guardrail-plug-sdk 1.0.1 → 1.0.3

package/dist/Guardrail.d.ts

@@ -18,3 +18,13 @@ export declare class Guardrail {
      */
     chat(request: SDKChatRequest): Promise<SDKChatResponse>;
 }
+/**
+ * Wraps an OpenAI client instance so its chat completions are automatically
+ * audited and secured by the Guardrail Middleware Gateway.
+ */
+export declare function wrapOpenAI(openaiClient: any, options: GuardrailOptions): any;
+/**
+ * Express Middleware to intercept, scan, and secure incoming chatbot routes.
+ */
+export declare function guardrailExpress(options: GuardrailOptions): (req: any, res: any, next: any) => Promise<any>;
+//# sourceMappingURL=Guardrail.d.ts.map

package/dist/Guardrail.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Guardrail.d.ts","sourceRoot":"","sources":["../src/Guardrail.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAE7D,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,QAAQ,GAAG,QAAQ,GAAG,QAAQ,GAAG,MAAM,GAAG,MAAM,CAAC;IAC5D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,qBAAa,SAAS;IACpB,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,KAAK,CAAS;IACtB,OAAO,CAAC,eAAe,CAAS;gBAEpB,OAAO,EAAE,gBAAgB;IAYrC;;OAEG;IACG,IAAI,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,eAAe,CAAC;CA+B9D;AAED;;;GAGG;AACH,wBAAgB,UAAU,CAAC,YAAY,EAAE,GAAG,EAAE,OAAO,EAAE,gBAAgB,OAkCtE;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,gBAAgB,IAG1C,KAAK,GAAG,EAAE,KAAK,GAAG,EAAE,MAAM,GAAG,kBA+B5C"}

package/dist/Guardrail.js

@@ -32,7 +32,8 @@ export class Guardrail {
                     provider: request.provider || this.provider,
                     model: request.model || this.model,
                     applicationName: request.applicationName || this.applicationName,
-                    metadata: request.metadata || {}
+                    metadata: request.metadata || {},
+                    groundingSource: request.groundingSource || 'kb'
                 })
             });
             if (!response.ok) {
@@ -47,3 +48,74 @@ export class Guardrail {
         }
     }
 }
+/**
+ * Wraps an OpenAI client instance so its chat completions are automatically
+ * audited and secured by the Guardrail Middleware Gateway.
+ */
+export function wrapOpenAI(openaiClient, options) {
+    const guardrail = new Guardrail(options);
+    if (openaiClient?.chat?.completions) {
+        const originalCreate = openaiClient.chat.completions.create.bind(openaiClient.chat.completions);
+        openaiClient.chat.completions.create = async function (params, requestOptions) {
+            const res = await guardrail.chat({
+                messages: params.messages,
+                model: params.model || options.model,
+                provider: 'openai',
+                applicationName: options.applicationName,
+                metadata: { originalParams: params }
+            });
+            return {
+                id: res.auditId,
+                object: 'chat.completion',
+                created: Math.floor(Date.now() / 1000),
+                model: params.model,
+                choices: [{
+                        index: 0,
+                        message: { role: 'assistant', content: res.text },
+                        finish_reason: res.decision === 'BLOCKED' ? 'content_filter' : 'stop'
+                    }],
+                usage: {
+                    prompt_tokens: res.metrics?.tokenUsage?.promptTokens || 0,
+                    completion_tokens: res.metrics?.tokenUsage?.completionTokens || 0,
+                    total_tokens: res.metrics?.tokenUsage?.totalTokens || 0
+                }
+            };
+        };
+    }
+    return openaiClient;
+}
+/**
+ * Express Middleware to intercept, scan, and secure incoming chatbot routes.
+ */
+export function guardrailExpress(options) {
+    const guardrail = new Guardrail(options);
+    return async (req, res, next) => {
+        try {
+            const messages = req.body.messages;
+            if (!messages || !Array.isArray(messages)) {
+                return next();
+            }
+            const auditRes = await guardrail.chat({
+                messages,
+                userId: req.body.userId || 'express_user',
+                sessionId: req.body.sessionId || 'express_session',
+                groundingSource: req.body.groundingSource || 'kb'
+            });
+            req.guardrail = auditRes;
+            if (auditRes.decision === 'BLOCKED') {
+                return res.status(400).json({
+                    error: 'Blocked by Guardrail Security Policy',
+                    explanation: auditRes.policyExplanation,
+                    fallbackText: auditRes.text,
+                    auditId: auditRes.auditId
+                });
+            }
+            next();
+        }
+        catch (err) {
+            console.error('[Guardrail Middleware] Audit scan failed:', err.message);
+            next();
+        }
+    };
+}
+//# sourceMappingURL=Guardrail.js.map

