@intutic/shared-types 3.0.5 → 3.0.8

package/dist/guardrailIr.d.ts

@@ -4,7 +4,7 @@
  * An LLM reading corporate policy prose is allowed to propose exactly two
  * things: a verbatim quote anchored to a passage it was shown, and a clause in
  * this closed IR. Everything after that is deterministic code: the validator
- * (`services/control-plane/src/lib/guardrailValidator.ts`) checks the quote by
+ * (the control plane) checks the quote by
  * containment and the IR against the grammar the proxy and the harness gates
  * already enforce, the renderers in `./guardrailRender.ts` turn it into the
  * exact bytes those enforcers read, and cross-language parity fixtures prove
@@ -52,7 +52,7 @@
 import { z } from 'zod';
 /**
  * The `action:` tokens the proxy's classifier synthesises from tool calls.
- * Moved here from `services/control-plane/src/services/learnedHoldService.ts`
+ * Moved here from the control plane
  * so the IR, the validator and the hold miner read one list; that file
  * re-exports it. A token outside this set and outside the observed tool names
  * compiles into a control that can never fire. The last five
@@ -86,47 +86,19 @@ export declare const QUALIFIED_TOKENS: readonly ["action:run_tests[ok]"];
 declare const HookRuleSchema: z.ZodObject<{
     kind: z.ZodLiteral<"hook_rule">;
     title: z.ZodString;
-    tools: z.ZodArray<z.ZodEffects<z.ZodString, string, string>, "many">;
-    argContains: z.ZodOptional<z.ZodArray<z.ZodEffects<z.ZodString, string, string>, "many">>;
-    argNotContains: z.ZodOptional<z.ZodArray<z.ZodEffects<z.ZodString, string, string>, "many">>;
-    roles: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-}, "strict", z.ZodTypeAny, {
-    kind: "hook_rule";
-    title: string;
-    tools: string[];
-    argContains?: string[] | undefined;
-    argNotContains?: string[] | undefined;
-    roles?: string[] | undefined;
-}, {
-    kind: "hook_rule";
-    title: string;
-    tools: string[];
-    argContains?: string[] | undefined;
-    argNotContains?: string[] | undefined;
-    roles?: string[] | undefined;
-}>;
+    tools: z.ZodArray<z.ZodString>;
+    argContains: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    argNotContains: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    roles: z.ZodOptional<z.ZodArray<z.ZodString>>;
+}, z.core.$strict>;
 declare const WasmPredicateSchema: z.ZodObject<{
     kind: z.ZodLiteral<"wasm_predicate">;
     title: z.ZodString;
     rationale: z.ZodString;
     predicate: z.ZodUnknown;
     verdict: z.ZodLiteral<3>;
-    roles: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-}, "strict", z.ZodTypeAny, {
-    kind: "wasm_predicate";
-    title: string;
-    rationale: string;
-    verdict: 3;
-    predicate?: unknown;
-    roles?: string[] | undefined;
-}, {
-    kind: "wasm_predicate";
-    title: string;
-    rationale: string;
-    verdict: 3;
-    predicate?: unknown;
-    roles?: string[] | undefined;
-}>;
+    roles: z.ZodOptional<z.ZodArray<z.ZodString>>;
+}, z.core.$strict>;
 /**
  * A model id as the proxy compares it: `check_model_allowed` in
  * `packages/proxy/src/metering.rs` is an exact, case-sensitive string match
@@ -155,434 +127,139 @@ export declare function isEgressHostEntry(value: string): boolean;
