@handlebar/governance-schema 0.0.6-dev.6 → 0.0.6-dev.8

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (21) hide show
  1. package/dist/audit/events.base.d.ts +1 -5
  2. package/dist/audit/events.d.ts +28 -193
  3. package/dist/audit/events.llm.d.ts +7 -11
  4. package/dist/audit/events.tools.d.ts +162 -0
  5. package/dist/audit/governance-actions.d.ts +22 -0
  6. package/dist/audit/index.d.ts +2 -0
  7. package/dist/index.d.ts +3 -1
  8. package/dist/index.js +3337 -2098
  9. package/dist/policies.d.ts +19 -0
  10. package/dist/rules/common.d.ts +5 -10
  11. package/dist/rules/condition.d.ts +1337 -19
  12. package/dist/rules/custom.d.ts +8 -7
  13. package/dist/rules/effects.d.ts +18 -11
  14. package/dist/rules/enduser.d.ts +17 -15
  15. package/dist/rules/index.d.ts +8 -7
  16. package/dist/rules/metrics.d.ts +62 -24
  17. package/dist/rules/rule.d.ts +1599 -23
  18. package/dist/rules/signals.d.ts +79 -44
  19. package/dist/rules/time.d.ts +55 -27
  20. package/dist/rules/tools.d.ts +58 -64
  21. package/package.json +1 -1
package/dist/audit/events.base.d.ts CHANGED
@@ -5,11 +5,7 @@ export declare const AuditEnvelopeSchema: z.ZodObject<{
5
5
  runId: z.ZodString;
6
6
  stepIndex: z.ZodOptional<z.ZodNumber>;
7
7
  decisionId: z.ZodOptional<z.ZodString>;
8
- user: z.ZodOptional<z.ZodObject<{
9
- userId: z.ZodOptional<z.ZodString>;
10
- userCategory: z.ZodOptional<z.ZodString>;
11
- sessionId: z.ZodOptional<z.ZodString>;
12
- }, z.core.$strip>>;
8
+ enduserExternalId: z.ZodOptional<z.ZodString>;
13
9
  otel: z.ZodOptional<z.ZodObject<{
14
10
  traceId: z.ZodOptional<z.ZodString>;
15
11
  spanId: z.ZodOptional<z.ZodString>;
package/dist/audit/events.d.ts CHANGED
@@ -5,11 +5,7 @@ export declare const RunStartedEventSchema: z.ZodObject<{
5
5
  runId: z.ZodString;
6
6
  stepIndex: z.ZodOptional<z.ZodNumber>;
7
7
  decisionId: z.ZodOptional<z.ZodString>;
8
- user: z.ZodOptional<z.ZodObject<{
9
- userId: z.ZodOptional<z.ZodString>;
10
- userCategory: z.ZodOptional<z.ZodString>;
11
- sessionId: z.ZodOptional<z.ZodString>;
12
- }, z.core.$strip>>;
8
+ enduserExternalId: z.ZodOptional<z.ZodString>;
13
9
  otel: z.ZodOptional<z.ZodObject<{
14
10
  traceId: z.ZodOptional<z.ZodString>;
15
11
  spanId: z.ZodOptional<z.ZodString>;
@@ -67,163 +63,13 @@ export declare const RunStartedEventSchema: z.ZodObject<{
67
63
  }, z.core.$strip>>;
68
64
  }, z.core.$strip>;
69
65
  }, z.core.$strip>;
70
- export declare const HitlMetaSchema: z.ZodObject<{
71
- hitlActionId: z.ZodOptional<z.ZodString>;
72
- fingerprint: z.ZodOptional<z.ZodString>;
73
- status: z.ZodOptional<z.ZodEnum<{
74
- none: "none";
75
- pending: "pending";
76
- approved: "approved";
77
- denied: "denied";
78
- }>>;
79
- }, z.core.$strip>;
80
- export declare const ToolDecisionEventSchema: z.ZodObject<{
81
- schema: z.ZodLiteral<"handlebar.audit.v1">;
82
- ts: z.ZodPipe<z.ZodTransform<unknown, unknown>, z.ZodDate>;
83
- runId: z.ZodString;
84
- stepIndex: z.ZodOptional<z.ZodNumber>;
85
- decisionId: z.ZodOptional<z.ZodString>;
86
- user: z.ZodOptional<z.ZodObject<{
87
- userId: z.ZodOptional<z.ZodString>;
88