package/dist/Guardrail.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Guardrail.js","sourceRoot":"","sources":["../src/Guardrail.ts"],"names":[],"mappings":"AAUA,MAAM,OAAO,SAAS;IACZ,QAAQ,CAAS;IACjB,MAAM,CAAS;IACf,QAAQ,CAAS;IACjB,KAAK,CAAS;IACd,eAAe,CAAS;IAEhC,YAAY,OAAyB;QACnC,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,uBAAuB,CAAC;QAC5D,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,QAAQ,CAAC;QAC7C,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,aAAa,CAAC;QAC5C,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,iBAAiB,CAAC;QAEpE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;QACzF,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,IAAI,CAAC,OAAuB;QAChC,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,QAAQ,WAAW,EAAE;gBACxD,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,eAAe,EAAE,UAAU,IAAI,CAAC,MAAM,EAAE;iBACzC;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,QAAQ,EAAE,OAAO,CAAC,QAAQ;oBAC1B,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,UAAU;oBACpC,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,aAAa;oBAC7C,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ;oBAC3C,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK;oBAClC,eAAe,EAAE,OAAO,CAAC,eAAe,IAAI,IAAI,CAAC,eAAe;oBAChE,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,EAAE;oBAChC,eAAe,EAAE,OAAO,CAAC,eAAe,IAAI,IAAI;iBACjD,CAAC;aACH,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACxC,MAAM,IAAI,KAAK,CAAC,+BAA+B,QAAQ,CAAC,MAAM,MAAM,SAAS,EAAE,CAAC,CAAC;YACnF,CAAC;YAED,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAqB,CAAC;QAClD,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,OAAO,CAAC,KAAK,CAAC,sCAAsC,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;YACnE,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAC,YAAiB,EAAE,OAAyB;IACrE,MAAM,SAAS,GAAG,IAAI,SAAS,CAAC,OAAO,CAAC,CAAC;IAEzC,IAAI,YAAY,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;QACpC,MAAM,cAAc,GAAG,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAEhG,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,GAAG,KAAK,WAAU,MAAW,EAAE,cAAoB;YACrF,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC;gBAC/B,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK;gBACpC,QAAQ,EAAE,QAAQ;gBAClB,eAAe,EAAE,OAAO,CAAC,eAAe;gBACxC,QAAQ,EAAE,EAAE,cAAc,EAAE,MAAM,EAAE;aACrC,CAAC,CAAC;YAEH,OAAO;gBACL,EAAE,EAAE,GAAG,CAAC,OAAO;gBACf,MAAM,EAAE,iBAAiB;gBACzB,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;gBACtC,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,OAAO,EAAE,CAAC;wBACR,KAAK,EAAE,CAAC;wBACR,OAAO,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,CAAC,IAAI,EAAE;wBACjD,aAAa,EAAE,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,MAAM;qBACtE,CAAC;gBACF,KAAK,EAAE;oBACL,aAAa,EAAE,GAAG,CAAC,OAAO,EAAE,UAAU,EAAE,YAAY,IAAI,CAAC;oBACzD,iBAAiB,EAAE,GAAG,CAAC,OAAO,EAAE,UAAU,EAAE,gBAAgB,IAAI,CAAC;oBACjE,YAAY,EAAE,GAAG,CAAC,OAAO,EAAE,UAAU,EAAE,WAAW,IAAI,CAAC;iBACxD;aACF,CAAC;QACJ,CAAC,CAAC;IACJ,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAyB;IACxD,MAAM,SAAS,GAAG,IAAI,SAAS,CAAC,OAAO,CAAC,CAAC;IAEzC,OAAO,KAAK,EAAE,GAAQ,EAAE,GAAQ,EAAE,IAAS,EAAE,EAAE;QAC7C,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC;YACnC,IAAI,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC1C,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC;gBACpC,QAAQ;gBACR,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,cAAc;gBACzC,SAAS,EAAE,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,iBAAiB;gBAClD,eAAe,EAAE,GAAG,CAAC,IAAI,CAAC,eAAe,IAAI,IAAI;aAClD,CAAC,CAAC;YAEH,GAAG,CAAC,SAAS,GAAG,QAAQ,CAAC;YAEzB,IAAI,QAAQ,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;gBACpC,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBAC1B,KAAK,EAAE,sCAAsC;oBAC7C,WAAW,EAAE,QAAQ,CAAC,iBAAiB;oBACvC,YAAY,EAAE,QAAQ,CAAC,IAAI;oBAC3B,OAAO,EAAE,QAAQ,CAAC,OAAO;iBAC1B,CAAC,CAAC;YACL,CAAC;YAED,IAAI,EAAE,CAAC;QACT,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,OAAO,CAAC,KAAK,CAAC,2CAA2C,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;YACxE,IAAI,EAAE,CAAC;QACT,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/index.d.ts

