@datum-cloud/activity-ui 0.1.0

package/dist/types/k8s-event.d.ts

@@ -0,0 +1,224 @@
+/**
+ * TypeScript types for Kubernetes Events (core/v1.Event)
+ * Exposed via the Activity API (activity.miloapis.com/v1alpha1)
+ */
+import type { ObjectMeta } from './index';
+import type { FacetSpec, FacetResult } from './activity';
+/**
+ * Event types in Kubernetes
+ */
+export type K8sEventType = 'Normal' | 'Warning';
+/**
+ * Object reference for the regarding/related object
+ */
+export interface ObjectReference {
+    apiVersion?: string;
+    kind?: string;
+    namespace?: string;
+    name?: string;
+    uid?: string;
+    resourceVersion?: string;
+    fieldPath?: string;
+}
+/**
+ * Event series information (for aggregated events)
+ */
+export interface EventSeries {
+    /** Number of occurrences in this series */
+    count?: number;
+    /** Time of the last occurrence observed */
+    lastObservedTime?: string;
+}
+/**
+ * Kubernetes Event (events.k8s.io/v1)
+ * This is the newer events API that replaces core/v1.Event
+ */
+export interface K8sEvent {
+    apiVersion: 'events.k8s.io/v1';
+    kind: 'Event';
+    metadata: ObjectMeta;
+    /** Object this event is about (was involvedObject in core/v1) */
+    regarding: ObjectReference;
+    /** Optional secondary object for more complex actions */
+    related?: ObjectReference;
+    /** Short, machine-understandable string that gives the reason for the event */
+    reason?: string;
+    /** Human-readable description of the event (was message in core/v1) */
+    note?: string;
+    /** Type of this event (Normal, Warning) */
+    type?: K8sEventType;
+    /** Time when this Event was first observed (replaces firstTimestamp) */
+    eventTime?: string;
+    /** What action was taken/failed regarding the object */
+    action?: string;
+    /** Name of the controller that emitted this event (was source.component in core/v1) */
+    reportingController?: string;
+    /** ID of the controller instance (was source.host in core/v1) */
+    reportingInstance?: string;
+    /** Data about the Event series this event represents (was count/firstTimestamp/lastTimestamp) */
+    series?: EventSeries;
+    /** @deprecated Use regarding instead */
+    involvedObject?: ObjectReference;
+    /** @deprecated Use note instead */
+    message?: string;
+    /** @deprecated Use reportingController instead */
+    source?: {
+        component?: string;
+        host?: string;
+    };
+    /** @deprecated Use series.count instead */
+    count?: number;
+    deprecatedCount?: number;
+    /** @deprecated Use eventTime instead */
+    firstTimestamp?: string;
+    deprecatedFirstTimestamp?: string;
+    /** @deprecated Use series.lastObservedTime instead */
+    lastTimestamp?: string;
+    deprecatedLastTimestamp?: string;
+    /** @deprecated Use reportingController instead */
+    reportingComponent?: string;
+}
+/**
+ * EventRecord represents a Kubernetes Event returned in EventQuery results.
+ * This is a wrapper type that embeds the events.k8s.io/v1 Event to avoid
+ * OpenAPI GVK conflicts while preserving full event data.
+ */
+export interface EventRecord {
+    apiVersion: 'activity.miloapis.com/v1alpha1';
+    kind: 'EventRecord';
+    metadata: ObjectMeta;
+    /** Event contains the full Kubernetes Event data in events.k8s.io/v1 format */
+    event: K8sEvent;
+}
+/**
+ * Kubernetes Event list response with pagination
+ */
+export interface K8sEventList {
+    apiVersion: 'v1';
+    kind: 'EventList';
+    metadata?: {
+        continue?: string;
+        resourceVersion?: string;
+    };
+    items: K8sEvent[];
+}
+/**
+ * Query parameters for listing Kubernetes Events
+ */
+export interface K8sEventListParams {
+    /** Namespace to list events from (empty for all namespaces) */
+    namespace?: string;
+    /** Field selector for filtering (e.g., "regarding.name=my-pod") */
+    fieldSelector?: string;
+    /** Label selector for filtering */
+    labelSelector?: string;
+    /** Maximum results per page */
+    limit?: number;
+    /** Pagination cursor */
+    continue?: string;
+    /** Watch for changes */
+    watch?: boolean;
+    /** Start Watch from this version */
+    resourceVersion?: string;
+}
+/**
+ * Event facet query request spec
+ */
+export interface EventFacetQuerySpec {
+    /** Time range for the facet query */
+    timeRange?: {
+        start?: string;
+        end?: string;
+    };
+    /** List of facets to query (1-10 facets) */
+    facets: FacetSpec[];
+}
+/**
+ * Event facet query status with results
+ */
+export interface EventFacetQueryStatus {
+    facets: FacetResult[];
+}
+/**
+ * Event facet query resource
+ * Used to discover available filter values from actual event data
+ */
+export interface EventFacetQuery {
+    apiVersion: 'activity.miloapis.com/v1alpha1';
+    kind: 'EventFacetQuery';
+    spec: EventFacetQuerySpec;
+    status?: EventFacetQueryStatus;
+}
+/**
+ * Event filter field definition for autocomplete and help
+ */
+export interface EventFilterField {
+    name: string;
+    type: 'string' | 'enum';
+    description: string;
+    enumValues?: string[];
+    examples?: string[];
+}
+/**
+ * Available filter fields for Kubernetes Events
+ * These map to field selectors supported by the API (events.k8s.io/v1)
+ */
+export declare const EVENT_FILTER_FIELDS: EventFilterField[];
+/**
+ * Event facet fields available for querying
+ * These are the fields supported by EventFacetQuery (events.k8s.io/v1)
+ */
+export declare const EVENT_FACET_FIELDS: readonly ["regarding.kind", "regarding.namespace", "reason", "type", "source.component", "metadata.namespace"];
+export type EventFacetField = typeof EVENT_FACET_FIELDS[number];
+/**
+ * Extract K8sEvent from EventRecord or pass through if already a K8sEvent.
