@llmops/core 0.3.1 → 0.3.2-beta.1

package/dist/index.d.cts

@@ -1,4 +1,5 @@
-import { $ as variantsSchema, A as ProviderConfig, B as VariantVersionsTable, C as Environment, D as Insertable, E as EnvironmentsTable, F as TargetingRule, G as configsSchema, H as WorkspaceSettings, I as TargetingRulesTable, J as llmRequestsSchema, K as environmentSecretsSchema, L as Updateable, M as SCHEMA_METADATA, N as Selectable, O as LLMRequest, P as TableName, Q as variantVersionsSchema, R as Variant, S as Database, T as EnvironmentSecretsTable, U as WorkspaceSettingsTable, V as VariantsTable, W as configVariantsSchema, X as schemas, Y as providerConfigsSchema, Z as targetingRulesSchema, _ as validateTableData, a as createDatabaseFromConnection, b as ConfigVariantsTable, c as executeWithSchema, d as getMigrations, et as workspaceSettingsSchema, f as matchType, g as validatePartialTableData, h as parseTableData, i as createDatabase, j as ProviderConfigsTable, k as LLMRequestsTable, l as MigrationOptions, m as parsePartialTableData, n as DatabaseOptions, o as detectDatabaseType, p as runAutoMigrations, q as environmentsSchema, r as DatabaseType, s as createNeonDialect, t as DatabaseConnection, u as MigrationResult, v as Config, w as EnvironmentSecret, x as ConfigsTable, y as ConfigVariant, z as VariantVersion } from "./index-CunWjFE4.cjs";
+import { $ as environmentsSchema, A as GuardrailResults, B as TableName, C as Environment, D as GuardrailConfig, E as EnvironmentsTable, F as ProviderConfigsTable, G as VariantVersion, H as TargetingRulesTable, I as ProviderGuardrailOverride, J as WorkspaceSettings, K as VariantVersionsTable, L as ProviderGuardrailOverridesTable, M as LLMRequest, N as LLMRequestsTable, O as GuardrailConfigsTable, P as ProviderConfig, Q as environmentSecretsSchema, R as SCHEMA_METADATA, S as Database, T as EnvironmentSecretsTable, U as Updateable, V as TargetingRule, W as Variant, X as configVariantsSchema, Y as WorkspaceSettingsTable, Z as configsSchema, _ as validateTableData, a as createDatabaseFromConnection, at as targetingRulesSchema, b as ConfigVariantsTable, c as executeWithSchema, ct as workspaceSettingsSchema, d as getMigrations, et as guardrailConfigsSchema, f as matchType, g as validatePartialTableData, h as parseTableData, i as createDatabase, it as schemas, j as Insertable, k as GuardrailResult, l as MigrationOptions, m as parsePartialTableData, n as DatabaseOptions, nt as providerConfigsSchema, o as detectDatabaseType, ot as variantVersionsSchema, p as runAutoMigrations, q as VariantsTable, r as DatabaseType, rt as providerGuardrailOverridesSchema, s as createNeonDialect, st as variantsSchema, t as DatabaseConnection, tt as llmRequestsSchema, u as MigrationResult, v as Config, w as EnvironmentSecret, x as ConfigsTable, y as ConfigVariant, z as Selectable } from "./index-nsx8vXII.cjs";
+import * as kysely0 from "kysely";
 import { Kysely } from "kysely";
 import * as zod0 from "zod";
 import z$1, { z } from "zod";
@@ -1149,12 +1150,15 @@ declare const createLLMRequestsDataLayer: (db: Kysely<Database>) => {
    * Insert a single LLM request log
    */
   insertRequest: (request: LLMRequestInsert) => Promise<{
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
     variantId: string | null;
     provider: string;
     environmentId: string | null;
     configId: string | null;
-    requestId: string;
     providerConfigId: string | null;
+    requestId: string;
     model: string;
     promptTokens: number;
     completionTokens: number;
@@ -1169,9 +1173,17 @@ declare const createLLMRequestsDataLayer: (db: Kysely<Database>) => {
     isStreaming: boolean;
     userId: string | null;
     tags: Record<string, string>;
-    id: string;
-    createdAt: Date;
-    updatedAt: Date;
+    guardrailResults: {
+      results: {
+        configId: string;
+        functionId: string;
+        hookType: "beforeRequestHook" | "afterRequestHook";
+        verdict: boolean;
+        latencyMs: number;
+      }[];
+      action: "allowed" | "blocked" | "logged";
+      totalLatencyMs: number;
+    } | null;
   } | undefined>;
   /**
    * List LLM requests with filtering and pagination
@@ -1179,12 +1191,15 @@ declare const createLLMRequestsDataLayer: (db: Kysely<Database>) => {
    */
   listRequests: (params?: z$1.infer<typeof listRequestsSchema>) => Promise<{
     data: {
+      id: string;
+      createdAt: Date;
+      updatedAt: Date;
       variantId: string | null;
       provider: string;
       environmentId: string | null;
       configId: string | null;
-      requestId: string;
       providerConfigId: string | null;
+      requestId: string;
       model: string;
       promptTokens: number;
       completionTokens: number;
@@ -1199,9 +1214,17 @@ declare const createLLMRequestsDataLayer: (db: Kysely<Database>) => {
       isStreaming: boolean;
       userId: string | null;
       tags: Record<string, string>;
-      id: string;
-      createdAt: Date;
-      updatedAt: Date;
+      guardrailResults: {
+        results: {
+          configId: string;
+          functionId: string;
+          hookType: "beforeRequestHook" | "afterRequestHook";
+          verdict: boolean;
+          latencyMs: number;
+        }[];
+        action: "allowed" | "blocked" | "logged";
+        totalLatencyMs: number;
+      } | null;
     }[];
     total: number;
     limit: number;
@@ -1211,12 +1234,15 @@ declare const createLLMRequestsDataLayer: (db: Kysely<Database>) => {
    * Get a single request by requestId
    */
   getRequestByRequestId: (requestId: string) => Promise<{
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
     variantId: string | null;
     provider: string;
     environmentId: string | null;
     configId: string | null;
-    requestId: string;
     providerConfigId: string | null;
+    requestId: string;
     model: string;
     promptTokens: number;
     completionTokens: number;
@@ -1231,9 +1257,17 @@ declare const createLLMRequestsDataLayer: (db: Kysely<Database>) => {
     isStreaming: boolean;
     userId: string | null;
     tags: Record<string, string>;
-    id: string;
-    createdAt: Date;
-    updatedAt: Date;
+    guardrailResults: {
+      results: {
+        configId: string;
+        functionId: string;
+        hookType: "beforeRequestHook" | "afterRequestHook";
+        verdict: boolean;
+        latencyMs: number;
+      }[];
+      action: "allowed" | "blocked" | "logged";
+      totalLatencyMs: number;
+    } | null;
   } | undefined>;
   /**
    * Get total cost for a date range with optional filters
@@ -1338,22 +1372,22 @@ declare const createWorkspaceSettingsDataLayer: (db: Kysely<Database>) => {
    */
   getWorkspaceSettings: () => Promise<{
     name: string | null;
-    setupComplete: boolean;
-    superAdminId: string | null;
     id: string;
     createdAt: Date;
     updatedAt: Date;
+    setupComplete: boolean;
+    superAdminId: string | null;
   } | undefined>;
   /**
    * Update workspace settings
    */
   updateWorkspaceSettings: (params: z$1.infer<typeof updateWorkspaceSettings>) => Promise<{
     name: string | null;
-    setupComplete: boolean;
-    superAdminId: string | null;
     id: string;
     createdAt: Date;
     updatedAt: Date;
+    setupComplete: boolean;
+    superAdminId: string | null;
   } | undefined>;
   /**
    * Get the super admin user ID
@@ -1372,11 +1406,11 @@ declare const createWorkspaceSettingsDataLayer: (db: Kysely<Database>) => {
    */
   markSetupComplete: () => Promise<{
     name: string | null;
-    setupComplete: boolean;
-    superAdminId: string | null;
     id: string;
     createdAt: Date;
     updatedAt: Date;
+    setupComplete: boolean;
+    superAdminId: string | null;
   } | undefined>;
 };
 //#endregion
@@ -1415,72 +1449,72 @@ declare const createProviderConfigsDataLayer: (db: Kysely<Database>) => {
   createProviderConfig: (params: z$1.infer<typeof createProviderConfig>) => Promise<{
     slug: string | null;
     name: string | null;
