@trustloopguard/sdk 0.0.1

package/dist/generated/RunEventKind.d.ts

@@ -0,0 +1 @@
+export type RunEventKind = "user_turn" | "assistant_turn" | "tool_call" | "workflow_step" | "interruption" | "retry" | "system_event" | "other";

package/dist/generated/RunEventKind.js

@@ -0,0 +1,2 @@
+// This file was generated by [ts-rs](https://github.com/Aleph-Alpha/ts-rs). Do not edit this file manually.
+export {};

package/dist/generated/RunEventListResponse.d.ts

@@ -0,0 +1,4 @@
+import type { RunEventSummary } from "./RunEventSummary";
+export type RunEventListResponse = {
+    events: Array<RunEventSummary>;
+};

package/dist/generated/RunEventListResponse.js

@@ -0,0 +1 @@
+export {};

package/dist/generated/RunEventSummary.d.ts

@@ -0,0 +1,20 @@
+import type { RunEventKind } from "./RunEventKind";
+export type RunEventSummary = {
+    id: string;
+    workspace_id: string;
+    run_id: string;
+    sequence: number;
+    kind: RunEventKind;
+    label: string | null;
+    input_summary: string | null;
+    output_summary: string | null;
+    metadata: Record<string, unknown>;
+    /**
+     * RFC 3339 timestamp.
+     */
+    occurred_at: string;
+    /**
+     * RFC 3339 timestamp.
+     */
+    created_at: string;
+};

package/dist/generated/RunEventSummary.js

@@ -0,0 +1 @@
+export {};

package/dist/generated/RunKind.d.ts

@@ -0,0 +1 @@
+export type RunKind = "chat_session" | "live_call" | "workflow" | "job" | "other";

package/dist/generated/RunKind.js

@@ -0,0 +1,2 @@
+// This file was generated by [ts-rs](https://github.com/Aleph-Alpha/ts-rs). Do not edit this file manually.
+export {};

package/dist/generated/RunListResponse.d.ts

@@ -0,0 +1,4 @@
+import type { RunSummary } from "./RunSummary";
+export type RunListResponse = {
+    runs: Array<RunSummary>;
+};

package/dist/generated/RunListResponse.js

@@ -0,0 +1 @@
+export {};

package/dist/generated/RunStatus.d.ts

@@ -0,0 +1 @@
+export type RunStatus = "warming" | "running" | "completed" | "failed" | "canceled";

package/dist/generated/RunStatus.js

@@ -0,0 +1,2 @@
+// This file was generated by [ts-rs](https://github.com/Aleph-Alpha/ts-rs). Do not edit this file manually.
+export {};

package/dist/generated/RunSummary.d.ts

@@ -0,0 +1,32 @@
+import type { RunKind } from "./RunKind";
+import type { RunStatus } from "./RunStatus";
+export type RunSummary = {
+    id: string;
+    workspace_id: string;
+    agent_id: string;
+    kind: RunKind;
+    status: RunStatus;
+    external_id: string | null;
+    metadata: Record<string, unknown>;
+    /**
+     * RFC 3339 timestamp.
+     */
+    started_at: string;
+    /**
+     * RFC 3339 timestamp.
+     */
+    ended_at: string | null;
+    /**
+     * RFC 3339 timestamp.
+     */
+    created_at: string;
+    /**
+     * RFC 3339 timestamp.
+     */
+    updated_at: string;
+    trace_count: number;
+    blocked_count: number;
+    rewritten_count: number;
+    escalated_count: number;
+    p95_latency_ms: number | null;
+};

package/dist/generated/RunSummary.js

@@ -0,0 +1 @@
+export {};

package/dist/generated/Severity.d.ts

@@ -0,0 +1 @@
+export type Severity = "low" | "medium" | "high" | "critical";

package/dist/generated/Severity.js

@@ -0,0 +1,2 @@
+// This file was generated by [ts-rs](https://github.com/Aleph-Alpha/ts-rs). Do not edit this file manually.
+export {};

package/dist/generated/Tier.d.ts

@@ -0,0 +1,4 @@
+/**
+ * Which pipeline tier produced a result.
+ */
+export type Tier = "deterministic" | "fuzzy" | "llm";

package/dist/generated/Tier.js

@@ -0,0 +1,2 @@
+// This file was generated by [ts-rs](https://github.com/Aleph-Alpha/ts-rs). Do not edit this file manually.
+export {};

