@reactive-agents/guardrails 0.1.0 → 0.5.5

package/dist/index.d.ts

@@ -78,6 +78,89 @@ declare const detectToxicity: (text: string, customBlocklist?: readonly string[]
 
 declare const checkContract: (text: string, contract: AgentContract) => Effect.Effect<DetectionResult, never>;
 
+declare const KillSwitchService_base: Context.TagClass<KillSwitchService, "KillSwitchService", {
+    /** Trigger the kill switch for an agent. Execution halts at next phase boundary. */
+    readonly trigger: (agentId: string, reason: string) => Effect.Effect<void>;
+    /** Check if the kill switch has been triggered for an agent. */
+    readonly isTriggered: (agentId: string) => Effect.Effect<{
+        triggered: boolean;
+        reason?: string;
+    }>;
+    /** Clear the kill switch for an agent (re-enable execution). */
+    readonly clear: (agentId: string) => Effect.Effect<void>;
+    /** Trigger a global kill switch — halts ALL agents. */
+    readonly triggerGlobal: (reason: string) => Effect.Effect<void>;
+    /** Check if global kill switch is active. */
+    readonly isGlobalTriggered: () => Effect.Effect<{
+        triggered: boolean;
+        reason?: string;
+    }>;
+    /** Clear the global kill switch. */
+    readonly clearGlobal: () => Effect.Effect<void>;
+    /** Pause agent execution at the next phase boundary (blocks until resume). */
+    readonly pause: (agentId: string) => Effect.Effect<void>;
+    /** Resume a paused agent. */
+    readonly resume: (agentId: string) => Effect.Effect<void>;
+    /** Signal agent to stop gracefully at the next phase boundary. */
+    readonly stop: (agentId: string, reason: string) => Effect.Effect<void>;
+    /** Immediately terminate agent (also triggers kill switch). */
+    readonly terminate: (agentId: string, reason: string) => Effect.Effect<void>;
+    /** Get the current lifecycle state for an agent. */
+    readonly getLifecycle: (agentId: string) => Effect.Effect<"running" | "paused" | "stopping" | "terminated" | "unknown">;
+    /**
+     * If paused, block until resumed. Emits AgentPaused when blocking starts and
+     * AgentResumed when unblocked — so events carry the real taskId from the
+     * execution context rather than a synthetic "lifecycle" placeholder.
+     * Returns "stopping" if stop() was called while paused, else "ok".
+     */
+    readonly waitIfPaused: (agentId: string, taskId: string) => Effect.Effect<"ok" | "stopping">;
+}>;
+/**
+ * KillSwitchService — emergency stop for agent execution.
+ *
+ * When triggered, the execution engine will halt at the next phase
+ * transition and return a TaskResult with the kill reason.
+ */
+declare class KillSwitchService extends KillSwitchService_base {
+}
+declare const KillSwitchServiceLive: () => Layer.Layer<KillSwitchService, never, never>;
+
+declare const BehavioralContractSchema: Schema.Struct<{
+    /** Tools the agent is NOT allowed to call. */
+    deniedTools: Schema.optional<Schema.Array$<typeof Schema.String>>;
+    /** If set, ONLY these tools may be called (allowlist). */
+    allowedTools: Schema.optional<Schema.Array$<typeof Schema.String>>;
+    /** Maximum number of tool calls per execution. */
+    maxToolCalls: Schema.optional<typeof Schema.Number>;
+    /** Maximum iterations before forced halt. */
+    maxIterations: Schema.optional<typeof Schema.Number>;
+    /** Maximum output length in characters. */
+    maxOutputLength: Schema.optional<typeof Schema.Number>;
+    /** Topics the agent must not address. */
+    deniedTopics: Schema.optional<Schema.Array$<typeof Schema.String>>;
+    /** If true, agent must disclose it is an AI. */
+    requireDisclosure: Schema.optional<typeof Schema.Boolean>;
+}>;
+type BehavioralContract = typeof BehavioralContractSchema.Type;
+interface ContractViolation {
+    readonly rule: string;
+    readonly message: string;
+    readonly severity: "warning" | "block";
+}
+declare const BehavioralContractService_base: Context.TagClass<BehavioralContractService, "BehavioralContractService", {
+    /** Check if a tool call is allowed by the contract. */
+    readonly checkToolCall: (toolName: string, toolCallCount: number) => Effect.Effect<ContractViolation | null>;
+    /** Check if output complies with the contract. */
+    readonly checkOutput: (output: string) => Effect.Effect<ContractViolation | null>;
+    /** Check iteration count against contract. */
+    readonly checkIteration: (iteration: number) => Effect.Effect<ContractViolation | null>;
+    /** Get the active contract. */
+    readonly getContract: () => Effect.Effect<BehavioralContract>;
+}>;
+declare class BehavioralContractService extends BehavioralContractService_base {
+}
+declare const BehavioralContractServiceLive: (contract: BehavioralContract) => Layer.Layer<BehavioralContractService, never, never>;
+
 declare const GuardrailService_base: Context.TagClass<GuardrailService, "GuardrailService", {
     /** Check input text against all configured guardrails. */
     readonly check: (text: string) => Effect.Effect<GuardrailResult, GuardrailError>;
@@ -92,4 +175,4 @@ declare const GuardrailServiceLive: (config: GuardrailConfig) => Layer.Layer<Gua
 
 declare const createGuardrailsLayer: (config?: Partial<GuardrailConfig>) => effect_Layer.Layer<GuardrailService, never, never>;
 
-export { type AgentContract, AgentContractSchema, type DetectionResult, type GuardrailConfig, GuardrailConfigSchema, GuardrailError, type GuardrailResult, GuardrailResultSchema, GuardrailService, GuardrailServiceLive, Severity, Severity as SeveritySchema, ViolationError, ViolationType, ViolationType as ViolationTypeSchema, checkContract, createGuardrailsLayer, defaultGuardrailConfig, detectInjection, detectPii, detectToxicity };
+export { type AgentContract, AgentContractSchema, type BehavioralContract, BehavioralContractSchema, BehavioralContractService, BehavioralContractServiceLive, type ContractViolation, type DetectionResult, type GuardrailConfig, GuardrailConfigSchema, GuardrailError, type GuardrailResult, GuardrailResultSchema, GuardrailService, GuardrailServiceLive, KillSwitchService, KillSwitchServiceLive, Severity, Severity as SeveritySchema, ViolationError, ViolationType, ViolationType as ViolationTypeSchema, checkContract, createGuardrailsLayer, defaultGuardrailConfig, detectInjection, detectPii, detectToxicity };

package/dist/index.js

@@ -214,12 +214,210 @@ var checkContract = (text, contract) => Effect4.sync(() => {
   };
 });
 
+// src/kill-switch.ts
+import { Effect as Effect5, Context, Layer, Ref, Deferred } from "effect";
+import { EventBus } from "@reactive-agents/core";
+var KillSwitchService = class extends Context.Tag("KillSwitchService")() {
+};
+var KillSwitchServiceLive = () => Layer.effect(
+  KillSwitchService,
+  Effect5.gen(function* () {
+    const agentKills = yield* Ref.make(/* @__PURE__ */ new Map());
+    const globalKill = yield* Ref.make(null);
+    const lifecycleRef = yield* Ref.make(/* @__PURE__ */ new Map());
+    const pauseDeferreds = yield* Ref.make(/* @__PURE__ */ new Map());
+    const ebOpt = yield* Effect5.serviceOption(EventBus).pipe(
+      Effect5.catchAll(() => Effect5.succeed({ _tag: "None" }))
+    );
+    const eb = ebOpt._tag === "Some" ? ebOpt.value : null;
+    return KillSwitchService.of({
+      trigger: (agentId, reason) => Ref.update(agentKills, (m) => {
+        const newMap = new Map(m);
+        newMap.set(agentId, reason);
+        return newMap;
+      }),
+      isTriggered: (agentId) => Effect5.gen(function* () {
+        const globalReason = yield* Ref.get(globalKill);
+        if (globalReason != null) {
+          return { triggered: true, reason: globalReason };
+        }
+        const kills = yield* Ref.get(agentKills);
+        const reason = kills.get(agentId);
+        return reason != null ? { triggered: true, reason } : { triggered: false };
+      }),
+      clear: (agentId) => Ref.update(agentKills, (m) => {
+        const newMap = new Map(m);
+        newMap.delete(agentId);
+        return newMap;
+      }),
+      triggerGlobal: (reason) => Ref.set(globalKill, reason),
+      isGlobalTriggered: () => Effect5.gen(function* () {
+        const reason = yield* Ref.get(globalKill);
+        return reason != null ? { triggered: true, reason } : { triggered: false };
+      }),
+      clearGlobal: () => Ref.set(globalKill, null),
+      pause: (agentId) => Effect5.gen(function* () {
+        const d = yield* Deferred.make();
+        yield* Ref.update(pauseDeferreds, (m) => {
+          const n = new Map(m);
+          n.set(agentId, d);
+          return n;
+        });
+        yield* Ref.update(lifecycleRef, (m) => {
+          const n = new Map(m);
+          n.set(agentId, "paused");
+          return n;
+        });
+      }),
+      resume: (agentId) => Effect5.gen(function* () {
+        const deferreds = yield* Ref.get(pauseDeferreds);
+        const d = deferreds.get(agentId);
+        if (d) {
+          yield* Deferred.succeed(d, void 0);
+          yield* Ref.update(pauseDeferreds, (m) => {
+            const n = new Map(m);
+            n.delete(agentId);
+            return n;
+          });
+        }
+        yield* Ref.update(lifecycleRef, (m) => {
+          const n = new Map(m);
+          n.set(agentId, "running");
+          return n;
+        });
+      }),
+      stop: (agentId, _reason) => Ref.update(lifecycleRef, (m) => {
+        const n = new Map(m);
+        n.set(agentId, "stopping");
+        return n;
+      }),
+      terminate: (agentId, reason) => Effect5.gen(function* () {
+        yield* Ref.update(lifecycleRef, (m) => {
+          const n = new Map(m);
+          n.set(agentId, "terminated");
+          return n;
+        });
+        yield* Ref.update(agentKills, (m) => {
+          const n = new Map(m);
+          n.set(agentId, reason);
+          return n;
+        });
+      }),
+      getLifecycle: (agentId) => Ref.get(lifecycleRef).pipe(
+        Effect5.map((m) => m.get(agentId) ?? "unknown")
+      ),
+      waitIfPaused: (agentId, taskId) => Effect5.gen(function* () {
+        const lifecycle = yield* Ref.get(lifecycleRef).pipe(
+          Effect5.map((m) => m.get(agentId))
+        );
+        if (lifecycle === "paused") {
+          if (eb) {
+            yield* eb.publish({ _tag: "AgentPaused", agentId, taskId }).pipe(Effect5.catchAll(() => Effect5.void));
