@provos/ironcurtain 0.7.2 → 0.9.0

package/dist/pipeline/compile.js

@@ -9,17 +9,18 @@
  * CLI flags:
  *   --constitution <path>  Use an alternative constitution file
  *   --output-dir <path>    Write compiled artifacts to this directory
+ *   --server <name>        Compile only this server (for debugging)
  */
 import { resolve } from 'node:path';
 import { fileURLToPath } from 'node:url';
 import { parseArgs } from 'node:util';
 import chalk from 'chalk';
-import { loadPipelineConfig, loadToolAnnotationsFile } from './pipeline-shared.js';
+import { loadPipelineConfig, loadStoredToolAnnotationsFile } from './pipeline-shared.js';
 import { PipelineRunner, createPipelineModels } from './pipeline-runner.js';
 // Re-export utilities that test files import from this file.
-export { resolveRulePaths, mergeReplacements } from './pipeline-shared.js';
+export { resolveRulePaths } from './pipeline-shared.js';
 /**
- * Parses --constitution and --output-dir from process.argv.
+ * Parses --constitution, --output-dir, and --server from process.argv.
  * Returns resolved absolute paths when provided.
  */
 export function parseCompilePolicyArgs(argv = process.argv.slice(2)) {
@@ -28,14 +29,20 @@ export function parseCompilePolicyArgs(argv = process.argv.slice(2)) {
         options: {
             constitution: { type: 'string' },
             'output-dir': { type: 'string' },
+            server: { type: 'string' },
+            'no-mcp': { type: 'boolean' },
         },
         strict: false,
     });
     const constitution = typeof values.constitution === 'string' ? values.constitution : undefined;
     const outputDir = typeof values['output-dir'] === 'string' ? values['output-dir'] : undefined;
+    const server = typeof values.server === 'string' ? values.server : undefined;
+    const noMcp = values['no-mcp'] ?? false;
     return {
         constitution: constitution ? resolve(constitution) : undefined,
         outputDir: outputDir ? resolve(outputDir) : undefined,
+        server,
+        noMcp,
     };
 }
 // ---------------------------------------------------------------------------
@@ -45,18 +52,22 @@ export async function main() {
     const cliArgs = parseCompilePolicyArgs();
     const config = loadPipelineConfig(cliArgs);
     // Load tool annotations early to validate they exist before printing the banner
-    const toolAnnotationsFile = loadToolAnnotationsFile(config.generatedDir, config.packageGeneratedDir);
-    if (!toolAnnotationsFile) {
+    const storedAnnotationsFile = loadStoredToolAnnotationsFile(config.generatedDir, config.packageGeneratedDir);
+    if (!storedAnnotationsFile) {
         console.error(chalk.red.bold("Error: tool-annotations.json not found. Run 'npm run annotate-tools' first to generate tool annotations."));
         process.exit(1);
     }
-    const allAnnotations = Object.values(toolAnnotationsFile.servers).flatMap((server) => server.tools);
-    console.error(chalk.bold('Policy Compilation Pipeline'));
-    console.error(chalk.bold('==========================='));
+    const allAnnotations = Object.values(storedAnnotationsFile.servers).flatMap((server) => server.tools);
+    const serverNames = Object.keys(storedAnnotationsFile.servers);
+    console.error(chalk.bold('Policy Compilation Pipeline (per-server)'));
+    console.error(chalk.bold('========================================='));
     console.error(`Constitution: ${chalk.dim(config.constitutionPath)}`);
     console.error(`Sandbox:      ${chalk.dim(config.allowedDirectory)}`);
     console.error(`Output:       ${chalk.dim(config.generatedDir + '/')}`);
-    console.error(`Annotations:  ${chalk.dim(`${allAnnotations.length} tools from ${Object.keys(toolAnnotationsFile.servers).length} server(s)`)}`);
+    console.error(`Annotations:  ${chalk.dim(`${allAnnotations.length} tools from ${serverNames.length} server(s): ${serverNames.join(', ')}`)}`);
+    if (cliArgs.server) {
+        console.error(`Server filter: ${chalk.cyan(cliArgs.server)}`);
+    }
     console.error('');
     const models = await createPipelineModels(config.generatedDir);
     const runner = new PipelineRunner(models);
@@ -69,9 +80,10 @@ export async function main() {
             toolAnnotationsFallbackDir: config.packageGeneratedDir,
             allowedDirectory: config.allowedDirectory,
