veto-sdk 1.4.0 → 1.6.0

package/README.md

@@ -9,6 +9,7 @@ A guardrail system for AI agent tool calls. Veto intercepts and validates tool c
 3. **Pass** the wrapped tools to your AI agent/model.
 
 When the AI model calls a tool, Veto automatically:
+
 1. Intercepts the call.
 2. Validates arguments against your rules (via YAML & LLM).
 3. Blocks or Allows execution based on the result.
@@ -18,17 +19,21 @@ The AI model remains unaware of the guardrail - the tool interface is preserved.
 ## Installation
 
 ```bash
-npm install veto
+npm install veto-sdk
 ```
 
+For a complete bank transfer escalation example, see the [HITL guide](../../docs/hitl-guide.md).
+
 ## Quick Start
 
 ### 1. Initialize Veto
 
 Run the CLI to create configuration:
+
 ```bash
 npx veto init
 ```
+
 This creates a `veto/` directory with `veto.config.yaml` and default rules.
 
 ### 2. Wrap Your Tools
@@ -36,7 +41,7 @@ This creates a `veto/` directory with `veto.config.yaml` and default rules.
 Veto's `wrap()` method is provider-agnostic. It works with LangChain, Vercel AI SDK, or any custom tool object.
 
 ```typescript
-import { Veto } from 'veto';
+import { Veto } from 'veto-sdk';
 import { tool } from '@langchain/core/tools'; // Example with LangChain
 
 // 1. Define your tools normally
@@ -84,7 +89,7 @@ rules:
 version: "1.0"
 
 # Operating mode
-mode: "strict"  # "strict" blocks calls, "log" only logs them
+mode: "strict" # "strict" blocks calls, "log" only logs them
 
 # Validation Backend
 validation:
@@ -103,6 +108,16 @@ logging:
 rules:
   directory: "./rules"
   recursive: true
+
+# Local approval callback (for action: require_approval)
+# approval:
+#   callbackUrl: "http://localhost:8787/approvals"
+#   timeout: 30000
+#   timeoutBehavior: "block" # "block" (default) or "allow"
+#   includeCustomContext: false # opt-in: forward validation context.custom to webhook
+#   responseSchema:
+#     decisionField: "decision"
+#     reasonField: "reason"
 ```
 
 ## API Reference
@@ -150,12 +165,21 @@ Resets the history statistics.
 veto.clearHistory();
 ```
 
+### `veto.exportDecisions(format)`
+
+Exports decision history as JSON or CSV.
+
+```typescript
+const jsonAudit = veto.exportDecisions("json");
+const csvAudit = veto.exportDecisions("csv");
+```
+
 ## CLI Commands
 
-| Command | Description |
-|---------|-------------|
-| `npx veto init` | Initialize Veto in current directory |
-| `npx veto version` | Show version |
+| Command            | Description                          |
+| ------------------ | ------------------------------------ |
+| `npx veto init`    | Initialize Veto in current directory |
+| `npx veto version` | Show version                         |
 
 ## General Rule YAML Format
 
@@ -163,21 +187,21 @@ Each rule file (e.g., `veto/rules/policy.yaml`) can contain one or more rules.
 
 ```yaml
 rules:
-  - id: unique-rule-id           # [Required] Unique identifier for the rule
-    name: Human readable name    # [Required] Descriptive name for logging
-    enabled: true                # [Optional] Default: true
-    severity: high               # [Optional] critical, high, medium, low, info. Default: medium
-    action: block                # [Required] block, warn, log, allow.
-    
+  - id: unique-rule-id # [Required] Unique identifier for the rule
+    name: Human readable name # [Required] Descriptive name for logging
+    enabled: true # [Optional] Default: true
+    severity: high # [Optional] critical, high, medium, low, info. Default: medium
+    action: block # [Required] block, warn, log, allow, require_approval.
+
     # Scope: Which tools does this rule apply to?
-    tools:                       # [Optional] List of tool names.
-      - make_payment             # If omitted or empty, applies to ALL tools (Global Rule).
-      
+    tools: # [Optional] List of tool names.
+      - make_payment # If omitted or empty, applies to ALL tools (Global Rule).
+
     # Static Conditions (Optional):
     # Evaluated locally before LLM validation. Fast checks for specific values.
     conditions:
-      - field: arguments.amount  # Dot notation for nested arguments
-        operator: greater_than   # equals, contains, starts_with, ends_with, greater_than, less_than
+      - field: arguments.amount # Dot notation for nested arguments
+        operator: greater_than # equals, contains, starts_with, ends_with, greater_than, less_than
         value: 1000
 
