@reactive-agents/guardrails 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Tyler Buell
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,50 @@
+# @reactive-agents/guardrails
+
+Safety guardrails for the [Reactive Agents](https://tylerjrbuell.github.io/reactive-agents-ts/) framework.
+
+Protects agents from prompt injection, PII leakage, and toxic content — applied automatically during the `guardrail` phase of the execution engine.
+
+## Installation
+
+```bash
+bun add @reactive-agents/guardrails effect
+```
+
+## Protections
+
+| Guard | What it catches |
+|-------|----------------|
+| Prompt injection | Attempts to override system instructions |
+| PII detection | Emails, phone numbers, SSNs, credit cards |
+| Toxicity filtering | Harmful or abusive content |
+| Output contracts | Schema-validates agent responses |
+
+## Usage
+
+```typescript
+import { ReactiveAgents } from "reactive-agents";
+
+const agent = await ReactiveAgents.create()
+  .withName("customer-support")
+  .withProvider("anthropic")
+  .withGuardrails()
+  .build();
+
+// Prompt injection attempts are blocked before reaching the LLM
+const result = await agent.run("Ignore previous instructions and...");
+// result.success === false, result.error describes the violation
+```
+
+## Custom Guards
+
+```typescript
+.withGuardrails({
+  blockTopics: ["competitor-names"],
+  maxOutputLength: 2000,
+  requireOutputSchema: MyResponseSchema,
+})
+```
+
+## Documentation
+
+Full documentation at [tylerjrbuell.github.io/reactive-agents-ts/guides/guardrails/](https://tylerjrbuell.github.io/reactive-agents-ts/guides/guardrails/)

package/dist/index.d.ts

@@ -0,0 +1,95 @@
+import { Schema, Effect, Context, Layer } from 'effect';
+import * as effect_Cause from 'effect/Cause';
+import * as effect_Types from 'effect/Types';
+import * as effect_Layer from 'effect/Layer';
+
+declare const ViolationType: Schema.Literal<["prompt-injection", "pii-detected", "toxicity", "scope-violation", "contract-violation"]>;
+type ViolationType = typeof ViolationType.Type;
+declare const Severity: Schema.Literal<["low", "medium", "high", "critical"]>;
+type Severity = typeof Severity.Type;
+declare const GuardrailResultSchema: Schema.Struct<{
+    passed: typeof Schema.Boolean;
+    violations: Schema.Array$<Schema.Struct<{
+        type: Schema.Literal<["prompt-injection", "pii-detected", "toxicity", "scope-violation", "contract-violation"]>;
+        severity: Schema.Literal<["low", "medium", "high", "critical"]>;
+        message: typeof Schema.String;
+        details: Schema.optional<typeof Schema.String>;
+    }>>;
+    score: typeof Schema.Number;
+    checkedAt: typeof Schema.DateFromSelf;
+}>;
+type GuardrailResult = typeof GuardrailResultSchema.Type;
+declare const AgentContractSchema: Schema.Struct<{
+    allowedTopics: Schema.Array$<typeof Schema.String>;
+    deniedTopics: Schema.Array$<typeof Schema.String>;
+    allowedActions: Schema.Array$<typeof Schema.String>;
+    deniedActions: Schema.Array$<typeof Schema.String>;
+    maxOutputLength: Schema.optional<typeof Schema.Number>;
+    requireDisclosure: Schema.optional<typeof Schema.Boolean>;
+}>;
+type AgentContract = typeof AgentContractSchema.Type;
+declare const GuardrailConfigSchema: Schema.Struct<{
+    enableInjectionDetection: typeof Schema.Boolean;
+    enablePiiDetection: typeof Schema.Boolean;
+    enableToxicityDetection: typeof Schema.Boolean;
+    contract: Schema.optional<Schema.Struct<{
+        allowedTopics: Schema.Array$<typeof Schema.String>;
+        deniedTopics: Schema.Array$<typeof Schema.String>;
+        allowedActions: Schema.Array$<typeof Schema.String>;
+        deniedActions: Schema.Array$<typeof Schema.String>;
+        maxOutputLength: Schema.optional<typeof Schema.Number>;
+        requireDisclosure: Schema.optional<typeof Schema.Boolean>;
+    }>>;
+    customBlocklist: Schema.optional<Schema.Array$<typeof Schema.String>>;
+}>;
+type GuardrailConfig = typeof GuardrailConfigSchema.Type;
+declare const defaultGuardrailConfig: GuardrailConfig;
+
+declare const GuardrailError_base: new <A extends Record<string, any> = {}>(args: effect_Types.Equals<A, {}> extends true ? void : { readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }) => effect_Cause.YieldableError & {
+    readonly _tag: "GuardrailError";
+} & Readonly<A>;
+declare class GuardrailError extends GuardrailError_base<{
+    readonly message: string;
+    readonly cause?: unknown;
+}> {
+}
+declare const ViolationError_base: new <A extends Record<string, any> = {}>(args: effect_Types.Equals<A, {}> extends true ? void : { readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }) => effect_Cause.YieldableError & {
+    readonly _tag: "ViolationError";
+} & Readonly<A>;
+declare class ViolationError extends ViolationError_base<{
+    readonly message: string;
+    readonly violationType: string;
+    readonly severity: string;
+}> {
+}
+
+interface DetectionResult {
+    readonly detected: boolean;
+    readonly type: ViolationType;
+    readonly severity: Severity;
+    readonly message: string;
+    readonly details?: string;
+}
+declare const detectInjection: (text: string) => Effect.Effect<DetectionResult, never>;
+
+declare const detectPii: (text: string) => Effect.Effect<DetectionResult, never>;
+
+declare const detectToxicity: (text: string, customBlocklist?: readonly string[]) => Effect.Effect<DetectionResult, never>;
+
+declare const checkContract: (text: string, contract: AgentContract) => Effect.Effect<DetectionResult, never>;