 declare const DecideSchema: z.ZodObject<{
     kind: z.ZodLiteral<"decide">;
     id: z.ZodString;
-    title: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>>;
-    on: z.ZodEnum<["tool_call", "response"]>;
-    tools: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-    questions: z.ZodRecord<z.ZodString, z.ZodDiscriminatedUnion<"type", [z.ZodObject<{
+    title: z.ZodOptional<z.ZodString>;
+    on: z.ZodEnum<{
+        tool_call: "tool_call";
+        response: "response";
+    }>;
+    tools: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    questions: z.ZodRecord<z.ZodString, z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"yes_no">;
-        ask: z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>, string, string>;
+        ask: z.ZodString;
         band: z.ZodOptional<z.ZodObject<{
             yes_at: z.ZodNumber;
             no_below: z.ZodNumber;
-        }, "strict", z.ZodTypeAny, {
-            yes_at: number;
-            no_below: number;
-        }, {
-            yes_at: number;
-            no_below: number;
-        }>>;
-    }, "strict", z.ZodTypeAny, {
-        type: "yes_no";
-        ask: string;
-        band?: {
-            yes_at: number;
-            no_below: number;
-        } | undefined;
-    }, {
-        type: "yes_no";
-        ask: string;
-        band?: {
-            yes_at: number;
-            no_below: number;
-        } | undefined;
-    }>, z.ZodObject<{
+        }, z.core.$strict>>;
+    }, z.core.$strict>, z.ZodObject<{
         type: z.ZodLiteral<"choice">;
-        ask: z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>, string, string>;
-        options: z.ZodArray<z.ZodString, "many">;
+        ask: z.ZodString;
+        options: z.ZodArray<z.ZodString>;
         band: z.ZodOptional<z.ZodObject<{
             yes_at: z.ZodNumber;
             no_below: z.ZodNumber;
-        }, "strict", z.ZodTypeAny, {
-            yes_at: number;
-            no_below: number;
-        }, {
-            yes_at: number;
-            no_below: number;
-        }>>;
-    }, "strict", z.ZodTypeAny, {
-        options: string[];
-        type: "choice";
-        ask: string;
-        band?: {
-            yes_at: number;
-            no_below: number;
-        } | undefined;
-    }, {
-        options: string[];
-        type: "choice";
-        ask: string;
-        band?: {
-            yes_at: number;
-            no_below: number;
-        } | undefined;
-    }>]>>;
-    when: z.ZodEffects<z.ZodString, string, string>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>], "type">>;
+    when: z.ZodString;
     band: z.ZodOptional<z.ZodObject<{
         yes_at: z.ZodNumber;
         no_below: z.ZodNumber;
-    }, "strict", z.ZodTypeAny, {
-        yes_at: number;
-        no_below: number;
-    }, {
-        yes_at: number;
-        no_below: number;
+    }, z.core.$strict>>;
+    escalate: z.ZodOptional<z.ZodEnum<{
+        ask: "ask";
+        review: "review";
+        refuse: "refuse";
     }>>;
-    escalate: z.ZodOptional<z.ZodEnum<["ask", "review", "refuse"]>>;
-    rollout: z.ZodOptional<z.ZodEnum<["shadow", "enforce"]>>;
-    context: z.ZodOptional<z.ZodArray<z.ZodLiteral<"last_user_turn">, "many">>;
-}, "strict", z.ZodTypeAny, {
-    id: string;
