agent-contracts 0.10.0 → 0.11.0

package/dist/index.d.ts

@@ -94,6 +94,95 @@ declare const ArtifactSchema: z.ZodObject<{
 }, z.core.$loose>;
 type Artifact = z.infer<typeof ArtifactSchema>;
 
+declare const MatcherSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    type: z.ZodLiteral<"command_regex">;
+    pattern: z.ZodString;
+}, z.core.$strip>, z.ZodObject<{
+    type: z.ZodLiteral<"content_regex">;
+    pattern: z.ZodString;
+    file_glob: z.ZodOptional<z.ZodString>;
+    exclude_glob: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>, z.ZodObject<{
+    type: z.ZodLiteral<"file_glob">;
+    pattern: z.ZodString;
+}, z.core.$strip>], "type">;
+type Matcher = z.infer<typeof MatcherSchema>;
+declare const CheckSchema: z.ZodObject<{
+    matcher: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        type: z.ZodLiteral<"command_regex">;
+        pattern: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"content_regex">;
+        pattern: z.ZodString;
+        file_glob: z.ZodOptional<z.ZodString>;
+        exclude_glob: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"file_glob">;
+        pattern: z.ZodString;
+    }, z.core.$strip>], "type">>;
+    script: z.ZodOptional<z.ZodString>;
+    message: z.ZodOptional<z.ZodString>;
+}, z.core.$loose>;
+type Check = z.infer<typeof CheckSchema>;
+declare const BindingOutputSchema: z.ZodObject<{
+    target: z.ZodString;
+    template: z.ZodOptional<z.ZodString>;
+    inline_template: z.ZodOptional<z.ZodString>;
+    mode: z.ZodDefault<z.ZodEnum<{
+        write: "write";
+        patch: "patch";
+    }>>;
+    group_by: z.ZodOptional<z.ZodString>;
+    executable: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$loose>;
+type BindingOutput = z.infer<typeof BindingOutputSchema>;
+declare const ReportingSchema: z.ZodObject<{
+    commands: z.ZodRecord<z.ZodString, z.ZodString>;
+    fail_open: z.ZodDefault<z.ZodBoolean>;
+    timeout_ms: z.ZodDefault<z.ZodNumber>;
+}, z.core.$loose>;
+type Reporting = z.infer<typeof ReportingSchema>;
+declare const SoftwareBindingSchema: z.ZodObject<{
+    software: z.ZodString;
+    version: z.ZodLiteral<1>;
+    extends: z.ZodOptional<z.ZodString>;
+    guardrail_impl: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+        checks: z.ZodArray<z.ZodObject<{
+            matcher: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+                type: z.ZodLiteral<"command_regex">;
+                pattern: z.ZodString;
+            }, z.core.$strip>, z.ZodObject<{
+                type: z.ZodLiteral<"content_regex">;
+                pattern: z.ZodString;
+                file_glob: z.ZodOptional<z.ZodString>;
+                exclude_glob: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>, z.ZodObject<{
+                type: z.ZodLiteral<"file_glob">;
+                pattern: z.ZodString;
+            }, z.core.$strip>], "type">>;
+            script: z.ZodOptional<z.ZodString>;
+            message: z.ZodOptional<z.ZodString>;
+        }, z.core.$loose>>;
+    }, z.core.$strip>>>;
+    outputs: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+        target: z.ZodString;
+        template: z.ZodOptional<z.ZodString>;
+        inline_template: z.ZodOptional<z.ZodString>;
+        mode: z.ZodDefault<z.ZodEnum<{
+            write: "write";
+            patch: "patch";
+        }>>;
+        group_by: z.ZodOptional<z.ZodString>;
+        executable: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$loose>>>;
+    reporting: z.ZodOptional<z.ZodObject<{
+        commands: z.ZodRecord<z.ZodString, z.ZodString>;
+        fail_open: z.ZodDefault<z.ZodBoolean>;
+        timeout_ms: z.ZodDefault<z.ZodNumber>;
+    }, z.core.$loose>>;
+}, z.core.$loose>;
+type SoftwareBinding = z.infer<typeof SoftwareBindingSchema>;
+
 /**
  * Reusable schema components, following the OpenAPI `components` pattern.
