@closerepo/sentinel-contracts 1.0.0 → 1.2.0

package/dist/index.d.ts

@@ -3,6 +3,7 @@ import { z } from "zod";
 declare const sentinelContractVersion: 1;
 declare const sentinelHealthReportMaximumBytes: number;
 declare const sentinelHealthReportMaximumComponents = 64;
+declare const sentinelHealthReportMaximumCapabilities = 64;
 declare const sentinelEventIdSchema: z.ZodUUID;
 declare const sentinelEvidenceSchema: z.ZodObject<{
   label: z.ZodEnum<{
@@ -877,6 +878,563 @@ declare const sentinelHealthReportSchema: z.ZodObject<{
     }, z.core.$strict>>;
   }, z.core.$strict>>;
 }, z.core.$strict>;
+declare const sentinelRuntimeCapabilityObservationSchema: z.ZodObject<{
+  capabilityKey: z.ZodString;
+  state: z.ZodEnum<{
+    enabled: "enabled";
+    disabled: "disabled";
+  }>;
+}, z.core.$strict>;
+declare const sentinelHealthReportV2Schema: z.ZodObject<{
+  contractVersion: z.ZodLiteral<2>;
+  projectId: z.ZodString;
+  environment: z.ZodString;
+  runtimeInstanceId: z.ZodString;
+  reportId: z.ZodUUID;
+  sequence: z.ZodNumber;
+  observedAt: z.ZodISODateTime;
+  components: z.ZodArray<z.ZodObject<{
+    componentKey: z.ZodString;
+    componentClass: z.ZodString;
+    state: z.ZodEnum<{
+      unknown: "unknown";
+      failed: "failed";
+      unavailable: "unavailable";
+      degraded: "degraded";
+      healthy: "healthy";
+    }>;
+    lastSuccessAt: z.ZodNullable<z.ZodISODateTime>;
+    facts: z.ZodArray<z.ZodObject<{
+      key: z.ZodString;
+      value: z.ZodNumber;
+      unit: z.ZodOptional<z.ZodEnum<{
+        bytes: "bytes";
+        count: "count";
+        milliseconds: "milliseconds";
+        percent: "percent";
+        ratio: "ratio";
+      }>>;
+    }, z.core.$strict>>;
+    failure: z.ZodNullable<z.ZodObject<{
+      episodeId: z.ZodUUID;
+      attempt: z.ZodNumber;
+      terminal: z.ZodBoolean;
+      operation: z.ZodString;
+      stage: z.ZodString;
+      code: z.ZodString;
+      summary: z.ZodString;
+      correlationId: z.ZodOptional<z.ZodString>;
+      upstreamStatus: z.ZodOptional<z.ZodNumber>;
+      upstreamCode: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>;
+  }, z.core.$strict>>;
+  capabilities: z.ZodArray<z.ZodObject<{
+    capabilityKey: z.ZodString;
+    state: z.ZodEnum<{
+      enabled: "enabled";
+      disabled: "disabled";
+    }>;
+  }, z.core.$strict>>;
+}, z.core.$strict>;
+declare const sentinelHealthReportAnySchema: z.ZodUnion<readonly [z.ZodObject<{
+  contractVersion: z.ZodLiteral<1>;
+  projectId: z.ZodString;
+  environment: z.ZodString;
+  runtimeInstanceId: z.ZodString;
+  reportId: z.ZodUUID;
+  sequence: z.ZodNumber;
+  observedAt: z.ZodISODateTime;
+  components: z.ZodArray<z.ZodObject<{
+    componentKey: z.ZodString;
+    componentClass: z.ZodString;
+    state: z.ZodEnum<{
+      unknown: "unknown";
+      failed: "failed";
+      unavailable: "unavailable";
+      degraded: "degraded";
+      healthy: "healthy";
+    }>;
+    lastSuccessAt: z.ZodNullable<z.ZodISODateTime>;
+    facts: z.ZodArray<z.ZodObject<{
+      key: z.ZodString;
+      value: z.ZodNumber;
+      unit: z.ZodOptional<z.ZodEnum<{
+        bytes: "bytes";
+        count: "count";
+        milliseconds: "milliseconds";
+        percent: "percent";
+        ratio: "ratio";
+      }>>;
+    }, z.core.$strict>>;
+    failure: z.ZodNullable<z.ZodObject<{
+      episodeId: z.ZodUUID;
+      attempt: z.ZodNumber;
+      terminal: z.ZodBoolean;
+      operation: z.ZodString;
+      stage: z.ZodString;
+      code: z.ZodString;
+      summary: z.ZodString;
+      correlationId: z.ZodOptional<z.ZodString>;
+      upstreamStatus: z.ZodOptional<z.ZodNumber>;
+      upstreamCode: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>;
+  }, z.core.$strict>>;
+}, z.core.$strict>, z.ZodObject<{
+  contractVersion: z.ZodLiteral<2>;
+  projectId: z.ZodString;
+  environment: z.ZodString;
+  runtimeInstanceId: z.ZodString;
+  reportId: z.ZodUUID;
+  sequence: z.ZodNumber;
+  observedAt: z.ZodISODateTime;
+  components: z.ZodArray<z.ZodObject<{
+    componentKey: z.ZodString;
+    componentClass: z.ZodString;
+    state: z.ZodEnum<{
+      unknown: "unknown";
+      failed: "failed";
+      unavailable: "unavailable";
+      degraded: "degraded";
+      healthy: "healthy";
+    }>;
+    lastSuccessAt: z.ZodNullable<z.ZodISODateTime>;
+    facts: z.ZodArray<z.ZodObject<{
+      key: z.ZodString;
+      value: z.ZodNumber;
+      unit: z.ZodOptional<z.ZodEnum<{
+        bytes: "bytes";
+        count: "count";
+        milliseconds: "milliseconds";
+        percent: "percent";
+        ratio: "ratio";
+      }>>;
+    }, z.core.$strict>>;
+    failure: z.ZodNullable<z.ZodObject<{
+      episodeId: z.ZodUUID;
+      attempt: z.ZodNumber;
+      terminal: z.ZodBoolean;
+      operation: z.ZodString;
+      stage: z.ZodString;
+      code: z.ZodString;
+      summary: z.ZodString;
+      correlationId: z.ZodOptional<z.ZodString>;
+      upstreamStatus: z.ZodOptional<z.ZodNumber>;
+      upstreamCode: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>;
+  }, z.core.$strict>>;
+  capabilities: z.ZodArray<z.ZodObject<{
+    capabilityKey: z.ZodString;
+    state: z.ZodEnum<{
+      enabled: "enabled";
+      disabled: "disabled";
+    }>;
+  }, z.core.$strict>>;
+}, z.core.$strict>]>;
+declare const sentinelHealthRuntimeStatusSchema: z.ZodObject<{
+  contractVersion: z.ZodLiteral<1>;
+  statusType: z.ZodLiteral<"health">;
+  projectId: z.ZodString;
+  environment: z.ZodString;
+  runtimes: z.ZodArray<z.ZodObject<{
+    runtimeInstanceId: z.ZodString;
+    state: z.ZodEnum<{
+      unavailable: "unavailable";
+      degraded: "degraded";
+      healthy: "healthy";
+      stale: "stale";
+    }>;
+    latestReport: z.ZodNullable<z.ZodObject<{
+      receivedAt: z.ZodISODateTime;
+      report: z.ZodUnion<readonly [z.ZodObject<{
+        contractVersion: z.ZodLiteral<1>;
+        projectId: z.ZodString;
+        environment: z.ZodString;
+        runtimeInstanceId: z.ZodString;
+        reportId: z.ZodUUID;
+        sequence: z.ZodNumber;
+        observedAt: z.ZodISODateTime;
+        components: z.ZodArray<z.ZodObject<{
+          componentKey: z.ZodString;
+          componentClass: z.ZodString;
+          state: z.ZodEnum<{
+            unknown: "unknown";
+            failed: "failed";
+            unavailable: "unavailable";
+            degraded: "degraded";
+            healthy: "healthy";
+          }>;
+          lastSuccessAt: z.ZodNullable<z.ZodISODateTime>;
+          facts: z.ZodArray<z.ZodObject<{
+            key: z.ZodString;
+            value: z.ZodNumber;
+            unit: z.ZodOptional<z.ZodEnum<{
+              bytes: "bytes";
+              count: "count";
+              milliseconds: "milliseconds";
+              percent: "percent";
+              ratio: "ratio";
+            }>>;
+          }, z.core.$strict>>;
+          failure: z.ZodNullable<z.ZodObject<{
+            episodeId: z.ZodUUID;
+            attempt: z.ZodNumber;
+            terminal: z.ZodBoolean;
+            operation: z.ZodString;
+            stage: z.ZodString;
+            code: z.ZodString;
+            summary: z.ZodString;
+            correlationId: z.ZodOptional<z.ZodString>;
+            upstreamStatus: z.ZodOptional<z.ZodNumber>;
+            upstreamCode: z.ZodOptional<z.ZodString>;
+          }, z.core.$strict>>;
+        }, z.core.$strict>>;
+      }, z.core.$strict>, z.ZodObject<{
