@allocator-one/rcl 4.4.19

package/dist/telemetry/scrub.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scrub.js","sourceRoot":"","sources":["../../src/telemetry/scrub.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,MAAM,CAAC,MAAM,aAAa,GAAG,KAAK,CAAC;AACnC,MAAM,CAAC,MAAM,QAAQ,GAAG,YAAY,CAAC;AAErC,MAAM,aAAa,GAAG,yEAAyE,CAAC;AAChG,MAAM,uBAAuB,GAAG,8BAA8B,CAAC;AAE/D;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAa,EAAE,EAAE,SAAS,EAA0B;IACvF,MAAM,eAAe,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;IAC/C,OAAO,KAAK,CAAC,OAAO,CAAC,uBAAuB,EAAE,eAAe,CAAC;SAC3D,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,4CAA4C,CAAC,CAAC,CAAC,+BAA+B,EAAE,GAAG,CAAC;SACxG,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;AAChC,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,sBAAsB,CAAC,KAAa;IAClD,OAAO,KAAK,CAAC,OAAO,CAAC,mBAAmB,EAAE,QAAQ,CAAC;SAChD,OAAO,CAAC,iDAAiD,EAAE,EAAE,CAAC,CAAC;AACpE,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,qBAAqB,CAAC,KAAa;IACjD,OAAO,KAAK,CAAC,OAAO,CAAC,+EAA+E,EAClG,CAAC,SAAS,EAAE,EAAE,CAAC,MAAM,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;AAClF,CAAC;AAED,MAAM,YAAY,GAAa;IAC7B,+BAA+B;IAC/B,gDAAgD;IAChD,6CAA6C;IAC7C,iEAAiE;IACjE,kEAAkE;IAClE,gCAAgC;IAChC,6EAA6E;IAC7E,0BAA0B;IAC1B,2CAA2C;IAC3C,6CAA6C;IAC7C,iCAAiC;IACjC,mBAAmB;IACnB,2BAA2B;IAC3B,qCAAqC;IACrC,mCAAmC;IACnC,SAAS;IACT,iCAAiC;IACjC,qCAAqC;IACrC,yCAAyC;IACzC,yEAAyE;IACzE,6BAA6B;IAC7B,yBAAyB;IACzB,wBAAwB;CACzB,CAAC;AAEF;;;;;;GAMG;AACH,6EAA6E;AAC7E,wCAAwC;AACxC,MAAM,aAAa,GAAG,MAAM,CAAC,GAAG,CAAA,2IAA2I,CAAC;AAC5K,4EAA4E;AAC5E,8EAA8E;AAC9E,+EAA+E;AAC/E,MAAM,iBAAiB,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAA,IAAI,aAAa,4EAA4E,EAAE,IAAI,CAAC,CAAC;AACpJ,MAAM,UAAU,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAA,IAAI,aAAa,4BAA4B,EAAE,IAAI,CAAC,CAAC;AAE7F;;;;GAIG;AACH,MAAM,YAAY,GAAG,4BAA4B,CAAC;AAElD,SAAS,WAAW,CAAC,SAAiB;IACpC,OAAO,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;AACvF,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,IAAI,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE,YAAY,CAAC,CAAC;IACxD,KAAK,MAAM,OAAO,IAAI,YAAY;QAAE,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACzE,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,MAAM,EAAE,MAAc,EAAE,EAAE,CAAC,GAAG,MAAM,GAAG,QAAQ,EAAE,CAAC,CAAC;IAClF,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;IAChG,OAAO,GAAG,CAAC;AACb,CAAC;AAED,oGAAoG;AACpG,SAAS,YAAY,CAAC,KAAa,EAAE,MAAc;IACjD,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC1C,OAAO,GAAG,MAAM,GAAG,KAAK,GAAG,QAAQ,GAAG,KAAK,EAAE,CAAC;AAChD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,SAAS,CAAC,IAAY,EAAE,MAAc,aAAa;IACjE,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC;IACtC,OAAO,kBAAkB,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,OAAO,KAAK,IAAI,CAAC,CAAC;AAC1E,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAY,EAAE,GAAW,EAAE,GAAG,GAAG,KAAK;IAChE,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,KAAK,IAAI,IAAI,EAAE,CAAC;QACzB,IAAI,MAAM,CAAC,MAAM,IAAI,GAAG;YAAE,MAAM;QAChC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnB,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC;IACxB,CAAC;IACD,IAAI,CAAC,GAAG,IAAI,KAAK,KAAK,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAC/C,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC;AAC9D,CAAC;AAED,SAAS,MAAM,CAAC,IAAY,EAAE,EAAU;IACtC,IAAI,IAAI,CAAC,MAAM,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC;IACnC,oEAAoE;IACpE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACjC,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACrC,OAAO,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;AAClD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,MAAc,GAAG;IAC7D,IAAI,