@grindfree/guard 0.0.0-stage → 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 GrindFree / Rob
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,125 @@
-# Temporary Holding Version
+# @grindfree/guard
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+Drop-in guards that screen **[GrindFree](https://grindfree.net)** x402 agent-security APIs **before** an agent acts, then enforce `allow | review | deny`. Payments use the **caller’s** Base USDC wallet via the official [`@x402/fetch`](https://www.npmjs.com/package/@x402/fetch) / Python `x402` clients. This repo never ships or accepts GrindFree keys.
+
+| Service | Endpoint | Price | What it checks |
+|---|---|---|---|
+| **PromptShield** | `POST https://promptshield.grindfree.net/v1/screen` · `/v1/clean` | $0.002 | Prompt-injection screen + HTML→LLM clean text |
+| **CrawlSafe** | `POST https://crawlsafe.grindfree.net/v1/check` | $0.002 | robots.txt / X-Robots-Tag crawl gate (not malware scanning) |
+| **ToolGuard** | `POST https://toolguard.grindfree.net/v1/evaluate` | $0.002 | Pre-tool-call `allow \| review \| deny` vs owner policy |
+| **CommandGuard** | `POST https://commandguard.grindfree.net/v1/command` · `/v1/sql` | $0.001 | Shell + SQL check: `allow \| warn \| block` |
+| **MemoryGuard** | `POST https://memoryguard.grindfree.net/v1/screen` | $0.002 | Content before it is written to agent memory |
+| **WireShield** | `POST https://wireshield.grindfree.net/v1/scan` | $0.002 | Outbound leak check on agent output |
+| **DocShield** | `POST https://docshield.grindfree.net/v1/scan` | $0.004 | Hidden instructions in PDF / Office / HTML / Markdown |
+
+Network: Base (`eip155:8453`). The remote API is advisory — **your adapter must enforce the decision**. This package does that: `deny` / `block` / high risk throws `GuardDenied` and does not run the action; `review` / `warn` / medium risk throws `GuardReviewRequired` unless you set `onReview: "allow"`. Transport failures **fail closed** (`onError: "deny"` by default).
+
+Also available: the MCP server [`@grindfree/agent-security-mcp`](https://github.com/ronin93/grindfree-agent-security) (`npx -y @grindfree/agent-security-mcp`).
+
+Contact: [rob@grindfree.net](mailto:rob@grindfree.net) · [@grindfreelabs](https://x.com/grindfreelabs)
+
+---
+
+## Install
+
+```bash
+npm i @grindfree/guard
+# until the npm publish is approved, install from git:
+# npm i github:ronin93/grindfree-guard
+```
+
+```bash
+pip install 'grindfree-guard[x402]'
+# until PyPI is published: pip install -e 'python/[x402]'
+```
+
+Set the **caller’s** funded Base USDC key (never commit it):
+
+```bash
+export X402_PRIVATE_KEY=0xYOUR_BASE_USDC_PRIVATE_KEY
+# PRIVATE_KEY and EVM_PRIVATE_KEY are also accepted
+```
+
+## Quickstart (TypeScript)
+
+```ts
+import { createGuard, GuardDenied, GuardReviewRequired } from "@grindfree/guard";
+
+const guard = createGuard({
+  policy: { allow_tools: ["http.fetch"], allow_hosts: ["api.example.com"], require_https: true },
+});
+
+const { value } = await guard.guardToolCall(
+  { tool: "http.fetch", destination: { host: "api.example.com", scheme: "https", port: 443 }, arg_classes: ["url"] },
+  () => fetch("https://api.example.com/items").then((r) => r.json()),
+);
+
+// Shell: CommandGuard runs first. A wipe like `rm -rf $HOME` throws GuardDenied and is not executed.
+await guard.guardCommand({ command: "ls -la" }, () => runShell("ls -la"));
+```
+
+`createGuard({ fetch })` (JS) or `create_guard(post=...)` (Python) injects a mock for tests — unit tests in this repo never make a funded call.
+
+### Verdicts
+
+| Service result | Normalized `verdict` | Default handling |
+|---|---|---|
+| ToolGuard `allow`; CommandGuard `allow`; PromptShield `low`; CrawlSafe `crawl_allowed: true` | `allow` | run the action |
+| ToolGuard `review`; CommandGuard `warn`; PromptShield `medium`; Memory/Wire/Doc `review` | `review` | throw `GuardReviewRequired` (or set `onReview: "allow"` / `"deny"` / a callback) |
+| ToolGuard `deny`; CommandGuard `block`; PromptShield `high`; CrawlSafe not allowed; Memory/Wire/Doc `block` | `deny` | throw `GuardDenied`, do not run the action |
+| Timeout / HTTP error | (fail closed) | throw `GuardDenied` unless `onError: "throw"` or `"allow"` |
+
+## Framework examples
+
+Copy-paste starters (wallet still comes from `X402_PRIVATE_KEY`):
+
+- [`examples/basic.ts`](examples/basic.ts) — `guardToolCall` + `guardCommand`
+- [`examples/langchain-js/guard-tools.ts`](examples/langchain-js/guard-tools.ts) — wrap LangChain JS tools
+- [`examples/langchain-py/guard_tools.py`](examples/langchain-py/guard_tools.py) — LangChain Python wrapper + callback
+- [`examples/openai-agents/guardrails.ts`](examples/openai-agents/guardrails.ts) — OpenAI Agents SDK input/output guardrails
+- [`examples/mcp-client/wrap-mcp.ts`](examples/mcp-client/wrap-mcp.ts) — wrap `client.callTool` (CommandGuard for shell/SQL tools, ToolGuard otherwise)
+
+```ts
+import { wrapMcpClient } from "@grindfree/guard";
+const client = wrapMcpClient(mcpClient, { policy: { allow_tools: ["mcp.search"] } });
+// Shell/SQL-named tools go through CommandGuard; everything else through ToolGuard.
+```
+
+Python twin (`guard_tool_call`, `guard_command`, `require_safe_prompt`, …) lives in [`python/`](python/).
+
+## API (JS)
+
+```ts
+const guard = createGuard({
+  privateKey,          // optional; otherwise env
+  fetch,               // optional mock / pre-wrapped paid fetch
+  policy,              // default owner policy
+  onReview: "throw",   // or "allow" | "deny" | async (d) => "allow"
+  onError: "deny",     // or "throw" | "allow"
+  timeoutMs: 15_000,
+});
+
+await guard.guardToolCall(call, fn);
+guard.wrapTool(name, fn, classify?);
+await guard.guardCommand({ command }, fn);
+await guard.guardSql({ sql }, fn);
+await guard.requireSafePrompt({ content, format });
+await guard.requireCrawlAllowed({ url });
+await guard.requireSafeMemory({ content, source });
+await guard.requireSafeOutput({ content, format });
+await guard.requireSafeDocument({ content, format });
+// plus evaluateTool / checkCommand / screenPrompt / … for inspect-only
+```
+
+## Honest limits
+
+- Heuristic / policy layers, not a full security program.
+- CrawlSafe is not malware, phishing, or legal advice.
+- Deterministic rule packs can miss novel phrasing. Decisions are advisory at the API; **this library enforces them in-process** and cannot stop a caller who bypasses it.
+- DocShield parses structure and text; it does not OCR images. Legacy `.doc` / `.xls` / `.ppt` return 415 and are not charged.
+- Missing ToolGuard policy → `review`.
+- Unit tests mock payment. Do not point tests at the live paid endpoints without a separate spend approval.
+
+## License
+
+MIT — see [LICENSE](./LICENSE).

package/dist/client.d.ts

@@ -0,0 +1,18 @@
+export type PaidFetch = typeof fetch;
+export type ClientOptions = {
+    /** Caller wallet. Falls back to X402_PRIVATE_KEY, PRIVATE_KEY, or EVM_PRIVATE_KEY. */
+    privateKey?: string;
+    /**
+     * Injected fetch. Use this in tests (mocked, never pays) or to supply a
+     * pre-wrapped x402 fetch. When set, no private key is read or required.
+     */
+    fetch?: PaidFetch;
+    timeoutMs?: number;
+};
+export declare function readPrivateKey(explicit?: string): string | undefined;
+export declare function createPaidFetch(opts?: ClientOptions): PaidFetch;
+export declare function postJson(paidFetch: PaidFetch, url: string, body: unknown, opts?: {
+    timeoutMs?: number;
+    service: string;
+}): Promise<Record<string, unknown>>;
+//# sourceMappingURL=client.d.ts.map

package/dist/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AASA,MAAM,MAAM,SAAS,GAAG,OAAO,KAAK,CAAC;AAErC,MAAM,MAAM,aAAa,GAAG;IAC1B,sFAAsF;IACtF,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;OAGG;IACH,KAAK,CAAC,EAAE,SAAS,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,wBAAgB,cAAc,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAEpE;AAED,wBAAgB,eAAe,CAAC,IAAI,GAAE,aAAkB,GAAG,SAAS,CAenE;AAED,wBAAsB,QAAQ,CAC5B,SAAS,EAAE,SAAS,EACpB,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,OAAO,EACb,IAAI,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAA2B,GACrE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAoClC"}