     # description (Optional):
@@ -190,14 +214,18 @@ rules:
 Veto uses a two-step process to determine if a tool call is safe:
 
 ### 1. Rule Selection (Which rules apply?)
+
 Veto selects rules based on the `tools` list in your YAML:
-*   **Tool-Specific Rules**: If a rule lists specific tools (e.g., `tools: [make_payment]`), it ONLY applies when those tools are called.
-*   **Global Rules**: If `tools` is missing or empty `[]`, the rule activates for **EVERY** tool call. Use this for universal policies (e.g., "Do not reveal internal file paths").
+
+- **Tool-Specific Rules**: If a rule lists specific tools (e.g., `tools: [make_payment]`), it ONLY applies when those tools are called.
+- **Global Rules**: If `tools` is missing or empty `[]`, the rule activates for **EVERY** tool call. Use this for universal policies (e.g., "Do not reveal internal file paths").
 
 ### 2. Validation Execution
+
 For each intercepted tool call, Veto aggregates all applicable rules (Global + Specific) and validates them:
-*   **Static Conditions**: If `conditions` are defined, they are checked first by the Validation Engine. If a condition matches (e.g., `amount > 1000`), the rule triggers immediately.
-*   **Semantic Validation**: If no static conditions are matched (or none exist), the rule's `name` and `description` are passed to the LLM (via API, Kernel, or Custom provider) to semantically verify if the tool call violates the rule context.
+
+- **Static Conditions**: If `conditions` are defined, they are checked first by the Validation Engine. If a condition matches (e.g., `amount > 1000`), the rule triggers immediately.
+- **Semantic Validation**: If no static conditions are matched (or none exist), the rule's `name` and `description` are passed to the LLM (via API, Kernel, or Custom provider) to semantically verify if the tool call violates the rule context.
 
 ## License
 

package/dist/cli/bin.d.ts

@@ -1,8 +1,3 @@
 #!/usr/bin/env node
-/**
- * Veto CLI entry point.
- *
- * @module cli/bin
- */
 export {};
 //# sourceMappingURL=bin.d.ts.map

package/dist/cli/bin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"bin.d.ts","sourceRoot":"","sources":["../../src/cli/bin.ts"],"names":[],"mappings":";AAEA;;;;GAIG"}
+{"version":3,"file":"bin.d.ts","sourceRoot":"","sources":["../../src/cli/bin.ts"],"names":[],"mappings":""}

package/dist/cli/bin.js

@@ -1,14 +1,12 @@
 #!/usr/bin/env node
-/**
- * Veto CLI entry point.
- *
- * @module cli/bin
- */
 import { init } from './init.js';
+import { Observer, PolicyGenerator, parseDuration, policiesToYaml } from './learn.js';
+import { compile } from './compile.js';
+import { test } from './test.js';
+import { mkdirSync, writeFileSync } from 'node:fs';
+import { dirname, resolve } from 'node:path';
 const VERSION = '0.1.0';
-/**
- * Print help message.
- */
+const VALID_PROVIDERS = new Set(['openai', 'anthropic', 'gemini', 'openrouter']);
 function printHelp() {
     console.log(`
 Veto - AI Agent Tool Call Guardrail
@@ -18,35 +16,69 @@ Usage:
 
 Commands:
   init          Initialize Veto in the current directory
+  learn         Observe tool calls and generate policies
+  compile       Compile natural language policies to deterministic YAML rules
+  test          Run adversarial policy gap analysis
   version       Show version information
   help          Show this help message
 
