veto-sdk 2.2.1 → 2.3.0

package/dist/custom/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/custom/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH;;GAEG;AACH,MAAM,MAAM,cAAc,GAAG,QAAQ,GAAG,YAAY,GAAG,QAAQ,GAAG,WAAW,CAAC;AAE9E;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,0BAA0B;IAC1B,QAAQ,EAAE,cAAc,CAAC;IACzB,sEAAsE;IACtE,KAAK,EAAE,MAAM,CAAC;IACd,mDAAmD;IACnD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,+CAA+C;IAC/C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iDAAiD;IACjD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,uDAAuD;IACvD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,2DAA2D;IAC3D,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,cAAc,CAAC;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED;;GAEG;AACH,eAAO,MAAM,iBAAiB,EAAE,MAAM,CAAC,cAAc,EAAE,MAAM,CAK5D,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,kBAAkB,EAAE,MAAM,CAAC,cAAc,EAAE,MAAM,GAAG,SAAS,CAKzE,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,eAAe;;;;CAIlB,CAAC;AAEX;;GAEG;AACH,qBAAa,WAAY,SAAQ,KAAK;IACpC,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC;gBAEX,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,KAAK;CAK3C;AAED;;GAEG;AACH,qBAAa,gBAAiB,SAAQ,WAAW;IAC/C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;gBAEjB,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM;CAKjD;AAED;;GAEG;AACH,qBAAa,iBAAkB,SAAQ,WAAW;IAChD,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;gBAEtB,QAAQ,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM;CAOrD;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,YAAY,GAAG,oBAAoB,CAkB9E"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/custom/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH;;GAEG;AACH,MAAM,MAAM,cAAc,GAAG,QAAQ,GAAG,YAAY,GAAG,QAAQ,GAAG,WAAW,CAAC;AAE9E;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,0BAA0B;IAC1B,QAAQ,EAAE,cAAc,CAAC;IACzB,uEAAuE;IACvE,KAAK,EAAE,MAAM,CAAC;IACd,mDAAmD;IACnD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,+CAA+C;IAC/C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iDAAiD;IACjD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,uDAAuD;IACvD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,2DAA2D;IAC3D,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,cAAc,CAAC;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED;;GAEG;AACH,eAAO,MAAM,iBAAiB,EAAE,MAAM,CAAC,cAAc,EAAE,MAAM,CAK5D,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,kBAAkB,EAAE,MAAM,CAAC,cAAc,EAAE,MAAM,GAAG,SAAS,CAKzE,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,eAAe;;;;CAIlB,CAAC;AAEX;;GAEG;AACH,qBAAa,WAAY,SAAQ,KAAK;IACpC,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC;gBAEX,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,KAAK;CAK3C;AAED;;GAEG;AACH,qBAAa,gBAAiB,SAAQ,WAAW;IAC/C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;gBAEjB,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM;CAKjD;AAED;;GAEG;AACH,qBAAa,iBAAkB,SAAQ,WAAW;IAChD,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;gBAEtB,QAAQ,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM;CAOrD;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,YAAY,GAAG,oBAAoB,CAkB9E"}

