@llmops/core 0.3.0 → 0.3.2-beta.1

package/dist/index.d.mts

@@ -1,9 +1,10 @@
-import { $ as variantsSchema, A as ProviderConfig, B as VariantVersionsTable, C as Environment, D as Insertable, E as EnvironmentsTable, F as TargetingRule, G as configsSchema, H as WorkspaceSettings, I as TargetingRulesTable, J as llmRequestsSchema, K as environmentSecretsSchema, L as Updateable, M as SCHEMA_METADATA, N as Selectable, O as LLMRequest, P as TableName, Q as variantVersionsSchema, R as Variant, S as Database, T as EnvironmentSecretsTable, U as WorkspaceSettingsTable, V as VariantsTable, W as configVariantsSchema, X as schemas, Y as providerConfigsSchema, Z as targetingRulesSchema, _ as validateTableData, a as createDatabaseFromConnection, b as ConfigVariantsTable, c as executeWithSchema, d as getMigrations, et as workspaceSettingsSchema, f as matchType, g as validatePartialTableData, h as parseTableData, i as createDatabase, j as ProviderConfigsTable, k as LLMRequestsTable, l as MigrationOptions, m as parsePartialTableData, n as DatabaseOptions, o as detectDatabaseType, p as runAutoMigrations, q as environmentsSchema, r as DatabaseType, s as createNeonDialect, t as DatabaseConnection, u as MigrationResult, v as Config, w as EnvironmentSecret, x as ConfigsTable, y as ConfigVariant, z as VariantVersion } from "./index-COkIT6TH.mjs";
+import { $ as environmentsSchema, A as GuardrailResults, B as TableName, C as Environment, D as GuardrailConfig, E as EnvironmentsTable, F as ProviderConfigsTable, G as VariantVersion, H as TargetingRulesTable, I as ProviderGuardrailOverride, J as WorkspaceSettings, K as VariantVersionsTable, L as ProviderGuardrailOverridesTable, M as LLMRequest, N as LLMRequestsTable, O as GuardrailConfigsTable, P as ProviderConfig, Q as environmentSecretsSchema, R as SCHEMA_METADATA, S as Database, T as EnvironmentSecretsTable, U as Updateable, V as TargetingRule, W as Variant, X as configVariantsSchema, Y as WorkspaceSettingsTable, Z as configsSchema, _ as validateTableData, a as createDatabaseFromConnection, at as targetingRulesSchema, b as ConfigVariantsTable, c as executeWithSchema, ct as workspaceSettingsSchema, d as getMigrations, et as guardrailConfigsSchema, f as matchType, g as validatePartialTableData, h as parseTableData, i as createDatabase, it as schemas, j as Insertable, k as GuardrailResult, l as MigrationOptions, m as parsePartialTableData, n as DatabaseOptions, nt as providerConfigsSchema, o as detectDatabaseType, ot as variantVersionsSchema, p as runAutoMigrations, q as VariantsTable, r as DatabaseType, rt as providerGuardrailOverridesSchema, s as createNeonDialect, st as variantsSchema, t as DatabaseConnection, tt as llmRequestsSchema, u as MigrationResult, v as Config, w as EnvironmentSecret, x as ConfigsTable, y as ConfigVariant, z as Selectable } from "./index-BMN3ZSTf.mjs";
 import gateway from "@llmops/gateway";
+import * as kysely0 from "kysely";
 import { Kysely } from "kysely";
 import pino from "pino";
 import { RulesLogic } from "json-logic-js";
-import * as zod33 from "zod";
+import * as zod37 from "zod";
 import z$1, { z } from "zod";
 import * as better_auth0 from "better-auth";
 import { BetterAuthOptions } from "better-auth";
@@ -691,6 +692,14 @@ type ChatCompletionCreateParamsBase = z.infer<typeof chatCompletionCreateParamsB
  */
 declare const variantJsonDataSchema: z.ZodObject<{
   system_prompt: z.ZodOptional<z.ZodString>;
+  messages: z.ZodOptional<z.ZodArray<z.ZodObject<{
+    role: z.ZodEnum<{
+      system: "system";
+      user: "user";
+      assistant: "assistant";
+    }>;
+    content: z.ZodString;
+  }, z.core.$strip>>>;
   model: z.ZodOptional<z.ZodString>;
   audio: z.ZodNullable<z.ZodOptional<z.ZodObject<{
     format: z.ZodEnum<{
@@ -1148,8 +1157,8 @@ declare const createLLMRequestsDataLayer: (db: Kysely<Database>) => {
     provider: string;
     environmentId: string | null;
     configId: string | null;
-    requestId: string;
     providerConfigId: string | null;
+    requestId: string;
     model: string;
     promptTokens: number;
     completionTokens: number;
@@ -1164,6 +1173,17 @@ declare const createLLMRequestsDataLayer: (db: Kysely<Database>) => {
     isStreaming: boolean;
     userId: string | null;
     tags: Record<string, string>;
+    guardrailResults: {
+      results: {
+        configId: string;
+        functionId: string;
+        hookType: "beforeRequestHook" | "afterRequestHook";
+        verdict: boolean;
+        latencyMs: number;
+      }[];
+      action: "allowed" | "blocked" | "logged";
+      totalLatencyMs: number;
+    } | null;
   } | undefined>;
   /**
    * List LLM requests with filtering and pagination
@@ -1178,8 +1198,8 @@ declare const createLLMRequestsDataLayer: (db: Kysely<Database>) => {
       provider: string;
       environmentId: string | null;
       configId: string | null;
-      requestId: string;
       providerConfigId: string | null;
+      requestId: string;
       model: string;
       promptTokens: number;
       completionTokens: number;
@@ -1194,6 +1214,17 @@ declare const createLLMRequestsDataLayer: (db: Kysely<Database>) => {
       isStreaming: boolean;
       userId: string | null;
       tags: Record<string, string>;
+      guardrailResults: {
+        results: {
+          configId: string;
+          functionId: string;
+          hookType: "beforeRequestHook" | "afterRequestHook";
+          verdict: boolean;
+          latencyMs: number;
+        }[];
+        action: "allowed" | "blocked" | "logged";
+        totalLatencyMs: number;
+      } | null;
     }[];
     total: number;
     limit: number;
@@ -1210,8 +1241,8 @@ declare const createLLMRequestsDataLayer: (db: Kysely<Database>) => {
     provider: string;
     environmentId: string | null;
     configId: string | null;
-    requestId: string;
     providerConfigId: string | null;
+    requestId: string;
     model: string;
     promptTokens: number;
     completionTokens: number;
@@ -1226,6 +1257,17 @@ declare const createLLMRequestsDataLayer: (db: Kysely<Database>) => {
     isStreaming: boolean;
     userId: string | null;
     tags: Record<string, string>;
+    guardrailResults: {
+      results: {
+        configId: string;
+        functionId: string;
+        hookType: "beforeRequestHook" | "afterRequestHook";
+        verdict: boolean;
+        latencyMs: number;
+      }[];
+      action: "allowed" | "blocked" | "logged";
+      totalLatencyMs: number;
+    } | null;
   } | undefined>;
   /**
    * Get total cost for a date range with optional filters
@@ -1491,6 +1533,250 @@ declare const createProviderConfigsDataLayer: (db: Kysely<Database>) => {
   } | undefined>;
 };
 //#endregion
+//#region src/datalayer/guardrailConfigs.d.ts
+declare const createGuardrailConfig: z$1.ZodObject<{
+  name: z$1.ZodString;
+  pluginId: z$1.ZodString;
+  functionId: z$1.ZodString;
+  hookType: z$1.ZodEnum<{
+    beforeRequestHook: "beforeRequestHook";
+    afterRequestHook: "afterRequestHook";
+  }>;
+  parameters: z$1.ZodDefault<z$1.ZodOptional<z$1.ZodRecord<z$1.ZodString, z$1.ZodUnknown>>>;
+  enabled: z$1.ZodDefault<z$1.ZodOptional<z$1.ZodBoolean>>;
+  priority: z$1.ZodDefault<z$1.ZodOptional<z$1.ZodNumber>>;
+  onFail: z$1.ZodDefault<z$1.ZodOptional<z$1.ZodEnum<{
+    block: "block";
+    log: "log";
+  }>>>;
+}, z$1.core.$strip>;
+declare const updateGuardrailConfig: z$1.ZodObject<{
+  id: z$1.ZodString;
+  name: z$1.ZodOptional<z$1.ZodString>;
+  hookType: z$1.ZodOptional<z$1.ZodEnum<{
+    beforeRequestHook: "beforeRequestHook";
+    afterRequestHook: "afterRequestHook";
+  }>>;
+  parameters: z$1.ZodOptional<z$1.ZodRecord<z$1.ZodString, z$1.ZodUnknown>>;
+  enabled: z$1.ZodOptional<z$1.ZodBoolean>;
+  priority: z$1.ZodOptional<z$1.ZodNumber>;
+  onFail: z$1.ZodOptional<z$1.ZodEnum<{
+    block: "block";
+    log: "log";
+  }>>;
+}, z$1.core.$strip>;
+declare const getGuardrailConfigById: z$1.ZodObject<{
+  id: z$1.ZodString;
+}, z$1.core.$strip>;
+declare const deleteGuardrailConfig: z$1.ZodObject<{
+  id: z$1.ZodString;
+}, z$1.core.$strip>;
+declare const listGuardrailConfigs: z$1.ZodObject<{
+  limit: z$1.ZodOptional<z$1.ZodNumber>;
+  offset: z$1.ZodOptional<z$1.ZodNumber>;
+  hookType: z$1.ZodOptional<z$1.ZodEnum<{
+    beforeRequestHook: "beforeRequestHook";
+    afterRequestHook: "afterRequestHook";
+  }>>;
+  enabled: z$1.ZodOptional<z$1.ZodBoolean>;
+}, z$1.core.$strip>;
+declare const createGuardrailConfigsDataLayer: (db: Kysely<Database>) => {
+  createGuardrailConfig: (params: z$1.infer<typeof createGuardrailConfig>) => Promise<{
+    name: string;
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
+    priority: number;
+    enabled: boolean;
+    pluginId: string;
+    functionId: string;
+    hookType: string;
+    parameters: Record<string, unknown>;
+    onFail: string;
+  } | undefined>;
+  updateGuardrailConfig: (params: z$1.infer<typeof updateGuardrailConfig>) => Promise<{
+    name: string;
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
+    priority: number;
+    enabled: boolean;
+    pluginId: string;
+    functionId: string;
+    hookType: string;
+    parameters: Record<string, unknown>;
+    onFail: string;
+  } | undefined>;
+  getGuardrailConfigById: (params: z$1.infer<typeof getGuardrailConfigById>) => Promise<{
+    name: string;
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
+    priority: number;
+    enabled: boolean;
+    pluginId: string;
+    functionId: string;
+    hookType: string;
+    parameters: Record<string, unknown>;
+    onFail: string;
+  } | undefined>;