package/dist/client.js

@@ -0,0 +1,65 @@
+import { wrapFetchWithPaymentFromConfig } from "@x402/fetch";
+import { ExactEvmScheme } from "@x402/evm";
+import { privateKeyToAccount } from "viem/accounts";
+import { GuardConfigError, GuardError } from "./errors.js";
+import { NETWORK } from "./services.js";
+const KEY_RE = /^0x[0-9a-fA-F]{64}$/;
+const DEFAULT_TIMEOUT_MS = 15_000;
+export function readPrivateKey(explicit) {
+    return explicit || process.env.X402_PRIVATE_KEY || process.env.PRIVATE_KEY || process.env.EVM_PRIVATE_KEY;
+}
+export function createPaidFetch(opts = {}) {
+    if (opts.fetch)
+        return opts.fetch;
+    const pk = readPrivateKey(opts.privateKey);
+    if (!pk) {
+        throw new GuardConfigError("Missing X402_PRIVATE_KEY (or PRIVATE_KEY / EVM_PRIVATE_KEY). Set the caller's Base USDC wallet key. GrindFree never supplies keys. For tests, pass { fetch } with a mock.");
+    }
+    if (!KEY_RE.test(pk)) {
+        throw new GuardConfigError("X402_PRIVATE_KEY / PRIVATE_KEY / EVM_PRIVATE_KEY must be 0x + 64 hex characters (caller wallet only).");
+    }
+    const account = privateKeyToAccount(pk);
+    return wrapFetchWithPaymentFromConfig(fetch, {
+        schemes: [{ network: NETWORK, client: new ExactEvmScheme(account) }],
+    });
+}
+export async function postJson(paidFetch, url, body, opts = { service: "unknown" }) {
+    const timeoutMs = opts.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), timeoutMs);
+    let res;
+    try {
+        res = await paidFetch(url, {
+            method: "POST",
+            headers: { "content-type": "application/json", accept: "application/json" },
+            body: JSON.stringify(body ?? {}),
+            signal: controller.signal,
+        });
+    }
+    catch (err) {
+        const aborted = err instanceof Error && err.name === "AbortError";
+        throw new GuardError(aborted ? `Request timed out after ${timeoutMs}ms` : err instanceof Error ? err.message : String(err), {
+            service: opts.service,
+        });
+    }
+    finally {
+        clearTimeout(timer);
+    }
+    const text = await res.text();
+    let json;
+    try {
+        json = text ? JSON.parse(text) : {};
+    }
+    catch {
+        json = { raw: text.slice(0, 2000) };
+    }
+    if (!res.ok) {
+        throw new GuardError(`${opts.service} HTTP ${res.status}`, {
+            service: opts.service,
+            status: res.status,
+            body: json,
+        });
+    }
+    return json;
+}
+//# sourceMappingURL=client.js.map

package/dist/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,8BAA8B,EAAE,MAAM,aAAa,CAAC;AAC7D,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC3D,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAExC,MAAM,MAAM,GAAG,qBAAqB,CAAC;AACrC,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAelC,MAAM,UAAU,cAAc,CAAC,QAAiB;IAC9C,OAAO,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;AAC5G,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,OAAsB,EAAE;IACtD,IAAI,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC,KAAK,CAAC;IAClC,MAAM,EAAE,GAAG,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC3C,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,MAAM,IAAI,gBAAgB,CACxB,2KAA2K,CAC5K,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,gBAAgB,CAAC,uGAAuG,CAAC,CAAC;IACtI,CAAC;IACD,MAAM,OAAO,GAAG,mBAAmB,CAAC,EAAmB,CAAC,CAAC;IACzD,OAAO,8BAA8B,CAAC,KAAK,EAAE;QAC3C,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,cAAc,CAAC,OAAO,CAAC,EAAE,CAAC;KACrE,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,SAAoB,EACpB,GAAW,EACX,IAAa,EACb,OAAgD,EAAE,OAAO,EAAE,SAAS,EAAE;IAEtE,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,kBAAkB,CAAC;IACvD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;IAC9D,IAAI,GAAa,CAAC;IAClB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE;YACzB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,EAAE,kBAAkB,EAAE;YAC3E,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,EAAE,CAAC;YAChC,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,CAAC;QAClE,MAAM,IAAI,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,2BAA2B,SAAS,IAAI,CAAC,CAAC,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;YAC1H,OAAO,EAAE,IAAI,CAAC,OAAO;SACtB,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAC9B,IAAI,IAA6B,CAAC;IAClC,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAA6B,CAAC,CAAC,CAAC,EAAE,CAAC;IACnE,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC;IACtC,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,UAAU,CAAC,GAAG,IAAI,CAAC,OAAO,SAAS,GAAG,CAAC,MAAM,EAAE,EAAE;YACzD,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,IAAI,EAAE,IAAI;SACX,CAAC,CAAC;IACL,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/decisions.d.ts

@@ -0,0 +1,35 @@
+import type { ServiceName } from "./services.js";
+/** Unified verdict used by every GrindFree check. */
+export type Verdict = "allow" | "review" | "deny";
+export type ReviewMode = "throw" | "allow" | "deny";
+export type ErrorMode = "deny" | "throw" | "allow";
+export interface NormalizedDecision {
+    /** allow = proceed; review = pause for a human (CommandGuard "warn", medium risk); deny = do not proceed (block / high risk). */
+    verdict: Verdict;
+    service: ServiceName;
+    endpoint: string;
+    /** Raw service decision when present (allow/review/deny/warn/block). */
+    rawDecision?: string;
+    /** PromptShield risk when present. */
+    risk?: "low" | "medium" | "high";
+    reasons: string[];
+    findings: unknown[];
+    advice?: string;
+    sanitized?: string;
+    safeText?: string;
+    crawlAllowed?: boolean;
+    raw: Record<string, unknown>;
+}
+export type EnforceOptions = {
+    onReview?: ReviewMode | ((d: NormalizedDecision) => ReviewMode | Promise<ReviewMode>);
+    onError?: ErrorMode;
+};
+export declare function normalizeDecision(service: ServiceName, endpoint: string, raw: Record<string, unknown>): NormalizedDecision;
+/**
+ * Apply allow/review/deny policy. Deny and (by default) review throw.
+ * Timeouts and transport errors should be turned into GuardError first,
+ * then passed through enforceError.
+ */
+export declare function enforce(decision: NormalizedDecision, opts?: EnforceOptions): Promise<NormalizedDecision>;
+export declare function enforceError(err: unknown, service: string, opts?: EnforceOptions): never;
+//# sourceMappingURL=decisions.d.ts.map

package/dist/decisions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"decisions.d.ts","sourceRoot":"","sources":["../src/decisions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAGjD,qDAAqD;AACrD,MAAM,MAAM,OAAO,GAAG,OAAO,GAAG,QAAQ,GAAG,MAAM,CAAC;AAElD,MAAM,MAAM,UAAU,GAAG,OAAO,GAAG,OAAO,GAAG,MAAM,CAAC;AACpD,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG,OAAO,GAAG,OAAO,CAAC;AAEnD,MAAM,WAAW,kBAAkB;IACjC,iIAAiI;IACjI,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,WAAW,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,wEAAwE;IACxE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,sCAAsC;IACtC,IAAI,CAAC,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;IACjC,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,QAAQ,EAAE,OAAO,EAAE,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC9B;AAED,MAAM,MAAM,cAAc,GAAG;IAC3B,QAAQ,CAAC,EAAE,UAAU,GAAG,CAAC,CAAC,CAAC,EAAE,kBAAkB,KAAK,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC;IACtF,OAAO,CAAC,EAAE,SAAS,CAAC;CACrB,CAAC;AAEF,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,WAAW,EACpB,QAAQ,EAAE,MAAM,EAChB,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC3B,kBAAkB,CAoCpB;AA4CD;;;;GAIG;AACH,wBAAsB,OAAO,CAC3B,QAAQ,EAAE,kBAAkB,EAC5B,IAAI,GAAE,cAAmB,GACxB,OAAO,CAAC,kBAAkB,CAAC,CAQ7B;AAED,wBAAgB,YAAY,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,GAAE,cAAmB,GAAG,KAAK,CAyB5F"}