-    enabled: boolean;
-    providerId: string;
-    config: Record<string, unknown>;
     id: string;
     createdAt: Date;
     updatedAt: Date;
+    enabled: boolean;
+    providerId: string;
+    config: Record<string, unknown>;
   } | undefined>;
   updateProviderConfig: (params: z$1.infer<typeof updateProviderConfig>) => Promise<{
     slug: string | null;
     name: string | null;
-    enabled: boolean;
-    providerId: string;
-    config: Record<string, unknown>;
     id: string;
     createdAt: Date;
     updatedAt: Date;
+    enabled: boolean;
+    providerId: string;
+    config: Record<string, unknown>;
   } | undefined>;
   getProviderConfigById: (params: z$1.infer<typeof getProviderConfigById>) => Promise<{
     slug: string | null;
     name: string | null;
-    enabled: boolean;
-    providerId: string;
-    config: Record<string, unknown>;
     id: string;
     createdAt: Date;
     updatedAt: Date;
+    enabled: boolean;
+    providerId: string;
+    config: Record<string, unknown>;
   } | undefined>;
   getProviderConfigByProviderId: (params: z$1.infer<typeof getProviderConfigByProviderId>) => Promise<{
     slug: string | null;
     name: string | null;
-    enabled: boolean;
-    providerId: string;
-    config: Record<string, unknown>;
     id: string;
     createdAt: Date;
     updatedAt: Date;
+    enabled: boolean;
+    providerId: string;
+    config: Record<string, unknown>;
   } | undefined>;
   getProviderConfigBySlug: (params: z$1.infer<typeof getProviderConfigBySlug>) => Promise<{
     slug: string | null;
     name: string | null;
-    enabled: boolean;
-    providerId: string;
-    config: Record<string, unknown>;
     id: string;
     createdAt: Date;
     updatedAt: Date;
+    enabled: boolean;
+    providerId: string;
+    config: Record<string, unknown>;
   } | undefined>;
   deleteProviderConfig: (params: z$1.infer<typeof deleteProviderConfig>) => Promise<{
     slug: string | null;
     name: string | null;
-    enabled: boolean;
-    providerId: string;
-    config: Record<string, unknown>;
     id: string;
     createdAt: Date;
     updatedAt: Date;
+    enabled: boolean;
+    providerId: string;
+    config: Record<string, unknown>;
   } | undefined>;
   listProviderConfigs: (params?: z$1.infer<typeof listProviderConfigs>) => Promise<{
     slug: string | null;
     name: string | null;
-    enabled: boolean;
-    providerId: string;
-    config: Record<string, unknown>;
     id: string;
     createdAt: Date;
     updatedAt: Date;
+    enabled: boolean;
+    providerId: string;
+    config: Record<string, unknown>;
   }[]>;
   countProviderConfigs: () => Promise<number>;
   /**
@@ -1490,24 +1524,268 @@ declare const createProviderConfigsDataLayer: (db: Kysely<Database>) => {
   upsertProviderConfig: (params: z$1.infer<typeof createProviderConfig>) => Promise<{
     slug: string | null;
     name: string | null;
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
     enabled: boolean;
     providerId: string;
     config: Record<string, unknown>;
+  } | undefined>;
+};
+//#endregion
+//#region src/datalayer/guardrailConfigs.d.ts
+declare const createGuardrailConfig: z$1.ZodObject<{
+  name: z$1.ZodString;
+  pluginId: z$1.ZodString;
+  functionId: z$1.ZodString;
+  hookType: z$1.ZodEnum<{
+    beforeRequestHook: "beforeRequestHook";
+    afterRequestHook: "afterRequestHook";
+  }>;
+  parameters: z$1.ZodDefault<z$1.ZodOptional<z$1.ZodRecord<z$1.ZodString, z$1.ZodUnknown>>>;
+  enabled: z$1.ZodDefault<z$1.ZodOptional<z$1.ZodBoolean>>;
+  priority: z$1.ZodDefault<z$1.ZodOptional<z$1.ZodNumber>>;
+  onFail: z$1.ZodDefault<z$1.ZodOptional<z$1.ZodEnum<{
+    block: "block";
+    log: "log";
+  }>>>;
+}, z$1.core.$strip>;
+declare const updateGuardrailConfig: z$1.ZodObject<{
+  id: z$1.ZodString;
+  name: z$1.ZodOptional<z$1.ZodString>;
+  hookType: z$1.ZodOptional<z$1.ZodEnum<{
+    beforeRequestHook: "beforeRequestHook";
+    afterRequestHook: "afterRequestHook";
+  }>>;
+  parameters: z$1.ZodOptional<z$1.ZodRecord<z$1.ZodString, z$1.ZodUnknown>>;
+  enabled: z$1.ZodOptional<z$1.ZodBoolean>;
+  priority: z$1.ZodOptional<z$1.ZodNumber>;
+  onFail: z$1.ZodOptional<z$1.ZodEnum<{
+    block: "block";
+    log: "log";
+  }>>;
+}, z$1.core.$strip>;
+declare const getGuardrailConfigById: z$1.ZodObject<{
+  id: z$1.ZodString;
+}, z$1.core.$strip>;
+declare const deleteGuardrailConfig: z$1.ZodObject<{
+  id: z$1.ZodString;
+}, z$1.core.$strip>;
+declare const listGuardrailConfigs: z$1.ZodObject<{
+  limit: z$1.ZodOptional<z$1.ZodNumber>;
+  offset: z$1.ZodOptional<z$1.ZodNumber>;
+  hookType: z$1.ZodOptional<z$1.ZodEnum<{
+    beforeRequestHook: "beforeRequestHook";
+    afterRequestHook: "afterRequestHook";
+  }>>;
+  enabled: z$1.ZodOptional<z$1.ZodBoolean>;
+}, z$1.core.$strip>;
+declare const createGuardrailConfigsDataLayer: (db: Kysely<Database>) => {
+  createGuardrailConfig: (params: z$1.infer<typeof createGuardrailConfig>) => Promise<{
+    name: string;
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
+    priority: number;
+    enabled: boolean;
+    pluginId: string;
+    functionId: string;
+    hookType: string;
+    parameters: Record<string, unknown>;
+    onFail: string;
+  } | undefined>;
+  updateGuardrailConfig: (params: z$1.infer<typeof updateGuardrailConfig>) => Promise<{
+    name: string;
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
+    priority: number;
+    enabled: boolean;
+    pluginId: string;
+    functionId: string;
+    hookType: string;
+    parameters: Record<string, unknown>;
+    onFail: string;
+  } | undefined>;
+  getGuardrailConfigById: (params: z$1.infer<typeof getGuardrailConfigById>) => Promise<{
+    name: string;
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
+    priority: number;
+    enabled: boolean;
+    pluginId: string;
+    functionId: string;
+    hookType: string;
+    parameters: Record<string, unknown>;
+    onFail: string;
+  } | undefined>;
+  deleteGuardrailConfig: (params: z$1.infer<typeof deleteGuardrailConfig>) => Promise<{
+    name: string;
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
+    priority: number;
+    enabled: boolean;
+    pluginId: string;
+    functionId: string;
+    hookType: string;
+    parameters: Record<string, unknown>;
+    onFail: string;
+  } | undefined>;
+  listGuardrailConfigs: (params?: z$1.infer<typeof listGuardrailConfigs>) => Promise<{
+    name: string;
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
+    priority: number;
+    enabled: boolean;
+    pluginId: string;
+    functionId: string;
+    hookType: string;
+    parameters: Record<string, unknown>;
+    onFail: string;
+  }[]>;
+  countGuardrailConfigs: () => Promise<number>;
+  /**
+   * Get all enabled guardrails for a specific hook type
+   * Ordered by priority (highest first)
+   */
+  getEnabledGuardrailsByHookType: (hookType: "beforeRequestHook" | "afterRequestHook") => Promise<{
+    name: string;
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
+    priority: number;
+    enabled: boolean;
+    pluginId: string;
+    functionId: string;
+    hookType: string;
+    parameters: Record<string, unknown>;
+    onFail: string;
+  }[]>;
+};
+//#endregion
+//#region src/datalayer/providerGuardrailOverrides.d.ts
+declare const createProviderGuardrailOverride: z$1.ZodObject<{
+  providerConfigId: z$1.ZodString;
+  guardrailConfigId: z$1.ZodString;
+  enabled: z$1.ZodDefault<z$1.ZodOptional<z$1.ZodBoolean>>;
+  parameters: z$1.ZodOptional<z$1.ZodNullable<z$1.ZodRecord<z$1.ZodString, z$1.ZodUnknown>>>;
+}, z$1.core.$strip>;
+declare const updateProviderGuardrailOverride: z$1.ZodObject<{
+  id: z$1.ZodString;
+  enabled: z$1.ZodOptional<z$1.ZodBoolean>;
+  parameters: z$1.ZodOptional<z$1.ZodNullable<z$1.ZodRecord<z$1.ZodString, z$1.ZodUnknown>>>;
+}, z$1.core.$strip>;
+declare const getOverrideById: z$1.ZodObject<{
+  id: z$1.ZodString;
+}, z$1.core.$strip>;
+declare const deleteOverride: z$1.ZodObject<{
+  id: z$1.ZodString;