+          }
+          const deferreds = yield* Ref.get(pauseDeferreds);
+          const d = deferreds.get(agentId);
+          if (d) {
+            yield* Deferred.await(d);
+          }
+          if (eb) {
+            yield* eb.publish({ _tag: "AgentResumed", agentId, taskId }).pipe(Effect5.catchAll(() => Effect5.void));
+          }
+        }
+        const newLifecycle = yield* Ref.get(lifecycleRef).pipe(
+          Effect5.map((m) => m.get(agentId))
+        );
+        return newLifecycle === "stopping" ? "stopping" : "ok";
+      })
+    });
+  })
+);
+
+// src/behavioral-contracts.ts
+import { Effect as Effect6, Context as Context2, Layer as Layer2, Schema as Schema2 } from "effect";
+var BehavioralContractSchema = Schema2.Struct({
+  /** Tools the agent is NOT allowed to call. */
+  deniedTools: Schema2.optional(Schema2.Array(Schema2.String)),
+  /** If set, ONLY these tools may be called (allowlist). */
+  allowedTools: Schema2.optional(Schema2.Array(Schema2.String)),
+  /** Maximum number of tool calls per execution. */
+  maxToolCalls: Schema2.optional(Schema2.Number),
+  /** Maximum iterations before forced halt. */
+  maxIterations: Schema2.optional(Schema2.Number),
+  /** Maximum output length in characters. */
+  maxOutputLength: Schema2.optional(Schema2.Number),
+  /** Topics the agent must not address. */
+  deniedTopics: Schema2.optional(Schema2.Array(Schema2.String)),
+  /** If true, agent must disclose it is an AI. */
+  requireDisclosure: Schema2.optional(Schema2.Boolean)
+});
+var BehavioralContractService = class extends Context2.Tag("BehavioralContractService")() {
+};
+var BehavioralContractServiceLive = (contract) => Layer2.succeed(BehavioralContractService, {
+  checkToolCall: (toolName, toolCallCount) => Effect6.sync(() => {
+    if (contract.deniedTools?.some((d) => d.toLowerCase() === toolName.toLowerCase())) {
+      return {
+        rule: "denied-tool",
+        message: `Tool "${toolName}" is not allowed by behavioral contract`,
+        severity: "block"
+      };
+    }
+    if (contract.allowedTools && !contract.allowedTools.some((a) => a.toLowerCase() === toolName.toLowerCase())) {
+      return {
+        rule: "tool-not-in-allowlist",
+        message: `Tool "${toolName}" is not in the allowed tools list`,
+        severity: "block"
+      };
+    }
+    if (contract.maxToolCalls != null && toolCallCount >= contract.maxToolCalls) {
+      return {
+        rule: "max-tool-calls",
+        message: `Tool call limit reached (${contract.maxToolCalls})`,
+        severity: "block"
+      };
+    }
+    return null;
+  }),
+  checkOutput: (output) => Effect6.sync(() => {
+    if (contract.maxOutputLength != null && output.length > contract.maxOutputLength) {
+      return {
+        rule: "max-output-length",
+        message: `Output exceeds maximum length (${output.length} > ${contract.maxOutputLength})`,
+        severity: "block"
+      };
+    }
+    if (contract.deniedTopics) {
+      const lower = output.toLowerCase();
+      for (const topic of contract.deniedTopics) {
+        if (lower.includes(topic.toLowerCase())) {
+          return {
+            rule: "denied-topic",
+            message: `Output references denied topic: "${topic}"`,
+            severity: "block"
+          };
+        }
+      }
+    }
+    return null;
+  }),
+  checkIteration: (iteration) => Effect6.sync(() => {
+    if (contract.maxIterations != null && iteration > contract.maxIterations) {
+      return {
+        rule: "max-iterations",
+        message: `Iteration ${iteration} exceeds contract limit of ${contract.maxIterations}`,
+        severity: "block"
+      };
+    }
+    return null;
+  }),
+  getContract: () => Effect6.succeed(contract)
+});
+
 // src/guardrail-service.ts
-import { Effect as Effect5, Context, Layer } from "effect";
-var GuardrailService = class extends Context.Tag("GuardrailService")() {
+import { Effect as Effect7, Context as Context3, Layer as Layer3 } from "effect";
+var GuardrailService = class extends Context3.Tag("GuardrailService")() {
 };
-var GuardrailServiceLive = (config) => Layer.succeed(GuardrailService, {
-  check: (text) => Effect5.gen(function* () {
+var GuardrailServiceLive = (config) => Layer3.succeed(GuardrailService, {
+  check: (text) => Effect7.gen(function* () {
     const violations = [];
     if (config.enableInjectionDetection) {
       const result = yield* detectInjection(text);
@@ -273,7 +471,7 @@ var GuardrailServiceLive = (config) => Layer.succeed(GuardrailService, {
       checkedAt: /* @__PURE__ */ new Date()
     };
   }),
-  checkOutput: (text) => Effect5.gen(function* () {
+  checkOutput: (text) => Effect7.gen(function* () {
     const violations = [];
     if (config.enablePiiDetection) {
       const result = yield* detectPii(text);
@@ -316,7 +514,7 @@ var GuardrailServiceLive = (config) => Layer.succeed(GuardrailService, {
       checkedAt: /* @__PURE__ */ new Date()
     };
   }),
-  getConfig: () => Effect5.succeed(config)
+  getConfig: () => Effect7.succeed(config)
 });
 
 // src/runtime.ts
@@ -326,11 +524,16 @@ var createGuardrailsLayer = (config) => GuardrailServiceLive({
 });
 export {
   AgentContractSchema,
+  BehavioralContractSchema,
+  BehavioralContractService,
+  BehavioralContractServiceLive,
   GuardrailConfigSchema,
   GuardrailError,
   GuardrailResultSchema,
   GuardrailService,
   GuardrailServiceLive,
+  KillSwitchService,
+  KillSwitchServiceLive,
   Severity as SeveritySchema,
   ViolationError,
   ViolationType as ViolationTypeSchema,

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/types.ts","../src/errors.ts","../src/detectors/injection-detector.ts","../src/detectors/pii-detector.ts","../src/detectors/toxicity-detector.ts","../src/contracts/agent-contract.ts","../src/guardrail-service.ts","../src/runtime.ts"],"sourcesContent":["import { Schema } from \"effect\";\n\n// ─── Violation Type ───\n\nexport const ViolationType = Schema.Literal(\n  \"prompt-injection\",\n  \"pii-detected\",\n  \"toxicity\",\n  \"scope-violation\",\n  \"contract-violation\",\n);\nexport type ViolationType = typeof ViolationType.Type;\n\n// ─── Severity ───\n\nexport const Severity = Schema.Literal(\"low\", \"medium\", \"high\", \"critical\");\nexport type Severity = typeof Severity.Type;\n\n// ─── Guardrail Result ───\n\nexport const GuardrailResultSchema = Schema.Struct({\n  passed: Schema.Boolean,\n  violations: Schema.Array(\n    Schema.Struct({\n      type: ViolationType,\n      severity: Severity,\n      message: Schema.String,\n      details: Schema.optional(Schema.String),\n    }),\n  ),\n  score: Schema.Number, // 0-1, 1 = fully safe\n  checkedAt: Schema.DateFromSelf,\n});\nexport type GuardrailResult = typeof GuardrailResultSchema.Type;\n\n// ─── Agent Contract ───\n\nexport const AgentContractSchema = Schema.Struct({\n  allowedTopics: Schema.Array(Schema.String),\n  deniedTopics: Schema.Array(Schema.String),\n  allowedActions: Schema.Array(Schema.String),\n  deniedActions: Schema.Array(Schema.String),\n  maxOutputLength: Schema.optional(Schema.Number),\n  requireDisclosure: Schema.optional(Schema.Boolean),\n});\nexport type AgentContract = typeof AgentContractSchema.Type;\n\n// ─── Guardrail Config ───\n\nexport const GuardrailConfigSchema = Schema.Struct({\n  enableInjectionDetection: Schema.Boolean,\n  enablePiiDetection: Schema.Boolean,\n  enableToxicityDetection: Schema.Boolean,\n  contract: Schema.optional(AgentContractSchema),\n  customBlocklist: Schema.optional(Schema.Array(Schema.String)),\n});\nexport type GuardrailConfig = typeof GuardrailConfigSchema.Type;\n\nexport const defaultGuardrailConfig: GuardrailConfig = {\n  enableInjectionDetection: true,\n  enablePiiDetection: true,\n  enableToxicityDetection: true,\n};\n","import { Data } from \"effect\";\n\nexport class GuardrailError extends Data.TaggedError(\"GuardrailError\")<{\n  readonly message: string;\n  readonly cause?: unknown;\n}> {}\n\nexport class ViolationError extends Data.TaggedError(\"ViolationError\")<{\n  readonly message: string;\n  readonly violationType: string;\n  readonly severity: string;\n}> {}\n","import { Effect } from \"effect\";\nimport type { ViolationType, Severity } from \"../types.js\";\n\nexport interface DetectionResult {\n  readonly detected: boolean;\n  readonly type: ViolationType;\n  readonly severity: Severity;\n  readonly message: string;\n  readonly details?: string;\n}\n\n// Common prompt injection patterns\nconst INJECTION_PATTERNS: Array<{ pattern: RegExp; severity: Severity; description: string }> = [\n  { pattern: /ignore\\s+(all\\s+)?previous\\s+(instructions|prompts)/i, severity: \"critical\", description: \"Instruction override attempt\" },\n  { pattern: /disregard\\s+(all\\s+)?previous/i, severity: \"critical\", description: \"Instruction disregard attempt\" },\n  { pattern: /forget\\s+(all\\s+)?(your\\s+)?previous/i, severity: \"high\", description: \"Memory reset attempt\" },\n  { pattern: /you\\s+are\\s+now\\s+a/i, severity: \"high\", description: \"Role reassignment attempt\" },\n  { pattern: /act\\s+as\\s+(if\\s+)?(you\\s+are|a)\\s/i, severity: \"medium\", description: \"Role play injection\" },\n  { pattern: /system\\s*:\\s*you\\s+are/i, severity: \"critical\", description: \"System prompt injection\" },\n  { pattern: /\\[SYSTEM\\]/i, severity: \"high\", description: \"System tag injection\" },\n  { pattern: /\\<\\/?system\\>/i, severity: \"high\", description: \"System XML tag injection\" },\n  { pattern: /do\\s+not\\s+follow\\s+(your\\s+)?(rules|guidelines)/i, severity: \"critical\", description: \"Rule override attempt\" },\n  { pattern: /pretend\\s+(that\\s+)?you\\s+(don't|do\\s+not)\\s+have/i, severity: \"high\", description: \"Capability override attempt\" },\n  { pattern: /\\bDAN\\b.