@sponsio/sdk 0.1.0-alpha.3

package/dist/core/session-log.d.ts

@@ -0,0 +1,91 @@
+/**
+ * Per-session JSONL event log for the TypeScript runtime.
+ *
+ * Mirrors ``sponsio/runtime/session_log.py`` byte-for-byte on the
+ * record schema so ``sponsio report --agent <id>`` reads
+ * Python-produced and TS-produced logs with the same reducer.
+ *
+ * Layout:
+ *
+ *     ~/.sponsio/sessions/<sanitized_agent_id>/
+ *         <YYYYMMDD_HHMMSS>_<pid>.jsonl
+ *
+ * Rotation on startup:
+ *   * files older than `keepDays` days are unlinked
+ *   * if the remaining total exceeds `maxMB` megabytes, the oldest
+ *     remaining files are unlinked until the budget is met
+ *
+ * Stdlib-only — no filesystem dep beyond `node:fs`, `node:os`, `node:path`.
+ * Errors during rotation / writes are swallowed: a log failure must
+ * never take down the agent.
+ */
+/**
+ * Prune old / oversized session files under ``baseDir``.
+ *
+ * Walks two levels (``<baseDir>/<agent_id>/*.jsonl``) since that's
+ * how session files are laid out in practice. Any IO error is
+ * swallowed silently.
+ */
+export declare function rotateSessions(baseDir: string, keepDays?: number, maxMB?: number): string[];
+/**
+ * Action strings emitted / consumed by the session log.
+ *
+ * The TS writer uses the three canonical values — ``allowed`` /
+ * ``blocked`` / ``observed`` — that map 1:1 to the common
+ * det-pipeline outcomes. The type also lists the extended values
+ * Python's sto pipeline can emit (``escalated`` / ``warned`` /
+ * ``retrying`` / ``redirected``) so TS readers can consume a JSONL
+ * produced by the Python runtime without a schema mismatch. TS
+ * never writes those extended values itself today.
+ *
+ * Historical: earlier TS builds wrote ``"allow" / "block" /
+ * "observe_log"``. The ``sponsio-scan-ts report`` reducer still
+ * accepts those legacy values so old logs on disk keep rendering —
+ * but new writes always use the canonical names.
+ */
+export type SessionAction = "allowed" | "blocked" | "observed" | "escalated" | "warned" | "retrying" | "redirected";
+export interface SessionRecord {
+    /** Unix seconds, to match the Python writer (float). */
+    ts: number;
+    agent_id: string;
+    action: SessionAction;
+    /**
+     * ``det`` — deterministic LTL/DFA evaluation.
+     * ``sto`` — stochastic (LLM-judged) evaluation. Paired with the
+     * optional ``sto`` field at the record root, which carries the
+     * judge's numeric score and a short evidence snippet — matching
+     * ``sponsio/runtime/session_log.py`` so ``sponsio report`` can
+     * read TS-emitted sto records without a schema change.
+     */
+    pipeline: "det" | "sto";
+    constraint: string;
+    result: {
+        action: SessionAction;
+        message: string;
+    };
+    /** Present only when ``pipeline === "sto"``. */
+    sto?: {
+        score: number;
+        evidence?: string;
+    };
+}
+export interface SessionLoggerOptions {
+    baseDir?: string;
+    keepDays?: number;
+    maxMB?: number;
+    /** Fixed stamp for deterministic tests. */
+    timestamp?: string;
+    /** Skip startup rotation (tests). */
+    skipRotation?: boolean;
+}
+/**
+ * Append-only JSONL logger. Instances own one file for the lifetime
+ * of the process; repeated guards from the same pid reuse it.
+ */
+export declare class SessionLogger {
+    readonly agentId: string;
+    readonly path: string;
+    constructor(agentId: string, options?: SessionLoggerOptions);
+    log(record: SessionRecord): void;
+}
+//# sourceMappingURL=session-log.d.ts.map

package/dist/core/session-log.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-log.d.ts","sourceRoot":"","sources":["../../src/core/session-log.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAqEH;;;;;;GAMG;AACH,wBAAgB,cAAc,CAC5B,OAAO,EAAE,MAAM,EACf,QAAQ,GAAE,MAA0B,EACpC,KAAK,GAAE,MAAuB,GAC7B,MAAM,EAAE,CAgEV;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,MAAM,aAAa,GACrB,SAAS,GACT,SAAS,GACT,UAAU,GACV,WAAW,GACX,QAAQ,GACR,UAAU,GACV,YAAY,CAAC;AAEjB,MAAM,WAAW,aAAa;IAC5B,wDAAwD;IACxD,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,aAAa,CAAC;IACtB;;;;;;;OAOG;IACH,QAAQ,EAAE,KAAK,GAAG,KAAK,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE;QACN,MAAM,EAAE,aAAa,CAAC;QACtB,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,gDAAgD;IAChD,GAAG,CAAC,EAAE;QACJ,KAAK,EAAE,MAAM,CAAC;QACd,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;CACH;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,2CAA2C;IAC3C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,qCAAqC;IACrC,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAED;;;GAGG;AACH,qBAAa,aAAa;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;gBAEV,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE,oBAAyB;IA8B/D,GAAG,CAAC,MAAM,EAAE,aAAa,GAAG,IAAI;CAcjC"}

package/dist/core/session-log.js

@@ -0,0 +1,196 @@
+/**
+ * Per-session JSONL event log for the TypeScript runtime.