package/dist/index.d.ts

@@ -35,7 +35,7 @@ export { Veto, ToolCallDeniedError, type VetoOptions, type VetoMode, type Valida
 export { protect, type ProtectOptions, type ProtectMode, } from './core/protect.js';
 export type { ToolDefinition, ToolCall, ToolResult, ToolHandler, ExecutableTool, ToolInputSchema, JsonSchemaType, JsonSchemaProperty, } from './types/tool.js';
 export type { LogLevel, StreamLogMode, ValidationDecision, ValidationResult, ValidationContext, Validator, NamedValidator, ToolCallHistoryEntry, DecisionExportFormat, DecisionExportRecord, } from './types/config.js';
-export type { Rule, RuleSet, RuleCondition, RuleAgentsScope, RuleAction, OutputRule, OutputRuleAction, RuleSeverity, ValidationAPIResponse, } from './rules/types.js';
+export type { Rule, RuleSet, RuleCondition, RuleAgentsScope, RuleAction, OutputRule, OutputRuleAction, RuleSeverity, ValidationAPIResponse, RateLimitEntry, } from './rules/types.js';
 export type { CustomConfig, CustomProvider, CustomResponse, CustomToolCall, } from './custom/types.js';
 export { CustomClient } from './custom/client.js';
 export type { VetoCloudConfig, CloudValidationResponse, FailedConstraint, ApprovalData, ApprovalPollOptions, SessionState, } from './cloud/types.js';
@@ -57,5 +57,15 @@ export { OUTPUT_PATTERNS, OUTPUT_PATTERN_SSN, OUTPUT_PATTERN_CREDIT_CARD, OUTPUT
 export { extractEntities, type ExtractedEntities, type ExtractEntitiesOptions, } from './extractors/content.js';
 export { evaluateRulesLocally, evaluateCondition as evaluateConditionLocally, resolveFieldPath as resolveLocalFieldPath, type LocalEvalResult, } from './rules/local-evaluator.js';
 export { BROWSER_AGENT_SYSTEM_PROMPT, getPolicyOutputSchema, sanitizeGeneratedRules, validatePolicyOutput, tryInstantGeneration, looksLikePolicyDeclaration, reviewPolicyRequest, type PolicyGenerationResult, type PolicyClarificationRequest, } from './policy/generator.js';
+export type { RateLimitStore } from './rate-limiting/evaluator.js';
+export { RedisRateLimitStore } from './rate-limiting/redis-store.js';
+export { computeChainHash, GENESIS_HASH } from './audit/chain.js';
+export { tryLoadOtel, SpanStatusCode } from './observability/otel.js';
+export type { VetoTracer, VetoSpan } from './observability/otel.js';
+export { runTests } from './testing/runner.js';
+export type { RunTestsOptions } from './testing/runner.js';
+export type { VetoTestCase, VetoTestSuite, VetoTestResult, VetoTestRunResult, } from './testing/types.js';
 export { init, isInitialized } from './cli/init.js';
+export { VetoAdmin, VetoAdminError } from './admin/client.js';
+export type { VetoAdminOptions, Policy, Constraint, OutputRule as AdminOutputRule, LlmConfig, SessionConstraints as AdminSessionConstraints, CreatePolicyInput, UpdatePolicyInput, Decision, DecisionQuery, DecisionStats, PaginatedResult, Approval, Tool as AdminTool, PolicyDraft, CreatePolicyDraftInput, McpUpstream, CreateUpstreamInput, UpstreamTestResult, ApiKeyInfo, ApiKeyCreated, VetoAdminEvent, EventSubscription, } from './admin/types.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAGH,OAAO,EACL,IAAI,EACJ,mBAAmB,EACnB,KAAK,WAAW,EAChB,KAAK,QAAQ,EACb,KAAK,cAAc,EACnB,KAAK,YAAY,EACjB,KAAK,cAAc,EACnB,KAAK,YAAY,EACjB,KAAK,WAAW,GACjB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,OAAO,EACP,KAAK,cAAc,EACnB,KAAK,WAAW,GACjB,MAAM,mBAAmB,CAAC;AAG3B,YAAY,EACV,cAAc,EACd,QAAQ,EACR,UAAU,EACV,WAAW,EACX,cAAc,EACd,eAAe,EACf,cAAc,EACd,kBAAkB,GACnB,MAAM,iBAAiB,CAAC;AAEzB,YAAY,EACV,QAAQ,EACR,aAAa,EACb,kBAAkB,EAClB,gBAAgB,EAChB,iBAAiB,EACjB,SAAS,EACT,cAAc,EACd,oBAAoB,EACpB,oBAAoB,EACpB,oBAAoB,GACrB,MAAM,mBAAmB,CAAC;AAG3B,YAAY,EACV,IAAI,EACJ,OAAO,EACP,aAAa,EACb,eAAe,EACf,UAAU,EACV,UAAU,EACV,gBAAgB,EAChB,YAAY,EACZ,qBAAqB,GACtB,MAAM,kBAAkB,CAAC;AAG1B,YAAY,EACV,YAAY,EACZ,cAAc,EACd,cAAc,EACd,cAAc,GACf,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAGlD,YAAY,EACV,eAAe,EACf,uBAAuB,EACvB,gBAAgB,EAChB,YAAY,EACZ,mBAAmB,EACnB,YAAY,GACb,MAAM,kBAAkB,CAAC;AAG1B,YAAY,EACV,kBAAkB,EAClB,kBAAkB,EAClB,oBAAoB,EACpB,eAAe,EACf,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAG1E,YAAY,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC/E,YAAY,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACtD,YAAY,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AACzE,YAAY,EACV,kBAAkB,EAClB,gBAAgB,EAChB,oBAAoB,EACpB,iBAAiB,GAClB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,kBAAkB,EAClB,sBAAsB,EACtB,oBAAoB,EACpB,gBAAgB,EAChB,yBAAyB,GAC1B,MAAM,kBAAkB,CAAC;AAG1B,OAAO,EACL,aAAa,EACb,mBAAmB,EACnB,KAAK,YAAY,EACjB,KAAK,WAAW,EAChB,KAAK,YAAY,GAClB,MAAM,kBAAkB,CAAC;AAG1B,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,mBAAmB,EACnB,kBAAkB,EAClB,kBAAkB,EAClB,uBAAuB,EACvB,sBAAsB,EACtB,sBAAsB,GACvB,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EACV,eAAe,EACf,qBAAqB,EACrB,oBAAoB,EACpB,gBAAgB,EAChB,YAAY,EACZ,iBAAiB,EACjB,WAAW,EACX,oBAAoB,EACpB,oBAAoB,EACpB,oBAAoB,EACpB,oBAAoB,EACpB,WAAW,EACX,iBAAiB,EACjB,wBAAwB,GACzB,MAAM,qBAAqB,CAAC;AAG7B,OAAO,EACL,QAAQ,EACR,UAAU,EACV,kBAAkB,EAClB,aAAa,EACb,WAAW,EACX,aAAa,EACb,oBAAoB,EACpB,gBAAgB,EAChB,YAAY,EACZ,sBAAsB,EACtB,KAAK,EACL,OAAO,EACP,eAAe,EACf,UAAU,EACV,SAAS,EACT,yBAAyB,GAC1B,MAAM,yBAAyB,CAAC;AAEjC,YAAY,EACV,UAAU,EACV,cAAc,EACd,aAAa,EACb,gBAAgB,EAChB,UAAU,EACV,kBAAkB,EAClB,OAAO,EACP,eAAe,EACf,aAAa,EACb,eAAe,GAChB,MAAM,sBAAsB,CAAC;AAG9B,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AACnE,YAAY,EAAE,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAGjF,OAAO,EACL,eAAe,EACf,kBAAkB,EAClB,0BAA0B,EAC1B,6BAA6B,EAC7B,6BAA6B,EAC7B,0BAA0B,EAC1B,oBAAoB,EACpB,uBAAuB,GACxB,MAAM,qBAAqB,CAAC;AAG7B,OAAO,EACL,eAAe,EACf,KAAK,iBAAiB,EACtB,KAAK,sBAAsB,GAC5B,MAAM,yBAAyB,CAAC;AAGjC,OAAO,EACL,oBAAoB,EACpB,iBAAiB,IAAI,wBAAwB,EAC7C,gBAAgB,IAAI,qBAAqB,EACzC,KAAK,eAAe,GACrB,MAAM,4BAA4B,CAAC;AAGpC,OAAO,EACL,2BAA2B,EAC3B,qBAAqB,EACrB,sBAAsB,EACtB,oBAAoB,EACpB,oBAAoB,EACpB,0BAA0B,EAC1B,mBAAmB,EACnB,KAAK,sBAAsB,EAC3B,KAAK,0BAA0B,GAChC,MAAM,uBAAuB,CAAC;AAG/B,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAGH,OAAO,EACL,IAAI,EACJ,mBAAmB,EACnB,KAAK,WAAW,EAChB,KAAK,QAAQ,EACb,KAAK,cAAc,EACnB,KAAK,YAAY,EACjB,KAAK,cAAc,EACnB,KAAK,YAAY,EACjB,KAAK,WAAW,GACjB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,OAAO,EACP,KAAK,cAAc,EACnB,KAAK,WAAW,GACjB,MAAM,mBAAmB,CAAC;AAG3B,YAAY,EACV,cAAc,EACd,QAAQ,EACR,UAAU,EACV,WAAW,EACX,cAAc,EACd,eAAe,EACf,cAAc,EACd,kBAAkB,GACnB,MAAM,iBAAiB,CAAC;AAEzB,YAAY,EACV,QAAQ,EACR,aAAa,EACb,kBAAkB,EAClB,gBAAgB,EAChB,iBAAiB,EACjB,SAAS,EACT,cAAc,EACd,oBAAoB,EACpB,oBAAoB,EACpB,oBAAoB,GACrB,MAAM,mBAAmB,CAAC;AAG3B,YAAY,EACV,IAAI,EACJ,OAAO,EACP,aAAa,EACb,eAAe,EACf,UAAU,EACV,UAAU,EACV,gBAAgB,EAChB,YAAY,EACZ,qBAAqB,EACrB,cAAc,GACf,MAAM,kBAAkB,CAAC;AAG1B,YAAY,EACV,YAAY,EACZ,cAAc,EACd,cAAc,EACd,cAAc,GACf,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAGlD,YAAY,EACV,eAAe,EACf,uBAAuB,EACvB,gBAAgB,EAChB,YAAY,EACZ,mBAAmB,EACnB,YAAY,GACb,MAAM,kBAAkB,CAAC;AAG1B,YAAY,EACV,kBAAkB,EAClB,kBAAkB,EAClB,oBAAoB,EACpB,eAAe,EACf,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAG1E,YAAY,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC/E,YAAY,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACtD,YAAY,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AACzE,YAAY,EACV,kBAAkB,EAClB,gBAAgB,EAChB,oBAAoB,EACpB,iBAAiB,GAClB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,kBAAkB,EAClB,sBAAsB,EACtB,oBAAoB,EACpB,gBAAgB,EAChB,yBAAyB,GAC1B,MAAM,kBAAkB,CAAC;AAG1B,OAAO,EACL,aAAa,EACb,mBAAmB,EACnB,KAAK,YAAY,EACjB,KAAK,WAAW,EAChB,KAAK,YAAY,GAClB,MAAM,kBAAkB,CAAC;AAG1B,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,mBAAmB,EACnB,kBAAkB,EAClB,kBAAkB,EAClB,uBAAuB,EACvB,sBAAsB,EACtB,sBAAsB,GACvB,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EACV,eAAe,EACf,qBAAqB,EACrB,oBAAoB,EACpB,gBAAgB,EAChB,YAAY,EACZ,iBAAiB,EACjB,WAAW,EACX,oBAAoB,EACpB,oBAAoB,EACpB,oBAAoB,EACpB,oBAAoB,EACpB,WAAW,EACX,iBAAiB,EACjB,wBAAwB,GACzB,MAAM,qBAAqB,CAAC;AAG7B,OAAO,EACL,QAAQ,EACR,UAAU,EACV,kBAAkB,EAClB,aAAa,EACb,WAAW,EACX,aAAa,EACb,oBAAoB,EACpB,gBAAgB,EAChB,YAAY,EACZ,sBAAsB,EACtB,KAAK,EACL,OAAO,EACP,eAAe,EACf,UAAU,EACV,SAAS,EACT,yBAAyB,GAC1B,MAAM,yBAAyB,CAAC;AAEjC,YAAY,EACV,UAAU,EACV,cAAc,EACd,aAAa,EACb,gBAAgB,EAChB,UAAU,EACV,kBAAkB,EAClB,OAAO,EACP,eAAe,EACf,aAAa,EACb,eAAe,GAChB,MAAM,sBAAsB,CAAC;AAG9B,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AACnE,YAAY,EAAE,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAGjF,OAAO,EACL,eAAe,EACf,kBAAkB,EAClB,0BAA0B,EAC1B,6BAA6B,EAC7B,6BAA6B,EAC7B,0BAA0B,EAC1B,oBAAoB,EACpB,uBAAuB,GACxB,MAAM,qBAAqB,CAAC;AAG7B,OAAO,EACL,eAAe,EACf,KAAK,iBAAiB,EACtB,KAAK,sBAAsB,GAC5B,MAAM,yBAAyB,CAAC;AAGjC,OAAO,EACL,oBAAoB,EACpB,iBAAiB,IAAI,wBAAwB,EAC7C,gBAAgB,IAAI,qBAAqB,EACzC,KAAK,eAAe,GACrB,MAAM,4BAA4B,CAAC;AAGpC,OAAO,EACL,2BAA2B,EAC3B,qBAAqB,EACrB,sBAAsB,EACtB,oBAAoB,EACpB,oBAAoB,EACpB,0BAA0B,EAC1B,mBAAmB,EACnB,KAAK,sBAAsB,EAC3B,KAAK,0BAA0B,GAChC,MAAM,uBAAuB,CAAC;AAG/B,YAAY,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AAGrE,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAGlE,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACtE,YAAY,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AAGpE,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAC/C,YAAY,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAC3D,YAAY,EACV,YAAY,EACZ,aAAa,EACb,cAAc,EACd,iBAAiB,GAClB,MAAM,oBAAoB,CAAC;AAG5B,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAGpD,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAC9D,YAAY,EACV,gBAAgB,EAChB,MAAM,EACN,UAAU,EACV,UAAU,IAAI,eAAe,EAC7B,SAAS,EACT,kBAAkB,IAAI,uBAAuB,EAC7C,iBAAiB,EACjB,iBAAiB,EACjB,QAAQ,EACR,aAAa,EACb,aAAa,EACb,eAAe,EACf,QAAQ,EACR,IAAI,IAAI,SAAS,EACjB,WAAW,EACX,sBAAsB,EACtB,WAAW,EACX,mBAAmB,EACnB,kBAAkB,EAClB,UAAU,EACV,aAAa,EACb,cAAc,EACd,iBAAiB,GAClB,MAAM,kBAAkB,CAAC"}