- userCategory: z.ZodOptional<z.ZodString>;
89
- sessionId: z.ZodOptional<z.ZodString>;
90
- }, z.core.$strip>>;
91
- otel: z.ZodOptional<z.ZodObject<{
92
- traceId: z.ZodOptional<z.ZodString>;
93
- spanId: z.ZodOptional<z.ZodString>;
94
- }, z.core.$strip>>;
95
- sample: z.ZodOptional<z.ZodObject<{
96
- rate: z.ZodOptional<z.ZodNumber>;
97
- reason: z.ZodOptional<z.ZodString>;
98
- }, z.core.$strip>>;
99
- redaction: z.ZodOptional<z.ZodObject<{
100
- level: z.ZodOptional<z.ZodEnum<{
101
- none: "none";
102
- partial: "partial";
103
- strict: "strict";
104
- }>>;
105
- }, z.core.$strip>>;
106
- kind: z.ZodLiteral<"tool.decision">;
107
- data: z.ZodObject<{
108
- effect: z.ZodCustom<import("./governance-actions").GovernanceEffect, import("./governance-actions").GovernanceEffect>;
109
- code: z.ZodCustom<import("./governance-actions").GovernanceCode, import("./governance-actions").GovernanceCode>;
110
- matchedRuleIds: z.ZodArray<z.ZodString>;
111
- appliedActions: z.ZodArray<z.ZodObject<{
112
- type: z.ZodCustom<"allow" | "block" | "hitl" | "notify" | "log", "allow" | "block" | "hitl" | "notify" | "log">;
113
- ruleId: z.ZodString;
114
- }, z.core.$strip>>;
115
- reason: z.ZodOptional<z.ZodString>;
116
- tool: z.ZodObject<{
117
- name: z.ZodString;
118
- categories: z.ZodOptional<z.ZodArray<z.ZodString>>;
119
- }, z.core.$strip>;
120
- args: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
121
- argsMeta: z.ZodOptional<z.ZodObject<{
122
- redacted: z.ZodBoolean;
123
- redactedFields: z.ZodOptional<z.ZodArray<z.ZodString>>;
124
- sizeBytesApprox: z.ZodOptional<z.ZodNumber>;
125
- }, z.core.$strip>>;
126
- hitl: z.ZodOptional<z.ZodObject<{
127
- hitlActionId: z.ZodOptional<z.ZodString>;
128
- fingerprint: z.ZodOptional<z.ZodString>;
129
- status: z.ZodOptional<z.ZodEnum<{
130
- none: "none";
131
- pending: "pending";
132
- approved: "approved";
133
- denied: "denied";
134
- }>>;
135
- }, z.core.$strip>>;
136
- counters: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>>;
137
- latencyMs: z.ZodOptional<z.ZodNumber>;
138
- }, z.core.$strip>;
139
- }, z.core.$strip>;
140
- export declare const ToolResultEventSchema: z.ZodObject<{
141
- schema: z.ZodLiteral<"handlebar.audit.v1">;
142
- ts: z.ZodPipe<z.ZodTransform<unknown, unknown>, z.ZodDate>;
143
- runId: z.ZodString;
144
- stepIndex: z.ZodOptional<z.ZodNumber>;
145
- decisionId: z.ZodOptional<z.ZodString>;
146
- user: z.ZodOptional<z.ZodObject<{
147
- userId: z.ZodOptional<z.ZodString>;
148
- userCategory: z.ZodOptional<z.ZodString>;
149
- sessionId: z.ZodOptional<z.ZodString>;
150
- }, z.core.$strip>>;
151
- otel: z.ZodOptional<z.ZodObject<{
152
- traceId: z.ZodOptional<z.ZodString>;
153
- spanId: z.ZodOptional<z.ZodString>;
154
- }, z.core.$strip>>;
155
- sample: z.ZodOptional<z.ZodObject<{
156
- rate: z.ZodOptional<z.ZodNumber>;
157
- reason: z.ZodOptional<z.ZodString>;
158
- }, z.core.$strip>>;
159
- redaction: z.ZodOptional<z.ZodObject<{
160
- level: z.ZodOptional<z.ZodEnum<{
161
- none: "none";
162
- partial: "partial";
163
- strict: "strict";
164
- }>>;
165
- }, z.core.$strip>>;
166
- kind: z.ZodLiteral<"tool.result">;
167
- data: z.ZodObject<{
