@intutic/shared-types 1.0.1

package/dist/usage.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Usage and Token Metrics Types — Token usage breakdown and event logs.
+ */
+export interface UsageSummary {
+    workspaceId: string;
+    period: 'daily' | 'weekly' | 'monthly';
+    startDate: string;
+    endDate: string;
+    totalCostUsd: number;
+    totalRawCostUsd: number;
+    totalSavingsUsd: number;
+    totalInputTokens: number;
+    totalOutputTokens: number;
+    traceCount: number;
+}
+export interface UsageEvent {
+    trace_id: string;
+    timestamp: string | null;
+    model: string;
+    input_tokens: number;
+    output_tokens: number;
+    cost_usd: number;
+    enforcement_action: string;
+    token_utility: 'USEFUL' | 'WASTED' | null;
+}
+export interface ModelBreakdown {
+    requestedModel: string;
+    totalCostUsd: number;
+    totalRawCostUsd: number;
+    totalInputTokens: number;
+    totalOutputTokens: number;
+    traceCount: number;
+}
+//# sourceMappingURL=usage.d.ts.map

package/dist/usage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"usage.d.ts","sourceRoot":"","sources":["../src/usage.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,MAAM,WAAW,YAAY;IAC3B,WAAW,EAAE,MAAM,CAAA;IACnB,MAAM,EAAE,OAAO,GAAG,QAAQ,GAAG,SAAS,CAAA;IACtC,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,EAAE,MAAM,CAAA;IACf,YAAY,EAAE,MAAM,CAAA;IACpB,eAAe,EAAE,MAAM,CAAA;IACvB,eAAe,EAAE,MAAM,CAAA;IACvB,gBAAgB,EAAE,MAAM,CAAA;IACxB,iBAAiB,EAAE,MAAM,CAAA;IACzB,UAAU,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,EAAE,MAAM,CAAA;IAChB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,KAAK,EAAE,MAAM,CAAA;IACb,YAAY,EAAE,MAAM,CAAA;IACpB,aAAa,EAAE,MAAM,CAAA;IACrB,QAAQ,EAAE,MAAM,CAAA;IAChB,kBAAkB,EAAE,MAAM,CAAA;IAC1B,aAAa,EAAE,QAAQ,GAAG,QAAQ,GAAG,IAAI,CAAA;CAC1C;AAED,MAAM,WAAW,cAAc;IAC7B,cAAc,EAAE,MAAM,CAAA;IACtB,YAAY,EAAE,MAAM,CAAA;IACpB,eAAe,EAAE,MAAM,CAAA;IACvB,gBAAgB,EAAE,MAAM,CAAA;IACxB,iBAAiB,EAAE,MAAM,CAAA;IACzB,UAAU,EAAE,MAAM,CAAA;CACnB"}

package/dist/usage.js

@@ -0,0 +1,6 @@
+"use strict";
+/**
+ * Usage and Token Metrics Types — Token usage breakdown and event logs.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=usage.js.map

package/dist/usage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"usage.js","sourceRoot":"","sources":["../src/usage.ts"],"names":[],"mappings":";AAAA;;GAEG"}

package/dist/warehouse.d.ts

@@ -0,0 +1,49 @@
+/**
+ * Data Warehouse Export Types
+ *
+ * WS-4E / E4 Data Warehouse Export
+ */
+export interface CreateTargetInput {
+    provider: 'gcs' | 's3';
+    bucketName: string;
+    pathPrefix?: string;
+    credentials: string;
+    s3Region?: string;
+    defaultFormat?: 'csv' | 'parquet' | 'ndjson';
+}
+export interface WarehouseTarget {
+    targetId: string;
+    provider: 'gcs' | 's3';
+    bucketName: string;
+    pathPrefix: string;
+    s3Region?: string | null;
+    defaultFormat: 'csv' | 'parquet' | 'ndjson';
+    isActive: boolean;
+    createdAt: string;
+}
+export interface TriggerExportInput {
+    targetId: string;
+    format?: 'csv' | 'parquet' | 'ndjson';
+    rangeFrom?: string;
+    rangeTo?: string;
+}
+export interface WarehouseJob {
+    jobId: string;
+    workspaceId: string;
+    targetId: string;
+    status: 'pending' | 'running' | 'completed' | 'failed';
+    format: 'csv' | 'parquet' | 'ndjson';
+    triggeredBy: string;
+    triggeredByUser?: string | null;
+    rangeFrom?: string | null;
+    rangeTo?: string | null;
+    startedAt?: string | null;
+    completedAt?: string | null;
+    errorMessage?: string | null;
+    recordsExported?: number | null;
+    bytesExported?: string | null;
+    destinationPath?: string | null;
+    createdAt: string;
+    updatedAt: string;
+}
+//# sourceMappingURL=warehouse.d.ts.map