+        contractVersion: z.ZodLiteral<2>;
+        projectId: z.ZodString;
+        environment: z.ZodString;
+        runtimeInstanceId: z.ZodString;
+        reportId: z.ZodUUID;
+        sequence: z.ZodNumber;
+        observedAt: z.ZodISODateTime;
+        components: z.ZodArray<z.ZodObject<{
+          componentKey: z.ZodString;
+          componentClass: z.ZodString;
+          state: z.ZodEnum<{
+            unknown: "unknown";
+            failed: "failed";
+            unavailable: "unavailable";
+            degraded: "degraded";
+            healthy: "healthy";
+          }>;
+          lastSuccessAt: z.ZodNullable<z.ZodISODateTime>;
+          facts: z.ZodArray<z.ZodObject<{
+            key: z.ZodString;
+            value: z.ZodNumber;
+            unit: z.ZodOptional<z.ZodEnum<{
+              bytes: "bytes";
+              count: "count";
+              milliseconds: "milliseconds";
+              percent: "percent";
+              ratio: "ratio";
+            }>>;
+          }, z.core.$strict>>;
+          failure: z.ZodNullable<z.ZodObject<{
+            episodeId: z.ZodUUID;
+            attempt: z.ZodNumber;
+            terminal: z.ZodBoolean;
+            operation: z.ZodString;
+            stage: z.ZodString;
+            code: z.ZodString;
+            summary: z.ZodString;
+            correlationId: z.ZodOptional<z.ZodString>;
+            upstreamStatus: z.ZodOptional<z.ZodNumber>;
+            upstreamCode: z.ZodOptional<z.ZodString>;
+          }, z.core.$strict>>;
+        }, z.core.$strict>>;
+        capabilities: z.ZodArray<z.ZodObject<{
+          capabilityKey: z.ZodString;
+          state: z.ZodEnum<{
+            enabled: "enabled";
+            disabled: "disabled";
+          }>;
+        }, z.core.$strict>>;
+      }, z.core.$strict>]>;
+    }, z.core.$strict>>;
+    componentIncidents: z.ZodArray<z.ZodObject<{
+      componentKey: z.ZodString;
+      failure: z.ZodObject<{
+        episodeId: z.ZodUUID;
+        attempt: z.ZodNumber;
+        terminal: z.ZodBoolean;
+        operation: z.ZodString;
+        stage: z.ZodString;
+        code: z.ZodString;
+        summary: z.ZodString;
+        correlationId: z.ZodOptional<z.ZodString>;
+        upstreamStatus: z.ZodOptional<z.ZodNumber>;
+        upstreamCode: z.ZodOptional<z.ZodString>;
+      }, z.core.$strict>;
+      incidentId: z.ZodUUID;
+    }, z.core.$strict>>;
+    runtimeExpectationIncident: z.ZodNullable<z.ZodObject<{
+      differences: z.ZodArray<z.ZodObject<{
+        capabilityKey: z.ZodString;
+        expected: z.ZodEnum<{
+          enabled: "enabled";
+          disabled: "disabled";
+        }>;
+        kind: z.ZodEnum<{
+          mismatch: "mismatch";
+          missing: "missing";
+        }>;
+        observed: z.ZodNullable<z.ZodEnum<{
+          enabled: "enabled";
+          disabled: "disabled";
+        }>>;
+      }, z.core.$strict>>;
+      expectationRevision: z.ZodString;
+      incidentId: z.ZodUUID;
+      observationState: z.ZodEnum<{
+        unavailable: "unavailable";
+        available: "available";
+      }>;
+    }, z.core.$strict>>;
+    staleIncident: z.ZodNullable<z.ZodObject<{
+      incidentId: z.ZodUUID;
+      openedAt: z.ZodISODateTime;
+    }, z.core.$strict>>;
+  }, z.core.$strict>>;
+}, z.core.$strict>;
+declare const sentinelStatusResponseSchema: z.ZodUnion<readonly [z.ZodObject<{
+  contractVersion: z.ZodLiteral<1>;
+  projectId: z.ZodString;
+  environment: z.ZodString;
+  registration: z.ZodObject<{
+    enabled: z.ZodBoolean;
+    mode: z.ZodEnum<{
+      live: "live";
+      disabled: "disabled";
+      shadow: "shadow";
+    }>;
+    policyDigest: z.ZodString;
+    projectionDigest: z.ZodString;
+    projectedAt: z.ZodISODateTime;
+    sourceRevision: z.ZodString;
+  }, z.core.$strict>;
+  rules: z.ZodArray<z.ZodObject<{
+    id: z.ZodString;
+    semanticDigest: z.ZodString;
+    enabled: z.ZodBoolean;
+    state: z.ZodEnum<{
+      unknown: "unknown";
+      firing: "firing";
+      closed: "closed";
+      idle: "idle";
+    }>;
+    severity: z.ZodNullable<z.ZodEnum<{
+      warning: "warning";
+      critical: "critical";
+    }>>;
+    incidentId: z.ZodNullable<z.ZodUUID>;
+    lastEvaluatedAt: z.ZodNullable<z.ZodISODateTime>;
+    lastEventId: z.ZodNullable<z.ZodUUID>;
+  }, z.core.$strict>>;
+  deliveries: z.ZodArray<z.ZodObject<{
+    contractVersion: z.ZodLiteral<1>;
+    projectId: z.ZodString;
+    environment: z.ZodString;
+    eventId: z.ZodUUID;
+    state: z.ZodEnum<{
+      pending: "pending";
+      delivered: "delivered";
+      failed: "failed";
+      retrying: "retrying";
+      partial: "partial";
+      unavailable: "unavailable";
+    }>;
+    reason: z.ZodEnum<{
+      in_progress: "in_progress";
+      partial_delivery: "partial_delivery";
+      complete: "complete";
+      retry_exhausted: "retry_exhausted";
+      receipt_unavailable: "receipt_unavailable";
+    }>;
+    receivers: z.ZodArray<z.ZodObject<{
+      receiverKey: z.ZodString;
+      state: z.ZodEnum<{
+        pending: "pending";
+        delivering: "delivering";
+        delivered: "delivered";
+        failed: "failed";
+      }>;
+      attempts: z.ZodNumber;
+      failureCode: z.ZodNullable<z.ZodEnum<{
+        delivery_interrupted: "delivery_interrupted";
+        provider_rejected: "provider_rejected";
+        provider_timeout: "provider_timeout";
+        provider_unavailable: "provider_unavailable";
+        receiver_missing: "receiver_missing";
+        synthetic_retry: "synthetic_retry";
+      }>>;
+      leaseExpiresAt: z.ZodNullable<z.ZodISODateTime>;
+      lastAttemptAt: z.ZodNullable<z.ZodISODateTime>;
+    }, z.core.$strict>>;
+    updatedAt: z.ZodISODateTime;
+  }, z.core.$strict>>;
+  heartbeat: z.ZodObject<{
+    state: z.ZodEnum<{
+      unavailable: "unavailable";
+      healthy: "healthy";
+      stale: "stale";
+    }>;
+    lastCompletedAt: z.ZodNullable<z.ZodISODateTime>;
+  }, z.core.$strict>;
+  diagnostics: z.ZodArray<z.ZodObject<{
+    code: z.ZodString;
+    state: z.ZodEnum<{
+      unknown: "unknown";
+      warning: "warning";
+      failed: "failed";
+      degraded: "degraded";
+    }>;
+    summary: z.ZodString;
+    suggestedCommand: z.ZodOptional<z.ZodString>;
+  }, z.core.$strict>>;
+}, z.core.$strict>, z.ZodObject<{
+  contractVersion: z.ZodLiteral<1>;
+  statusType: z.ZodLiteral<"health">;
+  projectId: z.ZodString;
+  environment: z.ZodString;
+  runtimes: z.ZodArray<z.ZodObject<{
+    runtimeInstanceId: z.ZodString;
+    state: z.ZodEnum<{
+      unavailable: "unavailable";
+      degraded: "degraded";
+      healthy: "healthy";
+      stale: "stale";
+    }>;
+    latestReport: z.ZodNullable<z.ZodObject<{
+      receivedAt: z.ZodISODateTime;
+      report: z.ZodUnion<readonly [z.ZodObject<{
+        contractVersion: z.ZodLiteral<1>;
+        projectId: z.ZodString;
+        environment: z.ZodString;
+        runtimeInstanceId: z.ZodString;
+        reportId: z.ZodUUID;
+        sequence: z.ZodNumber;
+        observedAt: z.ZodISODateTime;
+        components: z.ZodArray<z.ZodObject<{
+          componentKey: z.ZodString;
+          componentClass: z.ZodString;
+          state: z.ZodEnum<{
+            unknown: "unknown";
+            failed: "failed";
+            unavailable: "unavailable";
+            degraded: "degraded";
+            healthy: "healthy";
+          }>;
+          lastSuccessAt: z.ZodNullable<z.ZodISODateTime>;
