvaluationResult with defaults matching the Python dataclass. */
-declare function createEvaluationResult(fields: Pick<EvaluationResult, "verdict" | "toolName"> & Partial<Omit<EvaluationResult, "verdict" | "toolName">>): EvaluationResult;
+declare function createEvaluationResult(fields: Pick<EvaluationResult, 'verdict' | 'toolName'> & Partial<Omit<EvaluationResult, 'verdict' | 'toolName'>>): EvaluationResult;
 
 /** Structured postcondition findings. */
 /**
@@ -545,7 +546,7 @@ interface Finding {
     readonly metadata: Readonly<Record<string, unknown>>;
 }
 /** Create a frozen Finding with defaults for metadata. */
-declare function createFinding(fields: Pick<Finding, "type" | "contractId" | "field" | "message"> & Partial<Pick<Finding, "metadata">>): Finding;
+declare function createFinding(fields: Pick<Finding, 'type' | 'contractId' | 'field' | 'message'> & Partial<Pick<Finding, 'metadata'>>): Finding;
 /**
  * Result from a governed tool call, including postcondition findings.
  *
@@ -562,7 +563,7 @@ interface PostCallResult {
     readonly outputSuppressed: boolean;
 }
 /** Create a PostCallResult with defaults. */
-declare function createPostCallResult(fields: Pick<PostCallResult, "result"> & Partial<Omit<PostCallResult, "result">>): PostCallResult;
+declare function createPostCallResult(fields: Pick<PostCallResult, 'result'> & Partial<Omit<PostCallResult, 'result'>>): PostCallResult;
 /**
  * Classify a postcondition finding type from contract ID and message.
  *
@@ -606,41 +607,41 @@ declare function buildFindings(postDecision: PostDecisionLike): Finding[];
 
 interface InternalContractBase {
     readonly name: string;
-    readonly mode?: "enforce" | "observe";
+    readonly mode?: 'enforce' | 'observe';
     readonly source?: string;
 }
 /** Internal precondition — enriched with pipeline metadata. */
 interface InternalPrecondition extends InternalContractBase {
-    readonly type: "precondition";
+    readonly type: 'precondition';
     readonly tool: string;
     readonly check: (envelope: ToolEnvelope) => Verdict | Promise<Verdict>;
     readonly when?: ((envelope: ToolEnvelope) => boolean) | null;
-    readonly effect?: "deny" | "approve";
+    readonly effect?: 'deny' | 'approve';
     readonly timeout?: number;
-    readonly timeoutEffect?: "deny" | "allow";
+    readonly timeoutEffect?: 'deny' | 'allow';
 }
 /** Internal postcondition — enriched with effect and redaction info. */
 interface InternalPostcondition extends InternalContractBase {
-    readonly type: "postcondition";
+    readonly type: 'postcondition';
     readonly tool: string;
     readonly check: (envelope: ToolEnvelope, response: unknown) => Verdict | Promise<Verdict>;
     readonly when?: ((envelope: ToolEnvelope) => boolean) | null;
-    readonly effect?: "warn" | "redact" | "deny";
+    readonly effect?: 'warn' | 'redact' | 'deny';
     readonly redactPatterns?: readonly RegExp[];
 }
 /** Internal session contract. */
 interface InternalSessionContract extends InternalContractBase {
-    readonly type: "session_contract";
+    readonly type: 'session_contract';
     readonly check: (session: Session) => Verdict | Promise<Verdict>;
 }
 /** Internal sandbox contract — tool matching uses tools[] not tool. */
 interface InternalSandboxContract extends InternalContractBase {
-    readonly type: "sandbox";
+    readonly type: 'sandbox';
     readonly tools: readonly string[];
     readonly check: (envelope: ToolEnvelope) => Verdict | Promise<Verdict>;
-    readonly effect?: "deny" | "approve";
+    readonly effect?: 'deny' | 'approve';
     readonly timeout?: number;
-    readonly timeoutEffect?: "deny" | "allow";
+    readonly timeoutEffect?: 'deny' | 'allow';
 }
