@llmops/core 0.3.0 → 0.3.2-beta.1

package/dist/index.d.cts

@@ -1,4 +1,5 @@
-import { $ as variantsSchema, A as ProviderConfig, B as VariantVersionsTable, C as Environment, D as Insertable, E as EnvironmentsTable, F as TargetingRule, G as configsSchema, H as WorkspaceSettings, I as TargetingRulesTable, J as llmRequestsSchema, K as environmentSecretsSchema, L as Updateable, M as SCHEMA_METADATA, N as Selectable, O as LLMRequest, P as TableName, Q as variantVersionsSchema, R as Variant, S as Database, T as EnvironmentSecretsTable, U as WorkspaceSettingsTable, V as VariantsTable, W as configVariantsSchema, X as schemas, Y as providerConfigsSchema, Z as targetingRulesSchema, _ as validateTableData, a as createDatabaseFromConnection, b as ConfigVariantsTable, c as executeWithSchema, d as getMigrations, et as workspaceSettingsSchema, f as matchType, g as validatePartialTableData, h as parseTableData, i as createDatabase, j as ProviderConfigsTable, k as LLMRequestsTable, l as MigrationOptions, m as parsePartialTableData, n as DatabaseOptions, o as detectDatabaseType, p as runAutoMigrations, q as environmentsSchema, r as DatabaseType, s as createNeonDialect, t as DatabaseConnection, u as MigrationResult, v as Config, w as EnvironmentSecret, x as ConfigsTable, y as ConfigVariant, z as VariantVersion } from "./index-CunWjFE4.cjs";
+import { $ as environmentsSchema, A as GuardrailResults, B as TableName, C as Environment, D as GuardrailConfig, E as EnvironmentsTable, F as ProviderConfigsTable, G as VariantVersion, H as TargetingRulesTable, I as ProviderGuardrailOverride, J as WorkspaceSettings, K as VariantVersionsTable, L as ProviderGuardrailOverridesTable, M as LLMRequest, N as LLMRequestsTable, O as GuardrailConfigsTable, P as ProviderConfig, Q as environmentSecretsSchema, R as SCHEMA_METADATA, S as Database, T as EnvironmentSecretsTable, U as Updateable, V as TargetingRule, W as Variant, X as configVariantsSchema, Y as WorkspaceSettingsTable, Z as configsSchema, _ as validateTableData, a as createDatabaseFromConnection, at as targetingRulesSchema, b as ConfigVariantsTable, c as executeWithSchema, ct as workspaceSettingsSchema, d as getMigrations, et as guardrailConfigsSchema, f as matchType, g as validatePartialTableData, h as parseTableData, i as createDatabase, it as schemas, j as Insertable, k as GuardrailResult, l as MigrationOptions, m as parsePartialTableData, n as DatabaseOptions, nt as providerConfigsSchema, o as detectDatabaseType, ot as variantVersionsSchema, p as runAutoMigrations, q as VariantsTable, r as DatabaseType, rt as providerGuardrailOverridesSchema, s as createNeonDialect, st as variantsSchema, t as DatabaseConnection, tt as llmRequestsSchema, u as MigrationResult, v as Config, w as EnvironmentSecret, x as ConfigsTable, y as ConfigVariant, z as Selectable } from "./index-nsx8vXII.cjs";
+import * as kysely0 from "kysely";
 import { Kysely } from "kysely";
 import * as zod0 from "zod";
 import z$1, { z } from "zod";
@@ -691,6 +692,14 @@ type ChatCompletionCreateParamsBase = z.infer<typeof chatCompletionCreateParamsB
  */
 declare const variantJsonDataSchema: z.ZodObject<{
   system_prompt: z.ZodOptional<z.ZodString>;
+  messages: z.ZodOptional<z.ZodArray<z.ZodObject<{
+    role: z.ZodEnum<{
+      system: "system";
+      user: "user";
+      assistant: "assistant";
+    }>;
+    content: z.ZodString;
+  }, z.core.$strip>>>;
   model: z.ZodOptional<z.ZodString>;
   audio: z.ZodNullable<z.ZodOptional<z.ZodObject<{
     format: z.ZodEnum<{
@@ -1148,8 +1157,8 @@ declare const createLLMRequestsDataLayer: (db: Kysely<Database>) => {
     provider: string;
     environmentId: string | null;
     configId: string | null;
-    requestId: string;
     providerConfigId: string | null;
+    requestId: string;
     model: string;
     promptTokens: number;
     completionTokens: number;
@@ -1164,6 +1173,17 @@ declare const createLLMRequestsDataLayer: (db: Kysely<Database>) => {
     isStreaming: boolean;
     userId: string | null;
     tags: Record<string, string>;