 Options:
-  --force, -f   Force overwrite existing files (init)
-  --quiet, -q   Suppress output
-  --help, -h    Show help
+  --force, -f          Force overwrite existing files (init)
+  --quiet, -q          Suppress output
+  --help, -h           Show help
+
+Learn Options:
+  --runs <n>            Stop after n tool calls
+  --duration <time>     Stop after duration (e.g., 30s, 10m, 1h)
+  --output <path>       Output YAML file path (default: ./veto/rules/learned.yaml)
+  --margin <n>          Numeric range margin as decimal (default: 0.1)
+
+Compile Options:
+  --input <text>       Policy description as inline text
+  --file <path>        Path to a text file containing policy descriptions
+  --output <path>      Output file (.yaml) or directory for generated rules
+  --provider <name>    LLM provider: openai, anthropic, gemini, openrouter
+  --model <name>       Model identifier (e.g. gpt-4o, claude-sonnet-4-5-20250929)
+
+Test Options:
+  --policy <path>      Policy directory (default: ./veto/rules/)
+  --output <file>      Write JSON report to file
+  --format <fmt>       Output format: text or json (default: text)
 
 Examples:
-  veto init           Initialize Veto in current directory
-  veto init --force   Reinitialize, overwriting existing files
+  veto init                          Initialize Veto in current directory
+  veto init --force                  Reinitialize, overwriting existing files
+  veto learn --runs 10               Observe 10 tool calls then generate policies
+  veto learn --duration 30m          Observe for 30 minutes
+  veto compile --input 'Block emails outside company domain' --output ./veto/rules/email.yaml
+  veto compile --file policies.txt --output ./veto/rules/
+  veto test                          Analyze policies for gaps
+  veto test --policy ./rules         Analyze specific policy directory
+  veto test --output report.json     Save JSON report
 `);
 }
-/**
- * Print version.
- */
 function printVersion() {
     console.log(`veto v${VERSION}`);
 }
-/**
- * Parse command line arguments.
- */
 function parseArgs(args) {
     const flags = {};
+    const values = {};
     let command = '';
-    for (const arg of args) {
+    const valueFlags = new Set([
+        'runs', 'duration', 'output', 'margin',
+        'input', 'file', 'provider', 'model',
+        'policy', 'format',
+    ]);
+    for (let i = 0; i < args.length; i++) {
+        const arg = args[i];
         if (arg.startsWith('--')) {
             const flag = arg.slice(2);
-            flags[flag] = true;
+            if (valueFlags.has(flag) && i + 1 < args.length) {
+                values[flag] = args[++i];
+            }
+            else {
+                flags[flag] = true;
+            }
         }
         else if (arg.startsWith('-')) {
             const shortFlags = arg.slice(1).split('');
@@ -68,25 +100,111 @@ function parseArgs(args) {
             command = arg;
         }
     }
-    return { command, flags };
+    return { command, flags, values };
+}
+async function runLearn(flags, values) {
+    const quiet = flags['quiet'] ?? false;
+    const stopCondition = {};
+    if (values['runs']) {
+        const runs = parseInt(values['runs'], 10);
+        if (isNaN(runs) || runs <= 0) {
+            console.error('--runs must be a positive integer');
+            process.exit(1);
+        }
+        stopCondition.runs = runs;
+    }
+    if (values['duration']) {
+        stopCondition.durationMs = parseDuration(values['duration']);
+    }
+    if (!stopCondition.runs && !stopCondition.durationMs) {
+        console.error('veto learn requires --runs or --duration');
+        console.error('Example: veto learn --runs 10');
+        process.exit(1);
+    }
+    const margin = values['margin'] ? parseFloat(values['margin']) : 0.1;
+    if (values['margin'] && (isNaN(margin) || margin < 0 || margin > 1)) {
+        console.error('--margin must be a number between 0 and 1');
+        process.exit(1);
+    }
+    const outputPath = resolve(values['output'] ?? './veto/rules/learned.yaml');
+    const observer = new Observer(stopCondition);
+    observer.start();
+    if (!quiet) {
+        console.log('');
+        console.log('Veto Learn - Observing tool calls...');
+        if (stopCondition.runs)
+            console.log(`  Stop after: ${stopCondition.runs} calls`);
+        if (stopCondition.durationMs)
+            console.log(`  Stop after: ${values['duration']}`);
+        console.log(`  Output: ${outputPath}`);
+        console.log(`  Margin: ${margin}`);
+        console.log('');