+  deleteGuardrailConfig: (params: z$1.infer<typeof deleteGuardrailConfig>) => Promise<{
+    name: string;
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
+    priority: number;
+    enabled: boolean;
+    pluginId: string;
+    functionId: string;
+    hookType: string;
+    parameters: Record<string, unknown>;
+    onFail: string;
+  } | undefined>;
+  listGuardrailConfigs: (params?: z$1.infer<typeof listGuardrailConfigs>) => Promise<{
+    name: string;
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
+    priority: number;
+    enabled: boolean;
+    pluginId: string;
+    functionId: string;
+    hookType: string;
+    parameters: Record<string, unknown>;
+    onFail: string;
+  }[]>;
+  countGuardrailConfigs: () => Promise<number>;
+  /**
+   * Get all enabled guardrails for a specific hook type
+   * Ordered by priority (highest first)
+   */
+  getEnabledGuardrailsByHookType: (hookType: "beforeRequestHook" | "afterRequestHook") => Promise<{
+    name: string;
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
+    priority: number;
+    enabled: boolean;
+    pluginId: string;
+    functionId: string;
+    hookType: string;
+    parameters: Record<string, unknown>;
+    onFail: string;
+  }[]>;
+};
+//#endregion
+//#region src/datalayer/providerGuardrailOverrides.d.ts
+declare const createProviderGuardrailOverride: z$1.ZodObject<{
+  providerConfigId: z$1.ZodString;
+  guardrailConfigId: z$1.ZodString;
+  enabled: z$1.ZodDefault<z$1.ZodOptional<z$1.ZodBoolean>>;
+  parameters: z$1.ZodOptional<z$1.ZodNullable<z$1.ZodRecord<z$1.ZodString, z$1.ZodUnknown>>>;
+}, z$1.core.$strip>;
+declare const updateProviderGuardrailOverride: z$1.ZodObject<{
+  id: z$1.ZodString;
+  enabled: z$1.ZodOptional<z$1.ZodBoolean>;
+  parameters: z$1.ZodOptional<z$1.ZodNullable<z$1.ZodRecord<z$1.ZodString, z$1.ZodUnknown>>>;
+}, z$1.core.$strip>;
+declare const getOverrideById: z$1.ZodObject<{
+  id: z$1.ZodString;
+}, z$1.core.$strip>;
+declare const deleteOverride: z$1.ZodObject<{
+  id: z$1.ZodString;
+}, z$1.core.$strip>;
+declare const getOverridesByProviderConfigId: z$1.ZodObject<{
+  providerConfigId: z$1.ZodString;
+}, z$1.core.$strip>;
+declare const getOverridesByGuardrailConfigId: z$1.ZodObject<{
+  guardrailConfigId: z$1.ZodString;
+}, z$1.core.$strip>;
+declare const getOverrideByProviderAndGuardrail: z$1.ZodObject<{
+  providerConfigId: z$1.ZodString;
+  guardrailConfigId: z$1.ZodString;
+}, z$1.core.$strip>;
+declare const createProviderGuardrailOverridesDataLayer: (db: Kysely<Database>) => {
+  createProviderGuardrailOverride: (params: z$1.infer<typeof createProviderGuardrailOverride>) => Promise<{
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
+    enabled: boolean;
+    parameters: Record<string, unknown> | null;
+    providerConfigId: string;
+    guardrailConfigId: string;
+  } | undefined>;
+  updateProviderGuardrailOverride: (params: z$1.infer<typeof updateProviderGuardrailOverride>) => Promise<{
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
+    enabled: boolean;
+    parameters: Record<string, unknown> | null;
+    providerConfigId: string;
+    guardrailConfigId: string;
+  } | undefined>;
+  getOverrideById: (params: z$1.infer<typeof getOverrideById>) => Promise<{
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
+    enabled: boolean;
+    parameters: Record<string, unknown> | null;
+    providerConfigId: string;
+    guardrailConfigId: string;
+  } | undefined>;
+  deleteProviderGuardrailOverride: (params: z$1.infer<typeof deleteOverride>) => Promise<{
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
+    enabled: boolean;
+    parameters: Record<string, unknown> | null;
+    providerConfigId: string;
+    guardrailConfigId: string;
+  } | undefined>;
+  getOverridesByProviderConfigId: (params: z$1.infer<typeof getOverridesByProviderConfigId>) => Promise<{
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
+    enabled: boolean;
+    parameters: Record<string, unknown> | null;
+    providerConfigId: string;
+    guardrailConfigId: string;
+  }[]>;
+  getOverridesByGuardrailConfigId: (params: z$1.infer<typeof getOverridesByGuardrailConfigId>) => Promise<{
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
+    enabled: boolean;
+    parameters: Record<string, unknown> | null;
+    providerConfigId: string;
+    guardrailConfigId: string;
+  }[]>;
+  getOverrideByProviderAndGuardrail: (params: z$1.infer<typeof getOverrideByProviderAndGuardrail>) => Promise<{
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
+    enabled: boolean;
+    parameters: Record<string, unknown> | null;
+    providerConfigId: string;
+    guardrailConfigId: string;
+  } | undefined>;
+  /**
+   * Upsert provider guardrail override - creates if not exists, updates if exists
+   */
+  upsertProviderGuardrailOverride: (params: z$1.infer<typeof createProviderGuardrailOverride>) => Promise<{
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
+    enabled: boolean;
+    parameters: Record<string, unknown> | null;
+    providerConfigId: string;
+    guardrailConfigId: string;
+  } | undefined>;
+  /**
+   * Delete all overrides for a guardrail config
+   * Useful when deleting a guardrail config
+   */
+  deleteOverridesByGuardrailConfigId: (params: z$1.infer<typeof getOverridesByGuardrailConfigId>) => Promise<kysely0.DeleteResult[]>;
+};
+//#endregion
 //#region src/datalayer/index.d.ts
 declare const createDataLayer: (db: Kysely<Database>) => Promise<{
   getWorkspaceSettings: () => Promise<{
@@ -1501,10 +1787,10 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     setupComplete: boolean;
     superAdminId: string | null;
   } | undefined>;
-  updateWorkspaceSettings: (params: zod33.infer<zod33.ZodObject<{
-    name: zod33.ZodOptional<zod33.ZodNullable<zod33.ZodString>>;
-    setupComplete: zod33.ZodOptional<zod33.ZodBoolean>;
-    superAdminId: zod33.ZodOptional<zod33.ZodNullable<zod33.ZodString>>;
+  updateWorkspaceSettings: (params: zod37.infer<zod37.ZodObject<{
+    name: zod37.ZodOptional<zod37.ZodNullable<zod37.ZodString>>;
+    setupComplete: zod37.ZodOptional<zod37.ZodBoolean>;
+    superAdminId: zod37.ZodOptional<zod37.ZodNullable<zod37.ZodString>>;
   }, better_auth0.$strip>>) => Promise<{
     name: string | null;
     id: string;
@@ -1524,11 +1810,11 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     setupComplete: boolean;
     superAdminId: string | null;
   } | undefined>;
-  createVariantVersion: (params: zod33.infer<zod33.ZodObject<{
-    variantId: zod33.ZodString;
-    provider: zod33.ZodString;
-    modelName: zod33.ZodString;
-    jsonData: zod33.ZodDefault<zod33.ZodOptional<zod33.ZodRecord<zod33.ZodString, zod33.ZodUnknown>>>;
+  createVariantVersion: (params: zod37.infer<zod37.ZodObject<{
+    variantId: zod37.ZodString;
+    provider: zod37.ZodString;
+    modelName: zod37.ZodString;
+    jsonData: zod37.ZodDefault<zod37.ZodOptional<zod37.ZodRecord<zod37.ZodString, zod37.ZodUnknown>>>;
   }, better_auth0.$strip>>) => Promise<{
     version: number;
     id: string;
@@ -1539,8 +1825,8 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     modelName: string;
     jsonData: Record<string, unknown>;
   } | undefined>;
-  getVariantVersionById: (params: zod33.infer<zod33.ZodObject<{
-    id: zod33.ZodString;
+  getVariantVersionById: (params: zod37.infer<zod37.ZodObject<{
+    id: zod37.ZodString;
   }, better_auth0.$strip>>) => Promise<{
     version: number;
     id: string;
@@ -1551,10 +1837,10 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     modelName: string;
     jsonData: Record<string, unknown>;
   } | undefined>;
-  getVariantVersionsByVariantId: (params: zod33.infer<zod33.ZodObject<{
-    variantId: zod33.ZodString;
-    limit: zod33.ZodOptional<zod33.ZodNumber>;
-    offset: zod33.ZodOptional<zod33.ZodNumber>;
+  getVariantVersionsByVariantId: (params: zod37.infer<zod37.ZodObject<{
+    variantId: zod37.ZodString;
+    limit: zod37.ZodOptional<zod37.ZodNumber>;
+    offset: zod37.ZodOptional<zod37.ZodNumber>;
   }, better_auth0.$strip>>) => Promise<{
     version: number;
     id: string;
@@ -1565,8 +1851,8 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     modelName: string;
     jsonData: Record<string, unknown>;
   }[]>;
-  getLatestVariantVersion: (params: zod33.infer<zod33.ZodObject<{
-    variantId: zod33.ZodString;
+  getLatestVariantVersion: (params: zod37.infer<zod37.ZodObject<{
+    variantId: zod37.ZodString;
   }, better_auth0.$strip>>) => Promise<{
     version: number;
     id: string;
@@ -1577,9 +1863,9 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     modelName: string;
     jsonData: Record<string, unknown>;
   } | undefined>;
-  getVariantVersionByNumber: (params: zod33.infer<zod33.ZodObject<{
-    variantId: zod33.ZodString;
-    version: zod33.ZodNumber;
+  getVariantVersionByNumber: (params: zod37.infer<zod37.ZodObject<{
+    variantId: zod37.ZodString;
+    version: zod37.ZodNumber;
   }, better_auth0.$strip>>) => Promise<{
     version: number;
     id: string;
@@ -1590,8 +1876,8 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     modelName: string;
     jsonData: Record<string, unknown>;
   } | undefined>;
-  deleteVariantVersion: (params: zod33.infer<zod33.ZodObject<{
-    id: zod33.ZodString;
+  deleteVariantVersion: (params: zod37.infer<zod37.ZodObject<{
+    id: zod37.ZodString;
   }, better_auth0.$strip>>) => Promise<{
     version: number;
     id: string;
@@ -1602,8 +1888,8 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     modelName: string;
     jsonData: Record<string, unknown>;