package/dist/decisions.js

@@ -0,0 +1,131 @@
+import { GuardDenied, GuardError, GuardReviewRequired } from "./errors.js";
+export function normalizeDecision(service, endpoint, raw) {
+    const findings = Array.isArray(raw.findings) ? raw.findings : [];
+    const reasons = collectReasons(raw, findings);
+    const sanitized = asString(raw.sanitized);
+    const safeText = asString(raw.safe_text) ?? asString(raw.safeText);
+    const advice = asString(raw.advice);
+    const rawDecision = typeof raw.decision === "string" ? raw.decision.toLowerCase() : undefined;
+    const risk = asRisk(raw.risk);
+    let verdict;
+    if (service === "promptshield" && endpoint === "screen") {
+        verdict = risk === "high" ? "deny" : risk === "medium" ? "review" : "allow";
+    }
+    else if (service === "crawlsafe") {
+        const allowed = raw.crawl_allowed === true || raw.crawlAllowed === true;
+        verdict = allowed ? "allow" : "deny";
+    }
+    else {
+        verdict = mapRawDecision(rawDecision);
+    }
+    const crawlAllowed = service === "crawlsafe" ? raw.crawl_allowed === true || raw.crawlAllowed === true : undefined;
+    return {
+        verdict,
+        service,
+        endpoint,
+        rawDecision,
+        risk,
+        reasons,
+        findings,
+        advice,
+        sanitized,
+        safeText,
+        crawlAllowed,
+        raw,
+    };
+}
+function mapRawDecision(raw) {
+    if (!raw)
+        return "review";
+    if (raw === "allow")
+        return "allow";
+    if (raw === "review" || raw === "warn")
+        return "review";
+    if (raw === "deny" || raw === "block")
+        return "deny";
+    return "review";
+}
+function collectReasons(raw, findings) {
+    const out = [];
+    if (Array.isArray(raw.reasons)) {
+        for (const r of raw.reasons) {
+            if (typeof r === "string")
+                out.push(r);
+            else if (r && typeof r === "object" && "reason" in r && typeof r.reason === "string") {
+                out.push(r.reason);
+            }
+        }
+    }
+    for (const f of findings) {
+        if (f && typeof f === "object") {
+            const rec = f;
+            const rule = typeof rec.rule === "string" ? rec.rule : undefined;
+            const reason = typeof rec.reason === "string" ? rec.reason : undefined;
+            if (rule && reason)
+                out.push(`${rule}: ${reason}`);
+            else if (rule)
+                out.push(rule);
+            else if (reason)
+                out.push(reason);
+        }
+        else if (typeof f === "string") {
+            out.push(f);
+        }
+    }
+    return out;
+}
+function asString(v) {
+    return typeof v === "string" ? v : undefined;
+}
+function asRisk(v) {
+    if (v === "low" || v === "medium" || v === "high")
+        return v;
+    return undefined;
+}
+/**
+ * Apply allow/review/deny policy. Deny and (by default) review throw.
+ * Timeouts and transport errors should be turned into GuardError first,
+ * then passed through enforceError.
+ */
+export async function enforce(decision, opts = {}) {
+    if (decision.verdict === "allow")
+        return decision;
+    if (decision.verdict === "deny")
+        throw new GuardDenied(decision);
+    const mode = await resolveReview(opts.onReview ?? "throw", decision);
+    if (mode === "allow")
+        return decision;
+    if (mode === "deny")
+        throw new GuardDenied(decision, `GrindFree ${decision.service} review treated as deny`);
+    throw new GuardReviewRequired(decision);
+}
+export function enforceError(err, service, opts = {}) {
+    const mode = opts.onError ?? "deny";
+    if (err instanceof GuardDenied || err instanceof GuardReviewRequired)
+        throw err;
+    const wrapped = err instanceof GuardError
+        ? err
+        : new GuardError(err instanceof Error ? err.message : String(err), { service });
+    if (mode === "throw")
+        throw wrapped;
+    if (mode === "allow") {
+        // Caller asked to proceed on transport failure. Still throw so they can
+        // distinguish this path if they catch GuardError; use mode "allow" only
+        // via tryGuard helpers that swallow this.
+        throw wrapped;
+    }
+    throw new GuardDenied({
+        verdict: "deny",
+        service: service,
+        endpoint: "error",
+        reasons: [wrapped.message],
+        findings: [],
+        raw: { error: wrapped.message, status: wrapped.status },
+    }, `GrindFree ${service} failed closed: ${wrapped.message}`);
+}
+async function resolveReview(onReview, decision) {
+    if (typeof onReview === "function")
+        return onReview(decision);
+    return onReview;
+}
+//# sourceMappingURL=decisions.js.map

package/dist/decisions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"decisions.js","sourceRoot":"","sources":["../src/decisions.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AA+B3E,MAAM,UAAU,iBAAiB,CAC/B,OAAoB,EACpB,QAAgB,EAChB,GAA4B;IAE5B,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;IACjE,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC9C,MAAM,SAAS,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAC1C,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACnE,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACpC,MAAM,WAAW,GAAG,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9F,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAE9B,IAAI,OAAgB,CAAC;IACrB,IAAI,OAAO,KAAK,cAAc,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACxD,OAAO,GAAG,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC;IAC9E,CAAC;SAAM,IAAI,OAAO,KAAK,WAAW,EAAE,CAAC;QACnC,MAAM,OAAO,GAAG,GAAG,CAAC,aAAa,KAAK,IAAI,IAAI,GAAG,CAAC,YAAY,KAAK,IAAI,CAAC;QACxE,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;IACvC,CAAC;SAAM,CAAC;QACN,OAAO,GAAG,cAAc,CAAC,WAAW,CAAC,CAAC;IACxC,CAAC;IAED,MAAM,YAAY,GAChB,OAAO,KAAK,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,KAAK,IAAI,IAAI,GAAG,CAAC,YAAY,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IAEhG,OAAO;QACL,OAAO;QACP,OAAO;QACP,QAAQ;QACR,WAAW;QACX,IAAI;QACJ,OAAO;QACP,QAAQ;QACR,MAAM;QACN,SAAS;QACT,QAAQ;QACR,YAAY;QACZ,GAAG;KACJ,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,GAAY;IAClC,IAAI,CAAC,GAAG;QAAE,OAAO,QAAQ,CAAC;IAC1B,IAAI,GAAG,KAAK,OAAO;QAAE,OAAO,OAAO,CAAC;IACpC,IAAI,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,MAAM;QAAE,OAAO,QAAQ,CAAC;IACxD,IAAI,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,OAAO;QAAE,OAAO,MAAM,CAAC;IACrD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,cAAc,CAAC,GAA4B,EAAE,QAAmB;IACvE,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/B,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;YAC5B,IAAI,OAAO,CAAC,KAAK,QAAQ;gBAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;iBAClC,IAAI,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,QAAQ,IAAI,CAAC,IAAI,OAAQ,CAAyB,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAC9G,GAAG,CAAC,IAAI,CAAE,CAAwB,CAAC,MAAM,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC;IACH,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC/B,MAAM,GAAG,GAAG,CAA4B,CAAC;YACzC,MAAM,IAAI,GAAG,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACjE,MAAM,MAAM,GAAG,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YACvE,IAAI,IAAI,IAAI,MAAM;gBAAE,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,KAAK,MAAM,EAAE,CAAC,CAAC;iBAC9C,IAAI,IAAI;gBAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;iBACzB,IAAI,MAAM;gBAAE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACpC,CAAC;aAAM,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;YACjC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,QAAQ,CAAC,CAAU;IAC1B,OAAO,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/C,CAAC;AAED,SAAS,MAAM,CAAC,CAAU;IACxB,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,MAAM;QAAE,OAAO,CAAC,CAAC;IAC5D,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,QAA4B,EAC5B,OAAuB,EAAE;IAEzB,IAAI,QAAQ,CAAC,OAAO,KAAK,OAAO;QAAE,OAAO,QAAQ,CAAC;IAClD,IAAI,QAAQ,CAAC,OAAO,KAAK,MAAM;QAAE,MAAM,IAAI,WAAW,CAAC,QAAQ,CAAC,CAAC;IAEjE,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,QAAQ,IAAI,OAAO,EAAE,QAAQ,CAAC,CAAC;IACrE,IAAI,IAAI,KAAK,OAAO;QAAE,OAAO,QAAQ,CAAC;IACtC,IAAI,IAAI,KAAK,MAAM;QAAE,MAAM,IAAI,WAAW,CAAC,QAAQ,EAAE,aAAa,QAAQ,CAAC,OAAO,yBAAyB,CAAC,CAAC;IAC7G,MAAM,IAAI,mBAAmB,CAAC,QAAQ,CAAC,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,GAAY,EAAE,OAAe,EAAE,OAAuB,EAAE;IACnF,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,IAAI,MAAM,CAAC;IACpC,IAAI,GAAG,YAAY,WAAW,IAAI,GAAG,YAAY,mBAAmB;QAAE,MAAM,GAAG,CAAC;IAChF,MAAM,OAAO,GACX,GAAG,YAAY,UAAU;QACvB,CAAC,CAAC,GAAG;QACL,CAAC,CAAC,IAAI,UAAU,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IACpF,IAAI,IAAI,KAAK,OAAO;QAAE,MAAM,OAAO,CAAC;IACpC,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACrB,wEAAwE;QACxE,wEAAwE;QACxE,0CAA0C;QAC1C,MAAM,OAAO,CAAC;IAChB,CAAC;IACD,MAAM,IAAI,WAAW,CACnB;QACE,OAAO,EAAE,MAAM;QACf,OAAO,EAAE,OAAsB;QAC/B,QAAQ,EAAE,OAAO;QACjB,OAAO,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC;QAC1B,QAAQ,EAAE,EAAE;QACZ,GAAG,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE;KACxD,EACD,aAAa,OAAO,mBAAmB,OAAO,CAAC,OAAO,EAAE,CACzD,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,QAAoF,EACpF,QAA4B;IAE5B,IAAI,OAAO,QAAQ,KAAK,UAAU;QAAE,OAAO,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC9D,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/errors.d.ts