+ * Use this helper when you need to handle both EventRecord (from EventQuery)
+ * and K8sEvent (from live events API).
+ */
+export declare function extractEvent(eventOrRecord: K8sEvent | EventRecord): K8sEvent;
+/**
+ * Check if an object is an EventRecord (vs a plain K8sEvent)
+ */
+export declare function isEventRecord(obj: K8sEvent | EventRecord): obj is EventRecord;
+/**
+ * EventQuery request spec for querying historical events from ClickHouse
+ */
+export interface EventQuerySpec {
+    /** Start of time range (RFC3339 or relative like "now-7d") */
+    startTime: string;
+    /** End of time range (RFC3339 or relative, default: now) */
+    endTime: string;
+    /** Namespace to filter events (optional) */
+    namespace?: string;
+    /** Field selector for filtering (standard Kubernetes syntax) */
+    fieldSelector?: string;
+    /** Maximum results per page (default: 100, max: 1000) */
+    limit?: number;
+    /** Pagination cursor */
+    continue?: string;
+}
+/**
+ * EventQuery status with results
+ */
+export interface EventQueryStatus {
+    /** Matching events as EventRecord objects */
+    results: EventRecord[];
+    /** Pagination cursor for next page */
+    continue?: string;
+    /** Actual start time used (RFC3339) */
+    effectiveStartTime?: string;
+    /** Actual end time used (RFC3339) */
+    effectiveEndTime?: string;
+}
+/**
+ * EventQuery resource for querying historical events
+ * Unlike the live events API (limited to 24h), EventQuery supports up to 60 days of history
+ */
+export interface EventQuery {
+    apiVersion: 'activity.miloapis.com/v1alpha1';
+    kind: 'EventQuery';
+    metadata?: ObjectMeta;
+    spec: EventQuerySpec;
+    status?: EventQueryStatus;
+}
+//# sourceMappingURL=k8s-event.d.ts.map

package/dist/types/k8s-event.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"k8s-event.d.ts","sourceRoot":"","sources":["../../src/types/k8s-event.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAC1C,OAAO,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAEzD;;GAEG;AACH,MAAM,MAAM,YAAY,GAAG,QAAQ,GAAG,SAAS,CAAC;AAEhD;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,2CAA2C;IAC3C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,2CAA2C;IAC3C,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED;;;GAGG;AACH,MAAM,WAAW,QAAQ;IACvB,UAAU,EAAE,kBAAkB,CAAC;IAC/B,IAAI,EAAE,OAAO,CAAC;IACd,QAAQ,EAAE,UAAU,CAAC;IACrB,iEAAiE;IACjE,SAAS,EAAE,eAAe,CAAC;IAC3B,yDAAyD;IACzD,OAAO,CAAC,EAAE,eAAe,CAAC;IAC1B,+EAA+E;IAC/E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,uEAAuE;IACvE,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,2CAA2C;IAC3C,IAAI,CAAC,EAAE,YAAY,CAAC;IACpB,wEAAwE;IACxE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,wDAAwD;IACxD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,uFAAuF;IACvF,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,iEAAiE;IACjE,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,iGAAiG;IACjG,MAAM,CAAC,EAAE,WAAW,CAAC;IAIrB,wCAAwC;IACxC,cAAc,CAAC,EAAE,eAAe,CAAC;IACjC,mCAAmC;IACnC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,kDAAkD;IAClD,MAAM,CAAC,EAAE;QACP,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,IAAI,CAAC,EAAE,MAAM,CAAC;KACf,CAAC;IACF,2CAA2C;IAC3C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,wCAAwC;IACxC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,sDAAsD;IACtD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,kDAAkD;IAClD,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED;;;;GAIG;AACH,MAAM,WAAW,WAAW;IAC1B,UAAU,EAAE,gCAAgC,CAAC;IAC7C,IAAI,EAAE,aAAa,CAAC;IACpB,QAAQ,EAAE,UAAU,CAAC;IACrB,+EAA+E;IAC/E,KAAK,EAAE,QAAQ,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,UAAU,EAAE,IAAI,CAAC;IACjB,IAAI,EAAE,WAAW,CAAC;IAClB,QAAQ,CAAC,EAAE;QACT,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,eAAe,CAAC,EAAE,MAAM,CAAC;KAC1B,CAAC;IACF,KAAK,EAAE,QAAQ,EAAE,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,+DAA+D;IAC/D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,mEAAmE;IACnE,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,mCAAmC;IACnC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,+BAA+B;IAC/B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,wBAAwB;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,wBAAwB;IACxB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,oCAAoC;IACpC,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,qCAAqC;IACrC,SAAS,CAAC,EAAE;QACV,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