   } | undefined>;
-  deleteVariantVersionsByVariantId: (params: zod33.infer<zod33.ZodObject<{
-    variantId: zod33.ZodString;
+  deleteVariantVersionsByVariantId: (params: zod37.infer<zod37.ZodObject<{
+    variantId: zod37.ZodString;
   }, better_auth0.$strip>>) => Promise<{
     version: number;
     id: string;
@@ -1614,8 +1900,8 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     modelName: string;
     jsonData: Record<string, unknown>;
   }[]>;
-  getVariantVersionWithVariant: (params: zod33.infer<zod33.ZodObject<{
-    id: zod33.ZodString;
+  getVariantVersionWithVariant: (params: zod37.infer<zod37.ZodObject<{
+    id: zod37.ZodString;
   }, better_auth0.$strip>>) => Promise<{
     version: number;
     id: string;
@@ -1627,10 +1913,10 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     jsonData: Record<string, unknown>;
     variantName: string;
   } | undefined>;
-  getVariantVersionsWithVariantByVariantId: (params: zod33.infer<zod33.ZodObject<{
-    variantId: zod33.ZodString;
-    limit: zod33.ZodOptional<zod33.ZodNumber>;
-    offset: zod33.ZodOptional<zod33.ZodNumber>;
+  getVariantVersionsWithVariantByVariantId: (params: zod37.infer<zod37.ZodObject<{
+    variantId: zod37.ZodString;
+    limit: zod37.ZodOptional<zod37.ZodNumber>;
+    offset: zod37.ZodOptional<zod37.ZodNumber>;
   }, better_auth0.$strip>>) => Promise<{
     version: number;
     id: string;
@@ -1642,33 +1928,33 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     jsonData: Record<string, unknown>;
     variantName: string;
   }[]>;
-  createVariant: (params: zod33.infer<zod33.ZodObject<{
-    name: zod33.ZodString;
+  createVariant: (params: zod37.infer<zod37.ZodObject<{
+    name: zod37.ZodString;
   }, better_auth0.$strip>>) => Promise<{
     name: string;
     id: string;
     createdAt: Date;
     updatedAt: Date;
   } | undefined>;
-  updateVariant: (params: zod33.infer<zod33.ZodObject<{
-    variantId: zod33.ZodString;
-    name: zod33.ZodOptional<zod33.ZodString>;
+  updateVariant: (params: zod37.infer<zod37.ZodObject<{
+    variantId: zod37.ZodString;
+    name: zod37.ZodOptional<zod37.ZodString>;
   }, better_auth0.$strip>>) => Promise<{
     name: string;
     id: string;
     createdAt: Date;
     updatedAt: Date;
   } | undefined>;
-  getVariantById: (params: zod33.infer<zod33.ZodObject<{
-    variantId: zod33.ZodString;
+  getVariantById: (params: zod37.infer<zod37.ZodObject<{
+    variantId: zod37.ZodString;
   }, better_auth0.$strip>>) => Promise<{
     name: string;
     id: string;
     createdAt: Date;
     updatedAt: Date;
   } | undefined>;
-  getVariantWithLatestVersion: (params: zod33.infer<zod33.ZodObject<{
-    variantId: zod33.ZodString;
+  getVariantWithLatestVersion: (params: zod37.infer<zod37.ZodObject<{
+    variantId: zod37.ZodString;
   }, better_auth0.$strip>>) => Promise<{
     latestVersion: {
       version: number;
@@ -1685,26 +1971,26 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     createdAt: Date;
     updatedAt: Date;
   } | undefined>;
-  deleteVariant: (params: zod33.infer<zod33.ZodObject<{
-    variantId: zod33.ZodString;
+  deleteVariant: (params: zod37.infer<zod37.ZodObject<{
+    variantId: zod37.ZodString;
   }, better_auth0.$strip>>) => Promise<{
     name: string;
     id: string;
     createdAt: Date;
     updatedAt: Date;
   } | undefined>;
-  listVariants: (params?: zod33.infer<zod33.ZodObject<{
-    limit: zod33.ZodOptional<zod33.ZodNumber>;
-    offset: zod33.ZodOptional<zod33.ZodNumber>;
+  listVariants: (params?: zod37.infer<zod37.ZodObject<{
+    limit: zod37.ZodOptional<zod37.ZodNumber>;
+    offset: zod37.ZodOptional<zod37.ZodNumber>;
   }, better_auth0.$strip>>) => Promise<{
     name: string;
     id: string;
     createdAt: Date;
     updatedAt: Date;
   }[]>;
-  listVariantsWithLatestVersion: (params?: zod33.infer<zod33.ZodObject<{
-    limit: zod33.ZodOptional<zod33.ZodNumber>;
-    offset: zod33.ZodOptional<zod33.ZodNumber>;
+  listVariantsWithLatestVersion: (params?: zod37.infer<zod37.ZodObject<{
+    limit: zod37.ZodOptional<zod37.ZodNumber>;
+    offset: zod37.ZodOptional<zod37.ZodNumber>;
   }, better_auth0.$strip>>) => Promise<{
     latestVersion: {
       version: number;
@@ -1721,15 +2007,15 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     createdAt: Date;
     updatedAt: Date;
   }[]>;
-  createTargetingRule: (params: zod33.infer<zod33.ZodObject<{
-    environmentId: zod33.ZodString;
-    configId: zod33.ZodString;
-    configVariantId: zod33.ZodString;
-    variantVersionId: zod33.ZodOptional<zod33.ZodNullable<zod33.ZodString>>;
-    weight: zod33.ZodDefault<zod33.ZodOptional<zod33.ZodNumber>>;
-    priority: zod33.ZodDefault<zod33.ZodOptional<zod33.ZodNumber>>;
-    enabled: zod33.ZodDefault<zod33.ZodOptional<zod33.ZodBoolean>>;
-    conditions: zod33.ZodOptional<zod33.ZodNullable<zod33.ZodRecord<zod33.ZodString, zod33.ZodUnknown>>>;
+  createTargetingRule: (params: zod37.infer<zod37.ZodObject<{
+    environmentId: zod37.ZodString;
+    configId: zod37.ZodString;
+    configVariantId: zod37.ZodString;
+    variantVersionId: zod37.ZodOptional<zod37.ZodNullable<zod37.ZodString>>;
+    weight: zod37.ZodDefault<zod37.ZodOptional<zod37.ZodNumber>>;
+    priority: zod37.ZodDefault<zod37.ZodOptional<zod37.ZodNumber>>;
+    enabled: zod37.ZodDefault<zod37.ZodOptional<zod37.ZodBoolean>>;
+    conditions: zod37.ZodOptional<zod37.ZodNullable<zod37.ZodRecord<zod37.ZodString, zod37.ZodUnknown>>>;
   }, better_auth0.$strip>>) => Promise<{
     id: string;
     createdAt: Date;
@@ -1743,13 +2029,13 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     enabled: boolean;
     conditions: Record<string, unknown>;
   } | undefined>;
-  updateTargetingRule: (params: zod33.infer<zod33.ZodObject<{
-    id: zod33.ZodString;
-    variantVersionId: zod33.ZodOptional<zod33.ZodNullable<zod33.ZodString>>;
-    weight: zod33.ZodOptional<zod33.ZodNumber>;
-    priority: zod33.ZodOptional<zod33.ZodNumber>;
-    enabled: zod33.ZodOptional<zod33.ZodBoolean>;
-    conditions: zod33.ZodOptional<zod33.ZodNullable<zod33.ZodRecord<zod33.ZodString, zod33.ZodUnknown>>>;
+  updateTargetingRule: (params: zod37.infer<zod37.ZodObject<{
+    id: zod37.ZodString;
+    variantVersionId: zod37.ZodOptional<zod37.ZodNullable<zod37.ZodString>>;
+    weight: zod37.ZodOptional<zod37.ZodNumber>;
+    priority: zod37.ZodOptional<zod37.ZodNumber>;
+    enabled: zod37.ZodOptional<zod37.ZodBoolean>;
+    conditions: zod37.ZodOptional<zod37.ZodNullable<zod37.ZodRecord<zod37.ZodString, zod37.ZodUnknown>>>;
   }, better_auth0.$strip>>) => Promise<{
     id: string;
     createdAt: Date;
@@ -1763,8 +2049,8 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     enabled: boolean;
     conditions: Record<string, unknown>;
   } | undefined>;
-  getTargetingRuleById: (params: zod33.infer<zod33.ZodObject<{
-    id: zod33.ZodString;
+  getTargetingRuleById: (params: zod37.infer<zod37.ZodObject<{
+    id: zod37.ZodString;
   }, better_auth0.$strip>>) => Promise<{
     id: string;
     createdAt: Date;
@@ -1778,10 +2064,10 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     enabled: boolean;
     conditions: Record<string, unknown>;
   } | undefined>;
-  getTargetingRulesByConfigId: (params: zod33.infer<zod33.ZodObject<{
-    configId: zod33.ZodString;
-    limit: zod33.ZodOptional<zod33.ZodNumber>;
-    offset: zod33.ZodOptional<zod33.ZodNumber>;
+  getTargetingRulesByConfigId: (params: zod37.infer<zod37.ZodObject<{
+    configId: zod37.ZodString;
+    limit: zod37.ZodOptional<zod37.ZodNumber>;
+    offset: zod37.ZodOptional<zod37.ZodNumber>;
   }, better_auth0.$strip>>) => Promise<{
     id: string;
     createdAt: Date;
@@ -1795,10 +2081,10 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     enabled: boolean;
     conditions: Record<string, unknown>;
   }[]>;
-  getTargetingRulesByEnvironmentId: (params: zod33.infer<zod33.ZodObject<{
-    environmentId: zod33.ZodString;
-    limit: zod33.ZodOptional<zod33.ZodNumber>;
-    offset: zod33.ZodOptional<zod33.ZodNumber>;
+  getTargetingRulesByEnvironmentId: (params: zod37.infer<zod37.ZodObject<{
+    environmentId: zod37.ZodString;
+    limit: zod37.ZodOptional<zod37.ZodNumber>;
+    offset: zod37.ZodOptional<zod37.ZodNumber>;
   }, better_auth0.$strip>>) => Promise<{
     id: string;
     createdAt: Date;
@@ -1812,9 +2098,9 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     enabled: boolean;
     conditions: Record<string, unknown>;
   }[]>;
-  getTargetingRulesByConfigAndEnvironment: (params: zod33.infer<zod33.ZodObject<{
-    configId: zod33.ZodString;
-    environmentId: zod33.ZodString;
+  getTargetingRulesByConfigAndEnvironment: (params: zod37.infer<zod37.ZodObject<{
+    configId: zod37.ZodString;
+    environmentId: zod37.ZodString;
   }, better_auth0.$strip>>) => Promise<{
     id: string;
     createdAt: Date;
@@ -1828,8 +2114,8 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     enabled: boolean;
     conditions: Record<string, unknown>;
   }[]>;
-  deleteTargetingRule: (params: zod33.infer<zod33.ZodObject<{
-    id: zod33.ZodString;
+  deleteTargetingRule: (params: zod37.infer<zod37.ZodObject<{
+    id: zod37.ZodString;
   }, better_auth0.$strip>>) => Promise<{
     id: string;
     createdAt: Date;
@@ -1843,8 +2129,8 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     enabled: boolean;
     conditions: Record<string, unknown>;
   } | undefined>;
-  deleteTargetingRulesByConfigId: (params: zod33.infer<zod33.ZodObject<{
-    configId: zod33.ZodString;
+  deleteTargetingRulesByConfigId: (params: zod37.infer<zod37.ZodObject<{