+ *
+ * Mirrors ``sponsio/runtime/session_log.py`` byte-for-byte on the
+ * record schema so ``sponsio report --agent <id>`` reads
+ * Python-produced and TS-produced logs with the same reducer.
+ *
+ * Layout:
+ *
+ *     ~/.sponsio/sessions/<sanitized_agent_id>/
+ *         <YYYYMMDD_HHMMSS>_<pid>.jsonl
+ *
+ * Rotation on startup:
+ *   * files older than `keepDays` days are unlinked
+ *   * if the remaining total exceeds `maxMB` megabytes, the oldest
+ *     remaining files are unlinked until the budget is met
+ *
+ * Stdlib-only — no filesystem dep beyond `node:fs`, `node:os`, `node:path`.
+ * Errors during rotation / writes are swallowed: a log failure must
+ * never take down the agent.
+ */
+import { appendFileSync, existsSync, mkdirSync, readdirSync, statSync, unlinkSync, } from "node:fs";
+import { homedir } from "node:os";
+import { join } from "node:path";
+/**
+ * Lazily resolve a process id, defaulting to ``0`` on runtimes
+ * without a ``process`` global. Cloudflare Workers / Vercel Edge
+ * expose a ``process`` shim but no ``pid`` — the previous
+ * top-level ``import { pid } from "node:process"`` blew up module
+ * load time on those runtimes, contradicting the package.json's
+ * "Edge/Serverless compatible" claim. Callers that actually need
+ * a distinct stamp per session (local dev + server processes) still
+ * get one; Edge users trivially collide with ``0`` but they also
+ * typically pass ``sessionLog: false`` because ``~/.sponsio`` isn't
+ * writable there. Either way the module loads.
+ */
+function resolvePid() {
+    try {
+        const p = globalThis.process;
+        return typeof p?.pid === "number" ? p.pid : 0;
+    }
+    catch {
+        return 0;
+    }
+}
+const DEFAULT_KEEP_DAYS = 7;
+const DEFAULT_MAX_MB = 100;
+// Allow letters, digits, dot (``agent.v2``), dash, underscore, colon
+// (``team:bot``). Disallow path separators and control characters.
+// Matches the Python regex in ``session_log._SAFE_AGENT_ID_RE``.
+const SAFE_AGENT_ID_RE = /[^A-Za-z0-9._:\-]/g;
+function sanitizeAgentId(agentId) {
+    if (!agentId)
+        return "_unknown";
+    const cleaned = agentId.replace(SAFE_AGENT_ID_RE, "_").replace(/^[._]+|[._]+$/g, "");
+    if (!cleaned || cleaned === "." || cleaned === "..")
+        return "_unknown";
+    return cleaned.slice(0, 128);
+}
+function defaultBaseDir() {
+    return join(homedir(), ".sponsio", "sessions");
+}
+function pad2(n) {
+    return n < 10 ? `0${n}` : `${n}`;
+}
+function timestampStamp(d = new Date()) {
+    return (`${d.getFullYear()}` +
+        `${pad2(d.getMonth() + 1)}` +
+        `${pad2(d.getDate())}` +
+        "_" +
+        `${pad2(d.getHours())}` +
+        `${pad2(d.getMinutes())}` +
+        `${pad2(d.getSeconds())}`);
+}
+/**
+ * Prune old / oversized session files under ``baseDir``.
+ *
+ * Walks two levels (``<baseDir>/<agent_id>/*.jsonl``) since that's
+ * how session files are laid out in practice. Any IO error is
+ * swallowed silently.
