@intutic/anomaly-taxonomy 1.8.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Intutic Community
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,41 @@
+# @intutic/anomaly-taxonomy
+
+The twelve runtime anomaly categories Intutic classifies against, and the
+severity each carries. Types and constants only — no detection logic, no
+thresholds, no probes.
+
+```bash
+npm install @intutic/anomaly-taxonomy
+```
+
+```ts
+import {
+  AnomalyType,
+  ANOMALY_SEVERITY_MAP,
+  isAnomalyType,
+} from '@intutic/anomaly-taxonomy'
+
+ANOMALY_SEVERITY_MAP[AnomalyType.DATA_EXFILTRATION] // 'CRITICAL'
+isAnomalyType(notification.category) // narrow an untrusted string
+```
+
+## Why this is a package
+
+The taxonomy is declared in two languages. The Rust proxy raises these
+categories inline on the request path and cannot call into TypeScript, so it
+keeps its own copy; the control plane classifies against them asynchronously in
+TypeScript.
+
+Two hand-maintained lists drift, and drift here is silent — a renamed category
+simply stops being classified downstream, with no error raised anywhere. This
+package is the source of truth, and the proxy's test suite parses it and fails
+the build on any divergence.
+
+## What it deliberately does not contain
+
+Detection. Deciding *whether* a request is anomalous involves thresholds,
+sequence analysis, baselines and probes; sharing the vocabulary should not
+require sharing any of that. Keeping them apart is what lets the vocabulary be
+used by anything that needs to read an Intutic verdict.
+
+Apache-2.0.

package/dist/index.d.ts

@@ -0,0 +1,65 @@
+/**
+ * The Intutic runtime anomaly taxonomy.
+ *
+ * Twelve categories describing how an agent run can go wrong, with the
+ * severity each carries. This is the shared vocabulary: the Rust proxy raises
+ * these on the hot path, the control plane classifies against them
+ * asynchronously, and governance notifications carry the value in `category`.
+ *
+ * It is a package rather than a constant in one service because it is declared
+ * in two languages. The proxy has its own copy in Rust — the hot path cannot
+ * call into TypeScript — and two hand-maintained lists drift. Drift here is
+ * silent: a renamed category simply stops being classified downstream, with no
+ * error raised anywhere. The proxy therefore parses this file at test time and
+ * fails its build on any divergence.
+ *
+ * Deliberately **types and constants only**. No detection logic, no
+ * thresholds, no probes. Detection is a separate concern with a separate
+ * licence, and mixing them here would make the vocabulary impossible to share.
+ *
+ * @packageDocumentation
+ */
+/** The twelve runtime anomaly categories. */
+export declare const AnomalyType: {
+    /** Tool use inconsistent with any plausible task. */
+    readonly TOOL_ABUSE: "TOOL_ABUSE";
+    /** Spend without progress — context growth, repetition, no advancement. */
+    readonly TOKEN_WASTE: "TOKEN_WASTE";
+    /** A cycle: a spin, an alternation, or runaway recursion. */
+    readonly LOOP_DETECTED: "LOOP_DETECTED";
+    /** A tool or harness the policy in force does not permit. */
+    readonly UNAUTHORIZED_TOOL: "UNAUTHORIZED_TOOL";
+    /** Secrets or personal data leaving the boundary. */
+    readonly DATA_EXFILTRATION: "DATA_EXFILTRATION";
+    /** Text attempting to override the instructions the agent operates under. */
+    readonly PROMPT_INJECTION: "PROMPT_INJECTION";
+    /** Work proceeding on a premise that no longer holds. */
+    readonly HALLUCINATION: "HALLUCINATION";
+    /** Action outside the bounds the task was scoped to. */
+    readonly SCOPE_VIOLATION: "SCOPE_VIOLATION";
+    /** A session past its spending ceiling. */
+    readonly BUDGET_BREACH: "BUDGET_BREACH";
+    /** A fan-out costing far more than any single node was budgeted. */
+    readonly SPAWN_BUDGET_BREACH: "SPAWN_BUDGET_BREACH";
+    /** A workflow past the ceiling it was started with. */
+    readonly WORKFLOW_BUDGET_BREACH: "WORKFLOW_BUDGET_BREACH";
+    /** A run no longer pursuing the goal it was given. */
+    readonly WORKFLOW_GOAL_DRIFT: "WORKFLOW_GOAL_DRIFT";
+};
+/** Union of every anomaly category. */
+export type AnomalyType = (typeof AnomalyType)[keyof typeof AnomalyType];
+/** How urgently a category needs attention. */
+export type AnomalySeverity = 'CRITICAL' | 'HIGH' | 'MEDIUM' | 'LOW' | 'INFORMATIONAL';
+/**
+ * Severity per category.
+ *
+ * `CRITICAL` is reserved for categories where the damage is done the moment
+ * the request succeeds — data leaving the boundary, or the agent's
+ * instructions being replaced. Everything else is recoverable by stopping.
+ */
+export declare const ANOMALY_SEVERITY_MAP: Record<AnomalyType, AnomalySeverity>;
+/** Every category, for exhaustive iteration. */
+export declare const ALL_ANOMALY_TYPES: AnomalyType[];
+/** Whether an arbitrary string is a known category. */
+export declare function isAnomalyType(value: string): value is AnomalyType;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,6CAA6C;AAC7C,eAAO,MAAM,WAAW;IACtB,qDAAqD;;IAErD,2EAA2E;;IAE3E,6DAA6D;;IAE7D,6DAA6D;;IAE7D,qDAAqD;;IAErD,6EAA6E;;IAE7E,yDAAyD;;IAEzD,wDAAwD;;IAExD,2CAA2C;;IAE3C,oEAAoE;;IAEpE,uDAAuD;;IAEvD,sDAAsD;;CAE9C,CAAA;AAEV,uCAAuC;AACvC,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,OAAO,WAAW,CAAC,CAAA;AAExE,+CAA+C;AAC/C,MAAM,MAAM,eAAe,GACvB,UAAU,GACV,MAAM,GACN,QAAQ,GACR,KAAK,GACL,eAAe,CAAA;AAEnB;;;;;;GAMG;AACH,eAAO,MAAM,oBAAoB,EAAE,MAAM,CAAC,WAAW,EAAE,eAAe,CAa5D,CAAA;AAEV,gDAAgD;AAChD,eAAO,MAAM,iBAAiB,EAAiC,WAAW,EAAE,CAAA;AAE5E,uDAAuD;AACvD,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,WAAW,CAEjE"}

