@intutic/shared-types 1.0.1

package/dist/billing.d.ts

@@ -0,0 +1,173 @@
+/**
+ * Monetization & Financial Ledger types — LLD #20
+ *
+ * Stripe Metered Billing, FinOps Chargeback GL Export,
+ * and usage-based overage enforcement.
+ *
+ * HLD §3.19 (4D Attribution, Showback/Chargeback), §3.23 (PLG/Billing)
+ *
+ * @module
+ */
+import { z } from 'zod';
+/**
+ * Status of a Stripe metered usage event report.
+ * - PENDING: inserted, Stripe call not yet made
+ * - REPORTED: Stripe accepted the event (stripe_meter_id populated)
+ * - FAILED: Stripe call failed (retried by reconciliation cron)
+ */
+export type MeteredEventStatus = 'PENDING' | 'REPORTED' | 'FAILED';
+/**
+ * A metered usage event row in the billing retry buffer.
+ * One row per proxied LLM API call for metered workspaces.
+ */
+export interface MeteredUsageEvent {
+    /** Unique event ID — `newId('mue')` */
+    eventId: string;
+    /** Workspace scope */
+    workspaceId: string;
+    /** FK to execution_traces (nullable — set null on trace deletion) */
+    traceId: string | null;
+    /** Stripe meterEvent.id on successful report */
+    stripeMeterId: string | null;
+    /** Total tokens consumed in this call */
+    tokensUsed: number;
+    /** Calculated cost for this call (USD) */
+    costUsd: number;
+    /** When the event was inserted */
+    reportedAt: string;
+    /** Current processing status */
+    status: MeteredEventStatus;
+    /** Retry attempt count (max 5) */
+    retryCount: number;
+    /** Last error message (only set on FAILED) */
+    lastError: string | null;
+}
+/**
+ * Result from reconcileFailedEvents cron.
+ */
+export interface ReconcileResult {
+    /** Total FAILED rows attempted */
+    retried: number;
+    /** Rows successfully reported to Stripe this run */
+    succeeded: number;
+    /** Rows still FAILED after this run */
+    stillFailed: number;
+}
+/**
+ * Department → GL cost center code mapping.
+ * Enterprise tier — maps FinOps attribution dimensions to ERP/SAP GL codes.
+ * HLD §3.19 — Chargeback mode.
+ */
+export interface ChargebackGlMapping {
+    /** Unique mapping ID — `newId('cgl')` */
+    mappingId: string;
+    /** Workspace scope */
+    workspaceId: string;
+    /** FK to departments.department_id */
+    departmentId: string;
+    /** GL cost center code (e.g., 'CC-4200', 'ENG-PLATFORM') */
+    glCode: string;
+    /** Human-readable cost center label */
+    costCenter: string | null;
+    createdAt: string;
+    updatedAt: string;
+}
+/**
+ * Chargeback GL mapping with joined department name (for API responses).
+ */
+export interface ChargebackGlMappingRow extends ChargebackGlMapping {
+    /** Department name (joined from departments table) */
+    departmentName: string;
+}
+/**
+ * A single row in a chargeback export report.
+ * Matched = has a GL code mapping; unmatched = no mapping defined.
+ */
+export interface ChargebackExportRow {
+    departmentId: string;
+    departmentName: string;
+    /** Null if unmatched (no GL mapping defined for this department) */
+    glCode: string | null;
+    costCenter: string | null;
+    /** Total AI spend for this department in the period (USD) */
+    totalCostUsd: number;
+    /** Per-model cost breakdown: { 'claude-4': 12.40, 'gpt-4o': 3.20 } */
+    modelBreakdown: Record<string, number>;
+    /** Ratio of wasted tokens (0.0–1.0) */
+    wasteRatio: number;
+    /** true = GL code found; false = flagged for Finance review */
+    matched: boolean;
+}
+/**
+ * Full chargeback report (JSON format response).
+ * HLD §3.19 — GL Code Mapping Data Model.
+ */
+export interface ChargebackReport {
+    period: {
+        from: string;
+        to: string;
+    };
+    generatedAt: string;
+    rows: ChargebackExportRow[];
+    summary: {
+        totalCostUsd: number;
+        matchedCostUsd: number;
+        unmatchedCostUsd: number;
+        departments: number;
+    };
+}
+/** Zod schema for GL mapping upsert input. */
+export declare const UpsertGlMappingInputSchema: z.ZodObject<{
+    departmentId: z.ZodString;
+    glCode: z.ZodString;
+    costCenter: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    departmentId: string;
+    glCode: string;
+    costCenter?: string | undefined;
+}, {
+    departmentId: string;
+    glCode: string;
+    costCenter?: string | undefined;
+}>;
+export type UpsertGlMappingInput = z.infer<typeof UpsertGlMappingInputSchema>;
+/**
+ * Current period metered usage summary for a workspace.
+ * Returned by GET /api/v1/billing/usage/current.
+ */
+export interface BillingUsageSummary {
+    workspaceId: string;
+    /** Period start (ISO-8601) */
+    periodStart: string;
+    /** Period end (ISO-8601) */
+    periodEnd: string;
+    /** Total tokens consumed in the period */
+    tokensUsed: number;
+    /** Plan-included token volume */
+    tokensIncluded: number;
+    /** Tokens exceeding the included volume (max(0, used - included)) */
+    overageTokens: number;
+    /** Estimated overage charge (USD) */
+    estimatedOverageUsd: number;
+    /** True when budget:hard_block:{wid} Valkey key is set */
+    hardCapActive: boolean;
+}
+/** Chargeback export query params schema. */
+export declare const ChargebackExportQuerySchema: z.ZodObject<{
+    period: z.ZodDefault<z.ZodEnum<["month", "quarter", "custom"]>>;
+    from: z.ZodOptional<z.ZodString>;
+    to: z.ZodOptional<z.ZodString>;
+    format: z.ZodDefault<z.ZodEnum<["csv", "json"]>>;
+}, "strip", z.ZodTypeAny, {
+    period: "custom" | "month" | "quarter";
+    format: "csv" | "json";
+    from?: string | undefined;
+    to?: string | undefined;
+}, {
+    period?: "custom" | "month" | "quarter" | undefined;
+    from?: string | undefined;
+    to?: string | undefined;
+    format?: "csv" | "json" | undefined;
+}>;
+export type ChargebackExportQuery = z.infer<typeof ChargebackExportQuerySchema>;
+//# sourceMappingURL=billing.d.ts.map

