@intutic/clawde 2.2.0 → 2.4.0

package/dist/integrity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"integrity.js","sourceRoot":"","sources":["../src/integrity.ts"],"names":[],"mappings":";;AAsCA,sDAeC;AAeD,kDAmBC;AAvFD;;;;;;;;;;;;;;GAcG;AACH,mCAAiF;AAGjF;;;GAGG;AACH,MAAM,WAAW,GAAqC;IACpD,CAAC,EAAE,wBAAwB;IAC3B,CAAC,EAAE,wBAAwB;CAC5B,CAAA;AAED,mGAAmG;AACnG,SAAS,iBAAiB,CAAC,IAAyB;IAClD,OAAO,IAAI,CAAC,wBAAwB,IAAI,CAAC,CAAA;AAC3C,CAAC;AAED;;;;;GAKG;AACH,SAAgB,qBAAqB,CAAC,IAAyB;IAC7D,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAA;IACvC,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,CAAA;IACnC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,2EAA2E;QAC3E,+BAA+B;QAC/B,MAAM,IAAI,UAAU,CAAC,oCAAoC,OAAO,EAAE,CAAC,CAAA;IACrE,CAAC;IACD,MAAM,MAAM,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,WAAW,IAAI,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,EAAE,IAAI,CAAC,WAAW,CAAC,CAAA;IACtH,IAAI,OAAO,IAAI,CAAC,EAAE,CAAC;QACjB,4EAA4E;QAC5E,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,IAAI,IAAI,CAAA;QAC3C,MAAM,CAAC,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAA;IAC5D,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;AAC5B,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAgB,mBAAmB,CAAC,IAAyB,EAAE,IAAwB;IACrF,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,cAAc;QAAE,OAAO,UAAU,CAAA;IAC9D,IAAI,CAAC,IAAI;QAAE,OAAO,kBAAkB,CAAA;IACpC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,cAAc,CAAC,CAAA;IACnE,IAAI,CAAC,GAAG;QAAE,OAAO,cAAc,CAAA;IAC/B,IAAI,IAAI,CAAC,aAAa,KAAK,OAAO;QAAE,OAAO,cAAc,CAAA;IACzD,IAAI,WAAW,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,KAAK,SAAS;QAAE,OAAO,cAAc,CAAA;IAC7E,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,IAAA,eAAY,EACrB,IAAI,EACJ,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,EAChD,IAAA,wBAAe,EAAC,EAAE,GAAG,EAAE,GAAiB,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAC1D,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CACtC,CAAA;QACD,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAA;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,8EAA8E;QAC9E,OAAO,cAAc,CAAA;IACvB,CAAC;AACH,CAAC"}

