veto-sdk 2.2.0 → 2.3.0

package/dist/core/validator.js

@@ -13,9 +13,11 @@ export class ValidationEngine {
     validators = [];
     logger;
     defaultDecision;
+    otelTracer;
     constructor(options) {
         this.logger = options.logger;
         this.defaultDecision = options.defaultDecision;
+        this.otelTracer = options.otelTracer ?? null;
     }
     /**
      * Add a validator to the engine.
@@ -86,117 +88,137 @@ export class ValidationEngine {
      * @returns Aggregated validation result
      */
     async validate(context) {
+        const span = this.otelTracer?.startSpan('veto.validate') ?? null;
         const startTime = performance.now();
         const validatorResults = [];
-        // Get validators that apply to this tool
-        const applicableValidators = this.getApplicableValidators(context.toolName);
-        this.logger.debug('Starting validation', {
-            toolName: context.toolName,
-            callId: context.callId,
-            validatorCount: applicableValidators.length,
-        });
-        // If no validators, return default decision
-        if (applicableValidators.length === 0) {
-            const defaultResult = { decision: this.defaultDecision };
-            this.logger.debug('No applicable validators, using default decision', {
-                decision: this.defaultDecision,
+        try {
+            // Get validators that apply to this tool
+            const applicableValidators = this.getApplicableValidators(context.toolName);
+            this.logger.debug('Starting validation', {
+                toolName: context.toolName,
+                callId: context.callId,
+                validatorCount: applicableValidators.length,
             });
-            return {
-                finalResult: defaultResult,
-                validatorResults: [],
-                totalDurationMs: performance.now() - startTime,
-            };
-        }
-        let finalResult = { decision: 'allow' };
-        let currentContext = context;
-        // Run validators in sequence
-        for (const validator of applicableValidators) {
-            const validatorStart = performance.now();
-            try {
-                const result = await validator.validate(currentContext);
-                const durationMs = performance.now() - validatorStart;
-                validatorResults.push({
-                    validatorName: validator.name,
-                    result,
-                    durationMs,
-                });
-                this.logger.debug('Validator completed', {
-                    validatorName: validator.name,
-                    decision: result.decision,
-                    durationMs: Math.round(durationMs * 100) / 100,
+            // If no validators, return default decision
+            if (applicableValidators.length === 0) {
+                const defaultResult = { decision: this.defaultDecision };
+                this.logger.debug('No applicable validators, using default decision', {
+                    decision: this.defaultDecision,
                 });
-                // Handle different decisions
-                if (result.decision === 'deny') {
-                    // Stop on first denial
-                    finalResult = result;
-                    this.logger.info('Tool call denied by validator', {
-                        toolName: context.toolName,
-                        callId: context.callId,
-                        validator: validator.name,
-                        reason: result.reason,
+                const totalDurationMs = performance.now() - startTime;
+                span?.setAttribute('tool.name', context.toolName);
+                span?.setAttribute('veto.decision', defaultResult.decision);
+                span?.setAttribute('veto.duration_ms', totalDurationMs);
+                span?.end();
+                return {
+                    finalResult: defaultResult,
+                    validatorResults: [],
+                    totalDurationMs,
+                };
+            }
+            let finalResult = { decision: 'allow' };
+            let currentContext = context;
+            // Run validators in sequence
+            for (const validator of applicableValidators) {
+                const validatorStart = performance.now();
+                try {
+                    const result = await validator.validate(currentContext);
+                    const durationMs = performance.now() - validatorStart;
+                    validatorResults.push({
+                        validatorName: validator.name,
+                        result,
+                        durationMs,
                     });
-                    break;
+                    this.logger.debug('Validator completed', {
+                        validatorName: validator.name,
+                        decision: result.decision,
+                        durationMs: Math.round(durationMs * 100) / 100,
+                    });
+                    // Handle different decisions
+                    if (result.decision === 'deny') {
+                        // Stop on first denial
+                        finalResult = result;
+                        this.logger.info('Tool call denied by validator', {
+                            toolName: context.toolName,
+                            callId: context.callId,
+                            validator: validator.name,
+                            reason: result.reason,
+                        });
+                        break;
+                    }
+                    else if (result.decision === 'require_approval') {
+                        // Stop on approval requirement so callers can route to HITL flows.
+                        finalResult = result;
+                        this.logger.info('Tool call requires approval by validator', {
+                            toolName: context.toolName,
+                            callId: context.callId,
+                            validator: validator.name,
+                            reason: result.reason,
+                        });
+                        break;
+                    }
+                    else if (result.decision === 'modify' && result.modifiedArguments) {
+                        // Update context with modified arguments for next validator
+                        currentContext = {
+                            ...currentContext,
+                            arguments: result.modifiedArguments,
+                        };
+                        finalResult = result;
+                    }
+                    else if (result.decision === 'allow') {
+                        // Continue to next validator
+                        finalResult = result;
+                    }
                 }
-                else if (result.decision === 'require_approval') {
-                    // Stop on approval requirement so callers can route to HITL flows.
-                    finalResult = result;
-                    this.logger.info('Tool call requires approval by validator', {
+                catch (error) {
+                    const durationMs = performance.now() - validatorStart;
+                    const errorMessage = error instanceof Error ? error.message : String(error);
+                    this.logger.error('Validator threw an error', {
+                        validatorName: validator.name,
                         toolName: context.toolName,
                         callId: context.callId,
-                        validator: validator.name,
-                        reason: result.reason,
+                    }, error instanceof Error ? error : new Error(errorMessage));
+                    // Treat validator errors as denials for safety
+                    validatorResults.push({
+                        validatorName: validator.name,
+                        result: {
+                            decision: 'deny',
+                            reason: `Validator error: ${errorMessage}`,
+                        },
+                        durationMs,
                     });
-                    break;
-                }
-                else if (result.decision === 'modify' && result.modifiedArguments) {
-                    // Update context with modified arguments for next validator
-                    currentContext = {
-                        ...currentContext,
-                        arguments: result.modifiedArguments,
+                    finalResult = {
+                        decision: 'deny',
+                        reason: `Validator "${validator.name}" threw an error: ${errorMessage}`,
                     };
-                    finalResult = result;
-                }
-                else if (result.decision === 'allow') {
-                    // Continue to next validator
-                    finalResult = result;
+                    break;
                 }
             }
-            catch (error) {
-                const durationMs = performance.now() - validatorStart;
-                const errorMessage = error instanceof Error ? error.message : String(error);
-                this.logger.error('Validator threw an error', {
-                    validatorName: validator.name,
-                    toolName: context.toolName,
-                    callId: context.callId,
-                }, error instanceof Error ? error : new Error(errorMessage));
-                // Treat validator errors as denials for safety
-                validatorResults.push({
-                    validatorName: validator.name,
-                    result: {
-                        decision: 'deny',
-                        reason: `Validator error: ${errorMessage}`,
-                    },
-                    durationMs,
-                });
-                finalResult = {
-                    decision: 'deny',
-                    reason: `Validator "${validator.name}" threw an error: ${errorMessage}`,
-                };
-                break;
+            const totalDurationMs = performance.now() - startTime;
+            this.logger.debug('Validation complete', {
+                toolName: context.toolName,
+                callId: context.callId,
+                finalDecision: finalResult.decision,
+                totalDurationMs: Math.round(totalDurationMs * 100) / 100,
+            });
+            span?.setAttribute('tool.name', context.toolName);
+            span?.setAttribute('veto.decision', finalResult.decision);
+            if (finalResult.metadata?.ruleId !== undefined) {
+                span?.setAttribute('veto.rule_id', String(finalResult.metadata.ruleId));
             }
+            span?.setAttribute('veto.duration_ms', totalDurationMs);
+            span?.end();
+            return {
+                finalResult,
+                validatorResults,
+                totalDurationMs,
+            };
+        }
+        catch (err) {
+            span?.setStatus({ code: 2 }); // SpanStatusCode.ERROR
+            span?.end();
+            throw err;
         }
-        const totalDurationMs = performance.now() - startTime;
-        this.logger.debug('Validation complete', {
-            toolName: context.toolName,
-            callId: context.callId,
-            finalDecision: finalResult.decision,
-            totalDurationMs: Math.round(totalDurationMs * 100) / 100,
-        });
-        return {
-            finalResult,
-            validatorResults,
-            totalDurationMs,
-        };
     }
     /**
      * Sort validators by priority (lower runs first).