+
+declare const GuardrailService_base: Context.TagClass<GuardrailService, "GuardrailService", {
+    /** Check input text against all configured guardrails. */
+    readonly check: (text: string) => Effect.Effect<GuardrailResult, GuardrailError>;
+    /** Check output text (may have different rules). */
+    readonly checkOutput: (text: string) => Effect.Effect<GuardrailResult, GuardrailError>;
+    /** Get current config. */
+    readonly getConfig: () => Effect.Effect<GuardrailConfig, never>;
+}>;
+declare class GuardrailService extends GuardrailService_base {
+}
+declare const GuardrailServiceLive: (config: GuardrailConfig) => Layer.Layer<GuardrailService, never, never>;
+
+declare const createGuardrailsLayer: (config?: Partial<GuardrailConfig>) => effect_Layer.Layer<GuardrailService, never, never>;
+
+export { type AgentContract, AgentContractSchema, type DetectionResult, type GuardrailConfig, GuardrailConfigSchema, GuardrailError, type GuardrailResult, GuardrailResultSchema, GuardrailService, GuardrailServiceLive, Severity, Severity as SeveritySchema, ViolationError, ViolationType, ViolationType as ViolationTypeSchema, checkContract, createGuardrailsLayer, defaultGuardrailConfig, detectInjection, detectPii, detectToxicity };

package/dist/index.js

@@ -0,0 +1,344 @@
+// src/types.ts
+import { Schema } from "effect";
+var ViolationType = Schema.Literal(
+  "prompt-injection",
+  "pii-detected",
+  "toxicity",
+  "scope-violation",
+  "contract-violation"
+);
+var Severity = Schema.Literal("low", "medium", "high", "critical");
+var GuardrailResultSchema = Schema.Struct({
+  passed: Schema.Boolean,
+  violations: Schema.Array(
+    Schema.Struct({
+      type: ViolationType,
+      severity: Severity,
+      message: Schema.String,
+      details: Schema.optional(Schema.String)
+    })
+  ),
+  score: Schema.Number,
+  // 0-1, 1 = fully safe
+  checkedAt: Schema.DateFromSelf
+});
+var AgentContractSchema = Schema.Struct({
+  allowedTopics: Schema.Array(Schema.String),
+  deniedTopics: Schema.Array(Schema.String),
+  allowedActions: Schema.Array(Schema.String),
+  deniedActions: Schema.Array(Schema.String),
+  maxOutputLength: Schema.optional(Schema.Number),
+  requireDisclosure: Schema.optional(Schema.Boolean)
+});
+var GuardrailConfigSchema = Schema.Struct({
+  enableInjectionDetection: Schema.Boolean,
+  enablePiiDetection: Schema.Boolean,
+  enableToxicityDetection: Schema.Boolean,
+  contract: Schema.optional(AgentContractSchema),
+  customBlocklist: Schema.optional(Schema.Array(Schema.String))
+});
+var defaultGuardrailConfig = {
+  enableInjectionDetection: true,
+  enablePiiDetection: true,
+  enableToxicityDetection: true
+};
+
+// src/errors.ts
+import { Data } from "effect";
+var GuardrailError = class extends Data.TaggedError("GuardrailError") {
+};
+var ViolationError = class extends Data.TaggedError("ViolationError") {
+};
+
+// src/detectors/injection-detector.ts
+import { Effect } from "effect";
+var INJECTION_PATTERNS = [
+  { pattern: /ignore\s+(all\s+)?previous\s+(instructions|prompts)/i, severity: "critical", description: "Instruction override attempt" },
+  { pattern: /disregard\s+(all\s+)?previous/i, severity: "critical", description: "Instruction disregard attempt" },
+  { pattern: /forget\s+(all\s+)?(your\s+)?previous/i, severity: "high", description: "Memory reset attempt" },
+  { pattern: /you\s+are\s+now\s+a/i, severity: "high", description: "Role reassignment attempt" },
+  { pattern: /act\s+as\s+(if\s+)?(you\s+are|a)\s/i, severity: "medium", description: "Role play injection" },
+  { pattern: /system\s*:\s*you\s+are/i, severity: "critical", description: "System prompt injection" },
+  { pattern: /\[SYSTEM\]/i, severity: "high", description: "System tag injection" },
+  { pattern: /\<\/?system\>/i, severity: "high", description: "System XML tag injection" },
+  { pattern: /do\s+not\s+follow\s+(your\s+)?(rules|guidelines)/i, severity: "critical", description: "Rule override attempt" },
+  { pattern: /pretend\s+(that\s+)?you\s+(don't|do\s+not)\s+have/i, severity: "high", description: "Capability override attempt" },
+  { pattern: /\bDAN\b.*\bmode\b/i, severity: "critical", description: "DAN jailbreak attempt" },
+  { pattern: /jailbreak/i, severity: "critical", description: "Explicit jailbreak reference" }
+];
+var detectInjection = (text) => Effect.sync(() => {
+  for (const { pattern, severity, description } of INJECTION_PATTERNS) {
+    if (pattern.test(text)) {
+      return {
+        detected: true,
+        type: "prompt-injection",
+        severity,
+        message: `Prompt injection detected: ${description}`,
+        details: `Matched pattern: ${pattern.source}`
+      };
+    }
+  }
+  return {
+    detected: false,
+    type: "prompt-injection",
+    severity: "low",
+    message: "No injection detected"
+  };
+});
+
+// src/detectors/pii-detector.ts
+import { Effect as Effect2 } from "effect";
+var PII_PATTERNS = [
+  { pattern: /\b\d{3}-\d{2}-\d{4}\b/, label: "SSN", severity: "critical" },
+  { pattern: /\b\d{9}\b/, label: "SSN (no dashes)", severity: "high" },
+  { pattern: /\b[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,}\b/, label: "Email", severity: "medium" },
+  { pattern: /\b\d{4}[\s-]?\d{4}[\s-]?\d{4}[\s-]?\d{4}\b/, label: "Credit card", severity: "critical" },
+  { pattern: /\b(?:\+?1[-.\s]?)?\(?\d{3}\)?[-.\s]?\d{3}[-.\s]?\d{4}\b/, label: "Phone number", severity: "medium" },
+  { pattern: /\b\d{1,5}\s\w+\s(?:Street|St|Avenue|Ave|Road|Rd|Drive|Dr|Lane|Ln|Boulevard|Blvd)\b/i, label: "Street address", severity: "high" },