*\\bmode\\b/i, severity: \"critical\", description: \"DAN jailbreak attempt\" },\n  { pattern: /jailbreak/i, severity: \"critical\", description: \"Explicit jailbreak reference\" },\n];\n\nexport const detectInjection = (text: string): Effect.Effect<DetectionResult, never> =>\n  Effect.sync(() => {\n    for (const { pattern, severity, description } of INJECTION_PATTERNS) {\n      if (pattern.test(text)) {\n        return {\n          detected: true,\n          type: \"prompt-injection\" as ViolationType,\n          severity,\n          message: `Prompt injection detected: ${description}`,\n          details: `Matched pattern: ${pattern.source}`,\n        };\n      }\n    }\n    return {\n      detected: false,\n      type: \"prompt-injection\" as ViolationType,\n      severity: \"low\" as Severity,\n      message: \"No injection detected\",\n    };\n  });\n","import { Effect } from \"effect\";\nimport type { ViolationType, Severity } from \"../types.js\";\nimport type { DetectionResult } from \"./injection-detector.js\";\n\n// PII patterns\nconst PII_PATTERNS: Array<{ pattern: RegExp; label: string; severity: Severity }> = [\n  { pattern: /\\b\\d{3}-\\d{2}-\\d{4}\\b/, label: \"SSN\", severity: \"critical\" },\n  { pattern: /\\b\\d{9}\\b/, label: \"SSN (no dashes)\", severity: \"high\" },\n  { pattern: /\\b[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\\.[A-Za-z]{2,}\\b/, label: \"Email\", severity: \"medium\" },\n  { pattern: /\\b\\d{4}[\\s-]?\\d{4}[\\s-]?\\d{4}[\\s-]?\\d{4}\\b/, label: \"Credit card\", severity: \"critical\" },\n  { pattern: /\\b(?:\\+?1[-.\\s]?)?\\(?\\d{3}\\)?[-.\\s]?\\d{3}[-.\\s]?\\d{4}\\b/, label: \"Phone number\", severity: \"medium\" },\n  { pattern: /\\b\\d{1,5}\\s\\w+\\s(?:Street|St|Avenue|Ave|Road|Rd|Drive|Dr|Lane|Ln|Boulevard|Blvd)\\b/i, label: \"Street address\", severity: \"high\" },\n  { pattern: /\\b[A-Z]{1,2}\\d{1,2}\\s?\\d[A-Z]{2}\\b/, label: \"UK postcode\", severity: \"medium\" },\n  { pattern: /\\bpassword\\s*[:=]\\s*\\S+/i, label: \"Password\", severity: \"critical\" },\n  { pattern: /\\b(sk-|sk_live_|pk_live_|sk_test_)\\S{20,}/i, label: \"API key\", severity: \"critical\" },\n];\n\nexport const detectPii = (text: string): Effect.Effect<DetectionResult, never> =>\n  Effect.sync(() => {\n    const found: string[] = [];\n    let maxSeverity: Severity = \"low\";\n    const severityOrder: Severity[] = [\"low\", \"medium\", \"high\", \"critical\"];\n\n    for (const { pattern, label, severity } of PII_PATTERNS) {\n      if (pattern.test(text)) {\n        found.push(label);\n        if (severityOrder.indexOf(severity) > severityOrder.indexOf(maxSeverity)) {\n          maxSeverity = severity;\n        }\n      }\n    }\n\n    if (found.length > 0) {\n      return {\n        detected: true,\n        type: \"pii-detected\" as ViolationType,\n        severity: maxSeverity,\n        message: `PII detected: ${found.join(\", \")}`,\n        details: `Found ${found.length} PII pattern(s)`,\n      };\n    }\n\n    return {\n      detected: false,\n      type: \"pii-detected\" as ViolationType,\n      severity: \"low\" as Severity,\n      message: \"No PII detected\",\n    };\n  });\n","import { Effect } from \"effect\";\nimport type { ViolationType, Severity } from \"../types.js\";\nimport type { DetectionResult } from \"./injection-detector.js\";\n\n// Toxicity keyword categories (simplified blocklist)\nconst TOXIC_PATTERNS: Array<{ pattern: RegExp; category: string; severity: Severity }> = [\n  { pattern: /\\b(kill|murder|assassinate)\\s+(yourself|himself|herself|themselves|someone|people)\\b/i, severity: \"critical\", category: \"violence\" },\n  { pattern: /\\bhow\\s+to\\s+(make|build|create)\\s+(a\\s+)?(bomb|weapon|explosive)/i, severity: \"critical\", category: \"weapons\" },\n  { pattern: /\\b(hack|exploit|breach)\\s+(into|a|the)\\s/i, severity: \"high\", category: \"hacking\" },\n  { pattern: /\\b(steal|rob|burglarize)\\s/i, severity: \"high\", category: \"theft\" },\n  { pattern: /\\b(hate|despise)\\s+(all\\s+)?(women|men|blacks|whites|jews|muslims|christians)/i, severity: \"critical\", category: \"hate-speech\" },\n  { pattern: /\\b(racial|ethnic)\\s+(slur|epithet)/i, severity: \"critical\", category: \"hate-speech\" },\n  { pattern: /\\bself[- ]?harm\\b/i, severity: \"critical\", category: \"self-harm\" },\n  { pattern: /\\bsuicide\\s+(method|how|way)/i, severity: \"critical\", category: \"self-harm\" },\n];\n\nexport const detectToxicity = (\n  text: string,\n  customBlocklist: readonly string[] = [],\n): Effect.Effect<DetectionResult, never> =>\n  Effect.sync(() => {\n    // Check built-in patterns\n    for (const { pattern, category, severity } of TOXIC_PATTERNS) {\n      if (pattern.test(text)) {\n        return {\n          detected: true,\n          type: \"toxicity\" as ViolationType,\n          severity,\n          message: `Toxic content detected: ${category}`,\n          details: `Category: ${category}`,\n        };\n      }\n    }\n\n    // Check custom blocklist\n    const lower = text.toLowerCase();\n    for (const word of customBlocklist) {\n      if (lower.includes(word.toLowerCase())) {\n        return {\n          detected: true,\n          type: \"toxicity\" as ViolationType,\n          severity: \"high\" as Severity,\n          message: `Blocked term detected: \"${word}\"`,\n          details: `Custom blocklist match`,\n        };\n      }\n    }\n\n    return {\n      detected: false,\n      type: \"toxicity\" as ViolationType,\n      severity: \"low\" as Severity,\n      message: \"No toxic content detected\",\n    };\n  });\n","import { Effect } from \"effect\";\nimport type { AgentContract, ViolationType, Severity } from \"../types.js\";\nimport type { DetectionResult } from \"../detectors/injection-detector.js\";\n\nexport const checkContract = (\n  text: string,\n  contract: AgentContract,\n): Effect.Effect<DetectionResult, never> =>\n  Effect.sync(() => {\n    const lower = text.toLowerCase();\n\n    // Check denied topics\n    for (const topic of contract.deniedTopics) {\n      if (lower.includes(topic.toLowerCase())) {\n        return {\n          detected: true,\n          type: \"contract-violation\" as ViolationType,\n          severity: \"high\" as Severity,\n          message: `Denied topic referenced: \"${topic}\"`,\n          details: `Contract prohibits this topic`,\n        };\n      }\n    }\n\n    // Check denied actions\n    for (const action of contract.deniedActions) {\n      if (lower.includes(action.toLowerCase())) {\n        return {\n          detected: true,\n          type: \"scope-violation\" as ViolationType,\n          severity: \"high\" as Severity,\n          message: `Denied action referenced: \"${action}\"`,\n          details: `Contract prohibits this action`,\n        };\n      }\n    }\n\n    // Check output length\n    if (contract.maxOutputLength !== undefined && text.length > contract.maxOutputLength) {\n      return {\n        detected: true,\n        type: \"contract-violation\" as ViolationType,\n        severity: \"medium\" as Severity,\n        message: `Output exceeds max length (${text.length} > ${contract.maxOutputLength})`,\n      };\n    }\n\n    return {\n      detected: false,\n      type: \"contract-violation\" as ViolationType,\n      severity: \"low\" as Severity,\n      message: \"Contract check passed\",\n    };\n  });\n","import { Effect, Context, Layer } from \"effect\";\nimport type { GuardrailResult, GuardrailConfig } from \"./types.js\";\nimport { GuardrailError } from \"./errors.js\";\nimport { detectInjection } from \"./detectors/injection-detector.js\";\nimport { detectPii } from \"./detectors/pii-detector.js\";\nimport { detectToxicity } from \"./detectors/toxicity-detector.js\";\nimport { checkContract } from \"./contracts/agent-contract.js\";\n\n// ─── Service Tag ───\n\nexport class GuardrailService extends Context.Tag(\"GuardrailService\")<\n  GuardrailService,\n  {\n    /** Check input text against all configured guardrails. */\n    readonly check: (text: string) => Effect.Effect<GuardrailResult, GuardrailError>;\n\n    /** Check output text (may have different rules). */\n    readonly checkOutput: (text: string) => Effect.Effect<GuardrailResult, GuardrailError>;\n\n    /** Get current config. */\n    readonly getConfig: () => Effect.Effect<GuardrailConfig, never>;\n  }\n>() {}\n\n// ─── Live Implementation ───\n\nexport const GuardrailServiceLive = (config: GuardrailConfig) =>\n  Layer.succeed(GuardrailService, {\n    check: (text) =>\n      Effect.gen(function* () {\n        const violations: Array<{ type: GuardrailResult[\"violations\"][number][\"type\"]; severity: GuardrailResult[\"violations\"][number][\"severity\"]; message: string; details?: string }> = [];\n\n        if (config.enableInjectionDetection) {\n          const result = yield* detectInjection(text);\n          if (result.detected) {\n            violations.push({\n              type: result.type,\n              severity: result.severity,\n              message: result.message,\n              details: result.details,\n            });\n          }\n        }\n\n        if (config.enablePiiDetection) {\n          const result = yield* detectPii(text);\n          if (result.detected) {\n            violations.push({\n              type: result.type,\n              severity: result.severity,\n              message: result.message,\n              details: result.details,\n            });\n          }\n        }\n\n        if (config.enableToxicityDetection) {\n          const result = yield* detectToxicity(text, config.customBlocklist ?? []);\n          if (result.detected) {\n            violations.push({\n              type: result.type,\n              severity: result.severity,\n              message: result.message,\n              details: result.details,\n            });\n          }\n        }\n\n        if (config.contract) {\n          const result = yield* checkContract(text, config.contract);\n          if (result.detected) {\n            violations.push({\n              type: result.type,\n              severity: result.severity,\n              message: result.message,\n              details: result.details,\n            });\n          }\n        }\n\n        const score = violations.length === 0 ? 