veto-sdk 2.8.6 → 2.9.1

package/README.md

@@ -65,6 +65,65 @@ rules:
 
 Actions are `block`, `allow`, `warn`, `log`, and `require_approval`.
 
+## Runtime adapters
+
+All adapters are dependency-free TypeScript surfaces unless noted; provider-specific schemas reuse the SDK provider adapters.
+
+| Runtime                 | Import                                | Artifact                                     | Status         |
+| ----------------------- | ------------------------------------- | -------------------------------------------- | -------------- |
+| Provider-agnostic tools | `veto-sdk`                            | `protect(tools)`, `Veto.wrap()`              | Canonical path |
+| Vercel AI SDK           | `veto-sdk/integrations/vercel-ai`     | middleware + guard helper                    | Supported      |
+| OpenAI Agents           | `veto-sdk/integrations/openai-agents` | input/output/tool guardrails + guard helper  | Supported      |
+| LangChain / LangGraph   | `veto-sdk/integrations/langchain`     | middleware, ToolNode, callback, guard helper | Supported      |
+| MCP                     | `veto-sdk/providers/adapters`         | MCP conversion + `Veto.wrapMCPTools()`       | Supported      |
+| Browser Use             | `veto-sdk/integrations/browser-use`   | action wrapping                              | Supported      |
+| OpenClaw                | `veto-sdk/integrations/openclaw`      | before/after tool hooks                      | Supported      |
+| Claude SDK              | `veto-sdk/integrations/claude-sdk`    | Anthropic tool/tool-use helpers              | Added P2       |
+| Google ADK              | `veto-sdk/integrations/google-adk`    | function declarations/calls                  | Added P2       |
+| Mastra                  | `veto-sdk/integrations/mastra`        | tool wrappers                                | Added P2       |
+| AutoGen                 | `veto-sdk/integrations/autogen`       | function/tool wrappers                       | Added P2       |
+| CrewAI                  | `veto-sdk/integrations/crewai`        | tool-function wrappers                       | Added P2       |
+
+```ts
+import { guardClaudeToolUse } from "veto-sdk/integrations/claude-sdk";
+import { guardGoogleADKFunctionCall } from "veto-sdk/integrations/google-adk";
+import { wrapMastraTool } from "veto-sdk/integrations/mastra";
+import { wrapAutoGenFunction } from "veto-sdk/integrations/autogen";
+import { wrapCrewAITool } from "veto-sdk/integrations/crewai";
+
+const claudeDecision = await guardClaudeToolUse(veto, toolUse);
+const googleDecision = await guardGoogleADKFunctionCall(veto, functionCall);
+const safeMastraTool = wrapMastraTool(veto, mastraTool);
+const safeAutoGenFn = wrapAutoGenFunction(veto, "delete_file", deleteFile);
+const safeCrewTool = wrapCrewAITool(veto, crewTool);
+```
+
+## Optional semantic PII output detection
+
+Output rules can opt into NVIDIA GLiNER PII detection for semantic redaction or blocking beyond regex fallbacks. Enable it explicitly and provide `NVIDIA_API_KEY` or `VETO_NVIDIA_API_KEY`; the synchronous `validateOutput()` API remains regex-only, while wrapped tools and `validateOutputAsync()` run the detector when configured.
+
+```yaml
+pii:
+  enabled: true
+  provider: "nvidia-gliner-pii"
+  model: "nvidia/gliner-pii"
+  threshold: 0.45
+
+output_rules:
+  - id: redact-pii
+    name: Redact semantic PII
+    enabled: true
+    severity: high
+    action: redact
+    metadata:
+      detector: "nvidia-gliner-pii"
+      labels: [email, phone_number, ssn, credit_debit_card]
+      fields: [output]
+    redact_with: "[REDACTED_PII]"
+```
+
+Detector failures fail open by default. Do not enable this in browser builds with client-side NVIDIA keys.
+
 ## API
 
 ### `protect(tools, options?)`

package/dist/cli/templates.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"templates.d.ts","sourceRoot":"","sources":["../../src/cli/templates.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,MAAM,WAAW,4BAA4B;IAC3C,cAAc,CAAC,EAAE,OAAO,GAAG,KAAK,GAAG,QAAQ,GAAG,QAAQ,CAAC;IACvD,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAkDD;;GAEG;AACH,wBAAgB,2BAA2B,CACzC,OAAO,GAAE,4BAAiC,GACzC,MAAM,CA4GR;AAED,eAAO,MAAM,cAAc,QAAgC,CAAC;AAE5D;;GAEG;AACH,eAAO,MAAM,aAAa,oqDAuEzB,CAAC;AAEF;;GAEG;AACH,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAoBhE;AAED;;GAEG;AACH,eAAO,MAAM,mBAAmB,6CAI/B,CAAC;AAEF,wBAAgB,wBAAwB,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CAOhE;AAED;;GAEG;AACH,eAAO,MAAM,WAAW,geAkBvB,CAAC"}
+{"version":3,"file":"templates.d.ts","sourceRoot":"","sources":["../../src/cli/templates.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,MAAM,WAAW,4BAA4B;IAC3C,cAAc,CAAC,EAAE,OAAO,GAAG,KAAK,GAAG,QAAQ,GAAG,QAAQ,CAAC;IACvD,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAkDD;;GAEG;AACH,wBAAgB,2BAA2B,CACzC,OAAO,GAAE,4BAAiC,GACzC,MAAM,CAuHR;AAED,eAAO,MAAM,cAAc,QAAgC,CAAC;AAE5D;;GAEG;AACH,eAAO,MAAM,aAAa,oqDAuEzB,CAAC;AAEF;;GAEG;AACH,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAoBhE;AAED;;GAEG;AACH,eAAO,MAAM,mBAAmB,6CAI/B,CAAC;AAEF,wBAAgB,wBAAwB,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CAOhE;AAED;;GAEG;AACH,eAAO,MAAM,WAAW,geAkBvB,CAAC"}

package/dist/cli/templates.js

@@ -102,6 +102,17 @@ ${cloudConfigYaml}
 #   maxTokens: 500
 #   # baseUrl: "https://api.openai.com/v1"  # Optional override
 
