avantgate 2.3.0 → 2.4.0

package/dist/{chunk-W27A25DK.mjs → chunk-B22KKIQQ.mjs}

@@ -150,6 +150,25 @@ var DtoValidationError = class extends Error {
     this.issues = issues;
   }
 };
+var AmbiguousToolExecutionError = class extends Error {
+  toolCallId;
+  toolName;
+  impact;
+  originalError;
+  constructor(details, toolName, impact) {
+    const isStr = typeof details === "string";
+    const callId = isStr ? details : details.toolCallId;
+    const name = isStr ? toolName : details.toolName;
+    const imp = isStr ? impact ?? "MUTATIVE" : details.impact ?? "MUTATIVE";
+    const msg = isStr ? "" : details.message ? `: ${details.message}` : "";
+    super(`Ambiguous tool execution detected for [${name || "tool"}::${callId}] (${imp})${msg}. Re-execution blocked without reconciliation.`);
+    this.name = "AmbiguousToolExecutionError";
+    this.toolCallId = callId;
+    this.toolName = name;
+    this.impact = imp;
+    this.originalError = isStr ? void 0 : details.originalError;
+  }
+};
 
 // src/agent/guardrails.ts
 function sanitizeString(value) {
@@ -203,16 +222,223 @@ function auditToolResult(data, options) {
   };
 }
 