package/dist/index.js

@@ -53,6 +53,15 @@ export { extractEntities, } from './extractors/content.js';
 export { evaluateRulesLocally, evaluateCondition as evaluateConditionLocally, resolveFieldPath as resolveLocalFieldPath, } from './rules/local-evaluator.js';
 // Policy generator utilities
 export { BROWSER_AGENT_SYSTEM_PROMPT, getPolicyOutputSchema, sanitizeGeneratedRules, validatePolicyOutput, tryInstantGeneration, looksLikePolicyDeclaration, reviewPolicyRequest, } from './policy/generator.js';
+export { RedisRateLimitStore } from './rate-limiting/redis-store.js';
+// Audit chain
+export { computeChainHash, GENESIS_HASH } from './audit/chain.js';
+// Observability
+export { tryLoadOtel, SpanStatusCode } from './observability/otel.js';
+// Testing
+export { runTests } from './testing/runner.js';
 // CLI init function (for programmatic use)
 export { init, isInitialized } from './cli/init.js';
+// Admin management client
+export { VetoAdmin, VetoAdminError } from './admin/client.js';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,cAAc;AACd,OAAO,EACL,IAAI,EACJ,mBAAmB,GAQpB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,OAAO,GAGR,MAAM,mBAAmB,CAAC;AA+C3B,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAqBlD,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAY1E,OAAO,EACL,kBAAkB,EAClB,sBAAsB,EACtB,oBAAoB,EACpB,gBAAgB,EAChB,yBAAyB,GAC1B,MAAM,kBAAkB,CAAC;AAE1B,qDAAqD;AACrD,OAAO,EACL,aAAa,EACb,mBAAmB,GAIpB,MAAM,kBAAkB,CAAC;AAE1B,0CAA0C;AAC1C,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,mBAAmB,EACnB,kBAAkB,EAClB,kBAAkB,EAClB,uBAAuB,EACvB,sBAAsB,EACtB,sBAAsB,GACvB,MAAM,qBAAqB,CAAC;AAkB7B,8DAA8D;AAC9D,OAAO,EACL,QAAQ,EACR,UAAU,EACV,kBAAkB,EAClB,aAAa,EACb,WAAW,EACX,aAAa,EACb,oBAAoB,EACpB,gBAAgB,EAChB,YAAY,EACZ,sBAAsB,EACtB,KAAK,EACL,OAAO,EACP,eAAe,EACf,UAAU,EACV,SAAS,EACT,yBAAyB,GAC1B,MAAM,yBAAyB,CAAC;AAejC,0CAA0C;AAC1C,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAGnE,sEAAsE;AACtE,OAAO,EACL,eAAe,EACf,kBAAkB,EAClB,0BAA0B,EAC1B,6BAA6B,EAC7B,6BAA6B,EAC7B,0BAA0B,EAC1B,oBAAoB,EACpB,uBAAuB,GACxB,MAAM,qBAAqB,CAAC;AAE7B,qBAAqB;AACrB,OAAO,EACL,eAAe,GAGhB,MAAM,yBAAyB,CAAC;AAEjC,uBAAuB;AACvB,OAAO,EACL,oBAAoB,EACpB,iBAAiB,IAAI,wBAAwB,EAC7C,gBAAgB,IAAI,qBAAqB,GAE1C,MAAM,4BAA4B,CAAC;AAEpC,6BAA6B;AAC7B,OAAO,EACL,2BAA2B,EAC3B,qBAAqB,EACrB,sBAAsB,EACtB,oBAAoB,EACpB,oBAAoB,EACpB,0BAA0B,EAC1B,mBAAmB,GAGpB,MAAM,uBAAuB,CAAC;AAE/B,2CAA2C;AAC3C,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,cAAc;AACd,OAAO,EACL,IAAI,EACJ,mBAAmB,GAQpB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,OAAO,GAGR,MAAM,mBAAmB,CAAC;AAgD3B,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAqBlD,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAY1E,OAAO,EACL,kBAAkB,EAClB,sBAAsB,EACtB,oBAAoB,EACpB,gBAAgB,EAChB,yBAAyB,GAC1B,MAAM,kBAAkB,CAAC;AAE1B,qDAAqD;AACrD,OAAO,EACL,aAAa,EACb,mBAAmB,GAIpB,MAAM,kBAAkB,CAAC;AAE1B,0CAA0C;AAC1C,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,mBAAmB,EACnB,kBAAkB,EAClB,kBAAkB,EAClB,uBAAuB,EACvB,sBAAsB,EACtB,sBAAsB,GACvB,MAAM,qBAAqB,CAAC;AAkB7B,8DAA8D;AAC9D,OAAO,EACL,QAAQ,EACR,UAAU,EACV,kBAAkB,EAClB,aAAa,EACb,WAAW,EACX,aAAa,EACb,oBAAoB,EACpB,gBAAgB,EAChB,YAAY,EACZ,sBAAsB,EACtB,KAAK,EACL,OAAO,EACP,eAAe,EACf,UAAU,EACV,SAAS,EACT,yBAAyB,GAC1B,MAAM,yBAAyB,CAAC;AAejC,0CAA0C;AAC1C,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAGnE,sEAAsE;AACtE,OAAO,EACL,eAAe,EACf,kBAAkB,EAClB,0BAA0B,EAC1B,6BAA6B,EAC7B,6BAA6B,EAC7B,0BAA0B,EAC1B,oBAAoB,EACpB,uBAAuB,GACxB,MAAM,qBAAqB,CAAC;AAE7B,qBAAqB;AACrB,OAAO,EACL,eAAe,GAGhB,MAAM,yBAAyB,CAAC;AAEjC,uBAAuB;AACvB,OAAO,EACL,oBAAoB,EACpB,iBAAiB,IAAI,wBAAwB,EAC7C,gBAAgB,IAAI,qBAAqB,GAE1C,MAAM,4BAA4B,CAAC;AAEpC,6BAA6B;AAC7B,OAAO,EACL,2BAA2B,EAC3B,qBAAqB,EACrB,sBAAsB,EACtB,oBAAoB,EACpB,oBAAoB,EACpB,0BAA0B,EAC1B,mBAAmB,GAGpB,MAAM,uBAAuB,CAAC;AAI/B,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AAErE,cAAc;AACd,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAElE,gBAAgB;AAChB,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAGtE,UAAU;AACV,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAS/C,2CAA2C;AAC3C,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAEpD,0BAA0B;AAC1B,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC"}

package/dist/integrations/langchain/middleware.d.ts

@@ -28,7 +28,7 @@ export interface VetoLangChainMiddlewareOptions {
  * const veto = await Veto.init();
  *
  * const agent = createAgent({
- *   model: 'openai:gpt-4o',
+ *   model: 'openai:gpt-5.4',
  *   tools: [searchTool, emailTool],
  *   middleware: [createVetoLangChainMiddleware(veto)],
  * });

package/dist/integrations/langchain/middleware.js

@@ -18,7 +18,7 @@ import { generateToolCallId } from '../../utils/id.js';
  * const veto = await Veto.init();
  *
  * const agent = createAgent({
- *   model: 'openai:gpt-4o',
+ *   model: 'openai:gpt-5.4',
  *   tools: [searchTool, emailTool],
  *   middleware: [createVetoLangChainMiddleware(veto)],
  * });

package/dist/integrations/vercel-ai/middleware.d.ts

@@ -68,7 +68,7 @@ export interface CreateVetoMiddlewareOptions {
  *
  * const veto = await Veto.init();
  * const model = wrapLanguageModel({
- *   model: openai('gpt-4o'),
+ *   model: openai('gpt-5.4'),
  *   middleware: createVetoMiddleware(veto),
  * });
  *

package/dist/integrations/vercel-ai/middleware.js

@@ -17,7 +17,7 @@ import { generateToolCallId } from '../../utils/id.js';
  *
  * const veto = await Veto.init();
  * const model = wrapLanguageModel({
- *   model: openai('gpt-4o'),
+ *   model: openai('gpt-5.4'),
  *   middleware: createVetoMiddleware(veto),
  * });
  *

package/dist/observability/otel.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Optional OpenTelemetry integration.
+ *
+ * Uses dynamic import so @opentelemetry/api is a zero-cost optional peer dep.
+ * If not installed, all functions return no-ops.
+ */
+export interface VetoTracer {
+    startSpan(name: string): VetoSpan;
+}
+export interface VetoSpan {
+    setAttribute(key: string, value: string | number | boolean): void;
+    setStatus(status: {
+        code: number;
+        message?: string;
+    }): void;
+    end(): void;
+}
+export declare const SpanStatusCode: {
+    readonly OK: 1;
+    readonly ERROR: 2;
+};
+/**
+ * Attempt to load @opentelemetry/api. Returns a VetoTracer wrapping the real
+ * tracer, or a no-op tracer if the package is not installed.
+ *
+ * Call once during Veto.init() and store the result.
+ */
+export declare function tryLoadOtel(serviceName?: string): Promise<VetoTracer>;
+//# sourceMappingURL=otel.d.ts.map