+# Optional semantic PII detector for output_rules with metadata.detector: "nvidia-gliner-pii"
+# pii:
+#   enabled: false
+#   provider: "nvidia-gliner-pii"
+#   # apiKey: "NVIDIA_API_KEY"  # Prefer NVIDIA_API_KEY or VETO_NVIDIA_API_KEY env vars
+#   model: "nvidia/gliner-pii"
+#   threshold: 0.45
+#   timeout: 5000
+#   maxFields: 32
+#   maxTextChars: 8000
+
 # Human-in-the-loop approvals (for action: "require_approval" in local rules)
 # approval:
 #   callbackUrl: "http://localhost:8787/approvals"

package/dist/cli/templates.js.map

@@ -1 +1 @@
-{"version":3,"file":"templates.js","sourceRoot":"","sources":["../../src/cli/templates.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,IAAI,aAAa,EAAE,MAAM,MAAM,CAAC;AAW3E,SAAS,eAAe,CACtB,QAAkB,EAClB,IAAc;IAEd,IAAI,OAAO,GAAY,QAAQ,CAAC,QAAQ,CAAC;IAEzC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACpD,IAAI,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;YAChC,OAAO;QACT,CAAC;QAED,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;YACxC,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC;YACtB,OAAO,GAAG,YAAY,MAAM,IAAI,GAAG,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5D,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO;QACT,CAAC;QAED,IAAI,KAAK,KAAK,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,IAAI,IAAI,CAAC,KAAK,YAAY,MAAM,EAAE,CAAC;gBACjC,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC;YACxC,CAAC;YACD,OAAO;QACT,CAAC;QAED,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC;IACvB,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CACxB,IAAwB,EACxB,WAAuB;IAEvB,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC;IAEpC,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,eAAe,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAClC,CAAC;IAED,OAAO,aAAa,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,CAAC;AAC3C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,2BAA2B,CACzC,UAAwC,EAAE;IAE1C,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,OAAO,CAAC;IACzD,MAAM,cAAc,GAAG,iBAAiB,CACtC;QACE,OAAO,EAAE,KAAK;QACd,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACV,IAAI,EAAE,cAAc;SACrB;KACF,EACD,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAChD,CAAC;IACF,MAAM,eAAe,GAAG,OAAO,CAAC,MAAM,KAAK,SAAS;QAClD,CAAC,CAAC;;;;;qBAKe;QACjB,CAAC,CAAC,GAAG,iBAAiB,CAClB;YACE,KAAK,EAAE;gBACL,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,CAAC;gBACV,UAAU,EAAE,IAAI;aACjB;SACF,EACD,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CACtB;2EACoE,CAAC;IAC1E,MAAM,WAAW,GAAG,iBAAiB,CACnC;QACE,OAAO,EAAE;YACP,KAAK,EAAE,MAAM;SACd;KACF,EACD,CAAC,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CACvB,CAAC;IACF,MAAM,SAAS,GAAG,iBAAiB,CACjC;QACE,KAAK,EAAE;YACL,SAAS,EAAE,SAAS;YACpB,SAAS,EAAE,IAAI;SAChB;KACF,EACD,CAAC,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,CACzB,CAAC;IAEF,OAAO;;;EAGP,cAAc;;;;;;;;;EASd,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA6Bf,WAAW;;;EAGX,SAAS;;;;;;;;;;;;;;CAcV,CAAC;AACF,CAAC;AAED,MAAM,CAAC,MAAM,cAAc,GAAG,2BAA2B,EAAE,CAAC;AAE5D;;GAEG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAuE5B,CAAC;AAEF;;GAEG;AACH,MAAM,UAAU,uBAAuB,CAAC,QAAgB;IACtD,OAAO;;;;;sCAK6B,QAAQ;YAClC,QAAQ;;;;;;;;;;;;CAYnB,CAAC;AACF,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG;;;;CAIlC,CAAC;AAEF,MAAM,UAAU,wBAAwB,CAAC,MAAe;IACtD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,mBAAmB,CAAC;IAC7B,CAAC;IAED,OAAO,GAAG,mBAAmB;CAC9B,CAAC;AACF,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG;;;;;;;;;;;;;;;;;;CAkB1B,CAAC"}
+{"version":3,"file":"templates.js","sourceRoot":"","sources":["../../src/cli/templates.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,IAAI,aAAa,EAAE,MAAM,MAAM,CAAC;AAW3E,SAAS,eAAe,CACtB,QAAkB,EAClB,IAAc;IAEd,IAAI,OAAO,GAAY,QAAQ,CAAC,QAAQ,CAAC;IAEzC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACpD,IAAI,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;YAChC,OAAO;QACT,CAAC;QAED,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;YACxC,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC;YACtB,OAAO,GAAG,YAAY,MAAM,IAAI,GAAG,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5D,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO;QACT,CAAC;QAED,IAAI,KAAK,KAAK,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,IAAI,IAAI,CAAC,KAAK,YAAY,MAAM,EAAE,CAAC;gBACjC,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC;YACxC,CAAC;YACD,OAAO;QACT,CAAC;QAED,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC;IACvB,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CACxB,IAAwB,EACxB,WAAuB;IAEvB,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC;IAEpC,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,eAAe,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAClC,CAAC;IAED,OAAO,aAAa,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,CAAC;AAC3C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,2BAA2B,CACzC,UAAwC,EAAE;IAE1C,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,OAAO,CAAC;IACzD,MAAM,cAAc,GAAG,iBAAiB,CACtC;QACE,OAAO,EAAE,KAAK;QACd,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACV,IAAI,EAAE,cAAc;SACrB;KACF,EACD,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAChD,CAAC;IACF,MAAM,eAAe,GAAG,OAAO,CAAC,MAAM,KAAK,SAAS;QAClD,CAAC,CAAC;;;;;qBAKe;QACjB,CAAC,CAAC,GAAG,iBAAiB,CAClB;YACE,KAAK,EAAE;gBACL,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,CAAC;gBACV,UAAU,EAAE,IAAI;aACjB;SACF,EACD,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CACtB;2EACoE,CAAC;IAC1E,MAAM,WAAW,GAAG,iBAAiB,CACnC;QACE,OAAO,EAAE;YACP,KAAK,EAAE,MAAM;SACd;KACF,EACD,CAAC,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CACvB,CAAC;IACF,MAAM,SAAS,GAAG,iBAAiB,CACjC;QACE,KAAK,EAAE;YACL,SAAS,EAAE,SAAS;YACpB,SAAS,EAAE,IAAI;SAChB;KACF,EACD,CAAC,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,CACzB,CAAC;IAEF,OAAO;;;EAGP,cAAc;;;;;;;;;EASd,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAwCf,WAAW;;;EAGX,SAAS;;;;;;;;;;;;;;CAcV,CAAC;AACF,CAAC;AAED,MAAM,CAAC,MAAM,cAAc,GAAG,2BAA2B,EAAE,CAAC;AAE5D;;GAEG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAuE5B,CAAC;AAEF;;GAEG;AACH,MAAM,UAAU,uBAAuB,CAAC,QAAgB;IACtD,OAAO;;;;;sCAK6B,QAAQ;YAClC,QAAQ;;;;;;;;;;;;CAYnB,CAAC;AACF,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG;;;;CAIlC,CAAC;AAEF,MAAM,UAAU,wBAAwB,CAAC,MAAe;IACtD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,mBAAmB,CAAC;IAC7B,CAAC;IAED,OAAO,GAAG,mBAAmB;CAC9B,CAAC;AACF,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG;;;;;;;;;;;;;;;;;;CAkB1B,CAAC"}

package/dist/core/output-rule-detectors.d.ts

@@ -0,0 +1,4 @@
+import type { OutputRule } from '../rules/types.js';
+export declare const NVIDIA_GLINER_PII_DETECTOR_ID = "nvidia-gliner-pii";
+export declare function isSemanticOutputRule(rule: OutputRule): boolean;
+//# sourceMappingURL=output-rule-detectors.d.ts.map

package/dist/core/output-rule-detectors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"output-rule-detectors.d.ts","sourceRoot":"","sources":["../../src/core/output-rule-detectors.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAEpD,eAAO,MAAM,6BAA6B,sBAAsB,CAAC;AAOjE,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAI9D"}