,GAAG,CAAC,EAAE,MAAM,CAAC;KACd,CAAC;IACF,4CAA4C;IAC5C,MAAM,EAAE,SAAS,EAAE,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,WAAW,EAAE,CAAC;CACvB;AAED;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,gCAAgC,CAAC;IAC7C,IAAI,EAAE,iBAAiB,CAAC;IACxB,IAAI,EAAE,mBAAmB,CAAC;IAC1B,MAAM,CAAC,EAAE,qBAAqB,CAAC;CAChC;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,QAAQ,GAAG,MAAM,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;CACrB;AAED;;;GAGG;AACH,eAAO,MAAM,mBAAmB,EAAE,gBAAgB,EAgEjD,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,kBAAkB,gHAOrB,CAAC;AAEX,MAAM,MAAM,eAAe,GAAG,OAAO,kBAAkB,CAAC,MAAM,CAAC,CAAC;AAEhE;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,aAAa,EAAE,QAAQ,GAAG,WAAW,GAAG,QAAQ,CAO5E;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,QAAQ,GAAG,WAAW,GAAG,GAAG,IAAI,WAAW,CAE7E;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,8DAA8D;IAC9D,SAAS,EAAE,MAAM,CAAC;IAClB,4DAA4D;IAC5D,OAAO,EAAE,MAAM,CAAC;IAChB,4CAA4C;IAC5C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gEAAgE;IAChE,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,yDAAyD;IACzD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,wBAAwB;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,6CAA6C;IAC7C,OAAO,EAAE,WAAW,EAAE,CAAC;IACvB,sCAAsC;IACtC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,uCAAuC;IACvC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,qCAAqC;IACrC,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED;;;GAGG;AACH,MAAM,WAAW,UAAU;IACzB,UAAU,EAAE,gCAAgC,CAAC;IAC7C,IAAI,EAAE,YAAY,CAAC;IACnB,QAAQ,CAAC,EAAE,UAAU,CAAC;IACtB,IAAI,EAAE,cAAc,CAAC;IACrB,MAAM,CAAC,EAAE,gBAAgB,CAAC;CAC3B"}

package/dist/types/policy.d.ts

@@ -0,0 +1,333 @@
+/**
+ * TypeScript types for ActivityPolicy management and preview
+ * Based on the Activity Policy system for translating audit events/K8s events into activities
+ */
+import type { ObjectMeta, Event } from './index';
+import type { ActivityLink } from './activity';
+/**
+ * Resource specification for an ActivityPolicy
+ * Identifies which API group/kind this policy applies to
+ */
+export interface ActivityPolicyResource {
+    /** API group (e.g., "networking.datumapis.com") */
+    apiGroup: string;
+    /** Resource kind (e.g., "HTTPProxy") */
+    kind: string;
+    /** Optional human-readable label (defaults to kind) */
+    kindLabel?: string;
+    /** Optional plural label (defaults to kindLabel + "s") */
+    kindLabelPlural?: string;
+}
+/**
+ * A single rule in an ActivityPolicy
+ * Matches events and generates summaries
+ */
+export interface ActivityPolicyRule {
+    /** Unique name for this rule within the policy */
+    name: string;
+    /** Optional human-readable description of what this rule does */
+    description?: string;
+    /**
+     * CEL expression to match events
+     * For audit rules: use `audit.*` fields (e.g., `audit.verb == "create"`, `audit.objectRef.namespace == "default"`)
+     * For event rules: access via `event.*` (e.g., `event.reason == "Ready"`)
+     */
+    match: string;
+    /**
+     * CEL expression to generate the activity summary
+     * Can use {{ }} interpolation for embedded expressions
+     * Example: "{{ actor.name }} created {{ kindLabel }} {{ resource.name }}"
+     */
+    summary: string;
+}
+/**
+ * Specification for an ActivityPolicy
+ */
+export interface ActivityPolicySpec {
+    /** The resource this policy applies to */
+    resource: ActivityPolicyResource;
+    /** Rules for matching and translating Kubernetes audit events */
+    auditRules?: ActivityPolicyRule[];
+    /** Rules for matching and translating Kubernetes events */
+    eventRules?: ActivityPolicyRule[];
+}
+/**
+ * Standard Kubernetes condition (from metav1.Condition)
+ */
+export interface Condition {
+    /** Type of condition (e.g., "Ready") */
+    type: string;
+    /** Status of the condition: "True", "False", or "Unknown" */
+    status: 'True' | 'False' | 'Unknown';
+    /** Last time the condition transitioned */
+    lastTransitionTime?: string;
+    /** Machine-readable reason for the condition's current status */
+    reason?: string;
+    /** Human-readable message with details */
+    message?: string;
+    /** Generation the condition was set based on */
+    observedGeneration?: number;
+}
+/**
+ * Status of an ActivityPolicy
+ */
+export interface ActivityPolicyStatus {
+    /** Conditions represent the current state of the policy.