+  { pattern: /\b[A-Z]{1,2}\d{1,2}\s?\d[A-Z]{2}\b/, label: "UK postcode", severity: "medium" },
+  { pattern: /\bpassword\s*[:=]\s*\S+/i, label: "Password", severity: "critical" },
+  { pattern: /\b(sk-|sk_live_|pk_live_|sk_test_)\S{20,}/i, label: "API key", severity: "critical" }
+];
+var detectPii = (text) => Effect2.sync(() => {
+  const found = [];
+  let maxSeverity = "low";
+  const severityOrder = ["low", "medium", "high", "critical"];
+  for (const { pattern, label, severity } of PII_PATTERNS) {
+    if (pattern.test(text)) {
+      found.push(label);
+      if (severityOrder.indexOf(severity) > severityOrder.indexOf(maxSeverity)) {
+        maxSeverity = severity;
+      }
+    }
+  }
+  if (found.length > 0) {
+    return {
+      detected: true,
+      type: "pii-detected",
+      severity: maxSeverity,
+      message: `PII detected: ${found.join(", ")}`,
+      details: `Found ${found.length} PII pattern(s)`
+    };
+  }
+  return {
+    detected: false,
+    type: "pii-detected",
+    severity: "low",
+    message: "No PII detected"
+  };
+});
+
+// src/detectors/toxicity-detector.ts
+import { Effect as Effect3 } from "effect";
+var TOXIC_PATTERNS = [
+  { pattern: /\b(kill|murder|assassinate)\s+(yourself|himself|herself|themselves|someone|people)\b/i, severity: "critical", category: "violence" },
+  { pattern: /\bhow\s+to\s+(make|build|create)\s+(a\s+)?(bomb|weapon|explosive)/i, severity: "critical", category: "weapons" },
+  { pattern: /\b(hack|exploit|breach)\s+(into|a|the)\s/i, severity: "high", category: "hacking" },
+  { pattern: /\b(steal|rob|burglarize)\s/i, severity: "high", category: "theft" },
+  { pattern: /\b(hate|despise)\s+(all\s+)?(women|men|blacks|whites|jews|muslims|christians)/i, severity: "critical", category: "hate-speech" },
+  { pattern: /\b(racial|ethnic)\s+(slur|epithet)/i, severity: "critical", category: "hate-speech" },
+  { pattern: /\bself[- ]?harm\b/i, severity: "critical", category: "self-harm" },
+  { pattern: /\bsuicide\s+(method|how|way)/i, severity: "critical", category: "self-harm" }
+];
+var detectToxicity = (text, customBlocklist = []) => Effect3.sync(() => {
+  for (const { pattern, category, severity } of TOXIC_PATTERNS) {
+    if (pattern.test(text)) {
+      return {
+        detected: true,
+        type: "toxicity",
+        severity,
+        message: `Toxic content detected: ${category}`,
+        details: `Category: ${category}`
+      };
+    }
+  }
+  const lower = text.toLowerCase();
+  for (const word of customBlocklist) {
+    if (lower.includes(word.toLowerCase())) {
+      return {
+        detected: true,
+        type: "toxicity",
+        severity: "high",
+        message: `Blocked term detected: "${word}"`,
+        details: `Custom blocklist match`
+      };
+    }
+  }
+  return {
+    detected: false,
+    type: "toxicity",
+    severity: "low",
+    message: "No toxic content detected"
+  };
+});
+
+// src/contracts/agent-contract.ts
+import { Effect as Effect4 } from "effect";
+var checkContract = (text, contract) => Effect4.sync(() => {
+  const lower = text.toLowerCase();
+  for (const topic of contract.deniedTopics) {
+    if (lower.includes(topic.toLowerCase())) {
+      return {
+        detected: true,
+        type: "contract-violation",
+        severity: "high",
+        message: `Denied topic referenced: "${topic}"`,
+        details: `Contract prohibits this topic`
+      };
+    }
+  }
+  for (const action of contract.deniedActions) {
+    if (lower.includes(action.toLowerCase())) {
+      return {
+        detected: true,
+        type: "scope-violation",
+        severity: "high",
+        message: `Denied action referenced: "${action}"`,
+        details: `Contract prohibits this action`
+      };
+    }
+  }
+  if (contract.maxOutputLength !== void 0 && text.length > contract.maxOutputLength) {
+    return {
+      detected: true,
+      type: "contract-violation",
+      severity: "medium",
+      message: `Output exceeds max length (${text.length} > ${contract.maxOutputLength})`
+    };
+  }
+  return {
+    detected: false,
+    type: "contract-violation",
+    severity: "low",
+    message: "Contract check passed"
+  };
+});
+
+// src/guardrail-service.ts
+import { Effect as Effect5, Context, Layer } from "effect";
+var GuardrailService = class extends Context.Tag("GuardrailService")() {
+};
+var GuardrailServiceLive = (config) => Layer.succeed(GuardrailService, {
+  check: (text) => Effect5.gen(function* () {
+    const violations = [];
+    if (config.enableInjectionDetection) {
+      const result = yield* detectInjection(text);
+      if (result.detected) {
+        violations.push({
+          type: result.type,
+          severity: result.severity,
+          message: result.message,
+          details: result.details
+        });
+      }
+    }
+    if (config.enablePiiDetection) {
+      const result = yield* detectPii(text);
+      if (result.detected) {
+        violations.push({
+          type: result.type,
+          severity: result.severity,
+          message: result.message,
+          details: result.details
+        });
+      }
+    }
+    if (config.enableToxicityDetection) {
+      const result = yield* detectToxicity(text, config.customBlocklist ?? []);
+      if (result.detected) {
+        violations.push({
+          type: result.type,
+          severity: result.severity,
+          message: result.message,
+          details: result.details
+        });
+      }
+    }