package/dist/core/output-rule-detectors.js

@@ -0,0 +1,11 @@
+export const NVIDIA_GLINER_PII_DETECTOR_ID = 'nvidia-gliner-pii';
+const NVIDIA_GLINER_PII_DETECTORS = new Set([
+    NVIDIA_GLINER_PII_DETECTOR_ID,
+    'nvidia/gliner-pii',
+]);
+export function isSemanticOutputRule(rule) {
+    const detector = rule.metadata?.detector;
+    return typeof detector === 'string'
+        && NVIDIA_GLINER_PII_DETECTORS.has(detector.trim().toLowerCase());
+}
+//# sourceMappingURL=output-rule-detectors.js.map

package/dist/core/output-rule-detectors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"output-rule-detectors.js","sourceRoot":"","sources":["../../src/core/output-rule-detectors.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,6BAA6B,GAAG,mBAAmB,CAAC;AAEjE,MAAM,2BAA2B,GAAG,IAAI,GAAG,CAAC;IAC1C,6BAA6B;IAC7B,mBAAmB;CACpB,CAAC,CAAC;AAEH,MAAM,UAAU,oBAAoB,CAAC,IAAgB;IACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC;IACzC,OAAO,OAAO,QAAQ,KAAK,QAAQ;WAC9B,2BAA2B,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;AACtE,CAAC"}

package/dist/core/output-validator.d.ts

@@ -26,6 +26,7 @@ export declare class OutputValidator {
     constructor(options: OutputValidatorOptions);
     validate(toolName: string, output: unknown): OutputValidationResult;
     private matchesRule;
+    private hasFallbackConditions;
     private buildEvaluationContext;
     private applyRedaction;
     private collectRedactionConditions;

package/dist/core/output-validator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"output-validator.d.ts","sourceRoot":"","sources":["../../src/core/output-validator.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAKjD,OAAO,KAAK,EAAE,UAAU,EAAiB,MAAM,mBAAmB,CAAC;AAInE,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,EAAE,OAAO,GAAG,OAAO,CAAC;IAC5B,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,cAAc,EAAE,CAAC;CACzB;AAED,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,eAAe,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,UAAU,EAAE,CAAC;CACrD;AAED,qBAAa,eAAe;IAC1B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAqC;gBAEzD,OAAO,EAAE,sBAAsB;IAK3C,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,sBAAsB;IAmFnE,OAAO,CAAC,WAAW;IAYnB,OAAO,CAAC,sBAAsB;IAoB9B,OAAO,CAAC,cAAc;IA4EtB,OAAO,CAAC,0BAA0B;IASlC,OAAO,CAAC,YAAY;IAWpB,OAAO,CAAC,YAAY;IA4CpB,OAAO,CAAC,iBAAiB;IAczB,OAAO,CAAC,mBAAmB;IAgD3B,OAAO,CAAC,oBAAoB;IAuB5B,OAAO,CAAC,WAAW;CAWpB"}
+{"version":3,"file":"output-validator.d.ts","sourceRoot":"","sources":["../../src/core/output-validator.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAKjD,OAAO,KAAK,EAAE,UAAU,EAAiB,MAAM,mBAAmB,CAAC;AAKnE,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,EAAE,OAAO,GAAG,OAAO,CAAC;IAC5B,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,cAAc,EAAE,CAAC;CACzB;AAED,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,eAAe,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,UAAU,EAAE,CAAC;CACrD;AAED,qBAAa,eAAe;IAC1B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAqC;gBAEzD,OAAO,EAAE,sBAAsB;IAK3C,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,sBAAsB;IAmFnE,OAAO,CAAC,WAAW;IAgBnB,OAAO,CAAC,qBAAqB;IAK7B,OAAO,CAAC,sBAAsB;IAoB9B,OAAO,CAAC,cAAc;IA4EtB,OAAO,CAAC,0BAA0B;IASlC,OAAO,CAAC,YAAY;IAWpB,OAAO,CAAC,YAAY;IA4CpB,OAAO,CAAC,iBAAiB;IAczB,OAAO,CAAC,mBAAmB;IAgD3B,OAAO,CAAC,oBAAoB;IAuB5B,OAAO,CAAC,WAAW;CAWpB"}

package/dist/core/output-validator.js

@@ -1,4 +1,5 @@
 import { createSafeRegex, evaluateConditionCollections, } from '../rules/condition-evaluator.js';
+import { isSemanticOutputRule } from './output-rule-detectors.js';
 const DEFAULT_REDACT_WITH = '[REDACTED]';
 export class OutputValidator {
     logger;
@@ -82,8 +83,15 @@ export class OutputValidator {
         };
     }
     matchesRule(rule, context) {
+        if (isSemanticOutputRule(rule) && !this.hasFallbackConditions(rule)) {
+            return false;
+        }
         return evaluateConditionCollections(rule.output_conditions, rule.output_condition_groups, context, { allowNestedObjectStringSearch: true });
     }
+    hasFallbackConditions(rule) {
+        return (rule.output_conditions?.length ?? 0) > 0
+            || (rule.output_condition_groups?.length ?? 0) > 0;
+    }
     buildEvaluationContext(toolName, output) {
         const base = {
             output,