+        console.log('Reading tool calls from stdin (one JSON object per line)...');
+        console.log('Format: {"tool": "tool_name", "args": {...}}');
+        console.log('');
+    }
+    const readline = await import('node:readline');
+    const rl = readline.createInterface({ input: process.stdin });
+    for await (const line of rl) {
+        if (observer.stopped)
+            break;
+        const trimmed = line.trim();
+        if (!trimmed)
+            continue;
+        try {
+            const parsed = JSON.parse(trimmed);
+            const toolName = parsed.tool ?? parsed.name;
+            const args = parsed.args ?? parsed.arguments ?? {};
+            if (!toolName || typeof toolName !== 'string') {
+                if (!quiet)
+                    console.error('  Skipping line: missing "tool" or "name" field');
+                continue;
+            }
+            observer.recordRaw(toolName, args);
+            if (!quiet)
+                console.log(`  [${observer.callCount}] ${toolName}(${JSON.stringify(args).slice(0, 60)})`);
+        }
+        catch {
+            if (!quiet)
+                console.error(`  Skipping invalid JSON: ${trimmed.slice(0, 50)}`);
+        }
+        if (observer.shouldStop())
+            break;
+    }
+    rl.close();
+    const observations = observer.getObservations();
+    const generator = new PolicyGenerator(margin);
+    const policies = generator.generate(observations);
+    if (policies.length === 0) {
+        if (!quiet)
+            console.log('No tool calls observed. No policies generated.');
+        process.exit(0);
+    }
+    const yaml = policiesToYaml(policies);
+    mkdirSync(dirname(outputPath), { recursive: true });
+    writeFileSync(outputPath, yaml, 'utf-8');
+    if (!quiet) {
+        console.log('');
+        console.log(`Generated ${policies.length} policies from ${observer.callCount} observations.`);
+        console.log(`Output: ${outputPath}`);
+        console.log('');
+        for (const p of policies) {
+            console.log(`  ${p.toolName}: ${p.constraints.length} constraints`);
+        }
+        console.log('');
+    }
 }
-/**
- * Main CLI entry point.
- */
 async function main() {
     const args = process.argv.slice(2);
-    const { command, flags } = parseArgs(args);
-    // Handle help flag
+    const { command, flags, values } = parseArgs(args);
     if (flags['help'] || command === 'help') {
         printHelp();
         process.exit(0);
     }
-    // Handle version flag or command
     if (flags['version'] || command === 'version') {
         printVersion();
         process.exit(0);
     }
-    // Handle commands
     switch (command) {
         case 'init': {
             const result = await init({
@@ -96,8 +214,42 @@ async function main() {
             process.exit(result.success ? 0 : 1);
             break;
         }
+        case 'learn': {
+            await runLearn(flags, values);
+            process.exit(0);
+            break;
+        }
+        case 'compile': {
+            if (!values['output']) {
+                console.error('Error: --output is required for compile command');
+                process.exit(1);
+            }
+            if (values['provider'] && !VALID_PROVIDERS.has(values['provider'])) {
+                console.error(`Error: Invalid provider "${values['provider']}". Must be one of: openai, anthropic, gemini, openrouter`);
+                process.exit(1);
+            }
+            const result = await compile({
+                input: values['input'],
+                file: values['file'],
+                output: values['output'],
+                provider: values['provider'],
+                model: values['model'],
+                quiet: flags['quiet'],
+            });
+            process.exit(result.success ? 0 : 1);
+            break;
+        }
+        case 'test': {
+            const testResult = await test({
+                policy: values['policy'],
+                output: values['output'],
+                quiet: flags['quiet'],
+                format: values['format'] ?? undefined,
+            });
+            process.exit(testResult.success ? 0 : 1);
+            break;
+        }
         case '': {
-            // No command provided
             console.log('Veto - AI Agent Tool Call Guardrail');
             console.log('');
             console.log('Run "veto help" for usage information.');
@@ -112,7 +264,6 @@ async function main() {
         }
     }
 }
-// Run the CLI
 main().catch((error) => {
     console.error('Error:', error.message);
     process.exit(1);