+    guardrailResults: {
+      results: {
+        configId: string;
+        functionId: string;
+        hookType: "beforeRequestHook" | "afterRequestHook";
+        verdict: boolean;
+        latencyMs: number;
+      }[];
+      action: "allowed" | "blocked" | "logged";
+      totalLatencyMs: number;
+    } | null;
   } | undefined>;
   /**
    * List LLM requests with filtering and pagination
@@ -1178,8 +1198,8 @@ declare const createLLMRequestsDataLayer: (db: Kysely<Database>) => {
       provider: string;
       environmentId: string | null;
       configId: string | null;
-      requestId: string;
       providerConfigId: string | null;
+      requestId: string;
       model: string;
       promptTokens: number;
       completionTokens: number;
@@ -1194,6 +1214,17 @@ declare const createLLMRequestsDataLayer: (db: Kysely<Database>) => {
       isStreaming: boolean;
       userId: string | null;
       tags: Record<string, string>;
+      guardrailResults: {
+        results: {
+          configId: string;
+          functionId: string;
+          hookType: "beforeRequestHook" | "afterRequestHook";
+          verdict: boolean;
+          latencyMs: number;
+        }[];
+        action: "allowed" | "blocked" | "logged";
+        totalLatencyMs: number;
+      } | null;
     }[];
     total: number;
     limit: number;
@@ -1210,8 +1241,8 @@ declare const createLLMRequestsDataLayer: (db: Kysely<Database>) => {
     provider: string;
     environmentId: string | null;
     configId: string | null;
-    requestId: string;
     providerConfigId: string | null;
+    requestId: string;
     model: string;
     promptTokens: number;
     completionTokens: number;
@@ -1226,6 +1257,17 @@ declare const createLLMRequestsDataLayer: (db: Kysely<Database>) => {
     isStreaming: boolean;
     userId: string | null;
     tags: Record<string, string>;
+    guardrailResults: {
+      results: {
+        configId: string;
+        functionId: string;
+        hookType: "beforeRequestHook" | "afterRequestHook";
+        verdict: boolean;
+        latencyMs: number;
+      }[];
+      action: "allowed" | "blocked" | "logged";
+      totalLatencyMs: number;
+    } | null;
   } | undefined>;
   /**
    * Get total cost for a date range with optional filters
@@ -1491,6 +1533,250 @@ declare const createProviderConfigsDataLayer: (db: Kysely<Database>) => {
   } | undefined>;
 };
 //#endregion
+//#region src/datalayer/guardrailConfigs.d.ts
+declare const createGuardrailConfig: z$1.ZodObject<{
+  name: z$1.ZodString;
+  pluginId: z$1.ZodString;
+  functionId: z$1.ZodString;
+  hookType: z$1.ZodEnum<{
+    beforeRequestHook: "beforeRequestHook";
+    afterRequestHook: "afterRequestHook";
+  }>;
+  parameters: z$1.ZodDefault<z$1.ZodOptional<z$1.ZodRecord<z$1.ZodString, z$1.ZodUnknown>>>;
+  enabled: z$1.ZodDefault<z$1.ZodOptional<z$1.ZodBoolean>>;
+  priority: z$1.ZodDefault<z$1.ZodOptional<z$1.ZodNumber>>;
+  onFail: z$1.ZodDefault<z$1.ZodOptional<z$1.ZodEnum<{
+    block: "block";
+    log: "log";
+  }>>>;
+}, z$1.core.$strip>;
+declare const updateGuardrailConfig: z$1.ZodObject<{
+  id: z$1.ZodString;
+  name: z$1.ZodOptional<z$1.ZodString>;
+  hookType: z$1.ZodOptional<z$1.ZodEnum<{
+    beforeRequestHook: "beforeRequestHook";
+    afterRequestHook: "afterRequestHook";
+  }>>;
+  parameters: z$1.ZodOptional<z$1.ZodRecord<z$1.ZodString, z$1.ZodUnknown>>;
+  enabled: z$1.ZodOptional<z$1.ZodBoolean>;
+  priority: z$1.ZodOptional<z$1.ZodNumber>;
+  onFail: z$1.ZodOptional<z$1.ZodEnum<{
+    block: "block";
+    log: "log";
+  }>>;
+}, z$1.core.$strip>;
+declare const getGuardrailConfigById: z$1.ZodObject<{
+  id: z$1.ZodString;
+}, z$1.core.$strip>;
+declare const deleteGuardrailConfig: z$1.ZodObject<{
+  id: z$1.ZodString;
+}, z$1.core.$strip>;
+declare const listGuardrailConfigs: z$1.ZodObject<{
+  limit: z$1.ZodOptional<z$1.ZodNumber>;
+  offset: z$1.ZodOptional<z$1.ZodNumber>;
+  hookType: z$1.ZodOptional<z$1.ZodEnum<{
+    beforeRequestHook: "beforeRequestHook";
+    afterRequestHook: "afterRequestHook";