package/dist/observability/otel.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"otel.d.ts","sourceRoot":"","sources":["../../src/observability/otel.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,WAAW,UAAU;IACzB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,QAAQ,CAAC;CACnC;AAED,MAAM,WAAW,QAAQ;IACvB,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC;IAClE,SAAS,CAAC,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAC5D,GAAG,IAAI,IAAI,CAAC;CACb;AAGD,eAAO,MAAM,cAAc;;;CAA+B,CAAC;AAY3D;;;;;GAKG;AACH,wBAAsB,WAAW,CAAC,WAAW,SAAa,GAAG,OAAO,CAAC,UAAU,CAAC,CAkB/E"}

package/dist/observability/otel.js

@@ -0,0 +1,43 @@
+/**
+ * Optional OpenTelemetry integration.
+ *
+ * Uses dynamic import so @opentelemetry/api is a zero-cost optional peer dep.
+ * If not installed, all functions return no-ops.
+ */
+// Canonical OTEL status codes (avoid importing from @opentelemetry/api directly)
+export const SpanStatusCode = { OK: 1, ERROR: 2 };
+const noopSpan = {
+    setAttribute() { },
+    setStatus() { },
+    end() { },
+};
+const noopTracer = {
+    startSpan() { return noopSpan; },
+};
+/**
+ * Attempt to load @opentelemetry/api. Returns a VetoTracer wrapping the real
+ * tracer, or a no-op tracer if the package is not installed.
+ *
+ * Call once during Veto.init() and store the result.
+ */
+export async function tryLoadOtel(serviceName = 'veto-sdk') {
+    try {
+        // Dynamic import — works in Node.js 20+ ESM. Throws ERR_MODULE_NOT_FOUND if not installed.
+        const api = await import('@opentelemetry/api');
+        const tracer = api.trace.getTracer(serviceName);
+        return {
+            startSpan(name) {
+                const span = tracer.startSpan(name);
+                return {
+                    setAttribute(key, value) { span.setAttribute(key, value); },
+                    setStatus(status) { span.setStatus(status); },
+                    end() { span.end(); },
+                };
+            },
+        };
+    }
+    catch {
+        return noopTracer;
+    }
+}
+//# sourceMappingURL=otel.js.map

package/dist/observability/otel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"otel.js","sourceRoot":"","sources":["../../src/observability/otel.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAYH,iFAAiF;AACjF,MAAM,CAAC,MAAM,cAAc,GAAG,EAAE,EAAE,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAW,CAAC;AAE3D,MAAM,QAAQ,GAAa;IACzB,YAAY,KAAI,CAAC;IACjB,SAAS,KAAI,CAAC;IACd,GAAG,KAAI,CAAC;CACT,CAAC;AAEF,MAAM,UAAU,GAAe;IAC7B,SAAS,KAAK,OAAO,QAAQ,CAAC,CAAC,CAAC;CACjC,CAAC;AAEF;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,WAAW,GAAG,UAAU;IACxD,IAAI,CAAC;QACH,2FAA2F;QAC3F,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;QAC/C,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QAChD,OAAO;YACL,SAAS,CAAC,IAAY;gBACpB,MAAM,IAAI,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;gBACpC,OAAO;oBACL,YAAY,CAAC,GAAG,EAAE,KAAK,IAAI,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;oBAC3D,SAAS,CAAC,MAAM,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;oBAC7C,GAAG,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;iBACtB,CAAC;YACJ,CAAC;SACF,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,UAAU,CAAC;IACpB,CAAC;AACH,CAAC"}

package/dist/proxy/anthropic-interceptor.d.ts

@@ -0,0 +1,51 @@
+/**
+ * SSE stream interceptor for Anthropic Messages API.
+ *
+ * Anthropic SSE differs from OpenAI: events carry an `event:` type line
+ * followed by a `data:` JSON line. Tool calls arrive as content blocks
+ * (content_block_start → content_block_delta → content_block_stop) and
+ * the input JSON is streamed as partial fragments across deltas.
+ *
+ * @module proxy/anthropic-interceptor
+ */
+export interface AnthropicPendingToolUse {
+    index: number;
+    id: string;
+    name: string;
+    inputRaw: string;
+}
+export interface AnthropicSSELineResult {
+    line: string;
+    eventType?: string;
+    data?: Record<string, unknown> | null;
+    hasToolUse?: boolean;
+    toolUseStop?: boolean;
+    messageStop?: boolean;
+}
+/**
+ * Parse buffered SSE lines (an event: + data: pair) into a structured result.
+ * Anthropic sends `event: <type>\ndata: <json>` pairs.
+ */
+export declare function parseAnthropicSSELines(lines: string[]): AnthropicSSELineResult;
+/**
+ * Merge tool use data from Anthropic SSE events into the pending map.
+ *
+ * - content_block_start with type=tool_use: create a new pending entry
+ * - content_block_delta with type=input_json_delta: append partial_json
+ * - content_block_stop: no-op (signals block completion)
+ */
+export declare function mergeAnthropicToolUseDelta(pending: Map<number, AnthropicPendingToolUse>, data: Record<string, unknown>, eventType: string): void;
+/**
+ * Parse the accumulated input JSON into an arguments object.
+ */
+export declare function finalizeAnthropicToolUse(tc: AnthropicPendingToolUse): {
+    name: string;
+    id: string;
+    arguments: Record<string, unknown>;
+};
+/**
+ * Synthesize Anthropic SSE events that replace a tool_use block with a
+ * text block containing the block reason, followed by message_stop.
+ */
+export declare function synthAnthropicBlockedEvent(reason: string): string;
+//# sourceMappingURL=anthropic-interceptor.d.ts.map

package/dist/proxy/anthropic-interceptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"anthropic-interceptor.d.ts","sourceRoot":"","sources":["../../src/proxy/anthropic-interceptor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,MAAM,WAAW,uBAAuB;IACtC,KAAK,EAAE,MAAM,CAAC;IACd,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACtC,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,sBAAsB,CA2C9E;AAED;;;;;;GAMG;AACH,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,uBAAuB,CAAC,EAC7C,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,SAAS,EAAE,MAAM,GAChB,IAAI,CAqBN;AAED;;GAEG;AACH,wBAAgB,wBAAwB,CAAC,EAAE,EAAE,uBAAuB,GAAG;IACrE,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC,CAWA;AAED;;;GAGG;AACH,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAwBjE"}

