@polpo-ai/core 0.15.43 → 0.15.44

package/dist/guardrails/engine.js

@@ -0,0 +1,189 @@
+import { GuardrailAbortedError } from "./errors.js";
+const VALID_ACTIONS = new Set([
+    "allow",
+    "audit",
+    "taint",
+    "redact",
+    "rewrite",
+    "block",
+    "approval",
+]);
+const VALID_RISKS = new Set([
+    "none",
+    "low",
+    "medium",
+    "high",
+    "critical",
+]);
+function cloneValue(value, seen = new WeakMap()) {
+    if (value === null || typeof value !== "object")
+        return value;
+    const existing = seen.get(value);
+    if (existing !== undefined)
+        return existing;
+    if (Array.isArray(value)) {
+        const clone = [];
+        seen.set(value, clone);
+        for (const item of value)
+            clone.push(cloneValue(item, seen));
+        return clone;
+    }
+    if (value instanceof Date)
+        return new Date(value.getTime());
+    const clone = {};
+    seen.set(value, clone);
+    for (const [key, entry] of Object.entries(value)) {
+        clone[key] = cloneValue(entry, seen);
+    }
+    return clone;
+}
+function freezeValue(value, seen = new WeakSet()) {
+    if (value === null || typeof value !== "object" || seen.has(value))
+        return value;
+    seen.add(value);
+    for (const entry of Object.values(value))
+        freezeValue(entry, seen);
+    return Object.freeze(value);
+}
+function freezeEvaluation(value, decisions, terminalAction) {
+    const frozenDecisions = Object.freeze(decisions.map((decision) => Object.freeze(decision)));
+    return Object.freeze({
+        value: freezeValue(value),
+        decisions: frozenDecisions,
+        ...(terminalAction ? { terminalAction } : {}),
+    });
+}
+function assertPolicyResult(policy, result) {
+    if (!VALID_ACTIONS.has(result.action)) {
+        throw new Error(`Policy "${policy.id}" returned an invalid action`);
+    }
+    if (!VALID_RISKS.has(result.risk)) {
+        throw new Error(`Policy "${policy.id}" returned an invalid risk`);
+    }
+    if (typeof result.reason !== "string" || result.reason.trim().length === 0) {
+        throw new Error(`Policy "${policy.id}" returned an empty reason`);
+    }
+    if ((result.action === "redact" || result.action === "rewrite") &&
+        !Object.prototype.hasOwnProperty.call(result, "value")) {
+        throw new Error(`Policy "${policy.id}" must return a value for ${result.action}`);
+    }
+}
+function defaultPolicyFailure(input, options) {
+    if (input.tool?.sideEffect === "read" && options.readOnlyPolicyFailure !== "block") {
+        return { action: "audit", risk: "medium" };
+    }
+    return { action: "block", risk: "high" };
+}
+export class RuntimeGuardrailEngine {
+    policies;
+    options;
+    sequence = 0;
+    constructor(policies, options = {}) {
+        this.policies = policies
+            .map((policy, index) => ({ policy, index }))
+            .sort((a, b) => (a.policy.priority ?? 100) - (b.policy.priority ?? 100) || a.index - b.index)
+            .map(({ policy }) => policy);
+        this.options = options;
+    }
+    async evaluate(input) {
+        this.throwIfAborted(input.signal);
+        let value = freezeValue(cloneValue(input.value));
+        const decisions = [];
+        for (const policy of this.policies) {
+            if (!policy.phases.includes(input.phase))
+                continue;
+            this.throwIfAborted(input.signal, decisions);
+            const startedAt = (this.options.now ?? Date.now)();
+            let result;
+            let failure;
+            try {
+                result = await policy.evaluate(Object.freeze({
+                    ...input,
+                    value,
+                }));
+                this.throwIfAborted(input.signal, decisions);
+                if (result)
+                    assertPolicyResult(policy, result);
+            }
+            catch (error) {
+                if (error instanceof GuardrailAbortedError)
+                    throw error;
+                failure = error;
+                result = null;
+            }
+            const latencyMs = Math.max(0, (this.options.now ?? Date.now)() - startedAt);
+            let decision;
+            if (failure) {
+                const fallback = defaultPolicyFailure(input, this.options);
+                decision = {
+                    id: this.createId(),
+                    policyId: policy.id,
+                    ...(policy.version ? { policyVersion: policy.version } : {}),
+                    phase: input.phase,
+                    action: fallback.action,
+                    risk: fallback.risk,
+                    reason: "Policy evaluation failed",
+                    latencyMs,
+                    fallbackUsed: true,
+                };
+            }
+            else if (result) {
+                decision = {
+                    id: this.createId(),
+                    policyId: policy.id,
+                    ...(policy.version ? { policyVersion: policy.version } : {}),
+                    phase: input.phase,
+                    action: result.action,
+                    risk: result.risk,
+                    reason: result.reason.trim(),
+                    latencyMs,
+                    fallbackUsed: result.fallbackUsed ?? false,
+                };
+                if (result.action === "redact" || result.action === "rewrite") {
+                    value = freezeValue(cloneValue(result.value));
+                }
+            }
+            if (!decision)
+                continue;
+            const frozenDecision = Object.freeze(decision);
+            decisions.push(frozenDecision);
+            await this.emitDecision(frozenDecision, input);
+            this.throwIfAborted(input.signal, decisions);
+            if (decision.action === "block" || decision.action === "approval") {
+                return freezeEvaluation(value, decisions, decision.action);
+            }
+        }
+        return freezeEvaluation(value, decisions);
+    }
+    createId() {
+        return this.options.createId?.() ?? `guardrail-${++this.sequence}`;
+    }
+    throwIfAborted(signal, decisions = []) {
+        if (signal?.aborted)
+            throw new GuardrailAbortedError(undefined, decisions);
+    }
+    async emitDecision(decision, input) {
+        try {
+            await this.options.onDecision?.(Object.freeze({
+                decision,
+                context: input.context,
+                ...(input.tool
+                    ? {
+                        tool: Object.freeze({
+                            name: input.tool.name,
+                            callId: input.tool.callId,
+                            sideEffect: input.tool.sideEffect,
+                        }),
+                    }
+                    : {}),
+                ...(input.outputTruncated !== undefined
+                    ? { outputTruncated: input.outputTruncated }
+                    : {}),
+            }));
+        }
+        catch {
+            // Audit sinks are observational and cannot change enforcement.
+        }
+    }
+}
+//# sourceMappingURL=engine.js.map