-    kind: "decide";
-    on: "tool_call" | "response";
-    questions: Record<string, {
-        type: "yes_no";
-        ask: string;
-        band?: {
-            yes_at: number;
-            no_below: number;
-        } | undefined;
-    } | {
-        options: string[];
-        type: "choice";
-        ask: string;
-        band?: {
-            yes_at: number;
-            no_below: number;
-        } | undefined;
-    }>;
-    when: string;
-    title?: string | undefined;
-    tools?: string[] | undefined;
-    band?: {
-        yes_at: number;
-        no_below: number;
-    } | undefined;
-    escalate?: "ask" | "review" | "refuse" | undefined;
-    rollout?: "shadow" | "enforce" | undefined;
-    context?: "last_user_turn"[] | undefined;
-}, {
-    id: string;
-    kind: "decide";
-    on: "tool_call" | "response";
-    questions: Record<string, {
-        type: "yes_no";
-        ask: string;
-        band?: {
-            yes_at: number;
-            no_below: number;
-        } | undefined;
-    } | {
-        options: string[];
-        type: "choice";
-        ask: string;
-        band?: {
-            yes_at: number;
-            no_below: number;
-        } | undefined;
-    }>;
-    when: string;
-    title?: string | undefined;
-    tools?: string[] | undefined;
-    band?: {
-        yes_at: number;
-        no_below: number;
-    } | undefined;
-    escalate?: "ask" | "review" | "refuse" | undefined;
-    rollout?: "shadow" | "enforce" | undefined;
-    context?: "last_user_turn"[] | undefined;
-}>;
-export declare const GuardrailIrSchema: z.ZodDiscriminatedUnion<"kind", [z.ZodObject<{
+    rollout: z.ZodOptional<z.ZodEnum<{
+        shadow: "shadow";
+        enforce: "enforce";
+    }>>;
+    context: z.ZodOptional<z.ZodArray<z.ZodLiteral<"last_user_turn">>>;
+}, z.core.$strict>;
+export declare const GuardrailIrSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
     kind: z.ZodLiteral<"hook_rule">;
     title: z.ZodString;
-    tools: z.ZodArray<z.ZodEffects<z.ZodString, string, string>, "many">;
-    argContains: z.ZodOptional<z.ZodArray<z.ZodEffects<z.ZodString, string, string>, "many">>;
-    argNotContains: z.ZodOptional<z.ZodArray<z.ZodEffects<z.ZodString, string, string>, "many">>;
-    roles: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-}, "strict", z.ZodTypeAny, {
-    kind: "hook_rule";
-    title: string;
-    tools: string[];
-    argContains?: string[] | undefined;
-    argNotContains?: string[] | undefined;
-    roles?: string[] | undefined;
-}, {
-    kind: "hook_rule";
-    title: string;
-    tools: string[];
-    argContains?: string[] | undefined;
-    argNotContains?: string[] | undefined;
-    roles?: string[] | undefined;
-}>, z.ZodObject<{
+    tools: z.ZodArray<z.ZodString>;
+    argContains: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    argNotContains: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    roles: z.ZodOptional<z.ZodArray<z.ZodString>>;
+}, z.core.$strict>, z.ZodObject<{
     kind: z.ZodLiteral<"deny_tools">;
-    tools: z.ZodArray<z.ZodEffects<z.ZodString, string, string>, "many">;
-    roles: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-}, "strict", z.ZodTypeAny, {
-    kind: "deny_tools";
-    tools: string[];
-    roles?: string[] | undefined;
