@intutic/shared-types 1.0.1

package/dist/enums.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"enums.d.ts","sourceRoot":"","sources":["../src/enums.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAKH,uEAAuE;AACvE,eAAO,MAAM,SAAS;;;;;CAKZ,CAAA;AAEV,sCAAsC;AACtC,MAAM,MAAM,SAAS,GAAG,OAAO,SAAS,CAAC,MAAM,OAAO,SAAS,CAAC,CAAA;AAKhE,sDAAsD;AACtD,eAAO,MAAM,iBAAiB;;;;;CAKpB,CAAA;AAEV,8CAA8C;AAC9C,MAAM,MAAM,iBAAiB,GAAG,OAAO,iBAAiB,CAAC,MAAM,OAAO,iBAAiB,CAAC,CAAA;AAKxF,0EAA0E;AAC1E,eAAO,MAAM,YAAY;;;CAGf,CAAA;AAEV,yCAAyC;AACzC,MAAM,MAAM,YAAY,GAAG,OAAO,YAAY,CAAC,MAAM,OAAO,YAAY,CAAC,CAAA;AAKzE,kEAAkE;AAClE,eAAO,MAAM,UAAU;;;;;CAKb,CAAA;AAEV,uCAAuC;AACvC,MAAM,MAAM,UAAU,GAAG,OAAO,UAAU,CAAC,MAAM,OAAO,UAAU,CAAC,CAAA;AAKnE,wDAAwD;AACxD,eAAO,MAAM,cAAc;;;;CAIjB,CAAA;AAEV,2CAA2C;AAC3C,MAAM,MAAM,cAAc,GAAG,OAAO,cAAc,CAAC,MAAM,OAAO,cAAc,CAAC,CAAA;AAK/E,qEAAqE;AACrE,eAAO,MAAM,oBAAoB;;;;;CAKvB,CAAA;AAEV,iDAAiD;AACjD,MAAM,MAAM,oBAAoB,GAAG,OAAO,oBAAoB,CAAC,MAAM,OAAO,oBAAoB,CAAC,CAAA;AAKjG,+CAA+C;AAC/C,eAAO,MAAM,WAAW;;;;;;;;;;;;;CAad,CAAA;AAEV,wCAAwC;AACxC,MAAM,MAAM,WAAW,GAAG,OAAO,WAAW,CAAC,MAAM,OAAO,WAAW,CAAC,CAAA;AAMtE,mDAAmD;AACnD,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;CAmBd,CAAA;AAEV,wCAAwC;AACxC,MAAM,MAAM,WAAW,GAAG,OAAO,WAAW,CAAC,MAAM,OAAO,WAAW,CAAC,CAAA;AAKtE,uDAAuD;AACvD,eAAO,MAAM,aAAa;;;;;CAKhB,CAAA;AAEV,0CAA0C;AAC1C,MAAM,MAAM,aAAa,GAAG,OAAO,aAAa,CAAC,MAAM,OAAO,aAAa,CAAC,CAAA;AAK5E,gDAAgD;AAChD,eAAO,MAAM,cAAc;;;;;CAKjB,CAAA;AAEV,2CAA2C;AAC3C,MAAM,MAAM,cAAc,GAAG,OAAO,cAAc,CAAC,MAAM,OAAO,cAAc,CAAC,CAAA;AAK/E,kDAAkD;AAClD,eAAO,MAAM,kBAAkB;;;;;;CAMrB,CAAA;AAEV,gDAAgD;AAChD,MAAM,MAAM,kBAAkB,GAAG,OAAO,kBAAkB,CAAC,MAAM,OAAO,kBAAkB,CAAC,CAAA;AAM3F,gDAAgD;AAChD,eAAO,MAAM,iBAAiB;;;;;;;;CAQpB,CAAA;AAEV,+CAA+C;AAC/C,MAAM,MAAM,iBAAiB,GAAG,OAAO,iBAAiB,CAAC,MAAM,OAAO,iBAAiB,CAAC,CAAA;AAKxF,yDAAyD;AACzD,eAAO,MAAM,OAAO;IAClB,wDAAwD;;IAExD,sEAAsE;;CAE9D,CAAA;AAEV,oCAAoC;AACpC,MAAM,MAAM,OAAO,GAAG,OAAO,OAAO,CAAC,MAAM,OAAO,OAAO,CAAC,CAAA;AAK1D,kDAAkD;AAClD,eAAO,MAAM,SAAS;IACpB,mCAAmC;;IAEnC,kCAAkC;;IAElC,yCAAyC;;IAEzC,mCAAmC;;CAE3B,CAAA;AAEV,sCAAsC;AACtC,MAAM,MAAM,SAAS,GAAG,OAAO,SAAS,CAAC,MAAM,OAAO,SAAS,CAAC,CAAA;AAKhE,gDAAgD;AAChD,eAAO,MAAM,WAAW;;;;CAId,CAAA;AAEV,wCAAwC;AACxC,MAAM,MAAM,WAAW,GAAG,OAAO,WAAW,CAAC,MAAM,OAAO,WAAW,CAAC,CAAA;AAKtE,+EAA+E;AAC/E,eAAO,MAAM,aAAa;;;;;;CAMhB,CAAA;AAEV,0CAA0C;AAC1C,MAAM,MAAM,aAAa,GAAG,OAAO,aAAa,CAAC,MAAM,OAAO,aAAa,CAAC,CAAA;AAM5E;;;;;;;GAOG;AACH,eAAO,MAAM,oBAAoB;;;CAGvB,CAAA;AACV,MAAM,MAAM,oBAAoB,GAAG,OAAO,oBAAoB,CAAC,MAAM,OAAO,oBAAoB,CAAC,CAAA;AAEjG;;;;;;GAMG;AACH,eAAO,MAAM,YAAY;;;CAGf,CAAA;AACV,MAAM,MAAM,YAAY,GAAG,OAAO,YAAY,CAAC,MAAM,OAAO,YAAY,CAAC,CAAA;AAEzE;;;;;;;;GAQG;AACH,eAAO,MAAM,qBAAqB;;;;CAIxB,CAAA;AACV,MAAM,MAAM,qBAAqB,GAAG,OAAO,qBAAqB,CAAC,MAAM,OAAO,qBAAqB,CAAC,CAAA;AAKpG,8DAA8D;AAC9D,eAAO,MAAM,mBAAmB;;;;CAItB,CAAA;AACV,MAAM,MAAM,mBAAmB,GAAG,OAAO,mBAAmB,CAAC,MAAM,OAAO,mBAAmB,CAAC,CAAA;AAE9F,oFAAoF;AACpF,eAAO,MAAM,kBAAkB;;;CAGrB,CAAA;AACV,MAAM,MAAM,kBAAkB,GAAG,OAAO,kBAAkB,CAAC,MAAM,OAAO,kBAAkB,CAAC,CAAA"}