package/dist/core/output-validator.js.map

@@ -1 +1 @@
-{"version":3,"file":"output-validator.js","sourceRoot":"","sources":["../../src/core/output-validator.ts"],"names":[],"mappings":"AACA,OAAO,EACL,eAAe,EACf,4BAA4B,GAC7B,MAAM,iCAAiC,CAAC;AAGzC,MAAM,mBAAmB,GAAG,YAAY,CAAC;AAyBzC,MAAM,OAAO,eAAe;IACT,MAAM,CAAS;IACf,eAAe,CAAqC;IAErE,YAAY,OAA+B;QACzC,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC;IACjD,CAAC;IAED,QAAQ,CAAC,QAAgB,EAAE,MAAe;QACxC,MAAM,KAAK,GAAG,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;QAC7C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,OAAO;gBACL,QAAQ,EAAE,OAAO;gBACjB,MAAM;gBACN,cAAc,EAAE,EAAE;gBAClB,UAAU,EAAE,CAAC;gBACb,KAAK,EAAE,EAAE;aACV,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,sBAAsB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC9D,MAAM,YAAY,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;QAE7E,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9B,OAAO;gBACL,QAAQ,EAAE,OAAO;gBACjB,MAAM;gBACN,cAAc,EAAE,EAAE;gBAClB,UAAU,EAAE,CAAC;gBACb,KAAK,EAAE,EAAE;aACV,CAAC;QACJ,CAAC;QAED,MAAM,cAAc,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC3D,MAAM,SAAS,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC;QACvE,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,MAAM,GAAG,SAAS,CAAC,WAAW,IAAI,2BAA2B,SAAS,CAAC,IAAI,EAAE,CAAC;YACpF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,oCAAoC,EAAE;gBACrD,IAAI,EAAE,QAAQ;gBACd,MAAM,EAAE,SAAS,CAAC,EAAE;gBACpB,MAAM;aACP,CAAC,CAAC;YACH,OAAO;gBACL,QAAQ,EAAE,OAAO;gBACjB,MAAM,EAAE,IAAI;gBACZ,MAAM;gBACN,cAAc;gBACd,UAAU,EAAE,CAAC;gBACb,KAAK,EAAE,EAAE;aACV,CAAC;QACJ,CAAC;QAED,IAAI,iBAAiB,GAAG,MAAM,CAAC;QAC/B,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,MAAM,KAAK,GAAqB,EAAE,CAAC;QAEnC,KAAK,MAAM,IAAI,IAAI,YAAY,EAAE,CAAC;YAChC,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;gBAC1B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,0CAA0C,EAAE;oBAC3D,IAAI,EAAE,QAAQ;oBACd,MAAM,EAAE,IAAI,CAAC,EAAE;oBACf,QAAQ,EAAE,IAAI,CAAC,IAAI;iBACpB,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YAED,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAC7B,MAAM,YAAY,GAAG,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;gBAClE,iBAAiB,GAAG,YAAY,CAAC,MAAM,CAAC;gBACxC,UAAU,IAAI,YAAY,CAAC,UAAU,CAAC;gBACtC,KAAK,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;gBAElC,IAAI,YAAY,CAAC,UAAU,GAAG,CAAC,EAAE,CAAC;oBAChC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,qCAAqC,EAAE;wBACtD,IAAI,EAAE,QAAQ;wBACd,MAAM,EAAE,IAAI,CAAC,EAAE;wBACf,UAAU,EAAE,YAAY,CAAC,UAAU;qBACpC,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO;YACL,QAAQ,EAAE,OAAO;YACjB,MAAM,EAAE,iBAAiB;YACzB,cAAc;YACd,UAAU;YACV,KAAK;SACN,CAAC;IACJ,CAAC;IAEO,WAAW,CACjB,IAAgB,EAChB,OAAgC;QAEhC,OAAO,4BAA4B,CACjC,IAAI,CAAC,iBAAiB,EACtB,IAAI,CAAC,uBAAuB,EAC5B,OAAO,EACP,EAAE,6BAA6B,EAAE,IAAI,EAAE,CACxC,CAAC;IACJ,CAAC;IAEO,sBAAsB,CAC5B,QAAgB,EAChB,MAAe;QAEf,MAAM,IAAI,GAA4B;YACpC,MAAM;YACN,SAAS,EAAE,QAAQ;YACnB,QAAQ;SACT,CAAC;QAEF,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACnE,OAAO;gBACL,GAAG,MAAiC;gBACpC,GAAG,IAAI;aACR,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,cAAc,CACpB,IAAgB,EAChB,MAAe;QAEf,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,IAAI,mBAAmB,CAAC;QAC3D,MAAM,mBAAmB,GAAG,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,CAAC;QAClE,IAAI,mBAAmB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;QAC9C,CAAC;QAED,IAAI,aAAa,GAAG,MAAM,CAAC;QAC3B,IAAI,MAAM,GAAG,KAAK,CAAC;QACnB,IAAI,eAAe,GAAG,CAAC,CAAC;QACxB,MAAM,KAAK,GAAqB,EAAE,CAAC;QAEnC,MAAM,WAAW,GAAG,GAAY,EAAE;YAChC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,YAAY,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;gBAC9C,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;oBAC1B,OAAO,IAAI,CAAC;gBACd,CAAC;gBAED,aAAa,GAAG,YAAY,CAAC;gBAC7B,MAAM,GAAG,IAAI,CAAC;YAChB,CAAC;YACD,OAAO,aAAa,CAAC;QACvB,CAAC,CAAC;QAEF,KAAK,MAAM,SAAS,IAAI,mBAAmB,EAAE,CAAC;YAC5C,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC;YAC9B,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC;YAChC,IAAI,CAAC,KAAK,IAAI,OAAO,OAAO,KAAK,QAAQ;gBAAE,SAAS;YAEpD,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;YACtC,IAAI,IAAI,KAAK,IAAI;gBAAE,SAAS;YAE5B,MAAM,KAAK,GAAG,eAAe,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YAC5C,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,gDAAgD,EAAE;oBACjE,MAAM,EAAE,IAAI,CAAC,EAAE;oBACf,OAAO;iBACR,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YAED,MAAM,YAAY,GAAG,WAAW,EAAE,CAAC;YACnC,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;gBAC1B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,8DAA8D,EAAE;oBAC/E,MAAM,EAAE,IAAI,CAAC,EAAE;iBAChB,CAAC,CAAC;gBACH,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;YAC9C,CAAC;YAED,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,YAAY,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;YACxE,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC;YAC9B,eAAe,IAAI,MAAM,CAAC,UAAU,CAAC;YAErC,IAAI,MAAM,CAAC,UAAU,GAAG,CAAC,EAAE,CAAC;gBAC1B,KAAK,CAAC,IAAI,CAAC;oBACT,MAAM,EAAE,IAAI,CAAC,EAAE;oBACf,QAAQ,EAAE,IAAI,CAAC,IAAI;oBACnB,KAAK;oBACL,OAAO;oBACP,aAAa,EAAE,MAAM,CAAC,UAAU;oBAChC,WAAW,EAAE,UAAU;iBACxB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;QAC9C,CAAC;QAED,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,UAAU,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC;IACvE,CAAC;IAEO,0BAA0B,CAAC,IAAgB;QACjD,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,iBAAiB,IAAI,EAAE,CAAC;aAC1C,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC;QAC3D,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,uBAAuB,IAAI,EAAE,CAAC;aACjD,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC;aACzB,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC;QAC3D,OAAO,CAAC,GAAG,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC;IACjC,CAAC;IAEO,YAAY,CAAC,KAAa;QAChC,IAAI,KAAK,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAC;QAClC,IAAI,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,OAAO,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAEtE,IAAI,KAAK,KAAK,WAAW,IAAI,KAAK,KAAK,UAAU,EAAE,CAAC;YAClD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,YAAY,CAClB,MAAe,EACf,IAAY,EACZ,KAAa,EACb,WAAmB;QAEnB,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;YAChB,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAC/B,OAAO,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;YAC5D,CAAC;YAED,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAC1C,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;YACnC,CAAC;YAED,OAAO;gBACL,MAAM;gBACN,UAAU,EAAE,IAAI,CAAC,mBAAmB,CAAC,MAAM,EAAE,KAAK,EAAE,WAAW,CAAC;aACjE,CAAC;QACJ,CAAC;QAED,MAAM,YAAY,GAAG,IAAI,CAAC,oBAAoB