+    configId: zod37.ZodString;
   }, better_auth0.$strip>>) => Promise<{
     id: string;
     createdAt: Date;
@@ -1858,8 +2144,8 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     enabled: boolean;
     conditions: Record<string, unknown>;
   }[]>;
-  deleteTargetingRulesByEnvironmentId: (params: zod33.infer<zod33.ZodObject<{
-    environmentId: zod33.ZodString;
+  deleteTargetingRulesByEnvironmentId: (params: zod37.infer<zod37.ZodObject<{
+    environmentId: zod37.ZodString;
   }, better_auth0.$strip>>) => Promise<{
     id: string;
     createdAt: Date;
@@ -1873,9 +2159,9 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     enabled: boolean;
     conditions: Record<string, unknown>;
   }[]>;
-  listTargetingRules: (params?: zod33.infer<zod33.ZodObject<{
-    limit: zod33.ZodOptional<zod33.ZodNumber>;
-    offset: zod33.ZodOptional<zod33.ZodNumber>;
+  listTargetingRules: (params?: zod37.infer<zod37.ZodObject<{
+    limit: zod37.ZodOptional<zod37.ZodNumber>;
+    offset: zod37.ZodOptional<zod37.ZodNumber>;
   }, better_auth0.$strip>>) => Promise<{
     id: string;
     createdAt: Date;
@@ -1889,10 +2175,10 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     enabled: boolean;
     conditions: Record<string, unknown>;
   }[]>;
-  getTargetingRulesWithDetailsByConfigId: (params: zod33.infer<zod33.ZodObject<{
-    configId: zod33.ZodString;
-    limit: zod33.ZodOptional<zod33.ZodNumber>;
-    offset: zod33.ZodOptional<zod33.ZodNumber>;
+  getTargetingRulesWithDetailsByConfigId: (params: zod37.infer<zod37.ZodObject<{
+    configId: zod37.ZodString;
+    limit: zod37.ZodOptional<zod37.ZodNumber>;
+    offset: zod37.ZodOptional<zod37.ZodNumber>;
   }, better_auth0.$strip>>) => Promise<{
     variantProvider: string | null;
     variantModelName: string | null;
@@ -1914,11 +2200,11 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     environmentName: string | null;
     environmentSlug: string | null;
   }[]>;
-  setTargetingForEnvironment: (params: zod33.infer<zod33.ZodObject<{
-    environmentId: zod33.ZodString;
-    configId: zod33.ZodString;
-    configVariantId: zod33.ZodString;
-    variantVersionId: zod33.ZodOptional<zod33.ZodNullable<zod33.ZodString>>;
+  setTargetingForEnvironment: (params: zod37.infer<zod37.ZodObject<{
+    environmentId: zod37.ZodString;
+    configId: zod37.ZodString;
+    configVariantId: zod37.ZodString;
+    variantVersionId: zod37.ZodOptional<zod37.ZodNullable<zod37.ZodString>>;
   }, better_auth0.$strip>>) => Promise<{
     id: string;
     createdAt: Date;
@@ -1932,12 +2218,112 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     enabled: boolean;
     conditions: Record<string, unknown>;
   } | undefined>;
-  createProviderConfig: (params: zod33.infer<zod33.ZodObject<{
-    providerId: zod33.ZodString;
-    slug: zod33.ZodOptional<zod33.ZodNullable<zod33.ZodString>>;
-    name: zod33.ZodOptional<zod33.ZodNullable<zod33.ZodString>>;
-    config: zod33.ZodRecord<zod33.ZodString, zod33.ZodUnknown>;
-    enabled: zod33.ZodDefault<zod33.ZodOptional<zod33.ZodBoolean>>;
+  createProviderGuardrailOverride: (params: zod37.infer<zod37.ZodObject<{
+    providerConfigId: zod37.ZodString;
+    guardrailConfigId: zod37.ZodString;
+    enabled: zod37.ZodDefault<zod37.ZodOptional<zod37.ZodBoolean>>;
+    parameters: zod37.ZodOptional<zod37.ZodNullable<zod37.ZodRecord<zod37.ZodString, zod37.ZodUnknown>>>;
+  }, better_auth0.$strip>>) => Promise<{
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
+    enabled: boolean;
+    parameters: Record<string, unknown> | null;
+    providerConfigId: string;
+    guardrailConfigId: string;
+  } | undefined>;
+  updateProviderGuardrailOverride: (params: zod37.infer<zod37.ZodObject<{
+    id: zod37.ZodString;
+    enabled: zod37.ZodOptional<zod37.ZodBoolean>;
+    parameters: zod37.ZodOptional<zod37.ZodNullable<zod37.ZodRecord<zod37.ZodString, zod37.ZodUnknown>>>;
+  }, better_auth0.$strip>>) => Promise<{
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
+    enabled: boolean;
+    parameters: Record<string, unknown> | null;
+    providerConfigId: string;
+    guardrailConfigId: string;
+  } | undefined>;
+  getOverrideById: (params: zod37.infer<zod37.ZodObject<{
+    id: zod37.ZodString;
+  }, better_auth0.$strip>>) => Promise<{
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
+    enabled: boolean;
+    parameters: Record<string, unknown> | null;
+    providerConfigId: string;
+    guardrailConfigId: string;
+  } | undefined>;
+  deleteProviderGuardrailOverride: (params: zod37.infer<zod37.ZodObject<{
+    id: zod37.ZodString;
+  }, better_auth0.$strip>>) => Promise<{
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
+    enabled: boolean;
+    parameters: Record<string, unknown> | null;
+    providerConfigId: string;
+    guardrailConfigId: string;
+  } | undefined>;
+  getOverridesByProviderConfigId: (params: zod37.infer<zod37.ZodObject<{
+    providerConfigId: zod37.ZodString;
+  }, better_auth0.$strip>>) => Promise<{
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
+    enabled: boolean;
+    parameters: Record<string, unknown> | null;
+    providerConfigId: string;
+    guardrailConfigId: string;
+  }[]>;
+  getOverridesByGuardrailConfigId: (params: zod37.infer<zod37.ZodObject<{
+    guardrailConfigId: zod37.ZodString;
+  }, better_auth0.$strip>>) => Promise<{
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
+    enabled: boolean;
+    parameters: Record<string, unknown> | null;
+    providerConfigId: string;
+    guardrailConfigId: string;
+  }[]>;
+  getOverrideByProviderAndGuardrail: (params: zod37.infer<zod37.ZodObject<{
+    providerConfigId: zod37.ZodString;
+    guardrailConfigId: zod37.ZodString;
+  }, better_auth0.$strip>>) => Promise<{
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
+    enabled: boolean;
+    parameters: Record<string, unknown> | null;
+    providerConfigId: string;
+    guardrailConfigId: string;
+  } | undefined>;
+  upsertProviderGuardrailOverride: (params: zod37.infer<zod37.ZodObject<{
+    providerConfigId: zod37.ZodString;
+    guardrailConfigId: zod37.ZodString;
+    enabled: zod37.ZodDefault<zod37.ZodOptional<zod37.ZodBoolean>>;
+    parameters: zod37.ZodOptional<zod37.ZodNullable<zod37.ZodRecord<zod37.ZodString, zod37.ZodUnknown>>>;
+  }, better_auth0.$strip>>) => Promise<{
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
+    enabled: boolean;
+    parameters: Record<string, unknown> | null;
+    providerConfigId: string;
+    guardrailConfigId: string;
+  } | undefined>;
+  deleteOverridesByGuardrailConfigId: (params: zod37.infer<zod37.ZodObject<{
+    guardrailConfigId: zod37.ZodString;
+  }, better_auth0.$strip>>) => Promise<kysely0.DeleteResult[]>;
+  createProviderConfig: (params: zod37.infer<zod37.ZodObject<{
+    providerId: zod37.ZodString;
+    slug: zod37.ZodOptional<zod37.ZodNullable<zod37.ZodString>>;
+    name: zod37.ZodOptional<zod37.ZodNullable<zod37.ZodString>>;
+    config: zod37.ZodRecord<zod37.ZodString, zod37.ZodUnknown>;
+    enabled: zod37.ZodDefault<zod37.ZodOptional<zod37.ZodBoolean>>;
   }, better_auth0.$strip>>) => Promise<{
     slug: string | null;
     name: string | null;
@@ -1948,12 +2334,12 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     providerId: string;
     config: Record<string, unknown>;
   } | undefined>;
-  updateProviderConfig: (params: zod33.infer<zod33.ZodObject<{
-    id: zod33.ZodUUID;
-    slug: zod33.ZodOptional<zod33.ZodNullable<zod33.ZodString>>;
-    name: zod33.ZodOptional<zod33.ZodNullable<zod33.ZodString>>;
-    config: zod33.ZodOptional<zod33.ZodRecord<zod33.ZodString, zod33.ZodUnknown>>;
-    enabled: zod33.ZodOptional<zod33.ZodBoolean>;
+  updateProviderConfig: (params: zod37.infer<zod37.ZodObject<{
+    id: zod37.ZodUUID;
+    slug: zod37.ZodOptional<zod37.ZodNullable<zod37.ZodString>>;
+    name: zod37.ZodOptional<zod37.ZodNullable<zod37.ZodString>>;
+    config: zod37.ZodOptional<zod37.ZodRecord<zod37.ZodString, zod37.ZodUnknown>>;
+    enabled: zod37.ZodOptional<zod37.ZodBoolean>;
   }, better_auth0.$strip>>) => Promise<{
     slug: string | null;
     name: string | null;
@@ -1964,8 +2350,8 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     providerId: string;
     config: Record<string, unknown>;
   } | undefined>;
-  getProviderConfigById: (params: zod33.infer<zod33.ZodObject<{
-    id: zod33.ZodUUID;
+  getProviderConfigById: (params: zod37.infer<zod37.ZodObject<{
+    id: zod37.ZodUUID;
   }, better_auth0.$strip>>) => Promise<{
     slug: string | null;
     name: string | null;
@@ -1976,8 +2362,8 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     providerId: string;
     config: Record<string, unknown>;
   } | undefined>;
-  getProviderConfigByProviderId: (params: zod33.infer<zod33.ZodObject<{
-    providerId: zod33.ZodString;
+  getProviderConfigByProviderId: (params: zod37.infer<zod37.ZodObject<{
+    providerId: zod37.ZodString;
   }, better_auth0.$strip>>) => Promise<{
     slug: string | null;
     name: string | null;
@@ -1988,8 +2374,8 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     providerId: string;
     config: Record<string, unknown>;
   } | undefined>;
-  getProviderConfigBySlug: (params: zod33.infer<zod33.ZodObject<{
-    slug: zod33.ZodString;
+  getProviderConfigBySlug: (params: zod37.infer<zod37.ZodObject<{
+    slug: zod37.ZodString;
   }, better_auth0.$strip>>) => Promise<{
     slug: string | null;
     name: string | null;
@@ -2000,8 +2386,8 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     providerId: string;