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE,YAAY,CAAC,CAAC;IACxD,KAAK,MAAM,OAAO,IAAI,YAAY;QAAE,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACzE,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,MAAM,EAAE,MAAc,EAAE,EAAE,CAAC,GAAG,MAAM,GAAG,QAAQ,EAAE,CAAC,CAAC;IAClF,OAAO,kBAAkB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;AACtC,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAwB,EAAE,MAAc,aAAa;IACjF,OAAO,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AAC/D,CAAC;AAED,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC,CAAC;AAEvE;;;;;GAKG;AACH,MAAM,UAAU,SAAS,CAAI,KAAQ;IACnC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC,KAAK,CAAiB,CAAC;IACvE,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAiB,CAAC;IACtF,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;YAC3E,IAAI,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,SAAS;YACnC,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;YAC/B,IAAI,IAAI,GAAG,IAAI,CAAC;YAChB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC;gBAAE,IAAI,GAAG,GAAG,IAAI,IAAI,CAAC,EAAE,CAAC;YAC/F,GAAG,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAC9B,CAAC;QACD,OAAO,GAAQ,CAAC;IAClB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,MAAM,KAAK,GAAG,gBAAgB,CAAC;IAC/B,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,IAAkD,CAAC;IACvD,IAAI,KAA6B,CAAC;IAClC,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAC3C,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QACtB,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,GAAG,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,gBAAgB,CAAC;YAC1D,IAAI,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,CAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;YAC7C,MAAM,GAAG,KAAK,CAAC,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC;QACpC,CAAC;aAAM,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,IAAI,iBAAiB,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACjH,IAAI,GAAG,SAAS,CAAC;YACjB,iEAAiE;YACjE,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;YAC7D,MAAM,GAAG,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;QAClD,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY,EAAE,KAAa,EAAE,MAAc;IACpE,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;IACxD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACjE,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,GAAG,MAAM,CAAC,CAAC;IACnD,OAAO,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,MAAM,EAAE,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;AAC1F,CAAC"}

package/dist/telemetry/sink.d.ts

@@ -0,0 +1,212 @@
+import { type ReviewCycleReceipt, type ReviewCycleRequest } from '../converge/review-cycle.js';
+import { type HarnessCredential } from './credentials.js';
+import type { ArtifactKind, RunEnvelope } from './envelope.js';
+import type { WireEvent } from './events.js';
+import type { RecoveryRequestBudget, RecoveryWritePermit, RecoveryRateLimit } from './recovery-request-budget.js';
+import { type ReceiptProbe } from './attested-retry.js';
+/**
+ * The HTTP side of evidence (epic IO-12475, sections 8.4 and 9): POST the
+ * envelope, PUT each declared artifact, POST converge events, and GET what
+ * Harness holds (a pull request's gate status, one run). Every request
+ * normally runs under a 10 s timeout (artifacts have bounded headroom), carries the client handshake the server's
+ * version floor reads, and sends the token only to the host that minted it
+ * (the credential is a `{url, token}` pair resolved elsewhere).
+ *
+ * Outcomes are classified for the caller: what the server accepted, what
+ * it refused for good (never retried), what is switched off for the org,
+ * and what could not be reached (spooled and retried later).