  *
@@ -318,6 +407,43 @@ declare const DslSchema: z.ZodObject<{
         requires_validations: z.ZodOptional<z.ZodArray<z.ZodString>>;
         requires: z.ZodOptional<z.ZodArray<z.ZodString>>;
     }, z.core.$loose>>>;
+    guardrails: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
+        description: z.ZodString;
+        scope: z.ZodObject<{
+            agents: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            tasks: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            tools: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            artifacts: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            workflows: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        }, z.core.$loose>;
+        rationale: z.ZodOptional<z.ZodString>;
+        tags: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        exemptions: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    }, z.core.$loose>>>;
+    guardrail_policies: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
+        description: z.ZodOptional<z.ZodString>;
+        rules: z.ZodArray<z.ZodObject<{
+            guardrail: z.ZodString;
+            severity: z.ZodEnum<{
+                mandatory: "mandatory";
+                critical: "critical";
+                warning: "warning";
+                info: "info";
+            }>;
+            action: z.ZodEnum<{
+                info: "info";
+                block: "block";
+                warn: "warn";
+                shadow: "shadow";
+            }>;
+            allow_override: z.ZodDefault<z.ZodBoolean>;
+            override_requires: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            escalation: z.ZodOptional<z.ZodObject<{
+                target: z.ZodString;
+                condition: z.ZodOptional<z.ZodString>;
+            }, z.core.$loose>>;
+        }, z.core.$loose>>;
+    }, z.core.$loose>>>;
     components: z.ZodDefault<z.ZodObject<{
         schemas: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodRecord<z.ZodString, z.ZodAny>>>;
     }, z.core.$loose>>;
@@ -339,6 +465,81 @@ declare const HandoffTypeSchema: z.ZodObject<{
 }, z.core.$loose>;
 type HandoffType = z.infer<typeof HandoffTypeSchema>;
 
+declare const GuardrailScopeSchema: z.ZodObject<{
+    agents: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    tasks: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    tools: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    artifacts: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    workflows: z.ZodOptional<z.ZodArray<z.ZodString>>;
+}, z.core.$loose>;
+type GuardrailScope = z.infer<typeof GuardrailScopeSchema>;
+declare const GuardrailSchema: z.ZodObject<{
+    description: z.ZodString;
+    scope: z.ZodObject<{
+        agents: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        tasks: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        tools: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        artifacts: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        workflows: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    }, z.core.$loose>;
+    rationale: z.ZodOptional<z.ZodString>;
+    tags: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    exemptions: z.ZodOptional<z.ZodArray<z.ZodString>>;
+}, z.core.$loose>;
+type Guardrail = z.infer<typeof GuardrailSchema>;
+declare const GuardrailPolicyRuleEscalationSchema: z.ZodObject<{
+    target: z.ZodString;
+    condition: z.ZodOptional<z.ZodString>;
+}, z.core.$loose>;
+type GuardrailPolicyRuleEscalation = z.infer<typeof GuardrailPolicyRuleEscalationSchema>;
+declare const GuardrailPolicyRuleSchema: z.ZodObject<{
+    guardrail: z.ZodString;
+    severity: z.ZodEnum<{
+        mandatory: "mandatory";
+        critical: "critical";
+        warning: "warning";
+        info: "info";
+    }>;
+    action: z.ZodEnum<{
+        info: "info";
+        block: "block";
+        warn: "warn";
+        shadow: "shadow";
+    }>;
+    allow_override: z.ZodDefault<z.ZodBoolean>;
+    override_requires: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    escalation: z.ZodOptional<z.ZodObject<{
+        target: z.ZodString;
+        condition: z.ZodOptional<z.ZodString>;
+    }, z.core.$loose>>;
+}, z.core.$loose>;
+type GuardrailPolicyRule = z.infer<typeof GuardrailPolicyRuleSchema>;
+declare const GuardrailPolicySchema: z.ZodObject<{
+    description: z.ZodOptional<z.ZodString>;
+    rules: z.ZodArray<z.ZodObject<{
+        guardrail: z.ZodString;
+        severity: z.ZodEnum<{
+            mandatory: "mandatory";
+            critical: "critical";
+            warning: "warning";
+            info: "info";
+        }>;
+        action: z.ZodEnum<{
+            info: "info";
+            block: "block";
+            warn: "warn";
+            shadow: "shadow";
+        }>;
+        allow_override: z.ZodDefault<z.ZodBoolean>;
+        override_requires: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        escalation: z.ZodOptional<z.ZodObject<{
+            target: z.ZodString;
+            condition: z.ZodOptional<z.ZodString>;
+        }, z.core.$loose>>;
+    }, z.core.$loose>>;
+}, z.core.$loose>;
+type GuardrailPolicy = z.infer<typeof GuardrailPolicySchema>;
+
 type AnyRecord$1 = Record<string, unknown>;
 /**
  * Shallow-merge an array of JSON Schema subschemas from an `allOf`.