-}, {
-    kind: "deny_tools";
-    tools: string[];
-    roles?: string[] | undefined;
-}>, z.ZodObject<{
+    tools: z.ZodArray<z.ZodString>;
+    roles: z.ZodOptional<z.ZodArray<z.ZodString>>;
+}, z.core.$strict>, z.ZodObject<{
     kind: z.ZodLiteral<"review_before">;
-    tokens: z.ZodArray<z.ZodEffects<z.ZodString, string, string>, "many">;
-    roles: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-}, "strict", z.ZodTypeAny, {
-    kind: "review_before";
-    tokens: string[];
-    roles?: string[] | undefined;
-}, {
-    kind: "review_before";
-    tokens: string[];
-    roles?: string[] | undefined;
-}>, z.ZodObject<{
-    first: z.ZodEffects<z.ZodString, string, string>;
-    then: z.ZodEffects<z.ZodString, string, string>;
-    roles: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    tokens: z.ZodArray<z.ZodString>;
+    roles: z.ZodOptional<z.ZodArray<z.ZodString>>;
+}, z.core.$strict>, z.ZodObject<{
+    first: z.ZodString;
+    then: z.ZodString;
+    roles: z.ZodOptional<z.ZodArray<z.ZodString>>;
     kind: z.ZodLiteral<"requires_before">;
-}, "strict", z.ZodTypeAny, {
-    kind: "requires_before";
-    then: string;
-    first: string;
-    roles?: string[] | undefined;
-}, {
-    kind: "requires_before";
-    then: string;
-    first: string;
-    roles?: string[] | undefined;
-}>, z.ZodObject<{
-    first: z.ZodEffects<z.ZodString, string, string>;
-    then: z.ZodEffects<z.ZodString, string, string>;
-    roles: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+}, z.core.$strict>, z.ZodObject<{
+    first: z.ZodString;
+    then: z.ZodString;
+    roles: z.ZodOptional<z.ZodArray<z.ZodString>>;
     kind: z.ZodLiteral<"forbid_after">;
-}, "strict", z.ZodTypeAny, {
-    kind: "forbid_after";
-    then: string;
-    first: string;
-    roles?: string[] | undefined;
-}, {
-    kind: "forbid_after";
-    then: string;
-    first: string;
-    roles?: string[] | undefined;
-}>, z.ZodObject<{
+}, z.core.$strict>, z.ZodObject<{
     kind: z.ZodLiteral<"max_calls">;
-    token: z.ZodEffects<z.ZodString, string, string>;
+    token: z.ZodString;
     limit: z.ZodNumber;
-    roles: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-}, "strict", z.ZodTypeAny, {
-    token: string;
-    kind: "max_calls";
-    limit: number;
-    roles?: string[] | undefined;
-}, {
-    token: string;
-    kind: "max_calls";
-    limit: number;
-    roles?: string[] | undefined;
-}>, z.ZodObject<{
+    roles: z.ZodOptional<z.ZodArray<z.ZodString>>;
+}, z.core.$strict>, z.ZodObject<{
     kind: z.ZodLiteral<"forbid_with">;
-    taint: z.ZodEnum<["secrets()", "pii()"]>;
-    token: z.ZodEffects<z.ZodString, string, string>;
-    roles: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-}, "strict", z.ZodTypeAny, {
-    token: string;
-    kind: "forbid_with";
-    taint: "secrets()" | "pii()";
-    roles?: string[] | undefined;
-}, {
-    token: string;
-    kind: "forbid_with";
-    taint: "secrets()" | "pii()";
-    roles?: string[] | undefined;
-}>, z.ZodObject<{
+    taint: z.ZodEnum<{
+        "secrets()": "secrets()";
+        "pii()": "pii()";
+    }>;
+    token: z.ZodString;
+    roles: z.ZodOptional<z.ZodArray<z.ZodString>>;
+}, z.core.$strict>, z.ZodObject<{
     kind: z.ZodLiteral<"wasm_predicate">;