package/dist/core/validator.js.map

@@ -1 +1 @@
-{"version":3,"file":"validator.js","sourceRoot":"","sources":["../../src/core/validator.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAQH,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AA6BxD;;GAEG;AACH,MAAM,OAAO,gBAAgB;IACV,UAAU,GAAqB,EAAE,CAAC;IAClC,MAAM,CAAS;IACf,eAAe,CAA8B;IAE9D,YAAY,OAAgC;QAC1C,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC;IACjD,CAAC;IAED;;;;OAIG;IACH,YAAY,CAAC,SAAqC;QAChD,MAAM,UAAU,GAAG,kBAAkB,CAAC,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QACzE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACjC,IAAI,CAAC,cAAc,EAAE,CAAC;QACtB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,EAAE;YACnC,IAAI,EAAE,UAAU,CAAC,IAAI;YACrB,QAAQ,EAAE,UAAU,CAAC,QAAQ;YAC7B,eAAe,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM;SACxC,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,aAAa,CAAC,UAA6C;QACzD,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,MAAM,UAAU,GAAG,kBAAkB,CAAC,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YACzE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACnC,CAAC;QACD,IAAI,CAAC,cAAc,EAAE,CAAC;QACtB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,EAAE;YACpC,KAAK,EAAE,UAAU,CAAC,MAAM;YACxB,eAAe,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM;SACxC,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACH,eAAe,CAAC,IAAY;QAC1B,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QAChE,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;YACjB,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YACjC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,mBAAmB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YACjD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACH,eAAe;QACb,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC;QAC3B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC9C,CAAC;IAED;;OAEG;IACH,aAAa;QACX,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,QAAQ,CAAC,OAA0B;QACvC,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QACpC,MAAM,gBAAgB,GAAmD,EAAE,CAAC;QAE5E,yCAAyC;QACzC,MAAM,oBAAoB,GAAG,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAE5E,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,EAAE;YACvC,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,cAAc,EAAE,oBAAoB,CAAC,MAAM;SAC5C,CAAC,CAAC;QAEH,4CAA4C;QAC5C,IAAI,oBAAoB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtC,MAAM,aAAa,GAAqB,EAAE,QAAQ,EAAE,IAAI,CAAC,eAAe,EAAE,CAAC;YAC3E,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,kDAAkD,EAAE;gBACpE,QAAQ,EAAE,IAAI,CAAC,eAAe;aAC/B,CAAC,CAAC;YACH,OAAO;gBACL,WAAW,EAAE,aAAa;gBAC1B,gBAAgB,EAAE,EAAE;gBACpB,eAAe,EAAE,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS;aAC/C,CAAC;QACJ,CAAC;QAED,IAAI,WAAW,GAAqB,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;QAC1D,IAAI,cAAc,GAAG,OAAO,CAAC;QAE7B,6BAA6B;QAC7B,KAAK,MAAM,SAAS,IAAI,oBAAoB,EAAE,CAAC;YAC7C,MAAM,cAAc,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;YAEzC,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;gBACxD,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,cAAc,CAAC;gBAEtD,gBAAgB,CAAC,IAAI,CAAC;oBACpB,aAAa,EAAE,SAAS,CAAC,IAAI;oBAC7B,MAAM;oBACN,UAAU;iBACX,CAAC,CAAC;gBAEH,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,EAAE;oBACvC,aAAa,EAAE,SAAS,CAAC,IAAI;oBAC7B,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,GAAG,GAAG,CAAC,GAAG,GAAG;iBAC/C,CAAC,CAAC;gBAEH,6BAA6B;gBAC7B,IAAI,MAAM,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;oBAC/B,uBAAuB;oBACvB,WAAW,GAAG,MAAM,CAAC;oBACrB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,+BAA+B,EAAE;wBAChD,QAAQ,EAAE,OAAO,CAAC,QAAQ;wBAC1B,MAAM,EAAE,OAAO,CAAC,MAAM;wBACtB,SAAS,EAAE,SAAS,CAAC,IAAI;wBACzB,MAAM,EAAE,MAAM,CAAC,MAAM;qBACtB,CAAC,CAAC;oBACH,MAAM;gBACR,CAAC;qBAAM,IAAI,MAAM,CAAC,QAAQ,KAAK,kBAAkB,EAAE,CAAC;oBAClD,mEAAmE;oBACnE,WAAW,GAAG,MAAM,CAAC;oBACrB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,0CAA0C,EAAE;wBAC3D,QAAQ,EAAE,OAAO,CAAC,QAAQ;wBAC1B,MAAM,EAAE,OAAO,CAAC,MAAM;wBACtB,SAAS,EAAE,SAAS,CAAC,IAAI;wBACzB,MAAM,EAAE,MAAM,CAAC,MAAM;qBACtB,CAAC,CAAC;oBACH,MAAM;gBACR,CAAC;qBAAM,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,iBAAiB,EAAE,CAAC;oBACpE,4DAA4D;oBAC5D,cAAc,GAAG;wBACf,GAAG,cAAc;wBACjB,SAAS,EAAE,MAAM,CAAC,iBAAiB;qBACpC,CAAC;oBACF,WAAW,GAAG,MAAM,CAAC;gBACvB,CAAC;qBAAM,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;oBACvC,6BAA6B;oBAC7B,WAAW,GAAG,MAAM,CAAC;gBACvB,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,cAAc,CAAC;gBACtD,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAE5E,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,0BAA0B,EAC1B;oBACE,aAAa,EAAE,SAAS,CAAC,IAAI;oBAC7B,QAAQ,EAAE,OAAO,CAAC,QAAQ;oBAC1B,MAAM,EAAE,OAAO,CAAC,MAAM;iBACvB,EACD,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,YAAY,CAAC,CACzD,CAAC;gBAEF,+CAA+C;gBAC/C,gBAAgB,CAAC,IAAI,CAAC;oBACpB,aAAa,EAAE,SAAS,CAAC,IAAI;oBAC7B,MAAM,EAAE;wBACN,QAAQ,EAAE,MAAM;wBAChB,MAAM,EAAE,oBAAoB,YAAY,EAAE;qBAC3C;oBACD,UAAU;iBACX,CAAC,CAAC;gBAEH,WAAW,GAAG;oBACZ,QAAQ,EAAE,MAAM;oBAChB,MAAM,EAAE,cAAc,SAAS,CAAC,IAAI,qBAAqB,YAAY,EAAE;iBACxE,CAAC;gBACF,MAAM;YACR,CAAC;QACH,CAAC;QAED,MAAM,eAAe,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QAEtD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,EAAE;YACvC,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,aAAa,EAAE,WAAW,CAAC,QAAQ;YACnC,eAAe,EAAE,IAAI,CAAC,KAAK,CAAC,eAAe,GAAG,GAAG,CAAC,GAAG,GAAG;SACzD,CAAC,CAAC;QAEH,OAAO;YACL,WAAW;YACX,gBAAgB;YAChB,eAAe;SAChB,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,cAAc;QACpB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,IAAI,GAAG,CAAC,CAAC,CAAC;IAC5E,CAAC;IAED;;OAEG;IACK,uBAAuB,CAAC,QAAgB;QAC9C,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE;YAC1C,yDAAyD;YACzD,IAAI,CAAC,SAAS,CAAC,UAAU,IAAI,SAAS,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC/D,OAAO,IAAI,CAAC;YACd,CAAC;YACD,2CAA2C;YAC3C,OAAO,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACjD,CAAC,CAAC,CAAC;IACL,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,UAAU,0BAA0B;IACxC,OAAO;QACL,IAAI,EAAE,aAAa;QACnB,WAAW,EAAE,0CAA0C;QACvD,QAAQ,EAAE,IAAI,EAAE,WAAW;QAC3B,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;KACxC,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CACtC,SAAmB,EACnB,MAAM,GAAG,iBAAiB;IAE1B,OAAO;QACL,IAAI,EAAE,WAAW;QACjB,WAAW,EAAE,iBAAiB,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;QACpD,QAAQ,EAAE,CAAC,EAAE,YAAY;QACzB,UAAU,EAAE,SAAS;QACrB,QAAQ,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YACtB,QAAQ,EAAE,MAAM;YAChB,MAAM,EAAE,GAAG,MAAM,KAAK,OAAO,CAAC,QAAQ,EAAE;SACzC,CAAC;KACH,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CACtC,SAAmB,EACnB,MAAM,GAAG,0BAA0B;IAEnC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;IACnC,OAAO;QACL,IAAI,EAAE,WAAW;QACjB,WAAW,EAAE,sBAAsB,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;QACzD,QAAQ,EAAE,CAAC,EAAE,YAAY;QACzB,QAAQ,EAAE,CAAC,OAAO,EAAE,EAAE;YACpB,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAClC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;YAC/B,CAAC;YACD,OAAO;gBACL,QAAQ,EAAE,MAAM;gBAChB,MAAM,EAAE,GAAG,MAAM,KAAK,OAAO,CAAC,QAAQ,EAAE;aACzC,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"validator.js","sourceRoot":"","sources":["../../src/core/validator.