package/dist/warehouse.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"warehouse.d.ts","sourceRoot":"","sources":["../src/warehouse.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,KAAK,GAAG,IAAI,CAAA;IACtB,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,WAAW,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,aAAa,CAAC,EAAE,KAAK,GAAG,SAAS,GAAG,QAAQ,CAAA;CAC7C;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,EAAE,KAAK,GAAG,IAAI,CAAA;IACtB,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,EAAE,MAAM,CAAA;IAClB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,aAAa,EAAE,KAAK,GAAG,SAAS,GAAG,QAAQ,CAAA;IAC3C,QAAQ,EAAE,OAAO,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,CAAC,EAAE,KAAK,GAAG,SAAS,GAAG,QAAQ,CAAA;IACrC,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,CAAA;IACb,WAAW,EAAE,MAAM,CAAA;IACnB,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,WAAW,GAAG,QAAQ,CAAA;IACtD,MAAM,EAAE,KAAK,GAAG,SAAS,GAAG,QAAQ,CAAA;IACpC,WAAW,EAAE,MAAM,CAAA;IACnB,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC/B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC/B,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC7B,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC/B,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;CAClB"}

package/dist/warehouse.js

@@ -0,0 +1,8 @@
+"use strict";
+/**
+ * Data Warehouse Export Types
+ *
+ * WS-4E / E4 Data Warehouse Export
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=warehouse.js.map

package/dist/warehouse.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"warehouse.js","sourceRoot":"","sources":["../src/warehouse.ts"],"names":[],"mappings":";AAAA;;;;GAIG"}