package/dist/refusals.d.ts

@@ -1,17 +1,25 @@
 import type { RefusalVerdict } from './types';
 /**
- * The proxy's governance refusals: the `error.type` of its JSON error body
- * (`{"error": {"type", "message"}}`, `json_error` in packages/proxy/src/proxy.rs),
- * the status it always pairs that type with, and the verdict it represents.
+ * The proxy's governance refusals, by code, with the status the proxy sends
+ * each with and the verdict it represents.
  *
- * Matching on the pair rather than the status alone matters because the same
- * statuses also carry errors that are not decisions: a provider's own 429 rate
- * limit, a 403 for a key used against the wrong workspace, a 400 for a malformed
- * body. Those are not refusals and must not be reported as one.
+ * Most arrive as an error: the code is the `error.type` of the proxy's JSON
+ * error body (`{"error": {"type", "message"}}`, `json_error` in
+ * packages/proxy/src/proxy.rs). Matching on the status and the code together
+ * matters because the same statuses also carry errors that are not decisions:
+ * a provider's own 429 rate limit, a 403 for a key used against the wrong
+ * workspace, a 400 for a malformed body. Those are not refusals and must not
+ * be reported as one.
  *
- * `__tests__/refusals.test.ts` checks this table against proxy.rs, so a refusal
- * the proxy adds or renames fails the build instead of silently turning back
- * into a retried connection error.
+ * The rest (status 200, and `COST_GATE_EXCEEDED` on a non-streaming request)
+ * arrive in band: an assistant turn explaining the refusal, named by
+ * `REFUSAL_HEADER`, or on a stream by the `STREAM_REFUSAL_MARKER` comment line.
+ *
+ * `__tests__/refusals.test.ts` holds this table to
+ * packages/shared-types/fixtures/refusal-codes.json, the one list the proxy
+ * and the Python SDK are held to as well, so a refusal the proxy adds or
+ * renames fails the build instead of silently turning back into an `allow` or
+ * a retried connection error.
  */
 export declare const PROXY_REFUSALS: Readonly<Record<string, {
     status: number;
@@ -21,16 +29,32 @@ export interface ProxyRefusal {
     verdict: RefusalVerdict;
     code: string;
     message: string;
+    /** The rule that decided, for a refusal the proxy answered in band. */
+    ruleId?: string;
 }
 /** The refusal an error response carries, or `null` when it is any other kind of failure. */
 export declare function parseRefusal(status: number, body: string): ProxyRefusal | null;
 /**
- * The header the proxy sets on a 200 that is a refusal in the shape of an
- * answer: the cost-prediction gate replies to a non-streaming request with an
- * assistant turn explaining the estimate, so a chat client shows the reason.
- * Its value is the refusal's code.
+ * The headers the proxy sets on a 200 that is a refusal in the shape of an
+ * answer: the response gate withheld a tool call the model made, output DLP
+ * withheld the body, or the cost-prediction gate answered instead of the
+ * model. The first names the refusal's code, the second the rule that decided.
  */
 export declare const REFUSAL_HEADER = "x-intutic-refusal";
+export declare const REFUSAL_RULE_HEADER = "x-intutic-refusal-rule";
 /** The refusal a 2xx response names in `REFUSAL_HEADER`, or `null` for a real answer. */
-export declare function headerRefusal(code: string | null, message: string): ProxyRefusal | null;
+export declare function headerRefusal(code: string | null, ruleId: string | null, message: string): ProxyRefusal | null;
+/**
+ * The prefix of the SSE comment line that names a refusal on a stream:
+ * `: intutic-refusal {"code", "rule", "message"}`. The response headers went
+ * out before the refusal happened, so a stream says it in band; every SSE
+ * parser skips comment lines, so clients that do not look for it are
+ * unaffected.
+ */
+export declare const STREAM_REFUSAL_MARKER = ": intutic-refusal ";
+/**
+ * The refusal named anywhere in a stream's text, or `null` when there is
+ * none. Pass the whole body, or each line as it arrives.
+ */
+export declare function streamRefusal(text: string): ProxyRefusal | null;
 //# sourceMappingURL=refusals.d.ts.map

package/dist/refusals.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"refusals.d.ts","sourceRoot":"","sources":["../src/refusals.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAA;AAE7C;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,cAAc,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,cAAc,CAAA;CAAE,CAAC,CAUhG,CAAA;AAED,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,cAAc,CAAA;IACvB,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;CAChB;AAED,6FAA6F;AAC7F,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI,CAe9E;AAED;;;;;GAKG;AACH,eAAO,MAAM,cAAc,sBAAsB,CAAA;AAEjD,yFAAyF;AACzF,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,EAAE,OAAO,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI,CAQvF"}
+{"version":3,"file":"refusals.d.ts","sourceRoot":"","sources":["../src/refusals.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAA;AAE7C;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,eAAO,MAAM,cAAc,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,cAAc,CAAA;CAAE,CAAC,CAkBhG,CAAA;AAED,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,cAAc,CAAA;IACvB,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;IACf,uEAAuE;IACvE,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED,6FAA6F;AAC7F,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI,CAe9E;AAED;;;;;GAKG;AACH,eAAO,MAAM,cAAc,sBAAsB,CAAA;AACjD,eAAO,MAAM,mBAAmB,2BAA2B,CAAA;AAE3D,yFAAyF;AACzF,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,EAAE,OAAO,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI,CAG9G;AAED;;;;;;GAMG;AACH,eAAO,MAAM,qBAAqB,uBAAuB,CAAA;AAEzD;;;GAGG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI,CAiB/D"}