package/dist/billing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"billing.d.ts","sourceRoot":"","sources":["../src/billing.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAIvB;;;;;GAKG;AACH,MAAM,MAAM,kBAAkB,GAAG,SAAS,GAAG,UAAU,GAAG,QAAQ,CAAA;AAElE;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,uCAAuC;IACvC,OAAO,EAAE,MAAM,CAAA;IACf,sBAAsB;IACtB,WAAW,EAAE,MAAM,CAAA;IACnB,qEAAqE;IACrE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IACtB,gDAAgD;IAChD,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B,yCAAyC;IACzC,UAAU,EAAE,MAAM,CAAA;IAClB,0CAA0C;IAC1C,OAAO,EAAE,MAAM,CAAA;IACf,kCAAkC;IAClC,UAAU,EAAE,MAAM,CAAA;IAClB,gCAAgC;IAChC,MAAM,EAAE,kBAAkB,CAAA;IAC1B,kCAAkC;IAClC,UAAU,EAAE,MAAM,CAAA;IAClB,8CAA8C;IAC9C,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;CACzB;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,kCAAkC;IAClC,OAAO,EAAE,MAAM,CAAA;IACf,oDAAoD;IACpD,SAAS,EAAE,MAAM,CAAA;IACjB,uCAAuC;IACvC,WAAW,EAAE,MAAM,CAAA;CACpB;AAID;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,yCAAyC;IACzC,SAAS,EAAE,MAAM,CAAA;IACjB,sBAAsB;IACtB,WAAW,EAAE,MAAM,CAAA;IACnB,sCAAsC;IACtC,YAAY,EAAE,MAAM,CAAA;IACpB,4DAA4D;IAC5D,MAAM,EAAE,MAAM,CAAA;IACd,uCAAuC;IACvC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,sBAAuB,SAAQ,mBAAmB;IACjE,sDAAsD;IACtD,cAAc,EAAE,MAAM,CAAA;CACvB;AAED;;;GAGG;AACH,MAAM,WAAW,mBAAmB;IAClC,YAAY,EAAE,MAAM,CAAA;IACpB,cAAc,EAAE,MAAM,CAAA;IACtB,oEAAoE;IACpE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;IACrB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,6DAA6D;IAC7D,YAAY,EAAE,MAAM,CAAA;IACpB,sEAAsE;IACtE,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IACtC,uCAAuC;IACvC,UAAU,EAAE,MAAM,CAAA;IAClB,+DAA+D;IAC/D,OAAO,EAAE,OAAO,CAAA;CACjB;AAED;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAA;IACpC,WAAW,EAAE,MAAM,CAAA;IACnB,IAAI,EAAE,mBAAmB,EAAE,CAAA;IAC3B,OAAO,EAAE;QACP,YAAY,EAAE,MAAM,CAAA;QACpB,cAAc,EAAE,MAAM,CAAA;QACtB,gBAAgB,EAAE,MAAM,CAAA;QACxB,WAAW,EAAE,MAAM,CAAA;KACpB,CAAA;CACF;AAED,8CAA8C;AAC9C,eAAO,MAAM,0BAA0B;;;;;;;;;;;;EAIrC,CAAA;AACF,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAA;AAI7E;;;GAGG;AACH,MAAM,WAAW,mBAAmB;IAClC,WAAW,EAAE,MAAM,CAAA;IACnB,8BAA8B;IAC9B,WAAW,EAAE,MAAM,CAAA;IACnB,4BAA4B;IAC5B,SAAS,EAAE,MAAM,CAAA;IACjB,0CAA0C;IAC1C,UAAU,EAAE,MAAM,CAAA;IAClB,iCAAiC;IACjC,cAAc,EAAE,MAAM,CAAA;IACtB,qEAAqE;IACrE,aAAa,EAAE,MAAM,CAAA;IACrB,qCAAqC;IACrC,mBAAmB,EAAE,MAAM,CAAA;IAC3B,0DAA0D;IAC1D,aAAa,EAAE,OAAO,CAAA;CACvB;AAED,6CAA6C;AAC7C,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;EAKtC,CAAA;AACF,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAA"}