+// src/agent/tool-resilience.ts
+var MAX_FALLBACK_CAP = 1e3;
+var inMemoryFallbackStore = /* @__PURE__ */ new Map();
+var clearResilienceFallbackStore = () => {
+  inMemoryFallbackStore.clear();
+};
+var setFallbackRecord = (toolCallId, record) => {
+  if (inMemoryFallbackStore.size >= MAX_FALLBACK_CAP) {
+    const firstKey = inMemoryFallbackStore.keys().next().value;
+    if (firstKey) inMemoryFallbackStore.delete(firstKey);
+  }
+  inMemoryFallbackStore.set(toolCallId, record);
+};
+var isDeterministicClientError = (error) => {
+  if (!error || typeof error !== "object") {
+    return false;
+  }
+  const err = error;
+  const status = Number(err.status ?? err.statusCode);
+  if (status >= 400 && status < 500 && status !== 408 && status !== 429) {
+    return true;
+  }
+  return err.name === "DtoValidationError" || err.name === "ToolAccessDeniedError";
+};
+var isAmbiguousTimeoutError = (error, isTimedOut) => {
+  if (isTimedOut) return true;
+  if (!error || typeof error !== "object") return false;
+  const err = error;
+  const name = String(err.name ?? "");
+  const status = Number(err.status ?? err.statusCode);
+  if (name === "AbortError" || name === "TimeoutError") return true;
+  if (status === 408 || status === 502 || status === 503 || status === 504) return true;
+  const msg = String(err.message ?? "").toLowerCase();
+  const code = String(err.code ?? "").toLowerCase();
+  return ["timeout", "etimedout", "econnreset", "socket hang up", "network error", "fetch failed"].some((key) => msg.includes(key) || code.includes(key));
+};
+var classifyErrorStatus = (error, isTimedOut) => {
+  if (isDeterministicClientError(error)) {
+    return "FAILED";
+  }
+  if (isAmbiguousTimeoutError(error, isTimedOut)) {
+    return "UNCONFIRMED_TIMEOUT";
+  }
+  return "FAILED";
+};
+var getToolExecutionRecord = async (storage, toolCallId) => {
+  if (!storage) {
+    return inMemoryFallbackStore.get(toolCallId) ?? null;
+  }
+  if (storage.getStateValue) {
+    const val = await storage.getStateValue(`tool_resilience:${toolCallId}`);
+    if (val) return val;
+    const directVal = await storage.getStateValue(toolCallId);
+    if (directVal) return directVal;
+  }
+  const step = await storage.getStep("_tool_resilience", toolCallId);
+  return step?.metadata?.resilienceRecord ?? null;
+};
+var saveToStateStorage = async (storage, toolCallId, record) => {
+  if (!storage.setStateValue) return;
+  await storage.setStateValue(`tool_resilience:${toolCallId}`, record);
+  await storage.setStateValue(toolCallId, record);
+};
+var saveResilienceRecord = async (storage, record) => {
+  if (!storage) {
+    setFallbackRecord(record.toolCallId, record);
+    return;
+  }
+  await saveToStateStorage(storage, record.toolCallId, record);
+  const status = record.status === "COMPLETED" ? "COMPLETED" : record.status === "FAILED" ? "FAILED" : "RUNNING";
+  await storage.saveStep({
+    workflowId: "_tool_resilience",
+    stepId: record.toolCallId,
+    status,
+    result: record.result,
+    error: record.error,
+    metadata: { resilienceRecord: record },
+    createdAt: new Date(record.startedAt).toISOString(),
+    updatedAt: new Date(record.updatedAt).toISOString()
+  });
+};
+var handleAmbiguousFailure = (options, originalError) => {
+  const workflowId = options.workflowId ?? "_tool_resilience";
+  if (options.suspendOnAmbiguous) {
+    throw new StepSuspendedError(options.toolCallId, workflowId, {
+      toolCallId: options.toolCallId,
+      impact: options.impact,
+      reason: "Ambiguous mutation requires human intervention",
+      originalError
+    });
+  }
+  throw new AmbiguousToolExecutionError({
+    toolCallId: options.toolCallId,
+    toolName: options.toolName,
+    impact: options.impact,
+    message: "Ambiguous execution state (UNCONFIRMED_TIMEOUT). Re-execution blocked without reconciliation.",
+    originalError
+  });
+};
+var saveReconciledRecord = async (options, result) => {
+  await saveResilienceRecord(options.storage, {
+    toolCallId: options.toolCallId,
+    status: "COMPLETED",
+    result,
+    impact: options.impact,
+    startedAt: Date.now(),
+    updatedAt: Date.now()
+  });
+  return { result, isCached: true, status: "COMPLETED" };
+};
+var tryReconciliation = async (options) => {
+  if (!options.onAmbiguousRetry) {
+    return handleAmbiguousFailure(options);
+  }
+  try {
+    const outcome = await options.onAmbiguousRetry({ toolCallId: options.toolCallId, args: options.args });
+    if (!outcome.reconciled) {
+      return handleAmbiguousFailure(options);
+    }
+    return await saveReconciledRecord(options, outcome.result);
+  } catch (err) {
+    if (err instanceof StepSuspendedError || err instanceof AmbiguousToolExecutionError) throw err;
+    return handleAmbiguousFailure(options, err);
+  }
+};
+var checkExistingState = async (options) => {
+  const existing = await getToolExecutionRecord(options.storage, options.toolCallId);
+  if (!existing) {
+    return null;
+  }
+  if (existing.status === "COMPLETED") {
+    return { result: existing.result, isCached: true, status: "COMPLETED" };
+  }
+  if (existing.status === "UNCONFIRMED_TIMEOUT") {
+    if (options.impact === "READ_ONLY") {
+      return null;
+    }
+    return await tryReconciliation(options);
+  }
+  return null;
+};
+var executeActionWithTimeout = async (action, timeoutMs, idempotencyKey) => {
+  const controller = new AbortController();
+  let isTimedOut = false;
+  const timer = setTimeout(() => {
+    isTimedOut = true;