package/dist/proxy/anthropic-interceptor.js

@@ -0,0 +1,132 @@
+/**
+ * SSE stream interceptor for Anthropic Messages API.
+ *
+ * Anthropic SSE differs from OpenAI: events carry an `event:` type line
+ * followed by a `data:` JSON line. Tool calls arrive as content blocks
+ * (content_block_start → content_block_delta → content_block_stop) and
+ * the input JSON is streamed as partial fragments across deltas.
+ *
+ * @module proxy/anthropic-interceptor
+ */
+/**
+ * Parse buffered SSE lines (an event: + data: pair) into a structured result.
+ * Anthropic sends `event: <type>\ndata: <json>` pairs.
+ */
+export function parseAnthropicSSELines(lines) {
+    let eventType;
+    let dataStr;
+    const raw = lines.join('\n');
+    for (const line of lines) {
+        if (line.startsWith('event: ')) {
+            eventType = line.slice(7).trim();
+        }
+        else if (line.startsWith('data: ')) {
+            dataStr = line.slice(6);
+        }
+    }
+    if (!dataStr) {
+        return { line: raw, eventType };
+    }
+    let data = null;
+    try {
+        data = JSON.parse(dataStr);
+    }
+    catch {
+        return { line: raw, eventType };
+    }
+    let hasToolUse = false;
+    let toolUseStop = false;
+    const messageStop = eventType === 'message_stop';
+    if (eventType === 'content_block_start') {
+        const block = data['content_block'];
+        if (block && block['type'] === 'tool_use') {
+            hasToolUse = true;
+        }
+    }
+    else if (eventType === 'content_block_delta') {
+        const delta = data['delta'];
+        if (delta && delta['type'] === 'input_json_delta') {
+            hasToolUse = true;
+        }
+    }
+    else if (eventType === 'content_block_stop') {
+        toolUseStop = true;
+    }
+    return { line: raw, eventType, data, hasToolUse, toolUseStop, messageStop };
+}
+/**
+ * Merge tool use data from Anthropic SSE events into the pending map.
+ *
+ * - content_block_start with type=tool_use: create a new pending entry
+ * - content_block_delta with type=input_json_delta: append partial_json
+ * - content_block_stop: no-op (signals block completion)
+ */
+export function mergeAnthropicToolUseDelta(pending, data, eventType) {
+    const index = typeof data['index'] === 'number' ? data['index'] : 0;
+    if (eventType === 'content_block_start') {
+        const block = data['content_block'];
+        if (!block || block['type'] !== 'tool_use')
+            return;
+        pending.set(index, {
+            index,
+            id: typeof block['id'] === 'string' ? block['id'] : '',
+            name: typeof block['name'] === 'string' ? block['name'] : '',
+            inputRaw: '',
+        });
+    }
+    else if (eventType === 'content_block_delta') {
+        const delta = data['delta'];
+        if (!delta || delta['type'] !== 'input_json_delta')
+            return;
+        const existing = pending.get(index);
+        if (existing && typeof delta['partial_json'] === 'string') {
+            existing.inputRaw += delta['partial_json'];
+        }
+    }
+    // content_block_stop: nothing to accumulate
+}
+/**
+ * Parse the accumulated input JSON into an arguments object.
+ */
+export function finalizeAnthropicToolUse(tc) {
+    let args = {};
+    try {
+        const parsed = JSON.parse(tc.inputRaw);
+        if (parsed && typeof parsed === 'object' && !Array.isArray(parsed)) {
+            args = parsed;
+        }
+    }
+    catch {
+        console.warn(`[veto intercept] Malformed tool input for '${tc.name}', validating with empty args`);
+    }
+    return { name: tc.name, id: tc.id, arguments: args };
+}
+/**
+ * Synthesize Anthropic SSE events that replace a tool_use block with a
+ * text block containing the block reason, followed by message_stop.
+ */
+export function synthAnthropicBlockedEvent(reason) {
+    const blockStart = {
+        type: 'content_block_start',
+        index: 0,
+        content_block: { type: 'text', text: '' },
+    };
+    const blockDelta = {
+        type: 'content_block_delta',
+        index: 0,
+        delta: { type: 'text_delta', text: `[BLOCKED by veto] ${reason}` },
+    };
+    const blockStop = {
+        type: 'content_block_stop',
+        index: 0,
+    };
+    return [
+        `event: content_block_start\ndata: ${JSON.stringify(blockStart)}`,
+        `event: content_block_delta\ndata: ${JSON.stringify(blockDelta)}`,
+        `event: content_block_stop\ndata: ${JSON.stringify(blockStop)}`,
+        `event: message_stop\ndata: {}`,
+    ]
+        .map((s) => s + '\n\n')
+        .join('');
+}
+//# sourceMappingURL=anthropic-interceptor.js.map

package/dist/proxy/anthropic-interceptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"anthropic-interceptor.js","sourceRoot":"","sources":["../../src/proxy/anthropic-interceptor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAkBH;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAAe;IACpD,IAAI,SAA6B,CAAC;IAClC,IAAI,OAA2B,CAAC;IAChC,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAE7B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC/B,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACnC,CAAC;aAAM,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YACrC,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IAED,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC;IAClC,CAAC;IAED,IAAI,IAAI,GAAmC,IAAI,CAAC;IAChD,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAA4B,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC;IAClC,CAAC;IAED,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,MAAM,WAAW,GAAG,SAAS,KAAK,cAAc,CAAC;IAEjD,IAAI,SAAS,KAAK,qBAAqB,EAAE,CAAC;QACxC,MAAM,KAAK,GAAG,IAAI,CAAC,eAAe,CAAwC,CAAC;QAC3E,IAAI,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,UAAU,EAAE,CAAC;YAC1C,UAAU,GAAG,IAAI,CAAC;QACpB,CAAC;IACH,CAAC;SAAM,IAAI,SAAS,KAAK,qBAAqB,EAAE,CAAC;QAC/C,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAwC,CAAC;QACnE,IAAI,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,kBAAkB,EAAE,CAAC;YAClD,UAAU,GAAG,IAAI,CAAC;QACpB,CAAC;IACH,CAAC;SAAM,IAAI,SAAS,KAAK,oBAAoB,EAAE,CAAC;QAC9C,WAAW,GAAG,IAAI,CAAC;IACrB,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC;AAC9E,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,0BAA0B,CACxC,OAA6C,EAC7C,IAA6B,EAC7B,SAAiB;IAEjB,MAAM,KAAK,GAAG,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAEpE,IAAI,SAAS,KAAK,qBAAqB,EAAE,CAAC;QACxC,MAAM,KAAK,GAAG,IAAI,CAAC,eAAe,CAAwC,CAAC;QAC3E,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,UAAU;YAAE,OAAO;QACnD,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE;YACjB,KAAK;YACL,EAAE,EAAE,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE;YACtD,IAAI,EAAE,OAAO,KAAK,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE;YAC5D,QAAQ,EAAE,EAAE;SACb,CAAC,CAAC;IACL,CAAC;SAAM,IAAI,SAAS,KAAK,qBAAqB,EAAE,CAAC;QAC/C,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAwC,CAAC;QACnE,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,kBAAkB;YAAE,OAAO;QAC3D,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACpC,IAAI,QAAQ,IAAI,OAAO,KAAK,CAAC,cAAc,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC1D,QAAQ,CAAC,QAAQ,IAAI,KAAK,CAAC,cAAc,CAAW,CAAC;QACvD,CAAC;IACH,CAAC;IACD,4CAA4C;AAC9C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,wBAAwB,CAAC,EAA2B;IAKlE,IAAI,IAAI,GAA4B,EAAE,CAAC;IACvC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC;QACvC,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACnE,IAAI,GAAG,MAAiC,CAAC;QAC3C,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,IAAI,CAAC,8CAA8C,EAAE,CAAC,IAAI,+BAA+B,CAAC,CAAC;IACrG,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;AACvD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,0BAA0B,CAAC,MAAc;IACvD,MAAM,UAAU,GAAG;QACjB,IAAI,EAAE,qBAAqB;QAC3B,KAAK,EAAE,CAAC;QACR,aAAa,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE;KAC1C,CAAC;IACF,MAAM,UAAU,GAAG;QACjB,IAAI,EAAE,qBAAqB;QAC3B,KAAK,EAAE,CAAC;QACR,KAAK,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,qBAAqB,MAAM,EAAE,EAAE;KACnE,CAAC;IACF,MAAM,SAAS,GAAG;QAChB,IAAI,EAAE,oBAAoB;QAC1B,KAAK,EAAE,CAAC;KACT,CAAC;IAEF,OAAO;QACL,qCAAqC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE;QACjE,qCAAqC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE;QACjE,oCAAoC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE;QAC/D,+BAA+B;KAChC;SACE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,MAAM,CAAC;SACtB,IAAI,CAAC,EAAE,CAAC,CAAC;AACd,CAAC"}