+     * The "Ready" condition indicates whether all rules compile successfully.
+     */
+    conditions?: Condition[];
+    /** Generation last processed by the controller */
+    observedGeneration?: number;
+}
+/**
+ * ActivityPolicy resource for translating audit events and K8s events into activities
+ */
+export interface ActivityPolicy {
+    apiVersion: 'activity.miloapis.com/v1alpha1';
+    kind: 'ActivityPolicy';
+    metadata: ObjectMeta;
+    spec: ActivityPolicySpec;
+    status?: ActivityPolicyStatus;
+}
+/**
+ * List of ActivityPolicy resources
+ */
+export interface ActivityPolicyList {
+    apiVersion: 'activity.miloapis.com/v1alpha1';
+    kind: 'ActivityPolicyList';
+    metadata?: {
+        continue?: string;
+        resourceVersion?: string;
+    };
+    items: ActivityPolicy[];
+}
+/**
+ * Input type for policy preview
+ */
+export type PolicyPreviewInputType = 'audit' | 'event';
+/**
+ * Kubernetes Event for policy preview
+ * Simplified version focused on fields used in policy matching
+ * Supports both eventsv1 (new) and corev1 (deprecated) field names
+ */
+export interface KubernetesEvent {
+    /** Event type: "Normal" or "Warning" */
+    type?: string;
+    /** Short reason for the event (e.g., "Created", "Ready", "Failed") */
+    reason?: string;
+    /** Human-readable description (eventsv1 field name) */
+    note?: string;
+    /** @deprecated Use note instead (corev1 field name) */
+    message?: string;
+    /** Object this event is about (eventsv1 field name) */
+    regarding?: {
+        apiVersion?: string;
+        kind?: string;
+        name?: string;
+        namespace?: string;
+        uid?: string;
+        resourceVersion?: string;
+    };
+    /** @deprecated Use regarding instead (corev1 field name) */
+    involvedObject?: {
+        apiVersion?: string;
+        kind?: string;
+        name?: string;
+        namespace?: string;
+        uid?: string;
+        resourceVersion?: string;
+    };
+    /** Controller that emitted this event (eventsv1 field name) */
+    reportingController?: string;
+    /** ID of the controller instance (eventsv1 field name) */
+    reportingInstance?: string;
+    /** @deprecated Use reportingController instead (corev1 field name) */
+    source?: {
+        component?: string;
+        host?: string;
+    };
+    /** Time when this event was first observed (eventsv1 field name) */
+    eventTime?: string;
+    /** Event series data (eventsv1 field name) */
+    series?: {
+        count?: number;
+        lastObservedTime?: string;
+    };
+    /** @deprecated Use eventTime instead (corev1 field name) */
+    firstTimestamp?: string;
+    /** @deprecated Use series.lastObservedTime instead (corev1 field name) */
+    lastTimestamp?: string;
+    /** @deprecated Use series.count instead (corev1 field name) */
+    count?: number;
+    /** Metadata about the event */
+    metadata?: ObjectMeta;
+}
+/**
+ * Input for policy preview - either an audit event or K8s event
+ */
+export interface PolicyPreviewInput {
+    /** Type of input */
+    type: PolicyPreviewInputType;
+    /** Audit event (when type is "audit") */
+    audit?: Event;
+    /** Kubernetes event (when type is "event") */
+    event?: KubernetesEvent;
+}
+/**
+ * The policy spec to test in a preview (subset of ActivityPolicySpec)
+ */
+export interface PolicyPreviewPolicySpec {
+    /** Resource specification */
+    resource: ActivityPolicyResource;
+    /** Audit rules to test */
+    auditRules?: ActivityPolicyRule[];
+    /** Event rules to test */
+    eventRules?: ActivityPolicyRule[];
+}
+/**
+ * Auto-fetch configuration for PolicyPreview
+ * Mutually exclusive with manual inputs
+ */
+export interface AutoFetchSpec {
+    /** Maximum samples to fetch (default: 10, max: 50) */
+    limit?: number;