+    if (config.contract) {
+      const result = yield* checkContract(text, config.contract);
+      if (result.detected) {
+        violations.push({
+          type: result.type,
+          severity: result.severity,
+          message: result.message,
+          details: result.details
+        });
+      }
+    }
+    const score = violations.length === 0 ? 1 : Math.max(0, 1 - violations.length * 0.25);
+    return {
+      passed: violations.length === 0,
+      violations: [...violations],
+      score,
+      checkedAt: /* @__PURE__ */ new Date()
+    };
+  }),
+  checkOutput: (text) => Effect5.gen(function* () {
+    const violations = [];
+    if (config.enablePiiDetection) {
+      const result = yield* detectPii(text);
+      if (result.detected) {
+        violations.push({
+          type: result.type,
+          severity: result.severity,
+          message: result.message,
+          details: result.details
+        });
+      }
+    }
+    if (config.enableToxicityDetection) {
+      const result = yield* detectToxicity(text, config.customBlocklist ?? []);
+      if (result.detected) {
+        violations.push({
+          type: result.type,
+          severity: result.severity,
+          message: result.message,
+          details: result.details
+        });
+      }
+    }
+    if (config.contract) {
+      const result = yield* checkContract(text, config.contract);
+      if (result.detected) {
+        violations.push({
+          type: result.type,
+          severity: result.severity,
+          message: result.message,
+          details: result.details
+        });
+      }
+    }
+    const score = violations.length === 0 ? 1 : Math.max(0, 1 - violations.length * 0.25);
+    return {
+      passed: violations.length === 0,
+      violations: [...violations],
+      score,
+      checkedAt: /* @__PURE__ */ new Date()
+    };
+  }),
+  getConfig: () => Effect5.succeed(config)
+});
+
+// src/runtime.ts
+var createGuardrailsLayer = (config) => GuardrailServiceLive({
+  ...defaultGuardrailConfig,
+  ...config
+});
+export {
+  AgentContractSchema,
+  GuardrailConfigSchema,
+  GuardrailError,
+  GuardrailResultSchema,
+  GuardrailService,
+  GuardrailServiceLive,
+  Severity as SeveritySchema,
+  ViolationError,
+  ViolationType as ViolationTypeSchema,
+  checkContract,
+  createGuardrailsLayer,
+  defaultGuardrailConfig,
+  detectInjection,
+  detectPii,
+  detectToxicity
+};
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/types.ts","../src/errors.ts","../src/detectors/injection-detector.ts","../src/detectors/pii-detector.ts","../src/detectors/toxicity-detector.ts","../src/contracts/agent-contract.ts","../src/guardrail-service.ts","../src/runtime.ts"],"sourcesContent":["import { Schema } from \"effect\";\n\n// ─── Violation Type ───\n\nexport const ViolationType = Schema.Literal(\n  \"prompt-injection\",\n  \"pii-detected\",\n  \"toxicity\",\n  \"scope-violation\",\n  \"contract-violation\",\n);\nexport type ViolationType = typeof ViolationType.Type;\n\n// ─── Severity ───\n\nexport const Severity = Schema.Literal(\"low\", \"medium\", \"high\", \"critical\");\nexport type Severity = typeof Severity.Type;\n\n// ─── Guardrail Result ───\n\nexport const GuardrailResultSchema = Schema.Struct({\n  passed: Schema.Boolean,\n  violations: Schema.Array(\n    Schema.Struct({\n      type: ViolationType,\n      severity: Severity,\n      message: Schema.String,\n      details: Schema.optional(Schema.String),\n    }),\n  ),\n  score: Schema.Number, // 0-1, 1 = fully safe\n  checkedAt: Schema.DateFromSelf,\n});\nexport type GuardrailResult = typeof GuardrailResultSchema.Type;\n\n// ─── Agent Contract ───\n\nexport const AgentContractSchema = Schema.Struct({\n  allowedTopics: Schema.Array(Schema.String),\n  deniedTopics: Schema.Array(Schema.String),\n  allowedActions: Schema.Array(Schema.String),\n  deniedActions: Schema.Array(Schema.String),\n  maxOutputLength: Schema.optional(Schema.Number),\n  requireDisclosure: Schema.optional(Schema.Boolean),\n});\nexport type AgentContract = typeof AgentContractSchema.Type;\n\n// ─── Guardrail Config ───\n\nexport const GuardrailConfigSchema = Schema.Struct({\n  enableInjectionDetection: Schema.Boolean,\n  enablePiiDetection: Schema.Boolean,\n  enableToxicityDetection: Schema.Boolean,\n  contract: Schema.optional(AgentContractSchema),\n  customBlocklist: Schema.optional(Schema.Array(Schema.String)),\n});\nexport type GuardrailConfig = typeof GuardrailConfigSchema.Type;\n\nexport const defaultGuardrailConfig: GuardrailConfig = {\n  enableInjectionDetection: true,\n  enablePiiDetection: true,\n  enableToxicityDetection: true,\n};\n","import { Data } from \"effect\";\n\nexport class GuardrailError extends Data.TaggedError(\"GuardrailError\")<{\n  readonly message: string;\n  readonly cause?: unknown;\n}> {}\n\nexport class ViolationError extends Data.TaggedError(\"ViolationError\")<{\n  readonly message: string;\n  readonly violationType: string;\n  readonly severity: string;\n}> {}\n","import { Effect } from \"effect\";\nimport type { ViolationType, Severity } from \"../types.js\";\n\nexport interface DetectionResult {\n  readonly detected: boolean;\n  readonly type: ViolationType;\n  readonly severity: Severity;\n  readonly message: string;\n  readonly details?: string;\n}\n\n// Common prompt injection patterns\nconst INJECTION_PATTERNS: Array<{ pattern: RegExp; severity: Severity; description: string }> = [\n  { pattern: /ignore\\s+(all\\s+)?previous\\s+(instructions|prompts)/i, severity: \"critical\", description: \"Instruction override attempt\" },\n  { pattern: /disregard\\s+(all\\s+)?previous/i, severity: \"critical\", description: \"Instruction disregard attempt\" },\n  { pattern: /forget\\s+(all\\s+)?