@@ -0,0 +1,31 @@
+import type { NormalizedDecision } from "./decisions.js";
+export declare class GuardConfigError extends Error {
+    readonly code = "GUARD_CONFIG";
+    constructor(message: string);
+}
+export declare class GuardError extends Error {
+    readonly code = "GUARD_ERROR";
+    readonly status?: number;
+    readonly service: string;
+    readonly body?: unknown;
+    constructor(message: string, opts: {
+        service: string;
+        status?: number;
+        body?: unknown;
+    });
+}
+export declare class GuardDenied extends Error {
+    readonly code = "GUARD_DENIED";
+    readonly verdict: "deny";
+    readonly service: string;
+    readonly decision: NormalizedDecision;
+    constructor(decision: NormalizedDecision, message?: string);
+}
+export declare class GuardReviewRequired extends Error {
+    readonly code = "GUARD_REVIEW";
+    readonly verdict: "review";
+    readonly service: string;
+    readonly decision: NormalizedDecision;
+    constructor(decision: NormalizedDecision, message?: string);
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAEzD,qBAAa,gBAAiB,SAAQ,KAAK;IACzC,QAAQ,CAAC,IAAI,kBAAkB;gBACnB,OAAO,EAAE,MAAM;CAI5B;AAED,qBAAa,UAAW,SAAQ,KAAK;IACnC,QAAQ,CAAC,IAAI,iBAAiB;IAC9B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;gBACZ,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,OAAO,CAAA;KAAE;CAOxF;AAED,qBAAa,WAAY,SAAQ,KAAK;IACpC,QAAQ,CAAC,IAAI,kBAAkB;IAC/B,QAAQ,CAAC,OAAO,EAAG,MAAM,CAAU;IACnC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC;gBAC1B,QAAQ,EAAE,kBAAkB,EAAE,OAAO,CAAC,EAAE,MAAM;CAM3D;AAED,qBAAa,mBAAoB,SAAQ,KAAK;IAC5C,QAAQ,CAAC,IAAI,kBAAkB;IAC/B,QAAQ,CAAC,OAAO,EAAG,QAAQ,CAAU;IACrC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC;gBAC1B,QAAQ,EAAE,kBAAkB,EAAE,OAAO,CAAC,EAAE,MAAM;CAM3D"}

package/dist/errors.js

@@ -0,0 +1,49 @@
+export class GuardConfigError extends Error {
+    code = "GUARD_CONFIG";
+    constructor(message) {
+        super(message);
+        this.name = "GuardConfigError";
+    }
+}
+export class GuardError extends Error {
+    code = "GUARD_ERROR";
+    status;
+    service;
+    body;
+    constructor(message, opts) {
+        super(message);
+        this.name = "GuardError";
+        this.service = opts.service;
+        this.status = opts.status;
+        this.body = opts.body;
+    }
+}
+export class GuardDenied extends Error {
+    code = "GUARD_DENIED";
+    verdict = "deny";
+    service;
+    decision;
+    constructor(decision, message) {
+        super(message ?? defaultMessage(decision, "denied"));
+        this.name = "GuardDenied";
+        this.service = decision.service;
+        this.decision = decision;
+    }
+}
+export class GuardReviewRequired extends Error {
+    code = "GUARD_REVIEW";
+    verdict = "review";
+    service;
+    decision;
+    constructor(decision, message) {
+        super(message ?? defaultMessage(decision, "needs review"));
+        this.name = "GuardReviewRequired";
+        this.service = decision.service;
+        this.decision = decision;
+    }
+}
+function defaultMessage(d, kind) {
+    const reason = d.reasons[0] ?? d.advice ?? d.rawDecision ?? d.risk ?? kind;
+    return `GrindFree ${d.service} ${kind}: ${reason}`;
+}
+//# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAEA,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IAChC,IAAI,GAAG,cAAc,CAAC;IAC/B,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;IACjC,CAAC;CACF;AAED,MAAM,OAAO,UAAW,SAAQ,KAAK;IAC1B,IAAI,GAAG,aAAa,CAAC;IACrB,MAAM,CAAU;IAChB,OAAO,CAAS;IAChB,IAAI,CAAW;IACxB,YAAY,OAAe,EAAE,IAA0D;QACrF,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,YAAY,CAAC;QACzB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC5B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;IACxB,CAAC;CACF;AAED,MAAM,OAAO,WAAY,SAAQ,KAAK;IAC3B,IAAI,GAAG,cAAc,CAAC;IACtB,OAAO,GAAG,MAAe,CAAC;IAC1B,OAAO,CAAS;IAChB,QAAQ,CAAqB;IACtC,YAAY,QAA4B,EAAE,OAAgB;QACxD,KAAK,CAAC,OAAO,IAAI,cAAc,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;QACrD,IAAI,CAAC,IAAI,GAAG,aAAa,CAAC;QAC1B,IAAI,CAAC,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;QAChC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;CACF;AAED,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IACnC,IAAI,GAAG,cAAc,CAAC;IACtB,OAAO,GAAG,QAAiB,CAAC;IAC5B,OAAO,CAAS;IAChB,QAAQ,CAAqB;IACtC,YAAY,QAA4B,EAAE,OAAgB;QACxD,KAAK,CAAC,OAAO,IAAI,cAAc,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC,CAAC;QAC3D,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;QAClC,IAAI,CAAC,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;QAChC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;CACF;AAED,SAAS,cAAc,CAAC,CAAqB,EAAE,IAAY;IACzD,MAAM,MAAM,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC;IAC3E,OAAO,aAAa,CAAC,CAAC,OAAO,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;AACrD,CAAC"}

package/dist/guard.d.ts

@@ -0,0 +1,134 @@
+import { type ClientOptions } from "./client.js";
+import { type EnforceOptions, type NormalizedDecision } from "./decisions.js";
+export type ToolCallInput = {
+    tool: string;
+    destination?: {
+        host?: string;
+        scheme?: string;
+        port?: number;
+        path_class?: string;
+    };
+    arg_classes?: string[];
+    taint?: string[];
+    secret_labels?: string[];
+    policy?: Record<string, unknown>;
+    policy_hash?: string;
+    rule_pack?: string;
+};
+export type CommandInput = {
+    command: string;
+    shell?: "bash" | "sh" | "zsh" | "fish" | "powershell" | "cmd";
+    policy?: Record<string, unknown>;
+};
+export type SqlInput = {
+    sql: string;
+    dialect?: "postgres" | "mysql" | "mariadb" | "sqlite" | "mssql" | "snowflake" | "bigquery" | "other";
+    policy?: Record<string, unknown>;
+};
+export type PromptInput = {
+    content: string;
+    format?: "text" | "html";
+};
+export type CrawlInput = {
+    url: string;
+    user_agent?: string;
+    check_page?: boolean;
+};
+export type MemoryInput = {
+    content?: string;
+    source?: "user" | "assistant" | "tool" | "web" | "document" | "email" | "retrieved" | "mcp" | "unknown";
+    memory_type?: "fact" | "preference" | "instruction" | "episodic" | "summary";
+    entries?: Array<{
+        key?: string;
+        content: string;
+        source?: string;
+    }>;
+    policy?: Record<string, unknown>;
+};
+export type OutputInput = {
+    content: string;
+    format?: "markdown" | "text" | "html" | "json";
+    allowed_domains?: string[];
+    canaries?: string[];
+    system_prompt?: string;
+    policy?: Record<string, unknown>;
+};
+export type DocumentInput = {
+    content?: string;
+    content_base64?: string;
+    format?: "html" | "markdown" | "text";
+    filename?: string;
+    include_text?: boolean;
+    policy?: Record<string, unknown>;
+};
+export type GuardOptions = ClientOptions & EnforceOptions & {
+    /** Default ToolGuard / CommandGuard policy sent when a call omits one. */
+    policy?: Record<string, unknown>;
+};
+export type GuardedResult<T> = {
+    value: T;
+    decision: NormalizedDecision;
+};
+export declare class GrindFreeGuard {
+    readonly options: GuardOptions;
+    private readonly paidFetch;
+    constructor(options?: GuardOptions);
+    private enforceOpts;
+    private call;
+    private callAndEnforce;
+    /** ToolGuard evaluate only (no enforcement). */
+    evaluateTool(input: ToolCallInput): Promise<NormalizedDecision>;
+    /**
+     * Screen a tool call with ToolGuard, enforce allow/review/deny, then run `fn`.
+     * On deny (or review with default onReview=throw) `fn` is not called.
+     */
+    guardToolCall<T>(input: ToolCallInput, fn: () => Promise<T> | T): Promise<GuardedResult<T>>;
+    /**
+     * Wrap any tool function so ToolGuard runs first.
+     * `classify` maps arguments to a ToolGuard body; defaults to `{ tool: name }`.
+     */
+    wrapTool<Args extends unknown[], R>(name: string, fn: (...args: Args) => Promise<R> | R, classify?: (...args: Args) => ToolCallInput | Promise<ToolCallInput>): (...args: Args) => Promise<R>;
+    checkCommand(input: CommandInput): Promise<NormalizedDecision>;
+    guardCommand<T>(input: CommandInput, fn: () => Promise<T> | T): Promise<GuardedResult<T>>;
+    checkSql(input: SqlInput): Promise<NormalizedDecision>;
+    guardSql<T>(input: SqlInput, fn: () => Promise<T> | T): Promise<GuardedResult<T>>;
+    screenPrompt(input: PromptInput): Promise<NormalizedDecision>;
+    /**
+     * Screen untrusted text/HTML. Throws on high risk (deny). Returns sanitized
+     * text (or the original when the service did not supply one).
+     */
+    requireSafePrompt(input: PromptInput): Promise<{
+        text: string;
+        decision: NormalizedDecision;
+    }>;
+    cleanHtml(content: string): Promise<{
+        text: string;
+        raw: Record<string, unknown>;
+    }>;
+    checkCrawl(input: CrawlInput): Promise<NormalizedDecision>;
+    requireCrawlAllowed(input: CrawlInput): Promise<NormalizedDecision>;
+    screenMemory(input: MemoryInput): Promise<NormalizedDecision>;
+    requireSafeMemory(input: MemoryInput): Promise<{
+        text?: string;
+        decision: NormalizedDecision;
+    }>;
+    scanOutput(input: OutputInput): Promise<NormalizedDecision>;
+    requireSafeOutput(input: OutputInput): Promise<{
+        text: string;
+        decision: NormalizedDecision;
+    }>;
+    scanDocument(input: DocumentInput): Promise<NormalizedDecision>;
+    requireSafeDocument(input: DocumentInput): Promise<{
+        text?: string;
+        decision: NormalizedDecision;
+    }>;
+}
+export declare function createGuard(options?: GuardOptions): GrindFreeGuard;
+/** Convenience wrapper around `createGuard(...).guardToolCall`. */
+export declare function guardToolCall<T>(input: ToolCallInput, fn: () => Promise<T> | T, options?: GuardOptions): Promise<GuardedResult<T>>;
+/**
+ * Express/fetch-style middleware: evaluate an outbound tool described by
+ * `classify(request)` and only call `next` when the verdict allows it.
+ */
+export declare function createGuardMiddleware(options?: GuardOptions): <Req, Res>(classify: (req: Req) => ToolCallInput | Promise<ToolCallInput>, next: (req: Req) => Promise<Res> | Res, req: Req) => Promise<GuardedResult<Res>>;
+//# sourceMappingURL=guard.d.ts.map