+ */
+export function rotateSessions(baseDir, keepDays = DEFAULT_KEEP_DAYS, maxMB = DEFAULT_MAX_MB) {
+    const removed = [];
+    if (!existsSync(baseDir))
+        return removed;
+    const now = Date.now();
+    const cutoffMs = now - keepDays * 86400 * 1000;
+    const files = [];
+    let agentDirs = [];
+    try {
+        agentDirs = readdirSync(baseDir);
+    }
+    catch {
+        return removed;
+    }
+    for (const entry of agentDirs) {
+        const dir = join(baseDir, entry);
+        let inner = [];
+        try {
+            inner = readdirSync(dir);
+        }
+        catch {
+            continue;
+        }
+        for (const f of inner) {
+            if (!f.endsWith(".jsonl"))
+                continue;
+            const p = join(dir, f);
+            let st;
+            try {
+                st = statSync(p);
+            }
+            catch {
+                continue;
+            }
+            const mtime = st.mtimeMs;
+            if (mtime < cutoffMs) {
+                try {
+                    unlinkSync(p);
+                    removed.push(p);
+                }
+                catch {
+                    // ignore
+                }
+                continue;
+            }
+            files.push({ path: p, mtime, size: st.size });
+        }
+    }
+    const budget = maxMB * 1024 * 1024;
+    let total = files.reduce((acc, f) => acc + f.size, 0);
+    if (total > budget) {
+        files.sort((a, b) => a.mtime - b.mtime);
+        for (const f of files) {
+            if (total <= budget)
+                break;
+            try {
+                unlinkSync(f.path);
+                removed.push(f.path);
+                total -= f.size;
+            }
+            catch {
+                // ignore
+            }
+        }
+    }
+    return removed;
+}
+/**
+ * Append-only JSONL logger. Instances own one file for the lifetime
+ * of the process; repeated guards from the same pid reuse it.
+ */
+export class SessionLogger {
+    agentId;
+    path;
+    constructor(agentId, options = {}) {
+        this.agentId = agentId;
+        const base = options.baseDir ?? defaultBaseDir();
+        const safe = sanitizeAgentId(agentId);
+        try {
+            mkdirSync(base, { recursive: true });
+        }
+        catch {
+            // ignore — write will fail loudly below if truly broken
+        }
+        const agentDir = join(base, safe);
+        try {
+            mkdirSync(agentDir, { recursive: true });
+        }
+        catch {
+            // ignore
+        }
+        if (!options.skipRotation) {
+            rotateSessions(base, options.keepDays ?? DEFAULT_KEEP_DAYS, options.maxMB ?? DEFAULT_MAX_MB);
+        }
+        const stamp = options.timestamp ?? timestampStamp();
+        this.path = join(agentDir, `${stamp}_${resolvePid()}.jsonl`);
+    }
+    log(record) {
+        let line;
+        try {
+            line = JSON.stringify(record);
+        }
+        catch {
+            // Never break the agent because of log serialization.
+            return;
+        }
+        try {
+            appendFileSync(this.path, line + "\n", "utf-8");
+        }
+        catch {
+            // Disk full, perms, etc. — silently drop.
+        }
+    }
+}
+//# sourceMappingURL=session-log.js.map

package/dist/core/session-log.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-log.js","sourceRoot":"","sources":["../../src/core/session-log.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EACL,cAAc,EACd,UAAU,EACV,SAAS,EACT,WAAW,EACX,QAAQ,EACR,UAAU,GACX,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC;;;;;;;;;;;GAWG;AACH,SAAS,UAAU;IACjB,IAAI,CAAC;QACH,MAAM,CAAC,GAAI,UAA8C,CAAC,OAAO,CAAC;QAClE,OAAO,OAAO,CAAC,EAAE,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAED,MAAM,iBAAiB,GAAG,CAAC,CAAC;AAC5B,MAAM,cAAc,GAAG,GAAG,CAAC;AAE3B,qEAAqE;AACrE,mEAAmE;AACnE,iEAAiE;AACjE,MAAM,gBAAgB,GAAG,oBAAoB,CAAC;AAE9C,SAAS,eAAe,CAAC,OAAe;IACtC,IAAI,CAAC,OAAO;QAAE,OAAO,UAAU,CAAC;IAChC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC;IACrF,IAAI,CAAC,OAAO,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,UAAU,CAAC;IACvE,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,cAAc;IACrB,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;AACjD,CAAC;AAED,SAAS,IAAI,CAAC,CAAS;IACrB,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;AACnC,CAAC;AAED,SAAS,cAAc,CAAC,IAAU,IAAI,IAAI,EAAE;IAC1C,OAAO,CACL,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE;QACpB,GAAG,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,EAAE;QAC3B,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,EAAE;QACtB,GAAG;QACH,GAAG,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,EAAE;QACvB,GAAG,IAAI,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,EAAE;QACzB,GAAG,IAAI,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,EAAE,CAC1B,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAC5B,OAAe,EACf,WAAmB,iBAAiB,EACpC,QAAgB,cAAc;IAE9B,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC;IAEzC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