             protectedPaths: config.protectedPaths,
-            mcpServers: config.mcpServers,
+            mcpServers: cliArgs.noMcp ? undefined : config.mcpServers,
             llmLogPath: models.logPath,
-            preloadedToolAnnotations: toolAnnotationsFile,
+            preloadedStoredAnnotations: storedAnnotationsFile,
+            serverFilter: cliArgs.server ? [cliArgs.server] : undefined,
         });
     }
     catch (err) {

package/dist/pipeline/compile.js.map

@@ -1 +1 @@
-{"version":3,"file":"compile.js","sourceRoot":"","sources":["../../src/pipeline/compile.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,kBAAkB,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AACnF,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAE5E,6DAA6D;AAC7D,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAW3E;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CAAC,OAAiB,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAC3E,MAAM,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;QAC3B,IAAI,EAAE,IAAI;QACV,OAAO,EAAE;YACP,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAChC,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;SACjC;QACD,MAAM,EAAE,KAAK;KACd,CAAC,CAAC;IACH,MAAM,YAAY,GAAG,OAAO,MAAM,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/F,MAAM,SAAS,GAAG,OAAO,MAAM,CAAC,YAAY,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9F,OAAO;QACL,YAAY,EAAE,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS;QAC9D,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS;KACtD,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,gBAAgB;AAChB,8EAA8E;AAE9E,MAAM,CAAC,KAAK,UAAU,IAAI;IACxB,MAAM,OAAO,GAAG,sBAAsB,EAAE,CAAC;IACzC,MAAM,MAAM,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAE3C,gFAAgF;IAChF,MAAM,mBAAmB,GAAG,uBAAuB,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,mBAAmB,CAAC,CAAC;IACrG,IAAI,CAAC,mBAAmB,EAAE,CAAC;QACzB,OAAO,CAAC,KAAK,CACX,KAAK,CAAC,GAAG,CAAC,IAAI,CACZ,0GAA0G,CAC3G,CACF,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAEpG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC,CAAC;IACzD,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC,CAAC;IACzD,OAAO,CAAC,KAAK,CAAC,iBAAiB,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;IACrE,OAAO,CAAC,KAAK,CAAC,iBAAiB,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;IACrE,OAAO,CAAC,KAAK,CAAC,iBAAiB,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,GAAG,GAAG,CAAC,EAAE,CAAC,CAAC;IACvE,OAAO,CAAC,KAAK,CACX,iBAAiB,KAAK,CAAC,GAAG,CAAC,GAAG,cAAc,CAAC,MAAM,eAAe,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,MAAM,YAAY,CAAC,EAAE,CACjI,CAAC;IACF,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAElB,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAE/D,MAAM,MAAM,GAAG,IAAI,cAAc,CAAC,MAAM,CAAC,CAAC;IAE1C,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,GAAG,CAAC;YACf,iBAAiB,EAAE,MAAM,CAAC,gBAAgB;YAC1C,gBAAgB,EAAE,cAAc;YAChC,SAAS,EAAE,MAAM,CAAC,YAAY;YAC9B,kBAAkB,EAAE,MAAM,CAAC,YAAY;YACvC,0BAA0B,EAAE,MAAM,CAAC,mBAAmB;YACtD,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,cAAc,EAAE,MAAM,CAAC,cAAc;YACrC,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,UAAU,EAAE,MAAM,CAAC,OAAO;YAC1B,wBAAwB,EAAE,mBAAmB;SAC9C,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,CAAC;YACxE,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAClB,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,qEAAqE,CAAC,CAAC,CAAC;YACrG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,yEAAyE;AACzE,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IACnF,MAAM,MAAM,CAAC,eAAe,CAAC,CAAC;IAC9B,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;QAC5B,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,4BAA4B,CAAC,EAAE,GAAG,CAAC,CAAC;QACjE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"compile.js","sourceRoot":"","sources":["../../src/pipeline/compile.