@intutic/shared-types 1.0.1

package/dist/finops.d.ts

@@ -0,0 +1,185 @@
+/**
+ * FinOps ledger types for cost tracking and attribution.
+ *
+ * These types correspond to the `execution_traces` table and the
+ * `finops_attribution_4d` materialized view defined in
+ * LLD 01-data-architecture §3.1.
+ *
+ * HLD §3.6 (FinOps Ledger), §3.19 (4D Attribution)
+ *
+ * @module
+ */
+import type { AnomalyType, EnforcementAction, RoutingTier, TokenUtility } from './enums.js';
+/**
+ * A single row in the `execution_traces` table — the append-only FinOps ledger.
+ *
+ * This is the canonical financial audit trail for every LLM call flowing
+ * through the platform. INSERT only; UPDATE and DELETE are forbidden by
+ * a database trigger.
+ *
+ * LLD §3.1 — execution_traces table definition
+ */
+export interface TraceEntry {
+    /** Unique trace identifier — `newId('tr')`. */
+    traceId: string;
+    /** Session that produced this trace — FK to `agent_sessions`. */
+    sessionId: string;
+    /** Idempotency key — UNIQUE constraint. */
+    requestId: string;
+    /** Timestamp of the trace event. */
+    timestamp: string;
+    /** Effective date of the SOP governing this call. */
+    sopEffectiveDate: string;
+    /** Model requested by the agent/user. */
+    requestedModel: string;
+    /** Model actually routed to after complexity scoring. */
+    actualModelRouted: string;
+    /** Routing tier for this call. */
+    routingTier: RoutingTier;
+    /** Complexity score used for routing (0.0–1.0). */
+    complexityScore: number;
+    /** Raw input tokens before compression. */
+    rawInputTokens: number;
+    /** Input tokens after compression. */
+    compressedInputTokens: number;
+    /** Output tokens generated. */
+    outputTokens: number;
+    /** Cost at the raw model rate (USD). */
+    rawCostUsd: number;
+    /** Actual cost after routing optimization (USD). */
+    actualCostUsd: number;
+    /** Savings from routing optimization (USD) — generated column. */
+    savingsUsd: number;
+    /** Whether the token spend was useful or wasted. */
+    tokenUtility: TokenUtility;
+    /** Utility confidence score (0.0–1.0). */
+    tokenUtilityScore: number;
+    /** Compliance score from policy evaluation (0.0–1.0). */
+    complianceScore: number;
+    /** Enforcement action applied to this call. */
+    enforcementAction: EnforcementAction;
+    /** Detected anomaly type, if any. */
+    anomalyDetected: AnomalyType | null;
+    /** Anomaly detection confidence score (0.0–1.0). */
+    anomalyConfidenceScore: number | null;
+    /** Additional anomaly taxonomy metadata. */
+    taxonomyMetadata: Record<string, unknown> | null;
+    /** Raw request/response payload for audit. SENSITIVE. */
+    rawPayloadJson: Record<string, unknown> | null;
+    /** Application identifier for attribution. */
+    appId: string | null;
+    /** Agent chain identifier for attribution. */
+    agentChainId: string | null;
+    /** Full agent delegation chain (JSON). */
+    agentChain: Record<string, unknown> | null;
+    /** Whether this call was served from cache. */
+    cacheHit: boolean;
+    /** Savings from cache hit (USD). */
+    cacheSavingsUsd: number;
+    /** Structured root cause attribution for anomalies. */