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC7D,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;QACnC,CAAC;QAED,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,YAAY,CAAC;QACrC,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAChC,MAAM,MAAM,GAAG,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;YACnE,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC;YAC5B,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC;QACnD,CAAC;QAED,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC5C,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;QACnC,CAAC;QAED,OAAO;YACL,MAAM;YACN,UAAU,EAAE,IAAI,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,EAAE,WAAW,CAAC;SAClE,CAAC;IACJ,CAAC;IAEO,iBAAiB,CACvB,KAAa,EACb,KAAa,EACb,WAAmB;QAEnB,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,EAAE;YACvC,UAAU,IAAI,CAAC,CAAC;YAChB,OAAO,WAAW,CAAC;QACrB,CAAC,CAAC,CAAC;QAEH,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IAChC,CAAC;IAEO,mBAAmB,CACzB,KAAc,EACd,KAAa,EACb,WAAmB,EACnB,OAAoB,IAAI,GAAG,EAAE;QAE7B,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACxC,OAAO,CAAC,CAAC;QACX,CAAC;QAED,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YACpB,OAAO,CAAC,CAAC;QACX,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAEhB,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,IAAI,KAAK,GAAG,CAAC,CAAC;YACd,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;gBACrD,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;gBAC7B,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;oBAChC,MAAM,MAAM,GAAG,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;oBACnE,KAAK,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC;oBAC7B,KAAK,IAAI,MAAM,CAAC,UAAU,CAAC;oBAC3B,SAAS;gBACX,CAAC;gBAED,KAAK,IAAI,IAAI,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC;YACvE,CAAC;YAED,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,KAAK,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;YAC9E,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;gBAChC,MAAM,MAAM,GAAG,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;gBAClE,KAAiC,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC;gBACxD,KAAK,IAAI,MAAM,CAAC,UAAU,CAAC;gBAC3B,SAAS;YACX,CAAC;YAED,KAAK,IAAI,IAAI,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC;QACvE,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,oBAAoB,CAC1B,IAAa,EACb,IAAY;QAEZ,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAEnD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAEpC,IAAI,OAAO,GAAY,IAAI,CAAC;QAC5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7C,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACzB,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAC;YACzD,OAAO,GAAI,OAAmC,CAAC,OAAO,CAAC,CAAC;QAC1D,CAAC;QAED,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACzD,OAAO;YACL,MAAM,EAAE,OAAkC;YAC1C,GAAG,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;SAC7B,CAAC;IACJ,CAAC;IAEO,WAAW,CAAC,MAAe;QACjC,IAAI,CAAC;YACH,OAAO,eAAe,CAAC,MAAM,CAAC,CAAC;QACjC,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC;gBACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAY,CAAC;YACvD,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"output-validator.js","sourceRoot":"","sources":["../../src/core/output-validator.ts"],"names":[],"mappings":"AACA,OAAO,EACL,eAAe,EACf,4BAA4B,GAC7B,MAAM,iCAAiC,CAAC;AAEzC,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAElE,MAAM,mBAAmB,GAAG,YAAY,CAAC;AAyBzC,MAAM,OAAO,eAAe;IACT,MAAM,CAAS;IACf,eAAe,CAAqC;IAErE,YAAY,OAA+B;QACzC,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC;IACjD,CAAC;IAED,QAAQ,CAAC,QAAgB,EAAE,MAAe;QACxC,MAAM,KAAK,GAAG,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;QAC7C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,OAAO;gBACL,QAAQ,EAAE,OAAO;gBACjB,MAAM;gBACN,cAAc,EAAE,EAAE;gBAClB,UAAU,EAAE,CAAC;gBACb,KAAK,EAAE,EAAE;aACV,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,sBAAsB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC9D,MAAM,YAAY,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;QAE7E,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9B,OAAO;gBACL,QAAQ,EAAE,OAAO;gBACjB,MAAM;gBACN,cAAc,EAAE,EAAE;gBAClB,UAAU,EAAE,CAAC;gBACb,KAAK,EAAE,EAAE;aACV,CAAC;QACJ,CAAC;QAED,MAAM,cAAc,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC3D,MAAM,SAAS,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC;QACvE,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,MAAM,GAAG,SAAS,CAAC,WAAW,IAAI,2BAA2B,SAAS,CAAC,IAAI,EAAE,CAAC;YACpF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,oCAAoC,EAAE;gBACrD,IAAI,EAAE,QAAQ;gBACd,MAAM,EAAE,SAAS,CAAC,EAAE;gBACpB,MAAM;aACP,CAAC,CAAC;YACH,OAAO;gBACL,QAAQ,EAAE,OAAO;gBACjB,MAAM,EAAE,IAAI;gBACZ,MAAM;gBACN,cAAc;gBACd,UAAU,EAAE,CAAC;gBACb,KAAK,EAAE,EAAE;aACV,CAAC;QACJ,CAAC;QAED,IAAI,iBAAiB,GAAG,MAAM,CAAC;QAC/B,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,MAAM,KAAK,GAAqB,EAAE,CAAC;QAEnC,KAAK,MAAM,IAAI,IAAI,YAAY,EAAE,CAAC;YAChC,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;gBAC1B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,0CAA0C,EAAE;oBAC3D,IAAI,EAAE,QAAQ;oBACd,MAAM,EAAE,IAAI,CAAC,EAAE;oBACf,QAAQ,EAAE,IAAI,CAAC,IAAI;iBACpB,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YAED,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAC7B,MAAM,YAAY,GAAG,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;gBAClE,iBAAiB,GAAG,YAAY,CAAC,MAAM,CAAC;gBACxC,UAAU,IAAI,YAAY,CAAC,UAAU,CAAC;gBACtC,KAAK,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;gBAElC,IAAI,YAAY,CAAC,UAAU,GAAG,CAAC,EAAE,CAAC;oBAChC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,qCAAqC,EAAE;wBACtD,IAAI,EAAE,QAAQ;wBACd,MAAM,EAAE,IAAI,CAAC,EAAE;wBACf,UAAU,EAAE,YAAY,CAAC,UAAU;qBACpC,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO;YACL,QAAQ,EAAE,OAAO;YACjB,MAAM,EAAE,iBAAiB;YACzB,cAAc;YACd,UAAU;YACV,KAAK;SACN,CAAC;IACJ,CAAC;IAEO,WAAW,CACjB,IAAgB,EAChB,OAAgC;QAEhC,IAAI,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE,CAAC;YACpE,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,4BAA4B,CACjC,IAAI,CAAC,iBAAiB,EACtB,IAAI,CAAC,uBAAuB,EAC5B,OAAO,EACP,EAAE,6BAA6B,EAAE,IAAI,EAAE,CACxC,CAAC;IACJ,CAAC;IAEO,qBAAqB,CAAC,IAAgB;QAC5C,OAAO,CAAC,IAAI,CAAC,iBAAiB,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC;eAC3C,CAAC,IAAI,CAAC,uBAAuB,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IACvD,CAAC;IAEO,sBAAsB,CAC5B,QAAgB,EAChB,MAAe;QAEf,MAAM,IAAI,GAA4B;YACpC,MAAM;YACN,SAAS,EAAE,QAAQ;YACnB,QAAQ;SACT,CAAC;QAEF,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACnE,OAAO;gBACL,GAAG,MAAiC;gBACpC,GAAG,IAAI;aACR,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,cAAc,CACpB,IAAgB,EAChB,MAAe;QAEf,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