+}, z$1.core.$strip>;
+declare const getOverridesByProviderConfigId: z$1.ZodObject<{
+  providerConfigId: z$1.ZodString;
+}, z$1.core.$strip>;
+declare const getOverridesByGuardrailConfigId: z$1.ZodObject<{
+  guardrailConfigId: z$1.ZodString;
+}, z$1.core.$strip>;
+declare const getOverrideByProviderAndGuardrail: z$1.ZodObject<{
+  providerConfigId: z$1.ZodString;
+  guardrailConfigId: z$1.ZodString;
+}, z$1.core.$strip>;
+declare const createProviderGuardrailOverridesDataLayer: (db: Kysely<Database>) => {
+  createProviderGuardrailOverride: (params: z$1.infer<typeof createProviderGuardrailOverride>) => Promise<{
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
+    enabled: boolean;
+    parameters: Record<string, unknown> | null;
+    providerConfigId: string;
+    guardrailConfigId: string;
+  } | undefined>;
+  updateProviderGuardrailOverride: (params: z$1.infer<typeof updateProviderGuardrailOverride>) => Promise<{
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
+    enabled: boolean;
+    parameters: Record<string, unknown> | null;
+    providerConfigId: string;
+    guardrailConfigId: string;
+  } | undefined>;
+  getOverrideById: (params: z$1.infer<typeof getOverrideById>) => Promise<{
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
+    enabled: boolean;
+    parameters: Record<string, unknown> | null;
+    providerConfigId: string;
+    guardrailConfigId: string;
+  } | undefined>;
+  deleteProviderGuardrailOverride: (params: z$1.infer<typeof deleteOverride>) => Promise<{
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
+    enabled: boolean;
+    parameters: Record<string, unknown> | null;
+    providerConfigId: string;
+    guardrailConfigId: string;
+  } | undefined>;
+  getOverridesByProviderConfigId: (params: z$1.infer<typeof getOverridesByProviderConfigId>) => Promise<{
     id: string;
     createdAt: Date;
     updatedAt: Date;
+    enabled: boolean;
+    parameters: Record<string, unknown> | null;
+    providerConfigId: string;
+    guardrailConfigId: string;
+  }[]>;
+  getOverridesByGuardrailConfigId: (params: z$1.infer<typeof getOverridesByGuardrailConfigId>) => Promise<{
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
+    enabled: boolean;
+    parameters: Record<string, unknown> | null;
+    providerConfigId: string;
+    guardrailConfigId: string;
+  }[]>;
+  getOverrideByProviderAndGuardrail: (params: z$1.infer<typeof getOverrideByProviderAndGuardrail>) => Promise<{
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
+    enabled: boolean;
+    parameters: Record<string, unknown> | null;
+    providerConfigId: string;
+    guardrailConfigId: string;
   } | undefined>;
+  /**
+   * Upsert provider guardrail override - creates if not exists, updates if exists
+   */
+  upsertProviderGuardrailOverride: (params: z$1.infer<typeof createProviderGuardrailOverride>) => Promise<{
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
+    enabled: boolean;
+    parameters: Record<string, unknown> | null;
+    providerConfigId: string;
+    guardrailConfigId: string;
+  } | undefined>;
+  /**
+   * Delete all overrides for a guardrail config
+   * Useful when deleting a guardrail config
+   */
+  deleteOverridesByGuardrailConfigId: (params: z$1.infer<typeof getOverridesByGuardrailConfigId>) => Promise<kysely0.DeleteResult[]>;
 };
 //#endregion
 //#region src/datalayer/index.d.ts
 declare const createDataLayer: (db: Kysely<Database>) => Promise<{
   getWorkspaceSettings: () => Promise<{
     name: string | null;
-    setupComplete: boolean;
-    superAdminId: string | null;
     id: string;
     createdAt: Date;
     updatedAt: Date;
+    setupComplete: boolean;
+    superAdminId: string | null;
   } | undefined>;
   updateWorkspaceSettings: (params: zod0.infer<zod0.ZodObject<{
     name: zod0.ZodOptional<zod0.ZodNullable<zod0.ZodString>>;
@@ -1515,22 +1793,22 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     superAdminId: zod0.ZodOptional<zod0.ZodNullable<zod0.ZodString>>;
   }, better_auth0.$strip>>) => Promise<{
     name: string | null;
-    setupComplete: boolean;
-    superAdminId: string | null;
     id: string;
     createdAt: Date;
     updatedAt: Date;
+    setupComplete: boolean;
+    superAdminId: string | null;
   } | undefined>;
   getSuperAdminId: () => Promise<string | null>;
   setSuperAdminId: (userId: string) => Promise<boolean>;
   isSetupComplete: () => Promise<boolean>;
   markSetupComplete: () => Promise<{
     name: string | null;
-    setupComplete: boolean;
-    superAdminId: string | null;
     id: string;
     createdAt: Date;
     updatedAt: Date;
+    setupComplete: boolean;
+    superAdminId: string | null;
   } | undefined>;
   createVariantVersion: (params: zod0.infer<zod0.ZodObject<{
     variantId: zod0.ZodString;
@@ -1539,25 +1817,25 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     jsonData: zod0.ZodDefault<zod0.ZodOptional<zod0.ZodRecord<zod0.ZodString, zod0.ZodUnknown>>>;
   }, better_auth0.$strip>>) => Promise<{
     version: number;
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
     variantId: string;
     provider: string;
     modelName: string;
     jsonData: Record<string, unknown>;
-    id: string;
-    createdAt: Date;
-    updatedAt: Date;
   } | undefined>;
   getVariantVersionById: (params: zod0.infer<zod0.ZodObject<{
     id: zod0.ZodString;
   }, better_auth0.$strip>>) => Promise<{
     version: number;
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
     variantId: string;
     provider: string;
     modelName: string;
     jsonData: Record<string, unknown>;
-    id: string;
-    createdAt: Date;
-    updatedAt: Date;
   } | undefined>;
   getVariantVersionsByVariantId: (params: zod0.infer<zod0.ZodObject<{
     variantId: zod0.ZodString;
@@ -1565,74 +1843,74 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     offset: zod0.ZodOptional<zod0.ZodNumber>;
   }, better_auth0.$strip>>) => Promise<{
     version: number;
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
     variantId: string;
     provider: string;
     modelName: string;
     jsonData: Record<string, unknown>;
-    id: string;
-    createdAt: Date;
-    updatedAt: Date;
   }[]>;
   getLatestVariantVersion: (params: zod0.infer<zod0.ZodObject<{
     variantId: zod0.ZodString;
   }, better_auth0.$strip>>) => Promise<{
     version: number;
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
     variantId: string;
     provider: string;
     modelName: string;
     jsonData: Record<string, unknown>;
-    id: string;
-    createdAt: Date;
-    updatedAt: Date;
   } | undefined>;
   getVariantVersionByNumber: (params: zod0.infer<zod0.ZodObject<{
     variantId: zod0.ZodString;
     version: zod0.ZodNumber;
   }, better_auth0.$strip>>) => Promise<{
     version: number;
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
     variantId: string;
     provider: string;
     modelName: string;
     jsonData: Record<string, unknown>;
-    id: string;
-    createdAt: Date;
-    updatedAt: Date;
   } | undefined>;
   deleteVariantVersion: (params: zod0.infer<zod0.ZodObject<{
     id: zod0.ZodString;
   }, better_auth0.$strip>>) => Promise<{
     version: number;
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
     variantId: string;
     provider: string;
     modelName: string;
     jsonData: Record<string, unknown>;
-    id: string;
-    createdAt: Date;
-    updatedAt: Date;
   } | undefined>;
   deleteVariantVersionsByVariantId: (params: zod0.infer<zod0.ZodObject<{
     variantId: zod0.ZodString;
   }, better_auth0.$strip>>) => Promise<{
     version: number;
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
     variantId: string;
     provider: string;
     modelName: string;
     jsonData: Record<string, unknown>;
-    id: string;
-    createdAt: Date;
-    updatedAt: Date;
   }[]>;
   getVariantVersionWithVariant: (params: zod0.infer<zod0.ZodObject<{
     id: zod0.ZodString;
   }, better_auth0.$strip>>) => Promise<{
     version: number;