package/dist/index.js

@@ -0,0 +1,80 @@
+"use strict";
+/**
+ * The Intutic runtime anomaly taxonomy.
+ *
+ * Twelve categories describing how an agent run can go wrong, with the
+ * severity each carries. This is the shared vocabulary: the Rust proxy raises
+ * these on the hot path, the control plane classifies against them
+ * asynchronously, and governance notifications carry the value in `category`.
+ *
+ * It is a package rather than a constant in one service because it is declared
+ * in two languages. The proxy has its own copy in Rust — the hot path cannot
+ * call into TypeScript — and two hand-maintained lists drift. Drift here is
+ * silent: a renamed category simply stops being classified downstream, with no
+ * error raised anywhere. The proxy therefore parses this file at test time and
+ * fails its build on any divergence.
+ *
+ * Deliberately **types and constants only**. No detection logic, no
+ * thresholds, no probes. Detection is a separate concern with a separate
+ * licence, and mixing them here would make the vocabulary impossible to share.
+ *
+ * @packageDocumentation
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ALL_ANOMALY_TYPES = exports.ANOMALY_SEVERITY_MAP = exports.AnomalyType = void 0;
+exports.isAnomalyType = isAnomalyType;
+/** The twelve runtime anomaly categories. */
+exports.AnomalyType = {
+    /** Tool use inconsistent with any plausible task. */
+    TOOL_ABUSE: 'TOOL_ABUSE',
+    /** Spend without progress — context growth, repetition, no advancement. */
+    TOKEN_WASTE: 'TOKEN_WASTE',
+    /** A cycle: a spin, an alternation, or runaway recursion. */
+    LOOP_DETECTED: 'LOOP_DETECTED',
+    /** A tool or harness the policy in force does not permit. */
+    UNAUTHORIZED_TOOL: 'UNAUTHORIZED_TOOL',
+    /** Secrets or personal data leaving the boundary. */
+    DATA_EXFILTRATION: 'DATA_EXFILTRATION',
+    /** Text attempting to override the instructions the agent operates under. */
+    PROMPT_INJECTION: 'PROMPT_INJECTION',
+    /** Work proceeding on a premise that no longer holds. */
+    HALLUCINATION: 'HALLUCINATION',
+    /** Action outside the bounds the task was scoped to. */
+    SCOPE_VIOLATION: 'SCOPE_VIOLATION',
+    /** A session past its spending ceiling. */
+    BUDGET_BREACH: 'BUDGET_BREACH',
+    /** A fan-out costing far more than any single node was budgeted. */
+    SPAWN_BUDGET_BREACH: 'SPAWN_BUDGET_BREACH',
+    /** A workflow past the ceiling it was started with. */
+    WORKFLOW_BUDGET_BREACH: 'WORKFLOW_BUDGET_BREACH',
+    /** A run no longer pursuing the goal it was given. */