     config: Record<string, unknown>;
   } | undefined>;
-  deleteProviderConfig: (params: zod33.infer<zod33.ZodObject<{
-    id: zod33.ZodUUID;
+  deleteProviderConfig: (params: zod37.infer<zod37.ZodObject<{
+    id: zod37.ZodUUID;
   }, better_auth0.$strip>>) => Promise<{
     slug: string | null;
     name: string | null;
@@ -2012,9 +2398,9 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     providerId: string;
     config: Record<string, unknown>;
   } | undefined>;
-  listProviderConfigs: (params?: zod33.infer<zod33.ZodObject<{
-    limit: zod33.ZodOptional<zod33.ZodNumber>;
-    offset: zod33.ZodOptional<zod33.ZodNumber>;
+  listProviderConfigs: (params?: zod37.infer<zod37.ZodObject<{
+    limit: zod37.ZodOptional<zod37.ZodNumber>;
+    offset: zod37.ZodOptional<zod37.ZodNumber>;
   }, better_auth0.$strip>>) => Promise<{
     slug: string | null;
     name: string | null;
@@ -2026,12 +2412,12 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     config: Record<string, unknown>;
   }[]>;
   countProviderConfigs: () => Promise<number>;
-  upsertProviderConfig: (params: zod33.infer<zod33.ZodObject<{
-    providerId: zod33.ZodString;
-    slug: zod33.ZodOptional<zod33.ZodNullable<zod33.ZodString>>;
-    name: zod33.ZodOptional<zod33.ZodNullable<zod33.ZodString>>;
-    config: zod33.ZodRecord<zod33.ZodString, zod33.ZodUnknown>;
-    enabled: zod33.ZodDefault<zod33.ZodOptional<zod33.ZodBoolean>>;
+  upsertProviderConfig: (params: zod37.infer<zod37.ZodObject<{
+    providerId: zod37.ZodString;
+    slug: zod37.ZodOptional<zod37.ZodNullable<zod37.ZodString>>;
+    name: zod37.ZodOptional<zod37.ZodNullable<zod37.ZodString>>;
+    config: zod37.ZodRecord<zod37.ZodString, zod37.ZodUnknown>;
+    enabled: zod37.ZodDefault<zod37.ZodOptional<zod37.ZodBoolean>>;
   }, better_auth0.$strip>>) => Promise<{
     slug: string | null;
     name: string | null;
@@ -2053,8 +2439,8 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     provider: string;
     environmentId: string | null;
     configId: string | null;
-    requestId: string;
     providerConfigId: string | null;
+    requestId: string;
     model: string;
     promptTokens: number;
     completionTokens: number;
@@ -2069,19 +2455,30 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     isStreaming: boolean;
     userId: string | null;
     tags: Record<string, string>;
+    guardrailResults: {
+      results: {
+        configId: string;
+        functionId: string;
+        hookType: "beforeRequestHook" | "afterRequestHook";
+        verdict: boolean;
+        latencyMs: number;
+      }[];
+      action: "allowed" | "blocked" | "logged";
+      totalLatencyMs: number;
+    } | null;
   } | undefined>;
-  listRequests: (params?: zod33.infer<zod33.ZodObject<{
-    limit: zod33.ZodDefault<zod33.ZodNumber>;
-    offset: zod33.ZodDefault<zod33.ZodNumber>;
-    configId: zod33.ZodOptional<zod33.ZodString>;
-    variantId: zod33.ZodOptional<zod33.ZodString>;
-    environmentId: zod33.ZodOptional<zod33.ZodString>;
-    providerConfigId: zod33.ZodOptional<zod33.ZodString>;
-    provider: zod33.ZodOptional<zod33.ZodString>;
-    model: zod33.ZodOptional<zod33.ZodString>;
-    startDate: zod33.ZodOptional<zod33.ZodDate>;
-    endDate: zod33.ZodOptional<zod33.ZodDate>;
-    tags: zod33.ZodOptional<zod33.ZodRecord<zod33.ZodString, zod33.ZodArray<zod33.ZodString>>>;
+  listRequests: (params?: zod37.infer<zod37.ZodObject<{
+    limit: zod37.ZodDefault<zod37.ZodNumber>;
+    offset: zod37.ZodDefault<zod37.ZodNumber>;
+    configId: zod37.ZodOptional<zod37.ZodString>;
+    variantId: zod37.ZodOptional<zod37.ZodString>;
+    environmentId: zod37.ZodOptional<zod37.ZodString>;
+    providerConfigId: zod37.ZodOptional<zod37.ZodString>;
+    provider: zod37.ZodOptional<zod37.ZodString>;
+    model: zod37.ZodOptional<zod37.ZodString>;
+    startDate: zod37.ZodOptional<zod37.ZodDate>;
+    endDate: zod37.ZodOptional<zod37.ZodDate>;
+    tags: zod37.ZodOptional<zod37.ZodRecord<zod37.ZodString, zod37.ZodArray<zod37.ZodString>>>;
   }, better_auth0.$strip>>) => Promise<{
     data: {
       id: string;
@@ -2091,8 +2488,8 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
       provider: string;
       environmentId: string | null;
       configId: string | null;
-      requestId: string;
       providerConfigId: string | null;
+      requestId: string;
       model: string;
       promptTokens: number;
       completionTokens: number;
@@ -2107,6 +2504,17 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
       isStreaming: boolean;
       userId: string | null;
       tags: Record<string, string>;
+      guardrailResults: {
+        results: {
+          configId: string;
+          functionId: string;
+          hookType: "beforeRequestHook" | "afterRequestHook";
+          verdict: boolean;
+          latencyMs: number;
+        }[];
+        action: "allowed" | "blocked" | "logged";
+        totalLatencyMs: number;
+      } | null;
     }[];
     total: number;
     limit: number;
@@ -2120,8 +2528,8 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     provider: string;
     environmentId: string | null;
     configId: string | null;
-    requestId: string;
     providerConfigId: string | null;
+    requestId: string;
     model: string;
     promptTokens: number;
     completionTokens: number;
@@ -2136,14 +2544,25 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     isStreaming: boolean;
     userId: string | null;
     tags: Record<string, string>;
+    guardrailResults: {
+      results: {
+        configId: string;
+        functionId: string;
+        hookType: "beforeRequestHook" | "afterRequestHook";
+        verdict: boolean;
+        latencyMs: number;
+      }[];
+      action: "allowed" | "blocked" | "logged";
+      totalLatencyMs: number;
+    } | null;
   } | undefined>;
-  getTotalCost: (params: zod33.infer<zod33.ZodObject<{
-    startDate: zod33.ZodDate;
-    endDate: zod33.ZodDate;
-    configId: zod33.ZodOptional<zod33.ZodString>;
-    variantId: zod33.ZodOptional<zod33.ZodString>;
-    environmentId: zod33.ZodOptional<zod33.ZodString>;
-    tags: zod33.ZodOptional<zod33.ZodRecord<zod33.ZodString, zod33.ZodArray<zod33.ZodString>>>;
+  getTotalCost: (params: zod37.infer<zod37.ZodObject<{
+    startDate: zod37.ZodDate;
+    endDate: zod37.ZodDate;
+    configId: zod37.ZodOptional<zod37.ZodString>;
+    variantId: zod37.ZodOptional<zod37.ZodString>;
+    environmentId: zod37.ZodOptional<zod37.ZodString>;
+    tags: zod37.ZodOptional<zod37.ZodRecord<zod37.ZodString, zod37.ZodArray<zod37.ZodString>>>;
   }, better_auth0.$strip>>) => Promise<{
     totalCost: number;
     totalInputCost: number;
@@ -2153,13 +2572,13 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     totalTokens: number;
     requestCount: number;
   } | undefined>;
-  getCostByModel: (params: zod33.infer<zod33.ZodObject<{
-    startDate: zod33.ZodDate;
-    endDate: zod33.ZodDate;
-    configId: zod33.ZodOptional<zod33.ZodString>;
-    variantId: zod33.ZodOptional<zod33.ZodString>;
-    environmentId: zod33.ZodOptional<zod33.ZodString>;
-    tags: zod33.ZodOptional<zod33.ZodRecord<zod33.ZodString, zod33.ZodArray<zod33.ZodString>>>;
+  getCostByModel: (params: zod37.infer<zod37.ZodObject<{
+    startDate: zod37.ZodDate;
+    endDate: zod37.ZodDate;
+    configId: zod37.ZodOptional<zod37.ZodString>;
+    variantId: zod37.ZodOptional<zod37.ZodString>;
+    environmentId: zod37.ZodOptional<zod37.ZodString>;
+    tags: zod37.ZodOptional<zod37.ZodRecord<zod37.ZodString, zod37.ZodArray<zod37.ZodString>>>;
   }, better_auth0.$strip>>) => Promise<{
     provider: string;
     model: string;
@@ -2170,13 +2589,13 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     requestCount: number;
     avgLatencyMs: number;
   }[]>;
-  getCostByProvider: (params: zod33.infer<zod33.ZodObject<{
-    startDate: zod33.ZodDate;
-    endDate: zod33.ZodDate;
-    configId: zod33.ZodOptional<zod33.ZodString>;
-    variantId: zod33.ZodOptional<zod33.ZodString>;
-    environmentId: zod33.ZodOptional<zod33.ZodString>;
-    tags: zod33.ZodOptional<zod33.ZodRecord<zod33.ZodString, zod33.ZodArray<zod33.ZodString>>>;
+  getCostByProvider: (params: zod37.infer<zod37.ZodObject<{
+    startDate: zod37.ZodDate;
+    endDate: zod37.ZodDate;
+    configId: zod37.ZodOptional<zod37.ZodString>;
+    variantId: zod37.ZodOptional<zod37.ZodString>;
+    environmentId: zod37.ZodOptional<zod37.ZodString>;
+    tags: zod37.ZodOptional<zod37.ZodRecord<zod37.ZodString, zod37.ZodArray<zod37.ZodString>>>;
   }, better_auth0.$strip>>) => Promise<{
     provider: string;
     totalCost: number;
@@ -2186,13 +2605,13 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     requestCount: number;
     avgLatencyMs: number;
   }[]>;
-  getCostByConfig: (params: zod33.infer<zod33.ZodObject<{
-    startDate: zod33.ZodDate;
-    endDate: zod33.ZodDate;
-    configId: zod33.ZodOptional<zod33.ZodString>;
-    variantId: zod33.ZodOptional<zod33.ZodString>;
-    environmentId: zod33.ZodOptional<zod33.ZodString>;
-    tags: zod33.ZodOptional<zod33.ZodRecord<zod33.ZodString, zod33.ZodArray<zod33.ZodString>>>;
+  getCostByConfig: (params: zod37.infer<zod37.ZodObject<{
+    startDate: zod37.ZodDate;
+    endDate: zod37.ZodDate;
+    configId: zod37.ZodOptional<zod37.ZodString>;
+    variantId: zod37.ZodOptional<zod37.ZodString>;
+    environmentId: zod37.ZodOptional<zod37.ZodString>;
+    tags: zod37.ZodOptional<zod37.ZodRecord<zod37.ZodString, zod37.ZodArray<zod37.ZodString>>>;
   }, better_auth0.$strip>>) => Promise<{
