Recipes

Copy

import { productionSafety } from '@savants.dev/guard';

const guard = productionSafety();

// Wrap your database tool
const safeDb = guard.wrap(async (params) => {
  return await db.execute(params.query);
});

await safeDb({ action: 'select_users', environment: 'production' });
// ✓ Allowed — read-only

await safeDb({ action: 'delete_table', environment: 'production' });
// ✗ Throws GuardError — blocked before execute()

Copy

import { generateText, tool } from 'ai';
import { z } from 'zod';
import { createGuard } from '@savants.dev/guard';

const guard = createGuard([
  "when action contains 'delete' and env eq 'production' then block",
  "when action contains 'send_email' and recipient_count gt 10 then block",
]);

const tools = guard.wrapTools({
  deleteUser: tool({
    description: 'Delete a user',
    parameters: z.object({ userId: z.string(), env: z.string() }),
    execute: async ({ userId }) => db.users.delete(userId),
  }),
});

// Zod validates the shape. Guards validate the safety.
// Both must pass. The LLM can't bypass either.

Copy

import { spendLimit } from '@savants.dev/guard';

const guard = spendLimit(25);

guard.check({ amount: 5.99, item: 'eggs' });
// ✓ Allowed — under limit

guard.check({ amount: 31.43, item: 'eggs with delivery' });
// ✗ Blocked — $31.43 > $25
// This is the OpenAI Operator egg purchase, prevented.

Copy

import { createGuard } from '@savants.dev/guard';

const guard = createGuard([
  "when action contains 'deploy' and day_of_week eq 'Friday' and risk_score gt 0.7 then block",
  "when action contains 'deploy' and test_pass_rate lt 100 then block",
]);

// In your CI/CD pipeline:
const today = new Date().toLocaleDateString('en-US', { weekday: 'long' });
const result = guard.check({
  action: 'deploy_to_production',
  day_of_week: today,
  risk_score: 0.85,
  test_pass_rate: 100,
});

if (result.blocked) {
  console.log('Deploy blocked:', result.rule);
  process.exit(1);
}

Copy

const guard = createGuard([
  "when action contains 'delete' then block",
  "when action contains 'send' then log",
]);

// Every check is logged automatically
guard.check({ action: 'delete_user', user_id: '123' });
guard.check({ action: 'send_email', to: 'ceo@company.com' });
guard.check({ action: 'read_report' });

// Get the full audit trail
const log = guard.getLog();
console.log(JSON.stringify(log, null, 2));

Copy

const guard = productionSafety();

// Add company-specific rules at runtime
guard.addRule("when department eq 'finance' and amount gt 10000 then require_cfo_approval");
guard.addRule("when data_classification eq 'pii' and action contains 'export' then block");

// See all active rules
console.log(guard.listRules());