package/dist/enums.js

@@ -0,0 +1,243 @@
+"use strict";
+/**
+ * Domain enums for the Intutic governance platform.
+ *
+ * Each enum is defined as a frozen `as const` object with a corresponding
+ * TypeScript union type extracted via `typeof Obj[keyof typeof Obj]`.
+ * This pattern gives us runtime values (for comparisons, iteration) and
+ * compile-time narrowing without Drizzle or Postgres dependencies.
+ *
+ * These mirror the Postgres enum types defined in
+ * LLD 01-data-architecture §3.1.
+ *
+ * @module
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DriftDetectionMode = exports.DriftClassification = exports.BypassEnforcementTier = exports.McpProxyMode = exports.McpProxyFailBehavior = exports.WorkspaceRole = exports.RoutingTier = exports.HookPhase = exports.SopType = exports.SopLifecycleState = exports.PlanLifecycleState = exports.IncidentStatus = exports.ExecutionMode = exports.HarnessType = exports.AnomalyType = exports.ChangeClassification = exports.ComplexityTier = exports.BudgetTier = exports.TokenUtility = exports.EnforcementAction = exports.RiskLevel = void 0;
+// ─── Risk Level ──────────────────────────────────────────────────────
+// HLD §3.5, LLD §3.1 — risk_level enum
+/** Risk severity classification for SOPs, anomalies, and incidents. */
+exports.RiskLevel = {
+    LOW: 'LOW',
+    MEDIUM: 'MEDIUM',
+    HIGH: 'HIGH',
+    CRITICAL: 'CRITICAL',
+};
+// ─── Enforcement Action ──────────────────────────────────────────────
+// HLD §3.3, LLD §3.1 — enforcement_action_type enum
+/** PCAS enforcement action applied to a tool call. */
+exports.EnforcementAction = {
+    BYPASS: 'BYPASS',
+    ENHANCE: 'ENHANCE',
+    HIJACK: 'HIJACK',
+    KILL: 'KILL',
+};
+// ─── Token Utility ───────────────────────────────────────────────────
+// HLD §3.6, LLD §3.1 — token_utility_type enum
+/** Classification of whether a token expenditure was useful or wasted. */
+exports.TokenUtility = {
+    USEFUL: 'USEFUL',
+    WASTED: 'WASTED',
+};
+// ─── Budget Tier ─────────────────────────────────────────────────────
+// HLD §3.3, LLD §3.1 — budget_tier_type enum
+/** Budget authority level assigned to a user or agent session. */
+exports.BudgetTier = {
+    JUNIOR: 'JUNIOR',
+    SENIOR: 'SENIOR',
+    STAFF: 'STAFF',
+    PRINCIPAL: 'PRINCIPAL',
+};
+// ─── Complexity Tier ─────────────────────────────────────────────────
+// HLD §3.4, LLD §3.1 — complexity_tier enum
+/** Task complexity classification for model routing. */
+exports.ComplexityTier = {
+    TIER_0: 'TIER_0',
+    TIER_1: 'TIER_1',
+    TIER_2: 'TIER_2',
+};
+// ─── Change Classification ──────────────────────────────────────────
+// HLD §3.4, LLD §3.1 — change_classification enum
+/** Classification of how an SOP change affects the prior version. */
+exports.ChangeClassification = {
+    STRENGTHEN: 'STRENGTHEN',
+    CLARIFY: 'CLARIFY',
+    NARROW: 'NARROW',
+    WEAKEN: 'WEAKEN',
+};
+// ─── Anomaly Type ────────────────────────────────────────────────────
+// HLD §3.5, LLD §3.1 — anomaly_type enum (12-category runtime taxonomy)
+/** Runtime anomaly classification taxonomy. */
+exports.AnomalyType = {
+    TOOL_ABUSE: 'TOOL_ABUSE',
+    TOKEN_WASTE: 'TOKEN_WASTE',
+    LOOP_DETECTED: 'LOOP_DETECTED',
+    UNAUTHORIZED_TOOL: 'UNAUTHORIZED_TOOL',
+    DATA_EXFILTRATION: 'DATA_EXFILTRATION',
+    PROMPT_INJECTION: 'PROMPT_INJECTION',
+    HALLUCINATION: 'HALLUCINATION',
+    SCOPE_VIOLATION: 'SCOPE_VIOLATION',
+    BUDGET_BREACH: 'BUDGET_BREACH',
+    SPAWN_BUDGET_BREACH: 'SPAWN_BUDGET_BREACH',
+    WORKFLOW_BUDGET_BREACH: 'WORKFLOW_BUDGET_BREACH',
+    WORKFLOW_GOAL_DRIFT: 'WORKFLOW_GOAL_DRIFT',
+};
+// ─── Harness Type ────────────────────────────────────────────────────
+// HLD §3.14, §4.5 — Supported AI agent harness integrations
+// Full matrix: HLD §3.14 Harness Onboarding Matrix (8 harnesses)
+/** Supported AI agent harness/IDE integrations. */
+exports.HarnessType = {
+    CURSOR: 'cursor',
+    CLAUDE_CODE: 'claude-code',
+    ANTIGRAVITY: 'antigravity',
+    N8N: 'n8n',
+    CODEX: 'codex',
+    WINDSURF: 'windsurf',
+    AIDER: 'aider',
+    OPENHANDS: 'openhands',
+    OPENCLAW: 'openclaw',
+    HERMES: 'hermes',
+    PI: 'pi',
+    CLINE: 'cline',
+    ROO_CODE: 'roo-code',
+    CONTINUE: 'continue',
+    CLAUDE_DESKTOP: 'claude-desktop',
+    GOOSE: 'goose',
+    OPEN_WEBUI: 'open-webui',
+    GITHUB_COPILOT: 'github-copilot',
+};
+// ─── Execution Mode ──────────────────────────────────────────────────
+// HLD §3.4 — Agent execution modes
+/** Agent execution mode controlling autonomy level. */
+exports.ExecutionMode = {
+    STANDARD: 'STANDARD',
+    PLAN_ONLY: 'PLAN_ONLY',
+    SHADOW: 'SHADOW',
+    AUTONOMOUS: 'AUTONOMOUS',
+};
+// ─── Incident Status ─────────────────────────────────────────────────
+// HLD §3.6.1, LLD §3.1 — Governance incident lifecycle
+/** Lifecycle state of a governance incident. */
+exports.IncidentStatus = {
+    OPEN: 'OPEN',
+    ACKNOWLEDGED: 'ACKNOWLEDGED',
+    RESOLVED: 'RESOLVED',
+    FALSE_POSITIVE: 'FALSE_POSITIVE',
+};
+// ─── Plan Lifecycle State ────────────────────────────────────────────
+// HLD §3.4.1 — Stored plan compliance trail lifecycle
+/** Lifecycle state for stored execution plans. */
+exports.PlanLifecycleState = {
+    PENDING_APPROVAL: 'PENDING_APPROVAL',
+    APPROVED: 'APPROVED',
+    REJECTED: 'REJECTED',
+    EXECUTING: 'EXECUTING',
+    COMPLETED: 'COMPLETED',
+};
+// ─── SOP Lifecycle State ─────────────────────────────────────────────
+// HLD §3.4, LLD #6 §4.2 — 7-state FSM: DRAFT → PENDING_REVIEW → GENERATED
+//   → HYPOTHESIZED → REFINED → VALIDATED → INVALIDATED
+/** Lifecycle state for SOPs in the registry. */
+exports.SopLifecycleState = {
+    DRAFT: 'DRAFT',
+    PENDING_REVIEW: 'PENDING_REVIEW',
+    GENERATED: 'GENERATED',
+    HYPOTHESIZED: 'HYPOTHESIZED',
+    REFINED: 'REFINED',
+    VALIDATED: 'VALIDATED',
+    INVALIDATED: 'INVALIDATED',
+};
+// ─── SOP Type ────────────────────────────────────────────────────────
+// TD-022 item 0.4 — SOP classification for hook pipeline
+/** SOP type: standard markdown or executable V8 hook. */
+exports.SopType = {
+    /** Standard SOP — markdown content enforced via SSL. */
+    STANDARD: 'standard',
+    /** Hook SOP — V8-executable script that fires at a pipeline phase. */
+    HOOK: 'hook',
+};
+// ─── Hook Phase ──────────────────────────────────────────────────────
+// TD-022 item 0.4 — Pipeline phase for hook-type SOPs
+/** Pipeline phase where a hook-type SOP fires. */
+exports.HookPhase = {
+    /** Before tool call evaluation. */
+    PRE_TOOL: 'PRE_TOOL',
+    /** After tool call evaluation. */
+    POST_TOOL: 'POST_TOOL',
+    /** Before forwarding to LLM provider. */
+    PRE_RESPONSE: 'PRE_RESPONSE',
+    /** After LLM response received. */
+    POST_RESPONSE: 'POST_RESPONSE',
+};
+// ─── Routing Tier ────────────────────────────────────────────────────
+// HLD §3.6, LLD §3.1 — Model routing tier classification
+/** Model routing tier for cost optimization. */
+exports.RoutingTier = {
+    FRONTIER: 'frontier',
+    ECONOMY: 'economy',
+    LOCAL: 'local',
+};
+// ─── Workspace Role ──────────────────────────────────────────────────
+// HLD §5.1, LLD #7 — RBAC role hierarchy
+/** Workspace member role for RBAC. OWNER > ADMIN > EM > DEVELOPER > VIEWER. */
+exports.WorkspaceRole = {
+    OWNER: 'OWNER',
+    ADMIN: 'ADMIN',
+    EM: 'EM',
+    DEVELOPER: 'DEVELOPER',
+    VIEWER: 'VIEWER',
+};
+// ─── MCP Proxy Settings ──────────────────────────────────────────────
+// WS-5 — Q1 fail behavior, Q2 deployment model, Q3 bypass enforcement
+// TD-151, TD-152, TD-153, TD-154, TD-155
+/**
+ * MCP proxy fail behavior when the Intutic control plane is unreachable.
+ * - `open`   (default): pass through the tool call + emit a warning event
+ * - `closed`: block the tool call with a user-visible error message
+ *
+ * Note: `closed` only affects harnesses with MCP proxy injection (13/17).
+ * For harnesses without proxy (n8n, pi, codex, open-webui), see TD-151.
+ */
+exports.McpProxyFailBehavior = {
+    OPEN: 'open',
+    CLOSED: 'closed',
+};
+/**
+ * MCP proxy deployment model.
+ * - `per-session` (default, Phase 4): new proxy process per MCP connection
+ * - `daemon`      (Phase 5): long-lived daemon, per-session shims delegate via Unix socket
+ *
+ * See TD-153 — daemon requires macOS notarization. Per-session is the only active mode in Phase 4.
+ */
+exports.McpProxyMode = {
+    PER_SESSION: 'per-session',
+    DAEMON: 'daemon',
+};
+/**
+ * Bypass enforcement tier — how aggressively the sync-daemon defends harness configs
+ * against manual edits.
+ * - `rewrite`    (default): drift watcher detects edits → immediate config rewrite (~1s)
+ * - `immutable`  (opt-in):  after each write, sets macOS `chflags uchg` (user-immutable flag)
+ * - `alert-only`: no rewrite; drift creates a governance incident only (audit mode)
+ *
+ * See TD-154 for immutable-flag UX risk notes.
+ */
+exports.BypassEnforcementTier = {
+    REWRITE: 'rewrite',
+    IMMUTABLE: 'immutable',
+    ALERT_ONLY: 'alert-only',
+};
+// ─── Phase 5 Enums ───────────────────────────────────────────────────
+// LLD #27: Production Hardening & SOC 2
+/** TurboVec behavioral drift classification. @see HLD §7.7 */
+exports.DriftClassification = {
+    POSITIVE_DRIFT: 'POSITIVE_DRIFT',
+    NEGATIVE_DRIFT: 'NEGATIVE_DRIFT',
+    NEUTRAL_DRIFT: 'NEUTRAL_DRIFT',
+};
+/** Drift detection mode — TurboVec cosine-distance or compliance-score fallback. */
+exports.DriftDetectionMode = {
+    TURBOVEC: 'turbovec',
+    COMPLIANCE_SCORE_FALLBACK: 'compliance_score_fallback',
+};
+//# sourceMappingURL=enums.js.map