 /** Union of all internal contract types. */
 type InternalContract = InternalPrecondition | InternalPostcondition | InternalSessionContract | InternalSandboxContract;
@@ -652,7 +653,7 @@ type InternalContract = InternalPrecondition | InternalPostcondition | InternalS
  */
 interface GuardLike {
     readonly limits: OperationLimits;
-    getHooks(phase: "before" | "after", envelope: ToolEnvelope): HookRegistration[];
+    getHooks(phase: 'before' | 'after', envelope: ToolEnvelope): HookRegistration[];
     getPreconditions(envelope: ToolEnvelope): InternalPrecondition[];
     getPostconditions(envelope: ToolEnvelope): InternalPostcondition[];
     getSessionContracts(): InternalSessionContract[];
@@ -696,7 +697,7 @@ declare function createCompiledState(partial?: Partial<CompiledState>): Compiled
 
 /** Result of pre-execution governance evaluation. */
 interface PreDecision {
-    readonly action: "allow" | "deny" | "pending_approval";
+    readonly action: 'allow' | 'deny' | 'pending_approval';
     readonly reason: string | null;
     readonly decisionSource: string | null;
     readonly decisionName: string | null;
@@ -710,7 +711,7 @@ interface PreDecision {
     readonly approvalMessage: string | null;
 }
 /** Create a PreDecision with defaults for omitted fields. */
-declare function createPreDecision(partial: Partial<PreDecision> & Pick<PreDecision, "action">): PreDecision;
+declare function createPreDecision(partial: Partial<PreDecision> & Pick<PreDecision, 'action'>): PreDecision;
 /** Result of post-execution governance evaluation. */
 interface PostDecision {
     readonly toolSuccess: boolean;
@@ -722,7 +723,7 @@ interface PostDecision {
     readonly outputSuppressed: boolean;
 }
 /** Create a PostDecision with defaults for omitted fields. */
-declare function createPostDecision(partial: Partial<PostDecision> & Pick<PostDecision, "toolSuccess">): PostDecision;
+declare function createPostDecision(partial: Partial<PostDecision> & Pick<PostDecision, 'toolSuccess'>): PostDecision;
 /**
  * Orchestrates all governance checks.
  *
@@ -830,7 +831,7 @@ declare function evaluateExpression(expr: Record<string, unknown>, envelope: Too
 
 /** Options shared by fromYaml and fromYamlString. */
 interface YamlFactoryOptions {
-    readonly mode?: "enforce" | "observe";
+    readonly mode?: 'enforce' | 'observe';
     readonly tools?: Record<string, {
         side_effect?: string;
         idempotent?: boolean;
@@ -903,7 +904,7 @@ declare function reload(guard: Edictum, yamlContent: string, options?: ReloadOpt
 /** Constructor options for the Edictum guard. */
 interface EdictumOptions {
     readonly environment?: string;
-    readonly mode?: "enforce" | "observe";
+    readonly mode?: 'enforce' | 'observe';
     readonly limits?: OperationLimits;
     readonly tools?: Record<string, {
         side_effect?: string;
@@ -931,7 +932,7 @@ interface EdictumOptions {
  */
 declare class Edictum implements GuardLike {
     readonly environment: string;
-    readonly mode: "enforce" | "observe";
+    readonly mode: 'enforce' | 'observe';
     readonly backend: StorageBackend;
     readonly redaction: RedactionPolicy;
     readonly toolRegistry: ToolRegistry;
@@ -977,7 +978,7 @@ declare class Edictum implements GuardLike {
     /** Resolve the principal for a tool call. */
     _resolvePrincipal(toolName: string, toolInput: Record<string, unknown>): Principal | null;
     private _registerHook;
-    getHooks(phase: "before" | "after", envelope: ToolEnvelope): HookRegistration[];
+    getHooks(phase: 'before' | 'after', envelope: ToolEnvelope): HookRegistration[];
     getPreconditions(envelope: ToolEnvelope): InternalPrecondition[];
     getPostconditions(envelope: ToolEnvelope): InternalPostcondition[];