package/dist/cli/bin.js.map

@@ -1 +1 @@
-{"version":3,"file":"bin.js","sourceRoot":"","sources":["../../src/cli/bin.ts"],"names":[],"mappings":";AAEA;;;;GAIG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,MAAM,OAAO,GAAG,OAAO,CAAC;AAExB;;GAEG;AACH,SAAS,SAAS;IAChB,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;;;;;CAmBb,CAAC,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,YAAY;IACnB,OAAO,CAAC,GAAG,CAAC,SAAS,OAAO,EAAE,CAAC,CAAC;AAClC,CAAC;AAED;;GAEG;AACH,SAAS,SAAS,CAAC,IAAc;IAI/B,MAAM,KAAK,GAA4B,EAAE,CAAC;IAC1C,IAAI,OAAO,GAAG,EAAE,CAAC;IAEjB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC1B,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;QACrB,CAAC;aAAM,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/B,MAAM,UAAU,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC1C,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;gBAC3B,QAAQ,CAAC,EAAE,CAAC;oBACV,KAAK,GAAG;wBACN,KAAK,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC;wBACtB,MAAM;oBACR,KAAK,GAAG;wBACN,KAAK,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC;wBACtB,MAAM;oBACR,KAAK,GAAG;wBACN,KAAK,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;wBACrB,MAAM;gBACV,CAAC;YACH,CAAC;QACH,CAAC;aAAM,IAAI,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,GAAG,GAAG,CAAC;QAChB,CAAC;IACH,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAC5B,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,IAAI;IACjB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACnC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAE3C,mBAAmB;IACnB,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;QACxC,SAAS,EAAE,CAAC;QACZ,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,iCAAiC;IACjC,IAAI,KAAK,CAAC,SAAS,CAAC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC9C,YAAY,EAAE,CAAC;QACf,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,kBAAkB;IAClB,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC;gBACxB,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC;gBACrB,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC;aACtB,CAAC,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACrC,MAAM;QACR,CAAC;QAED,KAAK,EAAE,CAAC,CAAC,CAAC;YACR,sBAAsB;YACtB,OAAO,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC;YACnD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,wCAAwC,CAAC,CAAC;YACtD,OAAO,CAAC,GAAG,CAAC,qDAAqD,CAAC,CAAC;YACnE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAChB,MAAM;QACR,CAAC;QAED,OAAO,CAAC,CAAC,CAAC;YACR,OAAO,CAAC,KAAK,CAAC,oBAAoB,OAAO,EAAE,CAAC,CAAC;YAC7C,OAAO,CAAC,KAAK,CAAC,wCAAwC,CAAC,CAAC;YACxD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;AACH,CAAC;AAED,cAAc;AACd,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;IACrB,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IACvC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}
+{"version":3,"file":"bin.js","sourceRoot":"","sources":["../../src/cli/bin.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAEtF,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAE7C,MAAM,OAAO,GAAG,OAAO,CAAC;AAExB,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC;AAEjF,SAAS,SAAS;IAChB,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA+Cb,CAAC,CAAC;AACH,CAAC;AAED,SAAS,YAAY;IACnB,OAAO,CAAC,GAAG,CAAC,SAAS,OAAO,EAAE,CAAC,CAAC;AAClC,CAAC;AAQD,SAAS,SAAS,CAAC,IAAc;IAC/B,MAAM,KAAK,GAA4B,EAAE,CAAC;IAC1C,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,IAAI,OAAO,GAAG,EAAE,CAAC;IAEjB,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC;QACzB,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ;QACtC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO;QACpC,QAAQ,EAAE,QAAQ;KACnB,CAAC,CAAC;IAEH,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAEpB,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC1B,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;gBAChD,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;YAC3B,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;YACrB,CAAC;QACH,CAAC;aAAM,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/B,MAAM,UAAU,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC1C,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;gBAC3B,QAAQ,CAAC,EAAE,CAAC;oBACV,KAAK,GAAG;wBAAE,KAAK,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC;wBAAC,MAAM;oBACvC,KAAK,GAAG;wBAAE,KAAK,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC;wBAAC,MAAM;oBACvC,KAAK,GAAG;wBAAE,KAAK,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;wBAAC,MAAM;gBACxC,CAAC;YACH,CAAC;QACH,CAAC;aAAM,IAAI,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,GAAG,GAAG,CAAC;QAChB,CAAC;IACH,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;AACpC,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,KAA8B,EAAE,MAA8B;IACpF,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC;IAEtC,MAAM,aAAa,GAAkB,EAAE,CAAC;IAExC,IAAI,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QACnB,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;QAC1C,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,EAAE,CAAC;YAC7B,OAAO,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC;YACnD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,aAAa,CAAC,IAAI,GAAG,IAAI,CAAC;IAC5B,CAAC;IAED,IAAI,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;QACvB,aAAa,CAAC,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;IAC/D,CAAC;IAED,IAAI,CAAC,aAAa,CAAC,IAAI,IAAI,CAAC,aAAa,CAAC,UAAU,EAAE,CAAC;QACrD,OAAO,CAAC,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC1D,OAAO,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC;QAC/C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IACrE,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,IAAI,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC;QACpE,OAAO,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC3D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,2BAA2B,CAAC,CAAC;IAE5E,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAAC,aAAa,CAAC,CAAC;IAC7C,QAAQ,CAAC,KAAK,EAAE,CAAC;IAEjB,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC;QACpD,IAAI,aAAa,CAAC,IAAI;YAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,aAAa,CAAC,IAAI,QAAQ,CAAC,CAAC;QACjF,IAAI,aAAa,CAAC,UAAU;YAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QACjF,OAAO,CAAC,GAAG,CAAC,aAAa,UAAU,EAAE,CAAC,CAAC;QACvC,OAAO,CAAC,GAAG,CAAC,aAAa,MAAM,EAAE,CAAC,CAAC;QACnC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,6DAA6D,CAAC,CAAC;QAC3E,OAAO,CAAC,GAAG,CAAC,8CAA8C,CAAC,CAAC;QAC5D,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,CAAC;IAC/C,MAAM,EAAE,GAAG,QAAQ,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;IAE9D,IAAI,KAAK,EAAE,MAAM,IAAI,IAAI,EAAE,EAAE,CAAC;QAC5B,IAAI,QAAQ,CAAC,OAAO;YAAE,MAAM;QAE5B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,OAAO;YAAE,SAAS;QAEvB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAA0G,CAAC;YAC5I,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC;YAC5C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC;YAEnD,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBAC9C,IAAI,CAAC,KAAK;oBAAE,OAAO,CAAC,KAAK,CAAC,iDAAiD,CAAC,CAAC;gBAC7E,SAAS;YACX,CAAC;YAED,QAAQ,CAAC,SAAS,CAAC,QAAQ,EAAE,IAA+B,CAAC,CAAC;YAC9D,IAAI,CAAC,KAAK;gBAAE,OAAO,CAAC,GAAG,CAAC,MAAM,QAAQ,CAAC,SAAS,KAAK,QAAQ,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;QACzG,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,KAAK;gBAAE,OAAO,CAAC,KAAK,CAAC,4BAA4B,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;QAChF,CAAC;QAED,IAAI,QAAQ,CAAC,UAAU,EAAE;YAAE,MAAM;IACnC,CAAC;IAED,EAAE,CAAC,KAAK,EAAE,CAAC;IAEX,MAAM,YAAY,GAAG,QAAQ,CAAC,eAAe,EAAE,CAAC;IAChD,MAAM,SAAS,GAAG,IAAI,eAAe,CAAC,MAAM,CAAC,CAAC;IAC9C,MAAM,QAAQ,GAAG,SAAS,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;IAElD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,IAAI,CAAC,KAAK;YAAE,OAAO,CAAC,GAAG,CAAC,gDAAgD,CAAC,CAAC;QAC1E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,IAAI,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;IACtC,SAAS,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,aAAa,CAAC,UAAU,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IAEzC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,aAAa,QAAQ,CAAC,MAAM,kBAAkB,QAAQ,CAAC,SAAS,gBAAgB,CAAC,CAAC;QAC9F,OAAO,CAAC,GAAG,CAAC,WAAW,UAAU,EAAE,CAAC,CAAC;QACrC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;YACzB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,WAAW,CAAC,MAAM,cAAc,CAAC,CAAC;QACtE,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACnC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAEnD,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;QACxC,SAAS,EAAE,CAAC;QACZ,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,KAAK,CAAC,SAAS,CAAC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC9C,YAAY,EAAE,CAAC;QACf,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC;gBACxB,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC;gBACrB,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC;aACtB,CAAC,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACrC,MAAM;QACR,CAAC;QAED,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,MAAM,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YAC9B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAChB,MAAM;QACR,CAAC;QAED,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACtB,OAAO,CAAC,KAAK,CAAC,iDAAiD,CAAC,CAAC;gBACjE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YACD,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;gBACnE,OAAO,CAAC,KAAK,CAAC,4BAA4B,MAAM,CAAC,UAAU,CAAC,0DAA0D,CAAC,CAAC;gBACxH,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC;gBAC3B,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC;gBACtB,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC;gBACpB,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC;gBACxB,QAAQ,EAAE,MAAM,CAAC,UAAU,CAA+B;gBAC1D,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC;gBACtB,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC;aACtB,CAAC,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACrC,MAAM;QACR,CAAC;QAED,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC;gBAC5B,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC;gBACxB,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC;gBACxB,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC;gBACrB,MAAM,EAAG,MAAM,CAAC,QAAQ,CAAqB,IAAI,SAAS;aAC3D,CAAC,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACzC,MAAM;QACR,CAAC;QAED,KAAK,EAAE,CAAC,CAAC,CAAC;YACR,OAAO,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC;YACnD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,wCAAwC,CAAC,CAAC;YACtD,OAAO,CAAC,GAAG,CAAC,qDAAqD,CAAC,CAAC;YACnE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAChB,MAAM;QACR,CAAC;QAED,OAAO,CAAC,CAAC,CAAC;YACR,OAAO,CAAC,KAAK,CAAC,oBAAoB,OAAO,EAAE,CAAC,CAAC;YAC7C,OAAO,CAAC,KAAK,CAAC,wCAAwC,CAAC,CAAC;YACxD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;AACH,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;IACrB,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IACvC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/cli/compile.d.ts