package/dist/guardrails/engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.js","sourceRoot":"","sources":["../../src/guardrails/engine.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AASpD,MAAM,aAAa,GAAG,IAAI,GAAG,CAAyB;IACpD,OAAO;IACP,OAAO;IACP,OAAO;IACP,QAAQ;IACR,SAAS;IACT,OAAO;IACP,UAAU;CACX,CAAC,CAAC;AAEH,MAAM,WAAW,GAAG,IAAI,GAAG,CAAuB;IAChD,MAAM;IACN,KAAK;IACL,QAAQ;IACR,MAAM;IACN,UAAU;CACX,CAAC,CAAC;AAEH,SAAS,UAAU,CAAI,KAAQ,EAAE,OAAO,IAAI,OAAO,EAAmB;IACpE,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC9D,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,KAAe,CAAC,CAAC;IAC3C,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,QAAa,CAAC;IACjD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,KAAK,GAAc,EAAE,CAAC;QAC5B,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACvB,KAAK,MAAM,IAAI,IAAI,KAAK;YAAE,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QAC7D,OAAO,KAAU,CAAC;IACpB,CAAC;IACD,IAAI,KAAK,YAAY,IAAI;QAAE,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAM,CAAC;IACjE,MAAM,KAAK,GAA4B,EAAE,CAAC;IAC1C,IAAI,CAAC,GAAG,CAAC,KAAe,EAAE,KAAK,CAAC,CAAC;IACjC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;QAC5E,KAAK,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,KAAU,CAAC;AACpB,CAAC;AAED,SAAS,WAAW,CAAI,KAAQ,EAAE,OAAO,IAAI,OAAO,EAAU;IAC5D,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,GAAG,CAAC,KAAe,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3F,IAAI,CAAC,GAAG,CAAC,KAAe,CAAC,CAAC;IAC1B,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,KAAgC,CAAC;QAAE,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAC9F,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,gBAAgB,CACvB,KAAQ,EACR,SAAqC,EACrC,cAAqC;IAErC,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC5F,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,KAAK,EAAE,WAAW,CAAC,KAAK,CAAC;QACzB,SAAS,EAAE,eAAe;QAC1B,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9C,CAAC,CAAC;AACL,CAAC;AAED,SAAS,kBAAkB,CACzB,MAAiC,EACjC,MAAuC;IAEvC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,WAAW,MAAM,CAAC,EAAE,8BAA8B,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,WAAW,MAAM,CAAC,EAAE,4BAA4B,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3E,MAAM,IAAI,KAAK,CAAC,WAAW,MAAM,CAAC,EAAE,4BAA4B,CAAC,CAAC;IACpE,CAAC;IACD,IACE,CAAC,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC;QAC3D,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,EACtD,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,WAAW,MAAM,CAAC,EAAE,6BAA6B,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IACpF,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAC3B,KAAsC,EACtC,OAAsC;IAEtC,IAAI,KAAK,CAAC,IAAI,EAAE,UAAU,KAAK,MAAM,IAAI,OAAO,CAAC,qBAAqB,KAAK,OAAO,EAAE,CAAC;QACnF,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IAC7C,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAC3C,CAAC;AAED,MAAM,OAAO,sBAAsB;IAChB,QAAQ,CAA2B;IACnC,OAAO,CAAgC;IAChD,QAAQ,GAAG,CAAC,CAAC;IAErB,YACE,QAA2C,EAC3C,UAAyC,EAAE;QAE3C,IAAI,CAAC,QAAQ,GAAG,QAAQ;aACrB,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;aAC3C,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC;aAC5F,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC;QAC/B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,QAAQ,CACZ,KAAyC;QAEzC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAClC,IAAI,KAAK,GAAG,WAAW,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;QACjD,MAAM,SAAS,GAA+B,EAAE,CAAC;QAEjD,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC;gBAAE,SAAS;YACnD,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YAC7C,MAAM,SAAS,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACnD,IAAI,MAA8C,CAAC;YACnD,IAAI,OAAgB,CAAC;YAErB,IAAI,CAAC;gBACH,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;oBAC3C,GAAG,KAAK;oBACR,KAAK;iBACN,CAAC,CAA2C,CAAC;gBAC9C,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;gBAC7C,IAAI,MAAM;oBAAE,kBAAkB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YACjD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,KAAK,YAAY,qBAAqB;oBAAE,MAAM,KAAK,CAAC;gBACxD,OAAO,GAAG,KAAK,CAAC;gBAChB,MAAM,GAAG,IAAI,CAAC;YAChB,CAAC;YAED,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC;YAC5E,IAAI,QAA8C,CAAC;YACnD,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,QAAQ,GAAG,oBAAoB,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;gBAC3D,QAAQ,GAAG;oBACT,EAAE,EAAE,IAAI,CAAC,QAAQ,EAAE;oBACnB,QAAQ,EAAE,MAAM,CAAC,EAAE;oBACnB,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC5D,KAAK,EAAE,KAAK,CAAC,KAAK;oBAClB,MAAM,EAAE,QAAQ,CAAC,MAAM;oBACvB,IAAI,EAAE,QAAQ,CAAC,IAAI;oBACnB,MAAM,EAAE,0BAA0B;oBAClC,SAAS;oBACT,YAAY,EAAE,IAAI;iBACnB,CAAC;YACJ,CAAC;iBAAM,IAAI,MAAM,EAAE,CAAC;gBAClB,QAAQ,GAAG;oBACT,EAAE,EAAE,IAAI,CAAC,QAAQ,EAAE;oBACnB,QAAQ,EAAE,MAAM,CAAC,EAAE;oBACnB,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC5D,KAAK,EAAE,KAAK,CAAC,KAAK;oBAClB,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,IAAI,EAAE,MAAM,CAAC,IAAI;oBACjB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE;oBAC5B,SAAS;oBACT,YAAY,EAAE,MAAM,CAAC,YAAY,IAAI,KAAK;iBAC3C,CAAC;gBACF,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;oBAC9D,KAAK,GAAG,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC,KAAU,CAAC,CAAC,CAAC;gBACrD,CAAC;YACH,CAAC;YAED,IAAI,CAAC,QAAQ;gBAAE,SAAS;YACxB,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC/C,SAAS,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YAC/B,MAAM,IAAI,CAAC,YAAY,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;YAC/C,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YAC7C,IAAI,QAAQ,CAAC,MAAM,KAAK,OAAO,IAAI,QAAQ,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;gBAClE,OAAO,gBAAgB,CAAC,KAAK,EAAE,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC7D,CAAC;QACH,CAAC;QAED,OAAO,gBAAgB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IAC5C,CAAC;IAEO,QAAQ;QACd,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,IAAI,aAAa,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;IACrE,CAAC;IAEO,cAAc,CACpB,MAAoB,EACpB,YAAiD,EAAE;QAEnD,IAAI,MAAM,EAAE,OAAO;YAAE,MAAM,IAAI,qBAAqB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IAC7E,CAAC;IAEO,KAAK,CAAC,YAAY,CACxB,QAAkC,EAClC,KAAsC;QAEtC,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC;gBAC5C,QAAQ;gBACR,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,GAAG,CAAC,KAAK,CAAC,IAAI;oBACZ,CAAC,CAAC;wBACE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC;4BAClB,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI;4BACrB,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM;4BACzB,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,UAAU;yBAClC,CAAC;qBACH;oBACH,CAAC,CAAC,EAAE,CAAC;gBACP,GAAG,CAAC,KAAK,CAAC,eAAe,KAAK,SAAS;oBACrC,CAAC,CAAC,EAAE,eAAe,EAAE,KAAK,CAAC,eAAe,EAAE;oBAC5C,CAAC,CAAC,EAAE,CAAC;aACR,CAAC,CAAC,CAAC;QACN,CAAC;QAAC,MAAM,CAAC;YACP,+DAA+D;QACjE,CAAC;IACH,CAAC;CACF"}