168
- tool: z.ZodObject<{
169
- name: z.ZodString;
170
- categories: z.ZodOptional<z.ZodArray<z.ZodString>>;
171
- }, z.core.$strip>;
172
- hitl: z.ZodOptional<z.ZodObject<{
173
- hitlActionId: z.ZodOptional<z.ZodString>;
174
- fingerprint: z.ZodOptional<z.ZodString>;
175
- status: z.ZodOptional<z.ZodEnum<{
176
- none: "none";
177
- pending: "pending";
178
- approved: "approved";
179
- denied: "denied";
180
- }>>;
181
- }, z.core.$strip>>;
182
- outcome: z.ZodEnum<{
183
- success: "success";
184
- error: "error";
185
- }>;
186
- durationMs: z.ZodOptional<z.ZodNumber>;
187
- counters: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>>;
188
- metrics: z.ZodOptional<z.ZodObject<{
189
- inbuilt: z.ZodRecord<z.ZodEnum<{
190
- bytes_in: "bytes_in";
191
- bytes_out: "bytes_out";
192
- duration_ms: "duration_ms";
193
- records_in: "records_in";
194
- records_out: "records_out";
195
- }> & z.core.$partial, z.ZodObject<{
196
- value: z.ZodNumber;
197
- unit: z.ZodOptional<z.ZodString>;
198
- }, z.core.$strip>>;
199
- custom: z.ZodRecord<z.ZodString, z.ZodObject<{
200
- value: z.ZodNumber;
201
- unit: z.ZodOptional<z.ZodString>;
202
- }, z.core.$strip>>;
203
- }, z.core.$strip>>;
204
- error: z.ZodOptional<z.ZodObject<{
205
- name: z.ZodOptional<z.ZodString>;
206
- message: z.ZodOptional<z.ZodString>;
207
- stack: z.ZodOptional<z.ZodString>;
208
- }, z.core.$strip>>;
209
- resultMeta: z.ZodOptional<z.ZodObject<{
210
- redacted: z.ZodBoolean;
211
- redactedFields: z.ZodOptional<z.ZodArray<z.ZodString>>;
212
- sizeBytesApprox: z.ZodOptional<z.ZodNumber>;
213
- }, z.core.$strip>>;
214
- }, z.core.$strip>;
215
- }, z.core.$strip>;
216
66
  export declare const RunEndedEventSchema: z.ZodObject<{
217
67
  schema: z.ZodLiteral<"handlebar.audit.v1">;
218
68
  ts: z.ZodPipe<z.ZodTransform<unknown, unknown>, z.ZodDate>;
219
69
  runId: z.ZodString;
220
70
  stepIndex: z.ZodOptional<z.ZodNumber>;
221
71
  decisionId: z.ZodOptional<z.ZodString>;
222
- user: z.ZodOptional<z.ZodObject<{
223
- userId: z.ZodOptional<z.ZodString>;
224
- userCategory: z.ZodOptional<z.ZodString>;
225
- sessionId: z.ZodOptional<z.ZodString>;
226
- }, z.core.$strip>>;
72
+ enduserExternalId: z.ZodOptional<z.ZodString>;
227
73
  otel: z.ZodOptional<z.ZodObject<{
228
74
  traceId: z.ZodOptional<z.ZodString>;
229
75
  spanId: z.ZodOptional<z.ZodString>;
@@ -257,11 +103,7 @@ export declare const ErrorEventSchema: z.ZodObject<{
257
103
  runId: z.ZodString;
258
104
  stepIndex: z.ZodOptional<z.ZodNumber>;
259
105
  decisionId: z.ZodOptional<z.ZodString>;
260
- user: z.ZodOptional<z.ZodObject<{
261
- userId: z.ZodOptional<z.ZodString>;
262
- userCategory: z.ZodOptional<z.ZodString>;
263
- sessionId: z.ZodOptional<z.ZodString>;
264
- }, z.core.$strip>>;
106
+ enduserExternalId: z.ZodOptional<z.ZodString>;
265
107
  otel: z.ZodOptional<z.ZodObject<{
266
108
  traceId: z.ZodOptional<z.ZodString>;
267
109
  spanId: z.ZodOptional<z.ZodString>;
@@ -296,11 +138,7 @@ export declare const AuditEventSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
296
138
  runId: z.ZodString;
297
139
  stepIndex: z.ZodOptional<z.ZodNumber>;