,QAAQ,GAAG,GAAG,GAAG,QAAQ,GAAG,KAAK,GAAG,IAAI,CAAC;IAG/C,MAAM,KAAK,GAAe,EAAE,CAAC;IAE7B,IAAI,SAAS,GAAa,EAAE,CAAC;IAC7B,IAAI,CAAC;QACH,SAAS,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,SAAS,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACjC,IAAI,KAAK,GAAa,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBAAE,SAAS;YACpC,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YACvB,IAAI,EAAE,CAAC;YACP,IAAI,CAAC;gBACH,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;YACnB,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;YACD,MAAM,KAAK,GAAG,EAAE,CAAC,OAAO,CAAC;YACzB,IAAI,KAAK,GAAG,QAAQ,EAAE,CAAC;gBACrB,IAAI,CAAC;oBACH,UAAU,CAAC,CAAC,CAAC,CAAC;oBACd,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAClB,CAAC;gBAAC,MAAM,CAAC;oBACP,SAAS;gBACX,CAAC;gBACD,SAAS;YACX,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,KAAK,GAAG,IAAI,GAAG,IAAI,CAAC;IACnC,IAAI,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACtD,IAAI,KAAK,GAAG,MAAM,EAAE,CAAC;QACnB,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;QACxC,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,IAAI,KAAK,IAAI,MAAM;gBAAE,MAAM;YAC3B,IAAI,CAAC;gBACH,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gBACnB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gBACrB,KAAK,IAAI,CAAC,CAAC,IAAI,CAAC;YAClB,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AA+DD;;;GAGG;AACH,MAAM,OAAO,aAAa;IACf,OAAO,CAAS;IAChB,IAAI,CAAS;IAEtB,YAAY,OAAe,EAAE,UAAgC,EAAE;QAC7D,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,IAAI,cAAc,EAAE,CAAC;QACjD,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;QAEtC,IAAI,CAAC;YACH,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACvC,CAAC;QAAC,MAAM,CAAC;YACP,wDAAwD;QAC1D,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAClC,IAAI,CAAC;YACH,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;YAC1B,cAAc,CACZ,IAAI,EACJ,OAAO,CAAC,QAAQ,IAAI,iBAAiB,EACrC,OAAO,CAAC,KAAK,IAAI,cAAc,CAChC,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAAG,OAAO,CAAC,SAAS,IAAI,cAAc,EAAE,CAAC;QACpD,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,GAAG,KAAK,IAAI,UAAU,EAAE,QAAQ,CAAC,CAAC;IAC/D,CAAC;IAED,GAAG,CAAC,MAAqB;QACvB,IAAI,IAAY,CAAC;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAChC,CAAC;QAAC,MAAM,CAAC;YACP,sDAAsD;YACtD,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;QAClD,CAAC;QAAC,MAAM,CAAC;YACP,0CAA0C;QAC5C,CAAC;IACH,CAAC;CACF"}

package/dist/core/spans.d.ts

@@ -0,0 +1,92 @@
+/**
+ * Span data model — mirrors ``sponsio/models/spans.py``.
+ *
+ * The runtime monitor builds one ``AgentTurnSpan`` tree per
+ * ``guardBefore`` call. Children include per-contract evaluation
+ * spans, with grand-children for assumption / guarantee / violation /
+ * enforcement nodes. The session view renderer walks this tree to
+ * produce the ``contracts armed`` + ``trace`` + ``VERDICT`` zones.
+ *
+ * Subclasses match the Python ``span_type`` strings field-for-field
+ * so traces serialise identically across languages.
+ */
+export type SpanStatus = "ok" | "violated" | "error";
+export interface SpanLike {
+    spanType: string;
+    startTime: number;
+    endTime?: number;
+    status: SpanStatus;
+    attributes: Record<string, unknown>;
+    children: SpanLike[];
+    durationMs(): number | null;
+    finish(status?: SpanStatus): void;
+}
+export declare class Span implements SpanLike {
+    spanType: string;
+    startTime: number;
+    endTime?: number;
+    status: SpanStatus;
+    attributes: Record<string, unknown>;
+    children: SpanLike[];
+    constructor(spanType: string, attributes?: Record<string, unknown>);
+    durationMs(): number | null;
+    finish(status?: SpanStatus): void;
+}
+export declare class AgentTurnSpan extends Span {
+    agentId: string;
+    action: string;
+    totalContractsChecked: number;
+    detViolations: number;
+    stoViolations: number;
+    blocked: boolean;
+    constructor(agentId: string, action: string);
+}
+export declare class ContractCheckSpan extends Span {
+    contractName: string;
+    pipeline: "hard" | "sto";
+    constructor(contractName: string, pipeline?: "hard" | "sto");
+}
+export declare class PreconditionSpan extends Span {
+    formulaDesc: string;
+    result: boolean;
+    constructor(formulaDesc: string, result: boolean);
+}
+export declare class GuaranteeSpan extends Span {
+    formulaDesc: string;
+    result: boolean;
+    constructor(formulaDesc: string, result: boolean);
+}
+export declare class ViolationSpan extends Span {
+    kind: "assumption" | "guarantee" | "sto" | "liveness";
+    severity: "HIGH" | "MEDIUM" | "LOW";
+    evidence: string;
+    constructor(kind: ViolationSpan["kind"], severity?: ViolationSpan["severity"], evidence?: string);
+}
+export declare class EnforcementSpan extends Span {
+    strategy: string;
+    resultAction: "blocked" | "escalated" | "retrying" | "redirected" | "";
+    constructor(strategy: string, resultAction?: EnforcementSpan["resultAction"]);
+}
+/**
+ * SpanCollector — builds a span tree during one ``guardBefore`` call.