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAQH,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAgCxD;;GAEG;AACH,MAAM,OAAO,gBAAgB;IACV,UAAU,GAAqB,EAAE,CAAC;IAClC,MAAM,CAAS;IACf,eAAe,CAA8B;IAC7C,UAAU,CAAoB;IAE/C,YAAY,OAAgC;QAC1C,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC;QAC/C,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,IAAI,CAAC;IAC/C,CAAC;IAED;;;;OAIG;IACH,YAAY,CAAC,SAAqC;QAChD,MAAM,UAAU,GAAG,kBAAkB,CAAC,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QACzE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACjC,IAAI,CAAC,cAAc,EAAE,CAAC;QACtB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,EAAE;YACnC,IAAI,EAAE,UAAU,CAAC,IAAI;YACrB,QAAQ,EAAE,UAAU,CAAC,QAAQ;YAC7B,eAAe,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM;SACxC,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,aAAa,CAAC,UAA6C;QACzD,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,MAAM,UAAU,GAAG,kBAAkB,CAAC,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YACzE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACnC,CAAC;QACD,IAAI,CAAC,cAAc,EAAE,CAAC;QACtB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,EAAE;YACpC,KAAK,EAAE,UAAU,CAAC,MAAM;YACxB,eAAe,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM;SACxC,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACH,eAAe,CAAC,IAAY;QAC1B,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QAChE,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;YACjB,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YACjC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,mBAAmB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YACjD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACH,eAAe;QACb,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC;QAC3B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC9C,CAAC;IAED;;OAEG;IACH,aAAa;QACX,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,QAAQ,CAAC,OAA0B;QACvC,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,eAAe,CAAC,IAAI,IAAI,CAAC;QACjE,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QACpC,MAAM,gBAAgB,GAAmD,EAAE,CAAC;QAE5E,IAAI,CAAC;YACH,yCAAyC;YACzC,MAAM,oBAAoB,GAAG,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YAE5E,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,EAAE;gBACvC,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,cAAc,EAAE,oBAAoB,CAAC,MAAM;aAC5C,CAAC,CAAC;YAEH,4CAA4C;YAC5C,IAAI,oBAAoB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACtC,MAAM,aAAa,GAAqB,EAAE,QAAQ,EAAE,IAAI,CAAC,eAAe,EAAE,CAAC;gBAC3E,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,kDAAkD,EAAE;oBACpE,QAAQ,EAAE,IAAI,CAAC,eAAe;iBAC/B,CAAC,CAAC;gBACH,MAAM,eAAe,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;gBACtD,IAAI,EAAE,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;gBAClD,IAAI,EAAE,YAAY,CAAC,eAAe,EAAE,aAAa,CAAC,QAAQ,CAAC,CAAC;gBAC5D,IAAI,EAAE,YAAY,CAAC,kBAAkB,EAAE,eAAe,CAAC,CAAC;gBACxD,IAAI,EAAE,GAAG,EAAE,CAAC;gBACZ,OAAO;oBACL,WAAW,EAAE,aAAa;oBAC1B,gBAAgB,EAAE,EAAE;oBACpB,eAAe;iBAChB,CAAC;YACJ,CAAC;YAED,IAAI,WAAW,GAAqB,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;YAC1D,IAAI,cAAc,GAAG,OAAO,CAAC;YAE7B,6BAA6B;YAC7B,KAAK,MAAM,SAAS,IAAI,oBAAoB,EAAE,CAAC;gBAC7C,MAAM,cAAc,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;gBAEzC,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;oBACxD,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,cAAc,CAAC;oBAEtD,gBAAgB,CAAC,IAAI,CAAC;wBACpB,aAAa,EAAE,SAAS,CAAC,IAAI;wBAC7B,MAAM;wBACN,UAAU;qBACX,CAAC,CAAC;oBAEH,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,EAAE;wBACvC,aAAa,EAAE,SAAS,CAAC,IAAI;wBAC7B,QAAQ,EAAE,MAAM,CAAC,QAAQ;wBACzB,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,GAAG,GAAG,CAAC,GAAG,GAAG;qBAC/C,CAAC,CAAC;oBAEH,6BAA6B;oBAC7B,IAAI,MAAM,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;wBAC/B,uBAAuB;wBACvB,WAAW,GAAG,MAAM,CAAC;wBACrB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,+BAA+B,EAAE;4BAChD,QAAQ,EAAE,OAAO,CAAC,QAAQ;4BAC1B,MAAM,EAAE,OAAO,CAAC,MAAM;4BACtB,SAAS,EAAE,SAAS,CAAC,IAAI;4BACzB,MAAM,EAAE,MAAM,CAAC,MAAM;yBACtB,CAAC,CAAC;wBACH,MAAM;oBACR,CAAC;yBAAM,IAAI,MAAM,CAAC,QAAQ,KAAK,kBAAkB,EAAE,CAAC;wBAClD,mEAAmE;wBACnE,WAAW,GAAG,MAAM,CAAC;wBACrB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,0CAA0C,EAAE;4BAC3D,QAAQ,EAAE,OAAO,CAAC,QAAQ;4BAC1B,MAAM,EAAE,OAAO,CAAC,MAAM;4BACtB,SAAS,EAAE,SAAS,CAAC,IAAI;4BACzB,MAAM,EAAE,MAAM,CAAC,MAAM;yBACtB,CAAC,CAAC;wBACH,MAAM;oBACR,CAAC;yBAAM,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,iBAAiB,EAAE,CAAC;wBACpE,4DAA4D;wBAC5D,cAAc,GAAG;4BACf,GAAG,cAAc;4BACjB,SAAS,EAAE,MAAM,CAAC,iBAAiB;yBACpC,CAAC;wBACF,WAAW,GAAG,MAAM,CAAC;oBACvB,CAAC;yBAAM,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;wBACvC,6BAA6B;wBAC7B,WAAW,GAAG,MAAM,CAAC;oBACvB,CAAC;gBACH,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,cAAc,CAAC;oBACtD,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;oBAE5E,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,0BAA0B,EAC1B;wBACE,aAAa,EAAE,SAAS,CAAC,IAAI;wBAC7B,QAAQ,EAAE,OAAO,CAAC,QAAQ;wBAC1B,MAAM,EAAE,OAAO,CAAC,MAAM;qBACvB,EACD,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,YAAY,CAAC,CACzD,CAAC;oBAEF,+CAA+C;oBAC/C,gBAAgB,CAAC,IAAI,CAAC;wBACpB,aAAa,EAAE,SAAS,CAAC,IAAI;wBAC7B,MAAM,EAAE;4BACN,QAAQ,EAAE,MAAM;4BAChB,MAAM,EAAE,oBAAoB,YAAY,EAAE;yBAC3C;wBACD,UAAU;qBACX,CAAC,CAAC;oBAEH,WAAW,GAAG;wBACZ,QAAQ,EAAE,MAAM;wBAChB,MAAM,EAAE,cAAc,SAAS,CAAC,IAAI,qBAAqB,YAAY,EAAE;qBACxE,CAAC;oBACF,MAAM;gBACR,CAAC;YACH,CAAC;YAED,MAAM,eAAe,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YAEtD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,EAAE;gBACvC,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,aAAa,EAAE,WAAW,CAAC,QAAQ;gBACnC,eAAe,EAAE,IAAI,CAAC,KAAK,CAAC,eAAe,GAAG,GAAG,CAAC,GAAG,GAAG;aACzD,CAAC,CAAC;YAEH,IAAI,EAAE,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;YAClD,IAAI,EAAE,YAAY,CAAC,eAAe,EAAE,WAAW,CAAC,QAAQ,CAAC,CAAC;YAC1D,IAAI,WAAW,CAAC,QAAQ,EAAE,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC/C,IAAI,EAAE,YAAY,CAAC,cAAc,EAAE,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;YAC1E,CAAC;YACD,IAAI,EAAE,YAAY,CAAC,kBAAkB,EAAE,eAAe,CAAC,CAAC;YACxD,IAAI,EAAE,GAAG,EAAE,CAAC;YAEZ,OAAO;gBACL,WAAW;gBACX,gBAAgB;gBAChB,eAAe;aAChB,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,EAAE,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,uBAAuB;YACrD,IAAI,EAAE,GAAG,EAAE,CAAC;YACZ,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED;;OAEG;IACK,cAAc;QACpB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,IAAI,GAAG,CAAC,CAAC,CAAC;IAC5E,CAAC;IAED;;OAEG;IACK,uBAAuB,CAAC,QAAgB;QAC9C,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE;YAC1C,yDAAyD;YACzD,IAAI,CAAC,SAAS,CAAC,UAAU,IAAI,SAAS,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC/D,OAAO,IAAI,CAAC;YACd,CAAC;YACD,2CAA2C;YAC3C,OAAO,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACjD,CAAC,CAAC,CAAC;IACL,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,UAAU,0BAA0B;IACxC,OAAO;QACL,IAAI,EAAE,aAAa;QACnB,WAAW,EAAE,0CAA0C;QACvD,QAAQ,EAAE,IAAI,EAAE,WAAW;QAC3B,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;KACxC,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CACtC,SAAmB,EACnB,MAAM,GAAG,iBAAiB;IAE1B,OAAO;QACL,IAAI,EAAE,WAAW;QACjB,WAAW,EAAE,iBAAiB,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;QACpD,QAAQ,EAAE,CAAC,EAAE,YAAY;QACzB,UAAU,EAAE,SAAS;QACrB,QAAQ,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YACtB,QAAQ,EAAE,MAAM;YAChB,MAAM,EAAE,GAAG,MAAM,KAAK,OAAO,CAAC,QAAQ,EAAE;SACzC,CAAC;KACH,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CACtC,SAAmB,EACnB,MAAM,GAAG,0BAA0B;IAEnC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;IACnC,OAAO;QACL,IAAI,EAAE,WAAW;QACjB,WAAW,EAAE,sBAAsB,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;QACzD,QAAQ,EAAE,CAAC,EAAE,YAAY;QACzB,QAAQ,EAAE,CAAC,OAAO,EAAE,EAAE;YACpB,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAClC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;YAC/B,CAAC;YACD,OAAO;gBACL,QAAQ,EAAE,MAAM;gBAChB,MAAM,EAAE,GAAG,MAAM,KAAK,OAAO,CAAC,QAAQ,EAAE;aACzC,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/core/veto.d.ts

@@ -20,6 +20,7 @@ import { VetoCloudClient } from '../cloud/client.js';
 import { type OutputValidationResult } from './output-validator.js';
 import type { VetoBrowserOptions as SharedVetoBrowserOptions, VetoFromCloudOptions as SharedVetoFromCloudOptions } from '../browser/types.js';
 import { type VetoWebhookEventType } from './events.js';
+import { type VetoTracer } from '../observability/otel.js';
 /**
  * Veto operating mode.