298
140
  decisionId: z.ZodOptional<z.ZodString>;
299
- user: z.ZodOptional<z.ZodObject<{
300
- userId: z.ZodOptional<z.ZodString>;
301
- userCategory: z.ZodOptional<z.ZodString>;
302
- sessionId: z.ZodOptional<z.ZodString>;
303
- }, z.core.$strip>>;
141
+ enduserExternalId: z.ZodOptional<z.ZodString>;
304
142
  otel: z.ZodOptional<z.ZodObject<{
305
143
  traceId: z.ZodOptional<z.ZodString>;
306
144
  spanId: z.ZodOptional<z.ZodString>;
@@ -363,11 +201,7 @@ export declare const AuditEventSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
363
201
  runId: z.ZodString;
364
202
  stepIndex: z.ZodOptional<z.ZodNumber>;
365
203
  decisionId: z.ZodOptional<z.ZodString>;
366
- user: z.ZodOptional<z.ZodObject<{
367
- userId: z.ZodOptional<z.ZodString>;
368
- userCategory: z.ZodOptional<z.ZodString>;
369
- sessionId: z.ZodOptional<z.ZodString>;
370
- }, z.core.$strip>>;
204
+ enduserExternalId: z.ZodOptional<z.ZodString>;
371
205
  otel: z.ZodOptional<z.ZodObject<{
372
206
  traceId: z.ZodOptional<z.ZodString>;
373
207
  spanId: z.ZodOptional<z.ZodString>;
@@ -413,6 +247,23 @@ export declare const AuditEventSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
413
247
  denied: "denied";
414
248
  }>>;
415
249
  }, z.core.$strip>>;
250
+ subjects: z.ZodOptional<z.ZodArray<z.ZodObject<{
251
+ subjectType: z.ZodString;
252
+ role: z.ZodOptional<z.ZodString>;
253
+ value: z.ZodString;
254
+ idSystem: z.ZodOptional<z.ZodString>;
255
+ }, z.core.$strip>>>;
256
+ signals: z.ZodOptional<z.ZodArray<z.ZodObject<{
257
+ key: z.ZodString;
258
+ args: z.ZodOptional<z.ZodArray<z.ZodString>>;
259
+ result: z.ZodUnion<readonly [z.ZodObject<{
260
+ ok: z.ZodLiteral<false>;
261
+ error: z.ZodOptional<z.ZodString>;
262
+ }, z.core.$strip>, z.ZodObject<{
263
+ ok: z.ZodLiteral<true>;
264
+ value: z.ZodString;
265
+ }, z.core.$strip>]>;
266
+ }, z.core.$strip>>>;
416
267
  counters: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>>;
417
268
  latencyMs: z.ZodOptional<z.ZodNumber>;
418
269
  }, z.core.$strip>;
@@ -422,11 +273,7 @@ export declare const AuditEventSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
422
273
  runId: z.ZodString;
423
274
  stepIndex: z.ZodOptional<z.ZodNumber>;
424
275
  decisionId: z.ZodOptional<z.ZodString>;
425
- user: z.ZodOptional<z.ZodObject<{
426
- userId: z.ZodOptional<z.ZodString>;
427
- userCategory: z.ZodOptional<z.ZodString>;
428
- sessionId: z.ZodOptional<z.ZodString>;
429
- }, z.core.$strip>>;
276
+ enduserExternalId: z.ZodOptional<z.ZodString>;
430
277
  otel: z.ZodOptional<z.ZodObject<{
431
278
  traceId: z.ZodOptional<z.ZodString>;
432
279
  spanId: z.ZodOptional<z.ZodString>;
@@ -497,11 +344,7 @@ export declare const AuditEventSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
497
344
  runId: z.ZodString;
498
345
  stepIndex: z.ZodOptional<z.ZodNumber>;
499
346
  decisionId: z.ZodOptional<z.ZodString>;
500
- user: z.ZodOptional<z.ZodObject<{
501
- userId: z.ZodOptional<z.ZodString>;
502
- userCategory: z.ZodOptional<z.ZodString>;
503
- sessionId: z.ZodOptional<z.ZodString>;
504
- }, z.core.$strip>>;
347
+ enduserExternalId: z.ZodOptional<z.ZodString>;