package/dist/enums.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"enums.js","sourceRoot":"","sources":["../src/enums.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;GAYG;;;AAEH,wEAAwE;AACxE,uCAAuC;AAEvC,uEAAuE;AAC1D,QAAA,SAAS,GAAG;IACvB,GAAG,EAAE,KAAK;IACV,MAAM,EAAE,QAAQ;IAChB,IAAI,EAAE,MAAM;IACZ,QAAQ,EAAE,UAAU;CACZ,CAAA;AAKV,wEAAwE;AACxE,oDAAoD;AAEpD,sDAAsD;AACzC,QAAA,iBAAiB,GAAG;IAC/B,MAAM,EAAE,QAAQ;IAChB,OAAO,EAAE,SAAS;IAClB,MAAM,EAAE,QAAQ;IAChB,IAAI,EAAE,MAAM;CACJ,CAAA;AAKV,wEAAwE;AACxE,+CAA+C;AAE/C,0EAA0E;AAC7D,QAAA,YAAY,GAAG;IAC1B,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,QAAQ;CACR,CAAA;AAKV,wEAAwE;AACxE,6CAA6C;AAE7C,kEAAkE;AACrD,QAAA,UAAU,GAAG;IACxB,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,QAAQ;IAChB,KAAK,EAAE,OAAO;IACd,SAAS,EAAE,WAAW;CACd,CAAA;AAKV,wEAAwE;AACxE,4CAA4C;AAE5C,wDAAwD;AAC3C,QAAA,cAAc,GAAG;IAC5B,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,QAAQ;CACR,CAAA;AAKV,uEAAuE;AACvE,kDAAkD;AAElD,qEAAqE;AACxD,QAAA,oBAAoB,GAAG;IAClC,UAAU,EAAE,YAAY;IACxB,OAAO,EAAE,SAAS;IAClB,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,QAAQ;CACR,CAAA;AAKV,wEAAwE;AACxE,wEAAwE;AAExE,+CAA+C;AAClC,QAAA,WAAW,GAAG;IACzB,UAAU,EAAE,YAAY;IACxB,WAAW,EAAE,aAAa;IAC1B,aAAa,EAAE,eAAe;IAC9B,iBAAiB,EAAE,mBAAmB;IACtC,iBAAiB,EAAE,mBAAmB;IACtC,gBAAgB,EAAE,kBAAkB;IACpC,aAAa,EAAE,eAAe;IAC9B,eAAe,EAAE,iBAAiB;IAClC,aAAa,EAAE,eAAe;IAC9B,mBAAmB,EAAE,qBAAqB;IAC1C,sBAAsB,EAAE,wBAAwB;IAChD,mBAAmB,EAAE,qBAAqB;CAClC,CAAA;AAKV,wEAAwE;AACxE,4DAA4D;AAC5D,iEAAiE;AAEjE,mDAAmD;AACtC,QAAA,WAAW,GAAG;IACzB,MAAM,EAAE,QAAQ;IAChB,WAAW,EAAE,aAAa;IAC1B,WAAW,EAAE,aAAa;IAC1B,GAAG,EAAE,KAAK;IACV,KAAK,EAAE,OAAO;IACd,QAAQ,EAAE,UAAU;IACpB,KAAK,EAAE,OAAO;IACd,SAAS,EAAE,WAAW;IACtB,QAAQ,EAAE,UAAU;IACpB,MAAM,EAAE,QAAQ;IAChB,EAAE,EAAE,IAAI;IACR,KAAK,EAAE,OAAO;IACd,QAAQ,EAAE,UAAU;IACpB,QAAQ,EAAE,UAAU;IACpB,cAAc,EAAE,gBAAgB;IAChC,KAAK,EAAE,OAAO;IACd,UAAU,EAAE,YAAY;IACxB,cAAc,EAAE,gBAAgB;CACxB,CAAA;AAKV,wEAAwE;AACxE,mCAAmC;AAEnC,uDAAuD;AAC1C,QAAA,aAAa,GAAG;IAC3B,QAAQ,EAAE,UAAU;IACpB,SAAS,EAAE,WAAW;IACtB,MAAM,EAAE,QAAQ;IAChB,UAAU,EAAE,YAAY;CAChB,CAAA;AAKV,wEAAwE;AACxE,uDAAuD;AAEvD,gDAAgD;AACnC,QAAA,cAAc,GAAG;IAC5B,IAAI,EAAE,MAAM;IACZ,YAAY,EAAE,cAAc;IAC5B,QAAQ,EAAE,UAAU;IACpB,cAAc,EAAE,gBAAgB;CACxB,CAAA;AAKV,wEAAwE;AACxE,sDAAsD;AAEtD,kDAAkD;AACrC,QAAA,kBAAkB,GAAG;IAChC,gBAAgB,EAAE,kBAAkB;IACpC,QAAQ,EAAE,UAAU;IACpB,QAAQ,EAAE,UAAU;IACpB,SAAS,EAAE,WAAW;IACtB,SAAS,EAAE,WAAW;CACd,CAAA;AAKV,wEAAwE;AACxE,0EAA0E;AAC1E,uDAAuD;AAEvD,gDAAgD;AACnC,QAAA,iBAAiB,GAAG;IAC/B,KAAK,EAAE,OAAO;IACd,cAAc,EAAE,gBAAgB;IAChC,SAAS,EAAE,WAAW;IACtB,YAAY,EAAE,cAAc;IAC5B,OAAO,EAAE,SAAS;IAClB,SAAS,EAAE,WAAW;IACtB,WAAW,EAAE,aAAa;CAClB,CAAA;AAKV,wEAAwE;AACxE,yDAAyD;AAEzD,yDAAyD;AAC5C,QAAA,OAAO,GAAG;IACrB,wDAAwD;IACxD,QAAQ,EAAE,UAAU;IACpB,sEAAsE;IACtE,IAAI,EAAE,MAAM;CACJ,CAAA;AAKV,wEAAwE;AACxE,sDAAsD;AAEtD,kDAAkD;AACrC,QAAA,SAAS,GAAG;IACvB,mCAAmC;IACnC,QAAQ,EAAE,UAAU;IACpB,kCAAkC;IAClC,SAAS,EAAE,WAAW;IACtB,yCAAyC;IACzC,YAAY,EAAE,cAAc;IAC5B,mCAAmC;IACnC,aAAa,EAAE,eAAe;CACtB,CAAA;AAKV,wEAAwE;AACxE,yDAAyD;AAEzD,gDAAgD;AACnC,QAAA,WAAW,GAAG;IACzB,QAAQ,EAAE,UAAU;IACpB,OAAO,EAAE,SAAS;IAClB,KAAK,EAAE,OAAO;CACN,CAAA;AAKV,wEAAwE;AACxE,yCAAyC;AAEzC,+EAA+E;AAClE,QAAA,aAAa,GAAG;IAC3B,KAAK,EAAE,OAAO;IACd,KAAK,EAAE,OAAO;IACd,EAAE,EAAE,IAAI;IACR,SAAS,EAAE,WAAW;IACtB,MAAM,EAAE,QAAQ;CACR,CAAA;AAKV,wEAAwE;AACxE,sEAAsE;AACtE,yCAAyC;AAEzC;;;;;;;GAOG;AACU,QAAA,oBAAoB,GAAG;IAClC,IAAI,EAAI,MAAM;IACd,MAAM,EAAE,QAAQ;CACR,CAAA;AAGV;;;;;;GAMG;AACU,QAAA,YAAY,GAAG;IAC1B,WAAW,EAAE,aAAa;IAC1B,MAAM,EAAO,QAAQ;CACb,CAAA;AAGV;;;;;;;;GAQG;AACU,QAAA,qBAAqB,GAAG;IACnC,OAAO,EAAK,SAAS;IACrB,SAAS,EAAG,WAAW;IACvB,UAAU,EAAE,YAAY;CAChB,CAAA;AAGV,wEAAwE;AACxE,wCAAwC;AAExC,8DAA8D;AACjD,QAAA,mBAAmB,GAAG;IACjC,cAAc,EAAE,gBAAgB;IAChC,cAAc,EAAE,gBAAgB;IAChC,aAAa,EAAG,eAAe;CACvB,CAAA;AAGV,oFAAoF;AACvE,QAAA,kBAAkB,GAAG;IAChC,QAAQ,EAAmB,UAAU;IACrC,yBAAyB,EAAE,2BAA2B;CAC9C,CAAA"}