+ */
+export declare const REQUEST_TIMEOUT_MS = 10000;
+/** Explicit envelope retries may wait longer for an idempotent receipt. */
+export declare const MAX_ENVELOPE_TIMEOUT_MS = 120000;
+export declare function validateEnvelopeTimeoutMs(timeoutMs: number): number;
+/** Bounded transfer headroom for supported 25 MB artifacts, not a throughput guarantee. */
+export declare const ARTIFACT_TRANSFER_TIMEOUT_MS = 120000;
+/** A receipt is a few hundred bytes; anything past this is not a Harness answer. */
+export declare const MAX_RESPONSE_BYTES: number;
+/** A read carries a run's findings and calls (up to the bounded evidence envelope) or a gate status; anything past this is not one. */
+export declare const MAX_READ_RESPONSE_BYTES: number;
+export interface RequestOptions {
+    /** Recovery reserves transport capacity before its final source proof. */
+    recoveryWritePermit?: RecoveryWritePermit;
+    /** A shorter delivery budget, including any capability preflight, e.g. a flush's remaining time. */
+    timeoutMs?: number;
+    /** The most the response body may hold (default: a receipt's worth). */
+    maxResponseBytes?: number;
+    /** Recovery reads require HTTP 200 and a strict envelope; 'data' permits endpoints without meta. */
+    requireCompleteRead?: boolean | 'data';
+    /** Cancellation/deadline for an attested same-workflow retry operation. */
+    signal?: AbortSignal;
+}
+export interface RunReceipt {
+    id: string;
+    url: string;
+    received_at?: string;
+    repo_verified?: boolean;
+    head_verified?: string;
+    artifacts_expected: string[];
+    status: 'created' | 'existing';
+}
+export interface ArtifactReceipt {
+    kind: string;
+    sha256: string;
+    url?: string;
+    status: 'created' | 'existing';
+}
+export interface ReviewerArtifactReference {
+    sha256: string;
+    bytes?: number;
+}
+export interface ReviewerArtifactReceipt {
+    runId: string;
+    sha256: string;
+    bytes: number;
+    status: 'created' | 'existing';
+}
+export type ReviewerArtifactRead = SinkOutcome<{
+    bytes: Buffer;
+    sha256: string;
+}> | {
+    kind: 'pending';
+    runId: string;
+    sha256: string;
+    bytes: number;
+};
+export interface EventsReceipt {
+    inserted: number;
+    duplicates: number;
+}
+export type SinkOutcome<T> = {
+    kind: 'ok';
+    value: T;
+    httpStatus: number;
+}
+/** The organization has not enabled review evidence, or caps it at findings. */
+ | {
+    kind: 'disabled';
+    reason: 'reviews_disabled' | 'artifacts_disabled';
+    message: string;
+}
+/** The run id is already recorded with a different report digest. */
+ | {
+    kind: 'conflict';
+    message: string;
+}
+/** The server understood the request and refused it for good; retrying cannot help. */
+ | {
+    kind: 'rejected';
+    httpStatus: number;
+    error: string;
+    message: string;
+}
+/** Network, timeout or server failure — the delivery is worth retrying. */
+ | {
+    kind: 'unavailable';
+    reason: string;
+    httpStatus?: number;
+    retryAfterMs?: number;
+    rateLimitReason?: RecoveryRateLimit['reason'];
+};
+export type PreparedPostRun = Extract<SinkOutcome<RunReceipt>, {
+    kind: 'rejected';
+}> | {
+    kind: 'ready';
+    serializedEnvelope: string;
+    post: (options?: RequestOptions) => Promise<SinkOutcome<RunReceipt>>;
+    receipt: (options?: RequestOptions) => Promise<ReceiptProbe<RunReceipt>>;
+};
+export interface SinkOptions {
+    /** Only explicitly selected recovery operations opt into quota scheduling. */
+    requestBudget?: RecoveryRequestBudget;
+    credential: HarnessCredential;
+    rclVersion: string;
+    fetchImpl?: typeof fetch;
+    /** Explicit caller ceiling, including artifact transfers. */
+    timeoutMs?: number;
+    /** Envelope POST ceiling only; never extends a shorter caller or credential lifetime. */
+    envelopeTimeoutMs?: number;
+    /** Known lifetime of a run-bound credential; omitted legacy credentials keep the 10 s cap. */
+    attestedExpiresAt?: string;
+}
+/** Inspect retained bindings without normalizing or replacing their original values. */
+export declare function validSightingBinding(entry: Record<string, unknown>): boolean;
+export declare class HarnessSink {
+    private readonly credential;
+    private readonly rclVersion;
+    private readonly fetchImpl;
+    private readonly timeoutMs;
+    private readonly envelopeTimeoutMs?;
+    private readonly artifactTimeoutMs;
+    private readonly artifactExpiry?;
+    private readonly requestBudget?;