package/dist/billing.js

@@ -0,0 +1,28 @@
+"use strict";
+/**
+ * Monetization & Financial Ledger types — LLD #20
+ *
+ * Stripe Metered Billing, FinOps Chargeback GL Export,
+ * and usage-based overage enforcement.
+ *
+ * HLD §3.19 (4D Attribution, Showback/Chargeback), §3.23 (PLG/Billing)
+ *
+ * @module
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ChargebackExportQuerySchema = exports.UpsertGlMappingInputSchema = void 0;
+const zod_1 = require("zod");
+/** Zod schema for GL mapping upsert input. */
+exports.UpsertGlMappingInputSchema = zod_1.z.object({
+    departmentId: zod_1.z.string().min(1),
+    glCode: zod_1.z.string().min(1).max(64),
+    costCenter: zod_1.z.string().max(128).optional(),
+});
+/** Chargeback export query params schema. */
+exports.ChargebackExportQuerySchema = zod_1.z.object({
+    period: zod_1.z.enum(['month', 'quarter', 'custom']).default('month'),
+    from: zod_1.z.string().datetime({ offset: true }).optional(),
+    to: zod_1.z.string().datetime({ offset: true }).optional(),
+    format: zod_1.z.enum(['csv', 'json']).default('csv'),
+});
+//# sourceMappingURL=billing.js.map

package/dist/billing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"billing.js","sourceRoot":"","sources":["../src/billing.ts"],"names":[],"mappings":";AAAA;;;;;;;;;GASG;;;AAEH,6BAAuB;AAqHvB,8CAA8C;AACjC,QAAA,0BAA0B,GAAG,OAAC,CAAC,MAAM,CAAC;IACjD,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IACjC,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;CAC3C,CAAC,CAAA;AA2BF,6CAA6C;AAChC,QAAA,2BAA2B,GAAG,OAAC,CAAC,MAAM,CAAC;IAClD,MAAM,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IAC/D,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE;IACtD,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE;IACpD,MAAM,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;CAC/C,CAAC,CAAA"}