,IAAI,mBAAmB,CAAC;QAC3D,MAAM,mBAAmB,GAAG,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,CAAC;QAClE,IAAI,mBAAmB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;QAC9C,CAAC;QAED,IAAI,aAAa,GAAG,MAAM,CAAC;QAC3B,IAAI,MAAM,GAAG,KAAK,CAAC;QACnB,IAAI,eAAe,GAAG,CAAC,CAAC;QACxB,MAAM,KAAK,GAAqB,EAAE,CAAC;QAEnC,MAAM,WAAW,GAAG,GAAY,EAAE;YAChC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,YAAY,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;gBAC9C,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;oBAC1B,OAAO,IAAI,CAAC;gBACd,CAAC;gBAED,aAAa,GAAG,YAAY,CAAC;gBAC7B,MAAM,GAAG,IAAI,CAAC;YAChB,CAAC;YACD,OAAO,aAAa,CAAC;QACvB,CAAC,CAAC;QAEF,KAAK,MAAM,SAAS,IAAI,mBAAmB,EAAE,CAAC;YAC5C,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC;YAC9B,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC;YAChC,IAAI,CAAC,KAAK,IAAI,OAAO,OAAO,KAAK,QAAQ;gBAAE,SAAS;YAEpD,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;YACtC,IAAI,IAAI,KAAK,IAAI;gBAAE,SAAS;YAE5B,MAAM,KAAK,GAAG,eAAe,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YAC5C,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,gDAAgD,EAAE;oBACjE,MAAM,EAAE,IAAI,CAAC,EAAE;oBACf,OAAO;iBACR,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YAED,MAAM,YAAY,GAAG,WAAW,EAAE,CAAC;YACnC,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;gBAC1B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,8DAA8D,EAAE;oBAC/E,MAAM,EAAE,IAAI,CAAC,EAAE;iBAChB,CAAC,CAAC;gBACH,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;YAC9C,CAAC;YAED,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,YAAY,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;YACxE,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC;YAC9B,eAAe,IAAI,MAAM,CAAC,UAAU,CAAC;YAErC,IAAI,MAAM,CAAC,UAAU,GAAG,CAAC,EAAE,CAAC;gBAC1B,KAAK,CAAC,IAAI,CAAC;oBACT,MAAM,EAAE,IAAI,CAAC,EAAE;oBACf,QAAQ,EAAE,IAAI,CAAC,IAAI;oBACnB,KAAK;oBACL,OAAO;oBACP,aAAa,EAAE,MAAM,CAAC,UAAU;oBAChC,WAAW,EAAE,UAAU;iBACxB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;QAC9C,CAAC;QAED,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,UAAU,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC;IACvE,CAAC;IAEO,0BAA0B,CAAC,IAAgB;QACjD,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,iBAAiB,IAAI,EAAE,CAAC;aAC1C,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC;QAC3D,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,uBAAuB,IAAI,EAAE,CAAC;aACjD,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC;aACzB,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC;QAC3D,OAAO,CAAC,GAAG,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC;IACjC,CAAC;IAEO,YAAY,CAAC,KAAa;QAChC,IAAI,KAAK,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAC;QAClC,IAAI,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,OAAO,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAEtE,IAAI,KAAK,KAAK,WAAW,IAAI,KAAK,KAAK,UAAU,EAAE,CAAC;YAClD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,YAAY,CAClB,MAAe,EACf,IAAY,EACZ,KAAa,EACb,WAAmB;QAEnB,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;YAChB,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAC/B,OAAO,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;YAC5D,CAAC;YAED,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAC1C,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;YACnC,CAAC;YAED,OAAO;gBACL,MAAM;gBACN,UAAU,EAAE,IAAI,CAAC,mBAAmB,CAAC,MAAM,EAAE,KAAK,EAAE,WAAW,CAAC;aACjE,CAAC;QACJ,CAAC;QAED,MAAM,YAAY,GAAG,IAAI,CAAC,oBAAoB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC7D,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;QACnC,CAAC;QAED,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,YAAY,CAAC;QACrC,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAChC,MAAM,MAAM,GAAG,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;YACnE,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC;YAC5B,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC;QACnD,CAAC;QAED,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC5C,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;QACnC,CAAC;QAED,OAAO;YACL,MAAM;YACN,UAAU,EAAE,IAAI,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,EAAE,WAAW,CAAC;SAClE,CAAC;IACJ,CAAC;IAEO,iBAAiB,CACvB,KAAa,EACb,KAAa,EACb,WAAmB;QAEnB,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,EAAE;YACvC,UAAU,IAAI,CAAC,CAAC;YAChB,OAAO,WAAW,CAAC;QACrB,CAAC,CAAC,CAAC;QAEH,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IAChC,CAAC;IAEO,mBAAmB,CACzB,KAAc,EACd,KAAa,EACb,WAAmB,EACnB,OAAoB,IAAI,GAAG,EAAE;QAE7B,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACxC,OAAO,CAAC,CAAC;QACX,CAAC;QAED,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YACpB,OAAO,CAAC,CAAC;QACX,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAEhB,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,IAAI,KAAK,GAAG,CAAC,CAAC;YACd,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;gBACrD,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;gBAC7B,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;oBAChC,MAAM,MAAM,GAAG,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;oBACnE,KAAK,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC;oBAC7B,KAAK,IAAI,MAAM,CAAC,UAAU,CAAC;oBAC3B,SAAS;gBACX,CAAC;gBAED,KAAK,IAAI,IAAI,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC;YACvE,CAAC;YAED,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,KAAK,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;YAC9E,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;gBAChC,MAAM,MAAM,GAAG,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;gBAClE,KAAiC,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC;gBACxD,KAAK,IAAI,MAAM,CAAC,UAAU,CAAC;gBAC3B,SAAS;YACX,CAAC;YAED,KAAK,IAAI,IAAI,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC;QACvE,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,oBAAoB,CAC1B,IAAa,EACb,IAAY;QAEZ,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAEnD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAEpC,IAAI,OAAO,GAAY,IAAI,CAAC;QAC5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7C,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACzB,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAC;YACzD,OAAO,GAAI,OAAmC,CAAC,OAAO,CAAC,CAAC;QAC1D,CAAC;QAED,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACzD,OAAO;YACL,MAAM,EAAE,OAAkC;YAC1C,GAAG,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;SAC7B,CAAC;IACJ,CAAC;IAEO,WAAW,CAAC,MAAe;QACjC,IAAI,CAAC;YACH,OAAO,eAAe,CAAC,MAAM,CAAC,CAAC;QACjC,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC;gBACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAY,CAAC;YACvD,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;IACH,CAAC;CACF"}