package/dist/proxy/interceptor.d.ts

@@ -0,0 +1,55 @@
+/**
+ * SSE stream interceptor for OpenAI chat completions.
+ *
+ * Buffers streaming chunks, assembles tool call arguments, validates
+ * the assembled tool call against Veto policies, then either flushes
+ * the buffer or sends a synthetic error event.
+ *
+ * @module proxy/interceptor
+ */
+/**
+ * A partially assembled tool call from SSE deltas.
+ */
+export interface PendingToolCall {
+    index: number;
+    id: string;
+    name: string;
+    argumentsRaw: string;
+}
+/**
+ * Result of processing one SSE line.
+ */
+export interface SSELineResult {
+    /** Raw line to forward (for passthrough mode) */
+    line: string;
+    /** Parsed JSON data if this is a data line */
+    data?: Record<string, unknown> | null;
+    /** True if this line is `data: [DONE]` */
+    done?: boolean;
+    /** True if this line contains a tool_calls delta */
+    hasToolCalls?: boolean;
+    /** True if finish_reason === "tool_calls" */
+    finishReasonToolCalls?: boolean;
+}
+/** Parse a single SSE line. Returns null for non-data/comment lines. */
+export declare function parseSSELine(line: string): SSELineResult;
+/**
+ * Merge tool call deltas from one SSE chunk into the pending map.
+ * OpenAI streams arguments across multiple chunks.
+ */
+export declare function mergeToolCallDeltas(pending: Map<number, PendingToolCall>, data: Record<string, unknown>): void;
+/**
+ * Parse assembled argument strings into objects.
+ * Returns the tool call with a best-effort parsed arguments object.
+ */
+export declare function finalizeToolCall(tc: PendingToolCall): {
+    name: string;
+    id: string;
+    arguments: Record<string, unknown>;
+};
+/**
+ * Synthesize a blocked response as a valid SSE event.
+ * Sends a finish_reason: "stop" chunk with an error message in the content.
+ */
+export declare function synthBlockedEvent(reason: string, requestId?: string): string;
+//# sourceMappingURL=interceptor.d.ts.map

package/dist/proxy/interceptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"interceptor.d.ts","sourceRoot":"","sources":["../../src/proxy/interceptor.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,iDAAiD;IACjD,IAAI,EAAE,MAAM,CAAC;IACb,8CAA8C;IAC9C,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACtC,0CAA0C;IAC1C,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,oDAAoD;IACpD,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,6CAA6C;IAC7C,qBAAqB,CAAC,EAAE,OAAO,CAAC;CACjC;AAED,wEAAwE;AACxE,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,aAAa,CA2BxD;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,eAAe,CAAC,EACrC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,IAAI,CA8BN;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,eAAe,GAAG;IACrD,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC,CAYA;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,CAa5E"}

package/dist/proxy/interceptor.js

@@ -0,0 +1,111 @@
+/**
+ * SSE stream interceptor for OpenAI chat completions.
+ *
+ * Buffers streaming chunks, assembles tool call arguments, validates
+ * the assembled tool call against Veto policies, then either flushes
+ * the buffer or sends a synthetic error event.
+ *
+ * @module proxy/interceptor
+ */
+/** Parse a single SSE line. Returns null for non-data/comment lines. */
+export function parseSSELine(line) {
+    if (line === 'data: [DONE]')
+        return { line, done: true };
+    if (!line.startsWith('data: '))
+        return { line };
+    const jsonStr = line.slice(6);
+    let data;
+    try {
+        data = JSON.parse(jsonStr);
+    }
+    catch {
+        return { line };
+    }
+    const choices = Array.isArray(data['choices']) ? data['choices'] : [];
+    let hasToolCalls = false;
+    let finishReasonToolCalls = false;
+    for (const choice of choices) {
+        if (typeof choice !== 'object' || choice === null)
+            continue;
+        const c = choice;
+        if (c['finish_reason'] === 'tool_calls')
+            finishReasonToolCalls = true;
+        const delta = c['delta'];
+        if (delta && Array.isArray(delta['tool_calls']) && delta['tool_calls'].length > 0) {
+            hasToolCalls = true;
+        }
+    }
+    return { line, data, hasToolCalls, finishReasonToolCalls };
+}
+/**
+ * Merge tool call deltas from one SSE chunk into the pending map.
+ * OpenAI streams arguments across multiple chunks.
+ */
+export function mergeToolCallDeltas(pending, data) {
+    const choices = Array.isArray(data['choices']) ? data['choices'] : [];
+    for (const choice of choices) {
+        if (typeof choice !== 'object' || choice === null)
+            continue;
+        const c = choice;
+        const delta = c['delta'];
+        if (!delta || !Array.isArray(delta['tool_calls']))
+            continue;
+        for (const tc of delta['tool_calls']) {
+            const idx = typeof tc['index'] === 'number' ? tc['index'] : 0;
+            if (!pending.has(idx)) {
+                pending.set(idx, {
+                    index: idx,
+                    id: typeof tc['id'] === 'string' ? tc['id'] : '',
+                    name: typeof tc['function']?.['name'] === 'string'
+                        ? tc['function']['name']
+                        : '',
+                    argumentsRaw: '',
+                });
+            }
+            const existing = pending.get(idx);
+            const fn = tc['function'];
+            if (fn && typeof fn['name'] === 'string' && fn['name'] && !existing.name) {
+                existing.name = fn['name'];
+            }
+            if (fn && typeof fn['arguments'] === 'string') {
+                existing.argumentsRaw += fn['arguments'];
+            }
+        }
+    }
+}
+/**
+ * Parse assembled argument strings into objects.
+ * Returns the tool call with a best-effort parsed arguments object.
+ */
+export function finalizeToolCall(tc) {
+    let args = {};
+    try {
+        const parsed = JSON.parse(tc.argumentsRaw);
+        if (parsed && typeof parsed === 'object' && !Array.isArray(parsed)) {
+            args = parsed;
+        }
+    }
+    catch {
+        console.warn(`[veto intercept] Malformed tool arguments for '${tc.name}', validating with empty args`);
+    }
+    return { name: tc.name, id: tc.id, arguments: args };
+}
+/**
+ * Synthesize a blocked response as a valid SSE event.
+ * Sends a finish_reason: "stop" chunk with an error message in the content.
+ */
+export function synthBlockedEvent(reason, requestId) {
+    const chunk = {
+        id: requestId ?? 'veto-blocked',
+        object: 'chat.completion.chunk',
+        choices: [
+            {
+                index: 0,
+                delta: { role: 'assistant', content: `[BLOCKED by veto] ${reason}` },
+                finish_reason: 'stop',
+            },
+        ],
+    };
+    return `data: ${JSON.stringify(chunk)}\n\ndata: [DONE]\n\n`;
+}
+//# sourceMappingURL=interceptor.js.map