package/dist/workspaceSettings.d.ts

@@ -0,0 +1,116 @@
+/**
+ * workspaceSettings.ts — Per-workspace MCP governance configuration.
+ *
+ * Stored as a JSONB column in `workspaces.settings`. Read by the sync-daemon
+ * on every poll cycle and propagated to `~/.intutic/env/runtime.env` so that
+ * proxy processes and hook scripts pick up changes without restarting.
+ *
+ * WS-5 — Q1 (fail behavior), Q2 (proxy mode), Q3 (bypass enforcement)
+ * TD-151, TD-153, TD-154
+ *
+ * @module
+ */
+import type { McpProxyFailBehavior, McpProxyMode, BypassEnforcementTier } from './enums.js';
+export type { McpProxyFailBehavior, McpProxyMode, BypassEnforcementTier };
+/**
+ * Per-workspace MCP governance settings.
+ *
+ * All fields are optional on the wire — missing fields are filled in from
+ * DEFAULT_WORKSPACE_SETTINGS by the control-plane GET handler and the
+ * sync-daemon before writing runtime.env.
+ */
+export interface WorkspaceSettings {
+    /**
+     * What the MCP governance proxy does when the Intutic control plane is
+     * unreachable during a tool call interception attempt.
+     *
+     * - `'open'`   (default): pass the tool call through + emit a warning event
+     * - `'closed'`: block the tool call with a user-visible MCP error message:
+     *     "Governance check failed — Intutic control plane unreachable.
+     *      Tool call blocked by workspace policy."
+     *
+     * Applies to 13/17 harnesses (those with MCP proxy injection).
+     * See TD-151 for the 4 harnesses this does not reach.
+     */
+    mcpProxyFailBehavior: McpProxyFailBehavior;
+    /**
+     * MCP proxy deployment model.
+     *
+     * - `'per-session'` (default, Phase 4): a new proxy process is spawned per
+     *   MCP connection. Policy is fetched from control plane at startup with a
+     *   60s in-process TTL.
+     * - `'daemon'` (Phase 5, stored but not yet active): a long-lived proxy
+     *   daemon shares policy cache across all MCP sessions. Requires macOS
+     *   notarization. See TD-153.
+     *
+     * In Phase 4, setting this to `'daemon'` is accepted and stored but the
+     * sync-daemon will log a warning and continue in per-session mode.
+     */
+    mcpProxyMode: McpProxyMode;
+    /**
+     * How aggressively the sync-daemon defends harness config files against
+     * manual edits (bypass attempts).
+     *
+     * - `'rewrite'`    (default): chokidar drift watcher detects edits within ~1s
+     *   and immediately rewrites the config. Also fires a `config_tamper`
+     *   governance incident.
+     * - `'immutable'`  (opt-in, macOS only): after writing, sets `chflags uchg`
+     *   on the config file. Direct edits fail immediately. The flag is cleared
+     *   before the next sync write. See TD-154 for UX risk.
+     * - `'alert-only'`: drift triggers a governance incident but does NOT rewrite
+     *   the config. For teams that want audit logs without enforced reversion.
+     */
+    bypassEnforcementTier: BypassEnforcementTier;
+    /** Feature flags for platform capabilities (Phase 5+) */
+    featureFlags?: {
+        ff_bandit_routing?: boolean;
+        ff_response_cache_exact?: boolean;
+        ff_response_cache_semantic?: boolean;
+        /** Phase 5 — MetaClaw prompt evolution engine (Enterprise only) */
+        ff_metaclaw_evolution?: boolean;
+        /** Phase 6 — Network controls MDM enforcement */
+        ff_network_controls?: boolean;
+        /** Phase 6 — Multi-region residency enforcement */
+        ff_multi_region?: boolean;
+    };
+    /**
+     * TD-126 — Autonomous Skill Transfer
+     *
+     * When `true`, this workspace participates in the cross-workspace SOP
+     * propagation system:
+     * - High-performing validated SOPs (Gödel score ≥ 0.85) from this workspace
+     *   may be cloned to other opt-in workspaces as DRAFT SOPs.
+     * - This workspace will receive propagated SOPs from other opt-in workspaces
+     *   provided no structurally similar SOP already exists (Jaccard ≥ 0.70).
+     *
+     * Defaults to `false` (opt-in only).
+     */
+    enableAutonomousSkillTransfer?: boolean;
+    /**
+     * Whether to automatically delete local skills/rules segments that fail
+     * security audits (leakage of secrets or unsafe wildcard command patterns).
+     * Defaults to `false`.
+     */
+    enableLocalSkillAuditDelete?: boolean;
+    /**
+     * Configurable trigger keywords for classifying bandit task types.
+     */
+    banditKeywords?: {
+        testing?: string[];
+        deployment?: string[];
+        review?: string[];
+        debugging?: string[];
+    };
+}
+/**
+ * Default workspace settings.
+ * Applied when a workspace has no explicit settings (new workspaces)
+ * or when a setting key is missing from the stored JSONB.
+ */
+export declare const DEFAULT_WORKSPACE_SETTINGS: WorkspaceSettings;
+/**
+ * Merge partial stored settings with defaults.
+ * Ensures callers always receive a complete WorkspaceSettings object.
+ */
+export declare function resolveWorkspaceSettings(stored: Partial<WorkspaceSettings> | null | undefined): WorkspaceSettings;
+//# sourceMappingURL=workspaceSettings.d.ts.map

package/dist/workspaceSettings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspaceSettings.d.ts","sourceRoot":"","sources":["../src/workspaceSettings.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,oBAAoB,EAAE,YAAY,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAA;AAG3F,YAAY,EAAE,oBAAoB,EAAE,YAAY,EAAE,qBAAqB,EAAE,CAAA;AAEzE;;;;;;GAMG;AACH,MAAM,WAAW,iBAAiB;IAChC;;;;;;;;;;;OAWG;IACH,oBAAoB,EAAE,oBAAoB,CAAA;IAE1C;;;;;;;;;;;;OAYG;IACH,YAAY,EAAE,YAAY,CAAA;IAE1B;;;;;;;;;;;;OAYG;IACH,qBAAqB,EAAE,qBAAqB,CAAA;IAC5C,yDAAyD;IACzD,YAAY,CAAC,EAAE;QACb,iBAAiB,CAAC,EAAE,OAAO,CAAA;QAC3B,uBAAuB,CAAC,EAAE,OAAO,CAAA;QACjC,0BAA0B,CAAC,EAAE,OAAO,CAAA;QACpC,mEAAmE;QACnE,qBAAqB,CAAC,EAAE,OAAO,CAAA;QAC/B,iDAAiD;QACjD,mBAAmB,CAAC,EAAE,OAAO,CAAA;QAC7B,mDAAmD;QACnD,eAAe,CAAC,EAAE,OAAO,CAAA;KAC1B,CAAA;IAED;;;;;;;;;;;OAWG;IACH,6BAA6B,CAAC,EAAE,OAAO,CAAA;IAEvC;;;;OAIG;IACH,2BAA2B,CAAC,EAAE,OAAO,CAAA;IAErC;;OAEG;IACH,cAAc,CAAC,EAAE;QACf,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;QAClB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAA;QACrB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;QACjB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAA;KACrB,CAAA;CACF;AAED;;;;GAIG;AACH,eAAO,MAAM,0BAA0B,EAAE,iBAiBxC,CAAA;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,OAAO,CAAC,iBAAiB,CAAC,GAAG,IAAI,GAAG,SAAS,GACpD,iBAAiB,CAKnB"}