package/dist/errors.d.ts

@@ -0,0 +1,122 @@
+/**
+ * Shared error codes and error class for the Intutic platform.
+ *
+ * All services throw `IntuticError` instances so that HTTP handlers can
+ * reliably extract `code`, `statusCode`, and `details` for structured
+ * error responses.
+ *
+ * @module
+ */
+/** Resource not found. */
+export declare const E_NOT_FOUND: "E_NOT_FOUND";
+/** Cache service is down or temporarily unreachable. */
+export declare const E_CACHE_UNAVAILABLE: "E_CACHE_UNAVAILABLE";
+/** Missing or invalid authentication credentials. */
+export declare const E_UNAUTHORIZED: "E_UNAUTHORIZED";
+/** Authenticated but insufficient permissions. */
+export declare const E_FORBIDDEN: "E_FORBIDDEN";
+/** Budget limit exceeded — HLD §3.6 FinOps guardrail. */
+export declare const E_BUDGET_EXCEEDED: "E_BUDGET_EXCEEDED";
+/** Request rate limit exceeded. */
+export declare const E_RATE_LIMITED: "E_RATE_LIMITED";
+/** Attempted UPDATE/DELETE on an append-only table (e.g., execution_traces). */
+export declare const E_APPEND_ONLY_VIOLATION: "E_APPEND_ONLY_VIOLATION";
+/** High-risk plan approval requires a human-written rationale (EU AI Act Art. 14). */
+export declare const E_APPROVAL_RATIONALE_REQUIRED: "E_APPROVAL_RATIONALE_REQUIRED";
+/** Request payload failed Zod schema validation. */
+export declare const E_VALIDATION_FAILED: "E_VALIDATION_FAILED";
+/** Stripe/billing checkout disabled or unavailable. */
+export declare const E_CHECKOUT_DISABLED: "CHECKOUT_DISABLED";
+/** Workspace already on the requested tier. */
+export declare const E_ALREADY_ON_TIER: "ALREADY_ON_TIER";
+/** Stripe API error. */
+export declare const E_STRIPE_ERROR: "STRIPE_ERROR";
+/** Webhook signature validation failed. */
+export declare const E_SIGNATURE_INVALID: "SIGNATURE_INVALID";
+/** Workspace free trial has expired. */
+export declare const E_TRIAL_EXPIRED: "TRIAL_EXPIRED";
+/** Email already registered. */
+export declare const E_EMAIL_ALREADY_EXISTS: "EMAIL_ALREADY_EXISTS";
+/** OAuth flow failure. */
+export declare const E_OAUTH_FAILED: "OAUTH_FAILED";
+/** Token is invalid or malformed. */
+export declare const E_TOKEN_INVALID: "TOKEN_INVALID";
+/** Token has expired. */
+export declare const E_TOKEN_EXPIRED: "TOKEN_EXPIRED";
+/** Resource is already in the target state. */
+export declare const E_ALREADY_VERIFIED: "ALREADY_VERIFIED";
+/** Generic validation failure (legacy alias). */
+export declare const E_VALIDATION: "E_VALIDATION";
+/** SSO is not configured or disabled for this workspace. */
+export declare const E_SSO_DISABLED: "SSO_DISABLED";
+/** SSO user has no workspace membership. */
+export declare const E_SSO_NO_MEMBERSHIP: "SSO_NO_MEMBERSHIP";
+/** OIDC state parameter is invalid or expired. */
+export declare const E_OIDC_INVALID_STATE: "OIDC_INVALID_STATE";
+/** OIDC token exchange with the IdP failed. */
+export declare const E_OIDC_TOKEN_EXCHANGE_FAILED: "OIDC_TOKEN_EXCHANGE_FAILED";
+/** Required claims missing from OIDC id_token. */
+export declare const E_OIDC_CLAIMS_MISSING: "OIDC_CLAIMS_MISSING";
+/** SSO provider exists but is disabled. */
+export declare const E_PROVIDER_DISABLED: "PROVIDER_DISABLED";
+/** Cannot delete provider — active members are using it. */
+export declare const E_PROVIDER_IN_USE: "PROVIDER_IN_USE";
+/** SCIM bearer token authentication failed. */
+export declare const E_SCIM_AUTH_FAILED: "SCIM_AUTH_FAILED";
+/** SCIM resource already exists (duplicate externalId). */
+export declare const E_SCIM_DUPLICATE: "SCIM_DUPLICATE";
+/** Offboarding cascade is already running for this user. */
+export declare const E_OFFBOARDING_IN_PROGRESS: "OFFBOARDING_IN_PROGRESS";
+/** Feature is not available on the current plan tier. */
+export declare const E_FEATURE_NOT_AVAILABLE: "FEATURE_NOT_AVAILABLE";
+/**
+ * Requested child capabilities are not a subset of the parent key's capabilities.
+ * HLD §5.6 — DCT Token Attenuation (Patent Family A).
+ */
+export declare const E_ATTENUATION_CAP_VIOLATION: "ATTENUATION_CAP_VIOLATION";
+/**
+ * Daily spend cap exceeded with hard enforcement mode active.
+ * Proxy returns this when budget:hard_block:{wid} Valkey key is set.
+ */
+export declare const E_OVERAGE_HARD_CAP_EXCEEDED: "OVERAGE_HARD_CAP_EXCEEDED";
+/**
+ * Union of all Intutic error code constants.
+ *
+ * Use this type to constrain error handling branches:
+ * ```ts
+ * function handle(code: IntuticErrorCode) { ... }
+ * ```
+ */
+export type IntuticErrorCode = typeof E_NOT_FOUND | typeof E_CACHE_UNAVAILABLE | typeof E_UNAUTHORIZED | typeof E_FORBIDDEN | typeof E_BUDGET_EXCEEDED | typeof E_RATE_LIMITED | typeof E_APPEND_ONLY_VIOLATION | typeof E_APPROVAL_RATIONALE_REQUIRED | typeof E_VALIDATION_FAILED | typeof E_CHECKOUT_DISABLED | typeof E_ALREADY_ON_TIER | typeof E_STRIPE_ERROR | typeof E_SIGNATURE_INVALID | typeof E_TRIAL_EXPIRED | typeof E_EMAIL_ALREADY_EXISTS | typeof E_OAUTH_FAILED | typeof E_TOKEN_INVALID | typeof E_TOKEN_EXPIRED | typeof E_ALREADY_VERIFIED | typeof E_VALIDATION | typeof E_SSO_DISABLED | typeof E_SSO_NO_MEMBERSHIP | typeof E_OIDC_INVALID_STATE | typeof E_OIDC_TOKEN_EXCHANGE_FAILED | typeof E_OIDC_CLAIMS_MISSING | typeof E_PROVIDER_DISABLED | typeof E_PROVIDER_IN_USE | typeof E_SCIM_AUTH_FAILED | typeof E_SCIM_DUPLICATE | typeof E_OFFBOARDING_IN_PROGRESS | typeof E_FEATURE_NOT_AVAILABLE | typeof E_ATTENUATION_CAP_VIOLATION | typeof E_OVERAGE_HARD_CAP_EXCEEDED;
+/**
+ * Structured error class used across all Intutic services.
+ *
+ * Every error carries a machine-readable `code`, an HTTP `statusCode`,
+ * and optional `details` for diagnostics.
+ *
+ * @example
+ * ```typescript
+ * import { IntuticError, E_BUDGET_EXCEEDED } from '@intutic/shared-types'
+ *
+ * throw new IntuticError(
+ *   E_BUDGET_EXCEEDED,
+ *   402,
+ *   'Monthly budget of $500.00 exceeded',
+ *   { currentSpend: 512.34, limit: 500.00 }
+ * )
+ * ```
+ */
+export declare class IntuticError extends Error {
+    /** Machine-readable error code (e.g., `E_BUDGET_EXCEEDED`). */
+    readonly code: IntuticErrorCode;
+    /** HTTP status code to return (e.g., 402, 403, 404). */
+    readonly statusCode: number;
+    /** Optional structured details for diagnostics. */
+    readonly details?: Record<string, unknown>;
+    constructor(code: IntuticErrorCode, statusCode: number, message: string, details?: Record<string, unknown>);
+}
+/**
+ * Type guard for IntuticError. Highly robust against duplicate prototype imports.
+ */
+export declare function isIntuticError(err: unknown): err is IntuticError;
+//# sourceMappingURL=errors.d.ts.map