  * - "strict": Block tool calls when validation fails
@@ -153,6 +154,13 @@ interface VetoConfigFile {
     };
     /** Economic authorization policy (x402, MPP, AP2 support) */
     economic?: EconomicPolicyConfig;
+    /** Tamper-evident append-only audit log configuration */
+    audit?: {
+        /** Enable the audit log. Defaults to false. */
+        enabled?: boolean;
+        /** Path for the audit log file. Defaults to .veto/audit.log */
+        path?: string;
+    };
 }
 /**
  * Options for creating a Veto instance.
@@ -231,6 +239,29 @@ export interface VetoOptions {
     onDecisionMade?: (result: GuardResult & {
         toolName: string;
     }) => void;
+    /**
+     * OpenTelemetry integration options.
+     * Requires @opentelemetry/api as an optional peer dependency.
+     * When @opentelemetry/api is not installed, all spans are no-ops.
+     */
+    telemetry?: {
+        /** Set to false to disable OTEL instrumentation entirely. Defaults to true (auto-detect). */
+        enabled?: boolean;
+        /** Service name reported to the tracer. Defaults to 'veto-sdk'. */
+        serviceName?: string;
+    };
+    /**
+     * Tamper-evident append-only audit log. Each decision is hashed and chained.
+     * Verify with `veto audit verify`.
+     */
+    audit?: {
+        /** Enable the audit log. Defaults to false. */
+        enabled?: boolean;
+        /** Path for the audit log file. Defaults to .veto/audit.log */
+        path?: string;
+    };
+    /** @internal Pre-resolved tracer injected by init() after async OTEL load. */
+    _otelTracer?: VetoTracer | null;
 }
 export type VetoBrowserOptions = SharedVetoBrowserOptions<VetoCloudClient> & {
     budget?: VetoConfigFile['budget'];
@@ -304,6 +335,7 @@ export declare class Veto {
     private readonly browserMode;
     private readonly compiledExpressionCache;
     private refreshIntervalId;
+    private otelTracer;
     private constructor();
     /**
      * Initialize Veto by loading configuration and rules.
@@ -504,7 +536,7 @@ export declare class Veto {
      * const wrappedTools = veto.wrap(tools);
      *
      * const agent = createAgent({
-     *   model: 'openai:gpt-4o',
+     *   model: 'openai:gpt-5.4',
      *   tools: wrappedTools, // Same type as input!
      * });
      * ```
@@ -623,6 +655,8 @@ export declare class Veto {
      */
     resetEconomicBudget(scope?: BudgetScope): void;
     dispose(): void;
+    /** Await pending async audit log writes. Call before reading the log in tests or on shutdown. */
+    flushAuditLog(): Promise<void>;
 }
 export { ToolCallDeniedError };
 export { BudgetExceededError };

package/dist/core/veto.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"veto.d.ts","sourceRoot":"","sources":["../../src/core/veto.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EACV,cAAc,EACd,QAAQ,EACT,MAAM,kBAAkB,CAAC;AAC1B,OAAO,KAAK,EACV,oBAAoB,EACpB,SAAS,EACT,cAAc,EACd,iBAAiB,EAEjB,QAAQ,EACR,aAAa,EAEd,MAAM,oBAAoB,CAAC;AAO5B,OAAO,EAAkB,KAAK,YAAY,EAAE,MAAM,cAAc,CAAC;AACjE,OAAO,EAAiB,mBAAmB,EAAE,KAAK,YAAY,EAAE,MAAM,aAAa,CAAC;AACpF,OAAO,EAAe,mBAAmB,EAAE,KAAK,kBAAkB,EAAsB,MAAM,kBAAkB,CAAC;AACjH,OAAO,KAAK,EAAE,eAAe,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,WAAW,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAG5I,OAAO,KAAK,EAAE,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACrF,OAAO,KAAK,EAEV,YAAY,EAMb,MAAM,mBAAmB,CAAC;AAK3B,OAAO,KAAK,EAAE,YAAY,IAAI,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAG5E,OAAO,KAAK,EAAwC,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AACrG,OAAO,EAAE,eAAe,EAAwB,MAAM,oBAAoB,CAAC;AAI3E,OAAO,EAAmB,KAAK,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AACrF,OAAO,KAAK,EACV,kBAAkB,IAAI,wBAAwB,EAC9C,oBAAoB,IAAI,0BAA0B,EACnD,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAIL,KAAK,oBAAoB,EAC1B,MAAM,aAAa,CAAC;AAErB;;;;;GAKG;AACH,MAAM,MAAM,QAAQ,GAAG,QAAQ,GAAG,KAAK,GAAG,QAAQ,CAAC;AAEnD;;;;;;;GAOG;AACH,MAAM,MAAM,cAAc,GAAG,OAAO,GAAG,KAAK,GAAG,QAAQ,GAAG,QAAQ,GAAG,OAAO,CAAC;AAI7E;;GAEG;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;AAEjF;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,sDAAsD;IACtD,WAAW,EAAE,cAAc,EAAE,CAAC;IAC9B,mDAAmD;IACnD,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;CACjD;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpC,kEAAkE;IAClE,QAAQ,CAAC,EAAE,eAAe,CAAC;CAC5B;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,OAAO,GAAG,MAAM,GAAG,kBAAkB,CAAC;IAChD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,YAAY,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,+EAA+E;IAC/E,cAAc,CAAC,EAAE,qBAAqB,CAAC;CACxC;AAID;;GAEG;AACH,UAAU,cAAc;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,QAAQ,CAAC;IAChB,UAAU,CAAC,EAAE;QACX,IAAI,CAAC,EAAE,cAAc,CAAC;KACvB,CAAC;IACF,GAAG,CAAC,EAAE;QACJ,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,CAAC;IACF,MAAM,CAAC,EAAE;QACP,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,CAAC;IACF,MAAM,CAAC,EAAE;QACP,QAAQ,CAAC,EAAE,QAAQ,GAAG,YAAY,GAAG,QAAQ,GAAG,WAAW,CAAC;QAC5D,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,CAAC;IACF,KAAK,CAAC,EAAE;QACN,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,CAAC;IACF,QAAQ,CAAC,EAAE;QACT,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,eAAe,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC;QACpC,yGAAyG;QACzG,oBAAoB,CAAC,EAAE,OAAO,CAAC;QAC/B,cAAc,CAAC,EAAE;YACf,aAAa,CAAC,EAAE,MAAM,CAAC;YACvB,WAAW,CAAC,EAAE,MAAM,CAAC;SACtB,CAAC;KACH,CAAC;IACF,OAAO,CAAC,EAAE;QACR,KAAK,CAAC,EAAE,QAAQ,CAAC;QACjB,UAAU,CAAC,EAAE,aAAa,CAAC;KAC5B,CAAC;IACF,KAAK,CAAC,EAAE;QACN,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,SAAS,CAAC,EAAE,OAAO,CAAC;KACrB,CAAC;IACF,MAAM,CAAC,EAAE;QACP,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,MAAM,CAAC,EAAE,SAAS,CAAC;KACpB,CAAC;IACF,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,CAAC;IACxC,MAAM,CAAC,EAAE;QACP,OAAO,CAAC,EAAE;YACR,GAAG,CAAC,EAAE,MAAM,CAAC;YACb,EAAE,CAAC,EAAE,oBAAoB,EAAE,CAAC;YAC5B,YAAY,CAAC,EAAE,YAAY,CAAC;YAC5B,MAAM,CAAC,EAAE,OAAO,GAAG,WAAW,GAAG,SAAS,GAAG,KAAK,CAAC;SACpD,CAAC;KACH,CAAC;IACF,6DAA6D;IAC7D,QAAQ,CAAC,EAAE,oBAAoB,CAAC;CACjC;AAuDD;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB;;;;OAIG;IACH,IAAI,CAAC,EAAE,QAAQ,CAAC;IAEhB;;;OAGG;IACH,QAAQ,CAAC,EAAE,QAAQ,CAAC;IAEpB;;;OAGG;IACH,UAAU,CAAC,EAAE,aAAa,CAAC;IAE3B;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB;;;OAGG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IAEd;;OAEG;IACH,UAAU,CAAC,EAAE,CAAC,SAAS,GAAG,cAAc,CAAC,EAAE,CAAC;IAE5C;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB;;OAEG;IACH,YAAY,CAAC,EAAE,gBAAgB,CAAC;IAEhC;;OAEG;IACH,WAAW,CAAC,EAAE,eAAe,CAAC;IAE9B;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,CACnB,OAAO,EAAE,iBAAiB,EAC1B,UAAU,EAAE,MAAM,KACf,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE1B,kGAAkG;IAClG,cAAc,CAAC,EAAE,CAAC,MAAM,EAAE,WAAW,GAAG;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;CACvE;AAED,MAAM,MAAM,kBAAkB,GAAG,wBAAwB,CAAC,eAAe,CAAC,GAAG;IAC3E,MAAM,CAAC,EAAE,cAAc,CAAC,QAAQ,CAAC,CAAC;IAClC,KAAK,CAAC,EAAE,cAAc,CAAC,OAAO,CAAC,CAAC;IAChC,QAAQ,CAAC,EAAE,cAAc,CAAC,UAAU,CAAC,CAAC;IACtC,MAAM,CAAC,EAAE,cAAc,CAAC,QAAQ,CAAC,CAAC;CACnC,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG,0BAA0B,CAAC;AAE9D;;;;;;;;;;;;;;;;;;;GAmBG;AACH,qBAAa,IAAI;IACf,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,sBAAsB,CAAyB;IAEvE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAmB;IACpD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAiB;IAChD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAuB;IACrD,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAA2B;IAC7D,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAA2B;IAChE,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAc;IAC1C,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAkB;IAClD,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAsB;IAG1D,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAW;IAChC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAW;IAC5C,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAiB;IAChD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAc;IAC1C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IACvC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAS;IAG/B,OAAO,CAAC,YAAY,CAAiC;IACrD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAsB;IAGnD,OAAO,CAAC,YAAY,CAAiC;IACrD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAsB;IAGnD,OAAO,CAAC,WAAW,CAAgC;IACnD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAyB;IACrD,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAsB;IAC1D,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAsB;IAC1D,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAGV;IAC1B,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAuD;IAGvF,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAiD;IAGrF,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA4B;IACxD,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAAmC;IAG3E,OAAO,CAAC,UAAU,CAAmB;IACrC,OAAO,CAAC,gBAAgB,CAAgB;IACxC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAS;IACxC,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAU;IAC9C,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAU;IACtC,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAA8B;IACtE,OAAO,CAAC,iBAAiB,CAA+C;IAExE,OAAO;IAyTP;;;;;;;;;;;;;;;;;;;;OAoBG;WACU,IAAI,CAAC,OAAO,GAAE,WAAgB,GAAG,OAAO,CAAC,IAAI,CAAC;IAiE3D,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,kBAAkB,GAAG,IAAI;WAqEtC,SAAS,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC;IAgCpE,OAAO,CAAC,MAAM,CAAC,YAAY;IAO3B,OAAO,CAAC,MAAM,CAAC,kBAAkB;IAoBjC,OAAO,CAAC,MAAM,CAAC,uBAAuB;IAWtC,OAAO,CAAC,MAAM,CAAC,gBAAgB;IAc/B,OAAO,CAAC,MAAM,CAAC,mBAAmB;IAKlC,OAAO,CAAC,MAAM,CAAC,qBAAqB;IAWpC,OAAO,CAAC,MAAM,CAAC,UAAU;mBAuCJ,gBAAgB;mBAIhB,kBAAkB;mBAIlB,cAAc;mBAKd,eAAe;IAmBpC;;OAEG;mBACkB,SAAS;IAoG9B;;OAEG;IACH,OAAO,CAAC,MAAM,CAAC,aAAa;IA+B5B;;OAEG;IACH,OAAO,CAAC,eAAe;IAKvB,OAAO,CAAC,qBAAqB;IAO7B,OAAO,CAAC,sBAAsB;IAS9B,OAAO,CAAC,iBAAiB;IAIzB,OAAO,CAAC,0BAA0B;IAIlC,OAAO,CAAC,sBAAsB;IAO9B,OAAO,CAAC,qBAAqB;IAQ7B,OAAO,CAAC,gBAAgB;IAmBxB,OAAO,CAAC,uBAAuB;IAkC/B,OAAO,CAAC,gBAAgB;IAIxB,OAAO,CAAC,cAAc;IAItB,OAAO,CAAC,aAAa;IAIrB,OAAO,CAAC,WAAW;IAInB,OAAO,CAAC,mBAAmB;IAU3B,OAAO,CAAC,eAAe;IAWvB,OAAO,CAAC,WAAW;IAYnB;;OAEG;YACW,eAAe;IAiD7B;;OAEG;YACW,cAAc;IAwC5B;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAkEzB;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAuBxB;;OAEG;YACW,iBAAiB;IAiJ/B,OAAO,CAAC,2BAA2B;IA8BnC,OAAO,CAAC,gBAAgB;IA+BxB,OAAO,CAAC,sBAAsB;IAc9B,OAAO,CAAC,mBAAmB;IAI3B,OAAO,CAAC,+BAA+B;IAuBvC,OAAO,CAAC,uBAAuB;IAyC/B,OAAO,CAAC,gCAAgC;IAYxC,OAAO,CAAC,uBAAuB;IA8B/B;;OAEG;YACW,eAAe;IAyB7B;;OAEG;YACW,kBAAkB;IAyBhC;;OAEG;IACH,OAAO,CAAC,oBAAoB;IAkE5B;;OAEG;IACH,OAAO,CAAC,mBAAmB;IA0B3B;;OAEG;YACW,eAAe;IA2B7B;;OAEG;YACW,kBAAkB;IAyBhC;;OAEG;IACH,OAAO,CAAC,oBAAoB;IAkE5B;;OAEG;IACH,OAAO,CAAC,mBAAmB;IA0B3B;;OAEG;IACH,OAAO,CAAC,cAAc;IAatB;;;OAGG;IACH,OAAO,CAAC,qBAAqB;IA4C7B;;;OAGG;YACW,iBAAiB;IAoN/B;;OAEG;YACW,kBAAkB;YA6FlB,uBAAuB;YAkJvB,wBAAwB;YAgDxB,WAAW;IAwBzB,OAAO,CAAC,0BAA0B;IAQlC,OAAO,CAAC,yBAAyB;IA4CjC,OAAO,CAAC,iBAAiB;IAoCzB,OAAO,CAAC,sBAAsB;IA2B9B,OAAO,CAAC,wBAAwB;IAgBhC,OAAO,CAAC,iBAAiB;IAyBzB,OAAO,CAAC,kBAAkB;IAW1B;;;;;;;;OAQG;IACH,OAAO,CAAC,iBAAiB;IAyCzB,OAAO,CAAC,aAAa;IAwBrB,OAAO,CAAC,qBAAqB;IAqB7B,OAAO,CAAC,uBAAuB;IA0B/B;;OAEG;IACH,OAAO,CAAC,mBAAmB;IAU3B;;OAEG;IACH,OAAO,CAAC,KAAK;IAIb,OAAO,CAAC,mBAAmB;IA6B3B,OAAO,CAAC,qBAAqB;IA6B7B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA8BG;IACH,IAAI,CAAC,CAAC,SAAS;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,CAAC,EAAE;IAIjD;;;;;OAKG;IACH,QAAQ,CAAC,CAAC,SAAS;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC;IAuIhD;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACH,YAAY,CACV,KAAK,EAAE,OAAO,EAAE,EAChB,YAAY,EAAE,eAAe,GAC5B;QACD,KAAK,EAAE,OAAO,EAAE,CAAC;QACjB,QAAQ,EAAE,CAAC,IAAI,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;SAAE,KAAK,OAAO,CAAC,aAAa,CAAC,CAAC;KACnG;IAuDD;;;;;;OAMG;IACG,gBAAgB,CAAC,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAwBnE;;OAEG;IACH,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,sBAAsB;IAIzE;;;;OAIG;IACG,KAAK,CACT,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,OAAO,GAAE,YAAiB,GACzB,OAAO,CAAC,WAAW,CAAC;IA4JvB;;;;;;;;OAQG;IACH,qBAAqB,CACnB,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,aAAa,GAAG,UAAU,GACrC,IAAI;IAQP;;;;OAIG;IACH,wBAAwB,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI;IAQjD;;OAEG;IACH,qBAAqB,CACnB,QAAQ,EAAE,MAAM,GACf,aAAa,GAAG,UAAU,GAAG,SAAS;IAIzC;;;OAGG;IACG,aAAa,CAAC,aAAa,EAAE,qBAAqB,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IASpE,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC;IAkB7B,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC;IA+BvC,OAAO,CAAC,kBAAkB;IAmB1B;;OAEG;IACH,eAAe,IAAI,YAAY;IAI/B;;OAEG;IACH,eAAe,CAAC,MAAM,GAAE,oBAA6B,GAAG,MAAM;IAI9D;;OAEG;IACH,YAAY,IAAI,IAAI;IAIpB,eAAe,IAAI,YAAY,GAAG,IAAI;IAItC,WAAW,IAAI,IAAI;IAInB;;;OAGG;IACH,uBAAuB,CAAC,KAAK,GAAE,WAAuB,GAAG,oBAAoB,GAAG,IAAI;IAIpF;;OAEG;IACH,mBAAmB,CAAC,KAAK,GAAE,WAAuB,GAAG,IAAI;IAIzD,OAAO,IAAI,IAAI;CAMhB;AAGD,OAAO,EAAE,mBAAmB,EAAE,CAAC;AAC/B,OAAO,EAAE,mBAAmB,EAAE,CAAC"}