package/dist/cdc.d.ts

@@ -0,0 +1,73 @@
+/**
+ * CDC (Change Data Capture) Shared Types
+ *
+ * Types shared between the control plane CDC streamer, warehouse export,
+ * and SIEM webhook consumers.
+ *
+ * LLD #23 + LLD #53 (UPDATE/DELETE extension)
+ *
+ * @module
+ */
+/** Supported database mutation types. */
+export type CdcMutationType = 'INSERT' | 'UPDATE' | 'DELETE';
+/** Tables monitored by the CDC pipeline. */
+export type CdcSourceTable = 'execution_traces' | 'governance_incidents';
+/**
+ * Normalized CDC event structure.
+ *
+ * Consumers should switch on `mutationType` rather than `operation`,
+ * which is retained only for backward compatibility with INSERT-only consumers.
+ */
+export interface CdcEventPayload {
+    eventId: string;
+    sourceTable: CdcSourceTable;
+    workspaceId: string;
+    /** @deprecated Always 'INSERT' — use mutationType instead. */
+    operation: 'INSERT';
+    /** Discriminator for the type of database mutation. */
+    mutationType: CdcMutationType;
+    /** Current row values (INSERT/UPDATE: new values; DELETE: empty). */
+    payload: Record<string, unknown>;
+    /** Previous column values (UPDATE events only). */
+    oldValues?: Record<string, unknown>;
+    /** Snapshot of deleted row (DELETE events only). */
+    deletedValues?: Record<string, unknown>;
+    /** Column names that changed (UPDATE events only). */
+    changedColumns?: string[];
+    /** WAL timestamp of the original database transaction. */
+    walTimestamp: string;
+    /** Timestamp when the event was processed by the CDC streamer. */
+    streamedAt: string;
+}
+/**
+ * Debezium envelope structure from pgoutput logical replication.
+ *
+ * Debezium operation codes:
+ * - `c` = CREATE (INSERT)
+ * - `u` = UPDATE
+ * - `d` = DELETE
+ * - `r` = READ (snapshot) — skipped by the CDC pipeline
+ */
+export interface DebeziumEnvelope {
+    before: Record<string, unknown> | null;
+    after: Record<string, unknown> | null;
+    source: {
+        table: string;
+        ts_ms: number;
+        schema?: string;
+        connector?: string;
+    };
+    op: 'c' | 'u' | 'd' | 'r';
+    ts_ms: number;
+}
+/**
+ * SIEM webhook payload structure.
+ * Sent as the JSON body to configured SIEM webhook destinations.
+ */
+export interface CdcWebhookPayload {
+    events: CdcEventPayload[];
+    batchId: string;
+    batchSize: number;
+    streamedAt: string;
+}
+//# sourceMappingURL=cdc.d.ts.map

package/dist/cdc.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cdc.d.ts","sourceRoot":"","sources":["../src/cdc.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,yCAAyC;AACzC,MAAM,MAAM,eAAe,GAAG,QAAQ,GAAG,QAAQ,GAAG,QAAQ,CAAA;AAE5D,4CAA4C;AAC5C,MAAM,MAAM,cAAc,GAAG,kBAAkB,GAAG,sBAAsB,CAAA;AAIxE;;;;;GAKG;AACH,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAA;IACf,WAAW,EAAE,cAAc,CAAA;IAC3B,WAAW,EAAE,MAAM,CAAA;IACnB,8DAA8D;IAC9D,SAAS,EAAE,QAAQ,CAAA;IACnB,uDAAuD;IACvD,YAAY,EAAE,eAAe,CAAA;IAC7B,qEAAqE;IACrE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAChC,mDAAmD;IACnD,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACnC,oDAAoD;IACpD,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACvC,sDAAsD;IACtD,cAAc,CAAC,EAAE,MAAM,EAAE,CAAA;IACzB,0DAA0D;IAC1D,YAAY,EAAE,MAAM,CAAA;IACpB,kEAAkE;IAClE,UAAU,EAAE,MAAM,CAAA;CACnB;AAID;;;;;;;;GAQG;AACH,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;IACtC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;IACrC,MAAM,EAAE;QACN,KAAK,EAAE,MAAM,CAAA;QACb,KAAK,EAAE,MAAM,CAAA;QACb,MAAM,CAAC,EAAE,MAAM,CAAA;QACf,SAAS,CAAC,EAAE,MAAM,CAAA;KACnB,CAAA;IACD,EAAE,EAAE,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,CAAA;IACzB,KAAK,EAAE,MAAM,CAAA;CACd;AAID;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,eAAe,EAAE,CAAA;IACzB,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,CAAA;CACnB"}

package/dist/cdc.js

@@ -0,0 +1,13 @@
+"use strict";
+/**
+ * CDC (Change Data Capture) Shared Types
+ *
+ * Types shared between the control plane CDC streamer, warehouse export,
+ * and SIEM webhook consumers.
+ *
+ * LLD #23 + LLD #53 (UPDATE/DELETE extension)
+ *
+ * @module
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=cdc.js.map

package/dist/cdc.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cdc.js","sourceRoot":"","sources":["../src/cdc.ts"],"names":[],"mappings":";AAAA;;;;;;;;;GASG"}