+    /** Time range to search (e.g., "1h", "24h", "7d") - default: "24h" */
+    timeRange?: string;
+    /** What to fetch: "audit", "events", or "both" - default: "both" */
+    sources?: 'audit' | 'events' | 'both';
+}
+/**
+ * Specification for a PolicyPreview request
+ */
+export interface PolicyPreviewSpec {
+    /** The policy to test */
+    policy: PolicyPreviewPolicySpec;
+    /** The inputs to test against (supports multiple) - optional if autoFetch is set */
+    inputs?: PolicyPreviewInput[];
+    /** Auto-fetch spec - mutually exclusive with inputs */
+    autoFetch?: AutoFetchSpec;
+    /** Optional kind label override */
+    kindLabel?: string;
+    /** Optional kind label plural override */
+    kindLabelPlural?: string;
+}
+/**
+ * Result for a single input in the preview
+ */
+export interface PolicyPreviewInputResult {
+    /** Index of this input in spec.inputs (0-based) */
+    inputIndex: number;
+    /** Whether any rule matched this input */
+    matched: boolean;
+    /** Index of the matched rule (0-based), -1 if no match */
+    matchedRuleIndex: number;
+    /** Type of rule that matched ("audit" or "event") */
+    matchedRuleType?: PolicyPreviewInputType;
+    /** Error message if evaluating this input failed */
+    error?: string;
+}
+/**
+ * Preview Activity - simplified activity for preview display
+ */
+export interface PreviewActivity {
+    /** Activity metadata */
+    metadata?: ObjectMeta;
+    /** Activity spec */
+    spec: {
+        /** Human-readable summary */
+        summary: string;
+        /** Change source: "human" or "system" */
+        changeSource: string;
+        /** Actor who performed the action */
+        actor: {
+            type: string;
+            name: string;
+            uid?: string;
+            email?: string;
+        };
+        /** Resource that was affected */
+        resource: {
+            apiGroup?: string;
+            apiVersion?: string;
+            kind?: string;
+            name?: string;
+            namespace?: string;
+            uid?: string;
+        };
+        /** Links in the summary */
+        links?: ActivityLink[];
+        /** Origin of this activity */
+        origin: {
+            type: string;
+            id: string;
+        };
+    };
+}
+/**
+ * Status of a PolicyPreview showing the results
+ */
+export interface PolicyPreviewStatus {
+    /** Rendered Activity objects for inputs that matched */
+    activities?: PreviewActivity[];
+    /** Per-input results in the same order as spec.inputs */
+    results?: PolicyPreviewInputResult[];
+    /** General error message if preview failed entirely */
+    error?: string;
+    /** Auto-fetched inputs (populated when autoFetch is used) */
+    fetchedInputs?: PolicyPreviewInput[];
+    /** @deprecated Use results[].matched */
+    matched?: boolean;
+    /** @deprecated Use results[].matchedRuleIndex */
+    matchedRuleIndex?: number;
+    /** @deprecated Use results[].matchedRuleType */
+    matchedRuleType?: PolicyPreviewInputType;
+    /** @deprecated Use activities[0].spec.summary */
+    generatedSummary?: string;
+    /** @deprecated Use activities[0].spec.links */
+    generatedLinks?: ActivityLink[];
+}
+/**
+ * PolicyPreview resource for testing policies before deployment
+ */
+export interface PolicyPreview {
+    apiVersion: 'activity.miloapis.com/v1alpha1';
+    kind: 'PolicyPreview';
+    metadata?: ObjectMeta;
+    spec: PolicyPreviewSpec;
+    status?: PolicyPreviewStatus;
+}
+/**
+ * Grouped policies by API group for display
+ */
+export interface PolicyGroup {
+    apiGroup: string;
+    policies: ActivityPolicy[];
+}
+/**
+ * Sample input template for quick-fill
+ */
+export interface SampleInputTemplate {
+    /** Display name for the template */
+    name: string;
+    /** Description of what this template represents */