+  }>>;
+  enabled: z$1.ZodOptional<z$1.ZodBoolean>;
+}, z$1.core.$strip>;
+declare const createGuardrailConfigsDataLayer: (db: Kysely<Database>) => {
+  createGuardrailConfig: (params: z$1.infer<typeof createGuardrailConfig>) => Promise<{
+    name: string;
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
+    priority: number;
+    enabled: boolean;
+    pluginId: string;
+    functionId: string;
+    hookType: string;
+    parameters: Record<string, unknown>;
+    onFail: string;
+  } | undefined>;
+  updateGuardrailConfig: (params: z$1.infer<typeof updateGuardrailConfig>) => Promise<{
+    name: string;
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
+    priority: number;
+    enabled: boolean;
+    pluginId: string;
+    functionId: string;
+    hookType: string;
+    parameters: Record<string, unknown>;
+    onFail: string;
+  } | undefined>;
+  getGuardrailConfigById: (params: z$1.infer<typeof getGuardrailConfigById>) => Promise<{
+    name: string;
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
+    priority: number;
+    enabled: boolean;
+    pluginId: string;
+    functionId: string;
+    hookType: string;
+    parameters: Record<string, unknown>;
+    onFail: string;
+  } | undefined>;
+  deleteGuardrailConfig: (params: z$1.infer<typeof deleteGuardrailConfig>) => Promise<{
+    name: string;
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
+    priority: number;
+    enabled: boolean;
+    pluginId: string;
+    functionId: string;
+    hookType: string;
+    parameters: Record<string, unknown>;
+    onFail: string;
+  } | undefined>;
+  listGuardrailConfigs: (params?: z$1.infer<typeof listGuardrailConfigs>) => Promise<{
+    name: string;
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
+    priority: number;
+    enabled: boolean;
+    pluginId: string;
+    functionId: string;
+    hookType: string;
+    parameters: Record<string, unknown>;
+    onFail: string;
+  }[]>;
+  countGuardrailConfigs: () => Promise<number>;
+  /**
+   * Get all enabled guardrails for a specific hook type
+   * Ordered by priority (highest first)
+   */
+  getEnabledGuardrailsByHookType: (hookType: "beforeRequestHook" | "afterRequestHook") => Promise<{
+    name: string;
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
+    priority: number;
+    enabled: boolean;
+    pluginId: string;
+    functionId: string;
+    hookType: string;
+    parameters: Record<string, unknown>;
+    onFail: string;
+  }[]>;
+};
+//#endregion
+//#region src/datalayer/providerGuardrailOverrides.d.ts
+declare const createProviderGuardrailOverride: z$1.ZodObject<{
+  providerConfigId: z$1.ZodString;
+  guardrailConfigId: z$1.ZodString;
+  enabled: z$1.ZodDefault<z$1.ZodOptional<z$1.ZodBoolean>>;
+  parameters: z$1.ZodOptional<z$1.ZodNullable<z$1.ZodRecord<z$1.ZodString, z$1.ZodUnknown>>>;
+}, z$1.core.$strip>;
+declare const updateProviderGuardrailOverride: z$1.ZodObject<{
+  id: z$1.ZodString;
+  enabled: z$1.ZodOptional<z$1.ZodBoolean>;
+  parameters: z$1.ZodOptional<z$1.ZodNullable<z$1.ZodRecord<z$1.ZodString, z$1.ZodUnknown>>>;
+}, z$1.core.$strip>;
+declare const getOverrideById: z$1.ZodObject<{
+  id: z$1.ZodString;
+}, z$1.core.$strip>;
+declare const deleteOverride: z$1.ZodObject<{
+  id: z$1.ZodString;
+}, z$1.core.$strip>;
+declare const getOverridesByProviderConfigId: z$1.ZodObject<{
+  providerConfigId: z$1.ZodString;
+}, z$1.core.$strip>;
+declare const getOverridesByGuardrailConfigId: z$1.ZodObject<{
+  guardrailConfigId: z$1.ZodString;
+}, z$1.core.$strip>;
+declare const getOverrideByProviderAndGuardrail: z$1.ZodObject<{
+  providerConfigId: z$1.ZodString;
+  guardrailConfigId: z$1.ZodString;
+}, z$1.core.$strip>;
+declare const createProviderGuardrailOverridesDataLayer: (db: Kysely<Database>) => {
+  createProviderGuardrailOverride: (params: z$1.infer<typeof createProviderGuardrailOverride>) => Promise<{
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
+    enabled: boolean;
+    parameters: Record<string, unknown> | null;
+    providerConfigId: string;