+    rootCauseAttribution: Record<string, unknown> | null;
+    /** Corrective prompt card generated for this anomaly. */
+    correctivePromptCard: Record<string, unknown> | null;
+}
+/**
+ * Summarized cost breakdown for a session, workspace, or time window.
+ *
+ * HLD §3.6 — FinOps cost accounting
+ */
+export interface CostBreakdown {
+    /** Cost at raw model rates (USD). */
+    rawCost: number;
+    /** Actual cost after optimization (USD). */
+    actualCost: number;
+    /** Total savings from model routing (USD). */
+    savings: number;
+    /** Total savings from cache hits (USD). */
+    cacheSavings: number;
+}
+/**
+ * Four-dimensional attribution key for FinOps rollup.
+ *
+ * Maps to the `finops_attribution_4d` materialized view's grouping dimensions:
+ * Person × Harness × App × Agent Chain.
+ *
+ * HLD §3.19, LLD §3.1 — finops_attribution_4d materialized view
+ */
+export interface Attribution4D {
+    /** User/person identifier. */
+    personId: string;
+    /** Harness/IDE type that produced the cost. */
+    harnessType: string;
+    /** Optional application identifier. */
+    appId?: string;
+    /** Optional agent chain identifier. */
+    agentChainId?: string;
+}
+/** Summary row for listing traces in the UI. */
+export interface TraceSummary {
+    traceId: string;
+    timestamp: string;
+    requestedModel: string;
+    actualModelRouted: string;
+    enforcementAction: EnforcementAction | string;
+    complianceScore: number;
+    actualCostUsd: number;
+    anomalyDetected: AnomalyType | string | null;
+}
+/** Paginated result from trace listing. */
+export interface TraceListResult {
+    traces: TraceSummary[];
+    total: number;
+    limit: number;
+    offset: number;
+}
+export interface TraceStep {
+    logId: string;
+    toolName: string;
+    toolArguments: unknown;
+    riskCategory: string | null;
+    verdict: string;
+    confidence: number;
+    reason: string;
+    loopDetected: boolean;
+    latencyMs: number | null;
+    timestamp: string;
+}
+/** Full detail of a single trace. */
+export interface TraceDetail {
+    traceId: string;
+    sessionId: string;
+    requestId: string;
+    timestamp: string;
+    sopEffectiveDate: string;
+    requestedModel: string;
+    actualModelRouted: string;
+    routingTier: RoutingTier | string;
+    complexityScore: number;
+    rawInputTokens: number;
+    compressedInputTokens: number;
+    outputTokens: number;
+    rawCostUsd: number;
+    actualCostUsd: number;
+    savingsUsd: number;
+    tokenUtility: TokenUtility | string;
+    tokenUtilityScore: number;
+    complianceScore: number;
+    enforcementAction: EnforcementAction | string;
+    anomalyDetected: AnomalyType | string | null;
+    anomalyConfidenceScore: number | null;
+    taxonomyMetadata: unknown | null;
+    rootCauseAttribution: unknown | null;
+    correctivePromptCard: unknown | null;
+    reasoningTokens?: number | null;
+    toolCallMetrics?: unknown | null;
+    steps?: TraceStep[];
+}
+/** Filters for trace query. */
+export interface TraceFilters {
+    enforcement?: string;
+    model?: string;
+    since?: string;
+    limit?: number;
+    offset?: number;
+}
+//# sourceMappingURL=finops.d.ts.map