package/dist/refusals.js

@@ -1,32 +1,49 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.REFUSAL_HEADER = exports.PROXY_REFUSALS = void 0;
+exports.STREAM_REFUSAL_MARKER = exports.REFUSAL_RULE_HEADER = exports.REFUSAL_HEADER = exports.PROXY_REFUSALS = void 0;
 exports.parseRefusal = parseRefusal;
 exports.headerRefusal = headerRefusal;
+exports.streamRefusal = streamRefusal;
 /**
- * The proxy's governance refusals: the `error.type` of its JSON error body
- * (`{"error": {"type", "message"}}`, `json_error` in packages/proxy/src/proxy.rs),
- * the status it always pairs that type with, and the verdict it represents.
+ * The proxy's governance refusals, by code, with the status the proxy sends
+ * each with and the verdict it represents.
  *
- * Matching on the pair rather than the status alone matters because the same
- * statuses also carry errors that are not decisions: a provider's own 429 rate
- * limit, a 403 for a key used against the wrong workspace, a 400 for a malformed
- * body. Those are not refusals and must not be reported as one.
+ * Most arrive as an error: the code is the `error.type` of the proxy's JSON
+ * error body (`{"error": {"type", "message"}}`, `json_error` in
+ * packages/proxy/src/proxy.rs). Matching on the status and the code together
+ * matters because the same statuses also carry errors that are not decisions:
+ * a provider's own 429 rate limit, a 403 for a key used against the wrong
+ * workspace, a 400 for a malformed body. Those are not refusals and must not
+ * be reported as one.
  *
- * `__tests__/refusals.test.ts` checks this table against proxy.rs, so a refusal
- * the proxy adds or renames fails the build instead of silently turning back
- * into a retried connection error.
+ * The rest (status 200, and `COST_GATE_EXCEEDED` on a non-streaming request)
+ * arrive in band: an assistant turn explaining the refusal, named by
+ * `REFUSAL_HEADER`, or on a stream by the `STREAM_REFUSAL_MARKER` comment line.
+ *
+ * `__tests__/refusals.test.ts` holds this table to
+ * packages/shared-types/fixtures/refusal-codes.json, the one list the proxy
+ * and the Python SDK are held to as well, so a refusal the proxy adds or
+ * renames fails the build instead of silently turning back into an `allow` or
+ * a retried connection error.
  */
 exports.PROXY_REFUSALS = {
     policy_denied: { status: 403, verdict: 'kill' },
     model_not_allowed: { status: 403, verdict: 'kill' },
     LOOP_RUN_TERMINATED: { status: 403, verdict: 'kill' },
     LOOP_RUN_PENDING_REVIEW: { status: 403, verdict: 'hold' },
+    policy_held: { status: 403, verdict: 'hold' },
     policy_reask: { status: 409, verdict: 'reask' },
+    GOVERNANCE_UNAVAILABLE: { status: 403, verdict: 'kill' },
     BUDGET_EXCEEDED: { status: 429, verdict: 'kill' },
     OVERAGE_HARD_CAP_EXCEEDED: { status: 429, verdict: 'kill' },
+    RATE_LIMITED: { status: 429, verdict: 'kill' },
     COST_GATE_EXCEEDED: { status: 402, verdict: 'kill' },
     dlp_policy_violation: { status: 400, verdict: 'kill' },