@@ -710,31 +911,35 @@ declare function lint(dsl: Dsl, rules?: LintRule[]): LintDiagnostic[];
  */
 declare function spectralLint(dslObject: Record<string, unknown>): Promise<LintDiagnostic[]>;
 
-declare const CONTEXT_TYPES: readonly ["agent", "task", "artifact", "tool", "validation", "handoff_type", "workflow", "policy", "system"];
+declare const CONTEXT_TYPES: readonly ["agent", "task", "artifact", "tool", "validation", "handoff_type", "workflow", "policy", "guardrail", "guardrail_policy", "system"];
 declare const ContextTypeSchema: z.ZodEnum<{
+    guardrail: "guardrail";
     workflow: "workflow";
     tool: "tool";
     agent: "agent";
     task: "task";
     validation: "validation";
     system: "system";
+    policy: "policy";
     artifact: "artifact";
     handoff_type: "handoff_type";
-    policy: "policy";
+    guardrail_policy: "guardrail_policy";
 }>;
 type ContextType = z.infer<typeof ContextTypeSchema>;
 declare const RenderTargetSchema: z.ZodObject<{
     template: z.ZodString;
     context: z.ZodEnum<{
+        guardrail: "guardrail";
         workflow: "workflow";
         tool: "tool";
         agent: "agent";
         task: "task";
         validation: "validation";
         system: "system";
+        policy: "policy";
         artifact: "artifact";
         handoff_type: "handoff_type";
-        policy: "policy";
+        guardrail_policy: "guardrail_policy";
     }>;
     output: z.ZodString;
     include: z.ZodOptional<z.ZodArray<z.ZodString>>;
@@ -747,20 +952,25 @@ declare const AgentContractsConfigSchema: z.ZodObject<{
     renders: z.ZodArray<z.ZodObject<{
         template: z.ZodString;
         context: z.ZodEnum<{
+            guardrail: "guardrail";
             workflow: "workflow";
             tool: "tool";
             agent: "agent";
             task: "task";
             validation: "validation";
             system: "system";
+            policy: "policy";
             artifact: "artifact";
             handoff_type: "handoff_type";
-            policy: "policy";
+            guardrail_policy: "guardrail_policy";
         }>;
         output: z.ZodString;
         include: z.ZodOptional<z.ZodArray<z.ZodString>>;
         exclude: z.ZodOptional<z.ZodArray<z.ZodString>>;
     }, z.core.$strip>>;
+    bindings: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    active_guardrail_policy: z.ZodOptional<z.ZodString>;
+    paths: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
 }, z.core.$strip>;
 type AgentContractsConfig = z.infer<typeof AgentContractsConfigSchema>;
 interface ResolvedRenderTarget {
@@ -775,6 +985,9 @@ interface ResolvedConfig {
     vars?: Record<string, string>;
     renders: ResolvedRenderTarget[];
     configDir: string;
+    bindings: string[];
+    activeGuardrailPolicy?: string;
+    paths?: Record<string, string>;
 }
 
 declare function renderFromConfig(dsl: Dsl, renderTargets: ResolvedRenderTarget[]): Promise<string[]>;
@@ -793,6 +1006,8 @@ interface GlobalContext {
     handoff_types: Dsl["handoff_types"];
     workflow: Dsl["workflow"];
     policies: Dsl["policies"];
+    guardrails: Dsl["guardrails"];
+    guardrail_policies: Dsl["guardrail_policies"];
     [key: string]: unknown;
 }
 interface SystemContext {
@@ -871,6 +1086,20 @@ interface PerPolicyContext {
     dsl: Dsl;
     [key: string]: unknown;
 }
+interface PerGuardrailContext {
+    guardrail: Guardrail & {
+        id: string;
+    };
+    dsl: Dsl;
+    [key: string]: unknown;
+}
+interface PerGuardrailPolicyContext {
+    guardrail_policy: GuardrailPolicy & {
+        id: string;
+    };
+    dsl: Dsl;
+    [key: string]: unknown;
+}
 interface MergedBehavioralSpec {
     responsibilities: string[];
     constraints: string[];
@@ -918,10 +1147,18 @@ declare function buildValidationContext(dsl: Dsl, validationId: string): PerVali