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
     variantId: string;
     provider: string;
     modelName: string;
     jsonData: Record<string, unknown>;
-    id: string;
-    createdAt: Date;
-    updatedAt: Date;
     variantName: string;
   } | undefined>;
   getVariantVersionsWithVariantByVariantId: (params: zod0.infer<zod0.ZodObject<{
@@ -1641,13 +1919,13 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     offset: zod0.ZodOptional<zod0.ZodNumber>;
   }, better_auth0.$strip>>) => Promise<{
     version: number;
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
     variantId: string;
     provider: string;
     modelName: string;
     jsonData: Record<string, unknown>;
-    id: string;
-    createdAt: Date;
-    updatedAt: Date;
     variantName: string;
   }[]>;
   createVariant: (params: zod0.infer<zod0.ZodObject<{
@@ -1680,13 +1958,13 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
   }, better_auth0.$strip>>) => Promise<{
     latestVersion: {
       version: number;
+      id: string;
+      createdAt: Date;
+      updatedAt: Date;
       variantId: string;
       provider: string;
       modelName: string;
       jsonData: Record<string, unknown>;
-      id: string;
-      createdAt: Date;
-      updatedAt: Date;
     } | null;
     name: string;
     id: string;
@@ -1716,13 +1994,13 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
   }, better_auth0.$strip>>) => Promise<{
     latestVersion: {
       version: number;
+      id: string;
+      createdAt: Date;
+      updatedAt: Date;
       variantId: string;
       provider: string;
       modelName: string;
       jsonData: Record<string, unknown>;
-      id: string;
-      createdAt: Date;
-      updatedAt: Date;
     } | null;
     name: string;
     id: string;
@@ -1739,6 +2017,9 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     enabled: zod0.ZodDefault<zod0.ZodOptional<zod0.ZodBoolean>>;
     conditions: zod0.ZodOptional<zod0.ZodNullable<zod0.ZodRecord<zod0.ZodString, zod0.ZodUnknown>>>;
   }, better_auth0.$strip>>) => Promise<{
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
     environmentId: string;
     configId: string;
     configVariantId: string;
@@ -1747,9 +2028,6 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     priority: number;
     enabled: boolean;
     conditions: Record<string, unknown>;
-    id: string;
-    createdAt: Date;
-    updatedAt: Date;
   } | undefined>;
   updateTargetingRule: (params: zod0.infer<zod0.ZodObject<{
     id: zod0.ZodString;
@@ -1759,6 +2037,9 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     enabled: zod0.ZodOptional<zod0.ZodBoolean>;
     conditions: zod0.ZodOptional<zod0.ZodNullable<zod0.ZodRecord<zod0.ZodString, zod0.ZodUnknown>>>;
   }, better_auth0.$strip>>) => Promise<{
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
     environmentId: string;
     configId: string;
     configVariantId: string;
@@ -1767,13 +2048,13 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     priority: number;
     enabled: boolean;
     conditions: Record<string, unknown>;
-    id: string;
-    createdAt: Date;
-    updatedAt: Date;
   } | undefined>;
   getTargetingRuleById: (params: zod0.infer<zod0.ZodObject<{
     id: zod0.ZodString;
   }, better_auth0.$strip>>) => Promise<{
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
     environmentId: string;
     configId: string;
     configVariantId: string;
@@ -1782,15 +2063,15 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     priority: number;
     enabled: boolean;
     conditions: Record<string, unknown>;
-    id: string;
-    createdAt: Date;
-    updatedAt: Date;
   } | undefined>;
   getTargetingRulesByConfigId: (params: zod0.infer<zod0.ZodObject<{
     configId: zod0.ZodString;
     limit: zod0.ZodOptional<zod0.ZodNumber>;
     offset: zod0.ZodOptional<zod0.ZodNumber>;
   }, better_auth0.$strip>>) => Promise<{
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
     environmentId: string;
     configId: string;
     configVariantId: string;
@@ -1799,15 +2080,15 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     priority: number;
     enabled: boolean;
     conditions: Record<string, unknown>;
-    id: string;
-    createdAt: Date;
-    updatedAt: Date;
   }[]>;
   getTargetingRulesByEnvironmentId: (params: zod0.infer<zod0.ZodObject<{
     environmentId: zod0.ZodString;
     limit: zod0.ZodOptional<zod0.ZodNumber>;
     offset: zod0.ZodOptional<zod0.ZodNumber>;
   }, better_auth0.$strip>>) => Promise<{
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
     environmentId: string;
     configId: string;
     configVariantId: string;
@@ -1816,14 +2097,14 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     priority: number;
     enabled: boolean;
     conditions: Record<string, unknown>;
-    id: string;
-    createdAt: Date;
-    updatedAt: Date;
   }[]>;
   getTargetingRulesByConfigAndEnvironment: (params: zod0.infer<zod0.ZodObject<{
     configId: zod0.ZodString;
     environmentId: zod0.ZodString;
   }, better_auth0.$strip>>) => Promise<{
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
     environmentId: string;
     configId: string;
     configVariantId: string;
@@ -1832,13 +2113,13 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     priority: number;
     enabled: boolean;
     conditions: Record<string, unknown>;
-    id: string;
-    createdAt: Date;
-    updatedAt: Date;
   }[]>;
   deleteTargetingRule: (params: zod0.infer<zod0.ZodObject<{
     id: zod0.ZodString;
   }, better_auth0.$strip>>) => Promise<{
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
     environmentId: string;
     configId: string;
     configVariantId: string;
@@ -1847,13 +2128,13 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     priority: number;
     enabled: boolean;
     conditions: Record<string, unknown>;
-    id: string;
-    createdAt: Date;
-    updatedAt: Date;
   } | undefined>;
   deleteTargetingRulesByConfigId: (params: zod0.infer<zod0.ZodObject<{
     configId: zod0.ZodString;
   }, better_auth0.$strip>>) => Promise<{
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
     environmentId: string;
     configId: string;
     configVariantId: string;
@@ -1862,13 +2143,13 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     priority: number;
     enabled: boolean;
     conditions: Record<string, unknown>;
-    id: string;
-    createdAt: Date;
-    updatedAt: Date;
   }[]>;
   deleteTargetingRulesByEnvironmentId: (params: zod0.infer<zod0.ZodObject<{
     environmentId: zod0.ZodString;
   }, better_auth0.$strip>>) => Promise<{
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
     environmentId: string;
     configId: string;
     configVariantId: string;
@@ -1877,14 +2158,14 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     priority: number;
     enabled: boolean;
     conditions: Record<string, unknown>;
-    id: string;
-    createdAt: Date;
-    updatedAt: Date;
   }[]>;
   listTargetingRules: (params?: zod0.infer<zod0.ZodObject<{
     limit: zod0.ZodOptional<zod0.ZodNumber>;
     offset: zod0.ZodOptional<zod0.ZodNumber>;
   }, better_auth0.$strip>>) => Promise<{
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
     environmentId: string;
     configId: string;
     configVariantId: string;
@@ -1893,9 +2174,6 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     priority: number;
     enabled: boolean;
     conditions: Record<string, unknown>;
-    id: string;
-    createdAt: Date;
-    updatedAt: Date;
   }[]>;
   getTargetingRulesWithDetailsByConfigId: (params: zod0.infer<zod0.ZodObject<{
     configId: zod0.ZodString;
@@ -1907,6 +2185,9 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     pinnedVersion: number | null | undefined;
     latestVersion: number | null | undefined;
     variantName: string | null;
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
     environmentId: string;
     configId: string;
     configVariantId: string;