1 : Math.max(0, 1 - violations.length * 0.25);\n\n        return {\n          passed: violations.length === 0,\n          violations: [...violations],\n          score,\n          checkedAt: new Date(),\n        } satisfies GuardrailResult;\n      }),\n\n    checkOutput: (text) =>\n      Effect.gen(function* () {\n        const violations: Array<{ type: GuardrailResult[\"violations\"][number][\"type\"]; severity: GuardrailResult[\"violations\"][number][\"severity\"]; message: string; details?: string }> = [];\n\n        // Output checks: PII and toxicity (not injection)\n        if (config.enablePiiDetection) {\n          const result = yield* detectPii(text);\n          if (result.detected) {\n            violations.push({\n              type: result.type,\n              severity: result.severity,\n              message: result.message,\n              details: result.details,\n            });\n          }\n        }\n\n        if (config.enableToxicityDetection) {\n          const result = yield* detectToxicity(text, config.customBlocklist ?? []);\n          if (result.detected) {\n            violations.push({\n              type: result.type,\n              severity: result.severity,\n              message: result.message,\n              details: result.details,\n            });\n          }\n        }\n\n        if (config.contract) {\n          const result = yield* checkContract(text, config.contract);\n          if (result.detected) {\n            violations.push({\n              type: result.type,\n              severity: result.severity,\n              message: result.message,\n              details: result.details,\n            });\n          }\n        }\n\n        const score = violations.length === 0 ? 1 : Math.max(0, 1 - violations.length * 0.25);\n\n        return {\n          passed: violations.length === 0,\n          violations: [...violations],\n          score,\n          checkedAt: new Date(),\n        } satisfies GuardrailResult;\n      }),\n\n    getConfig: () => Effect.succeed(config),\n  });\n","import type { GuardrailConfig } from \"./types.js\";\nimport { defaultGuardrailConfig } from \"./types.js\";\nimport { GuardrailServiceLive } from \"./guardrail-service.js\";\n\nexport const createGuardrailsLayer = (config?: Partial<GuardrailConfig>) =>\n  GuardrailServiceLive({\n    ...defaultGuardrailConfig,\n    ...config,\n  });\n"],"mappings":";AAAA,SAAS,cAAc;AAIhB,IAAM,gBAAgB,OAAO;AAAA,EAClC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAKO,IAAM,WAAW,OAAO,QAAQ,OAAO,UAAU,QAAQ,UAAU;AAKnE,IAAM,wBAAwB,OAAO,OAAO;AAAA,EACjD,QAAQ,OAAO;AAAA,EACf,YAAY,OAAO;AAAA,IACjB,OAAO,OAAO;AAAA,MACZ,MAAM;AAAA,MACN,UAAU;AAAA,MACV,SAAS,OAAO;AAAA,MAChB,SAAS,OAAO,SAAS,OAAO,MAAM;AAAA,IACxC,CAAC;AAAA,EACH;AAAA,EACA,OAAO,OAAO;AAAA;AAAA,EACd,WAAW,OAAO;AACpB,CAAC;AAKM,IAAM,sBAAsB,OAAO,OAAO;AAAA,EAC/C,eAAe,OAAO,MAAM,OAAO,MAAM;AAAA,EACzC,cAAc,OAAO,MAAM,OAAO,MAAM;AAAA,EACxC,gBAAgB,OAAO,MAAM,OAAO,MAAM;AAAA,EAC1C,eAAe,OAAO,MAAM,OAAO,MAAM;AAAA,EACzC,iBAAiB,OAAO,SAAS,OAAO,MAAM;AAAA,EAC9C,mBAAmB,OAAO,SAAS,OAAO,OAAO;AACnD,CAAC;AAKM,IAAM,wBAAwB,OAAO,OAAO;AAAA,EACjD,0BAA0B,OAAO;AAAA,EACjC,oBAAoB,OAAO;AAAA,EAC3B,yBAAyB,OAAO;AAAA,EAChC,UAAU,OAAO,SAAS,mBAAmB;AAAA,EAC7C,iBAAiB,OAAO,SAAS,OAAO,MAAM,OAAO,MAAM,CAAC;AAC9D,CAAC;AAGM,IAAM,yBAA0C;AAAA,EACrD,0BAA0B;AAAA,EAC1B,oBAAoB;AAAA,EACpB,yBAAyB;AAC3B;;;AC9DA,SAAS,YAAY;AAEd,IAAM,iBAAN,cAA6B,KAAK,YAAY,gBAAgB,EAGlE;AAAC;AAEG,IAAM,iBAAN,cAA6B,KAAK,YAAY,gBAAgB,EAIlE;AAAC;;;ACXJ,SAAS,cAAc;AAYvB,IAAM,qBAA0F;AAAA,EAC9F,EAAE,SAAS,wDAAwD,UAAU,YAAY,aAAa,+BAA+B;AAAA,EACrI,EAAE,SAAS,kCAAkC,UAAU,YAAY,aAAa,gCAAgC;AAAA,EAChH,EAAE,SAAS,yCAAyC,UAAU,QAAQ,aAAa,uBAAuB;AAAA,EAC1G,EAAE,SAAS,wBAAwB,UAAU,QAAQ,aAAa,4BAA4B;AAAA,EAC9F,EAAE,SAAS,uCAAuC,UAAU,UAAU,aAAa,sBAAsB;AAAA,EACzG,EAAE,SAAS,2BAA2B,UAAU,YAAY,aAAa,0BAA0B;AAAA,EACnG,EAAE,SAAS,eAAe,UAAU,QAAQ,aAAa,uBAAuB;AAAA,EAChF,EAAE,SAAS,kBAAkB,UAAU,QAAQ,aAAa,2BAA2B;AAAA,EACvF,EAAE,SAAS,qDAAqD,UAAU,YAAY,aAAa,wBAAwB;AAAA,EAC3H,EAAE,SAAS,sDAAsD,UAAU,QAAQ,aAAa,8BAA8B;AAAA,EAC9H,EAAE,SAAS,sBAAsB,UAAU,YAAY,aAAa,wBAAwB;AAAA,EAC5F,EAAE,SAAS,cAAc,UAAU,YAAY,aAAa,+BAA+B;AAC7F;AAEO,IAAM,kBAAkB,CAAC,SAC9B,OAAO,KAAK,MAAM;AAChB,aAAW,EAAE,SAAS,UAAU,YAAY,KAAK,oBAAoB;AACnE,QAAI,QAAQ,KAAK,IAAI,GAAG;AACtB,aAAO;AAAA,QACL,UAAU;AAAA,QACV,MAAM;AAAA,QACN;AAAA,QACA,SAAS,8BAA8B,WAAW;AAAA,QAClD,SAAS,oBAAoB,QAAQ,MAAM;AAAA,MAC7C;AAAA,IACF;AAAA,EACF;AACA,SAAO;AAAA,IACL,UAAU;AAAA,IACV,MAAM;AAAA,IACN,UAAU;AAAA,IACV,SAAS;AAAA,EACX;AACF,CAAC;;;AC9CH,SAAS,UAAAA,eAAc;AAKvB,IAAM,eAA8E;AAAA,EAClF,EAAE,SAAS,yBAAyB,OAAO,OAAO,UAAU,WAAW;AAAA,EACvE,EAAE,SAAS,aAAa,OAAO,mBAAmB,UAAU,OAAO;AAAA,EACnE,EAAE,SAAS,sDAAsD,OAAO,SAAS,UAAU,SAAS;AAAA,EACpG,EAAE,SAAS,8CAA8C,OAAO,eAAe,UAAU,WAAW;AAAA,EACpG,EAAE,SAAS,2DAA2D,OAAO,gBAAgB,UAAU,SAAS;AAAA,EAChH,EAAE,SAAS,uFAAuF,OAAO,kBAAkB,UAAU,OAAO;AAAA,EAC5I,EAAE,SAAS,sCAAsC,OAAO,eAAe,UAAU,SAAS;AAAA,EAC1F,EAAE,SAAS,4BAA4B,OAAO,YAAY,UAAU,WAAW;AAAA,EAC/E,EAAE,SAAS,8CAA8C,OAAO,WAAW,UAAU,WAAW;AAClG;AAEO,IAAM,YAAY,CAAC,SACxBA,QAAO,KAAK,MAAM;AAChB,QAAM,QAAkB,CAAC;AACzB,MAAI,cAAwB;AAC5B,QAAM,gBAA4B,CAAC,OAAO,UAAU,QAAQ,UAAU;AAEtE,aAAW,EAAE,SAAS,OAAO,SAAS,KAAK,cAAc;AACvD,QAAI,QAAQ,KAAK,IAAI,GAAG;AACtB,YAAM,KAAK,KAAK;AAChB,UAAI,cAAc,QAAQ,QAAQ,IAAI,cAAc,QAAQ,WAAW,GAAG;AACxE,sBAAc;AAAA,MAChB;AAAA,IACF;AAAA,EACF;AAEA,MAAI,MAAM,SAAS,GAAG;AACpB,WAAO;AAAA,MACL,UAAU;AAAA,MACV,MAAM;AAAA,MACN,UAAU;AAAA,MACV,SAAS,iBAAiB,MAAM,KAAK,IAAI,CAAC;AAAA,MAC1C,SAAS,SAAS,MAAM,MAAM;AAAA,IAChC;AAAA,EACF;AAEA,SAAO;AAAA,IACL,UAAU;AAAA,IACV,MAAM;AAAA,IACN,UAAU;AAAA,IACV,SAAS;AAAA,EACX;AACF,CAAC;;;AChDH,SAAS,UAAAC,eAAc;AAKvB,IAAM,iBAAmF;AAAA,EACvF,EAAE,SAAS,yFAAyF,UAAU,YAAY,UAAU,WAAW;AAAA,EAC/I,EAAE,SAAS,sEAAsE,UAAU,YAAY,UAAU,UAAU;AAAA,EAC3H,EAAE,SAAS,6CAA6C,UAAU,QAAQ,UAAU,UAAU;AAAA,EAC9F,EAAE,SAAS,+BAA+B,UAAU,QAAQ,UAAU,QAAQ;AAAA,EAC9E,EAAE,SAAS,kFAAkF,UAAU,YAAY,UAAU,cAAc;AAAA,EAC3I,EAAE,SAAS,uCAAuC,UAAU,YAAY,UAAU,cAAc;AAAA,EAChG,EAAE,SAAS,sBAAsB,UAAU,YAAY,UAAU,YAAY;AAAA,EAC7E,EAAE,SAAS,iCAAiC,UAAU,YAAY,UAAU,YAAY;AAC1F;AAEO,IAAM,iBAAiB,CAC5B,MACA,kBAAqC,CAAC,MAEtCA,QAAO,KAAK,MAAM;AAEhB,aAAW,EAAE,SAAS,UAAU,SAAS,KAAK,gBAAgB;AAC5D,QAAI,QAAQ,KAAK,IAAI,GAAG;AACtB,aAAO;AAAA,QACL,UAAU;AAAA,QACV,MAAM;AAAA,QACN;AAAA,QACA,SAAS,2BAA2B,QAAQ;AAAA,QAC5C,SAAS,aAAa,QAAQ;AAAA,MAChC;AAAA,IACF;AAAA,EACF;AAGA,QAAM,QAAQ,KAAK,YAAY;AAC/B,aAAW,QAAQ,iBAAiB;AAClC,QAAI,MAAM,SAAS,KAAK,YAAY,CAAC,GAAG;AACtC,aAAO;AAAA,QACL,UAAU;AAAA,QACV,MAAM;AAAA,QACN,UAAU;AAAA,QACV,SAAS,2BAA2B,IAAI;AAAA,QACxC,SAAS;AAAA,MACX;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AAAA,IACL,UAAU;AAAA,IACV,MAAM;AAAA,IACN,UAAU;AAAA,IACV,SAAS;AAAA,EACX;AACF,CAAC;;;ACtDH,SAAS,UAAAC,eAAc;AAIhB,IAAM,gBAAgB,CAC3B,MACA,aAEAA,QAAO,KAAK,MAAM;AAChB,QAAM,QAAQ,KAAK,YAAY;AAG/B,aAAW,SAAS,SAAS,cAAc;AACzC,QAAI,MAAM,SAAS,MAAM,YAAY,CAAC,GAAG;AACvC,aAAO;AAAA,QACL,UAAU;AAAA,QACV,MAAM;AAAA,QACN,UAAU;AAAA,QACV,SAAS,6BAA6B,KAAK;AAAA,QAC3C,SAAS;AAAA,MACX;AAAA,IACF;AAAA,EACF;AAGA,aAAW,UAAU,SAAS,eAAe;AAC3C,QAAI,MAAM,SAAS,OAAO,YAAY,CAAC,GAAG;AACxC,aAAO;AAAA,QACL,UAAU;AAAA,QACV,MAAM;AAAA,QACN,UAAU;AAAA,QACV,SAAS,8BAA8B,MAAM;AAAA,QAC7C,SAAS;AAAA,MACX;AAAA,IACF;AAAA,EACF;AAGA,MAAI,SAAS,oBAAoB,UAAa,KAAK,SAAS,SAAS,iBAAiB;AACpF,WAAO;AAAA,MACL,UAAU;AAAA,MACV,MAAM;AAAA,MACN,UAAU;AAAA,MACV,SAAS,8BAA8B,KAAK,MAAM,MAAM,SAAS,eAAe;AAAA,IAClF;AAAA,EACF;AAEA,SAAO;AAAA,IACL,UAAU;AAAA,IACV,MAAM;AAAA,IACN,UAAU;AAAA,IACV,SAAS;AAAA,EACX;AACF,CAAC;;;ACrDH,SAAS,UAAAC,SAAQ,SAAS,aAAa;AAUhC,IAAM,mBAAN,cAA+B,QAAQ,IAAI,kBAAkB,EAYlE,EAAE;AAAC;AAIE,IAAM,uBAAuB,CAAC,WACnC,MAAM,QAAQ,kBAAkB;AAAA,EAC9B,OAAO,CAAC,SACNC,QAAO,IAAI,aAAa;AACtB,UAAM,aAA6K,CAAC;AAEpL,QAAI,OAAO,0BAA0B;AACnC,YAAM,SAAS,OAAO,gBAAgB,IAAI;AAC1C,UAAI,OAAO,UAAU;AACnB,mBAAW,KAAK;AAAA,UACd,MAAM,OAAO;AAAA,UACb,UAAU,OAAO;AAAA,UACjB,SAAS,OAAO;AAAA,UAChB,SAAS,OAAO;AAAA,QAClB,CAAC;AAAA,MACH;AAAA,IACF;AAEA,QAAI,OAAO,oBAAoB;AAC7B,YAAM,SAAS,OAAO,UAAU,IAAI;AACpC,UAAI,OAAO,UAAU;AACnB,mBAAW,KAAK;AAAA,UACd,MAAM,OAAO;AAAA,UACb,UAAU,OAAO;AAAA,UACjB,SAAS,OAAO;AAAA,UAChB,SAAS,OAAO;AAAA,QAClB,CAAC;AAAA,MACH;AAAA,IACF;AAEA,QAAI,OAAO,yBAAyB;AAClC,YAAM,SAAS,OAAO,eAAe,MAAM,OAAO,mBAAmB,CAAC,CAAC;AACvE,UAAI,OAAO,UAAU;AACnB,mBAAW,KAAK;AAAA,UACd,MAAM,OAAO;AAAA,UACb,UAAU,OAAO;AAAA,UACjB,SAAS,OAAO;AAAA,UAChB,SAAS,OAAO;AAAA,QAClB,CAAC;AAAA,MACH;AAAA,IACF;AAEA,QAAI,OAAO,UAAU;AACnB,YAAM,SAAS,OAAO,cAAc,MAAM,OAAO,QAAQ;AACzD,UAAI,OAAO,UAAU;AACnB,mBAAW,KAAK;AAAA,UACd,MAAM,OAAO;AAAA,UACb,UAAU,OAAO;AAAA,UACjB,SAAS,OAAO;AAAA,UAChB,SAAS,OAAO;AAAA,QAClB,CAAC;AAAA,MACH;AAAA,IACF;AAEA,UAAM,QAAQ,WAAW,WAAW,IAAI,IAAI,KAAK,IAAI,GAAG,IAAI,WAAW,SAAS,IAAI;AAEpF,WAAO;AAAA,MACL,QAAQ,WAAW,WAAW;AAAA,MAC9B,YAAY,CAAC,GAAG,UAAU;AAAA,MAC1B;AAAA,MACA,WAAW,oBAAI,KAAK;AAAA,IACtB;AAAA,EACF,CAAC;AAAA,EAEH,aAAa,CAAC,SACZA,QAAO,IAAI,aAAa;AACtB,UAAM,aAA6K,CAAC;AAGpL,QAAI,OAAO,oBAAoB;AAC7B,YAAM,SAAS,OAAO,UAAU,IAAI;AACpC,UAAI,OAAO,UAAU;AACnB,mBAAW,KAAK;AAAA,UACd,MAAM,OAAO;AAAA,UACb,UAAU,OAAO;AAAA,UACjB,SAAS,OAAO;AAAA,UAChB,SAAS,OAAO;AAAA,QAClB,CAAC;AAAA,MACH;AAAA,IACF;AAEA,QAAI,OAAO,yBAAyB;AAClC,YAAM,SAAS,OAAO,eAAe,MAAM,OAAO,mBAAmB,CAAC,CAAC;AACvE,UAAI,OAAO,UAAU;AACnB,mBAAW,KAAK;AAAA,UACd,MAAM,OAAO;AAAA,UACb,UAAU,OAAO;AAAA,UACjB,SAAS,OAAO;AAAA,UAChB,SAAS,OAAO;AAAA,QAClB,CAAC;AAAA,MACH;AAAA,IACF;AAEA,QAAI,OAAO,UAAU;AACnB,YAAM,SAAS,OAAO,cAAc,MAAM,OAAO,QAAQ;AACzD,UAAI,OAAO,UAAU;AACnB,mBAAW,KAAK;AAAA,UACd,MAAM,OAAO;AAAA,UACb,UAAU,OAAO;AAAA,UACjB,SAAS,OAAO;AAAA,UAChB,SAAS,OAAO;AAAA,QAClB,CAAC;AAAA,MACH;AAAA,IACF;AAEA,UAAM,QAAQ,WAAW,WAAW,IAAI,IAAI,KAAK,IAAI,GAAG,IAAI,WAAW,SAAS,IAAI;AAEpF,WAAO;AAAA,MACL,QAAQ,WAAW,WAAW;AAAA,MAC9B,YAAY,CAAC,GAAG,UAAU;AAAA,MAC1B;AAAA,MACA,WAAW,oBAAI,KAAK;AAAA,IACtB;AAAA,EACF,CAAC;AAAA,EAEH,WAAW,MAAMA,QAAO,QAAQ,MAAM;AACxC,CAAC;;;AC1II,IAAM,wBAAwB,CAAC,WACpC,qBAAqB;AAAA,EACnB,GAAG;AAAA,EACH,GAAG;AACL,CAAC;","names":["Effect","Effect","Effect","Effect","Effect"]}