+ * Mirrors Python's ``models.spans.SpanCollector``: a stack of
+ * currently-open spans, push/pop to nest. The root is the
+ * ``AgentTurnSpan`` returned by ``rootSpan``.
+ */
+export declare class SpanCollector {
+    private root;
+    private stack;
+    constructor(agentId: string, action: string);
+    rootSpan(): AgentTurnSpan;
+    push(span: SpanLike): void;
+    pop(status?: SpanStatus): void;
+    /** Add a leaf span (no children) and finalize it immediately. */
+    add(span: SpanLike, status?: SpanStatus): void;
+    /** Finalize the root after the guard call completes. */
+    finishRoot(blocked: boolean, totalContractsChecked: number, detViolations: number): AgentTurnSpan;
+}
+/**
+ * Walk a span tree depth-first, yielding every span (including the root).
+ */
+export declare function walk(span: SpanLike): Generator<SpanLike>;
+//# sourceMappingURL=spans.d.ts.map

package/dist/core/spans.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"spans.d.ts","sourceRoot":"","sources":["../../src/core/spans.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,MAAM,MAAM,UAAU,GAAG,IAAI,GAAG,UAAU,GAAG,OAAO,CAAC;AAErD,MAAM,WAAW,QAAQ;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,UAAU,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpC,QAAQ,EAAE,QAAQ,EAAE,CAAC;IACrB,UAAU,IAAI,MAAM,GAAG,IAAI,CAAC;IAC5B,MAAM,CAAC,MAAM,CAAC,EAAE,UAAU,GAAG,IAAI,CAAC;CACnC;AAED,qBAAa,IAAK,YAAW,QAAQ;IACnC,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,UAAU,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpC,QAAQ,EAAE,QAAQ,EAAE,CAAC;gBAET,QAAQ,EAAE,MAAM,EAAE,UAAU,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM;IAQtE,UAAU,IAAI,MAAM,GAAG,IAAI;IAK3B,MAAM,CAAC,MAAM,CAAC,EAAE,UAAU,GAAG,IAAI;CAIlC;AAED,qBAAa,aAAc,SAAQ,IAAI;IACrC,OAAO,SAAM;IACb,MAAM,SAAM;IACZ,qBAAqB,SAAK;IAC1B,aAAa,SAAK;IAClB,aAAa,SAAK;IAClB,OAAO,UAAS;gBAEJ,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;CAK5C;AAED,qBAAa,iBAAkB,SAAQ,IAAI;IACzC,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,GAAG,KAAK,CAAC;gBAEb,YAAY,EAAE,MAAM,EAAE,QAAQ,GAAE,MAAM,GAAG,KAAc;CAKpE;AAED,qBAAa,gBAAiB,SAAQ,IAAI;IACxC,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,OAAO,CAAC;gBAEJ,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO;CAKjD;AAED,qBAAa,aAAc,SAAQ,IAAI;IACrC,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,OAAO,CAAC;gBAEJ,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO;CAKjD;AAED,qBAAa,aAAc,SAAQ,IAAI;IACrC,IAAI,EAAE,YAAY,GAAG,WAAW,GAAG,KAAK,GAAG,UAAU,CAAC;IACtD,QAAQ,EAAE,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;IACpC,QAAQ,EAAE,MAAM,CAAC;gBAEL,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,EAAE,QAAQ,GAAE,aAAa,CAAC,UAAU,CAAU,EAAE,QAAQ,SAAK;CAMrG;AAED,qBAAa,eAAgB,SAAQ,IAAI;IACvC,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,SAAS,GAAG,WAAW,GAAG,UAAU,GAAG,YAAY,GAAG,EAAE,CAAC;gBAE3D,QAAQ,EAAE,MAAM,EAAE,YAAY,GAAE,eAAe,CAAC,cAAc,CAAM;CAKjF;AAED;;;;;GAKG;AACH,qBAAa,aAAa;IACxB,OAAO,CAAC,IAAI,CAAgB;IAC5B,OAAO,CAAC,KAAK,CAAa;gBAEd,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;IAK3C,QAAQ,IAAI,aAAa;IAIzB,IAAI,CAAC,IAAI,EAAE,QAAQ,GAAG,IAAI;IAM1B,GAAG,CAAC,MAAM,CAAC,EAAE,UAAU,GAAG,IAAI;IAK9B,iEAAiE;IACjE,GAAG,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,UAAU,GAAG,IAAI;IAM9C,wDAAwD;IACxD,UAAU,CAAC,OAAO,EAAE,OAAO,EAAE,qBAAqB,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,aAAa;CAOlG;AAED;;GAEG;AACH,wBAAiB,IAAI,CAAC,IAAI,EAAE,QAAQ,GAAG,SAAS,CAAC,QAAQ,CAAC,CAKzD"}

package/dist/core/spans.js

@@ -0,0 +1,148 @@
+/**
+ * Span data model — mirrors ``sponsio/models/spans.py``.