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,kBAAkB,EAAE,6BAA6B,EAAE,MAAM,sBAAsB,CAAC;AACzF,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAE5E,6DAA6D;AAC7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAaxD;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CAAC,OAAiB,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAC3E,MAAM,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;QAC3B,IAAI,EAAE,IAAI;QACV,OAAO,EAAE;YACP,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAChC,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAChC,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC1B,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;SAC9B;QACD,MAAM,EAAE,KAAK;KACd,CAAC,CAAC;IACH,MAAM,YAAY,GAAG,OAAO,MAAM,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/F,MAAM,SAAS,GAAG,OAAO,MAAM,CAAC,YAAY,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9F,MAAM,MAAM,GAAG,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7E,MAAM,KAAK,GAAI,MAAM,CAAC,QAAQ,CAAyB,IAAI,KAAK,CAAC;IACjE,OAAO;QACL,YAAY,EAAE,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS;QAC9D,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS;QACrD,MAAM;QACN,KAAK;KACN,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,gBAAgB;AAChB,8EAA8E;AAE9E,MAAM,CAAC,KAAK,UAAU,IAAI;IACxB,MAAM,OAAO,GAAG,sBAAsB,EAAE,CAAC;IACzC,MAAM,MAAM,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAE3C,gFAAgF;IAChF,MAAM,qBAAqB,GAAG,6BAA6B,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,mBAAmB,CAAC,CAAC;IAC7G,IAAI,CAAC,qBAAqB,EAAE,CAAC;QAC3B,OAAO,CAAC,KAAK,CACX,KAAK,CAAC,GAAG,CAAC,IAAI,CACZ,0GAA0G,CAC3G,CACF,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACtG,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAE/D,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC,CAAC;IACtE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAC,CAAC;IACvE,OAAO,CAAC,KAAK,CAAC,iBAAiB,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;IACrE,OAAO,CAAC,KAAK,CAAC,iBAAiB,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;IACrE,OAAO,CAAC,KAAK,CAAC,iBAAiB,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,GAAG,GAAG,CAAC,EAAE,CAAC,CAAC;IACvE,OAAO,CAAC,KAAK,CACX,iBAAiB,KAAK,CAAC,GAAG,CAAC,GAAG,cAAc,CAAC,MAAM,eAAe,WAAW,CAAC,MAAM,eAAe,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAC/H,CAAC;IACF,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,OAAO,CAAC,KAAK,CAAC,kBAAkB,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAElB,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAE/D,MAAM,MAAM,GAAG,IAAI,cAAc,CAAC,MAAM,CAAC,CAAC;IAE1C,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,GAAG,CAAC;YACf,iBAAiB,EAAE,MAAM,CAAC,gBAAgB;YAC1C,gBAAgB,EAAE,cAAc;YAChC,SAAS,EAAE,MAAM,CAAC,YAAY;YAC9B,kBAAkB,EAAE,MAAM,CAAC,YAAY;YACvC,0BAA0B,EAAE,MAAM,CAAC,mBAAmB;YACtD,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,cAAc,EAAE,MAAM,CAAC,cAAc;YACrC,UAAU,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU;YACzD,UAAU,EAAE,MAAM,CAAC,OAAO;YAC1B,0BAA0B,EAAE,qBAAqB;YACjD,YAAY,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS;SAC5D,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,CAAC;YACxE,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAClB,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,qEAAqE,CAAC,CAAC,CAAC;YACrG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,yEAAyE;AACzE,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IACnF,MAAM,MAAM,CAAC,eAAe,CAAC,CAAC;IAC9B,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;QAC5B,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,4BAA4B,CAAC,EAAE,GAAG,CAAC,CAAC;QACjE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/pipeline/constitution-compiler.d.ts

@@ -7,17 +7,29 @@
  * that faithfully implements the non-structural principles.
  */
 import type { LanguageModel, SystemModelMessage } from 'ai';
-import type { ToolAnnotation, CompiledRule, RepairContext, ListDefinition, TestScenario } from './types.js';
+import { z } from 'zod';
+import type { ToolAnnotation, CompiledRule, RepairContext, ListDefinition, TestScenario, RulePatchOp } from './types.js';
 export interface CompilerConfig {
     protectedPaths: string[];
+    allowedDirectory?: string;
 }
 export interface CompilationOutput {
     rules: CompiledRule[];
     listDefinitions: ListDefinition[];
 }
+/**
+ * Options for building the compiler response schema.
+ */
+export interface CompilerSchemaOptions {
+    /**
+     * When true, the `server` field in rule conditions is required (not optional).
+     * Used by per-server compilation to enforce server scoping at the schema level.
+     */
+    requireServer?: boolean;
+}
 /**
  * Formats tool annotations into a multi-line summary for LLM system prompts.
- * Each entry shows server/tool name, comment, side-effects flag, and per-argument roles.