505
348
  otel: z.ZodOptional<z.ZodObject<{
506
349
  traceId: z.ZodOptional<z.ZodString>;
507
350
  spanId: z.ZodOptional<z.ZodString>;
@@ -534,11 +377,7 @@ export declare const AuditEventSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
534
377
  runId: z.ZodString;
535
378
  stepIndex: z.ZodOptional<z.ZodNumber>;
536
379
  decisionId: z.ZodOptional<z.ZodString>;
537
- user: z.ZodOptional<z.ZodObject<{
538
- userId: z.ZodOptional<z.ZodString>;
539
- userCategory: z.ZodOptional<z.ZodString>;
540
- sessionId: z.ZodOptional<z.ZodString>;
541
- }, z.core.$strip>>;
380
+ enduserExternalId: z.ZodOptional<z.ZodString>;
542
381
  otel: z.ZodOptional<z.ZodObject<{
543
382
  traceId: z.ZodOptional<z.ZodString>;
544
383
  spanId: z.ZodOptional<z.ZodString>;
@@ -572,11 +411,7 @@ export declare const AuditEventSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
572
411
  runId: z.ZodString;
573
412
  stepIndex: z.ZodOptional<z.ZodNumber>;
574
413
  decisionId: z.ZodOptional<z.ZodString>;
575
- user: z.ZodOptional<z.ZodObject<{
576
- userId: z.ZodOptional<z.ZodString>;
577
- userCategory: z.ZodOptional<z.ZodString>;
578
- sessionId: z.ZodOptional<z.ZodString>;
579
- }, z.core.$strip>>;
414
+ enduserExternalId: z.ZodOptional<z.ZodString>;
580
415
  otel: z.ZodOptional<z.ZodObject<{
581
416
  traceId: z.ZodOptional<z.ZodString>;
582
417
  spanId: z.ZodOptional<z.ZodString>;
@@ -596,15 +431,15 @@ export declare const AuditEventSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
596
431
  data: z.ZodObject<{
597
432
  messageId: z.ZodUUID;
598
433
  role: z.ZodEnum<{
599
- user: "user";
600
434
  system: "system";
601
435
  developer: "developer";
436
+ user: "user";
602
437
  assistant: "assistant";
603
438
  tool: "tool";
604
439
  }>;
605
440
  kind: z.ZodEnum<{
606
- output: "output";
607
441
  input: "input";
442
+ output: "output";
608
443
  tool_call: "tool_call";
609
444
  tool_result: "tool_result";
610
445
  observation: "observation";
package/dist/audit/events.llm.d.ts CHANGED
@@ -1,8 +1,8 @@
1
1
  import { z } from "zod";
2
2
  export declare const MessageRoleSchema: z.ZodEnum<{
3
- user: "user";
4
3
  system: "system";
5
4
  developer: "developer";
5
+ user: "user";
6
6
  assistant: "assistant";
7
7
  tool: "tool";
8
8
  }>;
@@ -18,8 +18,8 @@ export declare const MessageRoleSchema: z.ZodEnum<{
18
18
  *
19
19
  */
20
20
  export declare const MessageKindSchema: z.ZodEnum<{
21
- output: "output";
22
21
  input: "input";
22
+ output: "output";
23
23
  tool_call: "tool_call";
24
24
  tool_result: "tool_result";
25
25
  observation: "observation";
@@ -29,15 +29,15 @@ export declare const MessageKindSchema: z.ZodEnum<{
29
29
  export declare const MessageSchema: z.ZodObject<{
30
30
  messageId: z.ZodUUID;
31
31
  role: z.ZodEnum<{
32
- user: "user";
33
32
  system: "system";
34
33
  developer: "developer";
34
+ user: "user";
35
35
  assistant: "assistant";
36
36
  tool: "tool";
37
37
  }>;
38
38
  kind: z.ZodEnum<{
39
- output: "output";
40
39
  input: "input";
40
+ output: "output";
41
41
  tool_call: "tool_call";
42
42
  tool_result: "tool_result";
43
43