package/dist/guardrails/errors.d.ts

@@ -0,0 +1,17 @@
+import type { RuntimeGuardrailDecision } from "../runtime-plan/types.js";
+export declare class GuardrailError extends Error {
+    readonly decisions: readonly RuntimeGuardrailDecision[];
+    constructor(message: string, decisions?: readonly RuntimeGuardrailDecision[]);
+}
+export declare class GuardrailBlockedError extends GuardrailError {
+    readonly code = "guardrail_blocked";
+}
+export declare class GuardrailApprovalRequiredError extends GuardrailError {
+    readonly code = "guardrail_approval_required";
+}
+export declare class GuardrailAbortedError extends GuardrailError {
+    readonly code = "guardrail_aborted";
+    readonly outcomeUncertain: boolean;
+    constructor(message?: string, decisions?: readonly RuntimeGuardrailDecision[], outcomeUncertain?: boolean);
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/guardrails/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/guardrails/errors.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AAEzE,qBAAa,cAAe,SAAQ,KAAK;IACvC,QAAQ,CAAC,SAAS,EAAE,SAAS,wBAAwB,EAAE,CAAC;gBAE5C,OAAO,EAAE,MAAM,EAAE,SAAS,GAAE,SAAS,wBAAwB,EAAO;CAKjF;AAED,qBAAa,qBAAsB,SAAQ,cAAc;IACvD,QAAQ,CAAC,IAAI,uBAAuB;CACrC;AAED,qBAAa,8BAA+B,SAAQ,cAAc;IAChE,QAAQ,CAAC,IAAI,iCAAiC;CAC/C;AAED,qBAAa,qBAAsB,SAAQ,cAAc;IACvD,QAAQ,CAAC,IAAI,uBAAuB;IACpC,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;gBAGjC,OAAO,SAAqC,EAC5C,SAAS,GAAE,SAAS,wBAAwB,EAAO,EACnD,gBAAgB,UAAQ;CAK3B"}

package/dist/guardrails/errors.js

@@ -0,0 +1,23 @@
+export class GuardrailError extends Error {
+    decisions;
+    constructor(message, decisions = []) {
+        super(message);
+        this.name = new.target.name;
+        this.decisions = Object.freeze([...decisions]);
+    }
+}
+export class GuardrailBlockedError extends GuardrailError {
+    code = "guardrail_blocked";
+}
+export class GuardrailApprovalRequiredError extends GuardrailError {
+    code = "guardrail_approval_required";
+}
+export class GuardrailAbortedError extends GuardrailError {
+    code = "guardrail_aborted";
+    outcomeUncertain;
+    constructor(message = "Guardrail evaluation was aborted", decisions = [], outcomeUncertain = false) {
+        super(message, decisions);
+        this.outcomeUncertain = outcomeUncertain;
+    }
+}
+//# sourceMappingURL=errors.js.map

package/dist/guardrails/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/guardrails/errors.ts"],"names":[],"mappings":"AAEA,MAAM,OAAO,cAAe,SAAQ,KAAK;IAC9B,SAAS,CAAsC;IAExD,YAAY,OAAe,EAAE,YAAiD,EAAE;QAC9E,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;QAC5B,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC;IACjD,CAAC;CACF;AAED,MAAM,OAAO,qBAAsB,SAAQ,cAAc;IAC9C,IAAI,GAAG,mBAAmB,CAAC;CACrC;AAED,MAAM,OAAO,8BAA+B,SAAQ,cAAc;IACvD,IAAI,GAAG,6BAA6B,CAAC;CAC/C;AAED,MAAM,OAAO,qBAAsB,SAAQ,cAAc;IAC9C,IAAI,GAAG,mBAAmB,CAAC;IAC3B,gBAAgB,CAAU;IAEnC,YACE,OAAO,GAAG,kCAAkC,EAC5C,YAAiD,EAAE,EACnD,gBAAgB,GAAG,KAAK;QAExB,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAC1B,IAAI,CAAC,gBAAgB,GAAG,gBAAgB,CAAC;IAC3C,CAAC;CACF"}