package/dist/generated/TierResult.d.ts

@@ -0,0 +1,12 @@
+import type { Tier } from "./Tier";
+import type { TierStatus } from "./TierStatus";
+import type { TriggeredPolicy } from "./TriggeredPolicy";
+/**
+ * One row of evidence per tier in the final `Decision`.
+ */
+export type TierResult = {
+    tier: Tier;
+    status: TierStatus;
+    reasons: Array<TriggeredPolicy>;
+    elapsed_ms: bigint;
+};

package/dist/generated/TierResult.js

@@ -0,0 +1 @@
+export {};

package/dist/generated/TierStatus.d.ts

@@ -0,0 +1,4 @@
+/**
+ * How a tier finished.
+ */
+export type TierStatus = "completed" | "cancelled" | "timed_out" | "skipped";

package/dist/generated/TierStatus.js

@@ -0,0 +1,2 @@
+// This file was generated by [ts-rs](https://github.com/Aleph-Alpha/ts-rs). Do not edit this file manually.
+export {};

package/dist/generated/TraceListResponse.d.ts

@@ -0,0 +1,4 @@
+import type { TraceSummary } from "./TraceSummary";
+export type TraceListResponse = {
+    traces: Array<TraceSummary>;
+};

package/dist/generated/TraceListResponse.js

@@ -0,0 +1 @@
+export {};

package/dist/generated/TraceSummary.d.ts

@@ -0,0 +1,13 @@
+export type TraceSummary = {
+    trace_id: string;
+    run_id: string | null;
+    run_event_id: string | null;
+    domain: string;
+    decision: string;
+    elapsed_ms: number;
+    payload: Record<string, unknown>;
+    /**
+     * RFC 3339 timestamp.
+     */
+    created_at: string;
+};

package/dist/generated/TraceSummary.js

@@ -0,0 +1,2 @@
+// This file was generated by [ts-rs](https://github.com/Aleph-Alpha/ts-rs). Do not edit this file manually.
+export {};

package/dist/generated/TriggeredPolicy.d.ts

@@ -0,0 +1,6 @@
+import type { Severity } from "./Severity";
+export type TriggeredPolicy = {
+    id: string;
+    severity: Severity;
+    reason: string;
+};

package/dist/generated/TriggeredPolicy.js

@@ -0,0 +1 @@
+export {};

package/dist/generated/UpdateRunRequest.d.ts

@@ -0,0 +1,10 @@
+import type { RunStatus } from "./RunStatus";
+export type UpdateRunRequest = {
+    status?: RunStatus;
+    metadata?: Record<string, unknown> | null;
+    /**
+     * RFC 3339 timestamp. Defaults to now when completing/failing/canceling
+     * a run without an explicit timestamp.
+     */
+    ended_at?: string;
+};

package/dist/generated/UpdateRunRequest.js

@@ -0,0 +1 @@
+export {};

package/dist/generated/Verdict.d.ts

@@ -0,0 +1,4 @@
+/**
+ * What TrustLoopGuard tells the caller to do with the proposed output.
+ */
+export type Verdict = "allow" | "block" | "rewrite" | "escalate";

package/dist/generated/Verdict.js

@@ -0,0 +1,2 @@
+// This file was generated by [ts-rs](https://github.com/Aleph-Alpha/ts-rs). Do not edit this file manually.
+export {};

package/dist/generated/WorkspaceInvite.d.ts

@@ -0,0 +1,20 @@
+import type { InviteStatus } from "./InviteStatus";
+import type { WorkspaceRole } from "./WorkspaceRole";
+/**
+ * A pending or historical invite. The `id` doubles as the bearer
+ * token: it's an opaque URL-safe random string, single-use, and
+ * invalidated on accept/revoke/expire.
+ */
+export type WorkspaceInvite = {
+    id: string;
+    workspace_id: string;
+    email: string;
+    role: WorkspaceRole;
+    status: InviteStatus;
+    invited_by_user_id: string | null;
+    /**
+     * RFC3339 timestamps.
+     */
+    created_at: string;
+    expires_at: string;
+};

package/dist/generated/WorkspaceInvite.js

@@ -0,0 +1 @@
+export {};

package/dist/generated/WorkspaceMember.d.ts

@@ -0,0 +1,13 @@
+import type { WorkspaceRole } from "./WorkspaceRole";
+/**
+ * A user who currently has access to a workspace.
+ */
+export type WorkspaceMember = {
+    user_id: string;
+    username: string;
+    role: WorkspaceRole;
+    /**
+     * RFC3339 timestamp.
+     */
+    joined_at: string;
+};

package/dist/generated/WorkspaceMember.js

@@ -0,0 +1 @@
+export {};

package/dist/generated/WorkspaceRole.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Permission level a user holds inside a workspace. Mirrors the
+ * `workspace_role` Postgres enum (migration 6).
+ */
+export type WorkspaceRole = "owner" | "admin" | "editor" | "viewer";