  observation: "observation";
@@ -57,11 +57,7 @@ export declare const MessageEventSchema: z.ZodObject<{
57
57
  runId: z.ZodString;
58
58
  stepIndex: z.ZodOptional<z.ZodNumber>;
59
59
  decisionId: z.ZodOptional<z.ZodString>;
60
- user: z.ZodOptional<z.ZodObject<{
61
- userId: z.ZodOptional<z.ZodString>;
62
- userCategory: z.ZodOptional<z.ZodString>;
63
- sessionId: z.ZodOptional<z.ZodString>;
64
- }, z.core.$strip>>;
60
+ enduserExternalId: z.ZodOptional<z.ZodString>;
65
61
  otel: z.ZodOptional<z.ZodObject<{
66
62
  traceId: z.ZodOptional<z.ZodString>;
67
63
  spanId: z.ZodOptional<z.ZodString>;
@@ -81,15 +77,15 @@ export declare const MessageEventSchema: z.ZodObject<{
81
77
  data: z.ZodObject<{
82
78
  messageId: z.ZodUUID;
83
79
  role: z.ZodEnum<{
84
- user: "user";
85
80
  system: "system";
86
81
  developer: "developer";
82
+ user: "user";
87
83
  assistant: "assistant";
88
84
  tool: "tool";
89
85
  }>;
90
86
  kind: z.ZodEnum<{
91
- output: "output";
92
87
  input: "input";
88
+ output: "output";
93
89
  tool_call: "tool_call";
94
90
  tool_result: "tool_result";
95
91
  observation: "observation";
package/dist/audit/events.tools.d.ts ADDED
@@ -0,0 +1,162 @@
1
+ import z from "zod";
2
+ export declare const SubjectSchema: z.ZodObject<{
3
+ subjectType: z.ZodString;
4
+ role: z.ZodOptional<z.ZodString>;
5
+ value: z.ZodString;
6
+ idSystem: z.ZodOptional<z.ZodString>;
7
+ }, z.core.$strip>;
8
+ export declare const HitlMetaSchema: z.ZodObject<{
9
+ hitlActionId: z.ZodOptional<z.ZodString>;
10
+ fingerprint: z.ZodOptional<z.ZodString>;
11
+ status: z.ZodOptional<z.ZodEnum<{
12
+ none: "none";
13
+ pending: "pending";
14
+ approved: "approved";
15
+ denied: "denied";
16
+ }>>;
17
+ }, z.core.$strip>;
18
+ export declare const ToolDecisionEventSchema: z.ZodObject<{
19
+ schema: z.ZodLiteral<"handlebar.audit.v1">;
20
+ ts: z.ZodPipe<z.ZodTransform<unknown, unknown>, z.ZodDate>;
21
+ runId: z.ZodString;
22
+ stepIndex: z.ZodOptional<z.ZodNumber>;
23
+ decisionId: z.ZodOptional<z.ZodString>;
24
+ enduserExternalId: z.ZodOptional<z.ZodString>;
25
+ otel: z.ZodOptional<z.ZodObject<{
26
+ traceId: z.ZodOptional<z.ZodString>;
27
+ spanId: z.ZodOptional<z.ZodString>;
28
+ }, z.core.$strip>>;
29
+ sample: z.ZodOptional<z.ZodObject<{
30
+ rate: z.ZodOptional<z.ZodNumber>;
31
+ reason: z.ZodOptional<z.ZodString>;
32
+ }, z.core.$strip>>;
33
+ redaction: z.ZodOptional<z.ZodObject<{
34
+ level: z.ZodOptional<z.ZodEnum<{
35
+ none: "none";
36
+ partial: "partial";
37
+ strict: "strict";
38
+ }>>;
39
+ }, z.core.$strip>>;
40
+ kind: z.ZodLiteral<"tool.decision">;
41
+ data: z.ZodObject<{
42
+ effect: z.ZodCustom<import("./governance-actions").GovernanceEffect, import("./governance-actions").GovernanceEffect>;
43
+ code: z.ZodCustom<import("./governance-actions").GovernanceCode, import("./governance-actions").GovernanceCode>;
44
+ matchedRuleIds: z.ZodArray<z.ZodString>;
45
+ appliedActions: z.ZodArray<z.ZodObject<{
46
+ type: z.ZodCustom<"allow" | "block" | "hitl" | "notify" | "log", "allow" | "block" | "hitl" | "notify" | "log">;
47
+ ruleId: z.ZodString;
48
+ }, z.core.$strip>>;
49