+ * Each entry shows server/tool name, comment, and per-argument roles.
  * Used by both the constitution compiler and task-policy compiler prompts.
  */
 export declare function formatAnnotationsSummary(annotations: ToolAnnotation[]): string;
@@ -26,7 +38,18 @@ export declare function formatAnnotationsSummary(annotations: ToolAnnotation[]):
  * Contains: role preamble, constitution, annotations, structural invariants, and instructions.
  * This is the cacheable part — it stays the same across repair rounds.
  */
-export declare function buildCompilerSystemPrompt(constitutionText: string, annotations: ToolAnnotation[], config: CompilerConfig, handwrittenScenarios?: TestScenario[]): string;
+/**
+ * Options for customizing the compiler system prompt.
+ */
+export interface CompilerPromptOptions {
+    /**
+     * When set, appends a "Server Scope" section to the prompt telling the LLM
+     * it is compiling rules for this single server only. Every emitted rule must
+     * include `"server": [serverScope]` in its condition.
+     */
+    serverScope?: string;
+}
+export declare function buildCompilerSystemPrompt(constitutionText: string, annotations: ToolAnnotation[], config: CompilerConfig, handwrittenScenarios?: TestScenario[], promptOptions?: CompilerPromptOptions): string;
 /** Builds the repair instructions sent as the user prompt during repair rounds. */
 export declare function buildRepairInstructions(repairContext: RepairContext): string;
 export declare function compileConstitution(constitutionText: string, annotations: ToolAnnotation[], config: CompilerConfig, llm: LanguageModel, repairContext?: RepairContext, onProgress?: (message: string) => void, system?: string | SystemModelMessage): Promise<CompilationOutput>;
@@ -47,14 +70,18 @@ export declare function compileConstitution(constitutionText: string, annotation
 export declare class ConstitutionCompilerSession {
     private readonly systemPrompt;
     private readonly model;
+    private readonly serverNames;
+    private readonly toolNames;
     private readonly schema;
     private readonly history;
     private readonly schemaHint;
+    private readonly schemaOptions?;
     private turns;
     constructor(options: {
         system: string | SystemModelMessage;
         model: LanguageModel;
         annotations: ToolAnnotation[];
+        schemaOptions?: CompilerSchemaOptions;
     });
     /**
      * Initial compilation: sends the first user message and returns compiled rules.
@@ -72,8 +99,280 @@ export declare class ConstitutionCompilerSession {
     private callAndParse;
     /** Attempts to parse LLM output, returning a discriminated result. */
     private tryParse;
+    /**
+     * Point-fix repair: sends patch instructions instead of requesting a full
+     * recompilation. The LLM returns a small set of update/add/delete operations
+     * that are mechanically applied to the existing rules, avoiding oscillation.
+     *
+     * Falls back to full recompile if the patch cannot be applied.
+     */
+    repairPointFix(existingRules: CompiledRule[], repairContext: RepairContext, existingListDefinitions?: ListDefinition[], onProgress?: (message: string) => void): Promise<CompilationOutput>;
     private parseOutput;
 }
+/**
+ * Builds the Zod schema for patch responses. Reuses the same compiled rule
+ * field schemas as the full compilation schema, but wraps them in a
+ * discriminated union of update/add/delete operations.