+{"version":3,"sources":["../src/types.ts","../src/errors.ts","../src/detectors/injection-detector.ts","../src/detectors/pii-detector.ts","../src/detectors/toxicity-detector.ts","../src/contracts/agent-contract.ts","../src/kill-switch.ts","../src/behavioral-contracts.ts","../src/guardrail-service.ts","../src/runtime.ts"],"sourcesContent":["import { Schema } from \"effect\";\n\n// ─── Violation Type ───\n\nexport const ViolationType = Schema.Literal(\n  \"prompt-injection\",\n  \"pii-detected\",\n  \"toxicity\",\n  \"scope-violation\",\n  \"contract-violation\",\n);\nexport type ViolationType = typeof ViolationType.Type;\n\n// ─── Severity ───\n\nexport const Severity = Schema.Literal(\"low\", \"medium\", \"high\", \"critical\");\nexport type Severity = typeof Severity.Type;\n\n// ─── Guardrail Result ───\n\nexport const GuardrailResultSchema = Schema.Struct({\n  passed: Schema.Boolean,\n  violations: Schema.Array(\n    Schema.Struct({\n      type: ViolationType,\n      severity: Severity,\n      message: Schema.String,\n      details: Schema.optional(Schema.String),\n    }),\n  ),\n  score: Schema.Number, // 0-1, 1 = fully safe\n  checkedAt: Schema.DateFromSelf,\n});\nexport type GuardrailResult = typeof GuardrailResultSchema.Type;\n\n// ─── Agent Contract ───\n\nexport const AgentContractSchema = Schema.Struct({\n  allowedTopics: Schema.Array(Schema.String),\n  deniedTopics: Schema.Array(Schema.String),\n  allowedActions: Schema.Array(Schema.String),\n  deniedActions: Schema.Array(Schema.String),\n  maxOutputLength: Schema.optional(Schema.Number),\n  requireDisclosure: Schema.optional(Schema.Boolean),\n});\nexport type AgentContract = typeof AgentContractSchema.Type;\n\n// ─── Guardrail Config ───\n\nexport const GuardrailConfigSchema = Schema.Struct({\n  enableInjectionDetection: Schema.Boolean,\n  enablePiiDetection: Schema.Boolean,\n  enableToxicityDetection: Schema.Boolean,\n  contract: Schema.optional(AgentContractSchema),\n  customBlocklist: Schema.optional(Schema.Array(Schema.String)),\n});\nexport type GuardrailConfig = typeof GuardrailConfigSchema.Type;\n\nexport const defaultGuardrailConfig: GuardrailConfig = {\n  enableInjectionDetection: true,\n  enablePiiDetection: true,\n  enableToxicityDetection: true,\n};\n","import { Data } from \"effect\";\n\nexport class GuardrailError extends Data.TaggedError(\"GuardrailError\")<{\n  readonly message: string;\n  readonly cause?: unknown;\n}> {}\n\nexport class ViolationError extends Data.TaggedError(\"ViolationError\")<{\n  readonly message: string;\n  readonly violationType: string;\n  readonly severity: string;\n}> {}\n","import { Effect } from \"effect\";\nimport type { ViolationType, Severity } from \"../types.js\";\n\nexport interface DetectionResult {\n  readonly detected: boolean;\n  readonly type: ViolationType;\n  readonly severity: Severity;\n  readonly message: string;\n  readonly details?: string;\n}\n\n// Common prompt injection patterns\nconst INJECTION_PATTERNS: Array<{ pattern: RegExp; severity: Severity; description: string }> = [\n  { pattern: /ignore\\s+(all\\s+)?previous\\s+(instructions|prompts)/i, severity: \"critical\", description: \"Instruction override attempt\" },\n  { pattern: /disregard\\s+(all\\s+)?previous/i, severity: \"critical\", description: \"Instruction disregard attempt\" },\n  { pattern: /forget\\s+(all\\s+)?(your\\s+)?previous/i, severity: \"high\", description: \"Memory reset attempt\" },\n  { pattern: /you\\s+are\\s+now\\s+a/i, severity: \"high\", description: \"Role reassignment attempt\" },\n  { pattern: /act\\s+as\\s+(if\\s+)?(you\\s+are|a)\\s/i, severity: \"medium\", description: \"Role play injection\" },\n  { pattern: /system\\s*:\\s*you\\s+are/i, severity: \"critical\", description: \"System prompt injection\" },\n  { pattern: /\\[SYSTEM\\]/i, severity: \"high\", description: \"System tag injection\" },\n  { pattern: /\\<\\/?system\\>/i, severity: \"high\", description: \"System XML tag injection\" },\n  { pattern: /do\\s+not\\s+follow\\s+(your\\s+)?(rules|guidelines)/i, severity: \"critical\", description: \"Rule override attempt\" },\n  { pattern: /pretend\\s+(that\\s+)?you\\s+(don't|do\\s+not)\\s+have/i, severity: \"high\", description: \"Capability override attempt\" },\n  { pattern: /\\bDAN\\b.*\\bmode\\b/i, severity: \"critical\", description: \"DAN jailbreak attempt\" },\n  { pattern: /jailbreak/i, severity: \"critical\", description: \"Explicit jailbreak reference\" },\n];\n\nexport const detectInjection = (text: string): Effect.Effect<DetectionResult, never> =>\n  Effect.sync(() => {\n    for (const { pattern, severity, description } of INJECTION_PATTERNS) {\n      if (pattern.test(text)) {\n        return {\n          detected: true,\n          type: \"prompt-injection\" as ViolationType,\n          severity,\n          message: `Prompt injection detected: ${description}`,\n          details: `Matched pattern: ${pattern.source}`,\n        };\n      }\n    }\n    return {\n      detected: false,\n      type: \"prompt-injection\" as ViolationType,\n      severity: \"low\" as Severity,\n      message: \"No injection detected\",\n    };\n  });\n","import { Effect } from \"effect\";\nimport type { ViolationType, Severity } from \"../types.js\";\nimport type { DetectionResult } from \"./injection-detector.js\";\n\n// PII patterns\nconst PII_PATTERNS: Array<{ pattern: RegExp; label: string; severity: Severity }> = [\n  { pattern: /\\b\\d{3}-\\d{2}-\\d{4}\\b/, label: \"SSN\", severity: \"critical\" },\n  { pattern: /\\b\\d{9}\\b/, label: \"SSN (no dashes)\", severity: \"high\" },\n  { pattern: /\\b[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\\.[A-Za-z]{2,}\\b/, label: \"Email\", severity: \"medium\" },\n  { pattern: /\\b\\d{4}[\\s-]?\\d{4}[\\s-]?\\d{4}[\\s-]?\\d{4}\\b/, label: \"Credit card\", severity: \"critical\" },\n  { pattern: /\\b(?:\\+?1[-.\\s]?)?\\(?\\d{3}\\)?[-.\\s]?\\d{3}[-.\\s]?\\d{4}\\b/, label: \"Phone number\", severity: \"medium\" },\n  { pattern: /\\b\\d{1,5}\\s\\w+\\s(?:Street|St|Avenue|Ave|Road|Rd|Drive|Dr|Lane|Ln|Boulevard|Blvd)\\b/i, label: \"Street address\", severity: \"high\" },\n  { pattern: /\\b[A-Z]{1,2}\\d{1,2}\\s?\\d[A-Z]{2}\\b/, label: \"UK postcode\", severity: \"medium\" },\n  { pattern: /\\bpassword\\s*[:=]\\s*\\S+/i, label: \"Password\", severity: \"critical\" },\n  { pattern: /\\b(sk-|sk_live_|pk_live_|sk_test_)\\S{20,}/i, label: \"API key\", severity: \"critical\" },\n];\n\nexport const detectPii = (text: string): Effect.Effect<DetectionResult, never> =>\n  Effect.sync(() => {\n    const found: string[] = [];\n    let maxSeverity: Severity = \"low\";\n    const severityOrder: Severity[] = [\"low\", \"medium\", \"high\", \"critical\"];\n\n    for (const { pattern, label, severity } of PII_PATTERNS) {\n      if (pattern.test(text)) {\n        found.push(label);\n        if (severityOrder.indexOf(severity) > severityOrder.indexOf(maxSeverity)) {\n          maxSeverity = severity;\n        }\n      }\n    }\n\n    if (found.length > 0) {\n      return {\n        detected: true,\n        type: \"pii-detected\" as ViolationType,\n        severity: maxSeverity,\n        message: `PII detected: ${found.join(\", \")}`,\n        details: `Found ${found.length} PII pattern(s)`,\n      };\n    }\n\n    return {\n      detected: false,\n      type: \"pii-detected\" as ViolationType,\n      severity: \"low\" as Severity,\n      message: \"No PII detected\",\n    };\n  });\n","import { Effect } from \"effect\";\nimport type { ViolationType, Severity } from \"../types.js\";\nimport type { DetectionResult } from \"./injection-detector.js\";\n\n// Toxicity keyword categories (simplified blocklist)\nconst TOXIC_PATTERNS: Array<{ pattern: RegExp; category: string; severity: Severity }> = [\n  { pattern: /\\b(kill|murder|assassinate)\\s+(yourself|himself|herself|themselves|someone|people)\\b/i, severity: \"critical\", category: \"violence\" },\n  { pattern: /\\bhow\\s+to\\s+(make|build|create)\\s+(a\\s+)?(bomb|weapon|explosive)/i, severity: \"critical\", category: \"weapons\" },\n  { pattern: /\\b(hack|exploit|breach)\\s+(into|a|the)\\s/i, severity: \"high\", category: \"hacking\" },\n  { pattern: /\\b(steal|rob|burglarize)\\s/i, severity: \"high\", category: \"theft\" },\n  { pattern: /\\b(hate|despise)\\s+(all\\s+)?(women|men|blacks|whites|jews|muslims|christians)/i, severity: \"critical\", category: \"hate-speech\" },\n  { pattern: /\\b(racial|ethnic)\\s+(slur|epithet)/i, severity: \"critical\", category: \"hate-speech\" },\n  { pattern: /\\bself[- ]?harm\\b/i, severity: \"critical\", category: \"self-harm\" },\n  { pattern: /\\bsuicide\\s+(method|how|way)/i, severity: \"critical\", category: \"self-harm\" },\n];\n\nexport const detectToxicity = (\n  text: string,\n  customBlocklist: readonly string[] = [],\n): Effect.Effect<DetectionResult, never> =>\n  Effect.sync(() => {\n    // Check built-in patterns\n    for (const { pattern, category, severity } of TOXIC_PATTERNS) {\n      if (pattern.test(text)) {\n        return {\n          detected: true,\n          type: \"toxicity\" as ViolationType,\n          severity,\n          message: `Toxic content detected: ${category}`,\n          details: `Category: ${category}`,\n        };\n      }\n    }\n\n    // Check custom blocklist\n    const lower = text.toLowerCase();\n    for (const word of customBlocklist) {\n      if (lower.includes(word.toLowerCase())) {\n        return {\n          detected: true,\n          type: \"toxicity\" as ViolationType,\n          severity: \"high\" as Severity,\n          message: `Blocked term detected: \"${word}\"`,\n          details: `Custom blocklist match`,\n        };\n      }\n    }\n\n    return {\n      detected: false,\n      type: \"toxicity\" as ViolationType,\n      severity: \"low\" as Severity,\n      message: \"No toxic content detected\",\n    };\n  });\n","import { Effect } from \"effect\";\nimport type { AgentContract, ViolationType, Severity } from \"../types.js\";\nimport type { DetectionResult } from \"../detectors/injection-detector.js\";\n\nexport const checkContract = (\n  text: string,\n  contract: AgentContract,\n): Effect.Effect<DetectionResult, never> =>\n  Effect.sync(() => {\n    const lower = text.toLowerCase();\n\n    // Check denied topics\n    for (const topic of contract.deniedTopics) {\n      if (lower.includes(topic.toLowerCase())) {\n        return {\n          detected: true,\n          type: \"contract-violation\" as ViolationType,\n          severity: \"high\" as Severity,\n          message: `Denied topic referenced: \"${topic}\"`,\n          details: `Contract prohibits this topic`,\n        };\n      }\n    }\n\n    // Check denied actions\n    for (const action of contract.deniedActions) {\n      if (lower.includes(action.toLowerCase())) {\n        return {\n          detected: true,\n          type: \"scope-violation\" as ViolationType,\n          severity: \"high\" as Severity,\n          message: `Denied action referenced: \"${action}\"`,\n          details: `Contract prohibits this action`,\n        };\n      }\n    }\n\n    // Check output length\n    if (contract.maxOutputLength !== undefined && text.length > contract.maxOutputLength) {\n      return {\n        detected: true,\n        type: \"contract-violation\" as ViolationType,\n        severity: \"medium\" as Severity,\n        message: `Output exceeds max length (${text.length} > ${contract.maxOutputLength})`,\n      };\n    }\n\n    return {\n      detected: false,\n      type: \"contract-violation\" as ViolationType,\n      severity: \"low\" as Severity,\n      message: \"Contract check passed\",\n    };\n  });\n","import { Effect, Context, Layer, Ref, Deferred } from \"effect\";\nimport { EventBus } from \"@reactive-agents/core\";\n\n/**\n * KillSwitchService — emergency stop for agent execution.