@@ -0,0 +1,44 @@
+import type { CustomProvider } from '../custom/types.js';
+import { CustomError } from '../custom/types.js';
+export interface CompileOptions {
+    input?: string;
+    file?: string;
+    output: string;
+    provider?: CustomProvider;
+    model?: string;
+    quiet?: boolean;
+}
+export interface CompileResult {
+    success: boolean;
+    outputPath?: string;
+    yaml?: string;
+    messages: string[];
+}
+declare const COMPILE_SYSTEM_PROMPT = "You are a policy compiler for Veto, an AI agent tool-call guardrail system.\n\nYour task: convert a natural language policy description into deterministic YAML constraint rules.\n\nThe output MUST be a valid JSON object with two fields:\n- \"rules\": an array of rule objects (the compiled rules)\n- \"notes\": a string with any caveats or suggestions (empty string if none)\n\nEach rule object MUST have these fields:\n- \"id\": kebab-case unique identifier (e.g. \"block-external-emails\")\n- \"name\": short human-readable name\n- \"description\": what the rule does\n- \"enabled\": true\n- \"severity\": one of \"critical\", \"high\", \"medium\", \"low\", \"info\"\n- \"action\": one of \"block\", \"warn\", \"log\", \"allow\"\n- \"tools\": array of tool name strings this applies to (use general names like \"send_email\", \"transfer_funds\", \"read_file\", \"write_file\", \"execute_command\", etc.)\n- \"conditions\": array of condition objects, each with:\n  - \"field\": dot-notation path (e.g. \"arguments.to\", \"arguments.amount\")\n  - \"operator\": one of \"equals\", \"not_equals\", \"contains\", \"not_contains\", \"starts_with\", \"ends_with\", \"matches\", \"greater_than\", \"less_than\", \"in\", \"not_in\"\n  - \"value\": the value to compare against\n\nCommon patterns:\n- Domain restrictions: use \"matches\" operator with regex (e.g. \"^[^@]+@company\\.com$\")\n- Amount limits: use \"greater_than\" or \"less_than\" with numeric values\n- Field requirements: use \"equals\" with expected values\n- Enum allowlists: use \"in\" with an array of allowed values\n- Path restrictions: use \"starts_with\" or \"matches\" with path patterns\n\nIf the policy CANNOT be fully expressed as deterministic rules, include an explanation in the \"notes\" field describing what aspects require LLM-based evaluation.\n\nRespond with ONLY a JSON object. No markdown, no explanation outside the JSON.";
+declare function buildUserPrompt(policyText: string): string;
+export declare class CompileError extends CustomError {
+    constructor(message: string);
+}
+interface CompiledRule {
+    id: string;
+    name: string;
+    description?: string;
+    enabled: boolean;
+    severity: string;
+    action: string;
+    tools: string[];
+    conditions: Array<{
+        field: string;
+        operator: string;
+        value: unknown;
+    }>;
+}
+interface LLMOutput {
+    rules: CompiledRule[];
+    notes: string;
+}
+declare function parseAndValidateLLMOutput(raw: string): LLMOutput;
+declare function toYaml(output: LLMOutput, policyText: string): string;
+export declare function compile(options: CompileOptions): Promise<CompileResult>;
+export { COMPILE_SYSTEM_PROMPT, buildUserPrompt, parseAndValidateLLMOutput, toYaml };
+//# sourceMappingURL=compile.d.ts.map