+    constructor(options: SinkOptions);
+    get baseUrl(): string;
+    /** Recovery never substitutes an ordinary credential for an attested one. */
+    get credentialSource(): HarnessCredential['source'];
+    /** Actor-authorized cycle creation; never fall back from a run-bound credential. */
+    startReviewCycle(repo: string, prNumber: number, request: ReviewCycleRequest): Promise<SinkOutcome<ReviewCycleReceipt>>;
+    /** Exact bounded raw artifact read; never decode/re-encode original evidence. */
+    getArtifact(runId: string, kind: ArtifactKind, limit: number, options?: RequestOptions): Promise<SinkOutcome<{
+        bytes: Buffer;
+        sha256: string;
+    }>>;
+    /** Current authenticated capability only; never a paid-call or source-authority grant. */
+    checkReviewerRecovery(options?: RequestOptions): Promise<SinkOutcome<{
+        protocol: 2;
+        schema: 1;
+        planVersion: 2;
+        captureVersion: 2;
+        providerConcurrencyVersion: 1;
+        maxBytes: number;
+    }>>;
+    /** Exact private upload. The server independently authorizes the owner and validates the declared pair. */
+    putReviewerArtifact(runId: string, bytes: string, expected: ReviewerArtifactReference & {
+        bytes: number;
+    }, options?: RequestOptions): Promise<SinkOutcome<ReviewerArtifactReceipt>>;
+    /** Private owner/grant read. Only an exact, owner-checked pending response permits a subsequent PUT. */
+    getReviewerArtifact(runId: string, expected: ReviewerArtifactReference, options?: RequestOptions): Promise<ReviewerArtifactRead>;
+    /** The reservation is scheduling only; callers must still prove source and packet freshness. */
+    reserveRecoveryWrite(): Promise<RecoveryWritePermit | undefined>;
+    releaseRecoveryWrite(permit: RecoveryWritePermit | undefined): void;
+    private artifactLifetime;
+    private artifactBudget;
+    private fetchRequest;
+    private headers;
+    private request;
+    private classify;
+    /** Capability is read at the credential's own host; no speculative write. */
+    private requireEvidenceProtocol;
+    /** Retain immutable delivery primitives and exact bytes for one POST and any replay. */
+    preparePostRun(envelope: RunEnvelope, serializedEnvelope?: string): PreparedPostRun;
+    /** `POST /api/v1/reviews/runs` — idempotent on the run id. */
+    postRun(envelope: RunEnvelope, options?: RequestOptions, serializedEnvelope?: string): Promise<SinkOutcome<RunReceipt>>;
+    private postPreparedRun;
+    /**
+     * Read the restricted run-bound receipt after an uncertain attested POST.
+     * Only a 404 authorizes a replay; unavailable, rejected or malformed answers
+     * stop recovery. The server independently restricts this route to the
+     * credential's own live run and signed workflow subject.
+     */
+    getAttestedRunReceipt(envelope: RunEnvelope, serializedEnvelope: string, options?: RequestOptions): Promise<ReceiptProbe<RunReceipt>>;
+    private getPreparedReceipt;
+    /** `PUT /api/v1/reviews/runs/:id/artifacts/:kind` — the raw bytes, never JSON. */
+    putArtifact(runId: string, kind: ArtifactKind, bytes: string, options?: RequestOptions): Promise<SinkOutcome<ArtifactReceipt>>;
+    /** `POST /api/v1/reviews/converge/events` — idempotent on each event id. */
+    postEvents(events: WireEvent[], options?: RequestOptions): Promise<SinkOutcome<EventsReceipt>>;
+    /**
+     * `GET <path>` — a read under the same timeout, handshake and host binding
+     * as deliveries. `validate` says what the caller asked for: it returns the
+     * typed value when `data` is about that thing and `null` otherwise, which
+     * is reported as `malformed_response` rather than trusted. Reads allow a
+     * larger body than a receipt (`MAX_READ_RESPONSE_BYTES`) unless told otherwise.
+     */
+    getJson<T>(path: string, validate: (data: unknown, meta?: unknown) => T | null, options?: RequestOptions): Promise<SinkOutcome<T>>;
+}
+/**
+ * The body as text, or `null` once it exceeds `limit` bytes — the stream is
+ * cancelled there, so a runaway response never fills memory.
+ */
+/** The body up to `limit` bytes, or null once it exceeds them — the stream is cancelled, never buffered whole. */
+export declare function readBounded(response: Response, limit: number): Promise<string | null>;
+/** One phrase for a non-ok outcome, safe to print (no token, no body dump, no control characters). */
+export declare function describeOutcome(outcome: SinkOutcome<unknown>): string;