\n *\n * When triggered, the execution engine will halt at the next phase\n * transition and return a TaskResult with the kill reason.\n */\nexport class KillSwitchService extends Context.Tag(\"KillSwitchService\")<\n  KillSwitchService,\n  {\n    /** Trigger the kill switch for an agent. Execution halts at next phase boundary. */\n    readonly trigger: (agentId: string, reason: string) => Effect.Effect<void>;\n    /** Check if the kill switch has been triggered for an agent. */\n    readonly isTriggered: (agentId: string) => Effect.Effect<{ triggered: boolean; reason?: string }>;\n    /** Clear the kill switch for an agent (re-enable execution). */\n    readonly clear: (agentId: string) => Effect.Effect<void>;\n    /** Trigger a global kill switch — halts ALL agents. */\n    readonly triggerGlobal: (reason: string) => Effect.Effect<void>;\n    /** Check if global kill switch is active. */\n    readonly isGlobalTriggered: () => Effect.Effect<{ triggered: boolean; reason?: string }>;\n    /** Clear the global kill switch. */\n    readonly clearGlobal: () => Effect.Effect<void>;\n    /** Pause agent execution at the next phase boundary (blocks until resume). */\n    readonly pause: (agentId: string) => Effect.Effect<void>;\n    /** Resume a paused agent. */\n    readonly resume: (agentId: string) => Effect.Effect<void>;\n    /** Signal agent to stop gracefully at the next phase boundary. */\n    readonly stop: (agentId: string, reason: string) => Effect.Effect<void>;\n    /** Immediately terminate agent (also triggers kill switch). */\n    readonly terminate: (agentId: string, reason: string) => Effect.Effect<void>;\n    /** Get the current lifecycle state for an agent. */\n    readonly getLifecycle: (agentId: string) => Effect.Effect<\"running\" | \"paused\" | \"stopping\" | \"terminated\" | \"unknown\">;\n    /**\n     * If paused, block until resumed. Emits AgentPaused when blocking starts and\n     * AgentResumed when unblocked — so events carry the real taskId from the\n     * execution context rather than a synthetic \"lifecycle\" placeholder.\n     * Returns \"stopping\" if stop() was called while paused, else \"ok\".\n     */\n    readonly waitIfPaused: (agentId: string, taskId: string) => Effect.Effect<\"ok\" | \"stopping\">;\n  }\n>() {}\n\nexport const KillSwitchServiceLive = () =>\n  Layer.effect(\n    KillSwitchService,\n    Effect.gen(function* () {\n      const agentKills = yield* Ref.make<Map<string, string>>(new Map());\n      const globalKill = yield* Ref.make<string | null>(null);\n      const lifecycleRef = yield* Ref.make<Map<string, \"running\" | \"paused\" | \"stopping\" | \"terminated\">>(new Map());\n      const pauseDeferreds = yield* Ref.make<Map<string, Deferred.Deferred<void>>>(new Map());\n\n      // EventBus is optional — publish lifecycle events when available\n      const ebOpt = yield* Effect.serviceOption(EventBus).pipe(\n        Effect.catchAll(() => Effect.succeed({ _tag: \"None\" as const })),\n      );\n      const eb = ebOpt._tag === \"Some\" ? ebOpt.value : null;\n\n      return KillSwitchService.of({\n        trigger: (agentId, reason) =>\n          Ref.update(agentKills, (m) => {\n            const newMap = new Map(m);\n            newMap.set(agentId, reason);\n            return newMap;\n          }),\n\n        isTriggered: (agentId) =>\n          Effect.gen(function* () {\n            // Global takes precedence\n            const globalReason = yield* Ref.get(globalKill);\n            if (globalReason != null) {\n              return { triggered: true, reason: globalReason };\n            }\n            const kills = yield* Ref.get(agentKills);\n            const reason = kills.get(agentId);\n            return reason != null\n              ? { triggered: true, reason }\n              : { triggered: false };\n          }),\n\n        clear: (agentId) =>\n          Ref.update(agentKills, (m) => {\n            const newMap = new Map(m);\n            newMap.delete(agentId);\n            return newMap;\n          }),\n\n        triggerGlobal: (reason) => Ref.set(globalKill, reason),\n\n        isGlobalTriggered: () =>\n          Effect.gen(function* () {\n            const reason = yield* Ref.get(globalKill);\n            return reason != null\n              ? { triggered: true, reason }\n              : { triggered: false };\n          }),\n\n        clearGlobal: () => Ref.set(globalKill, null),\n\n        pause: (agentId) =>\n          Effect.gen(function* () {\n            const d = yield* Deferred.make<void>();\n            yield* Ref.update(pauseDeferreds, (m) => {\n              const n = new Map(m);\n              n.set(agentId, d);\n              return n;\n            });\n            yield* Ref.update(lifecycleRef, (m) => {\n              const n = new Map(m);\n              n.set(agentId, \"paused\");\n              return n;\n            });\n            // AgentPaused is emitted from waitIfPaused() so it carries the real\n            // taskId from the execution context and fires exactly when execution blocks.\n          }),\n\n        resume: (agentId) =>\n          Effect.gen(function* () {\n            const deferreds = yield* Ref.get(pauseDeferreds);\n            const d = deferreds.get(agentId);\n            if (d) {\n              yield* Deferred.succeed(d, undefined);\n              yield* Ref.update(pauseDeferreds, (m) => {\n                const n = new Map(m);\n                n.delete(agentId);\n                return n;\n              });\n            }\n            yield* Ref.update(lifecycleRef, (m) => {\n              const n = new Map(m);\n              n.set(agentId, \"running\");\n              return n;\n            });\n            // AgentResumed is emitted from waitIfPaused() after the deferred resolves,\n            // so it carries the real taskId and fires as execution actually unblocks.\n          }),\n\n        stop: (agentId, _reason) =>\n          Ref.update(lifecycleRef, (m) => {\n            const n = new Map(m);\n            n.set(agentId, \"stopping\");\n            return n;\n          }),\n\n        terminate: (agentId, reason) =>\n          Effect.gen(function* () {\n            yield* Ref.update(lifecycleRef, (m) => {\n              const n = new Map(m);\n              n.set(agentId, \"terminated\");\n              return n;\n            });\n            yield* Ref.update(agentKills, (m) => {\n              const n = new Map(m);\n              n.set(agentId, reason);\n              return n;\n            });\n          }),\n\n        getLifecycle: (agentId) =>\n          Ref.get(lifecycleRef).pipe(\n            Effect.map((m) => (m.get(agentId) ?? \"unknown\") as \"running\" | \"paused\" | \"stopping\" | \"terminated\" | \"unknown\"),\n          ),\n\n        waitIfPaused: (agentId, taskId) =>\n          Effect.gen(function* () {\n            const lifecycle = yield* Ref.get(lifecycleRef).pipe(\n              Effect.map((m) => m.get(agentId)),\n            );\n            if (lifecycle === \"paused\") {\n              // Emit AgentPaused here — execution has reached a phase boundary and\n              // is actually about to block, so the event carries the real taskId.\n              if (eb) {\n                yield* eb.publish({ _tag: \"AgentPaused\", agentId, taskId })\n                  .pipe(Effect.catchAll(() => Effect.void));\n              }\n              const deferreds = yield* Ref.get(pauseDeferreds);\n              const d = deferreds.get(agentId);\n              if (d) {\n                yield* Deferred.await(d);\n              }\n              // Emit AgentResumed now — execution is actually continuing.\n              if (eb) {\n                yield* eb.publish({ _tag: \"AgentResumed\", agentId, taskId })\n                  .pipe(Effect.catchAll(() => Effect.void));\n              }\n            }\n            const newLifecycle = yield* Ref.get(lifecycleRef).pipe(\n              Effect.map((m) => m.get(agentId)),\n            );\n            return newLifecycle === \"stopping\" ? (\"stopping\" as const) : (\"ok\" as const);\n          }),\n      });\n    }),\n  );\n","import { Effect, Context, Layer, Schema } from \"effect\";\n\n// ─── Behavioral Contract Schema ───\n\nexport const BehavioralContractSchema = Schema.Struct({\n  /** Tools the agent is NOT allowed to call. */\n  deniedTools: Schema.optional(Schema.Array(Schema.String)),\n  /** If set, ONLY these tools may be called (allowlist). */\n  allowedTools: Schema.optional(Schema.Array(Schema.String)),\n  /** Maximum number of tool calls per execution. */\n  maxToolCalls: Schema.optional(Schema.Number),\n  /** Maximum iterations before forced halt. */\n  maxIterations: Schema.optional(Schema.Number),\n  /** Maximum output length in characters. */\n  maxOutputLength: Schema.optional(Schema.Number),\n  /** Topics the agent must not address. */\n  deniedTopics: Schema.optional(Schema.Array(Schema.String)),\n  /** If true, agent must disclose it is an AI. */\n  requireDisclosure: Schema.optional(Schema.Boolean),\n});\nexport type BehavioralContract = typeof BehavioralContractSchema.Type;\n\n// ─── Violation Types ───\n\nexport interface ContractViolation {\n  readonly rule: string;\n  readonly message: string;\n  readonly severity: \"warning\" | \"block\";\n}\n\n// ─── Service ───\n\nexport class BehavioralContractService extends Context.Tag(\"BehavioralContractService\")<\n  BehavioralContractService,\n  {\n    /** Check if a tool call is allowed by the contract. */\n    readonly checkToolCall: (toolName: string, toolCallCount: number) => Effect.Effect<ContractViolation | null>;\n    /** Check if output complies with the contract. */\n    readonly checkOutput: (output: string) => Effect.Effect<ContractViolation | null>;\n    /** Check iteration count against contract. */\n    readonly checkIteration: (iteration: number) => Effect.Effect<ContractViolation | null>;\n    /** Get the active contract. */\n    readonly getContract: () => Effect.Effect<BehavioralContract>;\n  }\n>() {}\n\nexport const BehavioralContractServiceLive = (contract: BehavioralContract) =>\n  Layer.succeed(BehavioralContractService, {\n    checkToolCall: (toolName, toolCallCount) =>\n      Effect.sync(() => {\n        // Check denied tools\n        if (contract.deniedTools?.some((d) => d.toLowerCase() === toolName.toLowerCase())) {\n          return {\n            rule: \"denied-tool\",\n            message: `Tool \"${toolName}\" is not allowed by behavioral contract`,\n            severity: \"block\" as const,\n          };\n        }\n\n        // Check allowed tools (allowlist)\n        if (contract.allowedTools && !contract.allowedTools.some((a) => a.toLowerCase() === toolName.toLowerCase())) {\n          return {\n            rule: \"tool-not-in-allowlist\",\n            message: `Tool \"${toolName}\" is not in the allowed tools list`,\n            severity: \"block\" as const,\n          };\n        }\n\n        // Check max tool calls\n        if (contract.maxToolCalls != null && toolCallCount >= contract.maxToolCalls) {\n          return {\n            rule: \"max-tool-calls\",\n            message: `Tool call limit reached (${contract.maxToolCalls})`,\n            severity: \"block\" as const,\n          };\n        }\n\n        return null;\n      }),\n\n    checkOutput: (output) =>\n      Effect.sync(() => {\n        // Check max output length\n        if (contract.maxOutputLength != null && output.length > contract.maxOutputLength) {\n          return {\n            rule: \"max-output-length\",\n            message: `Output exceeds maximum length (${output.length} > ${contract.maxOutputLength})`,\n            severity: \"block\" as const,\n          };\n        }\n\n        // Check denied topics\n        if (contract.deniedTopics) {\n          const lower = output.toLowerCase();\n          for (const topic of contract.deniedTopics) {\n            if (lower.includes(topic.toLowerCase())) {\n              return {\n                rule: \"denied-topic\",\n                message: `Output references denied topic: \"${topic}\"`,\n                severity: \"block\" as const,\n              };\n            }\n          }\n        }\n\n        return null;\n      }),\n\n    checkIteration: (iteration) =>\n      Effect.sync(() => {\n        if (contract.maxIterations != null && iteration > contract.maxIterations) {\n          return {\n            rule: \"max-iterations\",\n            message: `Iteration ${iteration} exceeds contract limit of ${contract.maxIterations}`,\n            severity: \"block\" as const,\n          };\n        }\n        return null;\n      }),\n\n    getContract: () => Effect.succeed(contract),\n  });\n","import { Effect, Context, Layer } from \"effect\";\nimport type { GuardrailResult, GuardrailConfig } from \"./types.js\";\nimport { GuardrailError } from \"./errors.js\";\nimport { detectInjection } from \"./detectors/injection-detector.js\";\nimport { detectPii } from \"./detectors/pii-detector.js\";\nimport { detectToxicity } from \"./detectors/toxicity-detector.js\";\nimport { checkContract } from \"./contracts/agent-contract.js\";\n\n// ─── Service Tag ───\n\nexport class GuardrailService extends Context.Tag(\"GuardrailService\")<\n  GuardrailService,\n  {\n    /** Check input text against all configured guardrails. */\n    readonly check: (text: string) => Effect.Effect<GuardrailResult, GuardrailError>;\n\n    /** Check output text (may have different rules). */\n    readonly checkOutput: (text: string) => Effect.Effect<GuardrailResult, GuardrailError>;\n\n    /** Get current config. */\n    readonly getConfig: () => Effect.Effect<GuardrailConfig, never>;\n  }\n>() {}\n\n// ─── Live Implementation ───\n\nexport const GuardrailServiceLive = (config: GuardrailConfig) =>\n  Layer.succeed(GuardrailService, {\n    check: (text) =>\n      Effect.gen(function* () {\n        const violations: Array<{ type: GuardrailResult[\"violations\"][number][\"type\"]; severity: GuardrailResult[\"violations\"][number][\"severity\"]; message: string; details?: string }> = [];\n\n        if (config.enableInjectionDetection) {\n          const result = yield* detectInjection(text);\n          if (result.detected) {\n            violations.push({\n              type: result.type,\n              severity: result.severity,\n              message: result.message,\n              details: result.details,\n            });\n          }\n        }\n\n        if (config.enablePiiDetection) {\n          const result = yield* detectPii(text);\n          if (result.detected) {\n            violations.push({\n              type: result.type,\n              severity: result.severity,\n              message: result.message,\n              details: result.details,\n            });\n          }\n        }\n\n        if (config.enableToxicityDetection) {\n          const result = yield* detectToxicity(text, config.customBlocklist ?? []);\n          if (result.detected) {\n            violations.push({\n              type: result.type,\n              severity: result.severity,\n              message: result.message,\n              details: result.details,\n            });\n          }\n        }\n\n        if (config.contract) {\n          const result = yield* checkContract(text, config.contract);\n          if (result.detected) {\n            violations.push({\n              type: result.type,\n              severity: result.severity,\n              message: result.message,\n              details: result.details,\n            });\n          }\n        }\n\n        const score = violations.length === 0 ? 1 : Math.max(0, 1 - violations.length * 0.25);\n\n        return {\n          passed: violations.length === 0,\n          violations: [...violations],\n          score,\n          checkedAt: new Date(),\n        } satisfies GuardrailResult;\n      }),\n\n    checkOutput: (text) =>\n      Effect.gen(function* () {\n        const violations: Array<{ type: GuardrailResult[\"violations\"][number][\"type\"]; severity: GuardrailResult[\"violations\"][number][\"severity\"]; message: string; details?: string }> = [];\n\n        // Output checks: PII and toxicity (not injection)\n        if (config.enablePiiDetection) {\n          const result = yield* detectPii(text);\n          if (result.detected) {\n            violations.push({\n              type: result.type,\n              severity: result.severity,\n              message: result.message,\n              details: result.details,\n            });\n          }\n        }\n\n        if (config.enableToxicityDetection) {\n          const result = yield* detectToxicity(text, config.customBlocklist ?? []);\n          if (result.detected) {\n            violations.push({\n              type: result.type,\n              severity: result.severity,\n              message: result.message,\n              details: result.details,\n            });\n          }\n        }\n\n        if (config.contract) {\n          const result = yield* checkContract(text, config.contract);\n          if (result.detected) {\n            violations.push({\n              type: result.type,\n              severity: result.severity,\n              message: result.message,\n              details: result.details,\n            });\n          }\n        }\n\n        const score = violations.length === 0 ? 1 : Math.max(0, 1 - violations.length * 0.25);\n\n        return {\n          passed: violations.length === 0,\n          violations: [...violations],\n          score,\n          checkedAt: new Date(),\n        } satisfies GuardrailResult;\n      }),\n\n    getConfig: () => Effect.succeed(config),\n  });\n","import type { GuardrailConfig } from \"./types.js\";\nimport { defaultGuardrailConfig } from \"./types.js\";\nimport { GuardrailServiceLive } from \"./guardrail-service.js\";\n\nexport const createGuardrailsLayer = (config?: Partial<GuardrailConfig>) =>\n  GuardrailServiceLive({\n    ...defaultGuardrailConfig,\n    ...config,\n  });\n"],"mappings":";AAAA,SAAS,cAAc;AAIhB,IAAM,gBAAgB,OAAO;AAAA,EAClC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAKO,IAAM,WAAW,OAAO,QAAQ,OAAO,UAAU,QAAQ,UAAU;AAKnE,IAAM,wBAAwB,OAAO,OAAO;AAAA,EACjD,QAAQ,OAAO;AAAA,EACf,YAAY,OAAO;AAAA,IACjB,OAAO,OAAO;AAAA,MACZ,MAAM;AAAA,MACN,UAAU;AAAA,MACV,SAAS,OAAO;AAAA,MAChB,SAAS,OAAO,SAAS,OAAO,MAAM;AAAA,IACxC,CAAC;AAAA,EACH;AAAA,EACA,OAAO,OAAO;AAAA;AAAA,EACd,WAAW,OAAO;AACpB,CAAC;AAKM,IAAM,sBAAsB,OAAO,OAAO;AAAA,EAC/C,eAAe,OAAO,MAAM,OAAO,MAAM;AAAA,EACzC,cAAc,OAAO,MAAM,OAAO,MAAM;AAAA,EACxC,gBAAgB,OAAO,MAAM,OAAO,MAAM;AAAA,EAC1C,eAAe,OAAO,MAAM,OAAO,MAAM;AAAA,EACzC,iBAAiB,OAAO,SAAS,OAAO,MAAM;AAAA,EAC9C,mBAAmB,OAAO,SAAS,OAAO,OAAO;AACnD,CAAC;AAKM,IAAM,wBAAwB,OAAO,OAAO;AAAA,EACjD,0BAA0B,OAAO;AAAA,EACjC,oBAAoB,OAAO;AAAA,EAC3B,yBAAyB,OAAO;AAAA,EAChC,UAAU,OAAO,SAAS,mBAAmB;AAAA,EAC7C,iBAAiB,OAAO,SAAS,OAAO,MAAM,OAAO,MAAM,CAAC;AAC9D,CAAC;AAGM,IAAM,yBAA0C;AAAA,EACrD,0BAA0B;AAAA,EAC1B,oBAAoB;AAAA,EACpB,yBAAyB;AAC3B;;;AC9DA,SAAS,YAAY;AAEd,IAAM,iBAAN,cAA6B,KAAK,YAAY,gBAAgB,EAGlE;AAAC;AAEG,IAAM,iBAAN,cAA6B,KAAK,YAAY,gBAAgB,EAIlE;AAAC;;;ACXJ,SAAS,cAAc;AAYvB,IAAM,qBAA0F;AAAA,EAC9F,EAAE,SAAS,wDAAwD,UAAU,YAAY,aAAa,+BAA+B;AAAA,EACrI,EAAE,SAAS,kCAAkC,UAAU,YAAY,aAAa,gCAAgC;AAAA,EAChH,EAAE,SAAS,yCAAyC,UAAU,QAAQ,aAAa,uBAAuB;AAAA,EAC1G,EAAE,SAAS,wBAAwB,UAAU,QAAQ,aAAa,4BAA4B;AAAA,EAC9F,EAAE,SAAS,uCAAuC,UAAU,UAAU,aAAa,sBAAsB;AAAA,EACzG,EAAE,SAAS,2BAA2B,UAAU,YAAY,aAAa,0BAA0B;AAAA,EACnG,EAAE,SAAS,eAAe,UAAU,QAAQ,aAAa,uBAAuB;AAAA,EAChF,EAAE,SAAS,kBAAkB,UAAU,QAAQ,aAAa,2BAA2B;AAAA,EACvF,EAAE,SAAS,qDAAqD,UAAU,YAAY,aAAa,wBAAwB;AAAA,EAC3H,EAAE,SAAS,sDAAsD,UAAU,QAAQ,aAAa,8BAA8B;AAAA,EAC9H,EAAE,SAAS,sBAAsB,UAAU,YAAY,aAAa,wBAAwB;AAAA,EAC5F,EAAE,SAAS,cAAc,UAAU,YAAY,aAAa,+BAA+B;AAC7F;AAEO,IAAM,kBAAkB,CAAC,SAC9B,OAAO,KAAK,MAAM;AAChB,aAAW,EAAE,SAAS,UAAU,YAAY,KAAK,oBAAoB;AACnE,QAAI,QAAQ,KAAK,IAAI,GAAG;AACtB,aAAO;AAAA,QACL,UAAU;AAAA,QACV,MAAM;AAAA,QACN;AAAA,QACA,SAAS,8BAA8B,WAAW;AAAA,QAClD,SAAS,oBAAoB,QAAQ,MAAM;AAAA,MAC7C;AAAA,IACF;AAAA,EACF;AACA,SAAO;AAAA,IACL,UAAU;AAAA,IACV,MAAM;AAAA,IACN,UAAU;AAAA,IACV,SAAS;AAAA,EACX;AACF,CAAC;;;AC9CH,SAAS,UAAAA,eAAc;AAKvB,IAAM,eAA8E;AAAA,EAClF,EAAE,SAAS,yBAAyB,OAAO,OAAO,UAAU,WAAW;AAAA,EACvE,EAAE,SAAS,aAAa,OAAO,mBAAmB,UAAU,OAAO;AAAA,EACnE,EAAE,SAAS,sDAAsD,OAAO,SAAS,UAAU,SAAS;AAAA,EACpG,EAAE,SAAS,8CAA8C,OAAO,eAAe,UAAU,WAAW;AAAA,EACpG,EAAE,SAAS,2DAA2D,OAAO,gBAAgB,UAAU,SAAS;AAAA,EAChH,EAAE,SAAS,uFAAuF,OAAO,kBAAkB,UAAU,OAAO;AAAA,EAC5I,EAAE,SAAS,sCAAsC,OAAO,eAAe,UAAU,SAAS;AAAA,EAC1F,EAAE,SAAS,4BAA4B,OAAO,YAAY,UAAU,WAAW;AAAA,EAC/E,EAAE,SAAS,8CAA8C,OAAO,WAAW,UAAU,WAAW;AAClG;AAEO,IAAM,YAAY,CAAC,SACxBA,QAAO,KAAK,MAAM;AAChB,QAAM,QAAkB,CAAC;AACzB,MAAI,cAAwB;AAC5B,QAAM,gBAA4B,CAAC,OAAO,UAAU,QAAQ,UAAU;AAEtE,aAAW,EAAE,SAAS,OAAO