     getSessionContracts(): InternalSessionContract[];
@@ -1198,4 +1199,4 @@ declare function loadBundleString(content: string | Uint8Array): [Record<string,
 /** Edictum — Runtime contract enforcement for AI agent tool calls. */
 declare const VERSION = "0.1.0";
 
-export { type ApprovalBackend, type ApprovalDecision, type ApprovalRequest, ApprovalStatus, AuditAction, type AuditEvent, type AuditSink, BUILTIN_OPERATOR_NAMES, BUILTIN_SELECTOR_PREFIXES, BashClassifier, type BatchCall, type BundleHash, CollectingAuditSink, type CompileOptions, type CompiledBundle, type CompiledState, type ComposedBundle, CompositeSink, type CompositionReport, type ContractResult, type CreateEnvelopeOptions, type CustomOperator, type CustomSelector, DEFAULT_LIMITS, Edictum, EdictumConfigError, EdictumDenied, type EdictumOptions, EdictumToolError, type EvaluateOptions, type EvaluationResult, FileAuditSink, type Finding, type FromYamlOptions, GovernancePipeline, type GuardLike, HookDecision, type HookRegistration, HookResult, type InternalContract, type InternalPostcondition, type InternalPrecondition, type InternalSandboxContract, type InternalSessionContract, LocalApprovalBackend, MAX_BUNDLE_SIZE, MAX_REGEX_INPUT, MarkEvictedError, MemoryBackend, type OperationLimits, PolicyError, type PostCallResult, type PostDecision, type PostDecisionLike, type Postcondition, type PreDecision, type Precondition, type Principal, RedactionPolicy, type ReloadOptions, type RunOptions, Session, type SessionContract, SideEffect, StdoutAuditSink, type StorageBackend, type ToolConfig, type ToolEnvelope, ToolRegistry, VERSION, Verdict, type YamlFactoryOptions, _validateToolName, buildFindings, classifyFinding, compileContracts, composeBundles, computeHash, createAuditEvent, createCompiledState, createContractResult, createEnvelope, createEvaluationResult, createFinding, createPostCallResult, createPostDecision, createPreDecision, createPrincipal, deepFreeze, defaultSuccessCheck, evaluateExpression, expandMessage, fnmatch, fromYaml, fromYamlString, loadBundle, loadBundleString, reload, run, validateOperators };
+export { type ApprovalBackend, type ApprovalDecision, type ApprovalRequest, ApprovalStatus, AuditAction, type AuditEvent, type AuditSink, BUILTIN_OPERATOR_NAMES, BUILTIN_SELECTOR_PREFIXES, BashClassifier, type BatchCall, type BundleHash, CollectingAuditSink, type CompileOptions, type CompiledBundle, type CompiledState, type ComposedBundle, CompositeSink, type CompositionOverride, type CompositionReport, type ContractResult, type CreateEnvelopeOptions, type CustomOperator, type CustomSelector, DEFAULT_LIMITS, Edictum, EdictumConfigError, EdictumDenied, type EdictumOptions, EdictumToolError, type EvaluateOptions, type EvaluationResult, type EvaluateOptions$1 as ExpressionEvaluateOptions, FileAuditSink, type Finding, type FromYamlOptions, GovernancePipeline, type GuardLike, HookDecision, type HookRegistration, HookResult, type InternalContract, type InternalPostcondition, type InternalPrecondition, type InternalSandboxContract, type InternalSessionContract, LocalApprovalBackend, MAX_BUNDLE_SIZE, MAX_REGEX_INPUT, MarkEvictedError, MemoryBackend, type ObserveContract, type OperationLimits, PolicyError, type PostCallResult, type PostDecision, type PostDecisionLike, type Postcondition, type PreDecision, type Precondition, type Principal, RedactionPolicy, type ReloadOptions, type RunOptions, Session, type SessionContract, SideEffect, StdoutAuditSink, type StorageBackend, type ToolConfig, type ToolEnvelope, ToolRegistry, VERSION, Verdict, type YamlFactoryOptions, _validateToolName, buildFindings, classifyFinding, compileContracts, composeBundles, computeHash, createAuditEvent, createCompiledState, createContractResult, createEnvelope, createEvaluationResult, createFinding, createPostCallResult, createPostDecision, createPreDecision, createPrincipal, deepFreeze, defaultSuccessCheck, evaluateExpression, expandMessage, fnmatch, fromYaml, fromYamlString, loadBundle, loadBundleString, reload, run, validateOperators };