package/dist/finops.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"finops.d.ts","sourceRoot":"","sources":["../src/finops.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EACV,WAAW,EACX,iBAAiB,EACjB,WAAW,EACX,YAAY,EACb,MAAM,YAAY,CAAA;AAInB;;;;;;;;GAQG;AACH,MAAM,WAAW,UAAU;IACzB,+CAA+C;IAC/C,OAAO,EAAE,MAAM,CAAA;IAEf,iEAAiE;IACjE,SAAS,EAAE,MAAM,CAAA;IAEjB,2CAA2C;IAC3C,SAAS,EAAE,MAAM,CAAA;IAEjB,oCAAoC;IACpC,SAAS,EAAE,MAAM,CAAA;IAEjB,qDAAqD;IACrD,gBAAgB,EAAE,MAAM,CAAA;IAGxB,yCAAyC;IACzC,cAAc,EAAE,MAAM,CAAA;IAEtB,yDAAyD;IACzD,iBAAiB,EAAE,MAAM,CAAA;IAEzB,kCAAkC;IAClC,WAAW,EAAE,WAAW,CAAA;IAExB,mDAAmD;IACnD,eAAe,EAAE,MAAM,CAAA;IAGvB,2CAA2C;IAC3C,cAAc,EAAE,MAAM,CAAA;IAEtB,sCAAsC;IACtC,qBAAqB,EAAE,MAAM,CAAA;IAE7B,+BAA+B;IAC/B,YAAY,EAAE,MAAM,CAAA;IAGpB,wCAAwC;IACxC,UAAU,EAAE,MAAM,CAAA;IAElB,oDAAoD;IACpD,aAAa,EAAE,MAAM,CAAA;IAErB,kEAAkE;IAClE,UAAU,EAAE,MAAM,CAAA;IAGlB,oDAAoD;IACpD,YAAY,EAAE,YAAY,CAAA;IAE1B,0CAA0C;IAC1C,iBAAiB,EAAE,MAAM,CAAA;IAGzB,yDAAyD;IACzD,eAAe,EAAE,MAAM,CAAA;IAEvB,+CAA+C;IAC/C,iBAAiB,EAAE,iBAAiB,CAAA;IAGpC,qCAAqC;IACrC,eAAe,EAAE,WAAW,GAAG,IAAI,CAAA;IAEnC,oDAAoD;IACpD,sBAAsB,EAAE,MAAM,GAAG,IAAI,CAAA;IAErC,4CAA4C;IAC5C,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;IAGhD,yDAAyD;IACzD,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;IAG9C,8CAA8C;IAC9C,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IAEpB,8CAA8C;IAC9C,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAE3B,0CAA0C;IAC1C,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;IAG1C,+CAA+C;IAC/C,QAAQ,EAAE,OAAO,CAAA;IAEjB,oCAAoC;IACpC,eAAe,EAAE,MAAM,CAAA;IAGvB,uDAAuD;IACvD,oBAAoB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;IAEpD,yDAAyD;IACzD,oBAAoB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;CACrD;AAID;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,qCAAqC;IACrC,OAAO,EAAE,MAAM,CAAA;IAEf,4CAA4C;IAC5C,UAAU,EAAE,MAAM,CAAA;IAElB,8CAA8C;IAC9C,OAAO,EAAE,MAAM,CAAA;IAEf,2CAA2C;IAC3C,YAAY,EAAE,MAAM,CAAA;CACrB;AAID;;;;;;;GAOG;AACH,MAAM,WAAW,aAAa;IAC5B,8BAA8B;IAC9B,QAAQ,EAAE,MAAM,CAAA;IAEhB,+CAA+C;IAC/C,WAAW,EAAE,MAAM,CAAA;IAEnB,uCAAuC;IACvC,KAAK,CAAC,EAAE,MAAM,CAAA;IAEd,uCAAuC;IACvC,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB;AAID,gDAAgD;AAChD,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,MAAM,CAAA;IACjB,cAAc,EAAE,MAAM,CAAA;IACtB,iBAAiB,EAAE,MAAM,CAAA;IACzB,iBAAiB,EAAE,iBAAiB,GAAG,MAAM,CAAA;IAC7C,eAAe,EAAE,MAAM,CAAA;IACvB,aAAa,EAAE,MAAM,CAAA;IACrB,eAAe,EAAE,WAAW,GAAG,MAAM,GAAG,IAAI,CAAA;CAC7C;AAED,2CAA2C;AAC3C,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,YAAY,EAAE,CAAA;IACtB,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;CACf;AAED,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,MAAM,CAAA;IACb,QAAQ,EAAE,MAAM,CAAA;IAChB,aAAa,EAAE,OAAO,CAAA;IACtB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,EAAE,MAAM,CAAA;IAClB,MAAM,EAAE,MAAM,CAAA;IACd,YAAY,EAAE,OAAO,CAAA;IACrB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,qCAAqC;AACrC,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,gBAAgB,EAAE,MAAM,CAAA;IACxB,cAAc,EAAE,MAAM,CAAA;IACtB,iBAAiB,EAAE,MAAM,CAAA;IACzB,WAAW,EAAE,WAAW,GAAG,MAAM,CAAA;IACjC,eAAe,EAAE,MAAM,CAAA;IACvB,cAAc,EAAE,MAAM,CAAA;IACtB,qBAAqB,EAAE,MAAM,CAAA;IAC7B,YAAY,EAAE,MAAM,CAAA;IACpB,UAAU,EAAE,MAAM,CAAA;IAClB,aAAa,EAAE,MAAM,CAAA;IACrB,UAAU,EAAE,MAAM,CAAA;IAClB,YAAY,EAAE,YAAY,GAAG,MAAM,CAAA;IACnC,iBAAiB,EAAE,MAAM,CAAA;IACzB,eAAe,EAAE,MAAM,CAAA;IACvB,iBAAiB,EAAE,iBAAiB,GAAG,MAAM,CAAA;IAC7C,eAAe,EAAE,WAAW,GAAG,MAAM,GAAG,IAAI,CAAA;IAC5C,sBAAsB,EAAE,MAAM,GAAG,IAAI,CAAA;IACrC,gBAAgB,EAAE,OAAO,GAAG,IAAI,CAAA;IAChC,oBAAoB,EAAE,OAAO,GAAG,IAAI,CAAA;IACpC,oBAAoB,EAAE,OAAO,GAAG,IAAI,CAAA;IACpC,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC/B,eAAe,CAAC,EAAE,OAAO,GAAG,IAAI,CAAA;IAChC,KAAK,CAAC,EAAE,SAAS,EAAE,CAAA;CACpB;AAED,+BAA+B;AAC/B,MAAM,WAAW,YAAY;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB"}