@@ -1915,9 +2196,6 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     priority: number;
     enabled: boolean;
     conditions: Record<string, unknown>;
-    id: string;
-    createdAt: Date;
-    updatedAt: Date;
     variantId: string | null;
     environmentName: string | null;
     environmentSlug: string | null;
@@ -1928,6 +2206,9 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     configVariantId: zod0.ZodString;
     variantVersionId: zod0.ZodOptional<zod0.ZodNullable<zod0.ZodString>>;
   }, better_auth0.$strip>>) => Promise<{
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
     environmentId: string;
     configId: string;
     configVariantId: string;
@@ -1936,10 +2217,107 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     priority: number;
     enabled: boolean;
     conditions: Record<string, unknown>;
+  } | undefined>;
+  createProviderGuardrailOverride: (params: zod0.infer<zod0.ZodObject<{
+    providerConfigId: zod0.ZodString;
+    guardrailConfigId: zod0.ZodString;
+    enabled: zod0.ZodDefault<zod0.ZodOptional<zod0.ZodBoolean>>;
+    parameters: zod0.ZodOptional<zod0.ZodNullable<zod0.ZodRecord<zod0.ZodString, zod0.ZodUnknown>>>;
+  }, better_auth0.$strip>>) => Promise<{
     id: string;
     createdAt: Date;
     updatedAt: Date;
+    enabled: boolean;
+    parameters: Record<string, unknown> | null;
+    providerConfigId: string;
+    guardrailConfigId: string;
   } | undefined>;
+  updateProviderGuardrailOverride: (params: zod0.infer<zod0.ZodObject<{
+    id: zod0.ZodString;
+    enabled: zod0.ZodOptional<zod0.ZodBoolean>;
+    parameters: zod0.ZodOptional<zod0.ZodNullable<zod0.ZodRecord<zod0.ZodString, zod0.ZodUnknown>>>;
+  }, better_auth0.$strip>>) => Promise<{
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
+    enabled: boolean;
+    parameters: Record<string, unknown> | null;
+    providerConfigId: string;
+    guardrailConfigId: string;
+  } | undefined>;
+  getOverrideById: (params: zod0.infer<zod0.ZodObject<{
+    id: zod0.ZodString;
+  }, better_auth0.$strip>>) => Promise<{
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
+    enabled: boolean;
+    parameters: Record<string, unknown> | null;
+    providerConfigId: string;
+    guardrailConfigId: string;
+  } | undefined>;
+  deleteProviderGuardrailOverride: (params: zod0.infer<zod0.ZodObject<{
+    id: zod0.ZodString;
+  }, better_auth0.$strip>>) => Promise<{
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
+    enabled: boolean;
+    parameters: Record<string, unknown> | null;
+    providerConfigId: string;
+    guardrailConfigId: string;
+  } | undefined>;
+  getOverridesByProviderConfigId: (params: zod0.infer<zod0.ZodObject<{
+    providerConfigId: zod0.ZodString;
+  }, better_auth0.$strip>>) => Promise<{
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
+    enabled: boolean;
+    parameters: Record<string, unknown> | null;
+    providerConfigId: string;
+    guardrailConfigId: string;
+  }[]>;
+  getOverridesByGuardrailConfigId: (params: zod0.infer<zod0.ZodObject<{
+    guardrailConfigId: zod0.ZodString;
+  }, better_auth0.$strip>>) => Promise<{
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
+    enabled: boolean;
+    parameters: Record<string, unknown> | null;
+    providerConfigId: string;
+    guardrailConfigId: string;
+  }[]>;
+  getOverrideByProviderAndGuardrail: (params: zod0.infer<zod0.ZodObject<{
+    providerConfigId: zod0.ZodString;
+    guardrailConfigId: zod0.ZodString;
+  }, better_auth0.$strip>>) => Promise<{
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
+    enabled: boolean;
+    parameters: Record<string, unknown> | null;
+    providerConfigId: string;
+    guardrailConfigId: string;
+  } | undefined>;
+  upsertProviderGuardrailOverride: (params: zod0.infer<zod0.ZodObject<{
+    providerConfigId: zod0.ZodString;
+    guardrailConfigId: zod0.ZodString;
+    enabled: zod0.ZodDefault<zod0.ZodOptional<zod0.ZodBoolean>>;
+    parameters: zod0.ZodOptional<zod0.ZodNullable<zod0.ZodRecord<zod0.ZodString, zod0.ZodUnknown>>>;
+  }, better_auth0.$strip>>) => Promise<{
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
+    enabled: boolean;
+    parameters: Record<string, unknown> | null;
+    providerConfigId: string;
+    guardrailConfigId: string;
+  } | undefined>;
+  deleteOverridesByGuardrailConfigId: (params: zod0.infer<zod0.ZodObject<{
+    guardrailConfigId: zod0.ZodString;
+  }, better_auth0.$strip>>) => Promise<kysely0.DeleteResult[]>;
   createProviderConfig: (params: zod0.infer<zod0.ZodObject<{
     providerId: zod0.ZodString;
     slug: zod0.ZodOptional<zod0.ZodNullable<zod0.ZodString>>;
@@ -1949,12 +2327,12 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
   }, better_auth0.$strip>>) => Promise<{
     slug: string | null;
     name: string | null;
-    enabled: boolean;
-    providerId: string;
-    config: Record<string, unknown>;
     id: string;
     createdAt: Date;
     updatedAt: Date;
+    enabled: boolean;
+    providerId: string;
+    config: Record<string, unknown>;
   } | undefined>;
   updateProviderConfig: (params: zod0.infer<zod0.ZodObject<{
     id: zod0.ZodUUID;
@@ -1965,60 +2343,60 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
   }, better_auth0.$strip>>) => Promise<{
     slug: string | null;
     name: string | null;
-    enabled: boolean;
-    providerId: string;
-    config: Record<string, unknown>;
     id: string;
     createdAt: Date;
     updatedAt: Date;
+    enabled: boolean;
+    providerId: string;
+    config: Record<string, unknown>;
   } | undefined>;
   getProviderConfigById: (params: zod0.infer<zod0.ZodObject<{
     id: zod0.ZodUUID;
   }, better_auth0.$strip>>) => Promise<{
     slug: string | null;
     name: string | null;
-    enabled: boolean;
-    providerId: string;
-    config: Record<string, unknown>;
     id: string;
     createdAt: Date;
     updatedAt: Date;
+    enabled: boolean;
+    providerId: string;
+    config: Record<string, unknown>;
   } | undefined>;
   getProviderConfigByProviderId: (params: zod0.infer<zod0.ZodObject<{
     providerId: zod0.ZodString;
   }, better_auth0.$strip>>) => Promise<{
     slug: string | null;
     name: string | null;
-    enabled: boolean;
-    providerId: string;
-    config: Record<string, unknown>;
     id: string;
     createdAt: Date;
     updatedAt: Date;
+    enabled: boolean;
+    providerId: string;
+    config: Record<string, unknown>;
   } | undefined>;
   getProviderConfigBySlug: (params: zod0.infer<zod0.ZodObject<{
     slug: zod0.ZodString;
   }, better_auth0.$strip>>) => Promise<{
     slug: string | null;
     name: string | null;
-    enabled: boolean;
-    providerId: string;
-    config: Record<string, unknown>;
     id: string;
     createdAt: Date;
     updatedAt: Date;
+    enabled: boolean;
+    providerId: string;
+    config: Record<string, unknown>;
   } | undefined>;
   deleteProviderConfig: (params: zod0.infer<zod0.ZodObject<{
     id: zod0.ZodUUID;
   }, better_auth0.$strip>>) => Promise<{
     slug: string | null;
     name: string | null;
-    enabled: boolean;
-    providerId: string;
-    config: Record<string, unknown>;
     id: string;
     createdAt: Date;
     updatedAt: Date;
+    enabled: boolean;
+    providerId: string;
+    config: Record<string, unknown>;
   } | undefined>;
   listProviderConfigs: (params?: zod0.infer<zod0.ZodObject<{
     limit: zod0.ZodOptional<zod0.ZodNumber>;
@@ -2026,12 +2404,12 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
   }, better_auth0.$strip>>) => Promise<{
     slug: string | null;
     name: string | null;
-    enabled: boolean;
-    providerId: string;
-    config: Record<string, unknown>;
     id: string;
     createdAt: Date;
     updatedAt: Date;
+    enabled: boolean;
+    providerId: string;
+    config: Record<string, unknown>;
   }[]>;
   countProviderConfigs: () => Promise<number>;
   upsertProviderConfig: (params: zod0.infer<zod0.ZodObject<{
@@ -2043,23 +2421,26 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