package/dist/guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"guard.d.ts","sourceRoot":"","sources":["../src/guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAA6B,KAAK,aAAa,EAAkB,MAAM,aAAa,CAAC;AAC5F,OAAO,EAA4C,KAAK,cAAc,EAAE,KAAK,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAIxH,MAAM,MAAM,aAAa,GAAG;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACrF,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,KAAK,GAAG,MAAM,GAAG,YAAY,GAAG,KAAK,CAAC;IAC9D,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC,CAAC;AAEF,MAAM,MAAM,QAAQ,GAAG;IACrB,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,CAAC,EAAE,UAAU,GAAG,OAAO,GAAG,SAAS,GAAG,QAAQ,GAAG,OAAO,GAAG,WAAW,GAAG,UAAU,GAAG,OAAO,CAAC;IACrG,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;CAAE,CAAC;AAExE,MAAM,MAAM,UAAU,GAAG;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC;AAEpF,MAAM,MAAM,WAAW,GAAG;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,GAAG,WAAW,GAAG,MAAM,GAAG,KAAK,GAAG,UAAU,GAAG,OAAO,GAAG,WAAW,GAAG,KAAK,GAAG,SAAS,CAAC;IACxG,WAAW,CAAC,EAAE,MAAM,GAAG,YAAY,GAAG,aAAa,GAAG,UAAU,GAAG,SAAS,CAAC;IAC7E,OAAO,CAAC,EAAE,KAAK,CAAC;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACpE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,UAAU,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;IAC/C,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,GAAG,UAAU,GAAG,MAAM,CAAC;IACtC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG,aAAa,GACtC,cAAc,GAAG;IACf,0EAA0E;IAC1E,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC,CAAC;AAEJ,MAAM,MAAM,aAAa,CAAC,CAAC,IAAI;IAC7B,KAAK,EAAE,CAAC,CAAC;IACT,QAAQ,EAAE,kBAAkB,CAAC;CAC9B,CAAC;AAMF,qBAAa,cAAc;IACzB,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;IAC/B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAY;gBAE1B,OAAO,GAAE,YAAiB;IAKtC,OAAO,CAAC,WAAW;YAIL,IAAI;YAyBJ,cAAc;IAK5B,gDAAgD;IAChD,YAAY,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAK/D;;;OAGG;IACG,aAAa,CAAC,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;IAMjG;;;OAGG;IACH,QAAQ,CAAC,IAAI,SAAS,OAAO,EAAE,EAAE,CAAC,EAChC,IAAI,EAAE,MAAM,EACZ,EAAE,EAAE,CAAC,GAAG,IAAI,EAAE,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,EACrC,QAAQ,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,IAAI,KAAK,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC,GACnE,CAAC,GAAG,IAAI,EAAE,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC;IAQhC,YAAY,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAIxD,YAAY,CAAC,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;IAK/F,QAAQ,CAAC,KAAK,EAAE,QAAQ,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAIhD,QAAQ,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;IAKvF,YAAY,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAI7D;;;OAGG;IACG,iBAAiB,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,kBAAkB,CAAA;KAAE,CAAC;IAK9F,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC;IAezF,UAAU,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAIpD,mBAAmB,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAIzE,YAAY,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAIvD,iBAAiB,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,kBAAkB,CAAA;KAAE,CAAC;IAKrG,UAAU,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAIrD,iBAAiB,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,kBAAkB,CAAA;KAAE,CAAC;IAKpG,YAAY,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAIzD,mBAAmB,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,kBAAkB,CAAA;KAAE,CAAC;CAI1G;AAED,wBAAgB,WAAW,CAAC,OAAO,GAAE,YAAiB,GAAG,cAAc,CAEtE;AAED,mEAAmE;AACnE,wBAAgB,aAAa,CAAC,CAAC,EAC7B,KAAK,EAAE,aAAa,EACpB,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,EACxB,OAAO,GAAE,YAAiB,GACzB,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAE3B;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,GAAE,YAAiB,IAEpB,GAAG,EAAE,GAAG,EAChD,UAAU,CAAC,GAAG,EAAE,GAAG,KAAK,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC,EAC9D,MAAM,CAAC,GAAG,EAAE,GAAG,KAAK,OAAO,CAAC,GAAG,CAAC,GAAG,GAAG,EACtC,KAAK,GAAG,KACP,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAI/B"}

package/dist/guard.js

@@ -0,0 +1,159 @@
+import { createPaidFetch, postJson } from "./client.js";
+import { enforce, enforceError, normalizeDecision } from "./decisions.js";
+import { GuardDenied } from "./errors.js";
+import { serviceUrl } from "./services.js";
+function clean(obj) {
+    return Object.fromEntries(Object.entries(obj).filter(([, v]) => v !== undefined));
+}
+export class GrindFreeGuard {
+    options;
+    paidFetch;
+    constructor(options = {}) {
+        this.options = options;
+        this.paidFetch = createPaidFetch(options);
+    }
+    enforceOpts() {
+        return { onReview: this.options.onReview, onError: this.options.onError };
+    }
+    async call(service, endpoint, body) {
+        const url = serviceUrl(service, endpoint);
+        try {
+            const raw = await postJson(this.paidFetch, url, body, {
+                timeoutMs: this.options.timeoutMs,
+                service,
+            });
+            return normalizeDecision(service, endpoint, raw);
+        }
+        catch (err) {
+            if (this.options.onError === "allow") {
+                if (err instanceof GuardDenied)
+                    throw err;
+                const message = err instanceof Error ? err.message : String(err);
+                return {
+                    verdict: "allow",
+                    service,
+                    endpoint,
+                    reasons: [`transport failure allowed by onError=allow: ${message}`],
+                    findings: [],
+                    raw: { error: message },
+                };
+            }
+            enforceError(err, service, this.enforceOpts());
+        }
+    }
+    async callAndEnforce(service, endpoint, body) {
+        const decision = await this.call(service, endpoint, body);
+        return enforce(decision, this.enforceOpts());
+    }
+    /** ToolGuard evaluate only (no enforcement). */
+    evaluateTool(input) {
+        const body = clean({ ...input, policy: input.policy ?? this.options.policy });
+        return this.call("toolguard", "evaluate", body);
+    }
+    /**
+     * Screen a tool call with ToolGuard, enforce allow/review/deny, then run `fn`.
+     * On deny (or review with default onReview=throw) `fn` is not called.
+     */
+    async guardToolCall(input, fn) {
+        const decision = await this.callAndEnforce("toolguard", "evaluate", clean({ ...input, policy: input.policy ?? this.options.policy }));
+        const value = await fn();
+        return { value, decision };
+    }
+    /**
+     * Wrap any tool function so ToolGuard runs first.
+     * `classify` maps arguments to a ToolGuard body; defaults to `{ tool: name }`.
+     */
+    wrapTool(name, fn, classify) {
+        return async (...args) => {
+            const input = classify ? await classify(...args) : { tool: name };
+            const { value } = await this.guardToolCall({ ...input, tool: input.tool ?? name }, () => fn(...args));
+            return value;
+        };
+    }
+    checkCommand(input) {
+        return this.call("commandguard", "command", clean({ ...input, policy: input.policy ?? this.options.policy }));
+    }
+    async guardCommand(input, fn) {
+        const decision = await this.callAndEnforce("commandguard", "command", clean({ ...input, policy: input.policy ?? this.options.policy }));
+        return { value: await fn(), decision };
+    }
+    checkSql(input) {
+        return this.call("commandguard", "sql", clean({ ...input, policy: input.policy ?? this.options.policy }));
+    }
+    async guardSql(input, fn) {
+        const decision = await this.callAndEnforce("commandguard", "sql", clean({ ...input, policy: input.policy ?? this.options.policy }));
+        return { value: await fn(), decision };
+    }
+    screenPrompt(input) {
+        return this.call("promptshield", "screen", input);
+    }
+    /**
+     * Screen untrusted text/HTML. Throws on high risk (deny). Returns sanitized
+     * text (or the original when the service did not supply one).
+     */
+    async requireSafePrompt(input) {
+        const decision = await this.callAndEnforce("promptshield", "screen", input);
+        return { text: decision.sanitized ?? input.content, decision };
+    }
+    async cleanHtml(content) {
+        try {
+            const raw = await postJson(this.paidFetch, serviceUrl("promptshield", "clean"), { content }, {
+                timeoutMs: this.options.timeoutMs,
+                service: "promptshield",
+            });
+            return { text: typeof raw.text === "string" ? raw.text : "", raw };
+        }
+        catch (err) {
+            if (this.options.onError === "allow") {
+                return { text: content, raw: { error: err instanceof Error ? err.message : String(err) } };
+            }
+            enforceError(err, "promptshield", this.enforceOpts());
+        }
+    }
+    checkCrawl(input) {
+        return this.call("crawlsafe", "check", input);
+    }
+    async requireCrawlAllowed(input) {
+        return this.callAndEnforce("crawlsafe", "check", input);
+    }
+    screenMemory(input) {
+        return this.call("memoryguard", "screen", clean({ ...input, policy: input.policy ?? this.options.policy }));
+    }
+    async requireSafeMemory(input) {
+        const decision = await this.callAndEnforce("memoryguard", "screen", clean({ ...input, policy: input.policy ?? this.options.policy }));
+        return { text: decision.sanitized ?? input.content, decision };
+    }
+    scanOutput(input) {
+        return this.call("wireshield", "scan", clean({ ...input, policy: input.policy ?? this.options.policy }));
+    }
+    async requireSafeOutput(input) {
+        const decision = await this.callAndEnforce("wireshield", "scan", clean({ ...input, policy: input.policy ?? this.options.policy }));
+        return { text: decision.sanitized ?? input.content, decision };
+    }
+    scanDocument(input) {
+        return this.call("docshield", "scan", clean({ ...input, policy: input.policy ?? this.options.policy }));
+    }
+    async requireSafeDocument(input) {
+        const decision = await this.callAndEnforce("docshield", "scan", clean({ ...input, policy: input.policy ?? this.options.policy }));
+        return { text: decision.safeText ?? decision.sanitized ?? input.content, decision };
+    }
+}
+export function createGuard(options = {}) {
+    return new GrindFreeGuard(options);
+}
+/** Convenience wrapper around `createGuard(...).guardToolCall`. */
+export function guardToolCall(input, fn, options = {}) {
+    return createGuard(options).guardToolCall(input, fn);
+}
+/**
+ * Express/fetch-style middleware: evaluate an outbound tool described by
+ * `classify(request)` and only call `next` when the verdict allows it.
+ */
+export function createGuardMiddleware(options = {}) {
+    const guard = createGuard(options);
+    return async function grindfreeMiddleware(classify, next, req) {
+        const input = await classify(req);
+        return guard.guardToolCall(input, () => next(req));
+    };
+}
+//# sourceMappingURL=guard.js.map