     title: z.ZodString;
     rationale: z.ZodString;
     predicate: z.ZodUnknown;
     verdict: z.ZodLiteral<3>;
-    roles: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-}, "strict", z.ZodTypeAny, {
-    kind: "wasm_predicate";
-    title: string;
-    rationale: string;
-    verdict: 3;
-    predicate?: unknown;
-    roles?: string[] | undefined;
-}, {
-    kind: "wasm_predicate";
-    title: string;
-    rationale: string;
-    verdict: 3;
-    predicate?: unknown;
-    roles?: string[] | undefined;
-}>, z.ZodObject<{
+    roles: z.ZodOptional<z.ZodArray<z.ZodString>>;
+}, z.core.$strict>, z.ZodObject<{
     kind: z.ZodLiteral<"allowed_models">;
-    models: z.ZodArray<z.ZodString, "many">;
-}, "strict", z.ZodTypeAny, {
-    kind: "allowed_models";
-    models: string[];
-}, {
-    kind: "allowed_models";
-    models: string[];
-}>, z.ZodObject<{
+    models: z.ZodArray<z.ZodString>;
+}, z.core.$strict>, z.ZodObject<{
     kind: z.ZodLiteral<"egress_allow">;
-    hosts: z.ZodArray<z.ZodEffects<z.ZodString, string, string>, "many">;
-}, "strict", z.ZodTypeAny, {
-    kind: "egress_allow";
-    hosts: string[];
-}, {
-    kind: "egress_allow";
-    hosts: string[];
-}>, z.ZodObject<{
+    hosts: z.ZodArray<z.ZodString>;
+}, z.core.$strict>, z.ZodObject<{
     kind: z.ZodLiteral<"decide">;
     id: z.ZodString;
-    title: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>>;
-    on: z.ZodEnum<["tool_call", "response"]>;
-    tools: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-    questions: z.ZodRecord<z.ZodString, z.ZodDiscriminatedUnion<"type", [z.ZodObject<{
+    title: z.ZodOptional<z.ZodString>;
+    on: z.ZodEnum<{
+        tool_call: "tool_call";
+        response: "response";
+    }>;
+    tools: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    questions: z.ZodRecord<z.ZodString, z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"yes_no">;
-        ask: z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>, string, string>;
+        ask: z.ZodString;
         band: z.ZodOptional<z.ZodObject<{
             yes_at: z.ZodNumber;
             no_below: z.ZodNumber;
-        }, "strict", z.ZodTypeAny, {
-            yes_at: number;
-            no_below: number;
-        }, {
-            yes_at: number;
-            no_below: number;
-        }>>;
-    }, "strict", z.ZodTypeAny, {
-        type: "yes_no";
-        ask: string;
-        band?: {
-            yes_at: number;
-            no_below: number;
-        } | undefined;
-    }, {
-        type: "yes_no";
-        ask: string;
-        band?: {
-            yes_at: number;
-            no_below: number;
-        } | undefined;
-    }>, z.ZodObject<{
+        }, z.core.$strict>>;
+    }, z.core.$strict>, z.ZodObject<{
         type: z.ZodLiteral<"choice">;
-        ask: z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>, string, string>;
-        options: z.ZodArray<z.ZodString, "many">;
+        ask: z.ZodString;
+        options: z.ZodArray<z.ZodString>;
         band: z.ZodOptional<z.ZodObject<{
             yes_at: z.ZodNumber;
             no_below: z.ZodNumber;
-        }, "strict", z.ZodTypeAny, {
-            yes_at: number;
-            no_below: number;
-        }, {
-            yes_at: number;