   }, better_auth0.$strip>>) => Promise<{
     slug: string | null;
     name: string | null;
-    enabled: boolean;
-    providerId: string;
-    config: Record<string, unknown>;
     id: string;
     createdAt: Date;
     updatedAt: Date;
+    enabled: boolean;
+    providerId: string;
+    config: Record<string, unknown>;
   } | undefined>;
   batchInsertRequests: (requests: LLMRequestInsert[]) => Promise<{
     count: number;
   }>;
   insertRequest: (request: LLMRequestInsert) => Promise<{
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
     variantId: string | null;
     provider: string;
     environmentId: string | null;
     configId: string | null;
-    requestId: string;
     providerConfigId: string | null;
+    requestId: string;
     model: string;
     promptTokens: number;
     completionTokens: number;
@@ -2074,9 +2455,17 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     isStreaming: boolean;
     userId: string | null;
     tags: Record<string, string>;
-    id: string;
-    createdAt: Date;
-    updatedAt: Date;
+    guardrailResults: {
+      results: {
+        configId: string;
+        functionId: string;
+        hookType: "beforeRequestHook" | "afterRequestHook";
+        verdict: boolean;
+        latencyMs: number;
+      }[];
+      action: "allowed" | "blocked" | "logged";
+      totalLatencyMs: number;
+    } | null;
   } | undefined>;
   listRequests: (params?: zod0.infer<zod0.ZodObject<{
     limit: zod0.ZodDefault<zod0.ZodNumber>;
@@ -2092,12 +2481,15 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     tags: zod0.ZodOptional<zod0.ZodRecord<zod0.ZodString, zod0.ZodArray<zod0.ZodString>>>;
   }, better_auth0.$strip>>) => Promise<{
     data: {
+      id: string;
+      createdAt: Date;
+      updatedAt: Date;
       variantId: string | null;
       provider: string;
       environmentId: string | null;
       configId: string | null;
-      requestId: string;
       providerConfigId: string | null;
+      requestId: string;
       model: string;
       promptTokens: number;
       completionTokens: number;
@@ -2112,21 +2504,32 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
       isStreaming: boolean;
       userId: string | null;
       tags: Record<string, string>;
-      id: string;
-      createdAt: Date;
-      updatedAt: Date;
+      guardrailResults: {
+        results: {
+          configId: string;
+          functionId: string;
+          hookType: "beforeRequestHook" | "afterRequestHook";
+          verdict: boolean;
+          latencyMs: number;
+        }[];
+        action: "allowed" | "blocked" | "logged";
+        totalLatencyMs: number;
+      } | null;
     }[];
     total: number;
     limit: number;
     offset: number;
   }>;
   getRequestByRequestId: (requestId: string) => Promise<{
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
     variantId: string | null;
     provider: string;
     environmentId: string | null;
     configId: string | null;
-    requestId: string;
     providerConfigId: string | null;
+    requestId: string;
     model: string;
     promptTokens: number;
     completionTokens: number;
@@ -2141,9 +2544,17 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     isStreaming: boolean;
     userId: string | null;
     tags: Record<string, string>;
-    id: string;
-    createdAt: Date;
-    updatedAt: Date;
+    guardrailResults: {
+      results: {
+        configId: string;
+        functionId: string;
+        hookType: "beforeRequestHook" | "afterRequestHook";
+        verdict: boolean;
+        latencyMs: number;
+      }[];
+      action: "allowed" | "blocked" | "logged";
+      totalLatencyMs: number;
+    } | null;
   } | undefined>;
   getTotalCost: (params: zod0.infer<zod0.ZodObject<{
     startDate: zod0.ZodDate;
@@ -2265,80 +2676,200 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     key: string;
     value: string;
   }[]>;
+  createGuardrailConfig: (params: zod0.infer<zod0.ZodObject<{
+    name: zod0.ZodString;
+    pluginId: zod0.ZodString;
+    functionId: zod0.ZodString;
+    hookType: zod0.ZodEnum<{
+      beforeRequestHook: "beforeRequestHook";
+      afterRequestHook: "afterRequestHook";
+    }>;
+    parameters: zod0.ZodDefault<zod0.ZodOptional<zod0.ZodRecord<zod0.ZodString, zod0.ZodUnknown>>>;
+    enabled: zod0.ZodDefault<zod0.ZodOptional<zod0.ZodBoolean>>;
+    priority: zod0.ZodDefault<zod0.ZodOptional<zod0.ZodNumber>>;
+    onFail: zod0.ZodDefault<zod0.ZodOptional<zod0.ZodEnum<{
+      block: "block";
+      log: "log";
+    }>>>;
+  }, better_auth0.$strip>>) => Promise<{
+    name: string;
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
+    priority: number;
+    enabled: boolean;
+    pluginId: string;
+    functionId: string;
+    hookType: string;
+    parameters: Record<string, unknown>;
+    onFail: string;
+  } | undefined>;
+  updateGuardrailConfig: (params: zod0.infer<zod0.ZodObject<{
+    id: zod0.ZodString;
+    name: zod0.ZodOptional<zod0.ZodString>;
+    hookType: zod0.ZodOptional<zod0.ZodEnum<{
+      beforeRequestHook: "beforeRequestHook";
+      afterRequestHook: "afterRequestHook";
+    }>>;
+    parameters: zod0.ZodOptional<zod0.ZodRecord<zod0.ZodString, zod0.ZodUnknown>>;
+    enabled: zod0.ZodOptional<zod0.ZodBoolean>;
+    priority: zod0.ZodOptional<zod0.ZodNumber>;
+    onFail: zod0.ZodOptional<zod0.ZodEnum<{
+      block: "block";
+      log: "log";
+    }>>;
+  }, better_auth0.$strip>>) => Promise<{
+    name: string;
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
+    priority: number;
+    enabled: boolean;
+    pluginId: string;
+    functionId: string;
+    hookType: string;
+    parameters: Record<string, unknown>;
+    onFail: string;
+  } | undefined>;
+  getGuardrailConfigById: (params: zod0.infer<zod0.ZodObject<{
+    id: zod0.ZodString;
+  }, better_auth0.$strip>>) => Promise<{
+    name: string;
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
+    priority: number;
+    enabled: boolean;
+    pluginId: string;
+    functionId: string;
+    hookType: string;
+    parameters: Record<string, unknown>;
+    onFail: string;
+  } | undefined>;
+  deleteGuardrailConfig: (params: zod0.infer<zod0.ZodObject<{
+    id: zod0.ZodString;
+  }, better_auth0.$strip>>) => Promise<{
+    name: string;
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
+    priority: number;
+    enabled: boolean;
+    pluginId: string;
+    functionId: string;
+    hookType: string;
+    parameters: Record<string, unknown>;
+    onFail: string;
+  } | undefined>;
+  listGuardrailConfigs: (params?: zod0.infer<zod0.ZodObject<{
+    limit: zod0.ZodOptional<zod0.ZodNumber>;
+    offset: zod0.ZodOptional<zod0.ZodNumber>;
+    hookType: zod0.ZodOptional<zod0.ZodEnum<{
+      beforeRequestHook: "beforeRequestHook";
+      afterRequestHook: "afterRequestHook";
+    }>>;
+    enabled: zod0.ZodOptional<zod0.ZodBoolean>;
+  }, better_auth0.$strip>>) => Promise<{
+    name: string;
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
+    priority: number;
+    enabled: boolean;
+    pluginId: string;
+    functionId: string;
+    hookType: string;
+    parameters: Record<string, unknown>;
+    onFail: string;
+  }[]>;
+  countGuardrailConfigs: () => Promise<number>;
+  getEnabledGuardrailsByHookType: (hookType: "beforeRequestHook" | "afterRequestHook") => Promise<{
+    name: string;
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
+    priority: number;
+    enabled: boolean;
+    pluginId: string;
+    functionId: string;
+    hookType: string;
+    parameters: Record<string, unknown>;
+    onFail: string;
+  }[]>;
   createEnvironmentSecret: (params: zod0.infer<zod0.ZodObject<{
     environmentId: zod0.ZodUUID;
     keyName: zod0.ZodString;
     keyValue: zod0.ZodString;
   }, better_auth0.$strip>>) => Promise<{
-    environmentId: string;
-    keyName: string;
-    keyValue: string;
     id: string;
     createdAt: Date;
     updatedAt: Date;
+    environmentId: string;