package/dist/guardrails/index.d.ts

@@ -0,0 +1,8 @@
+export { GuardrailAbortedError, GuardrailApprovalRequiredError, GuardrailBlockedError, GuardrailError, } from "./errors.js";
+export { RuntimeGuardrailEngine } from "./engine.js";
+export { createBoundedValuePolicy, createCrossScopePolicy, createDefaultOutputGuardrailPolicies, createDefaultToolGuardrailPolicies, createDestructiveOperationPolicy, createPrivateNetworkPolicy, createSecretPatternPolicy, createToolArgumentsPolicy, } from "./detectors.js";
+export { createRunOutputPolicy } from "./output-policy.js";
+export { createRunToolMiddleware, inferToolSideEffect, wrapRunToolExecutor, } from "./tool-middleware.js";
+export { createConfiguredRunToolMiddleware, createConfiguredRunOutputPolicy, normalizeRuntimeGuardrailSettings, } from "./settings.js";
+export type { RunToolExecutionResult, RunOutputPolicy, RunOutputPolicyOptions, RunOutputPolicyRequest, RunOutputPolicyResult, RunToolMiddleware, RunToolMiddlewareOptions, RunToolNext, RunToolRequest, RuntimeGuardrailApprovalHandler, RuntimeGuardrailApprovalResult, RuntimeGuardrailOutputApprovalHandler, RuntimeGuardrailAuditEvent, RuntimeGuardrailContext, RuntimeGuardrailEngineOptions, RuntimeGuardrailEvaluation, RuntimeGuardrailEvaluationInput, RuntimeGuardrailHostAdapters, RuntimeGuardrailPolicy, RuntimeGuardrailPolicyResult, RuntimeGuardrailSettings, RuntimeOutputEnforcementMode, RuntimeStreamingOutputMode, RuntimeGuardrailScope, RuntimeGuardrailToolContext, RuntimeToolSideEffect, } from "./types.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/guardrails/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/guardrails/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,qBAAqB,EACrB,8BAA8B,EAC9B,qBAAqB,EACrB,cAAc,GACf,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EACL,wBAAwB,EACxB,sBAAsB,EACtB,oCAAoC,EACpC,kCAAkC,EAClC,gCAAgC,EAChC,0BAA0B,EAC1B,yBAAyB,EACzB,yBAAyB,GAC1B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,EACL,uBAAuB,EACvB,mBAAmB,EACnB,mBAAmB,GACpB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,iCAAiC,EACjC,+BAA+B,EAC/B,iCAAiC,GAClC,MAAM,eAAe,CAAC;AACvB,YAAY,EACV,sBAAsB,EACtB,eAAe,EACf,sBAAsB,EACtB,sBAAsB,EACtB,qBAAqB,EACrB,iBAAiB,EACjB,wBAAwB,EACxB,WAAW,EACX,cAAc,EACd,+BAA+B,EAC/B,8BAA8B,EAC9B,qCAAqC,EACrC,0BAA0B,EAC1B,uBAAuB,EACvB,6BAA6B,EAC7B,0BAA0B,EAC1B,+BAA+B,EAC/B,4BAA4B,EAC5B,sBAAsB,EACtB,4BAA4B,EAC5B,wBAAwB,EACxB,4BAA4B,EAC5B,0BAA0B,EAC1B,qBAAqB,EACrB,2BAA2B,EAC3B,qBAAqB,GACtB,MAAM,YAAY,CAAC"}

package/dist/guardrails/index.js

@@ -0,0 +1,7 @@
+export { GuardrailAbortedError, GuardrailApprovalRequiredError, GuardrailBlockedError, GuardrailError, } from "./errors.js";
+export { RuntimeGuardrailEngine } from "./engine.js";
+export { createBoundedValuePolicy, createCrossScopePolicy, createDefaultOutputGuardrailPolicies, createDefaultToolGuardrailPolicies, createDestructiveOperationPolicy, createPrivateNetworkPolicy, createSecretPatternPolicy, createToolArgumentsPolicy, } from "./detectors.js";
+export { createRunOutputPolicy } from "./output-policy.js";
+export { createRunToolMiddleware, inferToolSideEffect, wrapRunToolExecutor, } from "./tool-middleware.js";
+export { createConfiguredRunToolMiddleware, createConfiguredRunOutputPolicy, normalizeRuntimeGuardrailSettings, } from "./settings.js";
+//# sourceMappingURL=index.js.map

package/dist/guardrails/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/guardrails/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,qBAAqB,EACrB,8BAA8B,EAC9B,qBAAqB,EACrB,cAAc,GACf,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EACL,wBAAwB,EACxB,sBAAsB,EACtB,oCAAoC,EACpC,kCAAkC,EAClC,gCAAgC,EAChC,0BAA0B,EAC1B,yBAAyB,EACzB,yBAAyB,GAC1B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,EACL,uBAAuB,EACvB,mBAAmB,EACnB,mBAAmB,GACpB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,iCAAiC,EACjC,+BAA+B,EAC/B,iCAAiC,GAClC,MAAM,eAAe,CAAC"}

package/dist/guardrails/output-policy.d.ts

@@ -0,0 +1,4 @@
+import { RuntimeGuardrailEngine } from "./engine.js";
+import type { RunOutputPolicy, RunOutputPolicyOptions } from "./types.js";
+export declare function createRunOutputPolicy(engine: RuntimeGuardrailEngine, options?: RunOutputPolicyOptions): RunOutputPolicy;
+//# sourceMappingURL=output-policy.d.ts.map

package/dist/guardrails/output-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"output-policy.d.ts","sourceRoot":"","sources":["../../src/guardrails/output-policy.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,KAAK,EACV,eAAe,EACf,sBAAsB,EAGvB,MAAM,YAAY,CAAC;AAQpB,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,sBAAsB,EAC9B,OAAO,GAAE,sBAA2B,GACnC,eAAe,CAmFjB"}

package/dist/guardrails/output-policy.js

@@ -0,0 +1,64 @@
+import { GuardrailAbortedError, GuardrailApprovalRequiredError, GuardrailBlockedError, } from "./errors.js";
+function terminalDecision(decisions) {
+    return decisions[decisions.length - 1];
+}
+export function createRunOutputPolicy(engine, options = {}) {
+    const streamingMode = options.streamingMode ?? "audit";
+    if (streamingMode !== "audit" && streamingMode !== "buffer") {
+        throw new TypeError('streamingMode must be "audit" or "buffer"');
+    }
+    return Object.freeze({
+        streamingMode,
+        async evaluate(request) {
+            if (typeof request.output !== "string") {
+                throw new TypeError("Guardrail output must be a string");
+            }
+            if (request.mode !== "enforce" && request.mode !== "audit") {
+                throw new TypeError('Guardrail output mode must be "enforce" or "audit"');
+            }
+            const evaluation = await engine.evaluate({
+                phase: "output",
+                value: request.output,
+                context: request.context,
+                signal: request.signal,
+            });
+            if (request.mode === "audit") {
+                return Object.freeze({
+                    output: request.output,
+                    decisions: evaluation.decisions,
+                    enforced: false,
+                });
+            }
+            if (evaluation.terminalAction === "block") {
+                throw new GuardrailBlockedError(terminalDecision(evaluation.decisions).reason, evaluation.decisions);
+            }
+            if (evaluation.terminalAction === "approval") {
+                const decision = terminalDecision(evaluation.decisions);
+                if (!options.approval) {
+                    throw new GuardrailApprovalRequiredError(decision.reason, evaluation.decisions);
+                }
+                const approval = await options.approval(Object.freeze({
+                    ...request,
+                    output: typeof evaluation.value === "string"
+                        ? evaluation.value
+                        : request.output,
+                }), decision);
+                if (request.signal?.aborted) {
+                    throw new GuardrailAbortedError("Guardrail output approval was interrupted", evaluation.decisions);
+                }
+                if (approval !== "approved") {
+                    throw new GuardrailBlockedError("Guardrail output approval was denied", evaluation.decisions);
+                }
+            }
+            if (typeof evaluation.value !== "string") {
+                throw new GuardrailBlockedError("Guardrail rewrote output to a non-string value", evaluation.decisions);
+            }
+            return Object.freeze({
+                output: evaluation.value,
+                decisions: evaluation.decisions,
+                enforced: true,
+            });
+        },
+    });
+}
+//# sourceMappingURL=output-policy.js.map