package/dist/index.d.ts

@@ -55,7 +55,8 @@ declare function createPrincipal(partial?: Partial<Principal>): Readonly<Princip
  *
  * Throws EdictumConfigError for:
  * - Empty string
- * - Any ASCII control character (code < 0x20 or code === 0x7f)
+ * - Any C0 control character (code < 0x20), DEL/C1 (U+007F-U+009F)
+ * - Unicode line/paragraph separators (U+2028, U+2029)
  * - Forward slash `/`
  * - Backslash `\`
  */
@@ -239,7 +240,7 @@ declare const Verdict: {
 };
 /** Before execution. Safe to deny — tool hasn't run yet. */
 interface Precondition {
-    readonly contractType?: "pre";
+    readonly contractType?: 'pre';
     readonly tool: string;
     readonly check: (envelope: ToolEnvelope) => Verdict | Promise<Verdict>;
     readonly when?: ((envelope: ToolEnvelope) => boolean) | null;
@@ -251,7 +252,7 @@ interface Precondition {
  * On failure for write/irreversible: warn only, NO retry coaching.
  */
 interface Postcondition {
-    readonly contractType: "post";
+    readonly contractType: 'post';
     readonly tool: string;
     readonly check: (envelope: ToolEnvelope, response: unknown) => Verdict | Promise<Verdict>;
     readonly when?: ((envelope: ToolEnvelope) => boolean) | null;
@@ -314,7 +315,7 @@ declare const DEFAULT_LIMITS: OperationLimits;
 type AnyFunction = (...args: any[]) => any;
 /** Registration for a hook callback. */
 interface HookRegistration {
-    readonly phase: "before" | "after";
+    readonly phase: 'before' | 'after';
     readonly tool: string;
     readonly callback: AnyFunction;
     readonly when?: AnyFunction | null;
@@ -515,7 +516,7 @@ interface ContractResult {
     readonly policyError: boolean;
 }
 /** Create a frozen ContractResult with defaults matching the Python dataclass. */
-declare function createContractResult(fields: Pick<ContractResult, "contractId" | "contractType" | "passed"> & Partial<Omit<ContractResult, "contractId" | "contractType" | "passed">>): ContractResult;
+declare function createContractResult(fields: Pick<ContractResult, 'contractId' | 'contractType' | 'passed'> & Partial<Omit<ContractResult, 'contractId' | 'contractType' | 'passed'>>): ContractResult;
 /** Result of dry-run evaluation of a tool call against contracts. */
 interface EvaluationResult {
     readonly verdict: string;
@@ -527,7 +528,7 @@ interface EvaluationResult {
     readonly policyError: boolean;
 }
 /** Create a frozen EvaluationResult with defaults matching the Python dataclass. */
-declare function createEvaluationResult(fields: Pick<EvaluationResult, "verdict" | "toolName"> & Partial<Omit<EvaluationResult, "verdict" | "toolName">>): EvaluationResult;
+declare function createEvaluationResult(fields: Pick<EvaluationResult, 'verdict' | 'toolName'> & Partial<Omit<EvaluationResult, 'verdict' | 'toolName'>>): EvaluationResult;
 
 /** Structured postcondition findings. */
 /**
@@ -545,7 +546,7 @@ interface Finding {
     readonly metadata: Readonly<Record<string, unknown>>;
 }
 /** Create a frozen Finding with defaults for metadata. */
-declare function createFinding(fields: Pick<Finding, "type" | "contractId" | "field" | "message"> & Partial<Pick<Finding, "metadata">>): Finding;
+declare function createFinding(fields: Pick<Finding, 'type' | 'contractId' | 'field' | 'message'> & Partial<Pick<Finding, 'metadata'>>): Finding;
 /**
  * Result from a governed tool call, including postcondition findings.