package/dist/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,0BAA0B;AAC1B,eAAO,MAAM,WAAW,EAAG,aAAsB,CAAA;AAEjD,wDAAwD;AACxD,eAAO,MAAM,mBAAmB,EAAG,qBAA8B,CAAA;AAGjE,qDAAqD;AACrD,eAAO,MAAM,cAAc,EAAG,gBAAyB,CAAA;AAEvD,kDAAkD;AAClD,eAAO,MAAM,WAAW,EAAG,aAAsB,CAAA;AAEjD,yDAAyD;AACzD,eAAO,MAAM,iBAAiB,EAAG,mBAA4B,CAAA;AAE7D,mCAAmC;AACnC,eAAO,MAAM,cAAc,EAAG,gBAAyB,CAAA;AAEvD,gFAAgF;AAChF,eAAO,MAAM,uBAAuB,EAAG,yBAAkC,CAAA;AAEzE,sFAAsF;AACtF,eAAO,MAAM,6BAA6B,EAAG,+BAAwC,CAAA;AAErF,oDAAoD;AACpD,eAAO,MAAM,mBAAmB,EAAG,qBAA8B,CAAA;AAEjE,uDAAuD;AACvD,eAAO,MAAM,mBAAmB,EAAG,mBAA4B,CAAA;AAE/D,+CAA+C;AAC/C,eAAO,MAAM,iBAAiB,EAAG,iBAA0B,CAAA;AAE3D,wBAAwB;AACxB,eAAO,MAAM,cAAc,EAAG,cAAuB,CAAA;AAErD,2CAA2C;AAC3C,eAAO,MAAM,mBAAmB,EAAG,mBAA4B,CAAA;AAE/D,wCAAwC;AACxC,eAAO,MAAM,eAAe,EAAG,eAAwB,CAAA;AAEvD,gCAAgC;AAChC,eAAO,MAAM,sBAAsB,EAAG,sBAA+B,CAAA;AAErE,0BAA0B;AAC1B,eAAO,MAAM,cAAc,EAAG,cAAuB,CAAA;AAErD,qCAAqC;AACrC,eAAO,MAAM,eAAe,EAAG,eAAwB,CAAA;AAEvD,yBAAyB;AACzB,eAAO,MAAM,eAAe,EAAG,eAAwB,CAAA;AAEvD,+CAA+C;AAC/C,eAAO,MAAM,kBAAkB,EAAG,kBAA2B,CAAA;AAE7D,iDAAiD;AACjD,eAAO,MAAM,YAAY,EAAG,cAAuB,CAAA;AAInD,4DAA4D;AAC5D,eAAO,MAAM,cAAc,EAAG,cAAuB,CAAA;AAErD,4CAA4C;AAC5C,eAAO,MAAM,mBAAmB,EAAG,mBAA4B,CAAA;AAE/D,kDAAkD;AAClD,eAAO,MAAM,oBAAoB,EAAG,oBAA6B,CAAA;AAEjE,+CAA+C;AAC/C,eAAO,MAAM,4BAA4B,EAAG,4BAAqC,CAAA;AAEjF,kDAAkD;AAClD,eAAO,MAAM,qBAAqB,EAAG,qBAA8B,CAAA;AAEnE,2CAA2C;AAC3C,eAAO,MAAM,mBAAmB,EAAG,mBAA4B,CAAA;AAE/D,4DAA4D;AAC5D,eAAO,MAAM,iBAAiB,EAAG,iBAA0B,CAAA;AAE3D,+CAA+C;AAC/C,eAAO,MAAM,kBAAkB,EAAG,kBAA2B,CAAA;AAE7D,2DAA2D;AAC3D,eAAO,MAAM,gBAAgB,EAAG,gBAAyB,CAAA;AAEzD,4DAA4D;AAC5D,eAAO,MAAM,yBAAyB,EAAG,yBAAkC,CAAA;AAE3E,yDAAyD;AACzD,eAAO,MAAM,uBAAuB,EAAG,uBAAgC,CAAA;AAIvE;;;GAGG;AACH,eAAO,MAAM,2BAA2B,EAAG,2BAAoC,CAAA;AAI/E;;;GAGG;AACH,eAAO,MAAM,2BAA2B,EAAG,2BAAoC,CAAA;AAE/E;;;;;;;GAOG;AACH,MAAM,MAAM,gBAAgB,GACxB,OAAO,WAAW,GAClB,OAAO,mBAAmB,GAE1B,OAAO,cAAc,GACrB,OAAO,WAAW,GAClB,OAAO,iBAAiB,GACxB,OAAO,cAAc,GACrB,OAAO,uBAAuB,GAC9B,OAAO,6BAA6B,GACpC,OAAO,mBAAmB,GAC1B,OAAO,mBAAmB,GAC1B,OAAO,iBAAiB,GACxB,OAAO,cAAc,GACrB,OAAO,mBAAmB,GAC1B,OAAO,eAAe,GACtB,OAAO,sBAAsB,GAC7B,OAAO,cAAc,GACrB,OAAO,eAAe,GACtB,OAAO,eAAe,GACtB,OAAO,kBAAkB,GACzB,OAAO,YAAY,GAEnB,OAAO,cAAc,GACrB,OAAO,mBAAmB,GAC1B,OAAO,oBAAoB,GAC3B,OAAO,4BAA4B,GACnC,OAAO,qBAAqB,GAC5B,OAAO,mBAAmB,GAC1B,OAAO,iBAAiB,GACxB,OAAO,kBAAkB,GACzB,OAAO,gBAAgB,GACvB,OAAO,yBAAyB,GAChC,OAAO,uBAAuB,GAE9B,OAAO,2BAA2B,GAElC,OAAO,2BAA2B,CAAA;AAItC;;;;;;;;;;;;;;;;;GAiBG;AACH,qBAAa,YAAa,SAAQ,KAAK;IACrC,+DAA+D;IAC/D,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAA;IAE/B,wDAAwD;IACxD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAE3B,mDAAmD;IACnD,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;gBAGxC,IAAI,EAAE,gBAAgB,EACtB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAQpC;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,OAAO,GAAG,GAAG,IAAI,YAAY,CAQhE"}