+ reason: z.ZodOptional<z.ZodString>;
50
+ tool: z.ZodObject<{
51
+ name: z.ZodString;
52
+ categories: z.ZodOptional<z.ZodArray<z.ZodString>>;
53
+ }, z.core.$strip>;
54
+ args: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
55
+ argsMeta: z.ZodOptional<z.ZodObject<{
56
+ redacted: z.ZodBoolean;
57
+ redactedFields: z.ZodOptional<z.ZodArray<z.ZodString>>;
58
+ sizeBytesApprox: z.ZodOptional<z.ZodNumber>;
59
+ }, z.core.$strip>>;
60
+ hitl: z.ZodOptional<z.ZodObject<{
61
+ hitlActionId: z.ZodOptional<z.ZodString>;
62
+ fingerprint: z.ZodOptional<z.ZodString>;
63
+ status: z.ZodOptional<z.ZodEnum<{
64
+ none: "none";
65
+ pending: "pending";
66
+ approved: "approved";
67
+ denied: "denied";
68
+ }>>;
69
+ }, z.core.$strip>>;
70
+ subjects: z.ZodOptional<z.ZodArray<z.ZodObject<{
71
+ subjectType: z.ZodString;
72
+ role: z.ZodOptional<z.ZodString>;
73
+ value: z.ZodString;
74
+ idSystem: z.ZodOptional<z.ZodString>;
75
+ }, z.core.$strip>>>;
76
+ signals: z.ZodOptional<z.ZodArray<z.ZodObject<{
77
+ key: z.ZodString;
78
+ args: z.ZodOptional<z.ZodArray<z.ZodString>>;
79
+ result: z.ZodUnion<readonly [z.ZodObject<{
80
+ ok: z.ZodLiteral<false>;
81
+ error: z.ZodOptional<z.ZodString>;
82
+ }, z.core.$strip>, z.ZodObject<{
83
+ ok: z.ZodLiteral<true>;
84
+ value: z.ZodString;
85
+ }, z.core.$strip>]>;
86
+ }, z.core.$strip>>>;
87
+ counters: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>>;
88
+ latencyMs: z.ZodOptional<z.ZodNumber>;
89
+ }, z.core.$strip>;
90
+ }, z.core.$strip>;
91
+ export declare const ToolResultEventSchema: z.ZodObject<{
92
+ schema: z.ZodLiteral<"handlebar.audit.v1">;
93
+ ts: z.ZodPipe<z.ZodTransform<unknown, unknown>, z.ZodDate>;
94
+ runId: z.ZodString;
95
+ stepIndex: z.ZodOptional<z.ZodNumber>;
96
+ decisionId: z.ZodOptional<z.ZodString>;
97
+ enduserExternalId: z.ZodOptional<z.ZodString>;
98
+ otel: z.ZodOptional<z.ZodObject<{
99
+ traceId: z.ZodOptional<z.ZodString>;
100
+ spanId: z.ZodOptional<z.ZodString>;
101
+ }, z.core.$strip>>;
102
+ sample: z.ZodOptional<z.ZodObject<{
103
+ rate: z.ZodOptional<z.ZodNumber>;
104
+ reason: z.ZodOptional<z.ZodString>;
105
+ }, z.core.$strip>>;
106
+ redaction: z.ZodOptional<z.ZodObject<{
107
+ level: z.ZodOptional<z.ZodEnum<{
108
+ none: "none";
109
+ partial: "partial";
110
+ strict: "strict";
111
+ }>>;
112
+ }, z.core.$strip>>;
113
+ kind: z.ZodLiteral<"tool.result">;
114
+ data: z.ZodObject<{
115
+ tool: z.ZodObject<{
116
+ name: z.ZodString;
117
+ categories: z.ZodOptional<z.ZodArray<z.ZodString>>;
118
+ }, z.core.$strip>;
119
+ hitl: z.ZodOptional<z.ZodObject<{
120
+ hitlActionId: z.ZodOptional<z.ZodString>;
121
+ fingerprint: z.ZodOptional<z.ZodString>;
122
+ status: z.ZodOptional<z.ZodEnum<{
123
+ none: "none";
124
+ pending: "pending";
125
+ approved: "approved";
126
+ denied: "denied";
127
+ }>>;
128
+ }, z.core.$strip>>;
129
+ outcome: z.ZodEnum<{
130
+ success: "success";
131
+ error: "error";
132
+ }>;
133
+ durationMs: z.ZodOptional<z.ZodNumber>;
134
+ counters: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>>;
135
+ metrics: z.ZodOptional<z.ZodObject<{
136
+ inbuilt: z.ZodRecord<z.ZodEnum<{
137