+ *
+ * The runtime monitor builds one ``AgentTurnSpan`` tree per
+ * ``guardBefore`` call. Children include per-contract evaluation
+ * spans, with grand-children for assumption / guarantee / violation /
+ * enforcement nodes. The session view renderer walks this tree to
+ * produce the ``contracts armed`` + ``trace`` + ``VERDICT`` zones.
+ *
+ * Subclasses match the Python ``span_type`` strings field-for-field
+ * so traces serialise identically across languages.
+ */
+export class Span {
+    spanType;
+    startTime;
+    endTime;
+    status;
+    attributes;
+    children;
+    constructor(spanType, attributes = {}) {
+        this.spanType = spanType;
+        this.startTime = performance.now();
+        this.status = "ok";
+        this.attributes = attributes;
+        this.children = [];
+    }
+    durationMs() {
+        if (this.endTime === undefined)
+            return null;
+        return this.endTime - this.startTime;
+    }
+    finish(status) {
+        this.endTime = performance.now();
+        if (status)
+            this.status = status;
+    }
+}
+export class AgentTurnSpan extends Span {
+    agentId = "";
+    action = "";
+    totalContractsChecked = 0;
+    detViolations = 0;
+    stoViolations = 0;
+    blocked = false;
+    constructor(agentId, action) {
+        super("sponsio.agent_turn");
+        this.agentId = agentId;
+        this.action = action;
+    }
+}
+export class ContractCheckSpan extends Span {
+    contractName;
+    pipeline;
+    constructor(contractName, pipeline = "hard") {
+        super("sponsio.contract_check");
+        this.contractName = contractName;
+        this.pipeline = pipeline;
+    }
+}
+export class PreconditionSpan extends Span {
+    formulaDesc;
+    result;
+    constructor(formulaDesc, result) {
+        super("sponsio.precondition");
+        this.formulaDesc = formulaDesc;
+        this.result = result;
+    }
+}
+export class GuaranteeSpan extends Span {
+    formulaDesc;
+    result;
+    constructor(formulaDesc, result) {
+        super("sponsio.guarantee");
+        this.formulaDesc = formulaDesc;
+        this.result = result;
+    }
+}
+export class ViolationSpan extends Span {
+    kind;
+    severity;
+    evidence;
+    constructor(kind, severity = "HIGH", evidence = "") {
+        super("sponsio.violation");
+        this.kind = kind;
+        this.severity = severity;
+        this.evidence = evidence;
+    }
+}
+export class EnforcementSpan extends Span {
+    strategy;
+    resultAction;
+    constructor(strategy, resultAction = "") {
+        super("sponsio.enforcement");
+        this.strategy = strategy;
+        this.resultAction = resultAction;
+    }
+}
+/**
+ * SpanCollector — builds a span tree during one ``guardBefore`` call.
+ * Mirrors Python's ``models.spans.SpanCollector``: a stack of
+ * currently-open spans, push/pop to nest. The root is the
+ * ``AgentTurnSpan`` returned by ``rootSpan``.
+ */
+export class SpanCollector {
+    root;
+    stack;
+    constructor(agentId, action) {
+        this.root = new AgentTurnSpan(agentId, action);
+        this.stack = [this.root];
+    }
+    rootSpan() {
+        return this.root;
+    }
+    push(span) {
+        const parent = this.stack[this.stack.length - 1];
+        parent.children.push(span);
+        this.stack.push(span);
+    }
+    pop(status) {
+        const span = this.stack.pop();
+        if (span)
+            span.finish(status);
+    }
+    /** Add a leaf span (no children) and finalize it immediately. */
+    add(span, status) {
+        const parent = this.stack[this.stack.length - 1];
+        parent.children.push(span);
+        span.finish(status);
+    }
+    /** Finalize the root after the guard call completes. */
+    finishRoot(blocked, totalContractsChecked, detViolations) {
+        this.root.totalContractsChecked = totalContractsChecked;
+        this.root.detViolations = detViolations;
+        this.root.blocked = blocked;
+        this.root.finish(blocked ? "violated" : "ok");
+        return this.root;
+    }
+}
+/**
+ * Walk a span tree depth-first, yielding every span (including the root).