(your\\s+)?previous/i, severity: \"high\", description: \"Memory reset attempt\" },\n  { pattern: /you\\s+are\\s+now\\s+a/i, severity: \"high\", description: \"Role reassignment attempt\" },\n  { pattern: /act\\s+as\\s+(if\\s+)?(you\\s+are|a)\\s/i, severity: \"medium\", description: \"Role play injection\" },\n  { pattern: /system\\s*:\\s*you\\s+are/i, severity: \"critical\", description: \"System prompt injection\" },\n  { pattern: /\\[SYSTEM\\]/i, severity: \"high\", description: \"System tag injection\" },\n  { pattern: /\\<\\/?system\\>/i, severity: \"high\", description: \"System XML tag injection\" },\n  { pattern: /do\\s+not\\s+follow\\s+(your\\s+)?(rules|guidelines)/i, severity: \"critical\", description: \"Rule override attempt\" },\n  { pattern: /pretend\\s+(that\\s+)?you\\s+(don't|do\\s+not)\\s+have/i, severity: \"high\", description: \"Capability override attempt\" },\n  { pattern: /\\bDAN\\b.*\\bmode\\b/i, severity: \"critical\", description: \"DAN jailbreak attempt\" },\n  { pattern: /jailbreak/i, severity: \"critical\", description: \"Explicit jailbreak reference\" },\n];\n\nexport const detectInjection = (text: string): Effect.Effect<DetectionResult, never> =>\n  Effect.sync(() => {\n    for (const { pattern, severity, description } of INJECTION_PATTERNS) {\n      if (pattern.test(text)) {\n        return {\n          detected: true,\n          type: \"prompt-injection\" as ViolationType,\n          severity,\n          message: `Prompt injection detected: ${description}`,\n          details: `Matched pattern: ${pattern.source}`,\n        };\n      }\n    }\n    return {\n      detected: false,\n      type: \"prompt-injection\" as ViolationType,\n      severity: \"low\" as Severity,\n      message: \"No injection detected\",\n    };\n  });\n","import { Effect } from \"effect\";\nimport type { ViolationType, Severity } from \"../types.js\";\nimport type { DetectionResult } from \"./injection-detector.js\";\n\n// PII patterns\nconst PII_PATTERNS: Array<{ pattern: RegExp; label: string; severity: Severity }> = [\n  { pattern: /\\b\\d{3}-\\d{2}-\\d{4}\\b/, label: \"SSN\", severity: \"critical\" },\n  { pattern: /\\b\\d{9}\\b/, label: \"SSN (no dashes)\", severity: \"high\" },\n  { pattern: /\\b[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\\.[A-Za-z]{2,}\\b/, label: \"Email\", severity: \"medium\" },\n  { pattern: /\\b\\d{4}[\\s-]?\\d{4}[\\s-]?\\d{4}[\\s-]?\\d{4}\\b/, label: \"Credit card\", severity: \"critical\" },\n  { pattern: /\\b(?:\\+?1[-.\\s]?)?\\(?\\d{3}\\)?[-.\\s]?\\d{3}[-.\\s]?\\d{4}\\b/, label: \"Phone number\", severity: \"medium\" },\n  { pattern: /\\b\\d{1,5}\\s\\w+\\s(?:Street|St|Avenue|Ave|Road|Rd|Drive|Dr|Lane|Ln|Boulevard|Blvd)\\b/i, label: \"Street address\", severity: \"high\" },\n  { pattern: /\\b[A-Z]{1,2}\\d{1,2}\\s?\\d[A-Z]{2}\\b/, label: \"UK postcode\", severity: \"medium\" },\n  { pattern: /\\bpassword\\s*[:=]\\s*\\S+/i, label: \"Password\", severity: \"critical\" },\n  { pattern: /\\b(sk-|sk_live_|pk_live_|sk_test_)\\S{20,}/i, label: \"API key\", severity: \"critical\" },\n];\n\nexport const detectPii = (text: string): Effect.Effect<DetectionResult, never> =>\n  Effect.sync(() => {\n    const found: string[] = [];\n    let maxSeverity: Severity = \"low\";\n    const severityOrder: Severity[] = [\"low\", \"medium\", \"high\", \"critical\"];\n\n    for (const { pattern, label, severity } of PII_PATTERNS) {\n      if (pattern.test(text)) {\n        found.push(label);\n        if (severityOrder.indexOf(severity) > severityOrder.indexOf(maxSeverity)) {\n          maxSeverity = severity;\n        }\n      }\n    }\n\n    if (found.length > 0) {\n      return {\n        detected: true,\n        type: \"pii-detected\" as ViolationType,\n        severity: maxSeverity,\n        message: `PII detected: ${found.join(\", \")}`,\n        details: `Found ${found.length} PII pattern(s)`,\n      };\n    }\n\n    return {\n      detected: false,\n      type: \"pii-detected\" as ViolationType,\n      severity: \"low\" as Severity,\n      message: \"No PII detected\",\n    };\n  });\n","import { Effect } from \"effect\";\nimport type { ViolationType, Severity } from \"../types.js\";\nimport type { DetectionResult } from \"./injection-detector.js\";\n\n// Toxicity keyword categories (simplified blocklist)\nconst TOXIC_PATTERNS: Array<{ pattern: RegExp; category: string; severity: Severity }> = [\n  { pattern: /\\b(kill|murder|assassinate)\\s+(yourself|himself|herself|themselves|someone|people)\\b/i, severity: \"critical\", category: \"violence\" },\n  { pattern: /\\bhow\\s+to\\s+(make|build|create)\\s+(a\\s+)?(bomb|weapon|explosive)/i, severity: \"critical\", category: \"weapons\" },\n  { pattern: /\\b(hack|exploit|breach)\\s+(into|a|the)\\s/i, severity: \"high\", category: \"hacking\" },\n  { pattern: /\\b(steal|rob|burglarize)\\s/i, severity: \"high\", category: \"theft\" },\n  { pattern: /\\b(hate|despise)\\s+(all\\s+)?