package/dist/cfo.d.ts

@@ -0,0 +1,66 @@
+export interface AdoptionMetrics {
+    activeUsers: number;
+    provisionedUsers: number;
+    activeRate: number;
+    wowTrend: number;
+    idleUsers: {
+        memberId: string;
+        name: string;
+        email: string;
+        idleDays: number;
+    }[];
+}
+export interface RoiWorkflowCost {
+    workflowName: string;
+    costUsd: number;
+    executions: number;
+}
+export interface RoiProviderCost {
+    provider: string;
+    costUsd: number;
+    tokens: number;
+}
+export interface RoiSignals {
+    costPerWorkflow: RoiWorkflowCost[];
+    providerComparison: RoiProviderCost[];
+    wastePercentage: number;
+    savingsUsd: number;
+}
+export interface ForecastAlert {
+    alertId: string;
+    limitUsd: number;
+    spendUsd: number;
+    severity: string;
+    message: string;
+    triggeredAt: string;
+}
+export interface BudgetForecast {
+    forecasted30dSpend: number;
+    overBudgetAlerts: ForecastAlert[];
+    headroomSavingsUsd: number;
+    routeLlmSavingsUsd: number;
+}
+export interface ChargebackReconciliation {
+    reconciliationId: string;
+    workspaceId: string;
+    billingPeriod: string;
+    totalTrackedCost: string;
+    totalAllocatedCost: string;
+    reconciliationStatus: string;
+    reconciledBy?: string | null;
+    reconciledAt?: string | null;
+    notes?: string | null;
+    createdAt: string;
+    updatedAt: string;
+}
+export interface GlMapping {
+    mappingId: string;
+    workspaceId: string;
+    departmentId: string;
+    glCode: string;
+    costCenter?: string | null;
+    reconciliationStatus: string;
+    createdAt: string;
+    updatedAt: string;
+}
+//# sourceMappingURL=cfo.d.ts.map

package/dist/cfo.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cfo.d.ts","sourceRoot":"","sources":["../src/cfo.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,eAAe;IAC9B,WAAW,EAAE,MAAM,CAAA;IACnB,gBAAgB,EAAE,MAAM,CAAA;IACxB,UAAU,EAAE,MAAM,CAAA;IAClB,QAAQ,EAAE,MAAM,CAAA;IAChB,SAAS,EAAE;QACT,QAAQ,EAAE,MAAM,CAAA;QAChB,IAAI,EAAE,MAAM,CAAA;QACZ,KAAK,EAAE,MAAM,CAAA;QACb,QAAQ,EAAE,MAAM,CAAA;KACjB,EAAE,CAAA;CACJ;AAED,MAAM,WAAW,eAAe;IAC9B,YAAY,EAAE,MAAM,CAAA;IACpB,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,MAAM,CAAA;IAChB,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,MAAM,CAAA;CACf;AAED,MAAM,WAAW,UAAU;IACzB,eAAe,EAAE,eAAe,EAAE,CAAA;IAClC,kBAAkB,EAAE,eAAe,EAAE,CAAA;IACrC,eAAe,EAAE,MAAM,CAAA;IACvB,UAAU,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAA;IACf,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,EAAE,MAAM,CAAA;IAChB,OAAO,EAAE,MAAM,CAAA;IACf,WAAW,EAAE,MAAM,CAAA;CACpB;AAED,MAAM,WAAW,cAAc;IAC7B,kBAAkB,EAAE,MAAM,CAAA;IAC1B,gBAAgB,EAAE,aAAa,EAAE,CAAA;IACjC,kBAAkB,EAAE,MAAM,CAAA;IAC1B,kBAAkB,EAAE,MAAM,CAAA;CAC3B;AAED,MAAM,WAAW,wBAAwB;IACvC,gBAAgB,EAAE,MAAM,CAAA;IACxB,WAAW,EAAE,MAAM,CAAA;IACnB,aAAa,EAAE,MAAM,CAAA;IACrB,gBAAgB,EAAE,MAAM,CAAA;IACxB,kBAAkB,EAAE,MAAM,CAAA;IAC1B,oBAAoB,EAAE,MAAM,CAAA;IAC5B,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACrB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,SAAS;IACxB,SAAS,EAAE,MAAM,CAAA;IACjB,WAAW,EAAE,MAAM,CAAA;IACnB,YAAY,EAAE,MAAM,CAAA;IACpB,MAAM,EAAE,MAAM,CAAA;IACd,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,oBAAoB,EAAE,MAAM,CAAA;IAC5B,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;CAClB"}

package/dist/cfo.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=cfo.js.map

package/dist/cfo.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cfo.js","sourceRoot":"","sources":["../src/cfo.ts"],"names":[],"mappings":""}