+ */
+export function* walk(span) {
+    yield span;
+    for (const child of span.children) {
+        yield* walk(child);
+    }
+}
+//# sourceMappingURL=spans.js.map

package/dist/core/spans.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"spans.js","sourceRoot":"","sources":["../../src/core/spans.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAeH,MAAM,OAAO,IAAI;IACf,QAAQ,CAAS;IACjB,SAAS,CAAS;IAClB,OAAO,CAAU;IACjB,MAAM,CAAa;IACnB,UAAU,CAA0B;IACpC,QAAQ,CAAa;IAErB,YAAY,QAAgB,EAAE,aAAsC,EAAE;QACpE,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QACnC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,QAAQ,GAAG,EAAE,CAAC;IACrB,CAAC;IAED,UAAU;QACR,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QAC5C,OAAO,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC;IACvC,CAAC;IAED,MAAM,CAAC,MAAmB;QACxB,IAAI,CAAC,OAAO,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QACjC,IAAI,MAAM;YAAE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACnC,CAAC;CACF;AAED,MAAM,OAAO,aAAc,SAAQ,IAAI;IACrC,OAAO,GAAG,EAAE,CAAC;IACb,MAAM,GAAG,EAAE,CAAC;IACZ,qBAAqB,GAAG,CAAC,CAAC;IAC1B,aAAa,GAAG,CAAC,CAAC;IAClB,aAAa,GAAG,CAAC,CAAC;IAClB,OAAO,GAAG,KAAK,CAAC;IAEhB,YAAY,OAAe,EAAE,MAAc;QACzC,KAAK,CAAC,oBAAoB,CAAC,CAAC;QAC5B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;CACF;AAED,MAAM,OAAO,iBAAkB,SAAQ,IAAI;IACzC,YAAY,CAAS;IACrB,QAAQ,CAAiB;IAEzB,YAAY,YAAoB,EAAE,WAA2B,MAAM;QACjE,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAChC,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;QACjC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;CACF;AAED,MAAM,OAAO,gBAAiB,SAAQ,IAAI;IACxC,WAAW,CAAS;IACpB,MAAM,CAAU;IAEhB,YAAY,WAAmB,EAAE,MAAe;QAC9C,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAC9B,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;CACF;AAED,MAAM,OAAO,aAAc,SAAQ,IAAI;IACrC,WAAW,CAAS;IACpB,MAAM,CAAU;IAEhB,YAAY,WAAmB,EAAE,MAAe;QAC9C,KAAK,CAAC,mBAAmB,CAAC,CAAC;QAC3B,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;CACF;AAED,MAAM,OAAO,aAAc,SAAQ,IAAI;IACrC,IAAI,CAAkD;IACtD,QAAQ,CAA4B;IACpC,QAAQ,CAAS;IAEjB,YAAY,IAA2B,EAAE,WAAsC,MAAM,EAAE,QAAQ,GAAG,EAAE;QAClG,KAAK,CAAC,mBAAmB,CAAC,CAAC;QAC3B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;CACF;AAED,MAAM,OAAO,eAAgB,SAAQ,IAAI;IACvC,QAAQ,CAAS;IACjB,YAAY,CAA2D;IAEvE,YAAY,QAAgB,EAAE,eAAgD,EAAE;QAC9E,KAAK,CAAC,qBAAqB,CAAC,CAAC;QAC7B,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;IACnC,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,aAAa;IAChB,IAAI,CAAgB;IACpB,KAAK,CAAa;IAE1B,YAAY,OAAe,EAAE,MAAc;QACzC,IAAI,CAAC,IAAI,GAAG,IAAI,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC/C,IAAI,CAAC,KAAK,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IAED,QAAQ;QACN,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IAED,IAAI,CAAC,IAAc;QACjB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACjD,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC;IAED,GAAG,CAAC,MAAmB;QACrB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QAC9B,IAAI,IAAI;YAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAChC,CAAC;IAED,iEAAiE;IACjE,GAAG,CAAC,IAAc,EAAE,MAAmB;QACrC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACjD,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3B,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACtB,CAAC;IAED,wDAAwD;IACxD,UAAU,CAAC,OAAgB,EAAE,qBAA6B,EAAE,aAAqB;QAC/E,IAAI,CAAC,IAAI,CAAC,qBAAqB,GAAG,qBAAqB,CAAC;QACxD,IAAI,CAAC,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;QACxC,IAAI,CAAC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QAC5B,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC9C,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;CACF;AAED;;GAEG;AACH,MAAM,SAAS,CAAC,CAAC,IAAI,CAAC,IAAc;IAClC,MAAM,IAAI,CAAC;IACX,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC;AACH,CAAC"}

package/dist/core/sto.d.ts

@@ -0,0 +1,120 @@
+/**
+ * Stub for the sto (stochastic / LLM-judge) pipeline.