-            no_below: number;
-        }>>;
-    }, "strict", z.ZodTypeAny, {
-        options: string[];
-        type: "choice";
-        ask: string;
-        band?: {
-            yes_at: number;
-            no_below: number;
-        } | undefined;
-    }, {
-        options: string[];
-        type: "choice";
-        ask: string;
-        band?: {
-            yes_at: number;
-            no_below: number;
-        } | undefined;
-    }>]>>;
-    when: z.ZodEffects<z.ZodString, string, string>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>], "type">>;
+    when: z.ZodString;
     band: z.ZodOptional<z.ZodObject<{
         yes_at: z.ZodNumber;
         no_below: z.ZodNumber;
-    }, "strict", z.ZodTypeAny, {
-        yes_at: number;
-        no_below: number;
-    }, {
-        yes_at: number;
-        no_below: number;
+    }, z.core.$strict>>;
+    escalate: z.ZodOptional<z.ZodEnum<{
+        ask: "ask";
+        review: "review";
+        refuse: "refuse";
     }>>;
-    escalate: z.ZodOptional<z.ZodEnum<["ask", "review", "refuse"]>>;
-    rollout: z.ZodOptional<z.ZodEnum<["shadow", "enforce"]>>;
-    context: z.ZodOptional<z.ZodArray<z.ZodLiteral<"last_user_turn">, "many">>;
-}, "strict", z.ZodTypeAny, {
-    id: string;
-    kind: "decide";
-    on: "tool_call" | "response";
-    questions: Record<string, {
-        type: "yes_no";
-        ask: string;
-        band?: {
-            yes_at: number;
-            no_below: number;
-        } | undefined;
-    } | {
-        options: string[];
-        type: "choice";
-        ask: string;
-        band?: {
-            yes_at: number;
-            no_below: number;
-        } | undefined;
-    }>;
-    when: string;
-    title?: string | undefined;
-    tools?: string[] | undefined;
-    band?: {
-        yes_at: number;
-        no_below: number;
-    } | undefined;
-    escalate?: "ask" | "review" | "refuse" | undefined;
-    rollout?: "shadow" | "enforce" | undefined;
-    context?: "last_user_turn"[] | undefined;
-}, {
-    id: string;
-    kind: "decide";
-    on: "tool_call" | "response";
-    questions: Record<string, {
-        type: "yes_no";
-        ask: string;
-        band?: {
-            yes_at: number;
-            no_below: number;
-        } | undefined;
-    } | {
-        options: string[];
-        type: "choice";
-        ask: string;
-        band?: {
-            yes_at: number;
-            no_below: number;
-        } | undefined;
-    }>;
-    when: string;
-    title?: string | undefined;
-    tools?: string[] | undefined;
-    band?: {
-        yes_at: number;
-        no_below: number;
-    } | undefined;
-    escalate?: "ask" | "review" | "refuse" | undefined;
-    rollout?: "shadow" | "enforce" | undefined;
-    context?: "last_user_turn"[] | undefined;
-}>, z.ZodObject<{
+    rollout: z.ZodOptional<z.ZodEnum<{
+        shadow: "shadow";
+        enforce: "enforce";
+    }>>;
+    context: z.ZodOptional<z.ZodArray<z.ZodLiteral<"last_user_turn">>>;
+}, z.core.$strict>, z.ZodObject<{
     kind: z.ZodLiteral<"none">;
     reason: z.ZodString;
-}, "strict", z.ZodTypeAny, {
-    reason: string;
-    kind: "none";
-}, {
-    reason: string;
-    kind: "none";
-}>]>;
+}, z.core.$strict>], "kind">;
 export type GuardrailIr = z.infer<typeof GuardrailIrSchema>;