(women|men|blacks|whites|jews|muslims|christians)/i, severity: \"critical\", category: \"hate-speech\" },\n  { pattern: /\\b(racial|ethnic)\\s+(slur|epithet)/i, severity: \"critical\", category: \"hate-speech\" },\n  { pattern: /\\bself[- ]?harm\\b/i, severity: \"critical\", category: \"self-harm\" },\n  { pattern: /\\bsuicide\\s+(method|how|way)/i, severity: \"critical\", category: \"self-harm\" },\n];\n\nexport const detectToxicity = (\n  text: string,\n  customBlocklist: readonly string[] = [],\n): Effect.Effect<DetectionResult, never> =>\n  Effect.sync(() => {\n    // Check built-in patterns\n    for (const { pattern, category, severity } of TOXIC_PATTERNS) {\n      if (pattern.test(text)) {\n        return {\n          detected: true,\n          type: \"toxicity\" as ViolationType,\n          severity,\n          message: `Toxic content detected: ${category}`,\n          details: `Category: ${category}`,\n        };\n      }\n    }\n\n    // Check custom blocklist\n    const lower = text.toLowerCase();\n    for (const word of customBlocklist) {\n      if (lower.includes(word.toLowerCase())) {\n        return {\n          detected: true,\n          type: \"toxicity\" as ViolationType,\n          severity: \"high\" as Severity,\n          message: `Blocked term detected: \"${word}\"`,\n          details: `Custom blocklist match`,\n        };\n      }\n    }\n\n    return {\n      detected: false,\n      type: \"toxicity\" as ViolationType,\n      severity: \"low\" as Severity,\n      message: \"No toxic content detected\",\n    };\n  });\n","import { Effect } from \"effect\";\nimport type { AgentContract, ViolationType, Severity } from \"../types.js\";\nimport type { DetectionResult } from \"../detectors/injection-detector.js\";\n\nexport const checkContract = (\n  text: string,\n  contract: AgentContract,\n): Effect.Effect<DetectionResult, never> =>\n  Effect.sync(() => {\n    const lower = text.toLowerCase();\n\n    // Check denied topics\n    for (const topic of contract.deniedTopics) {\n      if (lower.includes(topic.toLowerCase())) {\n        return {\n          detected: true,\n          type: \"contract-violation\" as ViolationType,\n          severity: \"high\" as Severity,\n          message: `Denied topic referenced: \"${topic}\"`,\n          details: `Contract prohibits this topic`,\n        };\n      }\n    }\n\n    // Check denied actions\n    for (const action of contract.deniedActions) {\n      if (lower.includes(action.toLowerCase())) {\n        return {\n          detected: true,\n          type: \"scope-violation\" as ViolationType,\n          severity: \"high\" as Severity,\n          message: `Denied action referenced: \"${action}\"`,\n          details: `Contract prohibits this action`,\n        };\n      }\n    }\n\n    // Check output length\n    if (contract.maxOutputLength !== undefined && text.length > contract.maxOutputLength) {\n      return {\n        detected: true,\n        type: \"contract-violation\" as ViolationType,\n        severity: \"medium\" as Severity,\n        message: `Output exceeds max length (${text.length} > ${contract.maxOutputLength})`,\n      };\n    }\n\n    return {\n      detected: false,\n      type: \"contract-violation\" as ViolationType,\n      severity: \"low\" as Severity,\n      message: \"Contract check passed\",\n    };\n  });\n","import { Effect, Context, Layer } from \"effect\";\nimport type { GuardrailResult, GuardrailConfig } from \"./types.js\";\nimport { GuardrailError } from \"./errors.js\";\nimport { detectInjection } from \"./detectors/injection-detector.js\";\nimport { detectPii } from \"./detectors/pii-detector.js\";\nimport { detectToxicity } from \"./detectors/toxicity-detector.js\";\nimport { checkContract } from \"./contracts/agent-contract.js\";\n\n// ─── Service Tag ───\n\nexport class GuardrailService extends Context.Tag(\"GuardrailService\")<\n  GuardrailService,\n  {\n    /** Check input text against all configured guardrails. */\n    readonly check: (text: string) => Effect.Effect<GuardrailResult, GuardrailError>;\n\n    /** Check output text (may have different rules). */\n    readonly checkOutput: (text: string) => Effect.Effect<GuardrailResult, GuardrailError>;\n\n    /** Get current config. */\n    readonly getConfig: () => Effect.Effect<GuardrailConfig, never>;\n  }\n>() {}\n\n// ─── Live Implementation ───\n\nexport const GuardrailServiceLive = (config: GuardrailConfig) =>\n  Layer.succeed(GuardrailService, {\n    check: (text) =>\n      Effect.gen(function* () {\n        const violations: Array<{ type: GuardrailResult[\"violations\"][number][\"type\"]; severity: GuardrailResult[\"violations\"][number][\"severity\"]; message: string; details?: string }> = [];\n\n        if (config.enableInjectionDetection) {\n          const result = yield* detectInjection(text);\n          if (result.detected) {\n            violations.push({\n              type: result.type,\n              severity: result.severity,\n              message: result.message,\n              details: result.details,\n            });\n          }\n        }\n\n        if (config.enablePiiDetection) {\n          const result = yield* detectPii(text);\n          if (result.detected) {\n            violations.push({\n              type: result.type,\n              severity: result.severity,\n              message: result.message,\n              details: result.details,\n            });\n          }\n        }\n\n        if (config.enableToxicityDetection) {\n          const result = yield* detectToxicity(text, config.customBlocklist ?? []);\n          if (result.detected) {\n            violations.push({\n              type: result.type,\n              severity: result.severity,\n              message: result.message,\n              details: result.details,\n            });\n          }\n        }\n\n        if (config.contract) {\n          const result = yield* checkContract(text, config.contract);\n          if (result.detected) {\n            violations.push({\n              type: result.type,\n              severity: result.severity,\n              message: result.message,\n              details: result.details,\n            });\n          }\n        }\n\n        const score = violations.length === 0 ? 