package/dist/finops.js

@@ -0,0 +1,14 @@
+"use strict";
+/**
+ * FinOps ledger types for cost tracking and attribution.
+ *
+ * These types correspond to the `execution_traces` table and the
+ * `finops_attribution_4d` materialized view defined in
+ * LLD 01-data-architecture §3.1.
+ *
+ * HLD §3.6 (FinOps Ledger), §3.19 (4D Attribution)
+ *
+ * @module
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=finops.js.map

package/dist/finops.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"finops.js","sourceRoot":"","sources":["../src/finops.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;GAUG"}

package/dist/hindsight.d.ts

@@ -0,0 +1,49 @@
+export interface HindsightPattern {
+    patternId: string;
+    workspaceId: string;
+    vectorId?: string | null;
+    tier: 'raw' | 'compressed' | 'institutional';
+    sourceType: 'anomaly_reflect' | 'decision_mining' | 'capability_gap';
+    sourceRefId?: string | null;
+    patternSummary: string;
+    occurrenceCount: number;
+    lastSeenAt: string;
+    promotedAt?: string | null;
+    promotedBy?: string | null;
+    createdAt: string;
+    similarity?: number;
+}
+export interface PatternIngestInput {
+    workspaceId: string;
+    sourceType: 'anomaly_reflect' | 'decision_mining' | 'capability_gap';
+    sourceRefId?: string | null;
+    patternSummary: string;
+    embedding?: number[];
+}
+export interface PatternIngestResult {
+    patternId: string;
+    tier: 'raw' | 'compressed' | 'institutional';
+}
+export interface SearchFirstResult {
+    hit: boolean;
+    pattern?: HindsightPattern;
+    llmSkipped: boolean;
+    bestSimilarity?: number;
+}
+export interface CompressionResult {
+    compressedMessages: any[];
+    originalTokens: number;
+    compressedTokens: number;
+    ratio: number;
+}
+export interface DistillationResult {
+    compressed: number;
+    promotionCandidates: number;
+}
+export interface MemoryConfig {
+    hindsightEnabled: boolean;
+    headroomEnabled: boolean;
+    searchFirstEnabled: boolean;
+    searchFirstThreshold: number;
+}
+//# sourceMappingURL=hindsight.d.ts.map