     configId: string | null;
     totalCost: number;
@@ -2203,13 +2622,13 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     configName: string | null | undefined;
     configSlug: string | null;
   }[]>;
-  getDailyCosts: (params: zod33.infer<zod33.ZodObject<{
-    startDate: zod33.ZodDate;
-    endDate: zod33.ZodDate;
-    configId: zod33.ZodOptional<zod33.ZodString>;
-    variantId: zod33.ZodOptional<zod33.ZodString>;
-    environmentId: zod33.ZodOptional<zod33.ZodString>;
-    tags: zod33.ZodOptional<zod33.ZodRecord<zod33.ZodString, zod33.ZodArray<zod33.ZodString>>>;
+  getDailyCosts: (params: zod37.infer<zod37.ZodObject<{
+    startDate: zod37.ZodDate;
+    endDate: zod37.ZodDate;
+    configId: zod37.ZodOptional<zod37.ZodString>;
+    variantId: zod37.ZodOptional<zod37.ZodString>;
+    environmentId: zod37.ZodOptional<zod37.ZodString>;
+    tags: zod37.ZodOptional<zod37.ZodRecord<zod37.ZodString, zod37.ZodArray<zod37.ZodString>>>;
   }, better_auth0.$strip>>) => Promise<{
     totalCost: number;
     totalInputCost: number;
@@ -2218,14 +2637,14 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     requestCount: number;
     date: string;
   }[]>;
-  getCostSummary: (params: zod33.infer<zod33.ZodObject<{
-    startDate: zod33.ZodDate;
-    endDate: zod33.ZodDate;
-    configId: zod33.ZodOptional<zod33.ZodString>;
-    variantId: zod33.ZodOptional<zod33.ZodString>;
-    environmentId: zod33.ZodOptional<zod33.ZodString>;
-    tags: zod33.ZodOptional<zod33.ZodRecord<zod33.ZodString, zod33.ZodArray<zod33.ZodString>>>;
-    groupBy: zod33.ZodOptional<zod33.ZodEnum<{
+  getCostSummary: (params: zod37.infer<zod37.ZodObject<{
+    startDate: zod37.ZodDate;
+    endDate: zod37.ZodDate;
+    configId: zod37.ZodOptional<zod37.ZodString>;
+    variantId: zod37.ZodOptional<zod37.ZodString>;
+    environmentId: zod37.ZodOptional<zod37.ZodString>;
+    tags: zod37.ZodOptional<zod37.ZodRecord<zod37.ZodString, zod37.ZodArray<zod37.ZodString>>>;
+    groupBy: zod37.ZodOptional<zod37.ZodEnum<{
       provider: "provider";
       config: "config";
       model: "model";
@@ -2237,13 +2656,13 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     requestCount: number;
     groupKey: string;
   }[]>;
-  getRequestStats: (params: zod33.infer<zod33.ZodObject<{
-    startDate: zod33.ZodDate;
-    endDate: zod33.ZodDate;
-    configId: zod33.ZodOptional<zod33.ZodString>;
-    variantId: zod33.ZodOptional<zod33.ZodString>;
-    environmentId: zod33.ZodOptional<zod33.ZodString>;
-    tags: zod33.ZodOptional<zod33.ZodRecord<zod33.ZodString, zod33.ZodArray<zod33.ZodString>>>;
+  getRequestStats: (params: zod37.infer<zod37.ZodObject<{
+    startDate: zod37.ZodDate;
+    endDate: zod37.ZodDate;
+    configId: zod37.ZodOptional<zod37.ZodString>;
+    variantId: zod37.ZodOptional<zod37.ZodString>;
+    environmentId: zod37.ZodOptional<zod37.ZodString>;
+    tags: zod37.ZodOptional<zod37.ZodRecord<zod37.ZodString, zod37.ZodArray<zod37.ZodString>>>;
   }, better_auth0.$strip>>) => Promise<{
     avgLatencyMs: number;
     totalRequests: number;
@@ -2257,10 +2676,130 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     key: string;
     value: string;
   }[]>;
-  createEnvironmentSecret: (params: zod33.infer<zod33.ZodObject<{
-    environmentId: zod33.ZodUUID;
-    keyName: zod33.ZodString;
-    keyValue: zod33.ZodString;
+  createGuardrailConfig: (params: zod37.infer<zod37.ZodObject<{
+    name: zod37.ZodString;
+    pluginId: zod37.ZodString;
+    functionId: zod37.ZodString;
+    hookType: zod37.ZodEnum<{
+      beforeRequestHook: "beforeRequestHook";
+      afterRequestHook: "afterRequestHook";
+    }>;
+    parameters: zod37.ZodDefault<zod37.ZodOptional<zod37.ZodRecord<zod37.ZodString, zod37.ZodUnknown>>>;
+    enabled: zod37.ZodDefault<zod37.ZodOptional<zod37.ZodBoolean>>;
+    priority: zod37.ZodDefault<zod37.ZodOptional<zod37.ZodNumber>>;
+    onFail: zod37.ZodDefault<zod37.ZodOptional<zod37.ZodEnum<{
+      block: "block";
+      log: "log";
+    }>>>;
+  }, better_auth0.$strip>>) => Promise<{
+    name: string;
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
+    priority: number;
+    enabled: boolean;
+    pluginId: string;
+    functionId: string;
+    hookType: string;
+    parameters: Record<string, unknown>;
+    onFail: string;
+  } | undefined>;
+  updateGuardrailConfig: (params: zod37.infer<zod37.ZodObject<{
+    id: zod37.ZodString;
+    name: zod37.ZodOptional<zod37.ZodString>;
+    hookType: zod37.ZodOptional<zod37.ZodEnum<{
+      beforeRequestHook: "beforeRequestHook";
+      afterRequestHook: "afterRequestHook";
+    }>>;
+    parameters: zod37.ZodOptional<zod37.ZodRecord<zod37.ZodString, zod37.ZodUnknown>>;
+    enabled: zod37.ZodOptional<zod37.ZodBoolean>;
+    priority: zod37.ZodOptional<zod37.ZodNumber>;
+    onFail: zod37.ZodOptional<zod37.ZodEnum<{
+      block: "block";
+      log: "log";
+    }>>;
+  }, better_auth0.$strip>>) => Promise<{
+    name: string;
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
+    priority: number;
+    enabled: boolean;
+    pluginId: string;
+    functionId: string;
+    hookType: string;
+    parameters: Record<string, unknown>;
+    onFail: string;
+  } | undefined>;
+  getGuardrailConfigById: (params: zod37.infer<zod37.ZodObject<{
+    id: zod37.ZodString;
+  }, better_auth0.$strip>>) => Promise<{
+    name: string;
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
+    priority: number;
+    enabled: boolean;
+    pluginId: string;
+    functionId: string;
+    hookType: string;
+    parameters: Record<string, unknown>;
+    onFail: string;
+  } | undefined>;
+  deleteGuardrailConfig: (params: zod37.infer<zod37.ZodObject<{
+    id: zod37.ZodString;
+  }, better_auth0.$strip>>) => Promise<{
+    name: string;
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
+    priority: number;
+    enabled: boolean;
+    pluginId: string;
+    functionId: string;
+    hookType: string;
+    parameters: Record<string, unknown>;
+    onFail: string;
+  } | undefined>;
+  listGuardrailConfigs: (params?: zod37.infer<zod37.ZodObject<{
+    limit: zod37.ZodOptional<zod37.ZodNumber>;
+    offset: zod37.ZodOptional<zod37.ZodNumber>;
+    hookType: zod37.ZodOptional<zod37.ZodEnum<{
+      beforeRequestHook: "beforeRequestHook";
+      afterRequestHook: "afterRequestHook";
+    }>>;
+    enabled: zod37.ZodOptional<zod37.ZodBoolean>;
+  }, better_auth0.$strip>>) => Promise<{
+    name: string;
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
+    priority: number;
+    enabled: boolean;
+    pluginId: string;
+    functionId: string;
+    hookType: string;
+    parameters: Record<string, unknown>;
+    onFail: string;
+  }[]>;
+  countGuardrailConfigs: () => Promise<number>;
+  getEnabledGuardrailsByHookType: (hookType: "beforeRequestHook" | "afterRequestHook") => Promise<{
+    name: string;
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
+    priority: number;
+    enabled: boolean;
+    pluginId: string;
+    functionId: string;
+    hookType: string;
+    parameters: Record<string, unknown>;
+    onFail: string;
+  }[]>;
+  createEnvironmentSecret: (params: zod37.infer<zod37.ZodObject<{
+    environmentId: zod37.ZodUUID;
+    keyName: zod37.ZodString;
+    keyValue: zod37.ZodString;
   }, better_auth0.$strip>>) => Promise<{
     id: string;
     createdAt: Date;
@@ -2269,10 +2808,10 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     keyName: string;
     keyValue: string;
   } | undefined>;
-  updateEnvironmentSecret: (params: zod33.infer<zod33.ZodObject<{
-    secretId: zod33.ZodUUID;
-    keyName: zod33.ZodOptional<zod33.ZodString>;
-    keyValue: zod33.ZodOptional<zod33.ZodString>;
+  updateEnvironmentSecret: (params: zod37.infer<zod37.ZodObject<{
+    secretId: zod37.ZodUUID;
+    keyName: zod37.ZodOptional<zod37.ZodString>;
+    keyValue: zod37.ZodOptional<zod37.ZodString>;
   }, better_auth0.$strip>>) => Promise<{
     id: string;
     createdAt: Date;
@@ -2281,8 +2820,8 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     keyName: string;
     keyValue: string;
   } | undefined>;
-  getEnvironmentSecretById: (params: zod33.infer<zod33.ZodObject<{
-    secretId: zod33.ZodUUID;
+  getEnvironmentSecretById: (params: zod37.infer<zod37.ZodObject<{
+    secretId: zod37.ZodUUID;
   }, better_auth0.$strip>>) => Promise<{
     id: string;
     createdAt: Date;
@@ -2291,8 +2830,8 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     keyName: string;
     keyValue: string;
   } | undefined>;
-  getSecretsByEnvironmentId: (params: zod33.infer<zod33.ZodObject<{
-    environmentId: zod33.ZodUUID;
+  getSecretsByEnvironmentId: (params: zod37.infer<zod37.ZodObject<{
+    environmentId: zod37.ZodUUID;
   }, better_auth0.$strip>>) => Promise<{
     id: string;
     createdAt: Date;
@@ -2301,8 +2840,8 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     keyName: string;
     keyValue: string;
   }[]>;
-  deleteEnvironmentSecret: (params: zod33.infer<zod33.ZodObject<{
-    secretId: zod33.ZodUUID;
+  deleteEnvironmentSecret: (params: zod37.infer<zod37.ZodObject<{
+    secretId: zod37.ZodUUID;
   }, better_auth0.$strip>>) => Promise<{
     id: string;
     createdAt: Date;
@@ -2311,8 +2850,8 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     keyName: string;
     keyValue: string;
   } | undefined>;
-  deleteSecretsByEnvironmentId: (params: zod33.infer<zod33.ZodObject<{
-    environmentId: zod33.ZodUUID;
+  deleteSecretsByEnvironmentId: (params: zod37.infer<zod37.ZodObject<{
+    environmentId: zod37.ZodUUID;
   }, better_auth0.$strip>>) => Promise<{