,SAAS,KAAK,cAAc;AACvD,QAAI,QAAQ,KAAK,IAAI,GAAG;AACtB,YAAM,KAAK,KAAK;AAChB,UAAI,cAAc,QAAQ,QAAQ,IAAI,cAAc,QAAQ,WAAW,GAAG;AACxE,sBAAc;AAAA,MAChB;AAAA,IACF;AAAA,EACF;AAEA,MAAI,MAAM,SAAS,GAAG;AACpB,WAAO;AAAA,MACL,UAAU;AAAA,MACV,MAAM;AAAA,MACN,UAAU;AAAA,MACV,SAAS,iBAAiB,MAAM,KAAK,IAAI,CAAC;AAAA,MAC1C,SAAS,SAAS,MAAM,MAAM;AAAA,IAChC;AAAA,EACF;AAEA,SAAO;AAAA,IACL,UAAU;AAAA,IACV,MAAM;AAAA,IACN,UAAU;AAAA,IACV,SAAS;AAAA,EACX;AACF,CAAC;;;AChDH,SAAS,UAAAC,eAAc;AAKvB,IAAM,iBAAmF;AAAA,EACvF,EAAE,SAAS,yFAAyF,UAAU,YAAY,UAAU,WAAW;AAAA,EAC/I,EAAE,SAAS,sEAAsE,UAAU,YAAY,UAAU,UAAU;AAAA,EAC3H,EAAE,SAAS,6CAA6C,UAAU,QAAQ,UAAU,UAAU;AAAA,EAC9F,EAAE,SAAS,+BAA+B,UAAU,QAAQ,UAAU,QAAQ;AAAA,EAC9E,EAAE,SAAS,kFAAkF,UAAU,YAAY,UAAU,cAAc;AAAA,EAC3I,EAAE,SAAS,uCAAuC,UAAU,YAAY,UAAU,cAAc;AAAA,EAChG,EAAE,SAAS,sBAAsB,UAAU,YAAY,UAAU,YAAY;AAAA,EAC7E,EAAE,SAAS,iCAAiC,UAAU,YAAY,UAAU,YAAY;AAC1F;AAEO,IAAM,iBAAiB,CAC5B,MACA,kBAAqC,CAAC,MAEtCA,QAAO,KAAK,MAAM;AAEhB,aAAW,EAAE,SAAS,UAAU,SAAS,KAAK,gBAAgB;AAC5D,QAAI,QAAQ,KAAK,IAAI,GAAG;AACtB,aAAO;AAAA,QACL,UAAU;AAAA,QACV,MAAM;AAAA,QACN;AAAA,QACA,SAAS,2BAA2B,QAAQ;AAAA,QAC5C,SAAS,aAAa,QAAQ;AAAA,MAChC;AAAA,IACF;AAAA,EACF;AAGA,QAAM,QAAQ,KAAK,YAAY;AAC/B,aAAW,QAAQ,iBAAiB;AAClC,QAAI,MAAM,SAAS,KAAK,YAAY,CAAC,GAAG;AACtC,aAAO;AAAA,QACL,UAAU;AAAA,QACV,MAAM;AAAA,QACN,UAAU;AAAA,QACV,SAAS,2BAA2B,IAAI;AAAA,QACxC,SAAS;AAAA,MACX;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AAAA,IACL,UAAU;AAAA,IACV,MAAM;AAAA,IACN,UAAU;AAAA,IACV,SAAS;AAAA,EACX;AACF,CAAC;;;ACtDH,SAAS,UAAAC,eAAc;AAIhB,IAAM,gBAAgB,CAC3B,MACA,aAEAA,QAAO,KAAK,MAAM;AAChB,QAAM,QAAQ,KAAK,YAAY;AAG/B,aAAW,SAAS,SAAS,cAAc;AACzC,QAAI,MAAM,SAAS,MAAM,YAAY,CAAC,GAAG;AACvC,aAAO;AAAA,QACL,UAAU;AAAA,QACV,MAAM;AAAA,QACN,UAAU;AAAA,QACV,SAAS,6BAA6B,KAAK;AAAA,QAC3C,SAAS;AAAA,MACX;AAAA,IACF;AAAA,EACF;AAGA,aAAW,UAAU,SAAS,eAAe;AAC3C,QAAI,MAAM,SAAS,OAAO,YAAY,CAAC,GAAG;AACxC,aAAO;AAAA,QACL,UAAU;AAAA,QACV,MAAM;AAAA,QACN,UAAU;AAAA,QACV,SAAS,8BAA8B,MAAM;AAAA,QAC7C,SAAS;AAAA,MACX;AAAA,IACF;AAAA,EACF;AAGA,MAAI,SAAS,oBAAoB,UAAa,KAAK,SAAS,SAAS,iBAAiB;AACpF,WAAO;AAAA,MACL,UAAU;AAAA,MACV,MAAM;AAAA,MACN,UAAU;AAAA,MACV,SAAS,8BAA8B,KAAK,MAAM,MAAM,SAAS,eAAe;AAAA,IAClF;AAAA,EACF;AAEA,SAAO;AAAA,IACL,UAAU;AAAA,IACV,MAAM;AAAA,IACN,UAAU;AAAA,IACV,SAAS;AAAA,EACX;AACF,CAAC;;;ACrDH,SAAS,UAAAC,SAAQ,SAAS,OAAO,KAAK,gBAAgB;AACtD,SAAS,gBAAgB;AAQlB,IAAM,oBAAN,cAAgC,QAAQ,IAAI,mBAAmB,EAiCpE,EAAE;AAAC;AAEE,IAAM,wBAAwB,MACnC,MAAM;AAAA,EACJ;AAAA,EACAA,QAAO,IAAI,aAAa;AACtB,UAAM,aAAa,OAAO,IAAI,KAA0B,oBAAI,IAAI,CAAC;AACjE,UAAM,aAAa,OAAO,IAAI,KAAoB,IAAI;AACtD,UAAM,eAAe,OAAO,IAAI,KAAoE,oBAAI,IAAI,CAAC;AAC7G,UAAM,iBAAiB,OAAO,IAAI,KAA2C,oBAAI,IAAI,CAAC;AAGtF,UAAM,QAAQ,OAAOA,QAAO,cAAc,QAAQ,EAAE;AAAA,MAClDA,QAAO,SAAS,MAAMA,QAAO,QAAQ,EAAE,MAAM,OAAgB,CAAC,CAAC;AAAA,IACjE;AACA,UAAM,KAAK,MAAM,SAAS,SAAS,MAAM,QAAQ;AAEjD,WAAO,kBAAkB,GAAG;AAAA,MAC1B,SAAS,CAAC,SAAS,WACjB,IAAI,OAAO,YAAY,CAAC,MAAM;AAC5B,cAAM,SAAS,IAAI,IAAI,CAAC;AACxB,eAAO,IAAI,SAAS,MAAM;AAC1B,eAAO;AAAA,MACT,CAAC;AAAA,MAEH,aAAa,CAAC,YACZA,QAAO,IAAI,aAAa;AAEtB,cAAM,eAAe,OAAO,IAAI,IAAI,UAAU;AAC9C,YAAI,gBAAgB,MAAM;AACxB,iBAAO,EAAE,WAAW,MAAM,QAAQ,aAAa;AAAA,QACjD;AACA,cAAM,QAAQ,OAAO,IAAI,IAAI,UAAU;AACvC,cAAM,SAAS,MAAM,IAAI,OAAO;AAChC,eAAO,UAAU,OACb,EAAE,WAAW,MAAM,OAAO,IAC1B,EAAE,WAAW,MAAM;AAAA,MACzB,CAAC;AAAA,MAEH,OAAO,CAAC,YACN,IAAI,OAAO,YAAY,CAAC,MAAM;AAC5B,cAAM,SAAS,IAAI,IAAI,CAAC;AACxB,eAAO,OAAO,OAAO;AACrB,eAAO;AAAA,MACT,CAAC;AAAA,MAEH,eAAe,CAAC,WAAW,IAAI,IAAI,YAAY,MAAM;AAAA,MAErD,mBAAmB,MACjBA,QAAO,IAAI,aAAa;AACtB,cAAM,SAAS,OAAO,IAAI,IAAI,UAAU;AACxC,eAAO,UAAU,OACb,EAAE,WAAW,MAAM,OAAO,IAC1B,EAAE,WAAW,MAAM;AAAA,MACzB,CAAC;AAAA,MAEH,aAAa,MAAM,IAAI,IAAI,YAAY,IAAI;AAAA,MAE3C,OAAO,CAAC,YACNA,QAAO,IAAI,aAAa;AACtB,cAAM,IAAI,OAAO,SAAS,KAAW;AACrC,eAAO,IAAI,OAAO,gBAAgB,CAAC,MAAM;AACvC,gBAAM,IAAI,IAAI,IAAI,CAAC;AACnB,YAAE,IAAI,SAAS,CAAC;AAChB,iBAAO;AAAA,QACT,CAAC;AACD,eAAO,IAAI,OAAO,cAAc,CAAC,MAAM;AACrC,gBAAM,IAAI,IAAI,IAAI,CAAC;AACnB,YAAE,IAAI,SAAS,QAAQ;AACvB,iBAAO;AAAA,QACT,CAAC;AAAA,MAGH,CAAC;AAAA,MAEH,QAAQ,CAAC,YACPA,QAAO,IAAI,aAAa;AACtB,cAAM,YAAY,OAAO,IAAI,IAAI,cAAc;AAC/C,cAAM,IAAI,UAAU,IAAI,OAAO;AAC/B,YAAI,GAAG;AACL,iBAAO,SAAS,QAAQ,GAAG,MAAS;AACpC,iBAAO,IAAI,OAAO,gBAAgB,CAAC,MAAM;AACvC,kBAAM,IAAI,IAAI,IAAI,CAAC;AACnB,cAAE,OAAO,OAAO;AAChB,mBAAO;AAAA,UACT,CAAC;AAAA,QACH;AACA,eAAO,IAAI,OAAO,cAAc,CAAC,MAAM;AACrC,gBAAM,IAAI,IAAI,IAAI,CAAC;AACnB,YAAE,IAAI,SAAS,SAAS;AACxB,iBAAO;AAAA,QACT,CAAC;AAAA,MAGH,CAAC;AAAA,MAEH,MAAM,CAAC,SAAS,YACd,IAAI,OAAO,cAAc,CAAC,MAAM;AAC9B,cAAM,IAAI,IAAI,IAAI,CAAC;AACnB,UAAE,IAAI,SAAS,UAAU;AACzB,eAAO;AAAA,MACT,CAAC;AAAA,MAEH,WAAW,CAAC,SAAS,WACnBA,QAAO,IAAI,aAAa;AACtB,eAAO,IAAI,OAAO,cAAc,CAAC,MAAM;AACrC,gBAAM,IAAI,IAAI,IAAI,CAAC;AACnB,YAAE,IAAI,SAAS,YAAY;AAC3B,iBAAO;AAAA,QACT,CAAC;AACD,eAAO,IAAI,OAAO,YAAY,CAAC,MAAM;AACnC,gBAAM,IAAI,IAAI,IAAI,CAAC;AACnB,YAAE,IAAI,SAAS,MAAM;AACrB,iBAAO;AAAA,QACT,CAAC;AAAA,MACH,CAAC;AAAA,MAEH,cAAc,CAAC,YACb,IAAI,IAAI,YAAY,EAAE;AAAA,QACpBA,QAAO,IAAI,CAAC,MAAO,EAAE,IAAI,OAAO,KAAK,SAA0E;AAAA,MACjH;AAAA,MAEF,cAAc,CAAC,SAAS,WACtBA,QAAO,IAAI,aAAa;AACtB,cAAM,YAAY,OAAO,IAAI,IAAI,YAAY,EAAE;AAAA,UAC7CA,QAAO,IAAI,CAAC,MAAM,EAAE,IAAI,OAAO,CAAC;AAAA,QAClC;AACA,YAAI,cAAc,UAAU;AAG1B,cAAI,IAAI;AACN,mBAAO,GAAG,QAAQ,EAAE,MAAM,eAAe,SAAS,OAAO,CAAC,EACvD,KAAKA,QAAO,SAAS,MAAMA,QAAO,IAAI,CAAC;AAAA,UAC5C;AACA,gBAAM,YAAY,OAAO,IAAI,IAAI,cAAc;AAC/C,gBAAM,IAAI,UAAU,IAAI,OAAO;AAC/B,cAAI,GAAG;AACL,mBAAO,SAAS,MAAM,CAAC;AAAA,UACzB;AAEA,cAAI,IAAI;AACN,mBAAO,GAAG,QAAQ,EAAE,MAAM,gBAAgB,SAAS,OAAO,CAAC,EACxD,KAAKA,QAAO,SAAS,MAAMA,QAAO,IAAI,CAAC;AAAA,UAC5C;AAAA,QACF;AACA,cAAM,eAAe,OAAO,IAAI,IAAI,YAAY,EAAE;AAAA,UAChDA,QAAO,IAAI,CAAC,MAAM,EAAE,IAAI,OAAO,CAAC;AAAA,QAClC;AACA,eAAO,iBAAiB,aAAc,aAAwB;AAAA,MAChE,CAAC;AAAA,IACL,CAAC;AAAA,EACH,CAAC;AACH;;;AClMF,SAAS,UAAAC,SAAQ,WAAAC,UAAS,SAAAC,QAAO,UAAAC,eAAc;AAIxC,IAAM,2BAA2BA,QAAO,OAAO;AAAA;AAAA,EAEpD,aAAaA,QAAO,SAASA,QAAO,MAAMA,QAAO,MAAM,CAAC;AAAA;AAAA,EAExD,cAAcA,QAAO,SAASA,QAAO,MAAMA,QAAO,MAAM,CAAC;AAAA;AAAA,EAEzD,cAAcA,QAAO,SAASA,QAAO,MAAM;AAAA;AAAA,EAE3C,eAAeA,QAAO,SAASA,QAAO,MAAM;AAAA;AAAA,EAE5C,iBAAiBA,QAAO,SAASA,QAAO,MAAM;AAAA;AAAA,EAE9C,cAAcA,QAAO,SAASA,QAAO,MAAMA,QAAO,MAAM,CAAC;AAAA;AAAA,EAEzD,mBAAmBA,QAAO,SAASA,QAAO,OAAO;AACnD,CAAC;AAaM,IAAM,4BAAN,cAAwCF,SAAQ,IAAI,2BAA2B,EAYpF,EAAE;AAAC;AAEE,IAAM,gCAAgC,CAAC,aAC5CC,OAAM,QAAQ,2BAA2B;AAAA,EACvC,eAAe,CAAC,UAAU,kBACxBF,QAAO,KAAK,MAAM;AAEhB,QAAI,SAAS,aAAa,KAAK,CAAC,MAAM,EAAE,YAAY,MAAM,SAAS,YAAY,CAAC,GAAG;AACjF,aAAO;AAAA,QACL,MAAM;AAAA,QACN,SAAS,SAAS,QAAQ;AAAA,QAC1B,UAAU;AAAA,MACZ;AAAA,IACF;AAGA,QAAI,SAAS,gBAAgB,CAAC,SAAS,aAAa,KAAK,CAAC,MAAM,EAAE,YAAY,MAAM,SAAS,YAAY,CAAC,GAAG;AAC3G,aAAO;AAAA,QACL,MAAM;AAAA,QACN,SAAS,SAAS,QAAQ;AAAA,QAC1B,UAAU;AAAA,MACZ;AAAA,IACF;AAGA,QAAI,SAAS,gBAAgB,QAAQ,iBAAiB,SAAS,cAAc;AAC3E,aAAO;AAAA,QACL,MAAM;AAAA,QACN,SAAS,4BAA4B,SAAS,YAAY;AAAA,QAC1D,UAAU;AAAA,MACZ;AAAA,IACF;AAEA,WAAO;AAAA,EACT,CAAC;AAAA,EAEH,aAAa,CAAC,WACZA,QAAO,KAAK,MAAM;AAEhB,QAAI,SAAS,mBAAmB,QAAQ,OAAO,SAAS,SAAS,iBAAiB;AAChF,aAAO;AAAA,QACL,MAAM;AAAA,QACN,SAAS,kCAAkC,OAAO,MAAM,MAAM,SAAS,eAAe;AAAA,QACtF,UAAU;AAAA,MACZ;AAAA,IACF;AAGA,QAAI,SAAS,cAAc;AACzB,YAAM,QAAQ,OAAO,YAAY;AACjC,iBAAW,SAAS,SAAS,cAAc;AACzC,YAAI,MAAM,SAAS,MAAM,YAAY,CAAC,GAAG;AACvC,iBAAO;AAAA,YACL,MAAM;AAAA,YACN,SAAS,oCAAoC,KAAK;AAAA,YAClD,UAAU;AAAA,UACZ;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAEA,WAAO;AAAA,EACT,CAAC;AAAA,EAEH,gBAAgB,CAAC,cACfA,QAAO,KAAK,MAAM;AAChB,QAAI,SAAS,iBAAiB,QAAQ,YAAY,SAAS,eAAe;AACxE,aAAO;AAAA,QACL,MAAM;AAAA,QACN,SAAS,aAAa,SAAS,8BAA8B,SAAS,aAAa;AAAA,QACnF,UAAU;AAAA,MACZ;AAAA,IACF;AACA,WAAO;AAAA,EACT,CAAC;AAAA,EAEH,aAAa,MAAMA,QAAO,QAAQ,QAAQ;AAC5C,CAAC;;;ACzHH,SAAS,UAAAI,SAAQ,WAAAC,UAAS,SAAAC,cAAa;AAUhC,IAAM,mBAAN,cAA+BC,SAAQ,IAAI,kBAAkB,EAYlE,EAAE;AAAC;AAIE,IAAM,uBAAuB,CAAC,WACnCC,OAAM,QAAQ,kBAAkB;AAAA,EAC9B,OAAO,CAAC,SACNC,QAAO,IAAI,aAAa;AACtB,UAAM,aAA6K,CAAC;AAEpL,QAAI,OAAO,0BAA0B;AACnC,YAAM,SAAS,OAAO,gBAAgB,IAAI;AAC1C,UAAI,OAAO,UAAU;AACnB,mBAAW,KAAK;AAAA,UACd,MAAM,OAAO;AAAA,UACb,UAAU,OAAO;AAAA,UACjB,SAAS,OAAO;AAAA,UAChB,SAAS,OAAO;AAAA,QAClB,CAAC;AAAA,MACH;AAAA,IACF;AAEA,QAAI,OAAO,oBAAoB;AAC7B,YAAM,SAAS,OAAO,UAAU,IAAI;AACpC,UAAI,OAAO,UAAU;AACnB,mBAAW,KAAK;AAAA,UACd,MAAM,OAAO;AAAA,UACb,UAAU,OAAO;AAAA,UACjB,SAAS,OAAO;AAAA,UAChB,SAAS,OAAO;AAAA,QAClB,CAAC;AAAA,MACH;AAAA,IACF;AAEA,QAAI,OAAO,yBAAyB;AAClC,YAAM,SAAS,OAAO,eAAe,MAAM,OAAO,mBAAmB,CAAC,CAAC;AACvE,UAAI,OAAO,UAAU;AACnB,mBAAW,KAAK;AAAA,UACd,MAAM,OAAO;AAAA,UACb,UAAU,OAAO;AAAA,UACjB,SAAS,OAAO;AAAA,UAChB,SAAS,OAAO;AAAA,QAClB,CAAC;AAAA,MACH;AAAA,IACF;AAEA,QAAI,OAAO,UAAU;AACnB,YAAM,SAAS,OAAO,cAAc,MAAM,OAAO,QAAQ;AACzD,UAAI,OAAO,UAAU;AACnB,mBAAW,KAAK;AAAA,UACd,MAAM,OAAO;AAAA,UACb,UAAU,OAAO;AAAA,UACjB,SAAS,OAAO;AAAA,UAChB,SAAS,OAAO;AAAA,QAClB,CAAC;AAAA,MACH;AAAA,IACF;AAEA,UAAM,QAAQ,WAAW,WAAW,IAAI,IAAI,KAAK,IAAI,GAAG,IAAI,WAAW,SAAS,IAAI;AAEpF,WAAO;AAAA,MACL,QAAQ,WAAW,WAAW;AAAA,MAC9B,YAAY,CAAC,GAAG,UAAU;AAAA,MAC1B;AAAA,MACA,WAAW,oBAAI,KAAK;AAAA,IACtB;AAAA,EACF,CAAC;AAAA,EAEH,aAAa,CAAC,SACZA,QAAO,IAAI,aAAa;AACtB,UAAM,aAA6K,CAAC;AAGpL,QAAI,OAAO,oBAAoB;AAC7B,YAAM,SAAS,OAAO,UAAU,IAAI;AACpC,UAAI,OAAO,UAAU;AACnB,mBAAW,KAAK;AAAA,UACd,MAAM,OAAO;AAAA,UACb,UAAU,OAAO;AAAA,UACjB,SAAS,OAAO;AAAA,UAChB,SAAS,OAAO;AAAA,QAClB,CAAC;AAAA,MACH;AAAA,IACF;AAEA,QAAI,OAAO,yBAAyB;AAClC,YAAM,SAAS,OAAO,eAAe,MAAM,OAAO,mBAAmB,CAAC,CAAC;AACvE,UAAI,OAAO,UAAU;AACnB,mBAAW,KAAK;AAAA,UACd,MAAM,OAAO;AAAA,UACb,UAAU,OAAO;AAAA,UACjB,SAAS,OAAO;AAAA,UAChB,SAAS,OAAO;AAAA,QAClB,CAAC;AAAA,MACH;AAAA,IACF;AAEA,QAAI,OAAO,UAAU;AACnB,YAAM,SAAS,OAAO,cAAc,MAAM,OAAO,QAAQ;AACzD,UAAI,OAAO,UAAU;AACnB,mBAAW,KAAK;AAAA,UACd,MAAM,OAAO;AAAA,UACb,UAAU,OAAO;AAAA,UACjB,SAAS,OAAO;AAAA,UAChB,SAAS,OAAO;AAAA,QAClB,CAAC;AAAA,MACH;AAAA,IACF;AAEA,UAAM,QAAQ,WAAW,WAAW,IAAI,IAAI,KAAK,IAAI,GAAG,IAAI,WAAW,SAAS,IAAI;AAEpF,WAAO;AAAA,MACL,QAAQ,WAAW,WAAW;AAAA,MAC9B,YAAY,CAAC,GAAG,UAAU;AAAA,MAC1B;AAAA,MACA,WAAW,oBAAI,KAAK;AAAA,IACtB;AAAA,EACF,CAAC;AAAA,EAEH,WAAW,MAAMA,QAAO,QAAQ,MAAM;AACxC,CAAC;;;AC1II,IAAM,wBAAwB,CAAC,WACpC,qBAAqB;AAAA,EACnB,GAAG;AAAA,EACH,GAAG;AACL,CAAC;","names":["Effect","Effect","Effect","Effect","Effect","Context","Layer","Schema","Effect","Context","Layer","Context","Layer","Effect"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@reactive-agents/guardrails",
-  "version": "0.1.0",
+  "version": "0.5.5",
   "type": "module",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -12,8 +12,8 @@
   },
   "dependencies": {
     "effect": "^3.10.0",
-    "@reactive-agents/core": "0.1.0",
-    "@reactive-agents/llm-provider": "0.1.0"
+    "@reactive-agents/core": "0.2.0",
+    "@reactive-agents/llm-provider": "0.5.0"
   },
   "devDependencies": {
     "typescript": "^5.7.0",