package/dist/hindsight.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hindsight.d.ts","sourceRoot":"","sources":["../src/hindsight.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAA;IACjB,WAAW,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,IAAI,EAAE,KAAK,GAAG,YAAY,GAAG,eAAe,CAAA;IAC5C,UAAU,EAAE,iBAAiB,GAAG,iBAAiB,GAAG,gBAAgB,CAAA;IACpE,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,cAAc,EAAE,MAAM,CAAA;IACtB,eAAe,EAAE,MAAM,CAAA;IACvB,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AAED,MAAM,WAAW,kBAAkB;IACjC,WAAW,EAAE,MAAM,CAAA;IACnB,UAAU,EAAE,iBAAiB,GAAG,iBAAiB,GAAG,gBAAgB,CAAA;IACpE,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,cAAc,EAAE,MAAM,CAAA;IACtB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAA;CACrB;AAED,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAA;IACjB,IAAI,EAAE,KAAK,GAAG,YAAY,GAAG,eAAe,CAAA;CAC7C;AAED,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,OAAO,CAAA;IACZ,OAAO,CAAC,EAAE,gBAAgB,CAAA;IAC1B,UAAU,EAAE,OAAO,CAAA;IACnB,cAAc,CAAC,EAAE,MAAM,CAAA;CACxB;AAED,MAAM,WAAW,iBAAiB;IAChC,kBAAkB,EAAE,GAAG,EAAE,CAAA;IACzB,cAAc,EAAE,MAAM,CAAA;IACtB,gBAAgB,EAAE,MAAM,CAAA;IACxB,KAAK,EAAE,MAAM,CAAA;CACd;AAED,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,MAAM,CAAA;IAClB,mBAAmB,EAAE,MAAM,CAAA;CAC5B;AAED,MAAM,WAAW,YAAY;IAC3B,gBAAgB,EAAE,OAAO,CAAA;IACzB,eAAe,EAAE,OAAO,CAAA;IACxB,kBAAkB,EAAE,OAAO,CAAA;IAC3B,oBAAoB,EAAE,MAAM,CAAA;CAC7B"}

package/dist/hindsight.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=hindsight.js.map

package/dist/hindsight.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hindsight.js","sourceRoot":"","sources":["../src/hindsight.ts"],"names":[],"mappings":""}

package/dist/identity.d.ts

@@ -0,0 +1,101 @@
+/**
+ * Identity Federation types — LLD #11
+ *
+ * Cross-workspace user identity, SSO/OIDC provider configuration,
+ * SCIM 2.0 provisioning resources, and offboarding cascade types.
+ *
+ * @module
+ */
+import { z } from 'zod';
+export interface User {
+    userId: string;
+    email: string;
+    displayName: string | null;
+    avatarUrl: string | null;
+    authProvider: 'email' | 'okta' | 'entra_id';
+    externalId: string | null;
+    isActive: boolean;
+    lastLoginAt: string | null;
+    createdAt: string;
+    updatedAt: string;
+}
+export interface UserInfo {
+    userId: string;
+    email: string;
+    displayName: string | null;
+    avatarUrl: string | null;
+    authProvider: string;
+    isActive: boolean;
+    lastLoginAt: string | null;
+    createdAt: string;
+}
+export interface SsoProvider {
+    providerId: string;
+    workspaceId: string;
+    name: string;
+    type: 'okta' | 'entra_id' | 'google' | 'custom_oidc' | 'ping_identity';
+    issuer: string;
+    clientId: string;
+    scopes: string[];
+    autoProvision: boolean;
+    defaultRole: string;
+    isEnabled: boolean;
+    createdAt: string;
+    updatedAt: string;
+}
+export declare const CreateSsoProviderSchema: z.ZodObject<{
+    name: z.ZodString;
+    type: z.ZodEnum<["okta", "entra_id", "google", "custom_oidc", "ping_identity"]>;
+    issuer: z.ZodString;
+    clientId: z.ZodString;
+    clientSecret: z.ZodString;
+    scopes: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    autoProvision: z.ZodDefault<z.ZodBoolean>;
+    defaultRole: z.ZodDefault<z.ZodEnum<["ADMIN", "EM", "DEVELOPER", "VIEWER"]>>;
+}, "strip", z.ZodTypeAny, {
+    type: "okta" | "entra_id" | "google" | "custom_oidc" | "ping_identity";
+    name: string;
+    scopes: string[];
+    issuer: string;
+    clientId: string;
+    clientSecret: string;
+    autoProvision: boolean;
+    defaultRole: "ADMIN" | "EM" | "DEVELOPER" | "VIEWER";
+}, {
+    type: "okta" | "entra_id" | "google" | "custom_oidc" | "ping_identity";
+    name: string;
+    issuer: string;
+    clientId: string;
+    clientSecret: string;
+    scopes?: string[] | undefined;
+    autoProvision?: boolean | undefined;
+    defaultRole?: "ADMIN" | "EM" | "DEVELOPER" | "VIEWER" | undefined;
+}>;
+export type CreateSsoProviderInput = z.infer<typeof CreateSsoProviderSchema>;
+export interface OidcClaims {
+    sub: string;
+    email: string;
+    email_verified?: boolean;
+    name?: string;
+    given_name?: string;
+    family_name?: string;
+    picture?: string;
+    groups?: string[];
+    iss: string;
+    aud: string | string[];
+    exp: number;
+    iat: number;
+    nonce?: string;
+}
+export declare const UpdateUserProfileSchema: z.ZodObject<{
+    displayName: z.ZodOptional<z.ZodString>;
+    avatarUrl: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    displayName?: string | undefined;
+    avatarUrl?: string | undefined;
+}, {
+    displayName?: string | undefined;
+    avatarUrl?: string | undefined;
+}>;
+export type UpdateUserProfileInput = z.infer<typeof UpdateUserProfileSchema>;
+//# sourceMappingURL=identity.d.ts.map