+    description: string;
+    /** The input type */
+    type: PolicyPreviewInputType;
+    /** The sample input data */
+    input: PolicyPreviewInput;
+}
+/**
+ * Filter fields available for policy listing
+ */
+export interface PolicyFilterField {
+    name: string;
+    type: 'string' | 'enum';
+    description: string;
+    enumValues?: string[];
+    examples?: string[];
+}
+/**
+ * Available filter fields for policies
+ */
+export declare const POLICY_FILTER_FIELDS: PolicyFilterField[];
+//# sourceMappingURL=policy.d.ts.map

package/dist/types/policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../../src/types/policy.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AACjD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE/C;;;GAGG;AACH,MAAM,WAAW,sBAAsB;IACrC,mDAAmD;IACnD,QAAQ,EAAE,MAAM,CAAC;IACjB,wCAAwC;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,uDAAuD;IACvD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,0DAA0D;IAC1D,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IACjC,kDAAkD;IAClD,IAAI,EAAE,MAAM,CAAC;IACb,iEAAiE;IACjE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;OAIG;IACH,KAAK,EAAE,MAAM,CAAC;IACd;;;;OAIG;IACH,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,0CAA0C;IAC1C,QAAQ,EAAE,sBAAsB,CAAC;IACjC,iEAAiE;IACjE,UAAU,CAAC,EAAE,kBAAkB,EAAE,CAAC;IAClC,2DAA2D;IAC3D,UAAU,CAAC,EAAE,kBAAkB,EAAE,CAAC;CACnC;AAED;;GAEG;AACH,MAAM,WAAW,SAAS;IACxB,wCAAwC;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,6DAA6D;IAC7D,MAAM,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC;IACrC,2CAA2C;IAC3C,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,iEAAiE;IACjE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,0CAA0C;IAC1C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,gDAAgD;IAChD,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC;;OAEG;IACH,UAAU,CAAC,EAAE,SAAS,EAAE,CAAC;IACzB,kDAAkD;IAClD,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,UAAU,EAAE,gCAAgC,CAAC;IAC7C,IAAI,EAAE,gBAAgB,CAAC;IACvB,QAAQ,EAAE,UAAU,CAAC;IACrB,IAAI,EAAE,kBAAkB,CAAC;IACzB,MAAM,CAAC,EAAE,oBAAoB,CAAC;CAC/B;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,gCAAgC,CAAC;IAC7C,IAAI,EAAE,oBAAoB,CAAC;IAC3B,QAAQ,CAAC,EAAE;QACT,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,eAAe,CAAC,EAAE,MAAM,CAAC;KAC1B,CAAC;IACF,KAAK,EAAE,cAAc,EAAE,CAAC;CACzB;AAMD;;GAEG;AACH,MAAM,MAAM,sBAAsB,GAAG,OAAO,GAAG,OAAO,CAAC;AAEvD;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B,wCAAwC;IACxC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,sEAAsE;IACtE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,uDAAuD;IACvD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,uDAAuD;IACvD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,uDAAuD;IACvD,SAAS,CAAC,EAAE;QACV,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,eAAe,CAAC,EAAE,MAAM,CAAC;KAC1B,CAAC;IACF,4DAA4D;IAC5D,cAAc,CAAC,EAAE;QACf,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,eAAe,CAAC,EAAE,MAAM,CAAC;KAC1B,CAAC;IACF,+DAA+D;IAC/D,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,0DAA0D;IAC1D,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,sEAAsE;IACtE,MAAM,CAAC,EAAE;QACP,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,IAAI,CAAC,EAAE,MAAM,CAAC;KACf,CAAC;IACF,oEAAoE;IACpE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,8CAA8C;IAC9C,MAAM,CAAC,EAAE;QACP,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,gBAAgB,CAAC,EAAE,MAAM,CAAC;KAC3B,CAAC;IACF,4DAA4D;IAC5D,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,0EAA0E;IAC1E,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,+DAA+D;IAC/D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,+BAA+B;IAC/B,QAAQ,CAAC,EAAE,UAAU,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,oBAAoB;IACpB,IAAI,EAAE,sBAAsB,CAAC;IAC7B,yCAAyC;IACzC,KAAK,CAAC,EAAE,KAAK,CAAC;IACd,8CAA8C;IAC9C,KAAK,CAAC,EAAE,eAAe,CAAC;CACzB;