1 : Math.max(0, 1 - violations.length * 0.25);\n\n        return {\n          passed: violations.length === 0,\n          violations: [...violations],\n          score,\n          checkedAt: new Date(),\n        } satisfies GuardrailResult;\n      }),\n\n    checkOutput: (text) =>\n      Effect.gen(function* () {\n        const violations: Array<{ type: GuardrailResult[\"violations\"][number][\"type\"]; severity: GuardrailResult[\"violations\"][number][\"severity\"]; message: string; details?: string }> = [];\n\n        // Output checks: PII and toxicity (not injection)\n        if (config.enablePiiDetection) {\n          const result = yield* detectPii(text);\n          if (result.detected) {\n            violations.push({\n              type: result.type,\n              severity: result.severity,\n              message: result.message,\n              details: result.details,\n            });\n          }\n        }\n\n        if (config.enableToxicityDetection) {\n          const result = yield* detectToxicity(text, config.customBlocklist ?? []);\n          if (result.detected) {\n            violations.push({\n              type: result.type,\n              severity: result.severity,\n              message: result.message,\n              details: result.details,\n            });\n          }\n        }\n\n        if (config.contract) {\n          const result = yield* checkContract(text, config.contract);\n          if (result.detected) {\n            violations.push({\n              type: result.type,\n              severity: result.severity,\n              message: result.message,\n              details: result.details,\n            });\n          }\n        }\n\n        const score = violations.length === 0 ? 1 : Math.max(0, 1 - violations.length * 0.25);\n\n        return {\n          passed: violations.length === 0,\n          violations: [...violations],\n          score,\n          checkedAt: new Date(),\n        } satisfies GuardrailResult;\n      }),\n\n    getConfig: () => Effect.succeed(config),\n  });\n","import type { GuardrailConfig } from \"./types.js\";\nimport { defaultGuardrailConfig } from \"./types.js\";\nimport { GuardrailServiceLive } from \"./guardrail-service.js\";\n\nexport const createGuardrailsLayer = (config?: Partial<GuardrailConfig>) =>\n  GuardrailServiceLive({\n    ...defaultGuardrailConfig,\n    ...config,\n  });\n"],"mappings":";AAAA,SAAS,cAAc;AAIhB,IAAM,gBAAgB,OAAO;AAAA,EAClC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAKO,IAAM,WAAW,OAAO,QAAQ,OAAO,UAAU,QAAQ,UAAU;AAKnE,IAAM,wBAAwB,OAAO,OAAO;AAAA,EACjD,QAAQ,OAAO;AAAA,EACf,YAAY,OAAO;AAAA,IACjB,OAAO,OAAO;AAAA,MACZ,MAAM;AAAA,MACN,UAAU;AAAA,MACV,SAAS,OAAO;AAAA,MAChB,SAAS,OAAO,SAAS,OAAO,MAAM;AAAA,IACxC,CAAC;AAAA,EACH;AAAA,EACA,OAAO,OAAO;AAAA;AAAA,EACd,WAAW,OAAO;AACpB,CAAC;AAKM,IAAM,sBAAsB,OAAO,OAAO;AAAA,EAC/C,eAAe,OAAO,MAAM,OAAO,MAAM;AAAA,EACzC,cAAc,OAAO,MAAM,OAAO,MAAM;AAAA,EACxC,gBAAgB,OAAO,MAAM,OAAO,MAAM;AAAA,EAC1C,eAAe,OAAO,MAAM,OAAO,MAAM;AAAA,EACzC,iBAAiB,OAAO,SAAS,OAAO,MAAM;AAAA,EAC9C,mBAAmB,OAAO,SAAS,OAAO,OAAO;AACnD,CAAC;AAKM,IAAM,wBAAwB,OAAO,OAAO;AAAA,EACjD,0BAA0B,OAAO;AAAA,EACjC,oBAAoB,OAAO;AAAA,EAC3B,yBAAyB,OAAO;AAAA,EAChC,UAAU,OAAO,SAAS,mBAAmB;AAAA,EAC7C,iBAAiB,OAAO,SAAS,OAAO,MAAM,OAAO,MAAM,CAAC;AAC9D,CAAC;AAGM,IAAM,yBAA0C;AAAA,EACrD,0BAA0B;AAAA,EAC1B,oBAAoB;AAAA,EACpB,yBAAyB;AAC3B;;;AC9DA,SAAS,YAAY;AAEd,IAAM,iBAAN,cAA6B,KAAK,YAAY,gBAAgB,EAGlE;AAAC;AAEG,IAAM,iBAAN,cAA6B,KAAK,YAAY,gBAAgB,EAIlE;AAAC;;;ACXJ,SAAS,cAAc;AAYvB,IAAM,qBAA0F;AAAA,EAC9F,EAAE,SAAS,wDAAwD,UAAU,YAAY,aAAa,+BAA+B;AAAA,EACrI,EAAE,SAAS,kCAAkC,UAAU,YAAY,aAAa,gCAAgC;AAAA,EAChH,EAAE,SAAS,yCAAyC,UAAU,QAAQ,aAAa,uBAAuB;AAAA,EAC1G,EAAE,SAAS,wBAAwB,UAAU,QAAQ,aAAa,4BAA4B;AAAA,EAC9F,EAAE,SAAS,uCAAuC,UAAU,UAAU,aAAa,sBAAsB;AAAA,EACzG,EAAE,SAAS,2BAA2B,UAAU,YAAY,aAAa,0BAA0B;AAAA,EACnG,EAAE,SAAS,eAAe,UAAU,QAAQ,aAAa,uBAAuB;AAAA,EAChF,EAAE,SAAS,kBAAkB,UAAU,QAAQ,aAAa,2BAA2B;AAAA,EACvF,EAAE,SAAS,qDAAqD,UAAU,YAAY,aAAa,wBAAwB;AAAA,EAC3H,EAAE,SAAS,sDAAsD,UAAU,QAAQ,aAAa,8BAA8B;AAAA,EAC9H,EAAE,SAAS,sBAAsB,UAAU,YAAY,aAAa,wBAAwB;AAAA,EAC5F,EAAE,SAAS,cAAc,UAAU,YAAY,aAAa,+BAA+B;AAC7F;AAEO,IAAM,kBAAkB,CAAC,SAC9B,OAAO,KAAK,MAAM;AAChB,aAAW,EAAE,SAAS,UAAU,YAAY,KAAK,oBAAoB;AACnE,QAAI,QAAQ,KAAK,IAAI,GAAG;AACtB,aAAO;AAAA,QACL,UAAU;AAAA,QACV,MAAM;AAAA,QACN;AAAA,QACA,SAAS,8BAA8B,WAAW;AAAA,QAClD,SAAS,oBAAoB,QAAQ,MAAM;AAAA,MAC7C;AAAA,IACF;AAAA,EACF;AACA,SAAO;AAAA,IACL,UAAU;AAAA,IACV,MAAM;AAAA,IACN,UAAU;AAAA,IACV,SAAS;AAAA,EACX;AACF,CAAC;;;AC9CH,SAAS,UAAAA,eAAc;AAKvB,IAAM,eAA8E;AAAA,EAClF,EAAE,SAAS,yBAAyB,OAAO,OAAO,UAAU,WAAW;AAAA,EACvE,EAAE,SAAS,aAAa,OAAO,mBAAmB,UAAU,OAAO;AAAA,EACnE,EAAE,SAAS,sDAAsD,OAAO,SAAS,UAAU,SAAS;AAAA,EACpG,EAAE,SAAS,8CAA8C,OAAO,eAAe,UAAU,WAAW;AAAA,EACpG,EAAE,SAAS,2DAA2D,OAAO,gBAAgB,UAAU,SAAS;AAAA,EAChH,EAAE,SAAS,uFAAuF,OAAO,kBAAkB,UAAU,OAAO;AAAA,EAC5I,EAAE,SAAS,sCAAsC,OAAO,eAAe,UAAU,SAAS;AAAA,EAC1F,EAAE,SAAS,4BAA4B,OAAO,YAAY,UAAU,WAAW;AAAA,EAC/E,EAAE,SAAS,8CAA8C,OAAO,WAAW,UAAU,WAAW;AAClG;AAEO,IAAM,YAAY,CAAC,SACxBA,QAAO,KAAK,MAAM;AAChB,QAAM,QAAkB,CAAC;AACzB,MAAI,cAAwB;AAC5B,QAAM,gBAA4B,CAAC,OAAO,UAAU,QAAQ,UAAU;AAEtE,aAAW,EAAE,SAAS,OAAO,SAAS,KAAK,cAAc;AACvD,QAAI,QAAQ,KAAK,IAAI,GAAG;AACtB,YAAM,KAAK,KAAK;AAChB,UAAI,cAAc,QAAQ,QAAQ,IAAI,cAAc,QAAQ,WAAW,