 declare function buildHandoffTypeContext(dsl: Dsl, handoffTypeId: string): PerHandoffTypeContext;
 declare function buildWorkflowContext(dsl: Dsl, workflowId: string): PerWorkflowContext;
 declare function buildPolicyContext(dsl: Dsl, policyId: string): PerPolicyContext;
+declare function buildGuardrailContext(dsl: Dsl, guardrailId: string): PerGuardrailContext;
+declare function buildGuardrailPolicyContext(dsl: Dsl, policyId: string): PerGuardrailPolicyContext;
 declare function buildPerAgentContext(dsl: Dsl, agent: Agent & {
     id: string;
 }): PerAgentContext;
 
+interface LoadedBinding {
+    filePath: string;
+    binding: SoftwareBinding;
+}
+declare function loadBindings(bindingPaths: string[]): Promise<LoadedBinding[]>;
+
 declare class ConfigLoadError extends Error {
     readonly filePath?: string | undefined;
     constructor(message: string, filePath?: string | undefined);
@@ -929,4 +1166,59 @@ declare class ConfigLoadError extends Error {
 declare function loadConfig(configPath?: string): Promise<ResolvedConfig | null>;
 declare function resolveDslPath(dirArg: string | undefined, dirArgDefault: string, config: ResolvedConfig | null): string;
 
-export { type Agent, type AgentContractsConfig, AgentContractsConfigSchema, AgentSchema, type AppendOperator, AppendOperatorSchema, type Artifact, ArtifactSchema, BaseResolveError, CONTEXT_TYPES, type Command, CommandSchema, type Components, ComponentsSchema, ConfigLoadError, type ContextType, ContextTypeSchema, type DelegatableTaskView, type DiagnosticMessage, type Dsl, DslLoadError, DslSchema, type EscalationCriterion, EscalationCriterionSchema, type ExecutionStep, ExecutionStepSchema, type Extends, ExtendsSchema, type ExternalParticipant, type GlobalContext, type HandoffType, HandoffTypeSchema, type InsertAfterOperator, InsertAfterOperatorSchema, type LintDiagnostic, type LintRule, type LoadResult, MergeError, type MergeableRecord, type MergedBehavioralSpec, type PerAgentContext, type PerArtifactContext, type PerHandoffTypeContext, type PerPolicyContext, type PerTaskContext, type PerToolContext, type PerValidationContext, type PerWorkflowContext, type Policy, PolicySchema, type PolicyWhen, PolicyWhenSchema, type PrependOperator, PrependOperatorSchema, type Prerequisite, PrerequisiteSchema, type ReferenceDiagnostic, type RemoveOperator, RemoveOperatorSchema, type RenderTarget, RenderTargetSchema, type ReplaceOperator, ReplaceOperatorSchema, type ResolveResult, type ResolvedConfig, type ResolvedRenderTarget, type Retry, type Rule, RuleSchema, type SchemaValidationResult, type Severity, type System, type SystemContext, SystemSchema, type Task, TaskSchema, type Tool, ToolSchema, type Validation, ValidationSchema, type VersionLiteral, VersionLiteralSchema, type Workflow, WorkflowSchema, type WorkflowStep, WorkflowStepSchema, buildArtifactContext, buildGlobalContext, buildHandoffTypeContext, buildPerAgentContext, buildPolicyContext, buildSystemContext, buildTaskContext, buildToolContext, buildValidationContext, buildWorkflowContext, builtinRules, checkDriftFromConfig, checkReferences, lint, loadConfig, loadDsl, mergeDsl, renderFromConfig, resolve, resolveAllOf, resolveBase, resolveDslPath, spectralLint, validateHandoffSchemas, validateSchema };
+interface ResolvedCheck {
+    guardrail_id: string;
+    guardrail: Guardrail;
+    policy_rule: GuardrailPolicyRule;
+    check: Check;
+}
+interface GuardrailGenerationContext {
+    system: {
+        id: string;
+        name: string;
+    };
+    guardrails: Record<string, Guardrail>;
+    policy: GuardrailPolicy;
+    binding: SoftwareBinding;
+    all_bindings: Record<string, SoftwareBinding>;
+    vars: Record<string, string>;
+    paths: Record<string, string>;
+    reporting: {
+        commands: Record<string, string>;
+        fail_open: boolean;
+        timeout_ms: number;
+    } | null;
+    resolved_checks: ResolvedCheck[];