+          facts: z.ZodArray<z.ZodObject<{
+            key: z.ZodString;
+            value: z.ZodNumber;
+            unit: z.ZodOptional<z.ZodEnum<{
+              bytes: "bytes";
+              count: "count";
+              milliseconds: "milliseconds";
+              percent: "percent";
+              ratio: "ratio";
+            }>>;
+          }, z.core.$strict>>;
+          failure: z.ZodNullable<z.ZodObject<{
+            episodeId: z.ZodUUID;
+            attempt: z.ZodNumber;
+            terminal: z.ZodBoolean;
+            operation: z.ZodString;
+            stage: z.ZodString;
+            code: z.ZodString;
+            summary: z.ZodString;
+            correlationId: z.ZodOptional<z.ZodString>;
+            upstreamStatus: z.ZodOptional<z.ZodNumber>;
+            upstreamCode: z.ZodOptional<z.ZodString>;
+          }, z.core.$strict>>;
+        }, z.core.$strict>>;
+      }, z.core.$strict>, z.ZodObject<{
+        contractVersion: z.ZodLiteral<2>;
+        projectId: z.ZodString;
+        environment: z.ZodString;
+        runtimeInstanceId: z.ZodString;
+        reportId: z.ZodUUID;
+        sequence: z.ZodNumber;
+        observedAt: z.ZodISODateTime;
+        components: z.ZodArray<z.ZodObject<{
+          componentKey: z.ZodString;
+          componentClass: z.ZodString;
+          state: z.ZodEnum<{
+            unknown: "unknown";
+            failed: "failed";
+            unavailable: "unavailable";
+            degraded: "degraded";
+            healthy: "healthy";
+          }>;
+          lastSuccessAt: z.ZodNullable<z.ZodISODateTime>;
+          facts: z.ZodArray<z.ZodObject<{
+            key: z.ZodString;
+            value: z.ZodNumber;
+            unit: z.ZodOptional<z.ZodEnum<{
+              bytes: "bytes";
+              count: "count";
+              milliseconds: "milliseconds";
+              percent: "percent";
+              ratio: "ratio";
+            }>>;
+          }, z.core.$strict>>;
+          failure: z.ZodNullable<z.ZodObject<{
+            episodeId: z.ZodUUID;
+            attempt: z.ZodNumber;
+            terminal: z.ZodBoolean;
+            operation: z.ZodString;
+            stage: z.ZodString;
+            code: z.ZodString;
+            summary: z.ZodString;
+            correlationId: z.ZodOptional<z.ZodString>;
+            upstreamStatus: z.ZodOptional<z.ZodNumber>;
+            upstreamCode: z.ZodOptional<z.ZodString>;
+          }, z.core.$strict>>;
+        }, z.core.$strict>>;
+        capabilities: z.ZodArray<z.ZodObject<{
+          capabilityKey: z.ZodString;
+          state: z.ZodEnum<{
+            enabled: "enabled";
+            disabled: "disabled";
+          }>;
+        }, z.core.$strict>>;
+      }, z.core.$strict>]>;
+    }, z.core.$strict>>;
+    componentIncidents: z.ZodArray<z.ZodObject<{
+      componentKey: z.ZodString;
+      failure: z.ZodObject<{
+        episodeId: z.ZodUUID;
+        attempt: z.ZodNumber;
+        terminal: z.ZodBoolean;
+        operation: z.ZodString;
+        stage: z.ZodString;
+        code: z.ZodString;
+        summary: z.ZodString;
+        correlationId: z.ZodOptional<z.ZodString>;
+        upstreamStatus: z.ZodOptional<z.ZodNumber>;
+        upstreamCode: z.ZodOptional<z.ZodString>;
+      }, z.core.$strict>;
+      incidentId: z.ZodUUID;
+    }, z.core.$strict>>;
+    runtimeExpectationIncident: z.ZodNullable<z.ZodObject<{
+      differences: z.ZodArray<z.ZodObject<{
+        capabilityKey: z.ZodString;
+        expected: z.ZodEnum<{
+          enabled: "enabled";
+          disabled: "disabled";
+        }>;
+        kind: z.ZodEnum<{
+          mismatch: "mismatch";
+          missing: "missing";
+        }>;
+        observed: z.ZodNullable<z.ZodEnum<{
+          enabled: "enabled";
+          disabled: "disabled";
+        }>>;
+      }, z.core.$strict>>;
+      expectationRevision: z.ZodString;
+      incidentId: z.ZodUUID;
+      observationState: z.ZodEnum<{
+        unavailable: "unavailable";
+        available: "available";
+      }>;
+    }, z.core.$strict>>;
+    staleIncident: z.ZodNullable<z.ZodObject<{
+      incidentId: z.ZodUUID;
+      openedAt: z.ZodISODateTime;
+    }, z.core.$strict>>;
+  }, z.core.$strict>>;
+}, z.core.$strict>]>;
 declare const sentinelHealthReportAuthenticationSchema: z.ZodObject<{
   timestamp: z.ZodISODateTime;
   nonce: z.ZodUUID;
@@ -934,9 +1492,184 @@ declare const sentinelHealthReportSubmissionSchema: z.ZodObject<{
     signature: z.ZodString;
   }, z.core.$strict>;
 }, z.core.$strict>;
+declare const sentinelHealthReportSubmissionV2Schema: z.ZodObject<{
+  contractVersion: z.ZodLiteral<2>;
+  report: z.ZodObject<{
+    contractVersion: z.ZodLiteral<2>;
+    projectId: z.ZodString;
+    environment: z.ZodString;
+    runtimeInstanceId: z.ZodString;
+    reportId: z.ZodUUID;
+    sequence: z.ZodNumber;
+    observedAt: z.ZodISODateTime;
+    components: z.ZodArray<z.ZodObject<{
+      componentKey: z.ZodString;
+      componentClass: z.ZodString;
+      state: z.ZodEnum<{
+        unknown: "unknown";
+        failed: "failed";
+        unavailable: "unavailable";
+        degraded: "degraded";
+        healthy: "healthy";
+      }>;
+      lastSuccessAt: z.ZodNullable<z.ZodISODateTime>;
+      facts: z.ZodArray<z.ZodObject<{
+        key: z.ZodString;
+        value: z.ZodNumber;
+        unit: z.ZodOptional<z.ZodEnum<{
+          bytes: "bytes";
+          count: "count";
+          milliseconds: "milliseconds";
+          percent: "percent";
+          ratio: "ratio";
+        }>>;
+      }, z.core.$strict>>;
+      failure: z.ZodNullable<z.ZodObject<{
+        episodeId: z.ZodUUID;
+        attempt: z.ZodNumber;
+        terminal: z.ZodBoolean;
+        operation: z.ZodString;
+        stage: z.ZodString;
+        code: z.ZodString;
+        summary: z.ZodString;
+        correlationId: z.ZodOptional<z.ZodString>;
+        upstreamStatus: z.ZodOptional<z.ZodNumber>;
+        upstreamCode: z.ZodOptional<z.ZodString>;
+      }, z.core.$strict>>;
+    }, z.core.$strict>>;
+    capabilities: z.ZodArray<z.ZodObject<{
+      capabilityKey: z.ZodString;
+      state: z.ZodEnum<{
+        enabled: "enabled";
+        disabled: "disabled";
+      }>;
+    }, z.core.$strict>>;
+  }, z.core.$strict>;
+  authentication: z.ZodObject<{
+    timestamp: z.ZodISODateTime;
+    nonce: z.ZodUUID;
+    signature: z.ZodString;
+  }, z.core.$strict>;
+}, z.core.$strict>;
+declare const sentinelHealthReportSubmissionAnySchema: z.ZodUnion<readonly [z.ZodObject<{
+  contractVersion: z.ZodLiteral<1>;
+  report: z.ZodObject<{
+    contractVersion: z.ZodLiteral<1>;
+    projectId: z.ZodString;
+    environment: z.ZodString;
+    runtimeInstanceId: z.ZodString;
+    reportId: z.ZodUUID;
+    sequence: z.ZodNumber;
+    observedAt: z.ZodISODateTime;
+    components: z.ZodArray<z.ZodObject<{
+      componentKey: z.ZodString;
+      componentClass: z.ZodString;
+      state: z.ZodEnum<{
+        unknown: "unknown";
+        failed: "failed";
+        unavailable: "unavailable";
+        degraded: "degraded";
+        healthy: "healthy";
+      }>;
+      lastSuccessAt: z.ZodNullable<z.ZodISODateTime>;
+      facts: z.ZodArray<z.ZodObject<{
+        key: z.ZodString;
+        value: z.ZodNumber;
+        unit: z.ZodOptional<z.ZodEnum<{
+          bytes: "bytes";
+          count: "count";
+          milliseconds: "milliseconds";
+          percent: "percent";
+          ratio: "ratio";
+        }>>;