package/dist/guardrails/output-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"output-policy.js","sourceRoot":"","sources":["../../src/guardrails/output-policy.ts"],"names":[],"mappings":"AACA,OAAO,EACL,qBAAqB,EACrB,8BAA8B,EAC9B,qBAAqB,GACtB,MAAM,aAAa,CAAC;AASrB,SAAS,gBAAgB,CACvB,SAA8C;IAE9C,OAAO,SAAS,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,MAA8B,EAC9B,UAAkC,EAAE;IAEpC,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,OAAO,CAAC;IACvD,IAAI,aAAa,KAAK,OAAO,IAAI,aAAa,KAAK,QAAQ,EAAE,CAAC;QAC5D,MAAM,IAAI,SAAS,CAAC,2CAA2C,CAAC,CAAC;IACnE,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,aAAa;QACb,KAAK,CAAC,QAAQ,CACZ,OAA+B;YAE/B,IAAI,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACvC,MAAM,IAAI,SAAS,CAAC,mCAAmC,CAAC,CAAC;YAC3D,CAAC;YACD,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBAC3D,MAAM,IAAI,SAAS,CAAC,oDAAoD,CAAC,CAAC;YAC5E,CAAC;YAED,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC;gBACvC,KAAK,EAAE,QAAQ;gBACf,KAAK,EAAE,OAAO,CAAC,MAAM;gBACrB,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,MAAM,EAAE,OAAO,CAAC,MAAM;aACvB,CAAC,CAAC;YAEH,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBAC7B,OAAO,MAAM,CAAC,MAAM,CAAC;oBACnB,MAAM,EAAE,OAAO,CAAC,MAAM;oBACtB,SAAS,EAAE,UAAU,CAAC,SAAS;oBAC/B,QAAQ,EAAE,KAAK;iBAChB,CAAC,CAAC;YACL,CAAC;YAED,IAAI,UAAU,CAAC,cAAc,KAAK,OAAO,EAAE,CAAC;gBAC1C,MAAM,IAAI,qBAAqB,CAC7B,gBAAgB,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,MAAM,EAC7C,UAAU,CAAC,SAAS,CACrB,CAAC;YACJ,CAAC;YACD,IAAI,UAAU,CAAC,cAAc,KAAK,UAAU,EAAE,CAAC;gBAC7C,MAAM,QAAQ,GAAG,gBAAgB,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;gBACxD,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;oBACtB,MAAM,IAAI,8BAA8B,CACtC,QAAQ,CAAC,MAAM,EACf,UAAU,CAAC,SAAS,CACrB,CAAC;gBACJ,CAAC;gBACD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,QAAQ,CACrC,MAAM,CAAC,MAAM,CAAC;oBACZ,GAAG,OAAO;oBACV,MAAM,EAAE,OAAO,UAAU,CAAC,KAAK,KAAK,QAAQ;wBAC1C,CAAC,CAAC,UAAU,CAAC,KAAK;wBAClB,CAAC,CAAC,OAAO,CAAC,MAAM;iBACnB,CAAC,EACF,QAAQ,CACT,CAAC;gBACF,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;oBAC5B,MAAM,IAAI,qBAAqB,CAC7B,2CAA2C,EAC3C,UAAU,CAAC,SAAS,CACrB,CAAC;gBACJ,CAAC;gBACD,IAAI,QAAQ,KAAK,UAAU,EAAE,CAAC;oBAC5B,MAAM,IAAI,qBAAqB,CAC7B,sCAAsC,EACtC,UAAU,CAAC,SAAS,CACrB,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,IAAI,OAAO,UAAU,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;gBACzC,MAAM,IAAI,qBAAqB,CAC7B,gDAAgD,EAChD,UAAU,CAAC,SAAS,CACrB,CAAC;YACJ,CAAC;YAED,OAAO,MAAM,CAAC,MAAM,CAAC;gBACnB,MAAM,EAAE,UAAU,CAAC,KAAK;gBACxB,SAAS,EAAE,UAAU,CAAC,SAAS;gBAC/B,QAAQ,EAAE,IAAI;aACf,CAAC,CAAC;QACL,CAAC;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/guardrails/settings.d.ts

@@ -0,0 +1,12 @@
+import type { RunOutputPolicy, RunToolMiddleware, RuntimeGuardrailHostAdapters, RuntimeGuardrailSettings } from "./types.js";
+export declare function normalizeRuntimeGuardrailSettings(value: unknown): RuntimeGuardrailSettings | undefined;
+/**
+ * Build the OSS deterministic policy pack from serializable host settings.
+ *
+ * Undefined settings are the off switch and return undefined. Host adapters
+ * remain process-local: audit and approval callbacks never enter persisted
+ * RunnerConfig data.
+ */
+export declare function createConfiguredRunToolMiddleware(value: RuntimeGuardrailSettings | undefined, adapters?: RuntimeGuardrailHostAdapters): RunToolMiddleware | undefined;
+export declare function createConfiguredRunOutputPolicy(value: RuntimeGuardrailSettings | undefined, adapters?: RuntimeGuardrailHostAdapters): RunOutputPolicy | undefined;
+//# sourceMappingURL=settings.d.ts.map

package/dist/guardrails/settings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings.d.ts","sourceRoot":"","sources":["../../src/guardrails/settings.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EACV,eAAe,EACf,iBAAiB,EACjB,4BAA4B,EAC5B,wBAAwB,EACzB,MAAM,YAAY,CAAC;AAEpB,wBAAgB,iCAAiC,CAC/C,KAAK,EAAE,OAAO,GACb,wBAAwB,GAAG,SAAS,CAiGtC;AAED;;;;;;GAMG;AACH,wBAAgB,iCAAiC,CAC/C,KAAK,EAAE,wBAAwB,GAAG,SAAS,EAC3C,QAAQ,GAAE,4BAAiC,GAC1C,iBAAiB,GAAG,SAAS,CAe/B;AAED,wBAAgB,+BAA+B,CAC7C,KAAK,EAAE,wBAAwB,GAAG,SAAS,EAC3C,QAAQ,GAAE,4BAAiC,GAC1C,eAAe,GAAG,SAAS,CAY7B"}