+    keyName: string;
+    keyValue: string;
   } | undefined>;
   updateEnvironmentSecret: (params: zod0.infer<zod0.ZodObject<{
     secretId: zod0.ZodUUID;
     keyName: zod0.ZodOptional<zod0.ZodString>;
     keyValue: zod0.ZodOptional<zod0.ZodString>;
   }, better_auth0.$strip>>) => Promise<{
-    environmentId: string;
-    keyName: string;
-    keyValue: string;
     id: string;
     createdAt: Date;
     updatedAt: Date;
+    environmentId: string;
+    keyName: string;
+    keyValue: string;
   } | undefined>;
   getEnvironmentSecretById: (params: zod0.infer<zod0.ZodObject<{
     secretId: zod0.ZodUUID;
   }, better_auth0.$strip>>) => Promise<{
-    environmentId: string;
-    keyName: string;
-    keyValue: string;
     id: string;
     createdAt: Date;
     updatedAt: Date;
+    environmentId: string;
+    keyName: string;
+    keyValue: string;
   } | undefined>;
   getSecretsByEnvironmentId: (params: zod0.infer<zod0.ZodObject<{
     environmentId: zod0.ZodUUID;
   }, better_auth0.$strip>>) => Promise<{
-    environmentId: string;
-    keyName: string;
-    keyValue: string;
     id: string;
     createdAt: Date;
     updatedAt: Date;
+    environmentId: string;
+    keyName: string;
+    keyValue: string;
   }[]>;
   deleteEnvironmentSecret: (params: zod0.infer<zod0.ZodObject<{
     secretId: zod0.ZodUUID;
   }, better_auth0.$strip>>) => Promise<{
-    environmentId: string;
-    keyName: string;
-    keyValue: string;
     id: string;
     createdAt: Date;
     updatedAt: Date;
+    environmentId: string;
+    keyName: string;
+    keyValue: string;
   } | undefined>;
   deleteSecretsByEnvironmentId: (params: zod0.infer<zod0.ZodObject<{
     environmentId: zod0.ZodUUID;
   }, better_auth0.$strip>>) => Promise<{
-    environmentId: string;
-    keyName: string;
-    keyValue: string;
     id: string;
     createdAt: Date;
     updatedAt: Date;
+    environmentId: string;
+    keyName: string;
+    keyValue: string;
   }[]>;
   listEnvironmentSecrets: (params?: zod0.infer<zod0.ZodObject<{
     limit: zod0.ZodOptional<zod0.ZodNumber>;
     offset: zod0.ZodOptional<zod0.ZodNumber>;
   }, better_auth0.$strip>>) => Promise<{
-    environmentId: string;
-    keyName: string;
-    keyValue: string;
     id: string;
     createdAt: Date;
     updatedAt: Date;
+    environmentId: string;
+    keyName: string;
+    keyValue: string;
   }[]>;
   countEnvironmentSecrets: () => Promise<number>;
   createNewEnvironment: (params: zod0.infer<zod0.ZodObject<{
@@ -2348,10 +2879,10 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
   }, better_auth0.$strip>>) => Promise<{
     slug: string;
     name: string;
-    isProd: boolean;
     id: string;
     createdAt: Date;
     updatedAt: Date;
+    isProd: boolean;
   } | undefined>;
   updateEnvironment: (params: zod0.infer<zod0.ZodObject<{
     environmentId: zod0.ZodUUID;
@@ -2360,40 +2891,40 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
   }, better_auth0.$strip>>) => Promise<{
     slug: string;
     name: string;
-    isProd: boolean;
     id: string;
     createdAt: Date;
     updatedAt: Date;
+    isProd: boolean;
   } | undefined>;
   getEnvironmentById: (params: zod0.infer<zod0.ZodObject<{
     environmentId: zod0.ZodUUID;
   }, better_auth0.$strip>>) => Promise<{
     slug: string;
     name: string;
-    isProd: boolean;
     id: string;
     createdAt: Date;
     updatedAt: Date;
+    isProd: boolean;
   } | undefined>;
   getEnvironmentBySlug: (params: zod0.infer<zod0.ZodObject<{
     slug: zod0.ZodString;
   }, better_auth0.$strip>>) => Promise<{
     slug: string;
     name: string;
-    isProd: boolean;
     id: string;
     createdAt: Date;
     updatedAt: Date;
+    isProd: boolean;
   } | undefined>;
   deleteEnvironment: (params: zod0.infer<zod0.ZodObject<{
     environmentId: zod0.ZodUUID;
   }, better_auth0.$strip>>) => Promise<{
     slug: string;
     name: string;
-    isProd: boolean;
     id: string;
     createdAt: Date;
     updatedAt: Date;
+    isProd: boolean;
   } | undefined>;
   listEnvironments: (params?: zod0.infer<zod0.ZodObject<{
     limit: zod0.ZodOptional<zod0.ZodNumber>;
@@ -2401,101 +2932,101 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
   }, better_auth0.$strip>>) => Promise<{
     slug: string;
     name: string;
-    isProd: boolean;
     id: string;
     createdAt: Date;
     updatedAt: Date;
+    isProd: boolean;
   }[]>;
   countEnvironments: () => Promise<number>;
   createConfigVariant: (params: zod0.infer<zod0.ZodObject<{
     configId: zod0.ZodString;
     variantId: zod0.ZodString;
   }, better_auth0.$strip>>) => Promise<{
-    variantId: string;
-    configId: string;
     id: string;
     createdAt: Date;
     updatedAt: Date;
+    variantId: string;
+    configId: string;
   } | undefined>;
   getConfigVariantById: (params: zod0.infer<zod0.ZodObject<{
     id: zod0.ZodString;
   }, better_auth0.$strip>>) => Promise<{
-    variantId: string;
-    configId: string;
     id: string;
     createdAt: Date;
     updatedAt: Date;
+    variantId: string;
+    configId: string;
   } | undefined>;
   getConfigVariantsByConfigId: (params: zod0.infer<zod0.ZodObject<{
     configId: zod0.ZodString;
     limit: zod0.ZodOptional<zod0.ZodNumber>;
     offset: zod0.ZodOptional<zod0.ZodNumber>;
   }, better_auth0.$strip>>) => Promise<{
-    variantId: string;
-    configId: string;
     id: string;
     createdAt: Date;
     updatedAt: Date;
+    variantId: string;
+    configId: string;
   }[]>;
   getConfigVariantsByVariantId: (params: zod0.infer<zod0.ZodObject<{
     variantId: zod0.ZodString;
     limit: zod0.ZodOptional<zod0.ZodNumber>;
     offset: zod0.ZodOptional<zod0.ZodNumber>;
   }, better_auth0.$strip>>) => Promise<{
-    variantId: string;
-    configId: string;
     id: string;
     createdAt: Date;
     updatedAt: Date;
+    variantId: string;
+    configId: string;
   }[]>;
   deleteConfigVariant: (params: zod0.infer<zod0.ZodObject<{
     id: zod0.ZodString;
   }, better_auth0.$strip>>) => Promise<{
-    variantId: string;
-    configId: string;
     id: string;
     createdAt: Date;
     updatedAt: Date;
+    variantId: string;
+    configId: string;
   } | undefined>;
   deleteConfigVariantByIds: (params: zod0.infer<zod0.ZodObject<{
     configId: zod0.ZodString;
     variantId: zod0.ZodString;
   }, better_auth0.$strip>>) => Promise<{
-    variantId: string;
-    configId: string;
     id: string;
     createdAt: Date;
     updatedAt: Date;
+    variantId: string;
+    configId: string;
   } | undefined>;
   listConfigVariants: (params?: zod0.infer<zod0.ZodObject<{
     limit: zod0.ZodOptional<zod0.ZodNumber>;
     offset: zod0.ZodOptional<zod0.ZodNumber>;
   }, better_auth0.$strip>>) => Promise<{
-    variantId: string;
-    configId: string;
     id: string;
     createdAt: Date;
     updatedAt: Date;
+    variantId: string;
+    configId: string;
   }[]>;
   getConfigVariantWithDetails: (params: zod0.infer<zod0.ZodObject<{
     id: zod0.ZodString;
   }, better_auth0.$strip>>) => Promise<{
     latestVersion: {
       version: number;
+      id: string;
+      createdAt: Date;
+      updatedAt: Date;
       variantId: string;
       provider: string;
       modelName: string;
       jsonData: Record<string, unknown>;
-      id: string;
-      createdAt: Date;
-      updatedAt: Date;
     } | null;
     variantName: string | null;
     id: string;
-    variantId: string;
-    configId: string;
     createdAt: Date;
     updatedAt: Date;
+    variantId: string;
+    configId: string;
     configName: string | null | undefined;
   } | undefined>;
   getConfigVariantsWithDetailsByConfigId: (params: zod0.infer<zod0.ZodObject<{
@@ -2508,20 +3039,20 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     jsonData: Record<string, unknown> | null;
     latestVersion: {
       version: number;
+      id: string;
+      createdAt: Date;
+      updatedAt: Date;
       variantId: string;
       provider: string;
       modelName: string;