package/dist/guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"guard.js","sourceRoot":"","sources":["../src/guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAsC,MAAM,aAAa,CAAC;AAC5F,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAgD,MAAM,gBAAgB,CAAC;AACxH,OAAO,EAAE,WAAW,EAAc,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,UAAU,EAAoB,MAAM,eAAe,CAAC;AAkE7D,SAAS,KAAK,CAAoC,GAAM;IACtD,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,CAAM,CAAC;AACzF,CAAC;AAED,MAAM,OAAO,cAAc;IAChB,OAAO,CAAe;IACd,SAAS,CAAY;IAEtC,YAAY,UAAwB,EAAE;QACpC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,SAAS,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IAC5C,CAAC;IAEO,WAAW;QACjB,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;IAC5E,CAAC;IAEO,KAAK,CAAC,IAAI,CAAC,OAAoB,EAAE,QAAgB,EAAE,IAAa;QACtE,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC1C,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,IAAI,EAAE;gBACpD,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS;gBACjC,OAAO;aACR,CAAC,CAAC;YACH,OAAO,iBAAiB,CAAC,OAAO,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;QACnD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;gBACrC,IAAI,GAAG,YAAY,WAAW;oBAAE,MAAM,GAAG,CAAC;gBAC1C,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBACjE,OAAO;oBACL,OAAO,EAAE,OAAO;oBAChB,OAAO;oBACP,QAAQ;oBACR,OAAO,EAAE,CAAC,+CAA+C,OAAO,EAAE,CAAC;oBACnE,QAAQ,EAAE,EAAE;oBACZ,GAAG,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE;iBACxB,CAAC;YACJ,CAAC;YACD,YAAY,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,OAAoB,EAAE,QAAgB,EAAE,IAAa;QAChF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC1D,OAAO,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;IAC/C,CAAC;IAED,gDAAgD;IAChD,YAAY,CAAC,KAAoB;QAC/B,MAAM,IAAI,GAAG,KAAK,CAAC,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QAC9E,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;IAClD,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,aAAa,CAAI,KAAoB,EAAE,EAAwB;QACnE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,WAAW,EAAE,UAAU,EAAE,KAAK,CAAC,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACtI,MAAM,KAAK,GAAG,MAAM,EAAE,EAAE,CAAC;QACzB,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IAC7B,CAAC;IAED;;;OAGG;IACH,QAAQ,CACN,IAAY,EACZ,EAAqC,EACrC,QAAoE;QAEpE,OAAO,KAAK,EAAE,GAAG,IAAU,EAAE,EAAE;YAC7B,MAAM,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;YAClE,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;YACtG,OAAO,KAAK,CAAC;QACf,CAAC,CAAC;IACJ,CAAC;IAED,YAAY,CAAC,KAAmB;QAC9B,OAAO,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,SAAS,EAAE,KAAK,CAAC,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAChH,CAAC;IAED,KAAK,CAAC,YAAY,CAAI,KAAmB,EAAE,EAAwB;QACjE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,cAAc,EAAE,SAAS,EAAE,KAAK,CAAC,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACxI,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC;IACzC,CAAC;IAED,QAAQ,CAAC,KAAe;QACtB,OAAO,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC5G,CAAC;IAED,KAAK,CAAC,QAAQ,CAAI,KAAe,EAAE,EAAwB;QACzD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,cAAc,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACpI,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC;IACzC,CAAC;IAED,YAAY,CAAC,KAAkB;QAC7B,OAAO,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;IACpD,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,iBAAiB,CAAC,KAAkB;QACxC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,cAAc,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;QAC5E,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,SAAS,IAAI,KAAK,CAAC,OAAO,EAAE,QAAQ,EAAE,CAAC;IACjE,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,OAAe;QAC7B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,cAAc,EAAE,OAAO,CAAC,EAAE,EAAE,OAAO,EAAE,EAAE;gBAC3F,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS;gBACjC,OAAO,EAAE,cAAc;aACxB,CAAC,CAAC;YACH,OAAO,EAAE,IAAI,EAAE,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC;QACrE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;gBACrC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YAC7F,CAAC;YACD,YAAY,CAAC,GAAG,EAAE,cAAc,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IAED,UAAU,CAAC,KAAiB;QAC1B,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;IAChD,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,KAAiB;QACzC,OAAO,IAAI,CAAC,cAAc,CAAC,WAAW,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;IAC1D,CAAC;IAED,YAAY,CAAC,KAAkB;QAC7B,OAAO,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,QAAQ,EAAE,KAAK,CAAC,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC9G,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,KAAkB;QACxC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,aAAa,EAAE,QAAQ,EAAE,KAAK,CAAC,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACtI,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,SAAS,IAAI,KAAK,CAAC,OAAO,EAAE,QAAQ,EAAE,CAAC;IACjE,CAAC;IAED,UAAU,CAAC,KAAkB;QAC3B,OAAO,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC3G,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,KAAkB;QACxC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACnI,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,SAAS,IAAI,KAAK,CAAC,OAAO,EAAE,QAAQ,EAAE,CAAC;IACjE,CAAC;IAED,YAAY,CAAC,KAAoB;QAC/B,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC1G,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,KAAoB;QAC5C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAClI,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,QAAQ,IAAI,QAAQ,CAAC,SAAS,IAAI,KAAK,CAAC,OAAO,EAAE,QAAQ,EAAE,CAAC;IACtF,CAAC;CACF;AAED,MAAM,UAAU,WAAW,CAAC,UAAwB,EAAE;IACpD,OAAO,IAAI,cAAc,CAAC,OAAO,CAAC,CAAC;AACrC,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,aAAa,CAC3B,KAAoB,EACpB,EAAwB,EACxB,UAAwB,EAAE;IAE1B,OAAO,WAAW,CAAC,OAAO,CAAC,CAAC,aAAa,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AACvD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAC,UAAwB,EAAE;IAC9D,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IACnC,OAAO,KAAK,UAAU,mBAAmB,CACvC,QAA8D,EAC9D,IAAsC,EACtC,GAAQ;QAER,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;QAClC,OAAO,KAAK,CAAC,aAAa,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACrD,CAAC,CAAC;AACJ,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,12 @@
+export { createGuard, guardToolCall, createGuardMiddleware, GrindFreeGuard } from "./guard.js";
+export type { GuardOptions, GuardedResult, ToolCallInput, CommandInput, SqlInput, PromptInput, CrawlInput, MemoryInput, OutputInput, DocumentInput, } from "./guard.js";
+export { createPaidFetch, postJson, readPrivateKey } from "./client.js";
+export type { ClientOptions, PaidFetch } from "./client.js";
+export { normalizeDecision, enforce, enforceError } from "./decisions.js";
+export type { Verdict, ReviewMode, ErrorMode, NormalizedDecision, EnforceOptions } from "./decisions.js";
+export { GuardConfigError, GuardError, GuardDenied, GuardReviewRequired } from "./errors.js";
+export { SERVICES, NETWORK, PAY_TO, serviceUrl } from "./services.js";
+export type { ServiceName, ServiceSpec, EndpointSpec } from "./services.js";
+export { wrapMcpClient } from "./wrap-mcp.js";
+export type { WrapMcpOptions } from "./wrap-mcp.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,qBAAqB,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC/F,YAAY,EACV,YAAY,EACZ,aAAa,EACb,aAAa,EACb,YAAY,EACZ,QAAQ,EACR,WAAW,EACX,UAAU,EACV,WAAW,EACX,WAAW,EACX,aAAa,GACd,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AACxE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC1E,YAAY,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AACzG,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAC7F,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AACtE,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC5E,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,YAAY,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC"}