package/dist/core/semantic-output-validator.d.ts

@@ -0,0 +1,22 @@
+import type { Logger } from '../utils/logger.js';
+import type { OutputRule } from '../rules/types.js';
+import type { OutputValidationResult } from './output-validator.js';
+import { NvidiaGlinerPiiClient } from '../pii/nvidia-gliner-pii.js';
+export interface SemanticOutputValidatorOptions {
+    logger: Logger;
+    getRulesForTool: (toolName: string) => OutputRule[];
+    piiClient?: NvidiaGlinerPiiClient | null;
+    maxFields?: number;
+    maxTextChars?: number;
+}
+export declare class SemanticOutputValidator {
+    private readonly logger;
+    private readonly getRulesForTool;
+    private readonly piiClient;
+    private readonly maxFields;
+    private readonly maxTextChars;
+    constructor(options: SemanticOutputValidatorOptions);
+    validate(toolName: string, syncResult: OutputValidationResult): Promise<OutputValidationResult>;
+    private applyRules;
+}
+//# sourceMappingURL=semantic-output-validator.d.ts.map

package/dist/core/semantic-output-validator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"semantic-output-validator.d.ts","sourceRoot":"","sources":["../../src/core/semantic-output-validator.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,KAAK,EAAE,UAAU,EAAiB,MAAM,mBAAmB,CAAC;AACnE,OAAO,KAAK,EAAE,sBAAsB,EAAkB,MAAM,uBAAuB,CAAC;AACpF,OAAO,EAEL,qBAAqB,EAGtB,MAAM,6BAA6B,CAAC;AAOrC,MAAM,WAAW,8BAA8B;IAC7C,MAAM,EAAE,MAAM,CAAC;IACf,eAAe,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,UAAU,EAAE,CAAC;IACpD,SAAS,CAAC,EAAE,qBAAqB,GAAG,IAAI,CAAC;IACzC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAqBD,qBAAa,uBAAuB;IAClC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAqC;IACrE,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA+B;IACzD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;gBAE1B,OAAO,EAAE,8BAA8B;IAQ7C,QAAQ,CACZ,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,sBAAsB,GACjC,OAAO,CAAC,sBAAsB,CAAC;YAgCpB,UAAU;CA4IzB"}

