Stream identifier for error chunks
Optional personaPersona ID for error chunks
Optional inputInput evaluations to attach to first output chunk
Optional ragRAG sources to thread through to output guardrails for grounding verification
Optional holdHold every TEXT_DELTA until the final guards have judged the whole reply. Allowed or flagged, the held deltas go out before the final chunk; blocked or sanitized, they are dropped, so the caller never sees text the guards refused. An actionable tool call closes the window: the text so far is judged as a final reply before it.
Optional onCalled once with the final verdict on the reply: blocked, sanitized, flagged or allowed. A throw is logged and ignored.
Options for output guardrail wrapping.