package/dist/index.js

@@ -0,0 +1,7 @@
+export { createGuard, guardToolCall, createGuardMiddleware, GrindFreeGuard } from "./guard.js";
+export { createPaidFetch, postJson, readPrivateKey } from "./client.js";
+export { normalizeDecision, enforce, enforceError } from "./decisions.js";
+export { GuardConfigError, GuardError, GuardDenied, GuardReviewRequired } from "./errors.js";
+export { SERVICES, NETWORK, PAY_TO, serviceUrl } from "./services.js";
+export { wrapMcpClient } from "./wrap-mcp.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,qBAAqB,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAa/F,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAExE,OAAO,EAAE,iBAAiB,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAE1E,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAC7F,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAEtE,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC"}

package/dist/services.d.ts

@@ -0,0 +1,87 @@
+/** Live GrindFree x402 origins, prices, and paths. USDC on Base. */
+export declare const NETWORK: "eip155:8453";
+export declare const PAY_TO: "0xe4b5827994B7B3Cd38F9830d9ECF58b51B77721b";
+export type ServiceName = "promptshield" | "crawlsafe" | "toolguard" | "commandguard" | "memoryguard" | "wireshield" | "docshield";
+export interface EndpointSpec {
+    path: string;
+    priceUsdc: string;
+}
+export interface ServiceSpec {
+    origin: string;
+    endpoints: Record<string, EndpointSpec>;
+}
+export declare const SERVICES: {
+    readonly promptshield: {
+        readonly origin: "https://promptshield.grindfree.net";
+        readonly endpoints: {
+            readonly screen: {
+                readonly path: "/v1/screen";
+                readonly priceUsdc: "0.002";
+            };
+            readonly clean: {
+                readonly path: "/v1/clean";
+                readonly priceUsdc: "0.002";
+            };
+        };
+    };
+    readonly crawlsafe: {
+        readonly origin: "https://crawlsafe.grindfree.net";
+        readonly endpoints: {
+            readonly check: {
+                readonly path: "/v1/check";
+                readonly priceUsdc: "0.002";
+            };
+        };
+    };
+    readonly toolguard: {
+        readonly origin: "https://toolguard.grindfree.net";
+        readonly endpoints: {
+            readonly evaluate: {
+                readonly path: "/v1/evaluate";
+                readonly priceUsdc: "0.002";
+            };
+        };
+    };
+    readonly commandguard: {
+        readonly origin: "https://commandguard.grindfree.net";
+        readonly endpoints: {
+            readonly command: {
+                readonly path: "/v1/command";
+                readonly priceUsdc: "0.001";
+            };
+            readonly sql: {
+                readonly path: "/v1/sql";
+                readonly priceUsdc: "0.001";
+            };
+        };
+    };
+    readonly memoryguard: {
+        readonly origin: "https://memoryguard.grindfree.net";
+        readonly endpoints: {
+            readonly screen: {
+                readonly path: "/v1/screen";
+                readonly priceUsdc: "0.002";
+            };
+        };
+    };
+    readonly wireshield: {
+        readonly origin: "https://wireshield.grindfree.net";
+        readonly endpoints: {
+            readonly scan: {
+                readonly path: "/v1/scan";
+                readonly priceUsdc: "0.002";
+            };
+        };
+    };
+    readonly docshield: {
+        readonly origin: "https://docshield.grindfree.net";
+        readonly endpoints: {
+            readonly scan: {
+                readonly path: "/v1/scan";
+                readonly priceUsdc: "0.004";
+            };
+        };
+    };
+};
+export declare function serviceUrl(service: ServiceName, endpoint: string): string;
+//# sourceMappingURL=services.d.ts.map

package/dist/services.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"services.d.ts","sourceRoot":"","sources":["../src/services.ts"],"names":[],"mappings":"AAAA,oEAAoE;AAEpE,eAAO,MAAM,OAAO,EAAG,aAAsB,CAAC;AAC9C,eAAO,MAAM,MAAM,EAAG,4CAAqD,CAAC;AAE5E,MAAM,MAAM,WAAW,GACnB,cAAc,GACd,WAAW,GACX,WAAW,GACX,cAAc,GACd,aAAa,GACb,YAAY,GACZ,WAAW,CAAC;AAEhB,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;CACzC;AAED,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA6CgC,CAAC;AAEtD,wBAAgB,UAAU,CAAC,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAKzE"}

package/dist/services.js

@@ -0,0 +1,57 @@
+/** Live GrindFree x402 origins, prices, and paths. USDC on Base. */
+export const NETWORK = "eip155:8453";
+export const PAY_TO = "0xe4b5827994B7B3Cd38F9830d9ECF58b51B77721b";
+export const SERVICES = {
+    promptshield: {
+        origin: "https://promptshield.grindfree.net",
+        endpoints: {
+            screen: { path: "/v1/screen", priceUsdc: "0.002" },
+            clean: { path: "/v1/clean", priceUsdc: "0.002" },
+        },
+    },
+    crawlsafe: {
+        origin: "https://crawlsafe.grindfree.net",
+        endpoints: {
+            check: { path: "/v1/check", priceUsdc: "0.002" },
+        },
+    },
+    toolguard: {
+        origin: "https://toolguard.grindfree.net",
+        endpoints: {
+            evaluate: { path: "/v1/evaluate", priceUsdc: "0.002" },
+        },
+    },
+    commandguard: {
+        origin: "https://commandguard.grindfree.net",
+        endpoints: {
+            command: { path: "/v1/command", priceUsdc: "0.001" },
+            sql: { path: "/v1/sql", priceUsdc: "0.001" },
+        },
+    },
+    memoryguard: {
+        origin: "https://memoryguard.grindfree.net",
+        endpoints: {
+            screen: { path: "/v1/screen", priceUsdc: "0.002" },
+        },
+    },
+    wireshield: {
+        origin: "https://wireshield.grindfree.net",
+        endpoints: {
+            scan: { path: "/v1/scan", priceUsdc: "0.002" },
+        },
+    },
+    docshield: {
+        origin: "https://docshield.grindfree.net",
+        endpoints: {
+            scan: { path: "/v1/scan", priceUsdc: "0.004" },
+        },
+    },
+};
+export function serviceUrl(service, endpoint) {
+    const spec = SERVICES[service];
+    const ep = spec.endpoints[endpoint];
+    if (!ep)
+        throw new Error(`Unknown endpoint ${service} ${endpoint}`);
+    return `${spec.origin}${ep.path}`;
+}
+//# sourceMappingURL=services.js.map

package/dist/services.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"services.js","sourceRoot":"","sources":["../src/services.ts"],"names":[],"mappings":"AAAA,oEAAoE;AAEpE,MAAM,CAAC,MAAM,OAAO,GAAG,aAAsB,CAAC;AAC9C,MAAM,CAAC,MAAM,MAAM,GAAG,4CAAqD,CAAC;AAqB5E,MAAM,CAAC,MAAM,QAAQ,GAAG;IACtB,YAAY,EAAE;QACZ,MAAM,EAAE,oCAAoC;QAC5C,SAAS,EAAE;YACT,MAAM,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,SAAS,EAAE,OAAO,EAAE;YAClD,KAAK,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE;SACjD;KACF;IACD,SAAS,EAAE;QACT,MAAM,EAAE,iCAAiC;QACzC,SAAS,EAAE;YACT,KAAK,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE;SACjD;KACF;IACD,SAAS,EAAE;QACT,MAAM,EAAE,iCAAiC;QACzC,SAAS,EAAE;YACT,QAAQ,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,SAAS,EAAE,OAAO,EAAE;SACvD;KACF;IACD,YAAY,EAAE;QACZ,MAAM,EAAE,oCAAoC;QAC5C,SAAS,EAAE;YACT,OAAO,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE,OAAO,EAAE;YACpD,GAAG,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE;SAC7C;KACF;IACD,WAAW,EAAE;QACX,MAAM,EAAE,mCAAmC;QAC3C,SAAS,EAAE;YACT,MAAM,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,SAAS,EAAE,OAAO,EAAE;SACnD;KACF;IACD,UAAU,EAAE;QACV,MAAM,EAAE,kCAAkC;QAC1C,SAAS,EAAE;YACT,IAAI,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,EAAE;SAC/C;KACF;IACD,SAAS,EAAE;QACT,MAAM,EAAE,iCAAiC;QACzC,SAAS,EAAE;YACT,IAAI,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,EAAE;SAC/C;KACF;CACkD,CAAC;AAEtD,MAAM,UAAU,UAAU,CAAC,OAAoB,EAAE,QAAgB;IAC/D,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAgB,CAAC;IAC9C,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IACpC,IAAI,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,OAAO,IAAI,QAAQ,EAAE,CAAC,CAAC;IACpE,OAAO,GAAG,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC;AACpC,CAAC"}