+{"version":3,"file":"veto.d.ts","sourceRoot":"","sources":["../../src/core/veto.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EACV,cAAc,EACd,QAAQ,EACT,MAAM,kBAAkB,CAAC;AAC1B,OAAO,KAAK,EACV,oBAAoB,EACpB,SAAS,EACT,cAAc,EACd,iBAAiB,EAEjB,QAAQ,EACR,aAAa,EAEd,MAAM,oBAAoB,CAAC;AAO5B,OAAO,EAAkB,KAAK,YAAY,EAAE,MAAM,cAAc,CAAC;AACjE,OAAO,EAAiB,mBAAmB,EAAE,KAAK,YAAY,EAAE,MAAM,aAAa,CAAC;AACpF,OAAO,EAAe,mBAAmB,EAAE,KAAK,kBAAkB,EAAsB,MAAM,kBAAkB,CAAC;AACjH,OAAO,KAAK,EAAE,eAAe,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,WAAW,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAG5I,OAAO,KAAK,EAAE,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACrF,OAAO,KAAK,EAEV,YAAY,EAMb,MAAM,mBAAmB,CAAC;AAM3B,OAAO,KAAK,EAAE,YAAY,IAAI,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAG5E,OAAO,KAAK,EAAwC,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AACrG,OAAO,EAAE,eAAe,EAAwB,MAAM,oBAAoB,CAAC;AAI3E,OAAO,EAAmB,KAAK,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AACrF,OAAO,KAAK,EACV,kBAAkB,IAAI,wBAAwB,EAC9C,oBAAoB,IAAI,0BAA0B,EACnD,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAIL,KAAK,oBAAoB,EAC1B,MAAM,aAAa,CAAC;AACrB,OAAO,EAAe,KAAK,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAExE;;;;;GAKG;AACH,MAAM,MAAM,QAAQ,GAAG,QAAQ,GAAG,KAAK,GAAG,QAAQ,CAAC;AAEnD;;;;;;;GAOG;AACH,MAAM,MAAM,cAAc,GAAG,OAAO,GAAG,KAAK,GAAG,QAAQ,GAAG,QAAQ,GAAG,OAAO,CAAC;AAI7E;;GAEG;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;AAEjF;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,sDAAsD;IACtD,WAAW,EAAE,cAAc,EAAE,CAAC;IAC9B,mDAAmD;IACnD,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;CACjD;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpC,kEAAkE;IAClE,QAAQ,CAAC,EAAE,eAAe,CAAC;CAC5B;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,OAAO,GAAG,MAAM,GAAG,kBAAkB,CAAC;IAChD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,YAAY,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,+EAA+E;IAC/E,cAAc,CAAC,EAAE,qBAAqB,CAAC;CACxC;AAID;;GAEG;AACH,UAAU,cAAc;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,QAAQ,CAAC;IAChB,UAAU,CAAC,EAAE;QACX,IAAI,CAAC,EAAE,cAAc,CAAC;KACvB,CAAC;IACF,GAAG,CAAC,EAAE;QACJ,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,CAAC;IACF,MAAM,CAAC,EAAE;QACP,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,CAAC;IACF,MAAM,CAAC,EAAE;QACP,QAAQ,CAAC,EAAE,QAAQ,GAAG,YAAY,GAAG,QAAQ,GAAG,WAAW,CAAC;QAC5D,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,CAAC;IACF,KAAK,CAAC,EAAE;QACN,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,CAAC;IACF,QAAQ,CAAC,EAAE;QACT,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,eAAe,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC;QACpC,yGAAyG;QACzG,oBAAoB,CAAC,EAAE,OAAO,CAAC;QAC/B,cAAc,CAAC,EAAE;YACf,aAAa,CAAC,EAAE,MAAM,CAAC;YACvB,WAAW,CAAC,EAAE,MAAM,CAAC;SACtB,CAAC;KACH,CAAC;IACF,OAAO,CAAC,EAAE;QACR,KAAK,CAAC,EAAE,QAAQ,CAAC;QACjB,UAAU,CAAC,EAAE,aAAa,CAAC;KAC5B,CAAC;IACF,KAAK,CAAC,EAAE;QACN,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,SAAS,CAAC,EAAE,OAAO,CAAC;KACrB,CAAC;IACF,MAAM,CAAC,EAAE;QACP,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,MAAM,CAAC,EAAE,SAAS,CAAC;KACpB,CAAC;IACF,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,CAAC;IACxC,MAAM,CAAC,EAAE;QACP,OAAO,CAAC,EAAE;YACR,GAAG,CAAC,EAAE,MAAM,CAAC;YACb,EAAE,CAAC,EAAE,oBAAoB,EAAE,CAAC;YAC5B,YAAY,CAAC,EAAE,YAAY,CAAC;YAC5B,MAAM,CAAC,EAAE,OAAO,GAAG,WAAW,GAAG,SAAS,GAAG,KAAK,CAAC;SACpD,CAAC;KACH,CAAC;IACF,6DAA6D;IAC7D,QAAQ,CAAC,EAAE,oBAAoB,CAAC;IAChC,yDAAyD;IACzD,KAAK,CAAC,EAAE;QACN,+CAA+C;QAC/C,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,+DAA+D;QAC/D,IAAI,CAAC,EAAE,MAAM,CAAC;KACf,CAAC;CACH;AAuDD;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB;;;;OAIG;IACH,IAAI,CAAC,EAAE,QAAQ,CAAC;IAEhB;;;OAGG;IACH,QAAQ,CAAC,EAAE,QAAQ,CAAC;IAEpB;;;OAGG;IACH,UAAU,CAAC,EAAE,aAAa,CAAC;IAE3B;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB;;;OAGG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IAEd;;OAEG;IACH,UAAU,CAAC,EAAE,CAAC,SAAS,GAAG,cAAc,CAAC,EAAE,CAAC;IAE5C;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB;;OAEG;IACH,YAAY,CAAC,EAAE,gBAAgB,CAAC;IAEhC;;OAEG;IACH,WAAW,CAAC,EAAE,eAAe,CAAC;IAE9B;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,CACnB,OAAO,EAAE,iBAAiB,EAC1B,UAAU,EAAE,MAAM,KACf,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE1B,kGAAkG;IAClG,cAAc,CAAC,EAAE,CAAC,MAAM,EAAE,WAAW,GAAG;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;IAEtE;;;;OAIG;IACH,SAAS,CAAC,EAAE;QACV,6FAA6F;QAC7F,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,mEAAmE;QACnE,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC;IAEF;;;OAGG;IACH,KAAK,CAAC,EAAE;QACN,+CAA+C;QAC/C,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,+DAA+D;QAC/D,IAAI,CAAC,EAAE,MAAM,CAAC;KACf,CAAC;IAEF,8EAA8E;IAC9E,WAAW,CAAC,EAAE,UAAU,GAAG,IAAI,CAAC;CACjC;AAED,MAAM,MAAM,kBAAkB,GAAG,wBAAwB,CAAC,eAAe,CAAC,GAAG;IAC3E,MAAM,CAAC,EAAE,cAAc,CAAC,QAAQ,CAAC,CAAC;IAClC,KAAK,CAAC,EAAE,cAAc,CAAC,OAAO,CAAC,CAAC;IAChC,QAAQ,CAAC,EAAE,cAAc,CAAC,UAAU,CAAC,CAAC;IACtC,MAAM,CAAC,EAAE,cAAc,CAAC,QAAQ,CAAC,CAAC;CACnC,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG,0BAA0B,CAAC;AAE9D;;;;;;;;;;;;;;;;;;;GAmBG;AACH,qBAAa,IAAI;IACf,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,sBAAsB,CAAyB;IAEvE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAmB;IACpD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAiB;IAChD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAuB;IACrD,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAA2B;IAC7D,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAA2B;IAChE,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAc;IAC1C,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAkB;IAClD,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAsB;IAG1D,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAW;IAChC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAW;IAC5C,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAiB;IAChD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAc;IAC1C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IACvC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAS;IAG/B,OAAO,CAAC,YAAY,CAAiC;IACrD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAsB;IAGnD,OAAO,CAAC,YAAY,CAAiC;IACrD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAsB;IAGnD,OAAO,CAAC,WAAW,CAAgC;IACnD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAyB;IACrD,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAsB;IAC1D,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAsB;IAC1D,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAGV;IAC1B,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAuD;IAGvF,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAiD;IAGrF,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA4B;IACxD,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAAmC;IAG3E,OAAO,CAAC,UAAU,CAAmB;IACrC,OAAO,CAAC,gBAAgB,CAAgB;IACxC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAS;IACxC,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAU;IAC9C,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAU;IACtC,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAA8B;IACtE,OAAO,CAAC,iBAAiB,CAA+C;IACxE,OAAO,CAAC,UAAU,CAA2B;IAE7C,OAAO;IA+TP;;;;;;;;;;;;;;;;;;;;OAoBG;WACU,IAAI,CAAC,OAAO,GAAE,WAAgB,GAAG,OAAO,CAAC,IAAI,CAAC;IAuE3D,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,kBAAkB,GAAG,IAAI;WAqEtC,SAAS,