+ */
+export declare function buildPatchResponseSchema(serverNames: [string, ...string[]], toolNames: [string, ...string[]], existingRuleNames: [string, ...string[]], options?: CompilerSchemaOptions): z.ZodObject<{
+    reasoning: z.ZodString;
+    operations: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        op: z.ZodLiteral<"update">;
+        ruleName: z.ZodEnum<{
+            [x: string]: string;
+        }>;
+        rule: z.ZodObject<{
+            name: z.ZodString;
+            description: z.ZodString;
+            principle: z.ZodString;
+            if: z.ZodObject<{
+                roles: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                    "read-path": "read-path";
+                    "write-path": "write-path";
+                    "delete-path": "delete-path";
+                    "write-history": "write-history";
+                    "delete-history": "delete-history";
+                    "fetch-url": "fetch-url";
+                    "git-remote-url": "git-remote-url";
+                    "github-owner": "github-owner";
+                    "github-repo": "github-repo";
+                    "branch-name": "branch-name";
+                    "commit-message": "commit-message";
+                    "email-address": "email-address";
+                    "email-body": "email-body";
+                    "share-permission": "share-permission";
+                    none: "none";
+                }>>>;
+                server: z.ZodArray<z.ZodEnum<{
+                    [x: string]: string;
+                }>> | z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                    [x: string]: string;
+                }>>>;
+                tool: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                    [x: string]: string;
+                }>>>;
+                paths: z.ZodOptional<z.ZodObject<{
+                    roles: z.ZodArray<z.ZodEnum<{
+                        "read-path": "read-path";
+                        "write-path": "write-path";
+                        "delete-path": "delete-path";
+                        "write-history": "write-history";
+                        "delete-history": "delete-history";
+                        "fetch-url": "fetch-url";
+                        "git-remote-url": "git-remote-url";
+                        "github-owner": "github-owner";
+                        "github-repo": "github-repo";
+                        "branch-name": "branch-name";
+                        "commit-message": "commit-message";
+                        "email-address": "email-address";
+                        "email-body": "email-body";
+                        "share-permission": "share-permission";
+                        none: "none";
+                    }>>;
+                    within: z.ZodString;
+                }, z.core.$strip>>;
+                domains: z.ZodOptional<z.ZodObject<{
+                    roles: z.ZodArray<z.ZodEnum<{
+                        "read-path": "read-path";
+                        "write-path": "write-path";
+                        "delete-path": "delete-path";
+                        "write-history": "write-history";
+                        "delete-history": "delete-history";
+                        "fetch-url": "fetch-url";
+                        "git-remote-url": "git-remote-url";
+                        "github-owner": "github-owner";
+                        "github-repo": "github-repo";
+                        "branch-name": "branch-name";
+                        "commit-message": "commit-message";
+                        "email-address": "email-address";
+                        "email-body": "email-body";
+                        "share-permission": "share-permission";
+                        none: "none";
+                    }>>;
+                    allowed: z.ZodArray<z.ZodString>;
+                }, z.core.$strip>>;
+                lists: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                    roles: z.ZodArray<z.ZodEnum<{
+                        "read-path": "read-path";
+                        "write-path": "write-path";
+                        "delete-path": "delete-path";
+                        "write-history": "write-history";
+                        "delete-history": "delete-history";
+                        "fetch-url": "fetch-url";
+                        "git-remote-url": "git-remote-url";
+                        "github-owner": "github-owner";
+                        "github-repo": "github-repo";
+                        "branch-name": "branch-name";
+                        "commit-message": "commit-message";
+                        "email-address": "email-address";
+                        "email-body": "email-body";
+                        "share-permission": "share-permission";
+                        none: "none";
+                    }>>;
+                    allowed: z.ZodArray<z.ZodString>;
+                    matchType: z.ZodEnum<{
+                        domains: "domains";
+                        emails: "emails";
+                        identifiers: "identifiers";
+                    }>;
+                }, z.core.$strip>>>;
+            }, z.core.$strip>;
+            then: z.ZodEnum<{
+                allow: "allow";
+                escalate: "escalate";
+            }>;
+            reason: z.ZodString;
+        }, z.core.$strip>;
+    }, z.core.$strip>, z.ZodObject<{
+        op: z.ZodLiteral<"add">;
+        afterRule: z.ZodOptional<z.ZodEnum<{
+            [x: string]: string;
+        }>>;
+        rule: z.ZodObject<{
+            name: z.ZodString;
+            description: z.ZodString;
+            principle: z.ZodString;
+            if: z.ZodObject<{
+                roles: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                    "read-path": "read-path";
+                    "write-path": "write-path";
+                    "delete-path": "delete-path";
+                    "write-history": "write-history";
+                    "delete-history": "delete-history";
+                    "fetch-url": "fetch-url";
+                    "git-remote-url": "git-remote-url";