+    controller.abort(new Error(`Tool execution timed out after ${timeoutMs}ms`));
+  }, timeoutMs);
+  try {
+    const result = await action(controller.signal, idempotencyKey);
+    return { result, isTimedOut: false };
+  } catch (error) {
+    return { error, isTimedOut };
+  } finally {
+    clearTimeout(timer);
+  }
+};
+var saveFailureRecord = async (options, startedAt, error, isTimedOut) => {
+  const status = classifyErrorStatus(error, isTimedOut);
+  const errorMsg = error instanceof Error ? error.message : String(error);
+  await saveResilienceRecord(options.storage, {
+    toolCallId: options.toolCallId,
+    status,
+    error: errorMsg,
+    impact: options.impact,
+    startedAt,
+    updatedAt: Date.now()
+  });
+  throw error;
+};
+var saveSuccessRecord = async (options, startedAt, result) => {
+  await saveResilienceRecord(options.storage, {
+    toolCallId: options.toolCallId,
+    status: "COMPLETED",
+    result,
+    impact: options.impact,
+    startedAt,
+    updatedAt: Date.now()
+  });
+  return { result, isCached: false, status: "COMPLETED" };
+};
+var claimExecutionIntent = async (options, startedAt) => {
+  await saveResilienceRecord(options.storage, {
+    toolCallId: options.toolCallId,
+    status: "CLAIMED",
+    impact: options.impact,
+    startedAt,
+    updatedAt: startedAt
+  });
+};
+var withToolResilience = async (options) => {
+  const existingResult = await checkExistingState(options);
+  if (existingResult) {
+    return existingResult;
+  }
+  const startedAt = Date.now();
+  const idempotencyKey = options.idempotencyKey || options.toolCallId;
+  await claimExecutionIntent(options, startedAt);
+  const timeoutMs = options.timeoutMs ?? 3e4;
+  const outcome = await executeActionWithTimeout(options.action, timeoutMs, idempotencyKey);
+  if (outcome.error) {
+    return await saveFailureRecord(options, startedAt, outcome.error, outcome.isTimedOut);
+  }
+  return await saveSuccessRecord(options, startedAt, outcome.result);
+};
+
 // src/agent/isolated-tool.ts
 var verifyRoles = (configuredRoles, context, toolIdentifier) => {
   if (!configuredRoles || configuredRoles.length === 0) {
     return;
   }
-  const userRoles = [
-    ...context.roles ?? [],
-    ...context.role ? [context.role] : []
-  ];
-  const hasAllowedRole = configuredRoles.some((role) => userRoles.includes(role));
+  if (!context.role && (!context.roles || context.roles.length === 0)) {
+    throw new ToolAccessDeniedError(toolIdentifier, "Access denied: insufficient role permissions");
+  }
+  const roleSet = new Set(context.roles ?? []);
+  if (context.role) roleSet.add(context.role);
+  const hasAllowedRole = configuredRoles.some((role) => roleSet.has(role));
   if (!hasAllowedRole) {
     throw new ToolAccessDeniedError(
       toolIdentifier,
@@ -329,6 +555,35 @@ var processLlmPayload = async (rawResult, args, context, config, toolIdentifier)
     config.throwOnPii === true
   );
 };
+var buildResilientContext = (config, args, context) => {
+  const toolCallId = context.toolCallId || `call_${Date.now()}_${Math.random().toString(36).slice(2, 7)}`;
+  const genKey = config.resilience?.idempotencyKeyGenerator?.(args, context);
+  const idempotencyKey = context.idempotencyKey || genKey || toolCallId;
+  const resilientContext = { ...context, toolCallId, idempotencyKey };
+  return { toolCallId, idempotencyKey, resilientContext };
+};
+var executeWithResilienceGuard = async (config, args, context, toolIdentifier) => {
+  if (!config.resilience) {
+    return await config.execute(args, context);
+  }
+  const { toolCallId, idempotencyKey, resilientContext } = buildResilientContext(config, args, context);
+  const outcome = await withToolResilience({
+    toolCallId,
+    toolName: toolIdentifier,
+    storage: context.storage,
+    impact: config.impact ?? "READ_ONLY",
+    idempotencyKey,
+    timeoutMs: config.resilience.timeoutMs,
+    suspendOnAmbiguous: config.resilience.suspendOnAmbiguous,
+    workflowId: context.workflowId,
+    args,
+    action: async (signal, idKey) => {
+      return await config.execute(args, { ...resilientContext, abortSignal: signal, idempotencyKey: idKey });
+    },
+    onAmbiguousRetry: config.resilience.onAmbiguousRetry
+  });
+  return outcome.result;
+};
 var createIsolatedTool = (config) => {
   const toolId = config.id || config.name;
   const toolAlias = config.alias;
@@ -350,6 +605,7 @@ var createIsolatedTool = (config) => {
     _roles: config.roles ? Object.freeze([...config.roles]) : void 0,
     _impact: toolImpact,
     _requireApproval: requireApproval,
+    _resilience: config.resilience,
     _lastPiiFilteredCount: 0,
     _lastInvalidationTags: void 0,
     execute: async (args, context) => {
@@ -364,7 +620,12 @@ var createIsolatedTool = (config) => {
         updatedContext,
         toolIdentifier
       );
-      const rawResult = await config.execute(args, updatedContext);
+      const rawResult = await executeWithResilienceGuard(
+        config,
+        args,
+        updatedContext,
+        toolIdentifier
+      );
       verifyTenantIsolation(config.assertTenant, rawResult, updatedContext, toolIdentifier);
       await verifyResourceOwnership(
         config.assertOwnership,
@@ -410,7 +671,11 @@ export {
   ToolSubCallQuotaError,
   ToolNotFoundError,
   DtoValidationError,
+  AmbiguousToolExecutionError,
   auditToolResult,
+  clearResilienceFallbackStore,
+  getToolExecutionRecord,
+  withToolResilience,
   createIsolatedTool,
   createTenantTool
 };