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC;IAgCpE,OAAO,CAAC,MAAM,CAAC,YAAY;IAO3B,OAAO,CAAC,MAAM,CAAC,kBAAkB;IAoBjC,OAAO,CAAC,MAAM,CAAC,uBAAuB;IAWtC,OAAO,CAAC,MAAM,CAAC,gBAAgB;IAc/B,OAAO,CAAC,MAAM,CAAC,mBAAmB;IAKlC,OAAO,CAAC,MAAM,CAAC,qBAAqB;IAWpC,OAAO,CAAC,MAAM,CAAC,UAAU;mBAuCJ,gBAAgB;mBAIhB,kBAAkB;mBAIlB,cAAc;mBAKd,eAAe;IAmBpC;;OAEG;mBACkB,SAAS;IAoG9B;;OAEG;IACH,OAAO,CAAC,MAAM,CAAC,aAAa;IA+B5B;;OAEG;IACH,OAAO,CAAC,eAAe;IAKvB,OAAO,CAAC,qBAAqB;IAO7B,OAAO,CAAC,sBAAsB;IAS9B,OAAO,CAAC,iBAAiB;IAIzB,OAAO,CAAC,0BAA0B;IAIlC,OAAO,CAAC,sBAAsB;IAO9B,OAAO,CAAC,qBAAqB;IAQ7B,OAAO,CAAC,gBAAgB;IAmBxB,OAAO,CAAC,uBAAuB;IAkC/B,OAAO,CAAC,gBAAgB;IAIxB,OAAO,CAAC,cAAc;IAItB,OAAO,CAAC,aAAa;IAIrB,OAAO,CAAC,WAAW;IAInB,OAAO,CAAC,mBAAmB;IAU3B,OAAO,CAAC,eAAe;IAWvB,OAAO,CAAC,WAAW;IAYnB;;OAEG;YACW,eAAe;IAiD7B;;OAEG;YACW,cAAc;IAwC5B;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAkEzB;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAuBxB;;OAEG;YACW,iBAAiB;IAuN/B,OAAO,CAAC,2BAA2B;IA8BnC,OAAO,CAAC,gBAAgB;IA+BxB,OAAO,CAAC,sBAAsB;IAc9B,OAAO,CAAC,mBAAmB;IAI3B,OAAO,CAAC,+BAA+B;IAuBvC,OAAO,CAAC,uBAAuB;IAyC/B,OAAO,CAAC,gCAAgC;IAYxC,OAAO,CAAC,uBAAuB;IAkC/B;;OAEG;YACW,eAAe;IAyB7B;;OAEG;YACW,kBAAkB;IAyBhC;;OAEG;IACH,OAAO,CAAC,oBAAoB;IAkE5B;;OAEG;IACH,OAAO,CAAC,mBAAmB;IA0B3B;;OAEG;YACW,eAAe;IA2B7B;;OAEG;YACW,kBAAkB;IAyBhC;;OAEG;IACH,OAAO,CAAC,oBAAoB;IAkE5B;;OAEG;IACH,OAAO,CAAC,mBAAmB;IA0B3B;;OAEG;IACH,OAAO,CAAC,cAAc;IAatB;;;OAGG;IACH,OAAO,CAAC,qBAAqB;IA4C7B;;;OAGG;YACW,iBAAiB;IAoN/B;;OAEG;YACW,kBAAkB;YA6FlB,uBAAuB;YAkJvB,wBAAwB;YAgDxB,WAAW;IAwBzB,OAAO,CAAC,0BAA0B;IAQlC,OAAO,CAAC,yBAAyB;IA4CjC,OAAO,CAAC,iBAAiB;IAoCzB,OAAO,CAAC,sBAAsB;IA2B9B,OAAO,CAAC,wBAAwB;IAgBhC,OAAO,CAAC,iBAAiB;IAyBzB,OAAO,CAAC,kBAAkB;IAW1B;;;;;;;;OAQG;IACH,OAAO,CAAC,iBAAiB;IAyCzB,OAAO,CAAC,aAAa;IAwBrB,OAAO,CAAC,qBAAqB;IAqB7B,OAAO,CAAC,uBAAuB;IA0B/B;;OAEG;IACH,OAAO,CAAC,mBAAmB;IAU3B;;OAEG;IACH,OAAO,CAAC,KAAK;IAIb,OAAO,CAAC,mBAAmB;IA6B3B,OAAO,CAAC,qBAAqB;IA6B7B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA8BG;IACH,IAAI,CAAC,CAAC,SAAS;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,CAAC,EAAE;IAIjD;;;;;OAKG;IACH,QAAQ,CAAC,CAAC,SAAS;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC;IAuIhD;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACH,YAAY,CACV,KAAK,EAAE,OAAO,EAAE,EAChB,YAAY,EAAE,eAAe,GAC5B;QACD,KAAK,EAAE,OAAO,EAAE,CAAC;QACjB,QAAQ,EAAE,CAAC,IAAI,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;SAAE,KAAK,OAAO,CAAC,aAAa,CAAC,CAAC;KACnG;IAuDD;;;;;;OAMG;IACG,gBAAgB,CAAC,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAwBnE;;OAEG;IACH,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,sBAAsB;IAIzE;;;;OAIG;IACG,KAAK,CACT,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,OAAO,GAAE,YAAiB,GACzB,OAAO,CAAC,WAAW,CAAC;IAoKvB;;;;;;;;OAQG;IACH,qBAAqB,CACnB,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,aAAa,GAAG,UAAU,GACrC,IAAI;IAQP;;;;OAIG;IACH,wBAAwB,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI;IAQjD;;OAEG;IACH,qBAAqB,CACnB,QAAQ,EAAE,MAAM,GACf,aAAa,GAAG,UAAU,GAAG,SAAS;IAIzC;;;OAGG;IACG,aAAa,CAAC,aAAa,EAAE,qBAAqB,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IASpE,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC;IAkB7B,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC;IA+BvC,OAAO,CAAC,kBAAkB;IAsB1B;;OAEG;IACH,eAAe,IAAI,YAAY;IAI/B;;OAEG;IACH,eAAe,CAAC,MAAM,GAAE,oBAA6B,GAAG,MAAM;IAI9D;;OAEG;IACH,YAAY,IAAI,IAAI;IAIpB,eAAe,IAAI,YAAY,GAAG,IAAI;IAItC,WAAW,IAAI,IAAI;IAInB;;;OAGG;IACH,uBAAuB,CAAC,KAAK,GAAE,WAAuB,GAAG,oBAAoB,GAAG,IAAI;IAIpF;;OAEG;IACH,mBAAmB,CAAC,KAAK,GAAE,WAAuB,GAAG,IAAI;IAIzD,OAAO,IAAI,IAAI;IAOf,iGAAiG;IAC3F,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC;CAGrC;AAGD,OAAO,EAAE,mBAAmB,EAAE,CAAC;AAC/B,OAAO,EAAE,mBAAmB,EAAE,CAAC"}

package/dist/core/veto.js

@@ -16,11 +16,13 @@ import { EconomicEvaluator } from '../economic/evaluator.js';
 import { LocalBudgetEngine } from '../economic/budget-engine.js';
 import { compile, evaluate } from '../compiler/index.js';
 import { evaluateConditionCollections } from '../rules/condition-evaluator.js';
+import { evaluateRateLimits } from '../rate-limiting/evaluator.js';
 import { VetoCloudClient, ApprovalTimeoutError } from '../cloud/client.js';
 import { PolicyCache } from '../cloud/policy-cache.js';
 import { validateDeterministic } from '../deterministic/validator.js';
 import { OutputValidator } from './output-validator.js';
 import { EventWebhookEmitter, resolveEventWebhookConfig, } from './events.js';
+import { tryLoadOtel } from '../observability/otel.js';
 const RESERVED_LOCAL_CONTEXT_KEYS = new Set(['market', 'budget', 'portfolio']);
 class LocalApprovalTimeoutError extends Error {
     constructor(timeoutMs) {
@@ -100,6 +102,7 @@ export class Veto {
     browserMode;
     compiledExpressionCache = new Map();
     refreshIntervalId = null;
+    otelTracer = null;
     constructor(options, config, rules, logger, browserMode = false, localRulesSource) {
         this.logger = logger;
         this.configDir = options.configDir ?? './veto';
@@ -108,6 +111,7 @@ export class Veto {
         this.localRulesDir = localRulesSource?.dir;
         this.localRulesRecursive = localRulesSource?.recursive ?? true;
         this.browserMode = browserMode;
+        this.otelTracer = options._otelTracer ?? null;
         const envMode = this.browserMode
             ? undefined
             : Veto.parseEnvMode(process.env.VETO_MODE);
@@ -283,6 +287,7 @@ export class Veto {
         this.validationEngine = new ValidationEngine({
             logger: this.logger,
             defaultDecision,
+            otelTracer: this.otelTracer,
         });
         // Add the rule validator based on validation mode
         this.validationEngine.addValidator({
@@ -318,9 +323,13 @@ export class Veto {
             this.validationEngine.addValidators(options.validators);
         }
         // Initialize history tracker
+        const auditCfg = options.audit ?? (config.audit?.enabled ? config.audit : undefined);
         this.historyTracker = new HistoryTracker({
             maxSize: 100,
             logger: this.logger,
+            auditLog: auditCfg?.enabled
+                ? { enabled: true, path: auditCfg.path }
+                : undefined,
         });
         // Initialize budget tracker (if configured)
         if (config.budget?.max !== undefined && config.budget.max > 0) {
@@ -442,7 +451,12 @@ export class Veto {
         const rulesDir = pathModule.resolve(configDir, config.rules?.directory ?? './rules');
         const recursive = config.rules?.recursive ?? true;
         const rules = await Veto.loadRules(rulesDir, recursive, logger, fsModule, pathModule, parseYaml);
-        return new Veto({ ...options, configDir }, config, rules.state, logger, false, {
+        // Load OTEL tracer before constructing so the validation engine receives it.