+    guardrailConfigId: string;
+  } | undefined>;
+  updateProviderGuardrailOverride: (params: z$1.infer<typeof updateProviderGuardrailOverride>) => Promise<{
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
+    enabled: boolean;
+    parameters: Record<string, unknown> | null;
+    providerConfigId: string;
+    guardrailConfigId: string;
+  } | undefined>;
+  getOverrideById: (params: z$1.infer<typeof getOverrideById>) => Promise<{
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
+    enabled: boolean;
+    parameters: Record<string, unknown> | null;
+    providerConfigId: string;
+    guardrailConfigId: string;
+  } | undefined>;
+  deleteProviderGuardrailOverride: (params: z$1.infer<typeof deleteOverride>) => Promise<{
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
+    enabled: boolean;
+    parameters: Record<string, unknown> | null;
+    providerConfigId: string;
+    guardrailConfigId: string;
+  } | undefined>;
+  getOverridesByProviderConfigId: (params: z$1.infer<typeof getOverridesByProviderConfigId>) => Promise<{
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
+    enabled: boolean;
+    parameters: Record<string, unknown> | null;
+    providerConfigId: string;
+    guardrailConfigId: string;
+  }[]>;
+  getOverridesByGuardrailConfigId: (params: z$1.infer<typeof getOverridesByGuardrailConfigId>) => Promise<{
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
+    enabled: boolean;
+    parameters: Record<string, unknown> | null;
+    providerConfigId: string;
+    guardrailConfigId: string;
+  }[]>;
+  getOverrideByProviderAndGuardrail: (params: z$1.infer<typeof getOverrideByProviderAndGuardrail>) => Promise<{
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
+    enabled: boolean;
+    parameters: Record<string, unknown> | null;
+    providerConfigId: string;
+    guardrailConfigId: string;
+  } | undefined>;
+  /**
+   * Upsert provider guardrail override - creates if not exists, updates if exists
+   */
+  upsertProviderGuardrailOverride: (params: z$1.infer<typeof createProviderGuardrailOverride>) => Promise<{
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
+    enabled: boolean;
+    parameters: Record<string, unknown> | null;
+    providerConfigId: string;
+    guardrailConfigId: string;
+  } | undefined>;
+  /**
+   * Delete all overrides for a guardrail config
+   * Useful when deleting a guardrail config
+   */
+  deleteOverridesByGuardrailConfigId: (params: z$1.infer<typeof getOverridesByGuardrailConfigId>) => Promise<kysely0.DeleteResult[]>;
+};
+//#endregion
 //#region src/datalayer/index.d.ts
 declare const createDataLayer: (db: Kysely<Database>) => Promise<{
   getWorkspaceSettings: () => Promise<{
@@ -1932,6 +2218,106 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     enabled: boolean;
     conditions: Record<string, unknown>;
   } | undefined>;
+  createProviderGuardrailOverride: (params: zod0.infer<zod0.ZodObject<{
+    providerConfigId: zod0.ZodString;
+    guardrailConfigId: zod0.ZodString;
+    enabled: zod0.ZodDefault<zod0.ZodOptional<zod0.ZodBoolean>>;
+    parameters: zod0.ZodOptional<zod0.ZodNullable<zod0.ZodRecord<zod0.ZodString, zod0.ZodUnknown>>>;
+  }, better_auth0.$strip>>) => Promise<{
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
+    enabled: boolean;
+    parameters: Record<string, unknown> | null;
+    providerConfigId: string;
+    guardrailConfigId: string;
+  } | undefined>;
+  updateProviderGuardrailOverride: (params: zod0.infer<zod0.ZodObject<{
+    id: zod0.ZodString;
+    enabled: zod0.ZodOptional<zod0.ZodBoolean>;
+    parameters: zod0.ZodOptional<zod0.ZodNullable<zod0.ZodRecord<zod0.ZodString, zod0.ZodUnknown>>>;
+  }, better_auth0.$strip>>) => Promise<{
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
+    enabled: boolean;
+    parameters: Record<string, unknown> | null;
+    providerConfigId: string;
+    guardrailConfigId: string;
+  } | undefined>;
+  getOverrideById: (params: zod0.infer<zod0.ZodObject<{
+    id: zod0.ZodString;