package/dist/errors.js

@@ -0,0 +1,135 @@
+"use strict";
+/**
+ * Shared error codes and error class for the Intutic platform.
+ *
+ * All services throw `IntuticError` instances so that HTTP handlers can
+ * reliably extract `code`, `statusCode`, and `details` for structured
+ * error responses.
+ *
+ * @module
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.IntuticError = exports.E_OVERAGE_HARD_CAP_EXCEEDED = exports.E_ATTENUATION_CAP_VIOLATION = exports.E_FEATURE_NOT_AVAILABLE = exports.E_OFFBOARDING_IN_PROGRESS = exports.E_SCIM_DUPLICATE = exports.E_SCIM_AUTH_FAILED = exports.E_PROVIDER_IN_USE = exports.E_PROVIDER_DISABLED = exports.E_OIDC_CLAIMS_MISSING = exports.E_OIDC_TOKEN_EXCHANGE_FAILED = exports.E_OIDC_INVALID_STATE = exports.E_SSO_NO_MEMBERSHIP = exports.E_SSO_DISABLED = exports.E_VALIDATION = exports.E_ALREADY_VERIFIED = exports.E_TOKEN_EXPIRED = exports.E_TOKEN_INVALID = exports.E_OAUTH_FAILED = exports.E_EMAIL_ALREADY_EXISTS = exports.E_TRIAL_EXPIRED = exports.E_SIGNATURE_INVALID = exports.E_STRIPE_ERROR = exports.E_ALREADY_ON_TIER = exports.E_CHECKOUT_DISABLED = exports.E_VALIDATION_FAILED = exports.E_APPROVAL_RATIONALE_REQUIRED = exports.E_APPEND_ONLY_VIOLATION = exports.E_RATE_LIMITED = exports.E_BUDGET_EXCEEDED = exports.E_FORBIDDEN = exports.E_UNAUTHORIZED = exports.E_CACHE_UNAVAILABLE = exports.E_NOT_FOUND = void 0;
+exports.isIntuticError = isIntuticError;
+// ─── Error Code Constants ────────────────────────────────────────────
+/** Resource not found. */
+exports.E_NOT_FOUND = 'E_NOT_FOUND';
+/** Cache service is down or temporarily unreachable. */
+exports.E_CACHE_UNAVAILABLE = 'E_CACHE_UNAVAILABLE';
+/** Missing or invalid authentication credentials. */
+exports.E_UNAUTHORIZED = 'E_UNAUTHORIZED';
+/** Authenticated but insufficient permissions. */
+exports.E_FORBIDDEN = 'E_FORBIDDEN';
+/** Budget limit exceeded — HLD §3.6 FinOps guardrail. */
+exports.E_BUDGET_EXCEEDED = 'E_BUDGET_EXCEEDED';
+/** Request rate limit exceeded. */
+exports.E_RATE_LIMITED = 'E_RATE_LIMITED';
+/** Attempted UPDATE/DELETE on an append-only table (e.g., execution_traces). */
+exports.E_APPEND_ONLY_VIOLATION = 'E_APPEND_ONLY_VIOLATION';
+/** High-risk plan approval requires a human-written rationale (EU AI Act Art. 14). */
+exports.E_APPROVAL_RATIONALE_REQUIRED = 'E_APPROVAL_RATIONALE_REQUIRED';
+/** Request payload failed Zod schema validation. */
+exports.E_VALIDATION_FAILED = 'E_VALIDATION_FAILED';
+/** Stripe/billing checkout disabled or unavailable. */
+exports.E_CHECKOUT_DISABLED = 'CHECKOUT_DISABLED';
+/** Workspace already on the requested tier. */
+exports.E_ALREADY_ON_TIER = 'ALREADY_ON_TIER';
+/** Stripe API error. */
+exports.E_STRIPE_ERROR = 'STRIPE_ERROR';
+/** Webhook signature validation failed. */
+exports.E_SIGNATURE_INVALID = 'SIGNATURE_INVALID';
+/** Workspace free trial has expired. */
+exports.E_TRIAL_EXPIRED = 'TRIAL_EXPIRED';
+/** Email already registered. */
+exports.E_EMAIL_ALREADY_EXISTS = 'EMAIL_ALREADY_EXISTS';
+/** OAuth flow failure. */
+exports.E_OAUTH_FAILED = 'OAUTH_FAILED';
+/** Token is invalid or malformed. */
+exports.E_TOKEN_INVALID = 'TOKEN_INVALID';
+/** Token has expired. */
+exports.E_TOKEN_EXPIRED = 'TOKEN_EXPIRED';
+/** Resource is already in the target state. */
+exports.E_ALREADY_VERIFIED = 'ALREADY_VERIFIED';
+/** Generic validation failure (legacy alias). */
+exports.E_VALIDATION = 'E_VALIDATION';
+// ─── Identity Federation Error Codes (LLD #11) ─────────────────────
+/** SSO is not configured or disabled for this workspace. */
+exports.E_SSO_DISABLED = 'SSO_DISABLED';
+/** SSO user has no workspace membership. */
+exports.E_SSO_NO_MEMBERSHIP = 'SSO_NO_MEMBERSHIP';
+/** OIDC state parameter is invalid or expired. */
+exports.E_OIDC_INVALID_STATE = 'OIDC_INVALID_STATE';
+/** OIDC token exchange with the IdP failed. */
+exports.E_OIDC_TOKEN_EXCHANGE_FAILED = 'OIDC_TOKEN_EXCHANGE_FAILED';
+/** Required claims missing from OIDC id_token. */
+exports.E_OIDC_CLAIMS_MISSING = 'OIDC_CLAIMS_MISSING';
+/** SSO provider exists but is disabled. */
+exports.E_PROVIDER_DISABLED = 'PROVIDER_DISABLED';
+/** Cannot delete provider — active members are using it. */
+exports.E_PROVIDER_IN_USE = 'PROVIDER_IN_USE';
+/** SCIM bearer token authentication failed. */
+exports.E_SCIM_AUTH_FAILED = 'SCIM_AUTH_FAILED';
+/** SCIM resource already exists (duplicate externalId). */
+exports.E_SCIM_DUPLICATE = 'SCIM_DUPLICATE';
+/** Offboarding cascade is already running for this user. */
+exports.E_OFFBOARDING_IN_PROGRESS = 'OFFBOARDING_IN_PROGRESS';
+/** Feature is not available on the current plan tier. */