@@ -1,2 +1,3 @@
 export * from './Guardrail.js';
 export * from './types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAC;AAC/B,cAAc,YAAY,CAAC"}

package/dist/index.js

@@ -1,2 +1,3 @@
 export * from './Guardrail.js';
 export * from './types.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAC;AAC/B,cAAc,YAAY,CAAC"}

package/dist/types.d.ts

@@ -85,3 +85,4 @@ export interface ProviderConfig {
     healthStatus: 'healthy' | 'unhealthy' | 'unknown';
     latency: number;
 }
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,OAAO;IACtB,IAAI,EAAE,MAAM,GAAG,WAAW,GAAG,QAAQ,CAAC;IACtC,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,OAAO,EAAE,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC/B,eAAe,CAAC,EAAE,IAAI,GAAG,KAAK,CAAC;CAChC;AAED,MAAM,WAAW,QAAQ;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,KAAK;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,WAAW,GAAG,qBAAqB,GAAG,aAAa,CAAC;IAC5D,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,UAAU,GAAG,SAAS,GAAG,SAAS,CAAC;IAC7C,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,UAAU;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,MAAM,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,OAAO;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,qBAAqB,EAAE,MAAM,CAAC;IAC9B,UAAU,EAAE,UAAU,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,UAAU,GAAG,SAAS,GAAG,SAAS,CAAC;IAC7C,kBAAkB,EAAE,MAAM,CAAC;IAC3B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,SAAS,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;IAClD,SAAS,EAAE,QAAQ,EAAE,CAAC;IACtB,MAAM,EAAE,KAAK,EAAE,CAAC;IAChB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,OAAO,EAAE,OAAO,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,KAAK,EAAE,CAAC;IACzB,sBAAsB,CAAC,EAAE,MAAM,CAAC;CACjC;AAED,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,UAAU,GAAG,SAAS,GAAG,QAAQ,CAAC;IAC1C,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;CAChC;AAED,MAAM,WAAW,cAAc;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,OAAO,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,SAAS,GAAG,WAAW,GAAG,SAAS,CAAC;IAClD,OAAO,EAAE,MAAM,CAAC;CACjB"}