package/dist/{chunk-AH5XXSS4.mjs → chunk-KEJ4VNSN.mjs}

@@ -1,7 +1,7 @@
 import {
   StepSuspendedError,
   createIsolatedTool
-} from "./chunk-W27A25DK.mjs";
+} from "./chunk-B22KKIQQ.mjs";
 
 // src/workflow/errors.ts
 var WorkflowSagaRollbackError = class extends Error {

package/dist/control-layer.d.ts

@@ -1,14 +1,23 @@
 import { z } from "zod";
-import type { ControlLayerConfig, ExecutionResult, StructuredExecutionResult, GenerateStructuredOutputOptions, LLMProviderPort, ChatMessage } from "./types";
+import type { ControlLayerConfig, ExecutionResult, StructuredExecutionResult, GenerateStructuredOutputOptions, LLMProviderPort, ChatMessage, BudgetReservation } from "./types";
 export declare class AvantGateControlLayer {
     private config;
     private cachedPricingAdapter?;
+    private reservations;
+    private cachedProviderChain;
     constructor(config: ControlLayerConfig);
+    getReservation: (id: string) => BudgetReservation | undefined;
+    getAllReservations: () => BudgetReservation[];
     private resolveProviderConfig;
     private findProviderConfig;
     private calculateCost;
     private applySecurityGuards;
+    private reScanMessagesAfterHooks;
     private applyOutputSecurityGuards;
+    private validateTokenBudget;
+    private validatePricingConfigured;
+    private evaluatePessimisticSolvency;
+    private createBudgetReservation;
     private checkPreflightBudget;
     private checkPostExecutionBudget;
     private buildMessages;
@@ -24,6 +33,7 @@ export declare class AvantGateControlLayer {
     private dispatchPromptExecution;
     private finalizeExecutionResult;
     private runAfterHooks;
+    private verifyPromptBudget;
     execute: (options: {
         userQuery?: string;
         systemPrompt?: string;
@@ -48,7 +58,6 @@ export declare class AvantGateControlLayer {
         providerOverride?: LLMProviderPort;
     }) => Promise<StructuredExecutionResult<T>>;
     private sanitizeIncomingMessages;
-    private verifyPromptBudget;
     private dispatchOverrideAttempt;
     private dispatchSimulatedAttempt;
     private dispatchPipelineAttempt;