+    TOOL_DENIED: { status: 200, verdict: 'kill' },
+    SSO_GROUP: { status: 200, verdict: 'kill' },
+    SQL_GUARD: { status: 200, verdict: 'kill' },
+    RESPONSE_UNPARSEABLE: { status: 200, verdict: 'kill' },
+    OUTPUT_DLP: { status: 200, verdict: 'kill' },
 };
 /** The refusal an error response carries, or `null` when it is any other kind of failure. */
 function parseRefusal(status, body) {
@@ -49,21 +66,57 @@ function parseRefusal(status, body) {
     };
 }
 /**
- * The header the proxy sets on a 200 that is a refusal in the shape of an
- * answer: the cost-prediction gate replies to a non-streaming request with an
- * assistant turn explaining the estimate, so a chat client shows the reason.
- * Its value is the refusal's code.
+ * The headers the proxy sets on a 200 that is a refusal in the shape of an
+ * answer: the response gate withheld a tool call the model made, output DLP
+ * withheld the body, or the cost-prediction gate answered instead of the
+ * model. The first names the refusal's code, the second the rule that decided.
  */
 exports.REFUSAL_HEADER = 'x-intutic-refusal';
+exports.REFUSAL_RULE_HEADER = 'x-intutic-refusal-rule';
 /** The refusal a 2xx response names in `REFUSAL_HEADER`, or `null` for a real answer. */
-function headerRefusal(code, message) {
+function headerRefusal(code, ruleId, message) {
     if (!code)
         return null;
+    return named(code, ruleId || undefined, message);
+}
+/**
+ * The prefix of the SSE comment line that names a refusal on a stream:
+ * `: intutic-refusal {"code", "rule", "message"}`. The response headers went
+ * out before the refusal happened, so a stream says it in band; every SSE
+ * parser skips comment lines, so clients that do not look for it are
+ * unaffected.
+ */
+exports.STREAM_REFUSAL_MARKER = ': intutic-refusal ';
+/**
+ * The refusal named anywhere in a stream's text, or `null` when there is
+ * none. Pass the whole body, or each line as it arrives.
+ */
+function streamRefusal(text) {
+    for (const line of text.split('\n')) {
+        if (!line.startsWith(exports.STREAM_REFUSAL_MARKER))
+            continue;
+        let payload;
+        try {
+            payload = JSON.parse(line.slice(exports.STREAM_REFUSAL_MARKER.length));
+        }
+        catch {
+            continue;
+        }
+        if (typeof payload?.code !== 'string')
+            continue;
+        return named(payload.code, typeof payload.rule === 'string' ? payload.rule : undefined, typeof payload.message === 'string' ? payload.message : '');
+    }
+    return null;
+}
+function named(code, ruleId, message) {
+    // A code this SDK version does not know is still a refusal: the proxy only
+    // names a response it did not let through.
     const known = exports.PROXY_REFUSALS[code];
     return {
         verdict: known?.verdict ?? 'kill',
         code,
         message: message || code,
+        ...(ruleId ? { ruleId } : {}),
     };
 }
 //# sourceMappingURL=refusals.js.map