+  }, better_auth0.$strip>>) => Promise<{
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
+    enabled: boolean;
+    parameters: Record<string, unknown> | null;
+    providerConfigId: string;
+    guardrailConfigId: string;
+  } | undefined>;
+  deleteProviderGuardrailOverride: (params: zod0.infer<zod0.ZodObject<{
+    id: zod0.ZodString;
+  }, better_auth0.$strip>>) => Promise<{
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
+    enabled: boolean;
+    parameters: Record<string, unknown> | null;
+    providerConfigId: string;
+    guardrailConfigId: string;
+  } | undefined>;
+  getOverridesByProviderConfigId: (params: zod0.infer<zod0.ZodObject<{
+    providerConfigId: zod0.ZodString;
+  }, better_auth0.$strip>>) => Promise<{
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
+    enabled: boolean;
+    parameters: Record<string, unknown> | null;
+    providerConfigId: string;
+    guardrailConfigId: string;
+  }[]>;
+  getOverridesByGuardrailConfigId: (params: zod0.infer<zod0.ZodObject<{
+    guardrailConfigId: zod0.ZodString;
+  }, better_auth0.$strip>>) => Promise<{
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
+    enabled: boolean;
+    parameters: Record<string, unknown> | null;
+    providerConfigId: string;
+    guardrailConfigId: string;
+  }[]>;
+  getOverrideByProviderAndGuardrail: (params: zod0.infer<zod0.ZodObject<{
+    providerConfigId: zod0.ZodString;
+    guardrailConfigId: zod0.ZodString;
+  }, better_auth0.$strip>>) => Promise<{
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
+    enabled: boolean;
+    parameters: Record<string, unknown> | null;
+    providerConfigId: string;
+    guardrailConfigId: string;
+  } | undefined>;
+  upsertProviderGuardrailOverride: (params: zod0.infer<zod0.ZodObject<{
+    providerConfigId: zod0.ZodString;
+    guardrailConfigId: zod0.ZodString;
+    enabled: zod0.ZodDefault<zod0.ZodOptional<zod0.ZodBoolean>>;
+    parameters: zod0.ZodOptional<zod0.ZodNullable<zod0.ZodRecord<zod0.ZodString, zod0.ZodUnknown>>>;
+  }, better_auth0.$strip>>) => Promise<{
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
+    enabled: boolean;
+    parameters: Record<string, unknown> | null;
+    providerConfigId: string;
+    guardrailConfigId: string;
+  } | undefined>;
+  deleteOverridesByGuardrailConfigId: (params: zod0.infer<zod0.ZodObject<{
+    guardrailConfigId: zod0.ZodString;
+  }, better_auth0.$strip>>) => Promise<kysely0.DeleteResult[]>;
   createProviderConfig: (params: zod0.infer<zod0.ZodObject<{
     providerId: zod0.ZodString;
     slug: zod0.ZodOptional<zod0.ZodNullable<zod0.ZodString>>;
@@ -2053,8 +2439,8 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     provider: string;
     environmentId: string | null;
     configId: string | null;
-    requestId: string;
     providerConfigId: string | null;
+    requestId: string;
     model: string;
     promptTokens: number;
     completionTokens: number;
@@ -2069,6 +2455,17 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     isStreaming: boolean;
     userId: string | null;
     tags: Record<string, string>;
+    guardrailResults: {
+      results: {
+        configId: string;
+        functionId: string;
+        hookType: "beforeRequestHook" | "afterRequestHook";
+        verdict: boolean;
+        latencyMs: number;
+      }[];
+      action: "allowed" | "blocked" | "logged";
+      totalLatencyMs: number;
+    } | null;
   } | undefined>;
   listRequests: (params?: zod0.infer<zod0.ZodObject<{
     limit: zod0.ZodDefault<zod0.ZodNumber>;
@@ -2091,8 +2488,8 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
       provider: string;
       environmentId: string | null;
       configId: string | null;
-      requestId: string;
       providerConfigId: string | null;
+      requestId: string;
       model: string;
       promptTokens: number;
       completionTokens: number;
@@ -2107,6 +2504,17 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
       isStreaming: boolean;
       userId: string | null;
       tags: Record<string, string>;