package/dist/control-layer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"control-layer.d.ts","sourceRoot":"","sources":["../src/control-layer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EACV,kBAAkB,EAClB,eAAe,EACf,yBAAyB,EACzB,+BAA+B,EAC/B,eAAe,EACf,WAAW,EAIZ,MAAM,SAAS,CAAC;AAkBjB,qBAAa,qBAAqB;IAChC,OAAO,CAAC,MAAM,CAAqB;IACnC,OAAO,CAAC,oBAAoB,CAAC,CAAuB;gBAExC,MAAM,EAAE,kBAAkB;IAgBtC,OAAO,CAAC,qBAAqB,CAU3B;IAEF,OAAO,CAAC,kBAAkB,CAaxB;IAEF,OAAO,CAAC,aAAa,CAcnB;IAEF,OAAO,CAAC,mBAAmB,CAqBzB;IAEF,OAAO,CAAC,yBAAyB,CAiB/B;IAEF,OAAO,CAAC,oBAAoB,CAkC1B;IAEF,OAAO,CAAC,wBAAwB,CAW9B;IAEF,OAAO,CAAC,aAAa,CAOnB;IAEF,OAAO,CAAC,aAAa,CAUnB;IAEF,OAAO,CAAC,gBAAgB,CAMtB;IAEF,OAAO,CAAC,iBAAiB,CAsBvB;IAEF,OAAO,CAAC,uBAAuB,CAmB7B;IAEF,OAAO,CAAC,uBAAuB,CA+B7B;IAEF,OAAO,CAAC,cAAc,CAqBpB;IAEF,OAAO,CAAC,eAAe,CAarB;IAEF,OAAO,CAAC,oBAAoB,CAa1B;IAEF,OAAO,CAAC,kBAAkB,CAmBxB;IAEF,OAAO,CAAC,uBAAuB,CAyB7B;IAEF,OAAO,CAAC,uBAAuB,CAmB7B;IAEF,OAAO,CAAC,aAAa,CAgBnB;IAEF,OAAO,GAAU,SAAS;QACxB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,EAAE,WAAW,EAAE,CAAC;QACzB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,gBAAgB,CAAC,EAAE,eAAe,CAAC;QACnC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KACpC,KAAG,OAAO,CAAC,eAAe,CAAC,CAe1B;IAEF,aAAa,YAxBa;QACxB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,EAAE,WAAW,EAAE,CAAC;QACzB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,gBAAgB,CAAC,EAAE,eAAe,CAAC;QACnC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KACpC,KAAG,OAAO,CAAC,eAAe,CAAC,CAiBC;IAI7B,iBAAiB,GAAU,CAAC,EAAE,SAAS;QACrC,SAAS,EAAE,MAAM,CAAC;QAClB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACrB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,gBAAgB,CAAC,EAAE,eAAe,CAAC;KACpC,KAAG,OAAO,CAAC,yBAAyB,CAAC,CAAC,CAAC,CAAC,CAyBvC;IAEF,OAAO,CAAC,wBAAwB,CAO9B;IAEF,OAAO,CAAC,kBAAkB,CAIxB;IAEF,OAAO,CAAC,uBAAuB,CAe7B;IAEF,OAAO,CAAC,wBAAwB,CAqB9B;IAEF,OAAO,CAAC,uBAAuB,CAkB7B;IAEF,OAAO,CAAC,uBAAuB,CAY7B;IAEF,OAAO,CAAC,gCAAgC,CAiBtC;IAEF,OAAO,CAAC,qBAAqB,CAwB3B;IAEF,OAAO,CAAC,mBAAmB,CAazB;IAEF,OAAO,CAAC,gBAAgB,CAQtB;IAEF,OAAO,CAAC,4BAA4B,CAwBlC;IAEF,OAAO,CAAC,uBAAuB,CAgB7B;IAEF,OAAO,CAAC,qBAAqB,CAgC3B;IAEF,wBAAwB,GAAU,CAAC,EACjC,SAAS,+BAA+B,CAAC,CAAC,CAAC,KAC1C,OAAO,CAAC,yBAAyB,CAAC,CAAC,CAAC,CAAC,CAiBtC;CACH;AAED,eAAO,MAAM,qBAAqB,GAAI,QAAQ,kBAAkB,KAAG,qBAElE,CAAC;AAEF,eAAO,MAAM,eAAe,WAJkB,kBAAkB,KAAG,qBAIf,CAAC;AACrD,OAAO,EAAE,qBAAqB,IAAI,kBAAkB,EAAE,CAAC"}