package/dist/refusals.js.map

@@ -1 +1 @@
-{"version":3,"file":"refusals.js","sourceRoot":"","sources":["../src/refusals.ts"],"names":[],"mappings":";;;AAmCA,oCAeC;AAWD,sCAQC;AAnED;;;;;;;;;;;;;GAaG;AACU,QAAA,cAAc,GAA0E;IACnG,aAAa,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE;IAC/C,iBAAiB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE;IACnD,mBAAmB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE;IACrD,uBAAuB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE;IACzD,YAAY,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE;IAC/C,eAAe,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE;IACjD,yBAAyB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE;IAC3D,kBAAkB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE;IACpD,oBAAoB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE;CACvD,CAAA;AAQD,6FAA6F;AAC7F,SAAgB,YAAY,CAAC,MAAc,EAAE,IAAY;IACvD,IAAI,KAAwD,CAAA;IAC5D,IAAI,CAAC;QACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,CAAA;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;IACD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAA;IACzD,MAAM,KAAK,GAAG,sBAAc,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IACxC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM;QAAE,OAAO,IAAI,CAAA;IAClD,OAAO;QACL,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,OAAO,EAAE,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI;KACxE,CAAA;AACH,CAAC;AAED;;;;;GAKG;AACU,QAAA,cAAc,GAAG,mBAAmB,CAAA;AAEjD,yFAAyF;AACzF,SAAgB,aAAa,CAAC,IAAmB,EAAE,OAAe;IAChE,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAA;IACtB,MAAM,KAAK,GAAG,sBAAc,CAAC,IAAI,CAAC,CAAA;IAClC,OAAO;QACL,OAAO,EAAE,KAAK,EAAE,OAAO,IAAI,MAAM;QACjC,IAAI;QACJ,OAAO,EAAE,OAAO,IAAI,IAAI;KACzB,CAAA;AACH,CAAC"}
+{"version":3,"file":"refusals.js","sourceRoot":"","sources":["../src/refusals.ts"],"names":[],"mappings":";;;AAqDA,oCAeC;AAYD,sCAGC;AAeD,sCAiBC;AAjHD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACU,QAAA,cAAc,GAA0E;IACnG,aAAa,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE;IAC/C,iBAAiB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE;IACnD,mBAAmB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE;IACrD,uBAAuB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE;IACzD,WAAW,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE;IAC7C,YAAY,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE;IAC/C,sBAAsB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE;IACxD,eAAe,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE;IACjD,yBAAyB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE;IAC3D,YAAY,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE;IAC9C,kBAAkB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE;IACpD,oBAAoB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE;IACtD,WAAW,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE;IAC7C,SAAS,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE;IAC3C,SAAS,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE;IAC3C,oBAAoB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE;IACtD,UAAU,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE;CAC7C,CAAA;AAUD,6FAA6F;AAC7F,SAAgB,YAAY,CAAC,MAAc,EAAE,IAAY;IACvD,IAAI,KAAwD,CAAA;IAC5D,IAAI,CAAC;QACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,CAAA;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;IACD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAA;IACzD,MAAM,KAAK,GAAG,sBAAc,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IACxC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM;QAAE,OAAO,IAAI,CAAA;IAClD,OAAO;QACL,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,OAAO,EAAE,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI;KACxE,CAAA;AACH,CAAC;AAED;;;;;GAKG;AACU,QAAA,cAAc,GAAG,mBAAmB,CAAA;AACpC,QAAA,mBAAmB,GAAG,wBAAwB,CAAA;AAE3D,yFAAyF;AACzF,SAAgB,aAAa,CAAC,IAAmB,EAAE,MAAqB,EAAE,OAAe;IACvF,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAA;IACtB,OAAO,KAAK,CAAC,IAAI,EAAE,MAAM,IAAI,SAAS,EAAE,OAAO,CAAC,CAAA;AAClD,CAAC;AAED;;;;;;GAMG;AACU,QAAA,qBAAqB,GAAG,oBAAoB,CAAA;AAEzD;;;GAGG;AACH,SAAgB,aAAa,CAAC,IAAY;IACxC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,6BAAqB,CAAC;YAAE,SAAQ;QACrD,IAAI,OAA8D,CAAA;QAClE,IAAI,CAAC;YACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,6BAAqB,CAAC,MAAM,CAAC,CAAC,CAAA;QAChE,CAAC;QAAC,MAAM,CAAC;YACP,SAAQ;QACV,CAAC;QACD,IAAI,OAAO,OAAO,EAAE,IAAI,KAAK,QAAQ;YAAE,SAAQ;QAC/C,OAAO,KAAK,CACV,OAAO,CAAC,IAAI,EACZ,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,EAC3D,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAC3D,CAAA;IACH,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,SAAS,KAAK,CAAC,IAAY,EAAE,MAA0B,EAAE,OAAe;IACtE,2EAA2E;IAC3E,2CAA2C;IAC3C,MAAM,KAAK,GAAG,sBAAc,CAAC,IAAI,CAAC,CAAA;IAClC,OAAO;QACL,OAAO,EAAE,KAAK,EAAE,OAAO,IAAI,MAAM;QACjC,IAAI;QACJ,OAAO,EAAE,OAAO,IAAI,IAAI;QACxB,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9B,CAAA;AACH,CAAC"}