+      }, z.core.$strict>>;
+      failure: z.ZodNullable<z.ZodObject<{
+        episodeId: z.ZodUUID;
+        attempt: z.ZodNumber;
+        terminal: z.ZodBoolean;
+        operation: z.ZodString;
+        stage: z.ZodString;
+        code: z.ZodString;
+        summary: z.ZodString;
+        correlationId: z.ZodOptional<z.ZodString>;
+        upstreamStatus: z.ZodOptional<z.ZodNumber>;
+        upstreamCode: z.ZodOptional<z.ZodString>;
+      }, z.core.$strict>>;
+    }, z.core.$strict>>;
+  }, z.core.$strict>;
+  authentication: z.ZodObject<{
+    timestamp: z.ZodISODateTime;
+    nonce: z.ZodUUID;
+    signature: z.ZodString;
+  }, z.core.$strict>;
+}, z.core.$strict>, z.ZodObject<{
+  contractVersion: z.ZodLiteral<2>;
+  report: z.ZodObject<{
+    contractVersion: z.ZodLiteral<2>;
+    projectId: z.ZodString;
+    environment: z.ZodString;
+    runtimeInstanceId: z.ZodString;
+    reportId: z.ZodUUID;
+    sequence: z.ZodNumber;
+    observedAt: z.ZodISODateTime;
+    components: z.ZodArray<z.ZodObject<{
+      componentKey: z.ZodString;
+      componentClass: z.ZodString;
+      state: z.ZodEnum<{
+        unknown: "unknown";
+        failed: "failed";
+        unavailable: "unavailable";
+        degraded: "degraded";
+        healthy: "healthy";
+      }>;
+      lastSuccessAt: z.ZodNullable<z.ZodISODateTime>;
+      facts: z.ZodArray<z.ZodObject<{
+        key: z.ZodString;
+        value: z.ZodNumber;
+        unit: z.ZodOptional<z.ZodEnum<{
+          bytes: "bytes";
+          count: "count";
+          milliseconds: "milliseconds";
+          percent: "percent";
+          ratio: "ratio";
+        }>>;
+      }, z.core.$strict>>;
+      failure: z.ZodNullable<z.ZodObject<{
+        episodeId: z.ZodUUID;
+        attempt: z.ZodNumber;
+        terminal: z.ZodBoolean;
+        operation: z.ZodString;
+        stage: z.ZodString;
+        code: z.ZodString;
+        summary: z.ZodString;
+        correlationId: z.ZodOptional<z.ZodString>;
+        upstreamStatus: z.ZodOptional<z.ZodNumber>;
+        upstreamCode: z.ZodOptional<z.ZodString>;
+      }, z.core.$strict>>;
+    }, z.core.$strict>>;
+    capabilities: z.ZodArray<z.ZodObject<{
+      capabilityKey: z.ZodString;
+      state: z.ZodEnum<{
+        enabled: "enabled";
+        disabled: "disabled";
+      }>;
+    }, z.core.$strict>>;
+  }, z.core.$strict>;
+  authentication: z.ZodObject<{
+    timestamp: z.ZodISODateTime;
+    nonce: z.ZodUUID;
+    signature: z.ZodString;
+  }, z.core.$strict>;
+}, z.core.$strict>]>;
 declare function sentinelHealthReportSignatureInput(submission: Pick<SentinelHealthReportSubmission, 'contractVersion' | 'report'> & {
   authentication: Pick<SentinelHealthReportAuthentication, 'timestamp' | 'nonce'>;
 }): string;
+declare function sentinelHealthReportV2SignatureInput(submission: Pick<SentinelHealthReportSubmissionV2, 'contractVersion' | 'report'> & {
+  authentication: Pick<SentinelHealthReportAuthentication, 'timestamp' | 'nonce'>;
+}): string;
+declare function sentinelHealthReportAnySignatureInput(submission: Pick<SentinelHealthReportSubmissionAny, 'contractVersion' | 'report'> & {
+  authentication: Pick<SentinelHealthReportAuthentication, 'timestamp' | 'nonce'>;
+}): string;
 declare const sentinelHealthReportRejectionCodeSchema: z.ZodEnum<{
   authentication_failed: "authentication_failed";
   identity_not_registered: "identity_not_registered";
@@ -978,6 +1711,12 @@ declare const sentinelHealthReportIngestResultSchema: z.ZodDiscriminatedUnion<[z
 interface SentinelHealthReportServiceV1 {
   reportHealth(submission: SentinelHealthReportSubmission): Promise<SentinelHealthReportIngestResult>;
 }
+interface SentinelHealthReportServiceV2 {
+  reportHealth(submission: SentinelHealthReportSubmissionV2): Promise<SentinelHealthReportIngestResult>;
+}
+interface SentinelHealthReportServiceAny {
+  reportHealth(submission: SentinelHealthReportSubmissionAny): Promise<SentinelHealthReportIngestResult>;
+}
 type SentinelAction = z.infer<typeof sentinelActionSchema>;
 type SentinelAlertPolicy = z.infer<typeof sentinelAlertPolicySchema>;
 type SentinelDeliveryReceipt = z.infer<typeof sentinelDeliveryReceiptSchema>;
@@ -992,14 +1731,21 @@ type SentinelRegistration = z.infer<typeof sentinelRegistrationSchema>;
 type SentinelRegistrationCommand = z.infer<typeof sentinelRegistrationCommandSchema>;
 type SentinelRule = z.infer<typeof sentinelRuleSchema>;
 type SentinelRuntimeStatus = z.infer<typeof sentinelRuntimeStatusSchema>;
+type SentinelHealthRuntimeStatus = z.infer<typeof sentinelHealthRuntimeStatusSchema>;
+type SentinelStatusResponse = z.infer<typeof sentinelStatusResponseSchema>;
 type SentinelTestEvent = z.infer<typeof sentinelTestEventSchema>;
 type SentinelHealthComponent = z.infer<typeof sentinelHealthComponentSchema>;
 type SentinelHealthFailure = z.infer<typeof sentinelHealthFailureSchema>;
 type SentinelHealthMetricFact = z.infer<typeof sentinelHealthMetricFactSchema>;
 type SentinelHealthReport = z.infer<typeof sentinelHealthReportSchema>;
+type SentinelHealthReportV2 = z.infer<typeof sentinelHealthReportV2Schema>;
+type SentinelHealthReportAny = z.infer<typeof sentinelHealthReportAnySchema>;
 type SentinelHealthReportAuthentication = z.infer<typeof sentinelHealthReportAuthenticationSchema>;
 type SentinelHealthReportIngestResult = z.infer<typeof sentinelHealthReportIngestResultSchema>;
 type SentinelHealthReportRejectionCode = z.infer<typeof sentinelHealthReportRejectionCodeSchema>;
 type SentinelHealthReportSubmission = z.infer<typeof sentinelHealthReportSubmissionSchema>;
+type SentinelHealthReportSubmissionV2 = z.infer<typeof sentinelHealthReportSubmissionV2Schema>;
+type SentinelHealthReportSubmissionAny = z.infer<typeof sentinelHealthReportSubmissionAnySchema>;
+type SentinelRuntimeCapabilityObservation = z.infer<typeof sentinelRuntimeCapabilityObservationSchema>;
 //#endregion
-export { SentinelAction, SentinelAlertPolicy, SentinelDeliveryReceipt, SentinelEnvironmentBinding, SentinelHealthComponent, SentinelHealthFailure, SentinelHealthMetricFact, SentinelHealthReport, SentinelHealthReportAuthentication, SentinelHealthReportIngestResult, SentinelHealthReportRejectionCode, SentinelHealthReportServiceV1, SentinelHealthReportSubmission, SentinelIncidentEvent, SentinelPolicyAction, SentinelProjectManifest, SentinelQueueEvent, SentinelQueueMetrics, SentinelReceiverFailureCode, SentinelRegistration, SentinelRegistrationCommand, SentinelRule, SentinelRuntimeStatus, SentinelTestEvent, sentinelActionSchema, sentinelAlertPolicySchema, sentinelContractVersion, sentinelDeliveryReceiptSchema, sentinelDiagnosticSchema, sentinelEnvironmentBindingSchema, sentinelEventIdSchema, sentinelEvidenceSchema, sentinelHealthComponentSchema, sentinelHealthFailureSchema, sentinelHealthMetricFactSchema, sentinelHealthReportAuthenticationSchema, sentinelHealthReportIngestResultSchema, sentinelHealthReportMaximumBytes, sentinelHealthReportMaximumComponents, sentinelHealthReportRejectionCodeSchema, sentinelHealthReportSchema, sentinelHealthReportSignatureInput, sentinelHealthReportSubmissionSchema, sentinelIncidentEventSchema, sentinelPolicyActionSchema, sentinelProjectManifestSchema, sentinelQueueEventIdentityInput, sentinelQueueEventSchema, sentinelQueueMetricsSchema, sentinelReceiverFailureCodeSchema, sentinelReceiverStateSchema, sentinelRegistrationCommandSchema, sentinelRegistrationSchema, sentinelRuleSchema, sentinelRunbookSchema, sentinelRuntimeStatusSchema, sentinelTestEventSchema };