       jsonData: Record<string, unknown>;
-      id: string;
-      createdAt: Date;
-      updatedAt: Date;
     } | null;
     name: string | null;
     id: string;
-    variantId: string;
-    configId: string;
     createdAt: Date;
     updatedAt: Date;
+    variantId: string;
+    configId: string;
   }[]>;
   createVariantAndLinkToConfig: (params: zod0.infer<zod0.ZodObject<{
     configId: zod0.ZodString;
@@ -2538,20 +3069,20 @@ declare const createDataLayer: (db: Kysely<Database>) => Promise<{
     };
     version: {
       version: number;
+      id: string;
+      createdAt: Date;
+      updatedAt: Date;
       variantId: string;
       provider: string;
       modelName: string;
       jsonData: Record<string, unknown>;
-      id: string;
-      createdAt: Date;
-      updatedAt: Date;
     };
     configVariant: {
-      variantId: string;
-      configId: string;
       id: string;
       createdAt: Date;
       updatedAt: Date;
+      variantId: string;
+      configId: string;
     };
   }>;
   getVariantJsonDataForConfig: (params: zod0.infer<zod0.ZodObject<{
@@ -2895,6 +3426,30 @@ interface ManifestEnvironment {
   name: string;
   isProd: boolean;
 }
+/**
+ * Guardrail configuration in the manifest
+ * Pre-loaded for gateway use without additional DB queries
+ */
+interface ManifestGuardrail {
+  id: string;
+  name: string;
+  pluginId: string;
+  functionId: string;
+  hookType: 'beforeRequestHook' | 'afterRequestHook';
+  parameters: Record<string, unknown>;
+  priority: number;
+  onFail: 'block' | 'log';
+}
+/**
+ * Provider-specific guardrail override in the manifest
+ */
+interface ManifestProviderGuardrailOverride {
+  id: string;
+  providerConfigId: string;
+  guardrailConfigId: string;
+  enabled: boolean;
+  parameters: Record<string, unknown> | null;
+}
 /**
  * The complete routing manifest
  * Stored in cache under key: "gateway:manifest"
@@ -2908,6 +3463,11 @@ interface GatewayManifest {
   environmentsBySlug: Record<string, string>;
   routingTable: Record<string, Record<string, ManifestTargetingRule[]>>;
   secretToEnvironment: Record<string, string>;
+  guardrails: {
+    beforeRequestHook: ManifestGuardrail[];
+    afterRequestHook: ManifestGuardrail[];
+  };
+  providerGuardrailOverrides: Record<string, ManifestProviderGuardrailOverride[]>;
 }
 /**
  * Context passed to JSONLogic for condition evaluation
@@ -3018,4 +3578,4 @@ declare class ManifestRouter {
   routeWithWeights(configIdOrSlug: string, environmentId: string, context?: RoutingContext): RoutingResult | null;
 }
 //#endregion
-export { type AnthropicProviderConfig, type AnyProviderConfig, AuthClientDatabaseConfig, AuthClientOptions, type AzureAIProviderConfig, type AzureOpenAIProviderConfig, BaseCacheConfig, type BaseProviderConfig, type BedrockProviderConfig, CacheBackend, CacheBackendType, CacheConfig, CacheEntry, CacheOptions, CacheService, CacheStats, ChatCompletionCreateParamsBase, Config, ConfigVariant, ConfigVariantsTable, ConfigsTable, type CortexProviderConfig, CostResult, Database, DatabaseConnection, DatabaseOptions, DatabaseType, Environment, EnvironmentSecret, EnvironmentSecretsTable, EnvironmentsTable, FileCacheBackend, FileCacheConfig, type FireworksAIProviderConfig, GatewayManifest, type GoogleProviderConfig, type HuggingFaceProviderConfig, Insertable, LLMOpsClient, LLMOpsConfig, type LLMOpsConfigInput, LLMRequest, type LLMRequestInsert, LLMRequestsTable, MS, ManifestBuilder, ManifestConfig, ManifestEnvironment, ManifestRouter, ManifestService, ManifestTargetingRule, ManifestVariantVersion, MemoryCacheBackend, MemoryCacheConfig, MigrationOptions, MigrationResult, type MistralAIProviderConfig, ModelPricing, ModelsDevPricingProvider, type OpenAIProviderConfig, type OracleProviderConfig, Prettify, PricingProvider, ProviderConfig, type ProviderConfigMap, ProviderConfigsTable, type ProvidersConfig, RoutingContext, RoutingResult, SCHEMA_METADATA, type SagemakerProviderConfig, Selectable, type StabilityAIProviderConfig, SupportedProviders, TableName, TargetingRule, TargetingRulesTable, Updateable, UsageData, type ValidatedLLMOpsConfig, Variant, VariantJsonData, VariantVersion, VariantVersionsTable, VariantsTable, type VertexAIProviderConfig, type WorkersAIProviderConfig, WorkspaceSettings, WorkspaceSettingsTable, calculateCost, chatCompletionCreateParamsBaseSchema, configVariantsSchema, configsSchema, createDataLayer, createDatabase, createDatabaseFromConnection, createLLMRequestsDataLayer, createNeonDialect, createProviderConfigsDataLayer, createWorkspaceSettingsDataLayer, detectDatabaseType, dollarsToMicroDollars, environmentSecretsSchema, environmentsSchema, executeWithSchema, formatCost, gateway, generateId, getAuthClientOptions, getDefaultPricingProvider, getMigrations, llmRequestsSchema, llmopsConfigSchema, logger, matchType, microDollarsToDollars, parsePartialTableData, parseTableData, providerConfigsSchema, runAutoMigrations, schemas, targetingRulesSchema, validateLLMOpsConfig, validatePartialTableData, validateTableData, variantJsonDataSchema, variantVersionsSchema, variantsSchema, workspaceSettingsSchema };
+export { type AnthropicProviderConfig, type AnyProviderConfig, AuthClientDatabaseConfig, AuthClientOptions, type AzureAIProviderConfig, type AzureOpenAIProviderConfig, BaseCacheConfig, type BaseProviderConfig, type BedrockProviderConfig, CacheBackend, CacheBackendType, CacheConfig, CacheEntry, CacheOptions, CacheService, CacheStats, ChatCompletionCreateParamsBase, Config, ConfigVariant, ConfigVariantsTable, ConfigsTable, type CortexProviderConfig, CostResult, Database, DatabaseConnection, DatabaseOptions, DatabaseType, Environment, EnvironmentSecret, EnvironmentSecretsTable, EnvironmentsTable, FileCacheBackend, FileCacheConfig, type FireworksAIProviderConfig, GatewayManifest, type GoogleProviderConfig, GuardrailConfig, GuardrailConfigsTable, GuardrailResult, GuardrailResults, type HuggingFaceProviderConfig, Insertable, LLMOpsClient, LLMOpsConfig, type LLMOpsConfigInput, LLMRequest, type LLMRequestInsert, LLMRequestsTable, MS, ManifestBuilder, ManifestConfig, ManifestEnvironment, ManifestGuardrail, ManifestProviderGuardrailOverride, ManifestRouter, ManifestService, ManifestTargetingRule, ManifestVariantVersion, MemoryCacheBackend, MemoryCacheConfig, MigrationOptions, MigrationResult, type MistralAIProviderConfig, ModelPricing, ModelsDevPricingProvider, type OpenAIProviderConfig, type OracleProviderConfig, Prettify, PricingProvider, ProviderConfig, type ProviderConfigMap, ProviderConfigsTable, ProviderGuardrailOverride, ProviderGuardrailOverridesTable, type ProvidersConfig, RoutingContext, RoutingResult, SCHEMA_METADATA, type SagemakerProviderConfig, Selectable, type StabilityAIProviderConfig, SupportedProviders, TableName, TargetingRule, TargetingRulesTable, Updateable, UsageData, type ValidatedLLMOpsConfig, Variant, VariantJsonData, VariantVersion, VariantVersionsTable, VariantsTable, type VertexAIProviderConfig, type WorkersAIProviderConfig, WorkspaceSettings, WorkspaceSettingsTable, calculateCost, chatCompletionCreateParamsBaseSchema, configVariantsSchema, configsSchema, createDataLayer, createDatabase, createDatabaseFromConnection, createGuardrailConfigsDataLayer, createLLMRequestsDataLayer, createNeonDialect, createProviderConfigsDataLayer, createProviderGuardrailOverridesDataLayer, createWorkspaceSettingsDataLayer, detectDatabaseType, dollarsToMicroDollars, environmentSecretsSchema, environmentsSchema, executeWithSchema, formatCost, gateway, generateId, getAuthClientOptions, getDefaultPricingProvider, getMigrations, guardrailConfigsSchema, llmRequestsSchema, llmopsConfigSchema, logger, matchType, microDollarsToDollars, parsePartialTableData, parseTableData, providerConfigsSchema, providerGuardrailOverridesSchema, runAutoMigrations, schemas, targetingRulesSchema, validateLLMOpsConfig, validatePartialTableData, validateTableData, variantJsonDataSchema, variantVersionsSchema, variantsSchema, workspaceSettingsSchema };