 export type HookRuleIr = z.infer<typeof HookRuleSchema>;
 export type WasmPredicateIr = z.infer<typeof WasmPredicateSchema>;

package/dist/guardrailIr.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"guardrailIr.d.ts","sourceRoot":"","sources":["../src/guardrailIr.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkDG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAIvB;;;;;;;GAOG;AACH,eAAO,MAAM,aAAa,sQAchB,CAAA;AAEV,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,aAAa,CAAC,CAAC,MAAM,CAAC,CAAA;AAExD,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,WAAW,CAEjE;AAED;;;;;;GAMG;AACH,eAAO,MAAM,aAAa,QAAoC,CAAA;AAE9D,eAAO,MAAM,cAAc,IAAI,CAAA;AAC/B,eAAO,MAAM,eAAe,KAAK,CAAA;AACjC,eAAO,MAAM,YAAY,IAAI,CAAA;AAC7B,eAAO,MAAM,iBAAiB,KAAK,CAAA;AACnC,eAAO,MAAM,SAAS,IAAI,CAAA;AAC1B,eAAO,MAAM,eAAe,KAAK,CAAA;AACjC,eAAO,MAAM,mBAAmB,MAAM,CAAA;AACtC,eAAO,MAAM,eAAe,OAAO,CAAA;AAUnC;;;;GAIG;AACH,eAAO,MAAM,gBAAgB,mCAAoC,CAAA;AAiCjE,QAAA,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;EAST,CAAA;AAyCX,QAAA,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;EASd,CAAA;AAEX;;;;GAIG;AACH,eAAO,MAAM,WAAW,QAAyC,CAAA;AACjE,eAAO,MAAM,kBAAkB,KAAK,CAAA;AAMpC,gHAAgH;AAChH,eAAO,MAAM,sBAAsB,IAAI,CAAA;AAEvC;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAmBxD;AA6CD,QAAA,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAcP,CAAA;AAEX,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAa5B,CAAA;AAEF,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAA;AAC3D,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAA;AACvD,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAA;AACjE,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAA;AACnD,MAAM,MAAM,aAAa,GAAG,OAAO,CAAC,WAAW,EAAE;IAAE,IAAI,EAAE,YAAY,GAAG,eAAe,GAAG,iBAAiB,GAAG,cAAc,GAAG,WAAW,GAAG,aAAa,CAAA;CAAE,CAAC,CAAA;AAC7J,MAAM,MAAM,SAAS,GAAG,OAAO,CAAC,WAAW,EAAE;IAAE,IAAI,EAAE,gBAAgB,GAAG,cAAc,CAAA;CAAE,CAAC,CAAA;AACzF,MAAM,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,CAAA;AAExC,kFAAkF;AAClF,eAAO,MAAM,QAAQ,4LAaX,CAAA;AAEV,4EAA4E;AAC5E,eAAO,MAAM,kBAAkB,yGAOrB,CAAA;AAEV,wBAAgB,eAAe,CAAC,EAAE,EAAE,WAAW,GAAG,EAAE,IAAI,aAAa,CAEpE;AAED,oFAAoF;AACpF,eAAO,MAAM,aAAa,6CAA8C,CAAA;AAExE;;;GAGG;AACH,eAAO,MAAM,iBAAiB;;;CAA4E,CAAA;AAC1G,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,OAAO,iBAAiB,CAAC,CAAA;AAEnF,wBAAgB,WAAW,CAAC,EAAE,EAAE,WAAW,GAAG,EAAE,IAAI,SAAS,CAE5D;AAED,kMAAkM;AAClM,wBAAgB,aAAa,CAAC,EAAE,EAAE,SAAS,GAAG,MAAM,EAAE,CAErD;AAED,MAAM,MAAM,YAAY,GAAG;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,EAAE,EAAE,WAAW,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAA;AAExF;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,YAAY,CAuBhE;AAMD;;;;;;;;;GASG;AACH,wBAAgB,cAAc,CAAC,EAAE,EAAE,WAAW,GAAG,MAAM,CA6CtD;AASD,qGAAqG;AACrG,wBAAgB,QAAQ,CAAC,EAAE,EAAE,WAAW,GAAG,MAAM,EAAE,CAqBlD"}