package/dist/connectors.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Source Connectors Types — Notion, Confluence, and GitHub pull sync models.
+ */
+export interface SourceConnector {
+    connector_id: string;
+    provider: 'notion' | 'confluence' | 'github';
+    name: string;
+    config: Record<string, any>;
+    last_synced_at: string | null;
+    created_at: string;
+}
+export interface CreateConnectorInput {
+    provider: 'notion' | 'confluence' | 'github';
+    name: string;
+    config: Record<string, any>;
+    token: string;
+}
+export interface SyncConnectorResult {
+    success: boolean;
+    processed_docs: number;
+    updated_sops: string[];
+}
+//# sourceMappingURL=connectors.d.ts.map

package/dist/connectors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connectors.d.ts","sourceRoot":"","sources":["../src/connectors.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,MAAM,WAAW,eAAe;IAC9B,YAAY,EAAE,MAAM,CAAA;IACpB,QAAQ,EAAE,QAAQ,GAAG,YAAY,GAAG,QAAQ,CAAA;IAC5C,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC3B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAA;IAC7B,UAAU,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,QAAQ,GAAG,YAAY,GAAG,QAAQ,CAAA;IAC5C,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC3B,KAAK,EAAE,MAAM,CAAA;CACd;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,OAAO,CAAA;IAChB,cAAc,EAAE,MAAM,CAAA;IACtB,YAAY,EAAE,MAAM,EAAE,CAAA;CACvB"}

package/dist/connectors.js

@@ -0,0 +1,6 @@
+"use strict";
+/**
+ * Source Connectors Types — Notion, Confluence, and GitHub pull sync models.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=connectors.js.map

package/dist/connectors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connectors.js","sourceRoot":"","sources":["../src/connectors.ts"],"names":[],"mappings":";AAAA;;GAEG"}