+export { SentinelAction, SentinelAlertPolicy, SentinelDeliveryReceipt, SentinelEnvironmentBinding, SentinelHealthComponent, SentinelHealthFailure, SentinelHealthMetricFact, SentinelHealthReport, SentinelHealthReportAny, SentinelHealthReportAuthentication, SentinelHealthReportIngestResult, SentinelHealthReportRejectionCode, SentinelHealthReportServiceAny, SentinelHealthReportServiceV1, SentinelHealthReportServiceV2, SentinelHealthReportSubmission, SentinelHealthReportSubmissionAny, SentinelHealthReportSubmissionV2, SentinelHealthReportV2, SentinelHealthRuntimeStatus, SentinelIncidentEvent, SentinelPolicyAction, SentinelProjectManifest, SentinelQueueEvent, SentinelQueueMetrics, SentinelReceiverFailureCode, SentinelRegistration, SentinelRegistrationCommand, SentinelRule, SentinelRuntimeCapabilityObservation, SentinelRuntimeStatus, SentinelStatusResponse, SentinelTestEvent, sentinelActionSchema, sentinelAlertPolicySchema, sentinelContractVersion, sentinelDeliveryReceiptSchema, sentinelDiagnosticSchema, sentinelEnvironmentBindingSchema, sentinelEventIdSchema, sentinelEvidenceSchema, sentinelHealthComponentSchema, sentinelHealthFailureSchema, sentinelHealthMetricFactSchema, sentinelHealthReportAnySchema, sentinelHealthReportAnySignatureInput, sentinelHealthReportAuthenticationSchema, sentinelHealthReportIngestResultSchema, sentinelHealthReportMaximumBytes, sentinelHealthReportMaximumCapabilities, sentinelHealthReportMaximumComponents, sentinelHealthReportRejectionCodeSchema, sentinelHealthReportSchema, sentinelHealthReportSignatureInput, sentinelHealthReportSubmissionAnySchema, sentinelHealthReportSubmissionSchema, sentinelHealthReportSubmissionV2Schema, sentinelHealthReportV2Schema, sentinelHealthReportV2SignatureInput, sentinelHealthRuntimeStatusSchema, sentinelIncidentEventSchema, sentinelPolicyActionSchema, sentinelProjectManifestSchema, sentinelQueueEventIdentityInput, sentinelQueueEventSchema, sentinelQueueMetricsSchema, sentinelReceiverFailureCodeSchema, sentinelReceiverStateSchema, sentinelRegistrationCommandSchema, sentinelRegistrationSchema, sentinelRuleSchema, sentinelRunbookSchema, sentinelRuntimeCapabilityObservationSchema, sentinelRuntimeStatusSchema, sentinelStatusResponseSchema, sentinelTestEventSchema };

package/dist/index.js

@@ -1 +1 @@
-import{z as e}from"zod";const t=1,n=32*1024,r=64,i=t=>e.string().trim().min(1).max(t),a=e.string().regex(/^[a-z][a-z0-9_-]{0,63}$/),o=e.string().regex(/^[a-z][A-Za-z0-9_]{0,63}$/),s=e.uuid(),c=s,l=e.url().refine(e=>e.startsWith(`https://`),`must use HTTPS`),u=e.object({label:e.enum([`Observed value`,`Warning threshold`,`Critical threshold`]),value:e.number().finite().nonnegative()}).strict(),d=e.object({label:i(80),url:l}).strict(),f=e.object({type:e.literal(`none`)}).strict(),p=e.object({type:e.literal(`live_command`),command:i(500).regex(/^abuse apply\b/).refine(e=>e.endsWith(` --apply`),`must end with --apply`)}).strict(),m=e.object({type:e.literal(`test_preview`),summary:i(300).refine(e=>!e.includes(`--apply`),`must not contain --apply`)}).strict(),h=e.discriminatedUnion(`type`,[f,p,m]),g=e.object({contractVersion:e.literal(1),projectId:a,environment:a,incidentId:c,eventId:c,kind:e.enum([`firing`,`reminder`,`resolved`]),severity:e.enum([`warning`,`critical`]),signalClass:e.enum([`attack`,`service`]),signal:a,title:i(120),occurredAt:e.iso.datetime(),evidence:e.array(u).max(8),runbook:d,statusCommand:i(300).regex(/^sentinel status\b/),receiverKeys:e.array(a).min(1).max(16),action:h}).strict(),_=g.extend({mode:e.literal(`live`)}).superRefine((e,t)=>{e.signalClass===`service`&&e.action.type!==`none`&&t.addIssue({code:`custom`,message:`service events cannot contain an operational action`,path:[`action`]}),e.action.type===`test_preview`&&t.addIssue({code:`custom`,message:`live events cannot contain a test preview`,path:[`action`]})}),v=g.extend({mode:e.literal(`test`),action:e.discriminatedUnion(`type`,[f,m])}).strict(),y=e.union([_,v]);function b(e){let t=y.parse(e);return JSON.stringify(t)}const x=e.enum([`delivery_interrupted`,`provider_rejected`,`provider_timeout`,`provider_unavailable`,`receiver_missing`,`synthetic_retry`]),S=e.object({receiverKey:a,state:e.enum([`pending`,`delivering`,`delivered`,`failed`]),attempts:e.number().int().min(0).max(4),failureCode:x.nullable(),leaseExpiresAt:e.iso.datetime().nullable(),lastAttemptAt:e.iso.datetime().nullable()}).strict().superRefine((e,t)=>{e.state===`failed`&&e.failureCode===null&&t.addIssue({code:`custom`,message:`failed receivers require failureCode`,path:[`failureCode`]}),e.state!==`failed`&&e.failureCode!==null&&t.addIssue({code:`custom`,message:`only failed receivers can carry failureCode`,path:[`failureCode`]})}),C=e.object({contractVersion:e.literal(1),projectId:a,environment:a,eventId:c,state:e.enum([`pending`,`retrying`,`partial`,`delivered`,`failed`,`unavailable`]),reason:e.enum([`in_progress`,`partial_delivery`,`complete`,`retry_exhausted`,`receipt_unavailable`]),receivers:e.array(S).max(16),updatedAt:e.iso.datetime()}).strict(),w=e.object({code:a,state:e.enum([`degraded`,`failed`,`unknown`,`warning`]),summary:i(300),suggestedCommand:i(500).optional()}).strict(),T=e.object({contractVersion:e.literal(1),projectId:a,environment:a,registration:e.object({enabled:e.boolean(),mode:e.enum([`disabled`,`shadow`,`live`]),policyDigest:e.string().regex(/^[a-f0-9]{64}$/),projectionDigest:e.string().regex(/^[a-f0-9]{64}$/),projectedAt:e.iso.datetime(),sourceRevision:i(160)}).strict(),rules:e.array(e.object({id:a,semanticDigest:e.string().regex(/^[a-f0-9]{64}$/),enabled:e.boolean(),state:e.enum([`closed`,`firing`,`idle`,`unknown`]),severity:e.enum([`warning`,`critical`]).nullable(),incidentId:c.nullable(),lastEvaluatedAt:e.iso.datetime().nullable(),lastEventId:c.nullable()}).strict()).max(64),deliveries:e.array(C).max(64),heartbeat:e.object({state:e.enum([`healthy`,`stale`,`unavailable`]),lastCompletedAt:e.iso.datetime().nullable()}).strict(),diagnostics:e.array(w).max(32)}).strict(),E=e.object({state:e.enum([`available`,`unavailable`]),backlogCount:e.number().int().nonnegative().nullable(),backlogBytes:e.number().int().nonnegative().nullable(),oldestMessageAt:e.iso.datetime().nullable(),retentionSeconds:e.number().int().positive().nullable()}).strict(),D=e.string().regex(/^[A-Z][A-Z0-9_]{2,127}$/),O=e.string().max(240).regex(/^(?![A-Za-z]:|\/|.*(?:^|\/)\.\.(?:\/|$)).+\.json$/),k=e.object({mode:e.enum([`disabled`,`shadow`,`live`]),statusUrlEnv:D,statusHmacSecretEnv:D,healthReportHmacSecretEnv:D.optional(),opsAccountIdEnv:D,provisionApiTokenEnv:D,statusApiTokenEnv:D,analyticsAccountIdEnv:D,analyticsApiTokenEnv:D,analyticsDataset:a,workerName:a,queueName:a,dlqName:a,registrationQueueName:a,registrationDlqName:a,notificationWorkerName:a,healthchecksProvisionApiKeyEnv:D.optional(),healthchecksPingUrlEnv:D.optional(),healthchecksStatusApiKeyEnv:D.optional()}).strict().superRefine((e,t)=>{let n=[e.healthchecksProvisionApiKeyEnv,e.healthchecksPingUrlEnv,e.healthchecksStatusApiKeyEnv].filter(Boolean);n.length>0&&n.length!