+        let otelTracer = null;
+        if (options.telemetry?.enabled !== false) {
+            otelTracer = await tryLoadOtel(options.telemetry?.serviceName);
+        }
+        return new Veto({ ...options, configDir, _otelTracer: otelTracer }, config, rules.state, logger, false, {
             dir: rulesDir,
             recursive,
             sourceFiles: rules.sourceFiles,
@@ -1030,6 +1044,72 @@ export class Veto {
             if (!this.matchesLocalRule(rule, context, localContext)) {
                 continue;
             }
+            if (rule.rate_limits && rule.rate_limits.length > 0) {
+                const rateLimitDenial = await evaluateRateLimits(rule.rate_limits, context, context.toolName, this.logger, rule.id);
+                if (rateLimitDenial === null) {
+                    // Rate limit not exceeded — rule doesn't fire yet.
+                    continue;
+                }
+                // Rate limit exceeded — apply the rule's declared action.
+                const rateLimitedRule = { ...rule, description: rateLimitDenial };
+                if (rateLimitedRule.action === 'block' && !firstBlockRule) {
+                    firstBlockRule = rateLimitedRule;
+                }
+                else if (rateLimitedRule.action === 'require_approval' && !firstApprovalRule) {
+                    firstApprovalRule = rateLimitedRule;
+                }
+                else if (rateLimitedRule.action === 'allow' && !firstAllowRule) {
+                    firstAllowRule = rateLimitedRule;
+                }
+                else if ((rateLimitedRule.action === 'warn' || rateLimitedRule.action === 'log') && !firstNonBlockingRule) {
+                    firstNonBlockingRule = rateLimitedRule;
+                }
+                continue;
+            }
+            if (rule.action === 'require_payment') {
+                const paymentCfg = rule.payment;
+                if (!paymentCfg) {
+                    this.logger.warn('[veto] require_payment rule has no payment config — treating as block', {
+                        ruleId: rule.id,
+                    });
+                    if (!firstBlockRule)
+                        firstBlockRule = { ...rule, action: 'block' };
+                    continue;
+                }
+                if (paymentCfg.protocol === 'ap2') {
+                    this.logger.warn('[veto] AP2 mandate signature verification not yet implemented. ' +
+                        'Use x402 or MPP for production payment gates.');
+                }
+                if (!this.economicEvaluator) {
+                    this.logger.warn('[veto] require_payment rule matched but no economic evaluator configured — failing closed', {
+                        ruleId: rule.id,
+                    });
+                    if (!firstBlockRule)
+                        firstBlockRule = { ...rule, action: 'block', description: 'Payment required but no payment provider configured' };
+                    continue;
+                }
+                const econCtx = {
+                    cost: paymentCfg.amount,
+                    currency: paymentCfg.currency,
+                    protocol: paymentCfg.protocol,
+                    protocol_metadata: paymentCfg.chain_id !== undefined ? { chain_id: paymentCfg.chain_id } : undefined,
+                };
+                const payResult = this.economicEvaluator.evaluate(econCtx);
+                if (payResult.decision !== 'allow') {
+                    if (!firstBlockRule) {
+                        firstBlockRule = {
+                            ...rule,
+                            action: 'block',
+                            description: payResult.denial?.reason ?? 'Payment required',
+                        };
+                    }
+                    continue;
+                }
+                // Payment passed — treat as allow
+                if (!firstAllowRule)
+                    firstAllowRule = rule;
+                continue;
+            }
             if (rule.action === 'block' && !firstBlockRule) {
                 firstBlockRule = rule;
                 continue;
@@ -1228,6 +1308,11 @@ export class Veto {
         if (!ast) {
             try {
                 ast = compile(expression);
+                if (this.compiledExpressionCache.size >= 10_000) {
+                    const firstKey = this.compiledExpressionCache.keys().next().value;
+                    if (firstKey !== undefined)
+                        this.compiledExpressionCache.delete(firstKey);
+                }
                 this.compiledExpressionCache.set(expression, ast);
             }
             catch (error) {
@@ -2294,7 +2379,7 @@ export class Veto {
      * const wrappedTools = veto.wrap(tools);
      *
      * const agent = createAgent({
-     *   model: 'openai:gpt-4o',
+     *   model: 'openai:gpt-5.4',
      *   tools: wrappedTools, // Same type as input!
      * });
      * ```
@@ -2607,7 +2692,6 @@ export class Veto {
         };
         const aggregatedResult = await this.validationEngine.validate(validationContext);
         const validationResult = aggregatedResult.finalResult;
-        this.historyTracker.record(toolName, args, validationResult, aggregatedResult.totalDurationMs);
         this.emitDecisionEvent(validationContext, validationResult);
         this.logClientDecision(validationContext, validationResult, aggregatedResult.totalDurationMs);
         // If behavioral rules allow and economic context exists, reserve budget.
@@ -2622,12 +2706,19 @@ export class Veto {
             const reserveResult = this.economicEvaluator.reserveBudget(effectiveEconomic.cost, effectiveEconomic.currency);
             if (reserveResult.decision !== 'allow') {
                 this.emitEconomicEvent(toolName, args, reserveResult, effectiveEconomic);
-                const result = {
-                    ...behavioralResult,
-                    decision: reserveResult.decision,
+                const econDenialResult = {
+                    ...validationResult,
+                    decision: reserveResult.decision === 'deny' ? 'deny' : validationResult.decision,
                     reason: reserveResult.denial
                         ? `Economic: ${reserveResult.denial.reason}`
                         : 'Budget reservation failed',
+                };
+                // Record the FINAL decision (economic denial), not the behavioral allow
+                this.historyTracker.record(toolName, args, econDenialResult, aggregatedResult.totalDurationMs);
+                const result = {
+                    ...behavioralResult,
+                    decision: reserveResult.decision,
+                    reason: econDenialResult.reason,
                     economicDenial: reserveResult.denial,
                 };
                 this.notifyDecisionMade(result, toolName);
@@ -2636,6 +2727,8 @@ export class Veto {
             // Emit spend_committed event on successful reservation
             this.emitEconomicEvent(toolName, args, reserveResult, effectiveEconomic, 'spend_committed');
         }
+        // Record history AFTER economic check so audit log reflects the actual outcome
+        this.historyTracker.record(toolName, args, validationResult, aggregatedResult.totalDurationMs);
         this.notifyDecisionMade(behavioralResult, toolName);
         return behavioralResult;
     }
@@ -2734,6 +2827,9 @@ export class Veto {
                 });
             });
         }, refreshIntervalMs);
+        if (typeof this.refreshIntervalId === 'object' && this.refreshIntervalId !== null && 'unref' in this.refreshIntervalId) {
+            this.refreshIntervalId.unref();
+        }
     }
     /**
      * Get history statistics.
@@ -2778,6 +2874,10 @@ export class Veto {
             this.refreshIntervalId = null;
         }
     }
+    /** Await pending async audit log writes. Call before reading the log in tests or on shutdown. */
+    async flushAuditLog() {
+        await this.historyTracker.flushAuditLog();
+    }
 }
 // Re-export error classes
 export { ToolCallDeniedError };