package/dist/types.js

@@ -1 +1,2 @@
 export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":""}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "guardrail-plug-sdk",
-  "version": "1.0.1",
+  "version": "1.0.3",
   "description": "A plug-and-play AI Auditing & Hallucination Detection SDK. Intercepts LLM inputs/outputs, verifies factual grounding against your knowledge base, and blocks or flags unverified responses.",
   "type": "module",
   "main": "dist/index.js",
@@ -13,6 +13,7 @@
   },
   "files": [
     "dist",
+    "src",
     "README.md"
   ],
   "scripts": {

package/src/Guardrail.ts

@@ -0,0 +1,143 @@
+import { SDKChatRequest, SDKChatResponse } from './types.js';
+
+export interface GuardrailOptions {
+  endpoint?: string;
+  apiKey: string;
+  provider?: 'openai' | 'gemini' | 'ollama' | 'mock' | string;
+  model?: string;
+  applicationName?: string;
+}
+
+export class Guardrail {
+  private endpoint: string;
+  private apiKey: string;
+  private provider: string;
+  private model: string;
+  private applicationName: string;
+
+  constructor(options: GuardrailOptions) {
+    this.endpoint = options.endpoint || 'http://localhost:5050';
+    this.apiKey = options.apiKey;
+    this.provider = options.provider || 'openai';
+    this.model = options.model || 'gpt-4o-mini';
+    this.applicationName = options.applicationName || 'SDK Application';
+
+    if (!this.apiKey) {
+      throw new Error('[Guardrail SDK] Initialisation Error: API Key (apiKey) is required.');
+    }
+  }
+
+  /**
+   * Routes chat completions through the Guardrail Middleware Gateway
+   */
+  async chat(request: SDKChatRequest): Promise<SDKChatResponse> {
+    try {
+      const response = await fetch(`${this.endpoint}/api/chat`, {
+        method: 'POST',
+        headers: {
+          'Content-Type': 'application/json',
+          'Authorization': `Bearer ${this.apiKey}`
+        },
+        body: JSON.stringify({
+          messages: request.messages,
+          userId: request.userId || 'sdk_user',
+          sessionId: request.sessionId || 'sdk_session',
+          provider: request.provider || this.provider,
+          model: request.model || this.model,
+          applicationName: request.applicationName || this.applicationName,
+          metadata: request.metadata || {},
+          groundingSource: request.groundingSource || 'kb'
+        })
+      });
+
+      if (!response.ok) {
+        const errorText = await response.text();
+        throw new Error(`Guardrail Middleware Error [${response.status}]: ${errorText}`);
+      }
+
+      return await response.json() as SDKChatResponse;
+    } catch (err: any) {
+      console.error('[Guardrail SDK] Chat Request Failed:', err.message);
+      throw err;
+    }
+  }
+}
+
+/**
+ * Wraps an OpenAI client instance so its chat completions are automatically
+ * audited and secured by the Guardrail Middleware Gateway.
+ */
+export function wrapOpenAI(openaiClient: any, options: GuardrailOptions) {
+  const guardrail = new Guardrail(options);
+  
+  if (openaiClient?.chat?.completions) {
+    const originalCreate = openaiClient.chat.completions.create.bind(openaiClient.chat.completions);
+    
+    openaiClient.chat.completions.create = async function(params: any, requestOptions?: any) {
+      const res = await guardrail.chat({
+        messages: params.messages,
+        model: params.model || options.model,
+        provider: 'openai',
+        applicationName: options.applicationName,
+        metadata: { originalParams: params }
+      });
+
+      return {
+        id: res.auditId,
+        object: 'chat.completion',
+        created: Math.floor(Date.now() / 1000),
+        model: params.model,
+        choices: [{
+          index: 0,
+          message: { role: 'assistant', content: res.text },
+          finish_reason: res.decision === 'BLOCKED' ? 'content_filter' : 'stop'
+        }],
+        usage: {
+          prompt_tokens: res.metrics?.tokenUsage?.promptTokens || 0,
+          completion_tokens: res.metrics?.tokenUsage?.completionTokens || 0,
+          total_tokens: res.metrics?.tokenUsage?.totalTokens || 0
+        }
+      };
+    };
+  }
+  return openaiClient;
+}
+
+/**
+ * Express Middleware to intercept, scan, and secure incoming chatbot routes.
+ */
+export function guardrailExpress(options: GuardrailOptions) {
+  const guardrail = new Guardrail(options);
+  
+  return async (req: any, res: any, next: any) => {
+    try {
+      const messages = req.body.messages;
+      if (!messages || !Array.isArray(messages)) {
+        return next();
+      }
+      
+      const auditRes = await guardrail.chat({
+        messages,
+        userId: req.body.userId || 'express_user',
+        sessionId: req.body.sessionId || 'express_session',
+        groundingSource: req.body.groundingSource || 'kb'
+      });
+      
+      req.guardrail = auditRes;
+      
+      if (auditRes.decision === 'BLOCKED') {
+        return res.status(400).json({
+          error: 'Blocked by Guardrail Security Policy',
+          explanation: auditRes.policyExplanation,
+          fallbackText: auditRes.text,
+          auditId: auditRes.auditId
+        });
+      }
+      
+      next();
+    } catch (err: any) {
+      console.error('[Guardrail Middleware] Audit scan failed:', err.message);
+      next();
+    }
+  };
+}