==3&&t.addIssue({code:`custom`,message:`Healthchecks provision, status and ping URL references must be configured together`,path:[`healthchecksProvisionApiKeyEnv`]})}),A=e.object({contractVersion:e.literal(1),projectId:a,policy:O,environments:e.record(a,k)}).strict().superRefine((e,t)=>{Object.keys(e.environments).length===0&&t.addIssue({code:`custom`,message:`at least one environment is required`,path:[`environments`]})}),j=e.object({type:e.literal(`abuse`),project:e.string().regex(/^[a-zA-Z0-9._/-]{1,120}$/),target:a,action:a,layer:a,ttl:e.string().regex(/^[1-9][0-9]{0,4}[smhd]$/).optional()}).strict(),M=e.discriminatedUnion(`type`,[f,j]),N=e.object({id:a,enabled:e.boolean(),signalClass:e.enum([`attack`,`service`]),signal:e.object({type:e.enum([`operation_count`,`worker_error_ratio`,`edge_security_spike`,`provider_health`]),operation:o.optional(),operations:e.array(o).min(1).max(16).optional(),outcomes:e.array(e.enum([`committed`,`accepted_noop`,`rejected`,`failed`])).max(4).optional(),minimumSample:e.number().int().positive().optional()}).strict(),windowMinutes:e.number().int().min(5).max(1440),thresholds:e.object({warning:e.number().nonnegative(),critical:e.number().positive()}).strict().refine(e=>e.critical>e.warning,`critical must exceed warning`),recovery:e.object({healthyEvaluations:e.number().int().min(1).max(24)}).strict(),reminders:e.object({warningMinutes:e.number().int().min(5).max(10080),criticalMinutes:e.number().int().min(5).max(10080)}).strict(),runbook:d,receiverKeys:e.array(a).min(1).max(16),actions:e.object({warning:M,critical:M}).strict()}).strict().superRefine((e,t)=>{e.signal.operation&&e.signal.operations&&t.addIssue({code:`custom`,message:`signal cannot define both operation and operations`,path:[`signal`]}),e.signal.type===`operation_count`&&!e.signal.operation&&!e.signal.operations&&t.addIssue({code:`custom`,message:`operation_count requires operation or operations`,path:[`signal`]}),e.signal.type===`provider_health`&&e.thresholds.warning>1&&t.addIssue({code:`custom`,message:`provider_health warning threshold must be at most 1`,path:[`thresholds`,`warning`]}),e.signalClass===`service`&&(e.actions.warning.type!==`none`||e.actions.critical.type!==`none`)&&t.addIssue({code:`custom`,message:`service rules cannot configure abuse actions`,path:[`actions`]})}),P=e.object({contractVersion:e.literal(1),evaluationMinutes:e.number().int().min(5).max(60),rules:e.array(N).min(1).max(64)}).strict().superRefine((e,t)=>{let n=new Set;for(let[r,i]of e.rules.entries())n.has(i.id)&&t.addIssue({code:`custom`,message:`duplicate rule id ${i.id}`,path:[`rules`,r,`id`]}),n.add(i.id)}),F=e.object({analytics:e.object({accountIdBinding:D,dataset:a,index:i(160),tokenBinding:D}).strict(),enabled:e.boolean(),environment:a,mode:e.enum([`disabled`,`shadow`,`live`]),policy:P,policyDigest:e.string().regex(/^[a-f0-9]{64}$/),projectionDigest:e.string().regex(/^[a-f0-9]{64}$/),projectId:a,projectedAt:e.iso.datetime(),sourceRevision:i(160),healthReportHmacSecretBinding:D.optional()}).strict().refine(e=>e.enabled===(e.mode!==`disabled`),{message:`enabled must match registration mode`,path:[`enabled`]}).superRefine((e,t)=>{e.mode===`live`&&!e.policy.rules.some(e=>e.enabled&&e.signal.type===`provider_health`)&&t.addIssue({code:`custom`,message:`Live registration requires an enabled provider_health rule`,path:[`policy`,`rules`]})}),I=e.object({commandId:c,contractVersion:e.literal(1),expectedPreviousDigest:e.string().regex(/^[a-f0-9]{64}$/).nullable(),kind:e.literal(`registration_upsert`),registration:F}).strict(),L=e.string().trim().min(1).max(160),R=e.object({key:a,value:e.number().finite().nonnegative(),unit:e.enum([`bytes`,`count`,`milliseconds`,`percent`,`ratio`]).optional()}).strict(),z=e.object({episodeId:s,attempt:e.number().int().min(1).max(1e3),terminal:e.boolean(),operation:o,stage:a,code:a,summary:i(300),correlationId:L.optional(),upstreamStatus:e.number().int().min(100).max(599).optional(),upstreamCode:a.optional()}).strict(),B=e.object({componentKey:a,componentClass:a,state:e.enum([`healthy`,`degraded`,`failed`,`unavailable`,`unknown`]),lastSuccessAt:e.iso.datetime().nullable(),facts:e.array(R).max(16),failure:z.nullable()}).strict().superRefine((e,t)=>{e.state===`healthy`&&e.failure!==null&&t.addIssue({code:`custom`,message:`healthy components cannot carry a current failure`,path:[`failure`]}),(e.state===`failed`||e.state===`unavailable`)&&e.failure===null&&t.addIssue({code:`custom`,message:`failed and unavailable components require a current failure`,path:[`failure`]})}),V=e.object({contractVersion:e.literal(1),projectId:a,environment:a,runtimeInstanceId:a,reportId:s,sequence:e.number().int().min(1).max(2**53-1),observedAt:e.iso.datetime(),components:e.array(B).min(1).max(64)}).strict().superRefine((e,t)=>{let n=new Set;for(let[r,i]of e.components.entries())n.has(i.componentKey)&&t.addIssue({code:`custom`,message:`duplicate component key ${i.componentKey}`,path:[`components`,r,`componentKey`]}),n.add(i.componentKey)}),H=e.object({timestamp:e.iso.datetime(),nonce:s,signature:e.string().regex(/^[a-f0-9]{64}$/)}).strict(),U=e.object({contractVersion:e.literal(1),report:V,authentication:H}).strict();function W(e){let t=U.omit({authentication:!0}).extend({authentication:H.omit({signature:!0})}).parse(e);return JSON.stringify(t)}const G=e.enum([`authentication_failed`,`identity_not_registered`,`nonce_replayed`,`report_invalid`,`runtime_identity_mismatch`,`sequence_invalid`,`size_exceeded`,`timestamp_out_of_range`,`unexpected_failure`]),K=e.discriminatedUnion(`outcome`,[e.object({outcome:e.literal(`accepted`),acceptedSequence:e.number().int().min(1).max(2**53-1),receivedAt:e.iso.datetime()}).strict(),e.object({outcome:e.literal(`duplicate`),acceptedSequence:e.number().int().min(1).max(2**53-1),receivedAt:e.iso.datetime()}).strict(),e.object({outcome:e.literal(`out_of_order`),acceptedSequence:e.number().int().min(1).max(2**53-1),receivedAt:e.iso.datetime()}).strict(),e.object({outcome:e.literal(`rejected`),rejectionCode:G,summary:i(300)}).strict()]);export{h as sentinelActionSchema,P as sentinelAlertPolicySchema,t as sentinelContractVersion,C as sentinelDeliveryReceiptSchema,w as sentinelDiagnosticSchema,k as sentinelEnvironmentBindingSchema,s as sentinelEventIdSchema,u as sentinelEvidenceSchema,B as sentinelHealthComponentSchema,z as sentinelHealthFailureSchema,R as sentinelHealthMetricFactSchema,H as sentinelHealthReportAuthenticationSchema,K as sentinelHealthReportIngestResultSchema,n as sentinelHealthReportMaximumBytes,r as sentinelHealthReportMaximumComponents,G as sentinelHealthReportRejectionCodeSchema,V as sentinelHealthReportSchema,W as sentinelHealthReportSignatureInput,U as sentinelHealthReportSubmissionSchema,_ as sentinelIncidentEventSchema,M as sentinelPolicyActionSchema,A as sentinelProjectManifestSchema,b as sentinelQueueEventIdentityInput,y as sentinelQueueEventSchema,E as sentinelQueueMetricsSchema,x as sentinelReceiverFailureCodeSchema,S as sentinelReceiverStateSchema,I as sentinelRegistrationCommandSchema,F as sentinelRegistrationSchema,N as sentinelRuleSchema,d as sentinelRunbookSchema,T as sentinelRuntimeStatusSchema,v as sentinelTestEventSchema};