package/dist/core/semantic-output-validator.js

@@ -0,0 +1,380 @@
+import { NVIDIA_GLINER_PII_PROVIDER, NvidiaGlinerPiiError, } from '../pii/nvidia-gliner-pii.js';
+import { isSemanticOutputRule } from './output-rule-detectors.js';
+const DEFAULT_REDACT_WITH = '[REDACTED_PII]';
+const DEFAULT_MAX_FIELDS = 32;
+const DEFAULT_MAX_TEXT_CHARS = 8000;
+export class SemanticOutputValidator {
+    logger;
+    getRulesForTool;
+    piiClient;
+    maxFields;
+    maxTextChars;
+    constructor(options) {
+        this.logger = options.logger;
+        this.getRulesForTool = options.getRulesForTool;
+        this.piiClient = options.piiClient ?? null;
+        this.maxFields = normalizePositiveInteger(options.maxFields, DEFAULT_MAX_FIELDS);
+        this.maxTextChars = normalizePositiveInteger(options.maxTextChars, DEFAULT_MAX_TEXT_CHARS);
+    }
+    async validate(toolName, syncResult) {
+        const piiClient = this.piiClient;
+        if (!piiClient || syncResult.decision === 'block') {
+            return syncResult;
+        }
+        const rules = this.getRulesForTool(toolName).filter(isSemanticOutputRule);
+        if (rules.length === 0) {
+            return syncResult;
+        }
+        try {
+            return await this.applyRules(toolName, syncResult, rules);
+        }
+        catch (error) {
+            const metadata = {
+                tool: toolName,
+                provider: NVIDIA_GLINER_PII_PROVIDER,
+                model: piiClient.model,
+            };
+            if (error instanceof NvidiaGlinerPiiError) {
+                metadata.errorCode = error.code;
+                metadata.status = error.status;
+            }
+            else if (error instanceof Error) {
+                metadata.errorName = error.name;
+            }
+            this.logger.warn('NVIDIA GLiNER PII output detector failed open', metadata);
+            return syncResult;
+        }
+    }
+    async applyRules(toolName, syncResult, rules) {
+        const piiClient = this.piiClient;
+        if (!piiClient) {
+            return syncResult;
+        }
+        let transformedOutput = syncResult.output;
+        let mutableOutput = syncResult.output;
+        let cloned = false;
+        let redactions = syncResult.redactions;
+        const matchedRuleIds = [...syncResult.matchedRuleIds];
+        const trace = [...syncResult.trace];
+        const ensureClone = () => {
+            if (!cloned) {
+                const clonedOutput = cloneOutput(transformedOutput);
+                if (clonedOutput === null) {
+                    throw new Error('Unable to clone output for semantic redaction');
+                }
+                mutableOutput = clonedOutput;
+                transformedOutput = clonedOutput;
+                cloned = true;
+            }
+            return mutableOutput;
+        };
+        for (const rule of rules) {
+            const fields = getScanFields(rule);
+            const candidates = collectScanCandidates(transformedOutput, fields, this.maxFields, this.maxTextChars);
+            if (candidates.length === 0) {
+                continue;
+            }
+            const labelsOverride = getMetadataStringArray(rule.metadata, 'labels');
+            const thresholdOverride = getMetadataNumber(rule.metadata, 'threshold');
+            const plans = [];
+            const matchedLabels = new Set();
+            let entityCount = 0;
+            for (const candidate of candidates) {
+                const entities = await piiClient.detect(candidate.text, {
+                    labels: labelsOverride,
+                    threshold: thresholdOverride,
+                });
+                const spans = normalizeSpans(entities, candidate.text.length);
+                if (spans.length === 0) {
+                    continue;
+                }
+                const labels = uniqueLabels(entities);
+                for (const label of labels) {
+                    matchedLabels.add(label);
+                }
+                entityCount += spans.length;
+                if (rule.action === 'block') {
+                    const reason = rule.description ?? `Output blocked by rule: ${rule.name}`;
+                    this.logger.warn('Tool output blocked by NVIDIA GLiNER PII output rule', {
+                        tool: toolName,
+                        ruleId: rule.id,
+                        labels,
+                        entityCount: spans.length,
+                        model: piiClient.model,
+                    });
+                    return {
+                        decision: 'block',
+                        output: null,
+                        reason,
+                        matchedRuleIds: appendUnique(matchedRuleIds, rule.id),
+                        redactions,
+                        trace,
+                    };
+                }
+                if (rule.action === 'redact') {
+                    plans.push({ candidate, labels, spans });
+                }
+            }
+            if (entityCount === 0) {
+                continue;
+            }
+            appendUniqueInPlace(matchedRuleIds, rule.id);
+            const labels = [...matchedLabels].sort();
+            if (rule.action === 'log') {
+                this.logger.warn('Tool output matched NVIDIA GLiNER PII log-only output rule', {
+                    tool: toolName,
+                    ruleId: rule.id,
+                    ruleName: rule.name,
+                    labels,
+                    entityCount,
+                    model: piiClient.model,
+                });
+                continue;
+            }
+            if (rule.action !== 'redact' || plans.length === 0) {
+                continue;
+            }
+            const clonedOutput = ensureClone();
+            const replacement = rule.redact_with ?? DEFAULT_REDACT_WITH;
+            let ruleRedactions = 0;
+            const redactionResult = applyRedactionPlans(rule, clonedOutput, plans, replacement);
+            mutableOutput = redactionResult.output;
+            transformedOutput = redactionResult.output;
+            for (const entry of redactionResult.trace) {
+                ruleRedactions += entry.redactedCount;
+            }
+            redactions += ruleRedactions;
+            trace.push(...redactionResult.trace);
+            if (ruleRedactions > 0) {
+                this.logger.info('Tool output redacted by NVIDIA GLiNER PII output rule', {
+                    tool: toolName,
+                    ruleId: rule.id,
+                    labels,
+                    redactions: ruleRedactions,
+                    model: piiClient.model,
+                });
+            }
+        }
+        return {
+            decision: 'allow',
+            output: transformedOutput,
+            matchedRuleIds,
+            redactions,
+            trace,
+        };
+    }
+}
+function getScanFields(rule) {
+    const metadataFields = getMetadataStringArray(rule.metadata, 'fields');
+    if (metadataFields) {
+        return [...new Set(metadataFields)];
+    }
+    const conditionFields = collectConditions(rule)
+        .map((condition) => condition.field)
+        .filter((field) => typeof field === 'string' && field.startsWith('output'));
+    return conditionFields.length > 0 ? [...new Set(conditionFields)] : ['output'];
+}
+function collectConditions(rule) {
+    const direct = rule.output_conditions ?? [];
+    const grouped = (rule.output_condition_groups ?? []).flatMap((group) => group);
+    return [...direct, ...grouped];
+}
+function collectScanCandidates(output, fields, maxFields, maxTextChars) {
+    const candidates = [];
+    for (const field of fields) {
+        if (candidates.length >= maxFields)
+            break;
+        const normalized = normalizeOutputField(field);
+        if (!normalized)
+            continue;
+        const value = normalized.path.length === 0
+            ? output
+            : getValueAtPath(output, normalized.path);
+        collectStringLeaves(value, normalized.path, candidates, maxFields, maxTextChars);
+    }
+    return dedupeCandidates(candidates);
+}
+function collectStringLeaves(value, basePath, candidates, maxFields, maxTextChars, seen = new Set()) {
+    if (candidates.length >= maxFields) {
+        return;
+    }
+    if (typeof value === 'string') {
+        candidates.push({
+            field: formatOutputField(basePath),
+            path: basePath,
+            text: value.slice(0, maxTextChars),
+        });
+        return;
+    }
+    if (!value || typeof value !== 'object') {
+        return;
+    }
+    if (seen.has(value)) {
+        return;
+    }
+    seen.add(value);
+    if (Array.isArray(value)) {
+        for (let index = 0; index < value.length; index += 1) {
+            collectStringLeaves(value[index], [...basePath, index], candidates, maxFields, maxTextChars, seen);
+            if (candidates.length >= maxFields)
+                break;
+        }
+        return;
+    }
+    for (const [key, child] of Object.entries(value)) {
+        collectStringLeaves(child, [...basePath, key], candidates, maxFields, maxTextChars, seen);
+        if (candidates.length >= maxFields)
+            break;
+    }
+}
+function dedupeCandidates(candidates) {
+    const seen = new Set();
+    const deduped = [];
+    for (const candidate of candidates) {
+        const key = candidate.path.join('\u0000');
+        if (seen.has(key))
+            continue;
+        seen.add(key);
+        deduped.push(candidate);
+    }
+    return deduped;
+}
+function normalizeOutputField(field) {
+    const trimmed = field.trim();
+    if (trimmed.length === 0) {
+        return null;
+    }
+    if (trimmed === 'output') {
+        return { path: [] };
+    }
+    if (trimmed.startsWith('output.')) {
+        return { path: trimmed.slice('output.'.length).split('.').filter((part) => part.length > 0) };
+    }
+    return { path: trimmed.split('.').filter((part) => part.length > 0) };
+}
+function formatOutputField(path) {
+    if (path.length === 0) {
+        return 'output';
+    }
+    return `output.${path.map((segment) => String(segment)).join('.')}`;
+}
+function getValueAtPath(root, path) {
+    let current = root;
+    for (const segment of path) {
+        if (!current || typeof current !== 'object') {
+            return undefined;
+        }
+        current = current[String(segment)];
+    }
+    return current;
+}
+function setValueAtPath(root, path, value) {
+    if (path.length === 0) {
+        return value;
+    }
+    let current = root;
+    for (let index = 0; index < path.length - 1; index += 1) {
+        if (!current || typeof current !== 'object') {
+            return root;
+        }
+        current = current[String(path[index])];
+    }
+    if (current && typeof current === 'object') {
+        current[String(path[path.length - 1])] = value;
+    }
+    return root;
+}
+function applyRedactionPlans(rule, output, plans, replacement) {
+    let transformedOutput = output;
+    const trace = [];
+    for (const plan of plans) {
+        const current = getValueAtPath(transformedOutput, plan.candidate.path);
+        if (typeof current !== 'string') {
+            continue;
+        }
+        const redacted = redactSpans(current, plan.spans, replacement);
+        transformedOutput = setValueAtPath(transformedOutput, plan.candidate.path, redacted);
+        trace.push({
+            ruleId: rule.id,
+            ruleName: rule.name,
+            field: plan.candidate.field,
+            pattern: `${NVIDIA_GLINER_PII_PROVIDER}:${plan.labels.sort().join(',')}`,
+            redactedCount: plan.spans.length,
+            replacement,
+        });
+    }
+    return { output: transformedOutput, trace };
+}
+function redactSpans(value, spans, replacement) {
+    let redacted = value;
+    for (const span of [...spans].sort((a, b) => b.start - a.start)) {
+        redacted = `${redacted.slice(0, span.start)}${replacement}${redacted.slice(span.end)}`;
+    }
+    return redacted;
+}
+function normalizeSpans(entities, textLength) {
+    const spans = entities
+        .map((entity) => ({
+        start: Math.max(0, Math.min(textLength, entity.start)),
+        end: Math.max(0, Math.min(textLength, entity.end)),
+    }))
+        .filter((span) => span.end > span.start)
+        .sort((a, b) => a.start - b.start || b.end - a.end);
+    const merged = [];
+    for (const span of spans) {
+        const previous = merged[merged.length - 1];
+        if (!previous || span.start >= previous.end) {
+            merged.push({ ...span });
+            continue;
+        }
+        previous.end = Math.max(previous.end, span.end);
+    }
+    return merged;
+}
+function uniqueLabels(entities) {
+    return [...new Set(entities
+            .map((entity) => entity.label.trim())
+            .filter((label) => label.length > 0))].sort();
+}
+function getMetadataStringArray(metadata, key) {
+    const raw = metadata?.[key];
+    if (!Array.isArray(raw)) {
+        return undefined;
+    }
+    const values = raw
+        .filter((value) => typeof value === 'string')
+        .map((value) => value.trim())
+        .filter((value) => value.length > 0);
+    return values.length > 0 ? values : undefined;
+}
+function getMetadataNumber(metadata, key) {
+    const raw = metadata?.[key];
+    return typeof raw === 'number' && Number.isFinite(raw) ? raw : undefined;
+}
+function appendUnique(values, value) {
+    return values.includes(value) ? values : [...values, value];
+}
+function appendUniqueInPlace(values, value) {
+    if (!values.includes(value)) {
+        values.push(value);
+    }
+}
+function cloneOutput(output) {
+    try {
+        return structuredClone(output);
+    }
+    catch {
+        try {
+            return JSON.parse(JSON.stringify(output));
+        }
+        catch {
+            return null;
+        }
+    }
+}
+function normalizePositiveInteger(value, fallback) {
+    return typeof value === 'number' && Number.isFinite(value) && value > 0
+        ? Math.trunc(value)
+        : fallback;
+}
+//# sourceMappingURL=semantic-output-validator.js.map