package/src/index.ts

@@ -0,0 +1,2 @@
+export * from './Guardrail.js';
+export * from './types.js';

package/src/types.ts

@@ -0,0 +1,97 @@
+export interface Message {
+  role: 'user' | 'assistant' | 'system';
+  content: string;
+}
+
+export interface SDKChatRequest {
+  messages: Message[];
+  userId?: string;
+  sessionId?: string;
+  provider?: string;
+  model?: string;
+  applicationName?: string;
+  metadata?: Record<string, any>;
+  groundingSource?: 'kb' | 'web';
+}
+
+export interface Citation {
+  citationId: string;
+  documentId: string;
+  documentName: string;
+  content: string;
+  score: number;
+}
+
+export interface Claim {
+  claim: string;
+  status: 'SUPPORTED' | 'PARTIALLY_SUPPORTED' | 'UNSUPPORTED';
+  explanation: string;
+  citationId?: string;
+}
+
+export interface PolicyResult {
+  decision: 'APPROVED' | 'FLAGGED' | 'BLOCKED';
+  violatedRules: string[];
+  explanation: string;
+}
+
+export interface TokenUsage {
+  promptTokens: number;
+  completionTokens: number;
+  totalTokens: number;
+}
+
+export interface Metrics {
+  totalLatencyMs: number;
+  llmLatencyMs: number;
+  ragLatencyMs: number;
+  verificationLatencyMs: number;
+  tokenUsage: TokenUsage;
+  costUsd: number;
+}
+
+export interface SDKChatResponse {
+  auditId: string;
+  text: string;
+  decision: 'APPROVED' | 'FLAGGED' | 'BLOCKED';
+  hallucinationScore: number;
+  factualTrustScore: number; // 0.0 to 1.0 grounding metric
+  riskLevel: 'LOW' | 'MEDIUM' | 'HIGH' | 'CRITICAL';
+  citations: Citation[];
+  claims: Claim[];
+  policyExplanation: string;
+  metrics: Metrics;
+  rawThinking?: string;
+  thinkingClaims?: Claim[];
+  rawResponseBeforeBlock?: string;
+}
+
+export interface UploadedDocument {
+  id: string;
+  name: string;
+  type: string;
+  uploadedAt: string;
+  size: number;
+  status: 'indexing' | 'indexed' | 'failed';
+  version: number;
+  owner?: string;
+}
+
+export interface DocumentChunk {
+  id: string;
+  documentId: string;
+  documentName: string;
+  content: string;
+  embedding?: number[];
+  metadata?: Record<string, any>;
+}
+
+export interface ProviderConfig {
+  providerId: string;
+  name: string;
+  enabled: boolean;
+  defaultModel: string;
+  apiKey?: string;
+  healthStatus: 'healthy' | 'unhealthy' | 'unknown';
+  latency: number;
+}