+ bytes_in: "bytes_in";
138
+ bytes_out: "bytes_out";
139
+ duration_ms: "duration_ms";
140
+ records_in: "records_in";
141
+ records_out: "records_out";
142
+ }> & z.core.$partial, z.ZodObject<{
143
+ value: z.ZodNumber;
144
+ unit: z.ZodOptional<z.ZodString>;
145
+ }, z.core.$strip>>;
146
+ custom: z.ZodRecord<z.ZodString, z.ZodObject<{
147
+ value: z.ZodNumber;
148
+ unit: z.ZodOptional<z.ZodString>;
149
+ }, z.core.$strip>>;
150
+ }, z.core.$strip>>;
151
+ error: z.ZodOptional<z.ZodObject<{
152
+ name: z.ZodOptional<z.ZodString>;
153
+ message: z.ZodOptional<z.ZodString>;
154
+ stack: z.ZodOptional<z.ZodString>;
155
+ }, z.core.$strip>>;
156
+ resultMeta: z.ZodOptional<z.ZodObject<{
157
+ redacted: z.ZodBoolean;
158
+ redactedFields: z.ZodOptional<z.ZodArray<z.ZodString>>;
159
+ sizeBytesApprox: z.ZodOptional<z.ZodNumber>;
160
+ }, z.core.$strip>>;
161
+ }, z.core.$strip>;
162
+ }, z.core.$strip>;
package/dist/audit/governance-actions.d.ts CHANGED
@@ -1,4 +1,15 @@
1
1
  import { z } from "zod";
2
+ export declare const SignalSchema: z.ZodObject<{
3
+ key: z.ZodString;
4
+ args: z.ZodOptional<z.ZodArray<z.ZodString>>;
5
+ result: z.ZodUnion<readonly [z.ZodObject<{
6
+ ok: z.ZodLiteral<false>;
7
+ error: z.ZodOptional<z.ZodString>;
8
+ }, z.core.$strip>, z.ZodObject<{
9
+ ok: z.ZodLiteral<true>;
10
+ value: z.ZodString;
11
+ }, z.core.$strip>]>;
12
+ }, z.core.$strip>;
2
13
  /**
3
14
  * "hitl" effect specifically denote human-in-the-loop interventions.
4
15
  * Flow blocking/approval as a result of a decided hitl intervention should have the corresponding effect.
@@ -19,6 +30,17 @@ export declare const GovernanceDecisionSchema: z.ZodObject<{
19
30
  ruleId: z.ZodString;
20
31
  }, z.core.$strip>>;
21
32
  reason: z.ZodOptional<z.ZodString>;
33
+ signals: z.ZodOptional<z.ZodArray<z.ZodObject<{
34
+ key: z.ZodString;
35
+ args: z.ZodOptional<z.ZodArray<z.ZodString>>;
36
+ result: z.ZodUnion<readonly [z.ZodObject<{
37
+ ok: z.ZodLiteral<false>;
38
+ error: z.ZodOptional<z.ZodString>;
39
+ }, z.core.$strip>, z.ZodObject<{
40
+ ok: z.ZodLiteral<true>;
41
+ value: z.ZodString;
42
+ }, z.core.$strip>]>;
43
+ }, z.core.$strip>>>;
22
44
  }, z.core.$strip>;
23
45
  export type GovernanceDecision = z.infer<typeof GovernanceDecisionSchema>;
24
46
  export type AppliedAction = z.infer<typeof AppliedActionSchema>;
package/dist/audit/index.d.ts CHANGED
@@ -1,4 +1,6 @@
1
1
  export * from "./events";
2
2
  export * from "./events.base";
3
3
  export * from "./events.llm";
4
+ export * from "./events.tools";
4
5
  export * from "./governance-actions";
6
+ export * from "./run-metrics";
package/dist/index.d.ts CHANGED
@@ -1,7 +1,9 @@
1
1
  export * from "./audit/events";
2
2
  export * from "./audit/events.base";
3
3
  export * from "./audit/events.llm";
4
- export * from "./audit/run-metrics";
4
+ export * from "./audit/events.tools";
5
5
  export * from "./audit/governance-actions";
6
+ export * from "./audit/run-metrics";
6
7
  export type { EndUserConfig, EndUserGroupConfig } from "./enduser.types";
8
+ export { AgentSelectorSchema, PolicySpecSchema } from "./policies";
7
9
  export * from "./rules";