+exports.E_FEATURE_NOT_AVAILABLE = 'FEATURE_NOT_AVAILABLE';
+// ─── WS4 — Enterprise Identity & Compliance (LLD #19) ───────────────
+/**
+ * Requested child capabilities are not a subset of the parent key's capabilities.
+ * HLD §5.6 — DCT Token Attenuation (Patent Family A).
+ */
+exports.E_ATTENUATION_CAP_VIOLATION = 'ATTENUATION_CAP_VIOLATION';
+// ─── WS5 — Monetization & Financial Ledger (LLD #20) ────────────────
+/**
+ * Daily spend cap exceeded with hard enforcement mode active.
+ * Proxy returns this when budget:hard_block:{wid} Valkey key is set.
+ */
+exports.E_OVERAGE_HARD_CAP_EXCEEDED = 'OVERAGE_HARD_CAP_EXCEEDED';
+// ─── Error Class ─────────────────────────────────────────────────────
+/**
+ * Structured error class used across all Intutic services.
+ *
+ * Every error carries a machine-readable `code`, an HTTP `statusCode`,
+ * and optional `details` for diagnostics.
+ *
+ * @example
+ * ```typescript
+ * import { IntuticError, E_BUDGET_EXCEEDED } from '@intutic/shared-types'
+ *
+ * throw new IntuticError(
+ *   E_BUDGET_EXCEEDED,
+ *   402,
+ *   'Monthly budget of $500.00 exceeded',
+ *   { currentSpend: 512.34, limit: 500.00 }
+ * )
+ * ```
+ */
+class IntuticError extends Error {
+    /** Machine-readable error code (e.g., `E_BUDGET_EXCEEDED`). */
+    code;
+    /** HTTP status code to return (e.g., 402, 403, 404). */
+    statusCode;
+    /** Optional structured details for diagnostics. */
+    details;
+    constructor(code, statusCode, message, details) {
+        super(message);
+        this.name = 'IntuticError';
+        this.code = code;
+        this.statusCode = statusCode;
+        this.details = details;
+    }
+}
+exports.IntuticError = IntuticError;
+/**
+ * Type guard for IntuticError. Highly robust against duplicate prototype imports.
+ */
+function isIntuticError(err) {
+    return (err instanceof Error &&
+        (err.name === 'IntuticError' ||
+            err.constructor.name === 'IntuticError' ||
+            ('_isIntuticError' in err && err._isIntuticError === true) ||
+            ('code' in err && 'statusCode' in err)));
+}
+//# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":";AAAA;;;;;;;;GAQG;;;AAkNH,wCAQC;AAxND,wEAAwE;AAExE,0BAA0B;AACb,QAAA,WAAW,GAAG,aAAsB,CAAA;AAEjD,wDAAwD;AAC3C,QAAA,mBAAmB,GAAG,qBAA8B,CAAA;AAGjE,qDAAqD;AACxC,QAAA,cAAc,GAAG,gBAAyB,CAAA;AAEvD,kDAAkD;AACrC,QAAA,WAAW,GAAG,aAAsB,CAAA;AAEjD,yDAAyD;AAC5C,QAAA,iBAAiB,GAAG,mBAA4B,CAAA;AAE7D,mCAAmC;AACtB,QAAA,cAAc,GAAG,gBAAyB,CAAA;AAEvD,gFAAgF;AACnE,QAAA,uBAAuB,GAAG,yBAAkC,CAAA;AAEzE,sFAAsF;AACzE,QAAA,6BAA6B,GAAG,+BAAwC,CAAA;AAErF,oDAAoD;AACvC,QAAA,mBAAmB,GAAG,qBAA8B,CAAA;AAEjE,uDAAuD;AAC1C,QAAA,mBAAmB,GAAG,mBAA4B,CAAA;AAE/D,+CAA+C;AAClC,QAAA,iBAAiB,GAAG,iBAA0B,CAAA;AAE3D,wBAAwB;AACX,QAAA,cAAc,GAAG,cAAuB,CAAA;AAErD,2CAA2C;AAC9B,QAAA,mBAAmB,GAAG,mBAA4B,CAAA;AAE/D,wCAAwC;AAC3B,QAAA,eAAe,GAAG,eAAwB,CAAA;AAEvD,gCAAgC;AACnB,QAAA,sBAAsB,GAAG,sBAA+B,CAAA;AAErE,0BAA0B;AACb,QAAA,cAAc,GAAG,cAAuB,CAAA;AAErD,qCAAqC;AACxB,QAAA,eAAe,GAAG,eAAwB,CAAA;AAEvD,yBAAyB;AACZ,QAAA,eAAe,GAAG,eAAwB,CAAA;AAEvD,+CAA+C;AAClC,QAAA,kBAAkB,GAAG,kBAA2B,CAAA;AAE7D,iDAAiD;AACpC,QAAA,YAAY,GAAG,cAAuB,CAAA;AAEnD,sEAAsE;AAEtE,4DAA4D;AAC/C,QAAA,cAAc,GAAG,cAAuB,CAAA;AAErD,4CAA4C;AAC/B,QAAA,mBAAmB,GAAG,mBAA4B,CAAA;AAE/D,kDAAkD;AACrC,QAAA,oBAAoB,GAAG,oBAA6B,CAAA;AAEjE,+CAA+C;AAClC,QAAA,4BAA4B,GAAG,4BAAqC,CAAA;AAEjF,kDAAkD;AACrC,QAAA,qBAAqB,GAAG,qBAA8B,CAAA;AAEnE,2CAA2C;AAC9B,QAAA,mBAAmB,GAAG,mBAA4B,CAAA;AAE/D,4DAA4D;AAC/C,QAAA,iBAAiB,GAAG,iBAA0B,CAAA;AAE3D,+CAA+C;AAClC,QAAA,kBAAkB,GAAG,kBAA2B,CAAA;AAE7D,2DAA2D;AAC9C,QAAA,gBAAgB,GAAG,gBAAyB,CAAA;AAEzD,4DAA4D;AAC/C,QAAA,yBAAyB,GAAG,yBAAkC,CAAA;AAE3E,yDAAyD;AAC5C,QAAA,uBAAuB,GAAG,uBAAgC,CAAA;AAEvE,uEAAuE;AAEvE;;;GAGG;AACU,QAAA,2BAA2B,GAAG,2BAAoC,CAAA;AAE/E,uEAAuE;AAEvE;;;GAGG;AACU,QAAA,2BAA2B,GAAG,2BAAoC,CAAA;AAiD/E,wEAAwE;AAExE;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAa,YAAa,SAAQ,KAAK;IACrC,+DAA+D;IACtD,IAAI,CAAkB;IAE/B,wDAAwD;IAC/C,UAAU,CAAQ;IAE3B,mDAAmD;IAC1C,OAAO,CAA0B;IAE1C,YACE,IAAsB,EACtB,UAAkB,EAClB,OAAe,EACf,OAAiC;QAEjC,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,cAAc,CAAA;QAC1B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;QAChB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAA;QAC5B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;IACxB,CAAC;CACF;AAtBD,oCAsBC;AAED;;GAEG;AACH,SAAgB,cAAc,CAAC,GAAY;IACzC,OAAO,CACL,GAAG,YAAY,KAAK;QACpB,CAAC,GAAG,CAAC,IAAI,KAAK,cAAc;YAC1B,GAAG,CAAC,WAAW,CAAC,IAAI,KAAK,cAAc;YACvC,CAAC,iBAAiB,IAAI,GAAG,IAAK,GAAW,CAAC,eAAe,KAAK,IAAI,CAAC;YACnE,CAAC,MAAM,IAAI,GAAG,IAAI,YAAY,IAAI,GAAG,CAAC,CAAC,CAC1C,CAAC;AACJ,CAAC"}