package/dist/toon.d.ts

@@ -0,0 +1,22 @@
+/**
+ * The control plane's TOON list encoding, decoded.
+ *
+ * A list endpoint answering with 20 rows or more (`GET /api/v1/traces`) may
+ * send them as one pipe-separated string under `data`, with `format: 'toon'`
+ * and `listProperty` naming the key the rows belong under. This is a copy of
+ * `toonDecode` in `@intutic/shared-types` (this package has no dependencies),
+ * applied to every control-plane response the way the CLI applies it.
+ *
+ * Cells longer than the encoder's limit arrive cut, ending in `…`: TOON trades
+ * that for size, and nothing here can restore them.
+ *
+ * @module
+ */
+/** Rows from a TOON string, or null when it is not one. */
+export declare function toonDecode(toon: string): Record<string, unknown>[] | null;
+/**
+ * Moves a TOON-encoded list out of its envelope onto `listProperty`, so the
+ * body has the shape a shorter list arrives in; any other body passes through.
+ */
+export declare function unwrapToonEnvelope(data: unknown): unknown;
+//# sourceMappingURL=toon.d.ts.map

package/dist/toon.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"toon.d.ts","sourceRoot":"","sources":["../src/toon.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAsBH,2DAA2D;AAC3D,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,IAAI,CAkBzE;AAkBD;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAUzD"}

package/dist/toon.js

@@ -0,0 +1,115 @@
+"use strict";
+/**
+ * The control plane's TOON list encoding, decoded.
+ *
+ * A list endpoint answering with 20 rows or more (`GET /api/v1/traces`) may
+ * send them as one pipe-separated string under `data`, with `format: 'toon'`
+ * and `listProperty` naming the key the rows belong under. This is a copy of
+ * `toonDecode` in `@intutic/shared-types` (this package has no dependencies),
+ * applied to every control-plane response the way the CLI applies it.
+ *
+ * Cells longer than the encoder's limit arrive cut, ending in `…`: TOON trades
+ * that for size, and nothing here can restore them.
+ *
+ * @module
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.toonDecode = toonDecode;
+exports.unwrapToonEnvelope = unwrapToonEnvelope;
+function splitCells(line) {
+    const cells = [];
+    let cur = '';
+    for (let i = 0; i < line.length; i++) {
+        const ch = line[i];
+        if (ch === '\\') {
+            const next = line[i + 1];
+            if (next === '\\') {
+                cur += '\\';
+                i++;
+                continue;
+            }
+            if (next === '|') {
+                cur += '|';
+                i++;
+                continue;
+            }
+            if (next === 'n') {
+                cur += '\n';
+                i++;
+                continue;
+            }
+            cur += '\\';
+            continue;
+        }
+        if (ch === '|') {
+            cells.push(cur);
+            cur = '';
+            continue;
+        }
+        cur += ch;
+    }
+    cells.push(cur);
+    return cells;
+}
+/** Rows from a TOON string, or null when it is not one. */
+function toonDecode(toon) {
+    const lines = toon.trimEnd().split('\n');
+    const header = lines[0] ?? '';
+    if (!header.startsWith('TOON|'))
+        return null;
+    const colsStr = header.slice('TOON|'.length);
+    if (colsStr === '(empty)')
+        return [];
+    const cols = colsStr.split(',');
+    const rows = [];
+    for (const line of lines.slice(1)) {
+        if (!line.trim())
+            continue;
+        const cells = splitCells(line);
+        const row = {};
+        cols.forEach((key, i) => {
+            row[key] = decodeCell(cells[i] ?? '-');
+        });
+        rows.push(row);
+    }
+    return rows;
+}
+function decodeCell(raw) {
+    if (raw === '-')
+        return null;
+    if (raw === 't')
+        return true;
+    if (raw === 'f')
+        return false;
+    const num = Number(raw);
+    if (!isNaN(num) && raw !== '')
+        return num;
+    if (raw.startsWith('{') || raw.startsWith('[')) {
+        try {
+            return JSON.parse(raw);
+        }
+        catch {
+            // Not JSON after all: the text itself.
+        }
+    }
+    return raw;
+}
+/**
+ * Moves a TOON-encoded list out of its envelope onto `listProperty`, so the
+ * body has the shape a shorter list arrives in; any other body passes through.
+ */
+function unwrapToonEnvelope(data) {
+    if (!data || typeof data !== 'object')
+        return data;
+    const body = data;
+    if (body['format'] !== 'toon' || typeof body['data'] !== 'string' || typeof body['listProperty'] !== 'string')
+        return data;
+    const unwrapped = {};
+    for (const [key, value] of Object.entries(body)) {
+        if (key !== 'format' && key !== 'data')
+            unwrapped[key] = value;
+    }
+    unwrapped[body['listProperty']] = toonDecode(body['data']) ?? [];
+    return unwrapped;
+}
+//# sourceMappingURL=toon.js.map