  *
@@ -562,7 +563,7 @@ interface PostCallResult {
     readonly outputSuppressed: boolean;
 }
 /** Create a PostCallResult with defaults. */
-declare function createPostCallResult(fields: Pick<PostCallResult, "result"> & Partial<Omit<PostCallResult, "result">>): PostCallResult;
+declare function createPostCallResult(fields: Pick<PostCallResult, 'result'> & Partial<Omit<PostCallResult, 'result'>>): PostCallResult;
 /**
  * Classify a postcondition finding type from contract ID and message.
  *
@@ -606,41 +607,41 @@ declare function buildFindings(postDecision: PostDecisionLike): Finding[];
 
 interface InternalContractBase {
     readonly name: string;
-    readonly mode?: "enforce" | "observe";
+    readonly mode?: 'enforce' | 'observe';
     readonly source?: string;
 }
 /** Internal precondition — enriched with pipeline metadata. */
 interface InternalPrecondition extends InternalContractBase {
-    readonly type: "precondition";
+    readonly type: 'precondition';
     readonly tool: string;
     readonly check: (envelope: ToolEnvelope) => Verdict | Promise<Verdict>;
     readonly when?: ((envelope: ToolEnvelope) => boolean) | null;
-    readonly effect?: "deny" | "approve";
+    readonly effect?: 'deny' | 'approve';
     readonly timeout?: number;
-    readonly timeoutEffect?: "deny" | "allow";
+    readonly timeoutEffect?: 'deny' | 'allow';
 }
 /** Internal postcondition — enriched with effect and redaction info. */
 interface InternalPostcondition extends InternalContractBase {
-    readonly type: "postcondition";
+    readonly type: 'postcondition';
     readonly tool: string;
     readonly check: (envelope: ToolEnvelope, response: unknown) => Verdict | Promise<Verdict>;
     readonly when?: ((envelope: ToolEnvelope) => boolean) | null;
-    readonly effect?: "warn" | "redact" | "deny";
+    readonly effect?: 'warn' | 'redact' | 'deny';
     readonly redactPatterns?: readonly RegExp[];
 }
 /** Internal session contract. */
 interface InternalSessionContract extends InternalContractBase {
-    readonly type: "session_contract";
+    readonly type: 'session_contract';
     readonly check: (session: Session) => Verdict | Promise<Verdict>;
 }
 /** Internal sandbox contract — tool matching uses tools[] not tool. */
 interface InternalSandboxContract extends InternalContractBase {
-    readonly type: "sandbox";
+    readonly type: 'sandbox';
     readonly tools: readonly string[];
     readonly check: (envelope: ToolEnvelope) => Verdict | Promise<Verdict>;
-    readonly effect?: "deny" | "approve";
+    readonly effect?: 'deny' | 'approve';
     readonly timeout?: number;
-    readonly timeoutEffect?: "deny" | "allow";
+    readonly timeoutEffect?: 'deny' | 'allow';
 }
 /** Union of all internal contract types. */
 type InternalContract = InternalPrecondition | InternalPostcondition | InternalSessionContract | InternalSandboxContract;
@@ -652,7 +653,7 @@ type InternalContract = InternalPrecondition | InternalPostcondition | InternalS
  */
 interface GuardLike {
     readonly limits: OperationLimits;
-    getHooks(phase: "before" | "after", envelope: ToolEnvelope): HookRegistration[];
+    getHooks(phase: 'before' | 'after', envelope: ToolEnvelope): HookRegistration[];
     getPreconditions(envelope: ToolEnvelope): InternalPrecondition[];
     getPostconditions(envelope: ToolEnvelope): InternalPostcondition[];
     getSessionContracts(): InternalSessionContract[];
@@ -696,7 +697,7 @@ declare function createCompiledState(partial?: Partial<CompiledState>): Compiled
 