package/dist/wrap-mcp.d.ts

@@ -0,0 +1,24 @@
+/**
+ * MCP client wrapper: evaluate ToolGuard before client.callTool, and
+ * CommandGuard when the tool looks like a shell/SQL execution.
+ *
+ * No MCP SDK dependency. Pass any client with callTool().
+ * export X402_PRIVATE_KEY=0xYOUR_BASE_USDC_PRIVATE_KEY
+ */
+import { type GrindFreeGuard } from "./guard.js";
+export type WrapMcpOptions = {
+    guard?: GrindFreeGuard;
+    /** Tool names treated as shell execution (CommandGuard). */
+    commandTools?: string[];
+    /** Tool names treated as SQL execution (CommandGuard /v1/sql). */
+    sqlTools?: string[];
+    policy?: Record<string, unknown>;
+};
+/**
+ * Wrap an MCP client so every callTool is screened first. The original
+ * client is returned for chaining; callTool is replaced in place.
+ */
+export declare function wrapMcpClient<T extends {
+    callTool: (...args: any[]) => any;
+}>(client: T, opts?: WrapMcpOptions): T;
+//# sourceMappingURL=wrap-mcp.d.ts.map

package/dist/wrap-mcp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wrap-mcp.d.ts","sourceRoot":"","sources":["../src/wrap-mcp.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAe,KAAK,cAAc,EAAE,MAAM,YAAY,CAAC;AAG9D,MAAM,MAAM,cAAc,GAAG;IAC3B,KAAK,CAAC,EAAE,cAAc,CAAC;IACvB,4DAA4D;IAC5D,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,kEAAkE;IAClE,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC,CAAC;AAcF;;;GAGG;AACH,wBAAgB,aAAa,CAAC,CAAC,SAAS;IAAE,QAAQ,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,GAAG,CAAA;CAAE,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,GAAE,cAAmB,GAAG,CAAC,CA8BtH"}

package/dist/wrap-mcp.js

@@ -0,0 +1,53 @@
+/**
+ * MCP client wrapper: evaluate ToolGuard before client.callTool, and
+ * CommandGuard when the tool looks like a shell/SQL execution.
+ *
+ * No MCP SDK dependency. Pass any client with callTool().
+ * export X402_PRIVATE_KEY=0xYOUR_BASE_USDC_PRIVATE_KEY
+ */
+import { createGuard } from "./guard.js";
+import { GuardDenied, GuardReviewRequired } from "./errors.js";
+const DEFAULT_COMMAND_TOOLS = ["shell", "bash", "sh", "terminal", "run_command", "execute_command", "command"];
+const DEFAULT_SQL_TOOLS = ["sql", "query", "execute_sql", "run_sql"];
+function nameOf(tool) {
+    return typeof tool === "string" ? tool : tool.name ?? "tool";
+}
+function looksLike(name, list) {
+    const n = name.toLowerCase();
+    return list.some((t) => n === t || n.endsWith(`.${t}`) || n.endsWith(`_${t}`) || n.includes(t));
+}
+/**
+ * Wrap an MCP client so every callTool is screened first. The original
+ * client is returned for chaining; callTool is replaced in place.
+ */
+export function wrapMcpClient(client, opts = {}) {
+    const guard = opts.guard ?? createGuard({ policy: opts.policy });
+    const commandTools = opts.commandTools ?? DEFAULT_COMMAND_TOOLS;
+    const sqlTools = opts.sqlTools ?? DEFAULT_SQL_TOOLS;
+    const original = client.callTool.bind(client);
+    client.callTool = async (params, ...rest) => {
+        const toolName = nameOf(params ?? {});
+        const args = (params?.arguments ?? {});
+        try {
+            if (looksLike(toolName, commandTools) && typeof (args.command ?? args.cmd ?? args.input) === "string") {
+                const command = String(args.command ?? args.cmd ?? args.input);
+                await guard.guardCommand({ command }, async () => undefined);
+            }
+            else if (looksLike(toolName, sqlTools) && typeof (args.sql ?? args.query ?? args.statement) === "string") {
+                const sql = String(args.sql ?? args.query ?? args.statement);
+                await guard.guardSql({ sql }, async () => undefined);
+            }
+            else {
+                await guard.guardToolCall({ tool: `mcp.${toolName}`, arg_classes: Object.keys(args) }, async () => undefined);
+            }
+        }
+        catch (err) {
+            if (err instanceof GuardDenied || err instanceof GuardReviewRequired)
+                throw err;
+            throw err;
+        }
+        return original(params, ...rest);
+    };
+    return client;
+}
+//# sourceMappingURL=wrap-mcp.js.map

package/dist/wrap-mcp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wrap-mcp.js","sourceRoot":"","sources":["../src/wrap-mcp.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,WAAW,EAAuB,MAAM,YAAY,CAAC;AAC9D,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAW/D,MAAM,qBAAqB,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,aAAa,EAAE,iBAAiB,EAAE,SAAS,CAAC,CAAC;AAC/G,MAAM,iBAAiB,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC;AAErE,SAAS,MAAM,CAAC,IAAgC;IAC9C,OAAO,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,IAAI,MAAM,CAAC;AAC/D,CAAC;AAED,SAAS,SAAS,CAAC,IAAY,EAAE,IAAc;IAC7C,MAAM,CAAC,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IAC7B,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;AAClG,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAkD,MAAS,EAAE,OAAuB,EAAE;IACjH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,WAAW,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IACjE,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,qBAAqB,CAAC;IAChE,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,iBAAiB,CAAC;IACpD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAE9C,MAAM,CAAC,QAAQ,GAAG,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,EAAE;QAC1C,MAAM,QAAQ,GAAG,MAAM,CAAE,MAA4B,IAAI,EAAE,CAAC,CAAC;QAC7D,MAAM,IAAI,GAAG,CAAE,MAAkD,EAAE,SAAS,IAAI,EAAE,CAA4B,CAAC;QAC/G,IAAI,CAAC;YACH,IAAI,SAAS,CAAC,QAAQ,EAAE,YAAY,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,QAAQ,EAAE,CAAC;gBACtG,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC;gBAC/D,MAAM,KAAK,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS,CAAC,CAAC;YAC/D,CAAC;iBAAM,IAAI,SAAS,CAAC,QAAQ,EAAE,QAAQ,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,QAAQ,EAAE,CAAC;gBAC3G,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC;gBAC7D,MAAM,KAAK,CAAC,QAAQ,CAAC,EAAE,GAAG,EAAE,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS,CAAC,CAAC;YACvD,CAAC;iBAAM,CAAC;gBACN,MAAM,KAAK,CAAC,aAAa,CACvB,EAAE,IAAI,EAAE,OAAO,QAAQ,EAAE,EAAE,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAC3D,KAAK,IAAI,EAAE,CAAC,SAAS,CACtB,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,WAAW,IAAI,GAAG,YAAY,mBAAmB;gBAAE,MAAM,GAAG,CAAC;YAChF,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,OAAO,QAAQ,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC;IACnC,CAAC,CAAC;IAEF,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/package.json

@@ -1,6 +1,60 @@
 {
   "name": "@grindfree/guard",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.1.0",
+  "description": "Drop-in x402 guards that screen PromptShield, CrawlSafe, ToolGuard, CommandGuard, MemoryGuard, WireShield and DocShield before an agent acts. Caller wallet only; never embeds keys.",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "engines": {
+    "node": ">=20"
+  },
+  "scripts": {
+    "build": "tsc",
+    "test": "tsx --test test/*.test.ts",
+    "prepublishOnly": "npm test && npm run build",
+    "prepare": "npm run build"
+  },
+  "keywords": [
+    "x402",
+    "agents",
+    "security",
+    "guardrail",
+    "toolguard",
+    "commandguard",
+    "promptshield",
+    "mcp",
+    "langchain",
+    "openai-agents"
+  ],
+  "license": "MIT",
+  "author": "GrindFree",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/ronin93/grindfree-guard.git"
+  },
+  "homepage": "https://github.com/ronin93/grindfree-guard#readme",
+  "bugs": {
+    "url": "https://github.com/ronin93/grindfree-guard/issues"
+  },
+  "dependencies": {
+    "@x402/evm": "^2.29.0",
+    "@x402/fetch": "^2.29.0",
+    "viem": "^2.57.16"
+  },
+  "devDependencies": {
+    "@types/node": "^22.10.0",
+    "tsx": "^4.19.2",
+    "typescript": "^5.7.2"
+  }
+}