package/dist/proxy/interceptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"interceptor.js","sourceRoot":"","sources":["../../src/proxy/interceptor.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AA4BH,wEAAwE;AACxE,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,IAAI,IAAI,KAAK,cAAc;QAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACzD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAEhD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC9B,IAAI,IAA6B,CAAC;IAClC,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAA4B,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,IAAI,EAAE,CAAC;IAClB,CAAC;IAED,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACtE,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,IAAI,qBAAqB,GAAG,KAAK,CAAC;IAElC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI;YAAE,SAAS;QAC5D,MAAM,CAAC,GAAG,MAAiC,CAAC;QAC5C,IAAI,CAAC,CAAC,eAAe,CAAC,KAAK,YAAY;YAAE,qBAAqB,GAAG,IAAI,CAAC;QACtE,MAAM,KAAK,GAAG,CAAC,CAAC,OAAO,CAAwC,CAAC;QAChE,IAAI,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,IAAK,KAAK,CAAC,YAAY,CAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACjG,YAAY,GAAG,IAAI,CAAC;QACtB,CAAC;IACH,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,qBAAqB,EAAE,CAAC;AAC7D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CACjC,OAAqC,EACrC,IAA6B;IAE7B,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACtE,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI;YAAE,SAAS;QAC5D,MAAM,CAAC,GAAG,MAAiC,CAAC;QAC5C,MAAM,KAAK,GAAG,CAAC,CAAC,OAAO,CAAwC,CAAC;QAChE,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YAAE,SAAS;QAE5D,KAAK,MAAM,EAAE,IAAI,KAAK,CAAC,YAAY,CAA8B,EAAE,CAAC;YAClE,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9D,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBACtB,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE;oBACf,KAAK,EAAE,GAAG;oBACV,EAAE,EAAE,OAAO,EAAE,CAAC,IAAI,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE;oBAChD,IAAI,EAAE,OAAQ,EAAE,CAAC,UAAU,CAAyC,EAAE,CAAC,MAAM,CAAC,KAAK,QAAQ;wBACzF,CAAC,CAAE,EAAE,CAAC,UAAU,CAA6B,CAAC,MAAM,CAAW;wBAC/D,CAAC,CAAC,EAAE;oBACN,YAAY,EAAE,EAAE;iBACjB,CAAC,CAAC;YACL,CAAC;YACD,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAE,CAAC;YACnC,MAAM,EAAE,GAAG,EAAE,CAAC,UAAU,CAAwC,CAAC;YACjE,IAAI,EAAE,IAAI,OAAO,EAAE,CAAC,MAAM,CAAC,KAAK,QAAQ,IAAI,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACzE,QAAQ,CAAC,IAAI,GAAG,EAAE,CAAC,MAAM,CAAW,CAAC;YACvC,CAAC;YACD,IAAI,EAAE,IAAI,OAAO,EAAE,CAAC,WAAW,CAAC,KAAK,QAAQ,EAAE,CAAC;gBAC9C,QAAQ,CAAC,YAAY,IAAI,EAAE,CAAC,WAAW,CAAW,CAAC;YACrD,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,EAAmB;IAKlD,IAAI,IAAI,GAA4B,EAAE,CAAC;IACvC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC;QAC3C,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACnE,IAAI,GAAG,MAAiC,CAAC;QAC3C,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QAEP,OAAO,CAAC,IAAI,CAAC,kDAAkD,EAAE,CAAC,IAAI,+BAA+B,CAAC,CAAC;IACzG,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;AACvD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAc,EAAE,SAAkB;IAClE,MAAM,KAAK,GAAG;QACZ,EAAE,EAAE,SAAS,IAAI,cAAc;QAC/B,MAAM,EAAE,uBAAuB;QAC/B,OAAO,EAAE;YACP;gBACE,KAAK,EAAE,CAAC;gBACR,KAAK,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,qBAAqB,MAAM,EAAE,EAAE;gBACpE,aAAa,EAAE,MAAM;aACtB;SACF;KACF,CAAC;IACF,OAAO,SAAS,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,sBAAsB,CAAC;AAC9D,CAAC"}

package/dist/proxy/server.d.ts

@@ -0,0 +1,21 @@
+/**
+ * veto intercept — HTTP proxy for OpenAI and Anthropic streaming APIs.
+ *
+ * Intercepts tool calls in streaming responses (SSE format) and validates
+ * them against Veto policies before forwarding to the client.
+ *
+ * Architecture — full buffering:
+ *   1. Non-tool-call responses → passthrough chunks as they arrive
+ *   2. Tool-call responses → buffer all chunks until stream signals completion
+ *   3. Validate assembled tool call → allow (flush buffer) or block (synthetic error)
+ *   4. Buffer overflow (> maxBufferBytes) → flush + passthrough, skip validation
+ *
+ * @module proxy/server
+ */
+import type { ProxyConfig } from './types.js';
+/**
+ * Start the veto intercept proxy server.
+ * Returns a cleanup function that stops the server and destroys the Veto instance.
+ */
+export declare function startProxyServer(config: ProxyConfig): Promise<() => Promise<void>>;
+//# sourceMappingURL=server.d.ts.map

package/dist/proxy/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/proxy/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAKH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AA4kB9C;;;GAGG;AACH,wBAAsB,gBAAgB,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,CAuBxF"}