+import{z as e}from"zod";const t=1,n=32*1024,r=64,i=64,a=t=>e.string().trim().min(1).max(t),o=e.string().regex(/^[a-z][a-z0-9_-]{0,63}$/),s=e.string().regex(/^[a-z][A-Za-z0-9_]{0,63}$/),c=e.uuid(),l=c,ee=e.url().refine(e=>e.startsWith(`https://`),`must use HTTPS`),u=e.object({label:e.enum([`Observed value`,`Warning threshold`,`Critical threshold`]),value:e.number().finite().nonnegative()}).strict(),d=e.object({label:a(80),url:ee}).strict(),f=e.object({type:e.literal(`none`)}).strict(),p=e.object({type:e.literal(`live_command`),command:a(500).regex(/^abuse apply\b/).refine(e=>e.endsWith(` --apply`),`must end with --apply`)}).strict(),m=e.object({type:e.literal(`test_preview`),summary:a(300).refine(e=>!e.includes(`--apply`),`must not contain --apply`)}).strict(),h=e.discriminatedUnion(`type`,[f,p,m]),g=e.object({contractVersion:e.literal(1),projectId:o,environment:o,incidentId:l,eventId:l,kind:e.enum([`firing`,`reminder`,`resolved`]),severity:e.enum([`warning`,`critical`]),signalClass:e.enum([`attack`,`service`]),signal:o,title:a(120),occurredAt:e.iso.datetime(),evidence:e.array(u).max(8),runbook:d,statusCommand:a(300).regex(/^sentinel status\b/),receiverKeys:e.array(o).min(1).max(16),action:h}).strict(),_=g.extend({mode:e.literal(`live`)}).superRefine((e,t)=>{e.signalClass===`service`&&e.action.type!==`none`&&t.addIssue({code:`custom`,message:`service events cannot contain an operational action`,path:[`action`]}),e.action.type===`test_preview`&&t.addIssue({code:`custom`,message:`live events cannot contain a test preview`,path:[`action`]})}),v=g.extend({mode:e.literal(`test`),action:e.discriminatedUnion(`type`,[f,m])}).strict(),y=e.union([_,v]);function b(e){let t=y.parse(e);return JSON.stringify(t)}const x=e.enum([`delivery_interrupted`,`provider_rejected`,`provider_timeout`,`provider_unavailable`,`receiver_missing`,`synthetic_retry`]),S=e.object({receiverKey:o,state:e.enum([`pending`,`delivering`,`delivered`,`failed`]),attempts:e.number().int().min(0).max(4),failureCode:x.nullable(),leaseExpiresAt:e.iso.datetime().nullable(),lastAttemptAt:e.iso.datetime().nullable()}).strict().superRefine((e,t)=>{e.state===`failed`&&e.failureCode===null&&t.addIssue({code:`custom`,message:`failed receivers require failureCode`,path:[`failureCode`]}),e.state!==`failed`&&e.failureCode!==null&&t.addIssue({code:`custom`,message:`only failed receivers can carry failureCode`,path:[`failureCode`]})}),C=e.object({contractVersion:e.literal(1),projectId:o,environment:o,eventId:l,state:e.enum([`pending`,`retrying`,`partial`,`delivered`,`failed`,`unavailable`]),reason:e.enum([`in_progress`,`partial_delivery`,`complete`,`retry_exhausted`,`receipt_unavailable`]),receivers:e.array(S).max(16),updatedAt:e.iso.datetime()}).strict(),w=e.object({code:o,state:e.enum([`degraded`,`failed`,`unknown`,`warning`]),summary:a(300),suggestedCommand:a(500).optional()}).strict(),T=e.object({contractVersion:e.literal(1),projectId:o,environment:o,registration:e.object({enabled:e.boolean(),mode:e.enum([`disabled`,`shadow`,`live`]),policyDigest:e.string().regex(/^[a-f0-9]{64}$/),projectionDigest:e.string().regex(/^[a-f0-9]{64}$/),projectedAt:e.iso.datetime(),sourceRevision:a(160)}).strict(),rules:e.array(e.object({id:o,semanticDigest:e.string().regex(/^[a-f0-9]{64}$/),enabled:e.boolean(),state:e.enum([`closed`,`firing`,`idle`,`unknown`]),severity:e.enum([`warning`,`critical`]).nullable(),incidentId:l.nullable(),lastEvaluatedAt:e.iso.datetime().nullable(),lastEventId:l.nullable()}).strict()).max(64),deliveries:e.array(C).max(64),heartbeat:e.object({state:e.enum([`healthy`,`stale`,`unavailable`]),lastCompletedAt:e.iso.datetime().nullable()}).strict(),diagnostics:e.array(w).max(32)}).strict(),te=e.object({state:e.enum([`available`,`unavailable`]),backlogCount:e.number().int().nonnegative().nullable(),backlogBytes:e.number().int().nonnegative().nullable(),oldestMessageAt:e.iso.datetime().nullable(),retentionSeconds:e.number().int().positive().nullable()}).strict(),E=e.string().regex(/^[A-Z][A-Z0-9_]{2,127}$/),ne=e.string().max(240).regex(/^(?![A-Za-z]:|\/|.*(?:^|\/)\.\.(?:\/|$)).+\.json$/),D=e.object({mode:e.enum([`disabled`,`shadow`,`live`]),statusUrlEnv:E,statusHmacSecretEnv:E,healthReportHmacSecretEnv:E.optional(),opsAccountIdEnv:E,provisionApiTokenEnv:E,statusApiTokenEnv:E,analyticsAccountIdEnv:E,analyticsApiTokenEnv:E,analyticsDataset:o,workerName:o,queueName:o,dlqName:o,registrationQueueName:o,registrationDlqName:o,notificationWorkerName:o,healthchecksProvisionApiKeyEnv:E.optional(),healthchecksPingUrlEnv:E.optional(),healthchecksStatusApiKeyEnv:E.optional()}).strict().superRefine((e,t)=>{let n=[e.healthchecksProvisionApiKeyEnv,e.healthchecksPingUrlEnv,e.healthchecksStatusApiKeyEnv].filter(Boolean);n.length>0&&n.length!==3&&t.addIssue({code:`custom`,message:`Healthchecks provision, status and ping URL references must be configured together`,path:[`healthchecksProvisionApiKeyEnv`]})}),O=e.object({contractVersion:e.literal(1),projectId:o,policy:ne,environments:e.record(o,D)}).strict().superRefine((e,t)=>{Object.keys(e.environments).length===0&&t.addIssue({code:`custom`,message:`at least one environment is required`,path:[`environments`]})}),k=e.object({type:e.literal(`abuse`),project:e.string().regex(/^[a-zA-Z0-9._/-]{1,120}$/),target:o,action:o,layer:o,ttl:e.string().regex(/^[1-9][0-9]{0,4}[smhd]$/).optional()}).strict(),A=e.discriminatedUnion(`type`,[f,k]),j=e.object({id:o,enabled:e.boolean(),signalClass:e.enum([`attack`,`service`]),signal:e.object({type:e.enum([`operation_count`,`worker_error_ratio`,`edge_security_spike`,`provider_health`]),operation:s.optional(),operations:e.array(s).min(1).max(16).optional(),outcomes:e.array(e.enum([`committed`,`accepted_noop`,`rejected`,`failed`])).max(4).optional(),minimumSample:e.number().int().positive().optional()}).strict(),windowMinutes:e.number().int().min(5).max(1440),thresholds:e.object({warning:e.number().nonnegative(),critical:e.number().positive()}).strict().refine(e=>e.critical>e.warning,`critical must exceed warning`),recovery:e.object({healthyEvaluations:e.number().int().min(1).max(24)}).strict(),reminders:e.object({warningMinutes:e.number().int().min(5).max(10080),criticalMinutes:e.number().int().min(5).max(10080)}).strict(),runbook:d,receiverKeys:e.array(o).min(1).max(16),actions:e.object({warning:A,critical:A}).strict()}).strict().superRefine((e,t)=>{e.signal.operation&&e.signal.operations&&t.addIssue({code:`custom`,message:`signal cannot define both operation and operations`,path:[`signal`]}),e.signal.type===`operation_count`&&!e.signal.operation&&!e.signal.operations&&t.addIssue({code:`custom`,message:`operation_count requires operation or operations`,path:[`signal`]}),e.signal.type===`provider_health`&&e.thresholds.warning>1&&t.addIssue({code:`custom`,message:`provider_health warning threshold must be at most 1`,path:[`thresholds`,`warning`]}),e.signalClass===`service`&&(e.actions.warning.type!==`none`||e.actions.critical.type!==`none`)&&t.addIssue({code:`custom`,message:`service rules cannot configure abuse actions`,path:[`actions`]})}),M=e.object({contractVersion:e.literal(1),evaluationMinutes:e.number().int().min(5).max(60),rules:e.array(j).min(1).max(64)}).strict().superRefine((e,t)=>{let n=new Set;for(let[r,i]of e.rules.entries())n.has(i.id)&&t.addIssue({code:`custom`,message:`duplicate rule id ${i.id}`,path:[`rules`,r,`id`]}),n.add(i.id)}),N=e.object({analytics:e.object({accountIdBinding:E,dataset:o,index:a(160),tokenBinding:E}).strict(),enabled:e.boolean(),environment:o,mode:e.enum([`disabled`,`shadow`,`live`]),policy:M,policyDigest:e.string().regex(/^[a-f0-9]{64}$/),projectionDigest:e.string().regex(/^[a-f0-9]{64}$/),projectId:o,projectedAt:e.iso.datetime(),sourceRevision:a(160),healthReportHmacSecretBinding:E.optional()}).strict().refine(e=>e.enabled===(e.mode!