+      guardrailResults: {
+        results: {
+          configId: string;
+          functionId: string;
+          hookType: "beforeRequestHook" | "afterRequestHook";
+          verdict: boolean;
+          latencyMs: number;
+        }[];
+        action: "allowed" | "blocked" | "logged";
+        totalLatencyMs: number;
+      } | null;
     }[];
     total: number;
     limit: number;
@@ -2120,8 +2528,8 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     provider: string;
     environmentId: string | null;
     configId: string | null;
-    requestId: string;
     providerConfigId: string | null;
+    requestId: string;
     model: string;
     promptTokens: number;
     completionTokens: number;
@@ -2136,6 +2544,17 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     isStreaming: boolean;
     userId: string | null;
     tags: Record<string, string>;
+    guardrailResults: {
+      results: {
+        configId: string;
+        functionId: string;
+        hookType: "beforeRequestHook" | "afterRequestHook";
+        verdict: boolean;
+        latencyMs: number;
+      }[];
+      action: "allowed" | "blocked" | "logged";
+      totalLatencyMs: number;
+    } | null;
   } | undefined>;
   getTotalCost: (params: zod0.infer<zod0.ZodObject<{
     startDate: zod0.ZodDate;
@@ -2257,6 +2676,126 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     key: string;
     value: string;
   }[]>;
+  createGuardrailConfig: (params: zod0.infer<zod0.ZodObject<{
+    name: zod0.ZodString;
+    pluginId: zod0.ZodString;
+    functionId: zod0.ZodString;
+    hookType: zod0.ZodEnum<{
+      beforeRequestHook: "beforeRequestHook";
+      afterRequestHook: "afterRequestHook";
+    }>;
+    parameters: zod0.ZodDefault<zod0.ZodOptional<zod0.ZodRecord<zod0.ZodString, zod0.ZodUnknown>>>;
+    enabled: zod0.ZodDefault<zod0.ZodOptional<zod0.ZodBoolean>>;
+    priority: zod0.ZodDefault<zod0.ZodOptional<zod0.ZodNumber>>;
+    onFail: zod0.ZodDefault<zod0.ZodOptional<zod0.ZodEnum<{
+      block: "block";
+      log: "log";
+    }>>>;
+  }, better_auth0.$strip>>) => Promise<{
+    name: string;
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
+    priority: number;
+    enabled: boolean;
+    pluginId: string;
+    functionId: string;
+    hookType: string;
+    parameters: Record<string, unknown>;
+    onFail: string;
+  } | undefined>;
+  updateGuardrailConfig: (params: zod0.infer<zod0.ZodObject<{
+    id: zod0.ZodString;
+    name: zod0.ZodOptional<zod0.ZodString>;
+    hookType: zod0.ZodOptional<zod0.ZodEnum<{
+      beforeRequestHook: "beforeRequestHook";
+      afterRequestHook: "afterRequestHook";
+    }>>;
+    parameters: zod0.ZodOptional<zod0.ZodRecord<zod0.ZodString, zod0.ZodUnknown>>;
+    enabled: zod0.ZodOptional<zod0.ZodBoolean>;
+    priority: zod0.ZodOptional<zod0.ZodNumber>;
+    onFail: zod0.ZodOptional<zod0.ZodEnum<{
+      block: "block";
+      log: "log";
+    }>>;
+  }, better_auth0.$strip>>) => Promise<{
+    name: string;
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
+    priority: number;
+    enabled: boolean;
+    pluginId: string;
+    functionId: string;
+    hookType: string;
+    parameters: Record<string, unknown>;
+    onFail: string;
+  } | undefined>;
+  getGuardrailConfigById: (params: zod0.infer<zod0.ZodObject<{
+    id: zod0.ZodString;
+  }, better_auth0.$strip>>) => Promise<{
+    name: string;
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
+    priority: number;
+    enabled: boolean;
+    pluginId: string;
+    functionId: string;
+    hookType: string;
+    parameters: Record<string, unknown>;
+    onFail: string;
+  } | undefined>;
+  deleteGuardrailConfig: (params: zod0.infer<zod0.ZodObject<{
+    id: zod0.ZodString;
+  }, better_auth0.$strip>>) => Promise<{
+    name: string;
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
+    priority: number;
+    enabled: boolean;
+    pluginId: string;
+    functionId: string;
+    hookType: string;
+    parameters: Record<string, unknown>;
+    onFail: string;
+  } | undefined>;