+                    "github-owner": "github-owner";
+                    "github-repo": "github-repo";
+                    "branch-name": "branch-name";
+                    "commit-message": "commit-message";
+                    "email-address": "email-address";
+                    "email-body": "email-body";
+                    "share-permission": "share-permission";
+                    none: "none";
+                }>>>;
+                server: z.ZodArray<z.ZodEnum<{
+                    [x: string]: string;
+                }>> | z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                    [x: string]: string;
+                }>>>;
+                tool: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                    [x: string]: string;
+                }>>>;
+                paths: z.ZodOptional<z.ZodObject<{
+                    roles: z.ZodArray<z.ZodEnum<{
+                        "read-path": "read-path";
+                        "write-path": "write-path";
+                        "delete-path": "delete-path";
+                        "write-history": "write-history";
+                        "delete-history": "delete-history";
+                        "fetch-url": "fetch-url";
+                        "git-remote-url": "git-remote-url";
+                        "github-owner": "github-owner";
+                        "github-repo": "github-repo";
+                        "branch-name": "branch-name";
+                        "commit-message": "commit-message";
+                        "email-address": "email-address";
+                        "email-body": "email-body";
+                        "share-permission": "share-permission";
+                        none: "none";
+                    }>>;
+                    within: z.ZodString;
+                }, z.core.$strip>>;
+                domains: z.ZodOptional<z.ZodObject<{
+                    roles: z.ZodArray<z.ZodEnum<{
+                        "read-path": "read-path";
+                        "write-path": "write-path";
+                        "delete-path": "delete-path";
+                        "write-history": "write-history";
+                        "delete-history": "delete-history";
+                        "fetch-url": "fetch-url";
+                        "git-remote-url": "git-remote-url";
+                        "github-owner": "github-owner";
+                        "github-repo": "github-repo";
+                        "branch-name": "branch-name";
+                        "commit-message": "commit-message";
+                        "email-address": "email-address";
+                        "email-body": "email-body";
+                        "share-permission": "share-permission";
+                        none: "none";
+                    }>>;
+                    allowed: z.ZodArray<z.ZodString>;
+                }, z.core.$strip>>;
+                lists: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                    roles: z.ZodArray<z.ZodEnum<{
+                        "read-path": "read-path";
+                        "write-path": "write-path";
+                        "delete-path": "delete-path";
+                        "write-history": "write-history";
+                        "delete-history": "delete-history";
+                        "fetch-url": "fetch-url";
+                        "git-remote-url": "git-remote-url";
+                        "github-owner": "github-owner";
+                        "github-repo": "github-repo";
+                        "branch-name": "branch-name";
+                        "commit-message": "commit-message";
+                        "email-address": "email-address";
+                        "email-body": "email-body";
+                        "share-permission": "share-permission";
+                        none: "none";
+                    }>>;
+                    allowed: z.ZodArray<z.ZodString>;
+                    matchType: z.ZodEnum<{
+                        domains: "domains";
+                        emails: "emails";
+                        identifiers: "identifiers";
+                    }>;
+                }, z.core.$strip>>>;
+            }, z.core.$strip>;
+            then: z.ZodEnum<{
+                allow: "allow";
+                escalate: "escalate";
+            }>;
+            reason: z.ZodString;
+        }, z.core.$strip>;
+    }, z.core.$strip>, z.ZodObject<{
+        op: z.ZodLiteral<"delete">;
+        ruleName: z.ZodEnum<{
+            [x: string]: string;
+        }>;
+    }, z.core.$strip>], "op">>;
+    listDefinitions: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        type: z.ZodEnum<{
+            domains: "domains";
+            emails: "emails";
+            identifiers: "identifiers";
+        }>;
+        principle: z.ZodString;
+        generationPrompt: z.ZodString;
+        requiresMcp: z.ZodBoolean;
+        mcpServerHint: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>>;
+}, z.core.$strip>;
+/**
+ * Builds the user prompt for point-fix repair. Shows the existing rules in
+ * a compact numbered format, failed scenarios, and judge analysis. Instructs
+ * the LLM to emit a minimal patch rather than a full rule set.
+ */
+export declare function buildPointFixRepairInstructions(existingRules: CompiledRule[], repairContext: RepairContext): string;
+/**
+ * Mechanically applies patch operations to an existing rule list.
+ * Operations are applied sequentially in order. Returns the new rule list
+ * or an error if an operation references a nonexistent rule.
+ */
+export declare function applyRulePatch(existingRules: CompiledRule[], operations: RulePatchOp[]): {
+    ok: true;
+    rules: CompiledRule[];
+} | {
+    ok: false;
+    error: string;
+};
+/**
+ * Merges existing list definitions with new ones from a patch.
+ * Existing lists are always preserved; new lists (by name) are appended.
+ * Duplicates (same name as an existing list) are silently ignored.
+ */
+export declare function mergeListDefinitions(existing: ListDefinition[], patchLists: ListDefinition[] | undefined): ListDefinition[];
 export interface RuleValidationResult {
     valid: boolean;
     errors: string[];