package/dist/generated/WorkspaceRole.js

@@ -0,0 +1,2 @@
+// This file was generated by [ts-rs](https://github.com/Aleph-Alpha/ts-rs). Do not edit this file manually.
+export {};

package/dist/generated/WorkspaceSettings.d.ts

@@ -0,0 +1,11 @@
+export type WorkspaceSettings = {
+    default_action: string;
+    escalation_webhook_url: string | null;
+    telemetry_enabled: boolean;
+    retention_days: string;
+    config: Record<string, unknown>;
+    /**
+     * RFC 3339 timestamp.
+     */
+    updated_at: string | null;
+};

package/dist/generated/WorkspaceSettings.js

@@ -0,0 +1,2 @@
+// This file was generated by [ts-rs](https://github.com/Aleph-Alpha/ts-rs). Do not edit this file manually.
+export {};

package/dist/guard.d.ts

@@ -0,0 +1,193 @@
+import { Client, type ClientOptions } from './client';
+import type { Channel } from './generated/Channel';
+import type { CreateRunEventRequest } from './generated/CreateRunEventRequest';
+import type { Decision } from './generated/Decision';
+import { SdkError } from './errors';
+type DecisionHandler = string | ((decision: Decision) => string | Promise<string>);
+type ErrorHandler = string | ((err: SdkError, draft: string) => string | Promise<string>);
+export declare const GuardMode: {
+    readonly Strict: "strict";
+    readonly Rewrite: "rewrite";
+    readonly RewriteOrRegenerate: "rewrite_or_regenerate";
+};
+export type GuardMode = (typeof GuardMode)[keyof typeof GuardMode];
+export interface RegenerateFeedback {
+    /** What the user said. */
+    input: string;
+    /** The draft that failed the guard check. */
+    draft: string;
+    /** Full TrustLoopGuard decision for the failed draft. */
+    decision: Decision;
+    /** Human-readable reason returned by TrustLoopGuard. */
+    reason: string;
+    /** Safe output returned by TrustLoopGuard, when available. */
+    safeOutput: string | null;
+    /** 1-based regeneration attempt number. */
+    attempt: number;
+    /** Maximum allowed regeneration attempts. */
+    maxAttempts: number;
+}
+type RegenerateHandler = (feedback: RegenerateFeedback) => string | Promise<string>;
+export interface GuardCallbacks {
+    /**
+     * Called when the verdict is `allow`. Default: return the original
+     * draft unchanged. Override only if you want to log the allow path
+     * or strip a draft suffix etc.
+     */
+    onAllow?: (draft: string, decision: Decision) => string | Promise<string>;
+    /**
+     * Called when the verdict is `rewrite`. Default: return
+     * `decision.safe_output ?? draft`. Override to post-process or
+     * substitute your own canned rewrite.
+     */
+    onRevise?: (revised: string | null, draft: string, decision: Decision) => string | Promise<string>;
+    /**
+     * Called when the verdict is `block`. **Required** — there is no
+     * sensible automatic answer. Return the canned safe message your
+     * brand wants the customer to see (or throw to abort the send).
+     */
+    onBlock: (decision: Decision) => string | Promise<string>;
+    /**
+     * Called when the verdict is `escalate`. **Required** — typically
+     * pushes onto a human-review queue and returns a holding message.
+     */
+    onEscalate: (decision: Decision) => string | Promise<string>;
+    /**
+     * Called when the SDK transport itself fails (network down, server
+     * 5xx, decode error, retries exhausted). Default: **fail-open** —
+     * return the original draft. Pass an explicit handler if you'd
+     * rather fail-closed (e.g. `() => cannedSafeReply`).
+     */
+    onError?: (err: SdkError, draft: string) => string | Promise<string>;
+}
+export interface GuardOptions extends GuardCallbacks {
+    client: Client;
+    /** What the user said. */
+    input: string;
+    /** What the agent wants to send. The string returned by `guard` is
+     *  what the caller should actually deliver. */
+    draft: string;
+    /** Conversation channel — drives latency budget on the server. */
+    channel?: Channel;
+    /** Required: the registered agent profile id. */
+    agentId: string;
+    /**
+     * Optional structured context — typically `{ docs: [...] }` for
+     * grounding the LLM judges. Anything JSON-serialisable.
+     */
+    context?: Record<string, unknown>;
+    /**
+     * Optional override for `domain` (defaults to the server's
+     * `customer_support` dispatcher).
+     */
+    domain?: string;