package/dist/guardrails/settings.js

@@ -0,0 +1,108 @@
+import { createDefaultOutputGuardrailPolicies, createDefaultToolGuardrailPolicies, } from "./detectors.js";
+import { RuntimeGuardrailEngine } from "./engine.js";
+import { createRunOutputPolicy } from "./output-policy.js";
+import { createRunToolMiddleware } from "./tool-middleware.js";
+export function normalizeRuntimeGuardrailSettings(value) {
+    if (value === undefined || value === null)
+        return undefined;
+    if (!value || typeof value !== "object" || Array.isArray(value)) {
+        throw new TypeError("guardrails must be an object");
+    }
+    const raw = value;
+    if (raw.toolPolicyPack === undefined
+        && raw.outputPolicyPack === undefined
+        && Object.keys(raw).length === 0) {
+        return undefined;
+    }
+    if (raw.toolPolicyPack !== undefined && raw.toolPolicyPack !== "default") {
+        throw new TypeError('guardrails.toolPolicyPack must be "default"');
+    }
+    if (raw.outputPolicyPack !== undefined && raw.outputPolicyPack !== "default") {
+        throw new TypeError('guardrails.outputPolicyPack must be "default"');
+    }
+    if (raw.toolPolicyPack === undefined && (raw.maxToolOutputCharacters !== undefined
+        || raw.readOnlyPolicyFailure !== undefined)) {
+        throw new TypeError("guardrails tool settings require guardrails.toolPolicyPack");
+    }
+    if (raw.outputPolicyPack === undefined && (raw.maxFinalOutputCharacters !== undefined
+        || raw.streamingOutputMode !== undefined)) {
+        const field = raw.streamingOutputMode !== undefined
+            ? "streamingOutputMode"
+            : "maxFinalOutputCharacters";
+        throw new TypeError(`guardrails.${field} requires guardrails.outputPolicyPack`);
+    }
+    if (raw.toolPolicyPack === undefined && raw.outputPolicyPack === undefined) {
+        return undefined;
+    }
+    let maxToolOutputCharacters;
+    if (raw.maxToolOutputCharacters !== undefined) {
+        if (!Number.isSafeInteger(raw.maxToolOutputCharacters) ||
+            raw.maxToolOutputCharacters < 1) {
+            throw new TypeError("guardrails.maxToolOutputCharacters must be a positive safe integer");
+        }
+        maxToolOutputCharacters = raw.maxToolOutputCharacters;
+    }
+    let readOnlyPolicyFailure;
+    if (raw.readOnlyPolicyFailure !== undefined) {
+        if (raw.readOnlyPolicyFailure !== "audit" && raw.readOnlyPolicyFailure !== "block") {
+            throw new TypeError('guardrails.readOnlyPolicyFailure must be "audit" or "block"');
+        }
+        readOnlyPolicyFailure = raw.readOnlyPolicyFailure;
+    }
+    let maxFinalOutputCharacters;
+    if (raw.maxFinalOutputCharacters !== undefined) {
+        if (!Number.isSafeInteger(raw.maxFinalOutputCharacters)
+            || raw.maxFinalOutputCharacters < 1) {
+            throw new TypeError("guardrails.maxFinalOutputCharacters must be a positive safe integer");
+        }
+        maxFinalOutputCharacters = raw.maxFinalOutputCharacters;
+    }
+    let streamingOutputMode;
+    if (raw.outputPolicyPack !== undefined) {
+        if (raw.streamingOutputMode !== undefined
+            && raw.streamingOutputMode !== "audit"
+            && raw.streamingOutputMode !== "buffer") {
+            throw new TypeError('guardrails.streamingOutputMode must be "audit" or "buffer"');
+        }
+        streamingOutputMode = (raw.streamingOutputMode ?? "audit");
+    }
+    return Object.freeze({
+        ...(raw.toolPolicyPack === "default" ? { toolPolicyPack: "default" } : {}),
+        ...(raw.outputPolicyPack === "default" ? { outputPolicyPack: "default" } : {}),
+        ...(maxToolOutputCharacters !== undefined ? { maxToolOutputCharacters } : {}),
+        ...(maxFinalOutputCharacters !== undefined ? { maxFinalOutputCharacters } : {}),
+        ...(readOnlyPolicyFailure !== undefined ? { readOnlyPolicyFailure } : {}),
+        ...(streamingOutputMode !== undefined ? { streamingOutputMode } : {}),
+    });
+}
+/**
+ * Build the OSS deterministic policy pack from serializable host settings.
+ *
+ * Undefined settings are the off switch and return undefined. Host adapters
+ * remain process-local: audit and approval callbacks never enter persisted
+ * RunnerConfig data.
+ */
+export function createConfiguredRunToolMiddleware(value, adapters = {}) {
+    const settings = normalizeRuntimeGuardrailSettings(value);
+    if (!settings?.toolPolicyPack)
+        return undefined;
+    const engine = new RuntimeGuardrailEngine(createDefaultToolGuardrailPolicies(), {
+        onDecision: adapters.onDecision,
+        readOnlyPolicyFailure: settings.readOnlyPolicyFailure,
+    });
+    return createRunToolMiddleware(engine, {
+        approval: adapters.approval,
+        maxOutputCharacters: settings.maxToolOutputCharacters,
+    });
+}
+export function createConfiguredRunOutputPolicy(value, adapters = {}) {
+    const settings = normalizeRuntimeGuardrailSettings(value);
+    if (!settings?.outputPolicyPack)
+        return undefined;
+    const engine = new RuntimeGuardrailEngine(createDefaultOutputGuardrailPolicies(settings.maxFinalOutputCharacters), { onDecision: adapters.onDecision });
+    return createRunOutputPolicy(engine, {
+        approval: adapters.outputApproval,
+        streamingMode: settings.streamingOutputMode,
+    });
+}
+//# sourceMappingURL=settings.js.map