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,6BAA6B;IAC7B,QAAQ,EAAE,sBAAsB,CAAC;IACjC,0BAA0B;IAC1B,UAAU,CAAC,EAAE,kBAAkB,EAAE,CAAC;IAClC,0BAA0B;IAC1B,UAAU,CAAC,EAAE,kBAAkB,EAAE,CAAC;CACnC;AAED;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B,sDAAsD;IACtD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,sEAAsE;IACtE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,oEAAoE;IACpE,OAAO,CAAC,EAAE,OAAO,GAAG,QAAQ,GAAG,MAAM,CAAC;CACvC;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,yBAAyB;IACzB,MAAM,EAAE,uBAAuB,CAAC;IAChC,oFAAoF;IACpF,MAAM,CAAC,EAAE,kBAAkB,EAAE,CAAC;IAC9B,uDAAuD;IACvD,SAAS,CAAC,EAAE,aAAa,CAAC;IAC1B,mCAAmC;IACnC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,0CAA0C;IAC1C,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC,mDAAmD;IACnD,UAAU,EAAE,MAAM,CAAC;IACnB,0CAA0C;IAC1C,OAAO,EAAE,OAAO,CAAC;IACjB,0DAA0D;IAC1D,gBAAgB,EAAE,MAAM,CAAC;IACzB,qDAAqD;IACrD,eAAe,CAAC,EAAE,sBAAsB,CAAC;IACzC,oDAAoD;IACpD,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,wBAAwB;IACxB,QAAQ,CAAC,EAAE,UAAU,CAAC;IACtB,oBAAoB;IACpB,IAAI,EAAE;QACJ,6BAA6B;QAC7B,OAAO,EAAE,MAAM,CAAC;QAChB,yCAAyC;QACzC,YAAY,EAAE,MAAM,CAAC;QACrB,qCAAqC;QACrC,KAAK,EAAE;YACL,IAAI,EAAE,MAAM,CAAC;YACb,IAAI,EAAE,MAAM,CAAC;YACb,GAAG,CAAC,EAAE,MAAM,CAAC;YACb,KAAK,CAAC,EAAE,MAAM,CAAC;SAChB,CAAC;QACF,iCAAiC;QACjC,QAAQ,EAAE;YACR,QAAQ,CAAC,EAAE,MAAM,CAAC;YAClB,UAAU,CAAC,EAAE,MAAM,CAAC;YACpB,IAAI,CAAC,EAAE,MAAM,CAAC;YACd,IAAI,CAAC,EAAE,MAAM,CAAC;YACd,SAAS,CAAC,EAAE,MAAM,CAAC;YACnB,GAAG,CAAC,EAAE,MAAM,CAAC;SACd,CAAC;QACF,2BAA2B;QAC3B,KAAK,CAAC,EAAE,YAAY,EAAE,CAAC;QACvB,8BAA8B;QAC9B,MAAM,EAAE;YACN,IAAI,EAAE,MAAM,CAAC;YACb,EAAE,EAAE,MAAM,CAAC;SACZ,CAAC;KACH,CAAC;CACH;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,wDAAwD;IACxD,UAAU,CAAC,EAAE,eAAe,EAAE,CAAC;IAC/B,yDAAyD;IACzD,OAAO,CAAC,EAAE,wBAAwB,EAAE,CAAC;IACrC,uDAAuD;IACvD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,6DAA6D;IAC7D,aAAa,CAAC,EAAE,kBAAkB,EAAE,CAAC;IAGrC,wCAAwC;IACxC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,iDAAiD;IACjD,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,gDAAgD;IAChD,eAAe,CAAC,EAAE,sBAAsB,CAAC;IACzC,iDAAiD;IACjD,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,+CAA+C;IAC/C,cAAc,CAAC,EAAE,YAAY,EAAE,CAAC;CACjC;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,gCAAgC,CAAC;IAC7C,IAAI,EAAE,eAAe,CAAC;IACtB,QAAQ,CAAC,EAAE,UAAU,CAAC;IACtB,IAAI,EAAE,iBAAiB,CAAC;IACxB,MAAM,CAAC,EAAE,mBAAmB,CAAC;CAC9B;AAMD;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,cAAc,EAAE,CAAC;CAC5B;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,oCAAoC;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,mDAAmD;IACnD,WAAW,EAAE,MAAM,CAAC;IACpB,qBAAqB;IACrB,IAAI,EAAE,sBAAsB,CAAC;IAC7B,4BAA4B;IAC5B,KAAK,EAAE,kBAAkB,CAAC;CAC3B;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,QAAQ,GAAG,MAAM,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;CACrB;AAED;;GAEG;AACH,eAAO,MAAM,oBAAoB,EAAE,iBAAiB,EA4BnD,CAAC"}

package/dist/types/reindex.d.ts

@@ -0,0 +1,102 @@
+/**
+ * TypeScript types for ReindexJob management
+ * Based on the ReindexJob API (activity.miloapis.com/v1alpha1)
+ */
+import type { ObjectMeta } from './index';
+/**
+ * Phase represents the lifecycle phase of a ReindexJob
+ */
+export type ReindexJobPhase = 'Pending' | 'Running' | 'Succeeded' | 'Failed';
+/**
+ * Time range for reindexing
+ */
+export interface ReindexTimeRange {
+    /**
+     * Start time (relative like "now-7d" or absolute ISO 8601)
+     * Relative: "now-30d", "now-2h", "now-30m" (units: s, m, h, d, w)
+     * Absolute: "2026-02-01T00:00:00Z"
+     */
+    startTime: string;
+    /**
+     * End time (defaults to "now" if omitted)
+     * Uses same formats as startTime
+     */
+    endTime?: string;
+}
+/**
+ * Selector for which policies to reindex
+ */
+export interface ReindexPolicySelector {