==`disabled`),{message:`enabled must match registration mode`,path:[`enabled`]}).superRefine((e,t)=>{e.mode===`live`&&!e.policy.rules.some(e=>e.enabled&&e.signal.type===`provider_health`)&&t.addIssue({code:`custom`,message:`Live registration requires an enabled provider_health rule`,path:[`policy`,`rules`]})}),P=e.object({commandId:l,contractVersion:e.literal(1),expectedPreviousDigest:e.string().regex(/^[a-f0-9]{64}$/).nullable(),kind:e.literal(`registration_upsert`),registration:N}).strict(),F=e.string().trim().min(1).max(160),I=e.object({key:o,value:e.number().finite().nonnegative(),unit:e.enum([`bytes`,`count`,`milliseconds`,`percent`,`ratio`]).optional()}).strict(),L=e.object({episodeId:c,attempt:e.number().int().min(1).max(1e3),terminal:e.boolean(),operation:s,stage:o,code:o,summary:a(300),correlationId:F.optional(),upstreamStatus:e.number().int().min(100).max(599).optional(),upstreamCode:o.optional()}).strict(),R=e.object({componentKey:o,componentClass:o,state:e.enum([`healthy`,`degraded`,`failed`,`unavailable`,`unknown`]),lastSuccessAt:e.iso.datetime().nullable(),facts:e.array(I).max(16),failure:L.nullable()}).strict().superRefine((e,t)=>{e.state===`healthy`&&e.failure!==null&&t.addIssue({code:`custom`,message:`healthy components cannot carry a current failure`,path:[`failure`]}),(e.state===`failed`||e.state===`unavailable`)&&e.failure===null&&t.addIssue({code:`custom`,message:`failed and unavailable components require a current failure`,path:[`failure`]})}),z=e.object({contractVersion:e.literal(1),projectId:o,environment:o,runtimeInstanceId:o,reportId:c,sequence:e.number().int().min(1).max(2**53-1),observedAt:e.iso.datetime(),components:e.array(R).min(1).max(64)}).strict().superRefine((e,t)=>{let n=new Set;for(let[r,i]of e.components.entries())n.has(i.componentKey)&&t.addIssue({code:`custom`,message:`duplicate component key ${i.componentKey}`,path:[`components`,r,`componentKey`]}),n.add(i.componentKey)}),B=e.object({capabilityKey:o,state:e.enum([`enabled`,`disabled`])}).strict(),V=e.object({contractVersion:e.literal(2),projectId:o,environment:o,runtimeInstanceId:o,reportId:c,sequence:e.number().int().min(1).max(2**53-1),observedAt:e.iso.datetime(),components:e.array(R).min(1).max(64),capabilities:e.array(B).max(64)}).strict().superRefine((e,t)=>{let n=new Set;for(let[r,i]of e.components.entries())n.has(i.componentKey)&&t.addIssue({code:`custom`,message:`duplicate component key ${i.componentKey}`,path:[`components`,r,`componentKey`]}),n.add(i.componentKey);let r=new Set;for(let[n,i]of e.capabilities.entries())r.has(i.capabilityKey)&&t.addIssue({code:`custom`,message:`duplicate capability key ${i.capabilityKey}`,path:[`capabilities`,n,`capabilityKey`]}),r.add(i.capabilityKey)}),H=e.union([z,V]),U=e.object({capabilityKey:o,expected:e.enum([`enabled`,`disabled`]),kind:e.enum([`mismatch`,`missing`]),observed:e.enum([`enabled`,`disabled`]).nullable()}).strict(),W=e.object({componentKey:o,failure:L,incidentId:l}).strict(),G=e.object({runtimeInstanceId:o,state:e.enum([`degraded`,`healthy`,`stale`,`unavailable`]),latestReport:e.object({receivedAt:e.iso.datetime(),report:H}).strict().nullable(),componentIncidents:e.array(W).max(64),runtimeExpectationIncident:e.object({differences:e.array(U).max(64),expectationRevision:o,incidentId:l,observationState:e.enum([`available`,`unavailable`])}).strict().nullable(),staleIncident:e.object({incidentId:l,openedAt:e.iso.datetime()}).strict().nullable()}).strict().superRefine((e,t)=>{let n=e.latestReport===null?`unavailable`:e.staleIncident===null?e.componentIncidents.length>0||e.runtimeExpectationIncident!==null?`degraded`:`healthy`:`stale`;e.state!==n&&t.addIssue({code:`custom`,message:`runtime state must be ${n}`,path:[`state`]}),e.latestReport===null&&(e.componentIncidents.length>0||e.runtimeExpectationIncident!==null||e.staleIncident!==null)&&t.addIssue({code:`custom`,message:`an unavailable runtime without a report cannot carry incidents`,path:[`latestReport`]})}),K=e.object({contractVersion:e.literal(1),statusType:e.literal(`health`),projectId:o,environment:o,runtimes:e.array(G).max(64)}).strict().superRefine((e,t)=>{let n=new Set;for(let[r,i]of e.runtimes.entries()){n.has(i.runtimeInstanceId)&&t.addIssue({code:`custom`,message:`duplicate runtime identity ${i.runtimeInstanceId}`,path:[`runtimes`,r,`runtimeInstanceId`]}),n.add(i.runtimeInstanceId);let a=i.latestReport?.report;a&&(a.projectId!==e.projectId||a.environment!==e.environment||a.runtimeInstanceId!==i.runtimeInstanceId)&&t.addIssue({code:`custom`,message:`latest report identity must match the status runtime identity`,path:[`runtimes`,r,`latestReport`,`report`]})}}),q=e.union([T,K]),J=e.object({timestamp:e.iso.datetime(),nonce:c,signature:e.string().regex(/^[a-f0-9]{64}$/)}).strict(),Y=e.object({contractVersion:e.literal(1),report:z,authentication:J}).strict(),X=e.object({contractVersion:e.literal(2),report:V,authentication:J}).strict(),re=e.union([Y,X]);function Z(e){let t=Y.omit({authentication:!0}).extend({authentication:J.omit({signature:!0})}).parse(e);return JSON.stringify(t)}function Q(e){let t=X.omit({authentication:!0}).extend({authentication:J.omit({signature:!0})}).parse(e);return JSON.stringify(t)}function ie(e){return e.contractVersion===1?Z(e):Q(e)}const $=e.enum([`authentication_failed`,`identity_not_registered`,`nonce_replayed`,`report_invalid`,`runtime_identity_mismatch`,`sequence_invalid`,`size_exceeded`,`timestamp_out_of_range`,`unexpected_failure`]),ae=e.discriminatedUnion(`outcome`,[e.object({outcome:e.literal(`accepted`),acceptedSequence:e.number().int().min(1).max(2**53-1),receivedAt:e.iso.datetime()}).strict(),e.object({outcome:e.literal(`duplicate`),acceptedSequence:e.number().int().min(1).max(2**53-1),receivedAt:e.iso.datetime()}).strict(),e.object({outcome:e.literal(`out_of_order`),acceptedSequence:e.number().int().min(1).max(2**53-1),receivedAt:e.iso.datetime()}).strict(),e.object({outcome:e.literal(`rejected`),rejectionCode:$,summary:a(300)}).strict()]);export{h as sentinelActionSchema,M as sentinelAlertPolicySchema,t as sentinelContractVersion,C as sentinelDeliveryReceiptSchema,w as sentinelDiagnosticSchema,D as sentinelEnvironmentBindingSchema,c as sentinelEventIdSchema,u as sentinelEvidenceSchema,R as sentinelHealthComponentSchema,L as sentinelHealthFailureSchema,I as sentinelHealthMetricFactSchema,H as sentinelHealthReportAnySchema,ie as sentinelHealthReportAnySignatureInput,J as sentinelHealthReportAuthenticationSchema,ae as sentinelHealthReportIngestResultSchema,n as sentinelHealthReportMaximumBytes,i as sentinelHealthReportMaximumCapabilities,r as sentinelHealthReportMaximumComponents,$ as sentinelHealthReportRejectionCodeSchema,z as sentinelHealthReportSchema,Z as sentinelHealthReportSignatureInput,re as sentinelHealthReportSubmissionAnySchema,Y as sentinelHealthReportSubmissionSchema,X as sentinelHealthReportSubmissionV2Schema,V as sentinelHealthReportV2Schema,Q as sentinelHealthReportV2SignatureInput,K as sentinelHealthRuntimeStatusSchema,_ as sentinelIncidentEventSchema,A as sentinelPolicyActionSchema,O as sentinelProjectManifestSchema,b as sentinelQueueEventIdentityInput,y as sentinelQueueEventSchema,te as sentinelQueueMetricsSchema,x as sentinelReceiverFailureCodeSchema,S as sentinelReceiverStateSchema,P as sentinelRegistrationCommandSchema,N as sentinelRegistrationSchema,j as sentinelRuleSchema,d as sentinelRunbookSchema,B as sentinelRuntimeCapabilityObservationSchema,T as sentinelRuntimeStatusSchema,q as sentinelStatusResponseSchema,v as sentinelTestEventSchema};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@closerepo/sentinel-contracts",
-  "version": "1.0.0",
+  "version": "1.2.0",
   "type": "module",
   "license": "UNLICENSED",
   "repository": {