+{"version":3,"file":"control-layer.d.ts","sourceRoot":"","sources":["../src/control-layer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EACV,kBAAkB,EAClB,eAAe,EACf,yBAAyB,EACzB,+BAA+B,EAC/B,eAAe,EACf,WAAW,EAIX,iBAAiB,EAClB,MAAM,SAAS,CAAC;AAoBjB,qBAAa,qBAAqB;IAChC,OAAO,CAAC,MAAM,CAAqB;IACnC,OAAO,CAAC,oBAAoB,CAAC,CAAuB;IACpD,OAAO,CAAC,YAAY,CAAwC;IAC5D,OAAO,CAAC,mBAAmB,CAAmB;gBAElC,MAAM,EAAE,kBAAkB;IAsBtC,cAAc,GAAI,IAAI,MAAM,KAAG,iBAAiB,GAAG,SAAS,CAE1D;IAEF,kBAAkB,QAAO,iBAAiB,EAAE,CAE1C;IAGF,OAAO,CAAC,qBAAqB,CAU3B;IAEF,OAAO,CAAC,kBAAkB,CAYxB;IAEF,OAAO,CAAC,aAAa,CAcnB;IAEF,OAAO,CAAC,mBAAmB,CAqBzB;IAEF,OAAO,CAAC,wBAAwB,CAkB9B;IAEF,OAAO,CAAC,yBAAyB,CAiB/B;IAEF,OAAO,CAAC,mBAAmB,CAMzB;IAEF,OAAO,CAAC,yBAAyB,CAoB/B;IAEF,OAAO,CAAC,2BAA2B,CAyBjC;IAEF,OAAO,CAAC,uBAAuB,CAqB7B;IAEF,OAAO,CAAC,oBAAoB,CAwB1B;IAIF,OAAO,CAAC,wBAAwB,CAW9B;IAEF,OAAO,CAAC,aAAa,CAOnB;IAEF,OAAO,CAAC,aAAa,CAUnB;IAEF,OAAO,CAAC,gBAAgB,CAEtB;IAEF,OAAO,CAAC,iBAAiB,CAsBvB;IAEF,OAAO,CAAC,uBAAuB,CAmB7B;IAEF,OAAO,CAAC,uBAAuB,CA+B7B;IAEF,OAAO,CAAC,cAAc,CAqBpB;IAEF,OAAO,CAAC,eAAe,CAarB;IAEF,OAAO,CAAC,oBAAoB,CAa1B;IAEF,OAAO,CAAC,kBAAkB,CAmBxB;IAEF,OAAO,CAAC,uBAAuB,CAyB7B;IAEF,OAAO,CAAC,uBAAuB,CAmB7B;IAEF,OAAO,CAAC,aAAa,CAoBnB;IAEF,OAAO,CAAC,kBAAkB,CAQxB;IAEF,OAAO,GAAU,SAAS;QACxB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,EAAE,WAAW,EAAE,CAAC;QACzB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,gBAAgB,CAAC,EAAE,eAAe,CAAC;QACnC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KACpC,KAAG,OAAO,CAAC,eAAe,CAAC,CA+C1B;IAGF,aAAa,YAzDa;QACxB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,EAAE,WAAW,EAAE,CAAC;QACzB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,gBAAgB,CAAC,EAAE,eAAe,CAAC;QACnC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KACpC,KAAG,OAAO,CAAC,eAAe,CAAC,CAkDC;IAI7B,iBAAiB,GAAU,CAAC,EAAE,SAAS;QACrC,SAAS,EAAE,MAAM,CAAC;QAClB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACrB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,gBAAgB,CAAC,EAAE,eAAe,CAAC;KACpC,KAAG,OAAO,CAAC,yBAAyB,CAAC,CAAC,CAAC,CAAC,CAyBvC;IAEF,OAAO,CAAC,wBAAwB,CAO9B;IAGF,OAAO,CAAC,uBAAuB,CAe7B;IAEF,OAAO,CAAC,wBAAwB,CAqB9B;IAEF,OAAO,CAAC,uBAAuB,CAkB7B;IAEF,OAAO,CAAC,uBAAuB,CAY7B;IAEF,OAAO,CAAC,gCAAgC,CAiBtC;IAEF,OAAO,CAAC,qBAAqB,CAwB3B;IAEF,OAAO,CAAC,mBAAmB,CAazB;IAEF,OAAO,CAAC,gBAAgB,CAQtB;IAEF,OAAO,CAAC,4BAA4B,CAwBlC;IAEF,OAAO,CAAC,uBAAuB,CAoB7B;IAEF,OAAO,CAAC,qBAAqB,CAgC3B;IAEF,wBAAwB,GAAU,CAAC,EACjC,SAAS,+BAA+B,CAAC,CAAC,CAAC,KAC1C,OAAO,CAAC,yBAAyB,CAAC,CAAC,CAAC,CAAC,CA4CtC;CACH;AAED,eAAO,MAAM,qBAAqB,GAAI,QAAQ,kBAAkB,KAAG,qBAElE,CAAC;AAEF,eAAO,MAAM,eAAe,WAJkB,kBAAkB,KAAG,qBAIf,CAAC;AACrD,OAAO,EAAE,qBAAqB,IAAI,kBAAkB,EAAE,CAAC"}