GAAG;AACxE,sBAAc;AAAA,MAChB;AAAA,IACF;AAAA,EACF;AAEA,MAAI,MAAM,SAAS,GAAG;AACpB,WAAO;AAAA,MACL,UAAU;AAAA,MACV,MAAM;AAAA,MACN,UAAU;AAAA,MACV,SAAS,iBAAiB,MAAM,KAAK,IAAI,CAAC;AAAA,MAC1C,SAAS,SAAS,MAAM,MAAM;AAAA,IAChC;AAAA,EACF;AAEA,SAAO;AAAA,IACL,UAAU;AAAA,IACV,MAAM;AAAA,IACN,UAAU;AAAA,IACV,SAAS;AAAA,EACX;AACF,CAAC;;;AChDH,SAAS,UAAAC,eAAc;AAKvB,IAAM,iBAAmF;AAAA,EACvF,EAAE,SAAS,yFAAyF,UAAU,YAAY,UAAU,WAAW;AAAA,EAC/I,EAAE,SAAS,sEAAsE,UAAU,YAAY,UAAU,UAAU;AAAA,EAC3H,EAAE,SAAS,6CAA6C,UAAU,QAAQ,UAAU,UAAU;AAAA,EAC9F,EAAE,SAAS,+BAA+B,UAAU,QAAQ,UAAU,QAAQ;AAAA,EAC9E,EAAE,SAAS,kFAAkF,UAAU,YAAY,UAAU,cAAc;AAAA,EAC3I,EAAE,SAAS,uCAAuC,UAAU,YAAY,UAAU,cAAc;AAAA,EAChG,EAAE,SAAS,sBAAsB,UAAU,YAAY,UAAU,YAAY;AAAA,EAC7E,EAAE,SAAS,iCAAiC,UAAU,YAAY,UAAU,YAAY;AAC1F;AAEO,IAAM,iBAAiB,CAC5B,MACA,kBAAqC,CAAC,MAEtCA,QAAO,KAAK,MAAM;AAEhB,aAAW,EAAE,SAAS,UAAU,SAAS,KAAK,gBAAgB;AAC5D,QAAI,QAAQ,KAAK,IAAI,GAAG;AACtB,aAAO;AAAA,QACL,UAAU;AAAA,QACV,MAAM;AAAA,QACN;AAAA,QACA,SAAS,2BAA2B,QAAQ;AAAA,QAC5C,SAAS,aAAa,QAAQ;AAAA,MAChC;AAAA,IACF;AAAA,EACF;AAGA,QAAM,QAAQ,KAAK,YAAY;AAC/B,aAAW,QAAQ,iBAAiB;AAClC,QAAI,MAAM,SAAS,KAAK,YAAY,CAAC,GAAG;AACtC,aAAO;AAAA,QACL,UAAU;AAAA,QACV,MAAM;AAAA,QACN,UAAU;AAAA,QACV,SAAS,2BAA2B,IAAI;AAAA,QACxC,SAAS;AAAA,MACX;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AAAA,IACL,UAAU;AAAA,IACV,MAAM;AAAA,IACN,UAAU;AAAA,IACV,SAAS;AAAA,EACX;AACF,CAAC;;;ACtDH,SAAS,UAAAC,eAAc;AAIhB,IAAM,gBAAgB,CAC3B,MACA,aAEAA,QAAO,KAAK,MAAM;AAChB,QAAM,QAAQ,KAAK,YAAY;AAG/B,aAAW,SAAS,SAAS,cAAc;AACzC,QAAI,MAAM,SAAS,MAAM,YAAY,CAAC,GAAG;AACvC,aAAO;AAAA,QACL,UAAU;AAAA,QACV,MAAM;AAAA,QACN,UAAU;AAAA,QACV,SAAS,6BAA6B,KAAK;AAAA,QAC3C,SAAS;AAAA,MACX;AAAA,IACF;AAAA,EACF;AAGA,aAAW,UAAU,SAAS,eAAe;AAC3C,QAAI,MAAM,SAAS,OAAO,YAAY,CAAC,GAAG;AACxC,aAAO;AAAA,QACL,UAAU;AAAA,QACV,MAAM;AAAA,QACN,UAAU;AAAA,QACV,SAAS,8BAA8B,MAAM;AAAA,QAC7C,SAAS;AAAA,MACX;AAAA,IACF;AAAA,EACF;AAGA,MAAI,SAAS,oBAAoB,UAAa,KAAK,SAAS,SAAS,iBAAiB;AACpF,WAAO;AAAA,MACL,UAAU;AAAA,MACV,MAAM;AAAA,MACN,UAAU;AAAA,MACV,SAAS,8BAA8B,KAAK,MAAM,MAAM,SAAS,eAAe;AAAA,IAClF;AAAA,EACF;AAEA,SAAO;AAAA,IACL,UAAU;AAAA,IACV,MAAM;AAAA,IACN,UAAU;AAAA,IACV,SAAS;AAAA,EACX;AACF,CAAC;;;ACrDH,SAAS,UAAAC,SAAQ,SAAS,aAAa;AAUhC,IAAM,mBAAN,cAA+B,QAAQ,IAAI,kBAAkB,EAYlE,EAAE;AAAC;AAIE,IAAM,uBAAuB,CAAC,WACnC,MAAM,QAAQ,kBAAkB;AAAA,EAC9B,OAAO,CAAC,SACNC,QAAO,IAAI,aAAa;AACtB,UAAM,aAA6K,CAAC;AAEpL,QAAI,OAAO,0BAA0B;AACnC,YAAM,SAAS,OAAO,gBAAgB,IAAI;AAC1C,UAAI,OAAO,UAAU;AACnB,mBAAW,KAAK;AAAA,UACd,MAAM,OAAO;AAAA,UACb,UAAU,OAAO;AAAA,UACjB,SAAS,OAAO;AAAA,UAChB,SAAS,OAAO;AAAA,QAClB,CAAC;AAAA,MACH;AAAA,IACF;AAEA,QAAI,OAAO,oBAAoB;AAC7B,YAAM,SAAS,OAAO,UAAU,IAAI;AACpC,UAAI,OAAO,UAAU;AACnB,mBAAW,KAAK;AAAA,UACd,MAAM,OAAO;AAAA,UACb,UAAU,OAAO;AAAA,UACjB,SAAS,OAAO;AAAA,UAChB,SAAS,OAAO;AAAA,QAClB,CAAC;AAAA,MACH;AAAA,IACF;AAEA,QAAI,OAAO,yBAAyB;AAClC,YAAM,SAAS,OAAO,eAAe,MAAM,OAAO,mBAAmB,CAAC,CAAC;AACvE,UAAI,OAAO,UAAU;AACnB,mBAAW,KAAK;AAAA,UACd,MAAM,OAAO;AAAA,UACb,UAAU,OAAO;AAAA,UACjB,SAAS,OAAO;AAAA,UAChB,SAAS,OAAO;AAAA,QAClB,CAAC;AAAA,MACH;AAAA,IACF;AAEA,QAAI,OAAO,UAAU;AACnB,YAAM,SAAS,OAAO,cAAc,MAAM,OAAO,QAAQ;AACzD,UAAI,OAAO,UAAU;AACnB,mBAAW,KAAK;AAAA,UACd,MAAM,OAAO;AAAA,UACb,UAAU,OAAO;AAAA,UACjB,SAAS,OAAO;AAAA,UAChB,SAAS,OAAO;AAAA,QAClB,CAAC;AAAA,MACH;AAAA,IACF;AAEA,UAAM,QAAQ,WAAW,WAAW,IAAI,IAAI,KAAK,IAAI,GAAG,IAAI,WAAW,SAAS,IAAI;AAEpF,WAAO;AAAA,MACL,QAAQ,WAAW,WAAW;AAAA,MAC9B,YAAY,CAAC,GAAG,UAAU;AAAA,MAC1B;AAAA,MACA,WAAW,oBAAI,KAAK;AAAA,IACtB;AAAA,EACF,CAAC;AAAA,EAEH,aAAa,CAAC,SACZA,QAAO,IAAI,aAAa;AACtB,UAAM,aAA6K,CAAC;AAGpL,QAAI,OAAO,oBAAoB;AAC7B,YAAM,SAAS,OAAO,UAAU,IAAI;AACpC,UAAI,OAAO,UAAU;AACnB,mBAAW,KAAK;AAAA,UACd,MAAM,OAAO;AAAA,UACb,UAAU,OAAO;AAAA,UACjB,SAAS,OAAO;AAAA,UAChB,SAAS,OAAO;AAAA,QAClB,CAAC;AAAA,MACH;AAAA,IACF;AAEA,QAAI,OAAO,yBAAyB;AAClC,YAAM,SAAS,OAAO,eAAe,MAAM,OAAO,mBAAmB,CAAC,CAAC;AACvE,UAAI,OAAO,UAAU;AACnB,mBAAW,KAAK;AAAA,UACd,MAAM,OAAO;AAAA,UACb,UAAU,OAAO;AAAA,UACjB,SAAS,OAAO;AAAA,UAChB,SAAS,OAAO;AAAA,QAClB,CAAC;AAAA,MACH;AAAA,IACF;AAEA,QAAI,OAAO,UAAU;AACnB,YAAM,SAAS,OAAO,cAAc,MAAM,OAAO,QAAQ;AACzD,UAAI,OAAO,UAAU;AACnB,mBAAW,KAAK;AAAA,UACd,MAAM,OAAO;AAAA,UACb,UAAU,OAAO;AAAA,UACjB,SAAS,OAAO;AAAA,UAChB,SAAS,OAAO;AAAA,QAClB,CAAC;AAAA,MACH;AAAA,IACF;AAEA,UAAM,QAAQ,WAAW,WAAW,IAAI,IAAI,KAAK,IAAI,GAAG,IAAI,WAAW,SAAS,IAAI;AAEpF,WAAO;AAAA,MACL,QAAQ,WAAW,WAAW;AAAA,MAC9B,YAAY,CAAC,GAAG,UAAU;AAAA,MAC1B;AAAA,MACA,WAAW,oBAAI,KAAK;AAAA,IACtB;AAAA,EACF,CAAC;AAAA,EAEH,WAAW,MAAMA,QAAO,QAAQ,MAAM;AACxC,CAAC;;;AC1II,IAAM,wBAAwB,CAAC,WACpC,qBAAqB;AAAA,EACnB,GAAG;AAAA,EACH,GAAG;AACL,CAAC;","names":["Effect","Effect","Effect","Effect","Effect"]}

package/package.json

@@ -0,0 +1,48 @@
+{
+  "name": "@reactive-agents/guardrails",
+  "version": "0.1.0",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "scripts": {
+    "build": "tsup --config ../../tsup.config.base.ts",
+    "typecheck": "tsc --noEmit",
+    "test": "bun test",
+    "test:watch": "bun test --watch"
+  },
+  "dependencies": {
+    "effect": "^3.10.0",
+    "@reactive-agents/core": "0.1.0",
+    "@reactive-agents/llm-provider": "0.1.0"
+  },
+  "devDependencies": {
+    "typescript": "^5.7.0",
+    "bun-types": "latest"
+  },
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/tylerjrbuell/reactive-agents-ts.git",
+    "directory": "packages/guardrails"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "default": "./dist/index.js"
+    }
+  },
+  "description": "Safety guardrails for Reactive Agents — prompt injection detection, PII scanning, and toxicity filtering",
+  "homepage": "https://tylerjrbuell.github.io/reactive-agents-ts/",
+  "bugs": {
+    "url": "https://github.com/tylerjrbuell/reactive-agents-ts/issues"
+  }
+}