package/dist/toon.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"toon.js","sourceRoot":"","sources":["../src/toon.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;GAaG;;AAuBH,gCAkBC;AAsBD,gDAUC;AAvED,SAAS,UAAU,CAAC,IAAY;IAC9B,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,IAAI,GAAG,GAAG,EAAE,CAAA;IACZ,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAA;QAClB,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;YAChB,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;YACxB,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;gBAAC,GAAG,IAAI,IAAI,CAAC;gBAAC,CAAC,EAAE,CAAC;gBAAC,SAAQ;YAAC,CAAC;YACjD,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;gBAAC,GAAG,IAAI,GAAG,CAAC;gBAAC,CAAC,EAAE,CAAC;gBAAC,SAAQ;YAAC,CAAC;YAC/C,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;gBAAC,GAAG,IAAI,IAAI,CAAC;gBAAC,CAAC,EAAE,CAAC;gBAAC,SAAQ;YAAC,CAAC;YAChD,GAAG,IAAI,IAAI,CAAA;YACX,SAAQ;QACV,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAAC,GAAG,GAAG,EAAE,CAAC;YAAC,SAAQ;QAAC,CAAC;QACvD,GAAG,IAAI,EAAE,CAAA;IACX,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IACf,OAAO,KAAK,CAAA;AACd,CAAC;AAED,2DAA2D;AAC3D,SAAgB,UAAU,CAAC,IAAY;IACrC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IACxC,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;IAC7B,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAA;IAC5C,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;IAC5C,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,EAAE,CAAA;IACpC,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAC/B,MAAM,IAAI,GAA8B,EAAE,CAAA;IAC1C,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QAClC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;YAAE,SAAQ;QAC1B,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,CAAA;QAC9B,MAAM,GAAG,GAA4B,EAAE,CAAA;QACvC,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE;YACtB,GAAG,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAA;QACxC,CAAC,CAAC,CAAA;QACF,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAChB,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,SAAS,UAAU,CAAC,GAAW;IAC7B,IAAI,GAAG,KAAK,GAAG;QAAE,OAAO,IAAI,CAAA;IAC5B,IAAI,GAAG,KAAK,GAAG;QAAE,OAAO,IAAI,CAAA;IAC5B,IAAI,GAAG,KAAK,GAAG;QAAE,OAAO,KAAK,CAAA;IAC7B,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,CAAA;IACvB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,GAAG,KAAK,EAAE;QAAE,OAAO,GAAG,CAAA;IACzC,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QACxB,CAAC;QAAC,MAAM,CAAC;YACP,uCAAuC;QACzC,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED;;;GAGG;AACH,SAAgB,kBAAkB,CAAC,IAAa;IAC9C,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAA;IAClD,MAAM,IAAI,GAAG,IAA+B,CAAA;IAC5C,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,MAAM,IAAI,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,cAAc,CAAC,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAA;IAC1H,MAAM,SAAS,GAA4B,EAAE,CAAA;IAC7C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAChD,IAAI,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,MAAM;YAAE,SAAS,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;IAChE,CAAC;IACD,SAAS,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAA;IAChE,OAAO,SAAS,CAAA;AAClB,CAAC"}