+ *
+ * The real evaluator catalog (``tone`` / ``relevance`` / ``llm_judge`` /
+ * ``hallucination_free`` …) and the OpenAI-compatible judge client are
+ * Sponsio Cloud features, not bundled with the OSS engine. The OSS
+ * ``Sponsio`` constructor logs-and-skips sto contracts at load time
+ * with a one-time warning — matching Python's
+ * ``sponsio.patterns.sto_catalog`` behaviour.
+ *
+ * This file exists so that:
+ *   - imports in ``index.ts`` resolve cleanly
+ *   - downstream consumers depending on the type names
+ *     (``StoEvaluator``, ``JudgeClient``, …) compile against the
+ *     same surface
+ *   - any code path that *constructs* an evaluator or *builds* a
+ *     judge fails loudly with ``CloudFeatureError`` rather than
+ *     silently pretending to enforce
+ *
+ * Operators who want the sto pipeline:
+ *
+ *     pip install sponsio[cloud]
+ *
+ * or contact your Sponsio account team for managed sto access. See
+ * ``docs/oss_scope.md`` for the OSS / Cloud boundary.
+ */
+export interface StoInput {
+    toolName: string;
+    output: string;
+    /** Per-turn context (cloud-only atom grounding fields). */
+    context?: StoContextSnapshot;
+}
+export interface StoContextSnapshot {
+    query?: string;
+    source?: string;
+    scope?: string;
+    history?: string;
+}
+export interface StoResult {
+    score: number;
+    passed: boolean;
+    evidence?: string;
+}
+export interface StoEvaluator {
+    readonly atom: string;
+    readonly desc: string;
+    readonly threshold: number;
+    evaluate(input: StoInput): Promise<StoResult>;
+}
+export interface JudgeConfig {
+    provider?: "openai";
+    model?: string;
+    apiKey?: string;
+    baseUrl?: string;
+    fallbackMode?: "allow" | "deny" | "skip";
+}
+export interface JudgeClient {
+    complete(prompt: string): Promise<string>;
+}
+export interface StoContract {
+    desc: string;
+    evaluator: StoEvaluator;
+}
+export declare class CloudFeatureError extends Error {
+    constructor(featureName: string);
+}
+/**
+ * Stub. The OSS engine does not ship a managed judge client; calling
+ * this throws ``CloudFeatureError``. The OSS ``Sponsio`` constructor
+ * never reaches this — yaml ``judge:`` blocks and ``options.judge``
+ * are routed through the ``skipped`` warning path instead.
+ */
+export declare function createJudge(_config: JudgeConfig): JudgeClient;
+/**
+ * Parse a 0–1 score from a judge response. Pure utility; safe to ship
+ * because it never calls a judge. Kept so any user calling it
+ * directly (rare) keeps working.
+ */
+export declare function parseScore(raw: string): number;
+declare abstract class _StubEvaluator implements StoEvaluator {
+    readonly desc: string;
+    readonly threshold: number;
+    abstract readonly atom: string;
+    constructor(desc: string, threshold: number);
+    evaluate(_input: StoInput): Promise<StoResult>;
+}
+export declare class LlmJudgeEvaluator extends _StubEvaluator {
+    readonly atom = "llm_judge";
+    constructor(desc: string, threshold: number, _judge: JudgeClient, _promptTemplate: string);
+}
+export declare class ToneEvaluator extends _StubEvaluator {
+    readonly atom = "tone";
+    constructor(desc: string, threshold: number, _judge: JudgeClient, _targetTone: string);
+}
+export declare class RelevanceEvaluator extends _StubEvaluator {
+    readonly atom = "relevance";
+    constructor(desc: string, threshold: number, _judge: JudgeClient);
+}
+export declare class SemanticPiiFreeEvaluator extends _StubEvaluator {
+    readonly atom = "semantic_pii_free";
+    constructor(desc: string, threshold: number, _judge: JudgeClient);
+}
+export declare class HallucinationFreeEvaluator extends _StubEvaluator {
+    readonly atom = "hallucination_free";
+    constructor(desc: string, threshold: number, _judge: JudgeClient);
+}
+export declare class ScopeRespectEvaluator extends _StubEvaluator {
+    readonly atom = "scope_respect";
+    constructor(desc: string, threshold: number, _judge: JudgeClient, _defaultScope: string);
+}
+export declare class MetricIntegrityEvaluator extends _StubEvaluator {
+    readonly atom = "metric_integrity";
+    constructor(desc: string, threshold: number, _judge: JudgeClient);
+}
+export declare class InjectionFreeEvaluator extends _StubEvaluator {
+    readonly atom = "injection_free";
+    constructor(desc: string, threshold: number, _judge: JudgeClient);
+}
+export {};
+//# sourceMappingURL=sto.d.ts.map