package/dist/enums.d.ts

@@ -0,0 +1,238 @@
+/**
+ * Domain enums for the Intutic governance platform.
+ *
+ * Each enum is defined as a frozen `as const` object with a corresponding
+ * TypeScript union type extracted via `typeof Obj[keyof typeof Obj]`.
+ * This pattern gives us runtime values (for comparisons, iteration) and
+ * compile-time narrowing without Drizzle or Postgres dependencies.
+ *
+ * These mirror the Postgres enum types defined in
+ * LLD 01-data-architecture §3.1.
+ *
+ * @module
+ */
+/** Risk severity classification for SOPs, anomalies, and incidents. */
+export declare const RiskLevel: {
+    readonly LOW: "LOW";
+    readonly MEDIUM: "MEDIUM";
+    readonly HIGH: "HIGH";
+    readonly CRITICAL: "CRITICAL";
+};
+/** Union of all risk level values. */
+export type RiskLevel = typeof RiskLevel[keyof typeof RiskLevel];
+/** PCAS enforcement action applied to a tool call. */
+export declare const EnforcementAction: {
+    readonly BYPASS: "BYPASS";
+    readonly ENHANCE: "ENHANCE";
+    readonly HIJACK: "HIJACK";
+    readonly KILL: "KILL";
+};
+/** Union of all enforcement action values. */
+export type EnforcementAction = typeof EnforcementAction[keyof typeof EnforcementAction];
+/** Classification of whether a token expenditure was useful or wasted. */
+export declare const TokenUtility: {
+    readonly USEFUL: "USEFUL";
+    readonly WASTED: "WASTED";
+};
+/** Union of all token utility values. */
+export type TokenUtility = typeof TokenUtility[keyof typeof TokenUtility];
+/** Budget authority level assigned to a user or agent session. */
+export declare const BudgetTier: {
+    readonly JUNIOR: "JUNIOR";
+    readonly SENIOR: "SENIOR";
+    readonly STAFF: "STAFF";
+    readonly PRINCIPAL: "PRINCIPAL";
+};
+/** Union of all budget tier values. */
+export type BudgetTier = typeof BudgetTier[keyof typeof BudgetTier];
+/** Task complexity classification for model routing. */
+export declare const ComplexityTier: {
+    readonly TIER_0: "TIER_0";
+    readonly TIER_1: "TIER_1";
+    readonly TIER_2: "TIER_2";
+};
+/** Union of all complexity tier values. */
+export type ComplexityTier = typeof ComplexityTier[keyof typeof ComplexityTier];
+/** Classification of how an SOP change affects the prior version. */
+export declare const ChangeClassification: {
+    readonly STRENGTHEN: "STRENGTHEN";
+    readonly CLARIFY: "CLARIFY";
+    readonly NARROW: "NARROW";
+    readonly WEAKEN: "WEAKEN";
+};
+/** Union of all change classification values. */
+export type ChangeClassification = typeof ChangeClassification[keyof typeof ChangeClassification];
+/** Runtime anomaly classification taxonomy. */
+export declare const AnomalyType: {
+    readonly TOOL_ABUSE: "TOOL_ABUSE";
+    readonly TOKEN_WASTE: "TOKEN_WASTE";
+    readonly LOOP_DETECTED: "LOOP_DETECTED";
+    readonly UNAUTHORIZED_TOOL: "UNAUTHORIZED_TOOL";
+    readonly DATA_EXFILTRATION: "DATA_EXFILTRATION";
+    readonly PROMPT_INJECTION: "PROMPT_INJECTION";
+    readonly HALLUCINATION: "HALLUCINATION";
+    readonly SCOPE_VIOLATION: "SCOPE_VIOLATION";
+    readonly BUDGET_BREACH: "BUDGET_BREACH";
+    readonly SPAWN_BUDGET_BREACH: "SPAWN_BUDGET_BREACH";
+    readonly WORKFLOW_BUDGET_BREACH: "WORKFLOW_BUDGET_BREACH";
+    readonly WORKFLOW_GOAL_DRIFT: "WORKFLOW_GOAL_DRIFT";
+};
+/** Union of all anomaly type values. */
+export type AnomalyType = typeof AnomalyType[keyof typeof AnomalyType];
+/** Supported AI agent harness/IDE integrations. */
+export declare const HarnessType: {
+    readonly CURSOR: "cursor";
+    readonly CLAUDE_CODE: "claude-code";
+    readonly ANTIGRAVITY: "antigravity";
+    readonly N8N: "n8n";
+    readonly CODEX: "codex";
+    readonly WINDSURF: "windsurf";
+    readonly AIDER: "aider";
+    readonly OPENHANDS: "openhands";
+    readonly OPENCLAW: "openclaw";
+    readonly HERMES: "hermes";
+    readonly PI: "pi";
+    readonly CLINE: "cline";
+    readonly ROO_CODE: "roo-code";
+    readonly CONTINUE: "continue";
+    readonly CLAUDE_DESKTOP: "claude-desktop";
+    readonly GOOSE: "goose";
+    readonly OPEN_WEBUI: "open-webui";
+    readonly GITHUB_COPILOT: "github-copilot";
+};
+/** Union of all harness type values. */
+export type HarnessType = typeof HarnessType[keyof typeof HarnessType];
+/** Agent execution mode controlling autonomy level. */
+export declare const ExecutionMode: {
+    readonly STANDARD: "STANDARD";
+    readonly PLAN_ONLY: "PLAN_ONLY";
+    readonly SHADOW: "SHADOW";
+    readonly AUTONOMOUS: "AUTONOMOUS";
+};
+/** Union of all execution mode values. */
+export type ExecutionMode = typeof ExecutionMode[keyof typeof ExecutionMode];
+/** Lifecycle state of a governance incident. */
+export declare const IncidentStatus: {
+    readonly OPEN: "OPEN";
+    readonly ACKNOWLEDGED: "ACKNOWLEDGED";
+    readonly RESOLVED: "RESOLVED";
+    readonly FALSE_POSITIVE: "FALSE_POSITIVE";
+};
+/** Union of all incident status values. */
+export type IncidentStatus = typeof IncidentStatus[keyof typeof IncidentStatus];
+/** Lifecycle state for stored execution plans. */