+    WORKFLOW_GOAL_DRIFT: 'WORKFLOW_GOAL_DRIFT',
+};
+/**
+ * Severity per category.
+ *
+ * `CRITICAL` is reserved for categories where the damage is done the moment
+ * the request succeeds — data leaving the boundary, or the agent's
+ * instructions being replaced. Everything else is recoverable by stopping.
+ */
+exports.ANOMALY_SEVERITY_MAP = {
+    TOOL_ABUSE: 'HIGH',
+    TOKEN_WASTE: 'MEDIUM',
+    LOOP_DETECTED: 'HIGH',
+    UNAUTHORIZED_TOOL: 'HIGH',
+    DATA_EXFILTRATION: 'CRITICAL',
+    PROMPT_INJECTION: 'CRITICAL',
+    HALLUCINATION: 'HIGH',
+    SCOPE_VIOLATION: 'MEDIUM',
+    BUDGET_BREACH: 'HIGH',
+    SPAWN_BUDGET_BREACH: 'HIGH',
+    WORKFLOW_BUDGET_BREACH: 'HIGH',
+    WORKFLOW_GOAL_DRIFT: 'MEDIUM',
+};
+/** Every category, for exhaustive iteration. */
+exports.ALL_ANOMALY_TYPES = Object.values(exports.AnomalyType);
+/** Whether an arbitrary string is a known category. */
+function isAnomalyType(value) {
+    return exports.ALL_ANOMALY_TYPES.includes(value);
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;;;AAmEH,sCAEC;AAnED,6CAA6C;AAChC,QAAA,WAAW,GAAG;IACzB,qDAAqD;IACrD,UAAU,EAAE,YAAY;IACxB,2EAA2E;IAC3E,WAAW,EAAE,aAAa;IAC1B,6DAA6D;IAC7D,aAAa,EAAE,eAAe;IAC9B,6DAA6D;IAC7D,iBAAiB,EAAE,mBAAmB;IACtC,qDAAqD;IACrD,iBAAiB,EAAE,mBAAmB;IACtC,6EAA6E;IAC7E,gBAAgB,EAAE,kBAAkB;IACpC,yDAAyD;IACzD,aAAa,EAAE,eAAe;IAC9B,wDAAwD;IACxD,eAAe,EAAE,iBAAiB;IAClC,2CAA2C;IAC3C,aAAa,EAAE,eAAe;IAC9B,oEAAoE;IACpE,mBAAmB,EAAE,qBAAqB;IAC1C,uDAAuD;IACvD,sBAAsB,EAAE,wBAAwB;IAChD,sDAAsD;IACtD,mBAAmB,EAAE,qBAAqB;CAClC,CAAA;AAaV;;;;;;GAMG;AACU,QAAA,oBAAoB,GAAyC;IACxE,UAAU,EAAE,MAAM;IAClB,WAAW,EAAE,QAAQ;IACrB,aAAa,EAAE,MAAM;IACrB,iBAAiB,EAAE,MAAM;IACzB,iBAAiB,EAAE,UAAU;IAC7B,gBAAgB,EAAE,UAAU;IAC5B,aAAa,EAAE,MAAM;IACrB,eAAe,EAAE,QAAQ;IACzB,aAAa,EAAE,MAAM;IACrB,mBAAmB,EAAE,MAAM;IAC3B,sBAAsB,EAAE,MAAM;IAC9B,mBAAmB,EAAE,QAAQ;CACrB,CAAA;AAEV,gDAAgD;AACnC,QAAA,iBAAiB,GAAG,MAAM,CAAC,MAAM,CAAC,mBAAW,CAAkB,CAAA;AAE5E,uDAAuD;AACvD,SAAgB,aAAa,CAAC,KAAa;IACzC,OAAQ,yBAA8B,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;AACxD,CAAC"}

package/package.json

@@ -0,0 +1,26 @@
+{
+  "name": "@intutic/anomaly-taxonomy",
+  "version": "1.8.0",
+  "description": "The Intutic runtime anomaly taxonomy — category enum and severity map. Type-only, zero dependencies.",
+  "license": "Apache-2.0",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/intutic/intutic",
+    "directory": "packages/anomaly-taxonomy"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "files": [
+    "./dist"
+  ],
+  "devDependencies": {
+    "typescript": "^5.6.0"
+  },
+  "scripts": {
+    "build": "tsc",
+    "typecheck": "tsc --noEmit"
+  }
+}