package/dist/cli/compile.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"compile.d.ts","sourceRoot":"","sources":["../../src/cli/compile.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAGL,WAAW,EACZ,MAAM,oBAAoB,CAAC;AAE5B,MAAM,WAAW,cAAc;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,cAAc,CAAC;IAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AASD,QAAA,MAAM,qBAAqB,w3DA8BoD,CAAC;AAEhF,iBAAS,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAEnD;AA6CD,qBAAa,YAAa,SAAQ,WAAW;gBAC/B,OAAO,EAAE,MAAM;CAI5B;AAsED,UAAU,YAAY;IACpB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,UAAU,EAAE,KAAK,CAAC;QAChB,KAAK,EAAE,MAAM,CAAC;QACd,QAAQ,EAAE,MAAM,CAAC;QACjB,KAAK,EAAE,OAAO,CAAC;KAChB,CAAC,CAAC;CACJ;AAED,UAAU,SAAS;IACjB,KAAK,EAAE,YAAY,EAAE,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;CACf;AAcD,iBAAS,yBAAyB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,CAgEzD;AAED,iBAAS,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAQ7D;AAQD,wBAAsB,OAAO,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC,CAsG7E;AAED,OAAO,EAAE,qBAAqB,EAAE,eAAe,EAAE,yBAAyB,EAAE,MAAM,EAAE,CAAC"}