     id: string;
     createdAt: Date;
@@ -2321,9 +2860,9 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     keyName: string;
     keyValue: string;
   }[]>;
-  listEnvironmentSecrets: (params?: zod33.infer<zod33.ZodObject<{
-    limit: zod33.ZodOptional<zod33.ZodNumber>;
-    offset: zod33.ZodOptional<zod33.ZodNumber>;
+  listEnvironmentSecrets: (params?: zod37.infer<zod37.ZodObject<{
+    limit: zod37.ZodOptional<zod37.ZodNumber>;
+    offset: zod37.ZodOptional<zod37.ZodNumber>;
   }, better_auth0.$strip>>) => Promise<{
     id: string;
     createdAt: Date;
@@ -2333,10 +2872,10 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     keyValue: string;
   }[]>;
   countEnvironmentSecrets: () => Promise<number>;
-  createNewEnvironment: (params: zod33.infer<zod33.ZodObject<{
-    name: zod33.ZodString;
-    slug: zod33.ZodString;
-    isProd: zod33.ZodDefault<zod33.ZodOptional<zod33.ZodBoolean>>;
+  createNewEnvironment: (params: zod37.infer<zod37.ZodObject<{
+    name: zod37.ZodString;
+    slug: zod37.ZodString;
+    isProd: zod37.ZodDefault<zod37.ZodOptional<zod37.ZodBoolean>>;
   }, better_auth0.$strip>>) => Promise<{
     slug: string;
     name: string;
@@ -2345,10 +2884,10 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     updatedAt: Date;
     isProd: boolean;
   } | undefined>;
-  updateEnvironment: (params: zod33.infer<zod33.ZodObject<{
-    environmentId: zod33.ZodUUID;
-    name: zod33.ZodOptional<zod33.ZodString>;
-    slug: zod33.ZodOptional<zod33.ZodString>;
+  updateEnvironment: (params: zod37.infer<zod37.ZodObject<{
+    environmentId: zod37.ZodUUID;
+    name: zod37.ZodOptional<zod37.ZodString>;
+    slug: zod37.ZodOptional<zod37.ZodString>;
   }, better_auth0.$strip>>) => Promise<{
     slug: string;
     name: string;
@@ -2357,8 +2896,8 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     updatedAt: Date;
     isProd: boolean;
   } | undefined>;
-  getEnvironmentById: (params: zod33.infer<zod33.ZodObject<{
-    environmentId: zod33.ZodUUID;
+  getEnvironmentById: (params: zod37.infer<zod37.ZodObject<{
+    environmentId: zod37.ZodUUID;
   }, better_auth0.$strip>>) => Promise<{
     slug: string;
     name: string;
@@ -2367,8 +2906,8 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     updatedAt: Date;
     isProd: boolean;
   } | undefined>;
-  getEnvironmentBySlug: (params: zod33.infer<zod33.ZodObject<{
-    slug: zod33.ZodString;
+  getEnvironmentBySlug: (params: zod37.infer<zod37.ZodObject<{
+    slug: zod37.ZodString;
   }, better_auth0.$strip>>) => Promise<{
     slug: string;
     name: string;
@@ -2377,8 +2916,8 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     updatedAt: Date;
     isProd: boolean;
   } | undefined>;
-  deleteEnvironment: (params: zod33.infer<zod33.ZodObject<{
-    environmentId: zod33.ZodUUID;
+  deleteEnvironment: (params: zod37.infer<zod37.ZodObject<{
+    environmentId: zod37.ZodUUID;
   }, better_auth0.$strip>>) => Promise<{
     slug: string;
     name: string;
@@ -2387,9 +2926,9 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     updatedAt: Date;
     isProd: boolean;
   } | undefined>;
-  listEnvironments: (params?: zod33.infer<zod33.ZodObject<{
-    limit: zod33.ZodOptional<zod33.ZodNumber>;
-    offset: zod33.ZodOptional<zod33.ZodNumber>;
+  listEnvironments: (params?: zod37.infer<zod37.ZodObject<{
+    limit: zod37.ZodOptional<zod37.ZodNumber>;
+    offset: zod37.ZodOptional<zod37.ZodNumber>;
   }, better_auth0.$strip>>) => Promise<{
     slug: string;
     name: string;
@@ -2399,9 +2938,9 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     isProd: boolean;
   }[]>;
   countEnvironments: () => Promise<number>;
-  createConfigVariant: (params: zod33.infer<zod33.ZodObject<{
-    configId: zod33.ZodString;
-    variantId: zod33.ZodString;
+  createConfigVariant: (params: zod37.infer<zod37.ZodObject<{
+    configId: zod37.ZodString;
+    variantId: zod37.ZodString;
   }, better_auth0.$strip>>) => Promise<{
     id: string;
     createdAt: Date;
@@ -2409,8 +2948,8 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     variantId: string;
     configId: string;
   } | undefined>;
-  getConfigVariantById: (params: zod33.infer<zod33.ZodObject<{
-    id: zod33.ZodString;
+  getConfigVariantById: (params: zod37.infer<zod37.ZodObject<{
+    id: zod37.ZodString;
   }, better_auth0.$strip>>) => Promise<{
     id: string;
     createdAt: Date;
@@ -2418,10 +2957,10 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     variantId: string;
     configId: string;
   } | undefined>;
-  getConfigVariantsByConfigId: (params: zod33.infer<zod33.ZodObject<{
-    configId: zod33.ZodString;
-    limit: zod33.ZodOptional<zod33.ZodNumber>;
-    offset: zod33.ZodOptional<zod33.ZodNumber>;
+  getConfigVariantsByConfigId: (params: zod37.infer<zod37.ZodObject<{
+    configId: zod37.ZodString;
+    limit: zod37.ZodOptional<zod37.ZodNumber>;
+    offset: zod37.ZodOptional<zod37.ZodNumber>;
   }, better_auth0.$strip>>) => Promise<{
     id: string;
     createdAt: Date;
@@ -2429,10 +2968,10 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     variantId: string;
     configId: string;
   }[]>;
-  getConfigVariantsByVariantId: (params: zod33.infer<zod33.ZodObject<{
-    variantId: zod33.ZodString;
-    limit: zod33.ZodOptional<zod33.ZodNumber>;
-    offset: zod33.ZodOptional<zod33.ZodNumber>;
+  getConfigVariantsByVariantId: (params: zod37.infer<zod37.ZodObject<{
+    variantId: zod37.ZodString;
+    limit: zod37.ZodOptional<zod37.ZodNumber>;
+    offset: zod37.ZodOptional<zod37.ZodNumber>;
   }, better_auth0.$strip>>) => Promise<{
     id: string;
     createdAt: Date;
@@ -2440,8 +2979,8 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     variantId: string;
     configId: string;
   }[]>;
-  deleteConfigVariant: (params: zod33.infer<zod33.ZodObject<{
-    id: zod33.ZodString;
+  deleteConfigVariant: (params: zod37.infer<zod37.ZodObject<{
+    id: zod37.ZodString;
   }, better_auth0.$strip>>) => Promise<{
     id: string;
     createdAt: Date;
@@ -2449,9 +2988,9 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     variantId: string;
     configId: string;
   } | undefined>;
-  deleteConfigVariantByIds: (params: zod33.infer<zod33.ZodObject<{
-    configId: zod33.ZodString;
-    variantId: zod33.ZodString;
+  deleteConfigVariantByIds: (params: zod37.infer<zod37.ZodObject<{
+    configId: zod37.ZodString;
+    variantId: zod37.ZodString;
   }, better_auth0.$strip>>) => Promise<{
     id: string;
     createdAt: Date;
@@ -2459,9 +2998,9 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     variantId: string;
     configId: string;
   } | undefined>;
-  listConfigVariants: (params?: zod33.infer<zod33.ZodObject<{
-    limit: zod33.ZodOptional<zod33.ZodNumber>;
-    offset: zod33.ZodOptional<zod33.ZodNumber>;
+  listConfigVariants: (params?: zod37.infer<zod37.ZodObject<{
+    limit: zod37.ZodOptional<zod37.ZodNumber>;
+    offset: zod37.ZodOptional<zod37.ZodNumber>;
   }, better_auth0.$strip>>) => Promise<{
     id: string;
     createdAt: Date;
@@ -2469,8 +3008,8 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     variantId: string;
     configId: string;
   }[]>;
-  getConfigVariantWithDetails: (params: zod33.infer<zod33.ZodObject<{
-    id: zod33.ZodString;
+  getConfigVariantWithDetails: (params: zod37.infer<zod37.ZodObject<{
+    id: zod37.ZodString;
   }, better_auth0.$strip>>) => Promise<{
     latestVersion: {
       version: number;
@@ -2490,10 +3029,10 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     configId: string;
     configName: string | null | undefined;
   } | undefined>;
-  getConfigVariantsWithDetailsByConfigId: (params: zod33.infer<zod33.ZodObject<{
-    configId: zod33.ZodString;
-    limit: zod33.ZodOptional<zod33.ZodNumber>;
-    offset: zod33.ZodOptional<zod33.ZodNumber>;
+  getConfigVariantsWithDetailsByConfigId: (params: zod37.infer<zod37.ZodObject<{
+    configId: zod37.ZodString;
+    limit: zod37.ZodOptional<zod37.ZodNumber>;
+    offset: zod37.ZodOptional<zod37.ZodNumber>;
   }, better_auth0.$strip>>) => Promise<{
     provider: string | null;
     modelName: string | null;
@@ -2515,12 +3054,12 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     variantId: string;
     configId: string;
   }[]>;
-  createVariantAndLinkToConfig: (params: zod33.infer<zod33.ZodObject<{
-    configId: zod33.ZodString;
-    name: zod33.ZodString;
-    provider: zod33.ZodString;
-    modelName: zod33.ZodString;
-    jsonData: zod33.ZodDefault<zod33.ZodOptional<zod33.ZodRecord<zod33.ZodString, zod33.ZodUnknown>>>;
+  createVariantAndLinkToConfig: (params: zod37.infer<zod37.ZodObject<{
+    configId: zod37.ZodString;
+    name: zod37.ZodString;
+    provider: zod37.ZodString;
+    modelName: zod37.ZodString;
+    jsonData: zod37.ZodDefault<zod37.ZodOptional<zod37.ZodRecord<zod37.ZodString, zod37.ZodUnknown>>>;
   }, better_auth0.$strip>>) => Promise<{
     variant: {
       name: string;
@@ -2546,9 +3085,9 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
       configId: string;
     };
   }>;
-  getVariantJsonDataForConfig: (params: zod33.infer<zod33.ZodObject<{
-    configId: zod33.ZodString;
-    envSecret: zod33.ZodOptional<zod33.ZodString>;
+  getVariantJsonDataForConfig: (params: zod37.infer<zod37.ZodObject<{
+    configId: zod37.ZodString;
+    envSecret: zod37.ZodOptional<zod37.ZodString>;
   }, better_auth0.$strip>>) => Promise<{
     provider: string;
     providerConfigId: string | null;
@@ -2559,8 +3098,8 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     modelName: string;