+    /** Optional caller-supplied trace id — overrides the server-assigned one. */
+    traceId?: string;
+    /** Optional run id used to group this check in the dashboard. */
+    runId?: string;
+    /** Optional existing run event id to attach to this check. Requires runId. */
+    runEventId?: string;
+    /** Optional inline run event to create and attach to this check. Requires runId. */
+    runEvent?: CreateRunEventRequest;
+    /**
+     * Logger hook. If provided, gets one structured event per `guard`
+     * invocation: { trace_id, verdict, branch, latency_ms }. Useful for
+     * surfacing which branch fired without forcing a specific logger
+     * dependency.
+     */
+    log?: (event: GuardLogEvent) => void;
+    /** Optional cancellation. Forwarded to the underlying check call. */
+    signal?: AbortSignal;
+}
+export interface GuardFactoryOptions {
+    /** Required: the registered agent profile id. */
+    agentId: string;
+    /** Existing client. Pass this when you want to own transport lifecycle/config. */
+    client?: Client;
+    /** TrustLoopGuard server URL. Defaults to env or localhost. */
+    baseUrl?: string;
+    /** Bearer token. Defaults to env when available. */
+    apiKey?: string;
+    /** Retry policy forwarded when the factory owns the Client. */
+    retry?: ClientOptions['retry'];
+    /** Fetch implementation forwarded when the factory owns the Client. */
+    fetchImpl?: ClientOptions['fetchImpl'];
+    /** Retry logger forwarded when the factory owns the Client. */
+    onRetry?: ClientOptions['onRetry'];
+    /** Conversation channel — drives latency budget on the server. */
+    channel?: Channel;
+    /** Optional override for `domain`. */
+    domain?: string;
+    /** Structured context merged into every call. */
+    context?: Record<string, unknown>;
+    /** Default block branch. Omit for the SDK safe message. */
+    onBlock?: DecisionHandler;
+    /** Default escalation branch. Omit for the SDK safe message. */
+    onEscalate?: DecisionHandler;
+    /** Transport failure branch. Omit for fail-open. */
+    onError?: ErrorHandler;
+    /**
+     * Output mode:
+     * - strict: treat rewrite verdicts as blocked output
+     * - rewrite: use safeOutput, block when no safeOutput exists
+     * - rewrite_or_regenerate: use safeOutput, otherwise ask the model to try again
+     */
+    mode?: GuardMode;
+    /** Called by rewrite_or_regenerate when TrustLoopGuard has no safeOutput. */
+    regenerate?: RegenerateHandler;
+    /** Hard cap for model regeneration loops. Defaults to 1. */
+    maxRegenerations?: number;
+    /** Return the default block message on transport errors when no onError is set. */
+    failClosed?: boolean;
+    /** Logger hook for every guard invocation. */
+    log?: (event: GuardLogEvent) => void;
+}
+export interface GuardCallOptions {
+    /** What the user said. */
+    input: string;
+    /** What the agent wants to send. */
+    draft: string;
+    channel?: Channel;
+    domain?: string;
+    context?: Record<string, unknown>;
+    traceId?: string;
+    runId?: string;
+    runEventId?: string;
+    runEvent?: CreateRunEventRequest;
+    onBlock?: DecisionHandler;
+    onEscalate?: DecisionHandler;
+    onError?: ErrorHandler;
+    mode?: GuardMode;
+    regenerate?: RegenerateHandler;
+    maxRegenerations?: number;
+    log?: (event: GuardLogEvent) => void;
+    signal?: AbortSignal;
+}
+export interface OutputGuard {
+    (opts: GuardCallOptions): Promise<string>;
+}
+export interface GuardLogEvent {
+    trace_id: string;
+    verdict: Decision['verdict'];
+    /** Which callback we ended up calling. */
+    branch: 'allow' | 'revise' | 'block' | 'escalate' | 'error';
+    latency_ms: number;
+}
+/**
+ * Run the SDK's check + dispatch the appropriate callback. Returns the
+ * string the caller should actually send to the customer.
+ *
+ * Verdicts map 1:1 to callbacks:
+ *
+ *   allow    → onAllow (default: return draft as-is)
+ *   rewrite  → onRevise (default: return decision.safe_output ?? draft)
+ *   block    → onBlock (required)
+ *   escalate → onEscalate (required)
+ *
+ * Transport / decode / retry-exhausted errors go to `onError`. Default
+ * is **fail-open** — return the original draft. Pass an explicit
+ * `onError` if your domain prefers fail-closed.
+ */
+export declare function guard(opts: GuardFactoryOptions): OutputGuard;
+export declare function guard(opts: GuardOptions): Promise<string>;
+export {};