+  listGuardrailConfigs: (params?: zod0.infer<zod0.ZodObject<{
+    limit: zod0.ZodOptional<zod0.ZodNumber>;
+    offset: zod0.ZodOptional<zod0.ZodNumber>;
+    hookType: zod0.ZodOptional<zod0.ZodEnum<{
+      beforeRequestHook: "beforeRequestHook";
+      afterRequestHook: "afterRequestHook";
+    }>>;
+    enabled: zod0.ZodOptional<zod0.ZodBoolean>;
+  }, better_auth0.$strip>>) => Promise<{
+    name: string;
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
+    priority: number;
+    enabled: boolean;
+    pluginId: string;
+    functionId: string;
+    hookType: string;
+    parameters: Record<string, unknown>;
+    onFail: string;
+  }[]>;
+  countGuardrailConfigs: () => Promise<number>;
+  getEnabledGuardrailsByHookType: (hookType: "beforeRequestHook" | "afterRequestHook") => Promise<{
+    name: string;
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
+    priority: number;
+    enabled: boolean;
+    pluginId: string;
+    functionId: string;
+    hookType: string;
+    parameters: Record<string, unknown>;
+    onFail: string;
+  }[]>;
   createEnvironmentSecret: (params: zod0.infer<zod0.ZodObject<{
     environmentId: zod0.ZodUUID;
     keyName: zod0.ZodString;
@@ -2887,6 +3426,30 @@ interface ManifestEnvironment {
   name: string;
   isProd: boolean;
 }
+/**
+ * Guardrail configuration in the manifest
+ * Pre-loaded for gateway use without additional DB queries
+ */
+interface ManifestGuardrail {
+  id: string;
+  name: string;
+  pluginId: string;
+  functionId: string;
+  hookType: 'beforeRequestHook' | 'afterRequestHook';
+  parameters: Record<string, unknown>;
+  priority: number;
+  onFail: 'block' | 'log';
+}
+/**
+ * Provider-specific guardrail override in the manifest
+ */
+interface ManifestProviderGuardrailOverride {
+  id: string;
+  providerConfigId: string;
+  guardrailConfigId: string;
+  enabled: boolean;
+  parameters: Record<string, unknown> | null;
+}
 /**
  * The complete routing manifest
  * Stored in cache under key: "gateway:manifest"
@@ -2900,6 +3463,11 @@ interface GatewayManifest {
   environmentsBySlug: Record<string, string>;
   routingTable: Record<string, Record<string, ManifestTargetingRule[]>>;
   secretToEnvironment: Record<string, string>;
+  guardrails: {
+    beforeRequestHook: ManifestGuardrail[];
+    afterRequestHook: ManifestGuardrail[];
+  };
+  providerGuardrailOverrides: Record<string, ManifestProviderGuardrailOverride[]>;
 }
 /**
  * Context passed to JSONLogic for condition evaluation
@@ -3010,4 +3578,4 @@ declare class ManifestRouter {
   routeWithWeights(configIdOrSlug: string, environmentId: string, context?: RoutingContext): RoutingResult | null;
 }
 //#endregion
-export { type AnthropicProviderConfig, type AnyProviderConfig, AuthClientDatabaseConfig, AuthClientOptions, type AzureAIProviderConfig, type AzureOpenAIProviderConfig, BaseCacheConfig, type BaseProviderConfig, type BedrockProviderConfig, CacheBackend, CacheBackendType, CacheConfig, CacheEntry, CacheOptions, CacheService, CacheStats, ChatCompletionCreateParamsBase, Config, ConfigVariant, ConfigVariantsTable, ConfigsTable, type CortexProviderConfig, CostResult, Database, DatabaseConnection, DatabaseOptions, DatabaseType, Environment, EnvironmentSecret, EnvironmentSecretsTable, EnvironmentsTable, FileCacheBackend, FileCacheConfig, type FireworksAIProviderConfig, GatewayManifest, type GoogleProviderConfig, type HuggingFaceProviderConfig, Insertable, LLMOpsClient, LLMOpsConfig, type LLMOpsConfigInput, LLMRequest, type LLMRequestInsert, LLMRequestsTable, MS, ManifestBuilder, ManifestConfig, ManifestEnvironment, ManifestRouter, ManifestService, ManifestTargetingRule, ManifestVariantVersion, MemoryCacheBackend, MemoryCacheConfig, MigrationOptions, MigrationResult, type MistralAIProviderConfig, ModelPricing, ModelsDevPricingProvider, type OpenAIProviderConfig, type OracleProviderConfig, Prettify, PricingProvider, ProviderConfig, type ProviderConfigMap, ProviderConfigsTable, type ProvidersConfig, RoutingContext, RoutingResult, SCHEMA_METADATA, type