+{"version":3,"file":"guardrailIr.d.ts","sourceRoot":"","sources":["../src/guardrailIr.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkDG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAIvB;;;;;;;GAOG;AACH,eAAO,MAAM,aAAa,sQAchB,CAAA;AAEV,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,aAAa,CAAC,CAAC,MAAM,CAAC,CAAA;AAExD,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,WAAW,CAEjE;AAED;;;;;;GAMG;AACH,eAAO,MAAM,aAAa,QAAoC,CAAA;AAE9D,eAAO,MAAM,cAAc,IAAI,CAAA;AAC/B,eAAO,MAAM,eAAe,KAAK,CAAA;AACjC,eAAO,MAAM,YAAY,IAAI,CAAA;AAC7B,eAAO,MAAM,iBAAiB,KAAK,CAAA;AACnC,eAAO,MAAM,SAAS,IAAI,CAAA;AAC1B,eAAO,MAAM,eAAe,KAAK,CAAA;AACjC,eAAO,MAAM,mBAAmB,MAAM,CAAA;AACtC,eAAO,MAAM,eAAe,OAAO,CAAA;AAUnC;;;;GAIG;AACH,eAAO,MAAM,gBAAgB,mCAAoC,CAAA;AAiCjE,QAAA,MAAM,cAAc;;;;;;;kBAST,CAAA;AAyCX,QAAA,MAAM,mBAAmB;;;;;;;kBASd,CAAA;AAEX;;;;GAIG;AACH,eAAO,MAAM,WAAW,QAAyC,CAAA;AACjE,eAAO,MAAM,kBAAkB,KAAK,CAAA;AAMpC,gHAAgH;AAChH,eAAO,MAAM,sBAAsB,IAAI,CAAA;AAEvC;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAmBxD;AA6CD,QAAA,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAcP,CAAA;AAEX,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;4BAa5B,CAAA;AAEF,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAA;AAC3D,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAA;AACvD,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAA;AACjE,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAA;AACnD,MAAM,MAAM,aAAa,GAAG,OAAO,CAAC,WAAW,EAAE;IAAE,IAAI,EAAE,YAAY,GAAG,eAAe,GAAG,iBAAiB,GAAG,cAAc,GAAG,WAAW,GAAG,aAAa,CAAA;CAAE,CAAC,CAAA;AAC7J,MAAM,MAAM,SAAS,GAAG,OAAO,CAAC,WAAW,EAAE;IAAE,IAAI,EAAE,gBAAgB,GAAG,cAAc,CAAA;CAAE,CAAC,CAAA;AACzF,MAAM,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,CAAA;AAExC,kFAAkF;AAClF,eAAO,MAAM,QAAQ,4LAaX,CAAA;AAEV,4EAA4E;AAC5E,eAAO,MAAM,kBAAkB,yGAOrB,CAAA;AAEV,wBAAgB,eAAe,CAAC,EAAE,EAAE,WAAW,GAAG,EAAE,IAAI,aAAa,CAEpE;AAED,oFAAoF;AACpF,eAAO,MAAM,aAAa,6CAA8C,CAAA;AAExE;;;GAGG;AACH,eAAO,MAAM,iBAAiB;;;CAA4E,CAAA;AAC1G,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,OAAO,iBAAiB,CAAC,CAAA;AAEnF,wBAAgB,WAAW,CAAC,EAAE,EAAE,WAAW,GAAG,EAAE,IAAI,SAAS,CAE5D;AAED,kMAAkM;AAClM,wBAAgB,aAAa,CAAC,EAAE,EAAE,SAAS,GAAG,MAAM,EAAE,CAErD;AAED,MAAM,MAAM,YAAY,GAAG;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,EAAE,EAAE,WAAW,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAA;AAExF;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,YAAY,CAuBhE;AAMD;;;;;;;;;GASG;AACH,wBAAgB,cAAc,CAAC,EAAE,EAAE,WAAW,GAAG,MAAM,CA6CtD;AASD,qGAAqG;AACrG,wBAAgB,QAAQ,CAAC,EAAE,EAAE,WAAW,GAAG,MAAM,EAAE,CAqBlD"}

package/dist/guardrailIr.js

@@ -5,7 +5,7 @@
  * An LLM reading corporate policy prose is allowed to propose exactly two
  * things: a verbatim quote anchored to a passage it was shown, and a clause in
  * this closed IR. Everything after that is deterministic code: the validator
- * (`services/control-plane/src/lib/guardrailValidator.ts`) checks the quote by
+ * (the control plane) checks the quote by
  * containment and the IR against the grammar the proxy and the harness gates
  * already enforce, the renderers in `./guardrailRender.ts` turn it into the
  * exact bytes those enforcers read, and cross-language parity fixtures prove
@@ -65,7 +65,7 @@ const rulePredicateDsl_js_1 = require("./rulePredicateDsl.js");
 const decide_js_1 = require("./decide.js");
 /**
  * The `action:` tokens the proxy's classifier synthesises from tool calls.
- * Moved here from `services/control-plane/src/services/learnedHoldService.ts`
+ * Moved here from the control plane
  * so the IR, the validator and the hold miner read one list; that file
  * re-exports it. A token outside this set and outside the observed tool names
  * compiles into a control that can never fire. The last five