 /** Result of pre-execution governance evaluation. */
 interface PreDecision {
-    readonly action: "allow" | "deny" | "pending_approval";
+    readonly action: 'allow' | 'deny' | 'pending_approval';
     readonly reason: string | null;
     readonly decisionSource: string | null;
     readonly decisionName: string | null;
@@ -710,7 +711,7 @@ interface PreDecision {
     readonly approvalMessage: string | null;
 }
 /** Create a PreDecision with defaults for omitted fields. */
-declare function createPreDecision(partial: Partial<PreDecision> & Pick<PreDecision, "action">): PreDecision;
+declare function createPreDecision(partial: Partial<PreDecision> & Pick<PreDecision, 'action'>): PreDecision;
 /** Result of post-execution governance evaluation. */
 interface PostDecision {
     readonly toolSuccess: boolean;
@@ -722,7 +723,7 @@ interface PostDecision {
     readonly outputSuppressed: boolean;
 }
 /** Create a PostDecision with defaults for omitted fields. */
-declare function createPostDecision(partial: Partial<PostDecision> & Pick<PostDecision, "toolSuccess">): PostDecision;
+declare function createPostDecision(partial: Partial<PostDecision> & Pick<PostDecision, 'toolSuccess'>): PostDecision;
 /**
  * Orchestrates all governance checks.
  *
@@ -830,7 +831,7 @@ declare function evaluateExpression(expr: Record<string, unknown>, envelope: Too
 
 /** Options shared by fromYaml and fromYamlString. */
 interface YamlFactoryOptions {
-    readonly mode?: "enforce" | "observe";
+    readonly mode?: 'enforce' | 'observe';
     readonly tools?: Record<string, {
         side_effect?: string;
         idempotent?: boolean;
@@ -903,7 +904,7 @@ declare function reload(guard: Edictum, yamlContent: string, options?: ReloadOpt
 /** Constructor options for the Edictum guard. */
 interface EdictumOptions {
     readonly environment?: string;
-    readonly mode?: "enforce" | "observe";
+    readonly mode?: 'enforce' | 'observe';
     readonly limits?: OperationLimits;
     readonly tools?: Record<string, {
         side_effect?: string;
@@ -931,7 +932,7 @@ interface EdictumOptions {
  */
 declare class Edictum implements GuardLike {
     readonly environment: string;
-    readonly mode: "enforce" | "observe";
+    readonly mode: 'enforce' | 'observe';
     readonly backend: StorageBackend;
     readonly redaction: RedactionPolicy;
     readonly toolRegistry: ToolRegistry;
@@ -977,7 +978,7 @@ declare class Edictum implements GuardLike {
     /** Resolve the principal for a tool call. */
     _resolvePrincipal(toolName: string, toolInput: Record<string, unknown>): Principal | null;
     private _registerHook;
-    getHooks(phase: "before" | "after", envelope: ToolEnvelope): HookRegistration[];
+    getHooks(phase: 'before' | 'after', envelope: ToolEnvelope): HookRegistration[];
     getPreconditions(envelope: ToolEnvelope): InternalPrecondition[];
     getPostconditions(envelope: ToolEnvelope): InternalPostcondition[];
     getSessionContracts(): InternalSessionContract[];
@@ -1198,4 +1199,4 @@ declare function loadBundleString(content: string | Uint8Array): [Record<string,
 /** Edictum — Runtime contract enforcement for AI agent tool calls. */
 declare const VERSION = "0.1.0";
 