SagemakerProviderConfig, Selectable, type StabilityAIProviderConfig, SupportedProviders, TableName, TargetingRule, TargetingRulesTable, Updateable, UsageData, type ValidatedLLMOpsConfig, Variant, VariantJsonData, VariantVersion, VariantVersionsTable, VariantsTable, type VertexAIProviderConfig, type WorkersAIProviderConfig, WorkspaceSettings, WorkspaceSettingsTable, calculateCost, chatCompletionCreateParamsBaseSchema, configVariantsSchema, configsSchema, createDataLayer, createDatabase, createDatabaseFromConnection, createLLMRequestsDataLayer, createNeonDialect, createProviderConfigsDataLayer, createWorkspaceSettingsDataLayer, detectDatabaseType, dollarsToMicroDollars, environmentSecretsSchema, environmentsSchema, executeWithSchema, formatCost, gateway, generateId, getAuthClientOptions, getDefaultPricingProvider, getMigrations, llmRequestsSchema, llmopsConfigSchema, logger, matchType, microDollarsToDollars, parsePartialTableData, parseTableData, providerConfigsSchema, runAutoMigrations, schemas, targetingRulesSchema, validateLLMOpsConfig, validatePartialTableData, validateTableData, variantJsonDataSchema, variantVersionsSchema, variantsSchema, workspaceSettingsSchema };
+export { type AnthropicProviderConfig, type AnyProviderConfig, AuthClientDatabaseConfig, AuthClientOptions, type AzureAIProviderConfig, type AzureOpenAIProviderConfig, BaseCacheConfig, type BaseProviderConfig, type BedrockProviderConfig, CacheBackend, CacheBackendType, CacheConfig, CacheEntry, CacheOptions, CacheService, CacheStats, ChatCompletionCreateParamsBase, Config, ConfigVariant, ConfigVariantsTable, ConfigsTable, type CortexProviderConfig, CostResult, Database, DatabaseConnection, DatabaseOptions, DatabaseType, Environment, EnvironmentSecret, EnvironmentSecretsTable, EnvironmentsTable, FileCacheBackend, FileCacheConfig, type FireworksAIProviderConfig, GatewayManifest, type GoogleProviderConfig, GuardrailConfig, GuardrailConfigsTable, GuardrailResult, GuardrailResults, type HuggingFaceProviderConfig, Insertable, LLMOpsClient, LLMOpsConfig, type LLMOpsConfigInput, LLMRequest, type LLMRequestInsert, LLMRequestsTable, MS, ManifestBuilder, ManifestConfig, ManifestEnvironment, ManifestGuardrail, ManifestProviderGuardrailOverride, ManifestRouter, ManifestService, ManifestTargetingRule, ManifestVariantVersion, MemoryCacheBackend, MemoryCacheConfig, MigrationOptions, MigrationResult, type MistralAIProviderConfig, ModelPricing, ModelsDevPricingProvider, type OpenAIProviderConfig, type OracleProviderConfig, Prettify, PricingProvider, ProviderConfig, type ProviderConfigMap, ProviderConfigsTable, ProviderGuardrailOverride, ProviderGuardrailOverridesTable, type ProvidersConfig, RoutingContext, RoutingResult, SCHEMA_METADATA, type SagemakerProviderConfig, Selectable, type StabilityAIProviderConfig, SupportedProviders, TableName, TargetingRule, TargetingRulesTable, Updateable, UsageData, type ValidatedLLMOpsConfig, Variant, VariantJsonData, VariantVersion, VariantVersionsTable, VariantsTable, type VertexAIProviderConfig, type WorkersAIProviderConfig, WorkspaceSettings, WorkspaceSettingsTable, calculateCost, chatCompletionCreateParamsBaseSchema, configVariantsSchema, configsSchema, createDataLayer, createDatabase, createDatabaseFromConnection, createGuardrailConfigsDataLayer, createLLMRequestsDataLayer, createNeonDialect, createProviderConfigsDataLayer, createProviderGuardrailOverridesDataLayer, createWorkspaceSettingsDataLayer, detectDatabaseType, dollarsToMicroDollars, environmentSecretsSchema, environmentsSchema, executeWithSchema, formatCost, gateway, generateId, getAuthClientOptions, getDefaultPricingProvider, getMigrations, guardrailConfigsSchema, llmRequestsSchema, llmopsConfigSchema, logger, matchType, microDollarsToDollars, parsePartialTableData, parseTableData, providerConfigsSchema, providerGuardrailOverridesSchema, runAutoMigrations, schemas, targetingRulesSchema, validateLLMOpsConfig, validatePartialTableData, validateTableData, variantJsonDataSchema, variantVersionsSchema, variantsSchema, workspaceSettingsSchema };