package/dist/evaluator.d.ts

@@ -0,0 +1,70 @@
+/**
+ * Evaluator Sandbox Types
+ *
+ * WS-4E Advanced / E6 Evaluator Sandbox
+ */
+export interface DatasetSample {
+    id: string;
+    prompt: string;
+    expectedOutput: string;
+    tags?: string[];
+}
+export interface EvaluatorDataset {
+    datasetId: string;
+    workspaceId: string;
+    name: string;
+    description?: string | null;
+    samples: DatasetSample[];
+    sampleCount: number;
+    createdBy: string;
+    createdAt: string;
+    updatedAt: string;
+}
+export interface CreateDatasetInput {
+    name: string;
+    description?: string;
+    samples: DatasetSample[];
+}
+export interface TriggerRunInput {
+    datasetId: string;
+    sopId?: string;
+    sopSnapshot?: unknown;
+    triggeredBy: 'manual' | 'ci' | 'deploy_gate';
+}
+export interface EvaluatorRun {
+    runId: string;
+    workspaceId: string;
+    datasetId: string;
+    sopId?: string | null;
+    sopSnapshot?: unknown;
+    status: 'pending' | 'running' | 'completed' | 'failed';
+    passRate?: string | null;
+    avgScore?: string | null;
+    weakeningDetected: boolean;
+    deployApproved: boolean;
+    triggeredBy: string;
+    triggeredByUser?: string | null;
+    startedAt?: string | null;
+    completedAt?: string | null;
+    errorMessage?: string | null;
+    createdAt: string;
+    updatedAt: string;
+}
+export interface EvaluatorResult {
+    resultId: string;
+    runId: string;
+    sampleId: string;
+    prompt: string;
+    expectedOutput: string;
+    actualOutput?: string | null;
+    score?: string | null;
+    passed?: boolean | null;
+    modelUsed?: string | null;
+    latencyMs?: number | null;
+    createdAt: string;
+}
+export interface DeployGuardResult {
+    approved: boolean;
+    reason: string;
+}
+//# sourceMappingURL=evaluator.d.ts.map

package/dist/evaluator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"evaluator.d.ts","sourceRoot":"","sources":["../src/evaluator.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAA;IACV,MAAM,EAAE,MAAM,CAAA;IACd,cAAc,EAAE,MAAM,CAAA;IACtB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAA;CAChB;AAED,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAA;IACjB,WAAW,EAAE,MAAM,CAAA;IACnB,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,OAAO,EAAE,aAAa,EAAE,CAAA;IACxB,WAAW,EAAE,MAAM,CAAA;IACnB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,OAAO,EAAE,aAAa,EAAE,CAAA;CACzB;AAED,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,MAAM,CAAA;IACjB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,WAAW,CAAC,EAAE,OAAO,CAAA;IACrB,WAAW,EAAE,QAAQ,GAAG,IAAI,GAAG,aAAa,CAAA;CAC7C;AAED,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,CAAA;IACb,WAAW,EAAE,MAAM,CAAA;IACnB,SAAS,EAAE,MAAM,CAAA;IACjB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACrB,WAAW,CAAC,EAAE,OAAO,CAAA;IACrB,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,WAAW,GAAG,QAAQ,CAAA;IACtD,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,iBAAiB,EAAE,OAAO,CAAA;IAC1B,cAAc,EAAE,OAAO,CAAA;IACvB,WAAW,EAAE,MAAM,CAAA;IACnB,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC/B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,MAAM,CAAA;IAChB,KAAK,EAAE,MAAM,CAAA;IACb,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE,MAAM,CAAA;IACd,cAAc,EAAE,MAAM,CAAA;IACtB,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACrB,MAAM,CAAC,EAAE,OAAO,GAAG,IAAI,CAAA;IACvB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,OAAO,CAAA;IACjB,MAAM,EAAE,MAAM,CAAA;CACf"}

package/dist/evaluator.js

@@ -0,0 +1,8 @@
+"use strict";
+/**
+ * Evaluator Sandbox Types
+ *
+ * WS-4E Advanced / E6 Evaluator Sandbox
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=evaluator.js.map

package/dist/evaluator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evaluator.js","sourceRoot":"","sources":["../src/evaluator.ts"],"names":[],"mappings":";AAAA;;;;GAIG"}