package/dist/guardrails/settings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings.js","sourceRoot":"","sources":["../../src/guardrails/settings.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,oCAAoC,EACpC,kCAAkC,GACnC,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAQ/D,MAAM,UAAU,iCAAiC,CAC/C,KAAc;IAEd,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5D,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,SAAS,CAAC,8BAA8B,CAAC,CAAC;IACtD,CAAC;IAED,MAAM,GAAG,GAAG,KAAgC,CAAC;IAC7C,IACE,GAAG,CAAC,cAAc,KAAK,SAAS;WAC7B,GAAG,CAAC,gBAAgB,KAAK,SAAS;WAClC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,EAChC,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,GAAG,CAAC,cAAc,KAAK,SAAS,IAAI,GAAG,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;QACzE,MAAM,IAAI,SAAS,CAAC,6CAA6C,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,GAAG,CAAC,gBAAgB,KAAK,SAAS,IAAI,GAAG,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;QAC7E,MAAM,IAAI,SAAS,CAAC,+CAA+C,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,GAAG,CAAC,cAAc,KAAK,SAAS,IAAI,CACtC,GAAG,CAAC,uBAAuB,KAAK,SAAS;WACtC,GAAG,CAAC,qBAAqB,KAAK,SAAS,CAC3C,EAAE,CAAC;QACF,MAAM,IAAI,SAAS,CACjB,4DAA4D,CAC7D,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,gBAAgB,KAAK,SAAS,IAAI,CACxC,GAAG,CAAC,wBAAwB,KAAK,SAAS;WACvC,GAAG,CAAC,mBAAmB,KAAK,SAAS,CACzC,EAAE,CAAC;QACF,MAAM,KAAK,GAAG,GAAG,CAAC,mBAAmB,KAAK,SAAS;YACjD,CAAC,CAAC,qBAAqB;YACvB,CAAC,CAAC,0BAA0B,CAAC;QAC/B,MAAM,IAAI,SAAS,CACjB,cAAc,KAAK,uCAAuC,CAC3D,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,cAAc,KAAK,SAAS,IAAI,GAAG,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;QAC3E,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,uBAA2C,CAAC;IAChD,IAAI,GAAG,CAAC,uBAAuB,KAAK,SAAS,EAAE,CAAC;QAC9C,IACE,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,uBAAuB,CAAC;YACjD,GAAG,CAAC,uBAAkC,GAAG,CAAC,EAC3C,CAAC;YACD,MAAM,IAAI,SAAS,CACjB,oEAAoE,CACrE,CAAC;QACJ,CAAC;QACD,uBAAuB,GAAG,GAAG,CAAC,uBAAiC,CAAC;IAClE,CAAC;IACD,IAAI,qBAAoD,CAAC;IACzD,IAAI,GAAG,CAAC,qBAAqB,KAAK,SAAS,EAAE,CAAC;QAC5C,IAAI,GAAG,CAAC,qBAAqB,KAAK,OAAO,IAAI,GAAG,CAAC,qBAAqB,KAAK,OAAO,EAAE,CAAC;YACnF,MAAM,IAAI,SAAS,CACjB,6DAA6D,CAC9D,CAAC;QACJ,CAAC;QACD,qBAAqB,GAAG,GAAG,CAAC,qBAAqB,CAAC;IACpD,CAAC;IACD,IAAI,wBAA4C,CAAC;IACjD,IAAI,GAAG,CAAC,wBAAwB,KAAK,SAAS,EAAE,CAAC;QAC/C,IACE,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,wBAAwB,CAAC;eAC/C,GAAG,CAAC,wBAAmC,GAAG,CAAC,EAC/C,CAAC;YACD,MAAM,IAAI,SAAS,CACjB,qEAAqE,CACtE,CAAC;QACJ,CAAC;QACD,wBAAwB,GAAG,GAAG,CAAC,wBAAkC,CAAC;IACpE,CAAC;IACD,IAAI,mBAAmD,CAAC;IACxD,IAAI,GAAG,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;QACvC,IACE,GAAG,CAAC,mBAAmB,KAAK,SAAS;eAClC,GAAG,CAAC,mBAAmB,KAAK,OAAO;eACnC,GAAG,CAAC,mBAAmB,KAAK,QAAQ,EACvC,CAAC;YACD,MAAM,IAAI,SAAS,CACjB,4DAA4D,CAC7D,CAAC;QACJ,CAAC;QACD,mBAAmB,GAAG,CAAC,GAAG,CAAC,mBAAmB,IAAI,OAAO,CAAuB,CAAC;IACnF,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,GAAG,CAAC,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,SAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnF,GAAG,CAAC,GAAG,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,SAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvF,GAAG,CAAC,uBAAuB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,uBAAuB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7E,GAAG,CAAC,wBAAwB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,wBAAwB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/E,GAAG,CAAC,qBAAqB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,qBAAqB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzE,GAAG,CAAC,mBAAmB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACtE,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iCAAiC,CAC/C,KAA2C,EAC3C,WAAyC,EAAE;IAE3C,MAAM,QAAQ,GAAG,iCAAiC,CAAC,KAAK,CAAC,CAAC;IAC1D,IAAI,CAAC,QAAQ,EAAE,cAAc;QAAE,OAAO,SAAS,CAAC;IAEhD,MAAM,MAAM,GAAG,IAAI,sBAAsB,CACvC,kCAAkC,EAAE,EACpC;QACE,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,qBAAqB,EAAE,QAAQ,CAAC,qBAAqB;KACtD,CACF,CAAC;IACF,OAAO,uBAAuB,CAAC,MAAM,EAAE;QACrC,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,mBAAmB,EAAE,QAAQ,CAAC,uBAAuB;KACtD,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,+BAA+B,CAC7C,KAA2C,EAC3C,WAAyC,EAAE;IAE3C,MAAM,QAAQ,GAAG,iCAAiC,CAAC,KAAK,CAAC,CAAC;IAC1D,IAAI,CAAC,QAAQ,EAAE,gBAAgB;QAAE,OAAO,SAAS,CAAC;IAElD,MAAM,MAAM,GAAG,IAAI,sBAAsB,CACvC,oCAAoC,CAAC,QAAQ,CAAC,wBAAwB,CAAC,EACvE,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,CACpC,CAAC;IACF,OAAO,qBAAqB,CAAC,MAAM,EAAE;QACnC,QAAQ,EAAE,QAAQ,CAAC,cAAc;QACjC,aAAa,EAAE,QAAQ,CAAC,mBAAmB;KAC5C,CAAC,CAAC;AACL,CAAC"}

package/dist/guardrails/tool-middleware.d.ts

@@ -0,0 +1,6 @@
+import { RuntimeGuardrailEngine } from "./engine.js";
+import type { RunToolMiddleware, RunToolMiddlewareOptions, RunToolRequest, RuntimeToolSideEffect } from "./types.js";
+export declare function inferToolSideEffect(name: string): RuntimeToolSideEffect;
+export declare function createRunToolMiddleware(engine: RuntimeGuardrailEngine, options?: RunToolMiddlewareOptions): RunToolMiddleware;
+export declare function wrapRunToolExecutor(executor: (name: string, args: Record<string, unknown>) => Promise<string>, middleware: RunToolMiddleware | undefined, resolveRequest: (name: string, args: Record<string, unknown>) => Omit<RunToolRequest, "name" | "args"> & Partial<Pick<RunToolRequest, "name" | "args">>): (name: string, args: Record<string, unknown>) => Promise<string>;
+//# sourceMappingURL=tool-middleware.d.ts.map