+export declare const PlanLifecycleState: {
+    readonly PENDING_APPROVAL: "PENDING_APPROVAL";
+    readonly APPROVED: "APPROVED";
+    readonly REJECTED: "REJECTED";
+    readonly EXECUTING: "EXECUTING";
+    readonly COMPLETED: "COMPLETED";
+};
+/** Union of all plan lifecycle state values. */
+export type PlanLifecycleState = typeof PlanLifecycleState[keyof typeof PlanLifecycleState];
+/** Lifecycle state for SOPs in the registry. */
+export declare const SopLifecycleState: {
+    readonly DRAFT: "DRAFT";
+    readonly PENDING_REVIEW: "PENDING_REVIEW";
+    readonly GENERATED: "GENERATED";
+    readonly HYPOTHESIZED: "HYPOTHESIZED";
+    readonly REFINED: "REFINED";
+    readonly VALIDATED: "VALIDATED";
+    readonly INVALIDATED: "INVALIDATED";
+};
+/** Union of all SOP lifecycle state values. */
+export type SopLifecycleState = typeof SopLifecycleState[keyof typeof SopLifecycleState];
+/** SOP type: standard markdown or executable V8 hook. */
+export declare const SopType: {
+    /** Standard SOP — markdown content enforced via SSL. */
+    readonly STANDARD: "standard";
+    /** Hook SOP — V8-executable script that fires at a pipeline phase. */
+    readonly HOOK: "hook";
+};
+/** Union of all SOP type values. */
+export type SopType = typeof SopType[keyof typeof SopType];
+/** Pipeline phase where a hook-type SOP fires. */
+export declare const HookPhase: {
+    /** Before tool call evaluation. */
+    readonly PRE_TOOL: "PRE_TOOL";
+    /** After tool call evaluation. */
+    readonly POST_TOOL: "POST_TOOL";
+    /** Before forwarding to LLM provider. */
+    readonly PRE_RESPONSE: "PRE_RESPONSE";
+    /** After LLM response received. */
+    readonly POST_RESPONSE: "POST_RESPONSE";
+};
+/** Union of all hook phase values. */
+export type HookPhase = typeof HookPhase[keyof typeof HookPhase];
+/** Model routing tier for cost optimization. */
+export declare const RoutingTier: {
+    readonly FRONTIER: "frontier";
+    readonly ECONOMY: "economy";
+    readonly LOCAL: "local";
+};
+/** Union of all routing tier values. */
+export type RoutingTier = typeof RoutingTier[keyof typeof RoutingTier];
+/** Workspace member role for RBAC. OWNER > ADMIN > EM > DEVELOPER > VIEWER. */
+export declare const WorkspaceRole: {
+    readonly OWNER: "OWNER";
+    readonly ADMIN: "ADMIN";
+    readonly EM: "EM";
+    readonly DEVELOPER: "DEVELOPER";
+    readonly VIEWER: "VIEWER";
+};
+/** Union of all workspace role values. */
+export type WorkspaceRole = typeof WorkspaceRole[keyof typeof WorkspaceRole];
+/**
+ * MCP proxy fail behavior when the Intutic control plane is unreachable.
+ * - `open`   (default): pass through the tool call + emit a warning event
+ * - `closed`: block the tool call with a user-visible error message
+ *
+ * Note: `closed` only affects harnesses with MCP proxy injection (13/17).
+ * For harnesses without proxy (n8n, pi, codex, open-webui), see TD-151.
+ */
+export declare const McpProxyFailBehavior: {
+    readonly OPEN: "open";
+    readonly CLOSED: "closed";
+};
+export type McpProxyFailBehavior = typeof McpProxyFailBehavior[keyof typeof McpProxyFailBehavior];
+/**
+ * MCP proxy deployment model.
+ * - `per-session` (default, Phase 4): new proxy process per MCP connection
+ * - `daemon`      (Phase 5): long-lived daemon, per-session shims delegate via Unix socket
+ *
+ * See TD-153 — daemon requires macOS notarization. Per-session is the only active mode in Phase 4.
+ */
+export declare const McpProxyMode: {
+    readonly PER_SESSION: "per-session";
+    readonly DAEMON: "daemon";
+};
+export type McpProxyMode = typeof McpProxyMode[keyof typeof McpProxyMode];
+/**
+ * Bypass enforcement tier — how aggressively the sync-daemon defends harness configs
+ * against manual edits.
+ * - `rewrite`    (default): drift watcher detects edits → immediate config rewrite (~1s)
+ * - `immutable`  (opt-in):  after each write, sets macOS `chflags uchg` (user-immutable flag)
+ * - `alert-only`: no rewrite; drift creates a governance incident only (audit mode)
+ *
+ * See TD-154 for immutable-flag UX risk notes.
+ */
+export declare const BypassEnforcementTier: {
+    readonly REWRITE: "rewrite";
+    readonly IMMUTABLE: "immutable";
+    readonly ALERT_ONLY: "alert-only";
+};
+export type BypassEnforcementTier = typeof BypassEnforcementTier[keyof typeof BypassEnforcementTier];
+/** TurboVec behavioral drift classification. @see HLD §7.7 */
+export declare const DriftClassification: {
+    readonly POSITIVE_DRIFT: "POSITIVE_DRIFT";
+    readonly NEGATIVE_DRIFT: "NEGATIVE_DRIFT";
+    readonly NEUTRAL_DRIFT: "NEUTRAL_DRIFT";
+};
+export type DriftClassification = typeof DriftClassification[keyof typeof DriftClassification];
+/** Drift detection mode — TurboVec cosine-distance or compliance-score fallback. */
+export declare const DriftDetectionMode: {
+    readonly TURBOVEC: "turbovec";
+    readonly COMPLIANCE_SCORE_FALLBACK: "compliance_score_fallback";
+};
+export type DriftDetectionMode = typeof DriftDetectionMode[keyof typeof DriftDetectionMode];
+//# sourceMappingURL=enums.d.ts.map