-export { type ApprovalBackend, type ApprovalDecision, type ApprovalRequest, ApprovalStatus, AuditAction, type AuditEvent, type AuditSink, BUILTIN_OPERATOR_NAMES, BUILTIN_SELECTOR_PREFIXES, BashClassifier, type BatchCall, type BundleHash, CollectingAuditSink, type CompileOptions, type CompiledBundle, type CompiledState, type ComposedBundle, CompositeSink, type CompositionReport, type ContractResult, type CreateEnvelopeOptions, type CustomOperator, type CustomSelector, DEFAULT_LIMITS, Edictum, EdictumConfigError, EdictumDenied, type EdictumOptions, EdictumToolError, type EvaluateOptions, type EvaluationResult, FileAuditSink, type Finding, type FromYamlOptions, GovernancePipeline, type GuardLike, HookDecision, type HookRegistration, HookResult, type InternalContract, type InternalPostcondition, type InternalPrecondition, type InternalSandboxContract, type InternalSessionContract, LocalApprovalBackend, MAX_BUNDLE_SIZE, MAX_REGEX_INPUT, MarkEvictedError, MemoryBackend, type OperationLimits, PolicyError, type PostCallResult, type PostDecision, type PostDecisionLike, type Postcondition, type PreDecision, type Precondition, type Principal, RedactionPolicy, type ReloadOptions, type RunOptions, Session, type SessionContract, SideEffect, StdoutAuditSink, type StorageBackend, type ToolConfig, type ToolEnvelope, ToolRegistry, VERSION, Verdict, type YamlFactoryOptions, _validateToolName, buildFindings, classifyFinding, compileContracts, composeBundles, computeHash, createAuditEvent, createCompiledState, createContractResult, createEnvelope, createEvaluationResult, createFinding, createPostCallResult, createPostDecision, createPreDecision, createPrincipal, deepFreeze, defaultSuccessCheck, evaluateExpression, expandMessage, fnmatch, fromYaml, fromYamlString, loadBundle, loadBundleString, reload, run, validateOperators };
+export { type ApprovalBackend, type ApprovalDecision, type ApprovalRequest, ApprovalStatus, AuditAction, type AuditEvent, type AuditSink, BUILTIN_OPERATOR_NAMES, BUILTIN_SELECTOR_PREFIXES, BashClassifier, type BatchCall, type BundleHash, CollectingAuditSink, type CompileOptions, type CompiledBundle, type CompiledState, type ComposedBundle, CompositeSink, type CompositionOverride, type CompositionReport, type ContractResult, type CreateEnvelopeOptions, type CustomOperator, type CustomSelector, DEFAULT_LIMITS, Edictum, EdictumConfigError, EdictumDenied, type EdictumOptions, EdictumToolError, type EvaluateOptions, type EvaluationResult, type EvaluateOptions$1 as ExpressionEvaluateOptions, FileAuditSink, type Finding, type FromYamlOptions, GovernancePipeline, type GuardLike, HookDecision, type HookRegistration, HookResult, type InternalContract, type InternalPostcondition, type InternalPrecondition, type InternalSandboxContract, type InternalSessionContract, LocalApprovalBackend, MAX_BUNDLE_SIZE, MAX_REGEX_INPUT, MarkEvictedError, MemoryBackend, type ObserveContract, type OperationLimits, PolicyError, type PostCallResult, type PostDecision, type PostDecisionLike, type Postcondition, type PreDecision, type Precondition, type Principal, RedactionPolicy, type ReloadOptions, type RunOptions, Session, type SessionContract, SideEffect, StdoutAuditSink, type StorageBackend, type ToolConfig, type ToolEnvelope, ToolRegistry, VERSION, Verdict, type YamlFactoryOptions, _validateToolName, buildFindings, classifyFinding, compileContracts, composeBundles, computeHash, createAuditEvent, createCompiledState, createContractResult, createEnvelope, createEvaluationResult, createFinding, createPostCallResult, createPostDecision, createPreDecision, createPrincipal, deepFreeze, defaultSuccessCheck, evaluateExpression, expandMessage, fnmatch, fromYaml, fromYamlString, loadBundle, loadBundleString, reload, run, validateOperators };