package/dist/guardrails/tool-middleware.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-middleware.d.ts","sourceRoot":"","sources":["../../src/guardrails/tool-middleware.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,KAAK,EAEV,iBAAiB,EACjB,wBAAwB,EAExB,cAAc,EACd,qBAAqB,EACtB,MAAM,YAAY,CAAC;AA6BpB,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,qBAAqB,CAavE;AAED,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,sBAAsB,EAC9B,OAAO,GAAE,wBAA6B,GACrC,iBAAiB,CA4GnB;AAED,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,MAAM,CAAC,EAC1E,UAAU,EAAE,iBAAiB,GAAG,SAAS,EACzC,cAAc,EAAE,CACd,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAC1B,IAAI,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,CAAC,CAAC,GAC1F,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,MAAM,CAAC,CAclE"}

package/dist/guardrails/tool-middleware.js

@@ -0,0 +1,128 @@
+import { GuardrailAbortedError, GuardrailApprovalRequiredError, GuardrailBlockedError, } from "./errors.js";
+const DEFAULT_MAX_OUTPUT_CHARACTERS = 256_000;
+function freezeArgs(value) {
+    if (!value || typeof value !== "object" || Array.isArray(value)) {
+        throw new GuardrailBlockedError("Guardrail rewrote tool arguments to a non-object value");
+    }
+    return value;
+}
+function normalizeOutput(output, maxCharacters) {
+    const normalized = output.replace(/\r\n?/g, "\n");
+    if (normalized.length <= maxCharacters)
+        return { output: normalized, truncated: false };
+    let bounded = normalized.slice(0, maxCharacters);
+    const finalCode = bounded.charCodeAt(bounded.length - 1);
+    if (finalCode >= 0xd800 && finalCode <= 0xdbff)
+        bounded = bounded.slice(0, -1);
+    return { output: `${bounded}\n[TRUNCATED]`, truncated: true };
+}
+function terminalDecision(decisions) {
+    return decisions[decisions.length - 1];
+}
+export function inferToolSideEffect(name) {
+    const normalized = name.trim().toLowerCase().replace(/^mcp__[^_]+__/, "");
+    if (/^(get|list|read|search|find|inspect|describe|query|fetch|download|view|stat|check|lookup|count)(_|$)/.test(normalized)) {
+        return "read";
+    }
+    if (/^(create|add|set|update|edit|write|delete|remove|send|deploy|publish|run|execute|bash|shell|upload|move|copy|rename|approve|reject)(_|$)/.test(normalized)) {
+        return "write";
+    }
+    return "unknown";
+}
+export function createRunToolMiddleware(engine, options = {}) {
+    const maxOutputCharacters = options.maxOutputCharacters ?? DEFAULT_MAX_OUTPUT_CHARACTERS;
+    if (!Number.isSafeInteger(maxOutputCharacters) || maxOutputCharacters < 1) {
+        throw new TypeError("maxOutputCharacters must be a positive safe integer");
+    }
+    return {
+        async execute(request, next) {
+            if (request.signal?.aborted)
+                throw new GuardrailAbortedError();
+            const normalizedRequest = Object.freeze({
+                ...request,
+                sideEffect: request.sideEffect ?? inferToolSideEffect(request.name),
+            });
+            const before = await engine.evaluate({
+                phase: "tool.before",
+                value: request.args,
+                context: request.context,
+                tool: {
+                    name: request.name,
+                    callId: request.callId,
+                    sideEffect: normalizedRequest.sideEffect,
+                    schema: request.schema,
+                },
+                signal: request.signal,
+            });
+            const args = freezeArgs(before.value);
+            if (before.terminalAction === "block") {
+                throw new GuardrailBlockedError(terminalDecision(before.decisions).reason, before.decisions);
+            }
+            if (before.terminalAction === "approval") {
+                const decision = terminalDecision(before.decisions);
+                if (!options.approval) {
+                    throw new GuardrailApprovalRequiredError(decision.reason, before.decisions);
+                }
+                const approval = await options.approval(Object.freeze({ ...normalizedRequest, args }), decision);
+                if (request.signal?.aborted) {
+                    throw new GuardrailAbortedError(undefined, before.decisions);
+                }
+                if (approval !== "approved") {
+                    throw new GuardrailBlockedError("Guardrail approval was denied", before.decisions);
+                }
+            }
+            const toolRequest = Object.freeze({ ...normalizedRequest, args });
+            const rawOutput = await next(toolRequest);
+            if (typeof rawOutput !== "string") {
+                throw new TypeError(`Tool "${request.name}" returned a non-string result`);
+            }
+            if (request.signal?.aborted) {
+                throw new GuardrailAbortedError("Tool execution was aborted after dispatch; the outcome may be uncertain", before.decisions, normalizedRequest.sideEffect !== "read");
+            }
+            const bounded = normalizeOutput(rawOutput, maxOutputCharacters);
+            const after = await engine.evaluate({
+                phase: "tool.after",
+                value: bounded.output,
+                context: request.context,
+                tool: {
+                    name: request.name,
+                    callId: request.callId,
+                    sideEffect: normalizedRequest.sideEffect,
+                    schema: request.schema,
+                },
+                signal: request.signal,
+                outputTruncated: bounded.truncated,
+            });
+            const decisions = Object.freeze([...before.decisions, ...after.decisions]);
+            if (after.terminalAction === "block") {
+                throw new GuardrailBlockedError(terminalDecision(after.decisions).reason, decisions);
+            }
+            if (after.terminalAction === "approval") {
+                throw new GuardrailApprovalRequiredError("Approval cannot be deferred until after a tool has executed", decisions);
+            }
+            if (typeof after.value !== "string") {
+                throw new GuardrailBlockedError("Guardrail rewrote tool output to a non-string value", decisions);
+            }
+            return Object.freeze({
+                output: after.value,
+                args,
+                decisions,
+                outputTruncated: bounded.truncated,
+            });
+        },
+    };
+}
+export function wrapRunToolExecutor(executor, middleware, resolveRequest) {
+    if (!middleware)
+        return executor;
+    return async (name, args) => {
+        const request = resolveRequest(name, args);
+        const result = await middleware.execute({
+            ...request,
+            name: request.name ?? name,
+            args: request.args ?? args,
+        }, (nextRequest) => executor(nextRequest.name, nextRequest.args));
+        return result.output;
+    };
+}
+//# sourceMappingURL=tool-middleware.js.map