+}
+interface GenerateResult {
+    outputFiles: string[];
+    diagnostics: GenerateDiagnostic[];
+}
+interface GenerateDiagnostic {
+    path: string;
+    message: string;
+    severity: "error" | "warning" | "info";
+}
+
+interface GenerateGuardrailsOptions {
+    dsl: Dsl;
+    config: ResolvedConfig;
+    loadedBindings: LoadedBinding[];
+    filterBindings?: string[];
+    dryRun?: boolean;
+}
+declare function generateGuardrails(options: GenerateGuardrailsOptions): Promise<GenerateResult>;
+
+interface ResolveChecksResult {
+    resolved: ResolvedCheck[];
+    diagnostics: GenerateDiagnostic[];
+}
+declare function resolveChecks(dsl: Dsl, binding: SoftwareBinding, policy: GuardrailPolicy): ResolveChecksResult;
+
+interface PathResolveResult {
+    resolved: string;
+    diagnostics: GenerateDiagnostic[];
+}
+declare function resolveBindingTargetPath(target: string, paths: Record<string, string>, bindingSoftware: string): PathResolveResult;
+
+export { type Agent, type AgentContractsConfig, AgentContractsConfigSchema, AgentSchema, type AppendOperator, AppendOperatorSchema, type Artifact, ArtifactSchema, BaseResolveError, type BindingOutput, BindingOutputSchema, CONTEXT_TYPES, type Check, CheckSchema, type Command, CommandSchema, type Components, ComponentsSchema, ConfigLoadError, type ContextType, ContextTypeSchema, type DelegatableTaskView, type DiagnosticMessage, type Dsl, DslLoadError, DslSchema, type EscalationCriterion, EscalationCriterionSchema, type ExecutionStep, ExecutionStepSchema, type Extends, ExtendsSchema, type ExternalParticipant, type GenerateDiagnostic, type GenerateGuardrailsOptions, type GenerateResult, type GlobalContext, type Guardrail, type GuardrailGenerationContext, type GuardrailPolicy, type GuardrailPolicyRule, type GuardrailPolicyRuleEscalation, GuardrailPolicyRuleEscalationSchema, GuardrailPolicyRuleSchema, GuardrailPolicySchema, GuardrailSchema, type GuardrailScope, GuardrailScopeSchema, type HandoffType, HandoffTypeSchema, type InsertAfterOperator, InsertAfterOperatorSchema, type LintDiagnostic, type LintRule, type LoadResult, type LoadedBinding, type Matcher, MatcherSchema, MergeError, type MergeableRecord, type MergedBehavioralSpec, type PathResolveResult, type PerAgentContext, type PerArtifactContext, type PerGuardrailContext, type PerGuardrailPolicyContext, type PerHandoffTypeContext, type PerPolicyContext, type PerTaskContext, type PerToolContext, type PerValidationContext, type PerWorkflowContext, type Policy, PolicySchema, type PolicyWhen, PolicyWhenSchema, type PrependOperator, PrependOperatorSchema, type Prerequisite, PrerequisiteSchema, type ReferenceDiagnostic, type RemoveOperator, RemoveOperatorSchema, type RenderTarget, RenderTargetSchema, type ReplaceOperator, ReplaceOperatorSchema, type Reporting, ReportingSchema, type ResolveChecksResult, type ResolveResult, type ResolvedCheck, type ResolvedConfig, type ResolvedRenderTarget, type Retry, type Rule, RuleSchema, type SchemaValidationResult, type Severity, type SoftwareBinding, SoftwareBindingSchema, type System, type SystemContext, SystemSchema, type Task, TaskSchema, type Tool, ToolSchema, type Validation, ValidationSchema, type VersionLiteral, VersionLiteralSchema, type Workflow, WorkflowSchema, type WorkflowStep, WorkflowStepSchema, buildArtifactContext, buildGlobalContext, buildGuardrailContext, buildGuardrailPolicyContext, buildHandoffTypeContext, buildPerAgentContext, buildPolicyContext, buildSystemContext, buildTaskContext, buildToolContext, buildValidationContext, buildWorkflowContext, builtinRules, checkDriftFromConfig, checkReferences, generateGuardrails, lint, loadBindings, loadConfig, loadDsl, mergeDsl, renderFromConfig, resolve, resolveAllOf, resolveBase, resolveBindingTargetPath, resolveChecks, resolveDslPath, spectralLint, validateHandoffSchemas, validateSchema };