     jsonData: Record<string, unknown>;
   }>;
-  createNewConfig: (params: zod33.infer<zod33.ZodObject<{
-    name: zod33.ZodString;
+  createNewConfig: (params: zod37.infer<zod37.ZodObject<{
+    name: zod37.ZodString;
   }, better_auth0.$strip>>) => Promise<{
     slug: string;
     name: string | undefined;
@@ -2568,9 +3107,9 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     createdAt: Date;
     updatedAt: Date;
   } | undefined>;
-  updateConfigName: (params: zod33.infer<zod33.ZodObject<{
-    configId: zod33.ZodUUID;
-    newName: zod33.ZodString;
+  updateConfigName: (params: zod37.infer<zod37.ZodObject<{
+    configId: zod37.ZodUUID;
+    newName: zod37.ZodString;
   }, better_auth0.$strip>>) => Promise<{
     slug: string;
     name: string | undefined;
@@ -2578,8 +3117,8 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     createdAt: Date;
     updatedAt: Date;
   } | undefined>;
-  getConfigById: (params: zod33.infer<zod33.ZodObject<{
-    configId: zod33.ZodUUID;
+  getConfigById: (params: zod37.infer<zod37.ZodObject<{
+    configId: zod37.ZodUUID;
   }, better_auth0.$strip>>) => Promise<{
     slug: string;
     name: string | undefined;
@@ -2587,8 +3126,8 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     createdAt: Date;
     updatedAt: Date;
   } | undefined>;
-  deleteConfig: (params: zod33.infer<zod33.ZodObject<{
-    configId: zod33.ZodUUID;
+  deleteConfig: (params: zod37.infer<zod37.ZodObject<{
+    configId: zod37.ZodUUID;
   }, better_auth0.$strip>>) => Promise<{
     slug: string;
     name: string | undefined;
@@ -2596,9 +3135,9 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     createdAt: Date;
     updatedAt: Date;
   } | undefined>;
-  listConfigs: (params?: zod33.infer<zod33.ZodObject<{
-    limit: zod33.ZodOptional<zod33.ZodNumber>;
-    offset: zod33.ZodOptional<zod33.ZodNumber>;
+  listConfigs: (params?: zod37.infer<zod37.ZodObject<{
+    limit: zod37.ZodOptional<zod37.ZodNumber>;
+    offset: zod37.ZodOptional<zod37.ZodNumber>;
   }, better_auth0.$strip>>) => Promise<{
     slug: string;
     name: string | undefined;
@@ -2606,8 +3145,8 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     createdAt: Date;
     updatedAt: Date;
   }[]>;
-  getConfigWithVariants: (params: zod33.infer<zod33.ZodObject<{
-    configId: zod33.ZodUUID;
+  getConfigWithVariants: (params: zod37.infer<zod37.ZodObject<{
+    configId: zod37.ZodUUID;
   }, better_auth0.$strip>>) => Promise<{
     provider: string | null;
     modelName: string | null;
@@ -2887,6 +3426,30 @@ interface ManifestEnvironment {
   name: string;
   isProd: boolean;
 }
+/**
+ * Guardrail configuration in the manifest
+ * Pre-loaded for gateway use without additional DB queries
+ */
+interface ManifestGuardrail {
+  id: string;
+  name: string;
+  pluginId: string;
+  functionId: string;
+  hookType: 'beforeRequestHook' | 'afterRequestHook';
+  parameters: Record<string, unknown>;
+  priority: number;
+  onFail: 'block' | 'log';
+}
+/**
+ * Provider-specific guardrail override in the manifest
+ */
+interface ManifestProviderGuardrailOverride {
+  id: string;
+  providerConfigId: string;
+  guardrailConfigId: string;
+  enabled: boolean;
+  parameters: Record<string, unknown> | null;
+}
 /**
  * The complete routing manifest
  * Stored in cache under key: "gateway:manifest"
@@ -2900,6 +3463,11 @@ interface GatewayManifest {
   environmentsBySlug: Record<string, string>;
   routingTable: Record<string, Record<string, ManifestTargetingRule[]>>;
   secretToEnvironment: Record<string, string>;
+  guardrails: {
+    beforeRequestHook: ManifestGuardrail[];
+    afterRequestHook: ManifestGuardrail[];
+  };
+  providerGuardrailOverrides: Record<string, ManifestProviderGuardrailOverride[]>;
 }
 /**
  * Context passed to JSONLogic for condition evaluation
@@ -3010,4 +3578,4 @@ declare class ManifestRouter {
   routeWithWeights(configIdOrSlug: string, environmentId: string, context?: RoutingContext): RoutingResult | null;
 }
 //#endregion
-export { type AnthropicProviderConfig, type AnyProviderConfig, AuthClientDatabaseConfig, AuthClientOptions, type AzureAIProviderConfig, type AzureOpenAIProviderConfig, BaseCacheConfig, type BaseProviderConfig, type BedrockProviderConfig, CacheBackend, CacheBackendType, CacheConfig, CacheEntry, CacheOptions, CacheService, CacheStats, ChatCompletionCreateParamsBase, Config, ConfigVariant, type ConfigVariantsTable, type ConfigsTable, type CortexProviderConfig, CostResult, type Database, DatabaseConnection, DatabaseOptions, DatabaseType, Environment, EnvironmentSecret, type EnvironmentSecretsTable, type EnvironmentsTable, FileCacheBackend, FileCacheConfig, type FireworksAIProviderConfig, type GatewayManifest, type GoogleProviderConfig, type HuggingFaceProviderConfig, Insertable, LLMOpsClient, LLMOpsConfig, type LLMOpsConfigInput, LLMRequest, type LLMRequestInsert, LLMRequestsTable, MS, ManifestBuilder, type ManifestConfig, type ManifestEnvironment, ManifestRouter, ManifestService, type ManifestTargetingRule, type ManifestVariantVersion, MemoryCacheBackend, MemoryCacheConfig, MigrationOptions, MigrationResult, type MistralAIProviderConfig, ModelPricing, ModelsDevPricingProvider, type OpenAIProviderConfig, type OracleProviderConfig, Prettify, PricingProvider, ProviderConfig, type ProviderConfigMap, ProviderConfigsTable, type ProvidersConfig, type RoutingContext, type RoutingResult, SCHEMA_METADATA, type SagemakerProviderConfig, Selectable, type StabilityAIProviderConfig, SupportedProviders, type TableName, TargetingRule, type TargetingRulesTable, Updateable, UsageData, type ValidatedLLMOpsConfig, Variant, VariantJsonData, VariantVersion, VariantVersionsTable, type VariantsTable, type VertexAIProviderConfig, type WorkersAIProviderConfig, WorkspaceSettings, WorkspaceSettingsTable, calculateCost, chatCompletionCreateParamsBaseSchema, configVariantsSchema, configsSchema, createDataLayer, createDatabase, createDatabaseFromConnection, createLLMRequestsDataLayer, createNeonDialect, createProviderConfigsDataLayer, createWorkspaceSettingsDataLayer, detectDatabaseType, dollarsToMicroDollars, environmentSecretsSchema, environmentsSchema, executeWithSchema, formatCost, gateway, generateId, getAuthClientOptions, getDefaultPricingProvider, getMigrations, llmRequestsSchema, llmopsConfigSchema, logger, matchType, microDollarsToDollars, parsePartialTableData, parseTableData, providerConfigsSchema, runAutoMigrations, schemas, targetingRulesSchema, validateLLMOpsConfig, validatePartialTableData, validateTableData, variantJsonDataSchema, variantVersionsSchema, variantsSchema, workspaceSettingsSchema };
+export { type AnthropicProviderConfig, type AnyProviderConfig, AuthClientDatabaseConfig, AuthClientOptions, type AzureAIProviderConfig, type AzureOpenAIProviderConfig, BaseCacheConfig, type BaseProviderConfig, type BedrockProviderConfig, CacheBackend, CacheBackendType, CacheConfig, CacheEntry, CacheOptions, CacheService, CacheStats, ChatCompletionCreateParamsBase, Config, ConfigVariant, type ConfigVariantsTable, type ConfigsTable, type CortexProviderConfig, CostResult, type Database, DatabaseConnection, DatabaseOptions, DatabaseType, Environment, EnvironmentSecret, type EnvironmentSecretsTable, type EnvironmentsTable, FileCacheBackend, FileCacheConfig, type FireworksAIProviderConfig, type GatewayManifest, type GoogleProviderConfig, GuardrailConfig, GuardrailConfigsTable, GuardrailResult, GuardrailResults, type HuggingFaceProviderConfig, Insertable, LLMOpsClient, LLMOpsConfig, type LLMOpsConfigInput, LLMRequest, type LLMRequestInsert, LLMRequestsTable, MS, ManifestBuilder, type ManifestConfig, type ManifestEnvironment, type ManifestGuardrail, type ManifestProviderGuardrailOverride, ManifestRouter, ManifestService, type ManifestTargetingRule, type ManifestVariantVersion, MemoryCacheBackend, MemoryCacheConfig, MigrationOptions, MigrationResult, type MistralAIProviderConfig, ModelPricing, ModelsDevPricingProvider, type OpenAIProviderConfig, type OracleProviderConfig, Prettify, PricingProvider, ProviderConfig, type ProviderConfigMap, ProviderConfigsTable, ProviderGuardrailOverride, ProviderGuardrailOverridesTable, type ProvidersConfig, type RoutingContext, type RoutingResult, SCHEMA_METADATA, type SagemakerProviderConfig, Selectable, type StabilityAIProviderConfig, SupportedProviders, type TableName, TargetingRule, type TargetingRulesTable, Updateable, UsageData, type ValidatedLLMOpsConfig, Variant, VariantJsonData, VariantVersion, VariantVersionsTable, type VariantsTable, type VertexAIProviderConfig, type WorkersAIProviderConfig, WorkspaceSettings, WorkspaceSettingsTable, calculateCost, chatCompletionCreateParamsBaseSchema, configVariantsSchema, configsSchema, createDataLayer, createDatabase, createDatabaseFromConnection, createGuardrailConfigsDataLayer, createLLMRequestsDataLayer, createNeonDialect, createProviderConfigsDataLayer, createProviderGuardrailOverridesDataLayer, createWorkspaceSettingsDataLayer, detectDatabaseType, dollarsToMicroDollars, environmentSecretsSchema, environmentsSchema, executeWithSchema, formatCost, gateway, generateId, getAuthClientOptions, getDefaultPricingProvider, getMigrations, guardrailConfigsSchema, llmRequestsSchema, llmopsConfigSchema, logger, matchType, microDollarsToDollars, parsePartialTableData, parseTableData, providerConfigsSchema, providerGuardrailOverridesSchema, runAutoMigrations, schemas, targetingRulesSchema, validateLLMOpsConfig, validatePartialTableData, validateTableData, variantJsonDataSchema, variantVersionsSchema, variantsSchema, workspaceSettingsSchema };