+    /** List of ActivityPolicy names (mutually exclusive with matchLabels) */
+    names?: string[];
+    /** Label selector (mutually exclusive with names) */
+    matchLabels?: Record<string, string>;
+}
+/**
+ * Specification for a ReindexJob
+ */
+export interface ReindexJobSpec {
+    /** Time window of events to re-index */
+    timeRange: ReindexTimeRange;
+    /** Optional selector for specific policies */
+    policySelector?: ReindexPolicySelector;
+}
+/**
+ * Status of a ReindexJob
+ */
+export interface ReindexJobStatus {
+    /** Current lifecycle phase */
+    phase?: ReindexJobPhase;
+    /** Human-readable description of the current state */
+    message?: string;
+    /** When processing began */
+    startedAt?: string;
+    /** When processing finished (success or failure) */
+    completedAt?: string;
+}
+/**
+ * ReindexJob resource for re-processing historical audit logs and events
+ */
+export interface ReindexJob {
+    apiVersion: 'activity.miloapis.com/v1alpha1';
+    kind: 'ReindexJob';
+    metadata: ObjectMeta;
+    spec: ReindexJobSpec;
+    status?: ReindexJobStatus;
+}
+/**
+ * List of ReindexJob resources (Kubernetes list type)
+ */
+export interface ReindexJobListResource {
+    apiVersion: 'activity.miloapis.com/v1alpha1';
+    kind: 'ReindexJobList';
+    metadata?: {
+        continue?: string;
+        resourceVersion?: string;
+    };
+    items: ReindexJob[];
+}
+/**
+ * Helper type for creating a new ReindexJob
+ */
+export interface CreateReindexJobParams {
+    name: string;
+    spec: ReindexJobSpec;
+}
+/**
+ * Check if a ReindexJob is in a terminal state
+ */
+export declare function isReindexJobTerminal(job: ReindexJob): boolean;
+/**
+ * Check if a ReindexJob is currently running
+ */
+export declare function isReindexJobRunning(job: ReindexJob): boolean;
+/**
+ * Get a human-readable status message
+ */
+export declare function getReindexJobStatusMessage(job: ReindexJob): string;
+/**
+ * Get duration of a ReindexJob
+ */
+export declare function getReindexJobDuration(job: ReindexJob): string | null;
+//# sourceMappingURL=reindex.d.ts.map

package/dist/types/reindex.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reindex.d.ts","sourceRoot":"","sources":["../../src/types/reindex.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAE1C;;GAEG;AACH,MAAM,MAAM,eAAe,GAAG,SAAS,GAAG,SAAS,GAAG,WAAW,GAAG,QAAQ,CAAC;AAE7E;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;;;OAIG;IACH,SAAS,EAAE,MAAM,CAAC;IAClB;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,yEAAyE;IACzE,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,qDAAqD;IACrD,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACtC;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,wCAAwC;IACxC,SAAS,EAAE,gBAAgB,CAAC;IAC5B,8CAA8C;IAC9C,cAAc,CAAC,EAAE,qBAAqB,CAAC;CACxC;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,8BAA8B;IAC9B,KAAK,CAAC,EAAE,eAAe,CAAC;IACxB,sDAAsD;IACtD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,4BAA4B;IAC5B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,oDAAoD;IACpD,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,UAAU,EAAE,gCAAgC,CAAC;IAC7C,IAAI,EAAE,YAAY,CAAC;IACnB,QAAQ,EAAE,UAAU,CAAC;IACrB,IAAI,EAAE,cAAc,CAAC;IACrB,MAAM,CAAC,EAAE,gBAAgB,CAAC;CAC3B;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,UAAU,EAAE,gCAAgC,CAAC;IAC7C,IAAI,EAAE,gBAAgB,CAAC;IACvB,QAAQ,CAAC,EAAE;QACT,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,eAAe,CAAC,EAAE,MAAM,CAAC;KAC1B,CAAC;IACF,KAAK,EAAE,UAAU,EAAE,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,cAAc,CAAC;CACtB;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,UAAU,GAAG,OAAO,CAE7D;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,UAAU,GAAG,OAAO,CAE5D;AAED;;GAEG;AACH,wBAAgB,0BAA0B,CAAC,GAAG,EAAE,UAAU,GAAG,MAAM,CAkBlE;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,UAAU,GAAG,MAAM,GAAG,IAAI,CAuBpE"}