package/dist/errors.d.ts

@@ -0,0 +1,16 @@
+export declare class MiddlewareTimeoutError extends Error {
+    readonly middlewareName: string;
+    readonly timeoutMs: number;
+    readonly phase: "beforeRequest" | "afterResponse";
+    constructor(middlewareName: string, phase: "beforeRequest" | "afterResponse", timeoutMs: number);
+}
+export declare class InvalidMessageSchemaError extends Error {
+    readonly middlewareName: string;
+    readonly validationErrors: unknown;
+    constructor(middlewareName: string, validationErrors: unknown);
+}
+export declare class PromptInjectionError extends Error {
+    readonly reason: string;
+    constructor(reason: string);
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,qBAAa,sBAAuB,SAAQ,KAAK;IAC/C,SAAgB,cAAc,EAAE,MAAM,CAAC;IACvC,SAAgB,SAAS,EAAE,MAAM,CAAC;IAClC,SAAgB,KAAK,EAAE,eAAe,GAAG,eAAe,CAAC;gBAE7C,cAAc,EAAE,MAAM,EAAE,KAAK,EAAE,eAAe,GAAG,eAAe,EAAE,SAAS,EAAE,MAAM;CAOhG;AAED,qBAAa,yBAA0B,SAAQ,KAAK;IAClD,SAAgB,cAAc,EAAE,MAAM,CAAC;IACvC,SAAgB,gBAAgB,EAAE,OAAO,CAAC;gBAE9B,cAAc,EAAE,MAAM,EAAE,gBAAgB,EAAE,OAAO;CAM9D;AAED,qBAAa,oBAAqB,SAAQ,KAAK;IAC7C,SAAgB,MAAM,EAAE,MAAM,CAAC;gBAEnB,MAAM,EAAE,MAAM;CAK3B"}

package/dist/index.d.ts

@@ -12,4 +12,6 @@ export * from "./secret-guard";
 export * from "./custom-terms";
 export * from "./middleware";
 export * from "./presets";
+export * from "./errors";
+export * from "./utils/immutability";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,SAAS,CAAC;AACxB,cAAc,WAAW,CAAC;AAC1B,cAAc,0BAA0B,CAAC;AACzC,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,sBAAsB,CAAC;AACrC,cAAc,iBAAiB,CAAC;AAChC,cAAc,WAAW,CAAC;AAC1B,cAAc,yBAAyB,CAAC;AACxC,cAAc,YAAY,CAAC;AAC3B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,cAAc,CAAC;AAC7B,cAAc,WAAW,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,SAAS,CAAC;AACxB,cAAc,WAAW,CAAC;AAC1B,cAAc,0BAA0B,CAAC;AACzC,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,sBAAsB,CAAC;AACrC,cAAc,iBAAiB,CAAC;AAChC,cAAc,WAAW,CAAC;AAC1B,cAAc,yBAAyB,CAAC;AACxC,cAAc,YAAY,CAAC;AAC3B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,cAAc,CAAC;AAC7B,cAAc,WAAW,CAAC;AAC1B,cAAc,UAAU,CAAC;AACzB,cAAc,sBAAsB,CAAC"}