package/dist/workspaceSettings.js

@@ -0,0 +1,50 @@
+"use strict";
+/**
+ * workspaceSettings.ts — Per-workspace MCP governance configuration.
+ *
+ * Stored as a JSONB column in `workspaces.settings`. Read by the sync-daemon
+ * on every poll cycle and propagated to `~/.intutic/env/runtime.env` so that
+ * proxy processes and hook scripts pick up changes without restarting.
+ *
+ * WS-5 — Q1 (fail behavior), Q2 (proxy mode), Q3 (bypass enforcement)
+ * TD-151, TD-153, TD-154
+ *
+ * @module
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DEFAULT_WORKSPACE_SETTINGS = void 0;
+exports.resolveWorkspaceSettings = resolveWorkspaceSettings;
+/**
+ * Default workspace settings.
+ * Applied when a workspace has no explicit settings (new workspaces)
+ * or when a setting key is missing from the stored JSONB.
+ */
+exports.DEFAULT_WORKSPACE_SETTINGS = {
+    mcpProxyFailBehavior: 'open',
+    mcpProxyMode: 'per-session',
+    bypassEnforcementTier: 'rewrite',
+    featureFlags: {
+        ff_bandit_routing: false,
+        ff_response_cache_exact: false,
+        ff_response_cache_semantic: false,
+    },
+    enableAutonomousSkillTransfer: false,
+    enableLocalSkillAuditDelete: false,
+    banditKeywords: {
+        testing: ['test', 'spec', 'assert', 'vitest', 'jest', 'unittest'],
+        deployment: ['deploy', 'release', 'kubernetes', 'docker', 'gke', 'pipeline', 'ci/cd'],
+        review: ['review', 'audit', 'lint', 'eslint', 'pr'],
+        debugging: ['fix', 'bug', 'issue', 'error', 'crash', 'debug'],
+    },
+};
+/**
+ * Merge partial stored settings with defaults.
+ * Ensures callers always receive a complete WorkspaceSettings object.
+ */
+function resolveWorkspaceSettings(stored) {
+    return {
+        ...exports.DEFAULT_WORKSPACE_SETTINGS,
+        ...(stored ?? {}),
+    };
+}
+//# sourceMappingURL=workspaceSettings.js.map

package/dist/workspaceSettings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspaceSettings.js","sourceRoot":"","sources":["../src/workspaceSettings.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;GAWG;;;AAmIH,4DAOC;AAnCD;;;;GAIG;AACU,QAAA,0BAA0B,GAAsB;IAC3D,oBAAoB,EAAE,MAAM;IAC5B,YAAY,EAAU,aAAa;IACnC,qBAAqB,EAAE,SAAS;IAChC,YAAY,EAAE;QACZ,iBAAiB,EAAE,KAAK;QACxB,uBAAuB,EAAE,KAAK;QAC9B,0BAA0B,EAAE,KAAK;KAClC;IACD,6BAA6B,EAAE,KAAK;IACpC,2BAA2B,EAAE,KAAK;IAClC,cAAc,EAAE;QACd,OAAO,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC;QACjE,UAAU,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,YAAY,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,CAAC;QACrF,MAAM,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC;QACnD,SAAS,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC;KAC9D;CACF,CAAA;AAED;;;GAGG;AACH,SAAgB,wBAAwB,CACtC,MAAqD;IAErD,OAAO;QACL,GAAG,kCAA0B;QAC7B,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC;KAClB,CAAA;AACH,CAAC"}

package/package.json

@@ -0,0 +1,24 @@
+{
+  "name": "@intutic/shared-types",
+  "version": "1.0.1",
+  "publishConfig": {
+    "access": "public"
+  },
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "files": [
+    "./dist"
+  ],
+  "dependencies": {
+    "zod": "^3.23"
+  },
+  "devDependencies": {
+    "typescript": "^5.5",
+    "vitest": "^3"
+  },
+  "scripts": {
+    "build": "tsc",
+    "test": "vitest run --passWithNoTests",
+    "typecheck": "tsc --noEmit"
+  }
+}