package/dist/identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.d.ts","sourceRoot":"","sources":["../src/identity.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAKvB,MAAM,WAAW,IAAI;IACnB,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,MAAM,CAAA;IACb,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,YAAY,EAAE,OAAO,GAAG,MAAM,GAAG,UAAU,CAAA;IAC3C,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,QAAQ,EAAE,OAAO,CAAA;IACjB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,QAAQ;IACvB,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,MAAM,CAAA;IACb,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,YAAY,EAAE,MAAM,CAAA;IACpB,QAAQ,EAAE,OAAO,CAAA;IACjB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,SAAS,EAAE,MAAM,CAAA;CAClB;AAID,MAAM,WAAW,WAAW;IAC1B,UAAU,EAAE,MAAM,CAAA;IAClB,WAAW,EAAE,MAAM,CAAA;IACnB,IAAI,EAAE,MAAM,CAAA;IAEZ,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,QAAQ,GAAG,aAAa,GAAG,eAAe,CAAA;IACtE,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE,MAAM,EAAE,CAAA;IAChB,aAAa,EAAE,OAAO,CAAA;IACtB,WAAW,EAAE,MAAM,CAAA;IACnB,SAAS,EAAE,OAAO,CAAA;IAClB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;EAUlC,CAAA;AACF,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAA;AAI5E,MAAM,WAAW,UAAU;IACzB,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,EAAE,MAAM,CAAA;IACb,cAAc,CAAC,EAAE,OAAO,CAAA;IACxB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;IACjB,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,CAAA;IACtB,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAID,eAAO,MAAM,uBAAuB;;;;;;;;;EAGlC,CAAA;AACF,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAA"}

package/dist/identity.js

@@ -0,0 +1,29 @@
+"use strict";
+/**
+ * Identity Federation types — LLD #11
+ *
+ * Cross-workspace user identity, SSO/OIDC provider configuration,
+ * SCIM 2.0 provisioning resources, and offboarding cascade types.
+ *
+ * @module
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UpdateUserProfileSchema = exports.CreateSsoProviderSchema = void 0;
+const zod_1 = require("zod");
+exports.CreateSsoProviderSchema = zod_1.z.object({
+    name: zod_1.z.string().min(1).max(255),
+    // TD-115: Added 'ping_identity' as the third standard OIDC adapter.
+    type: zod_1.z.enum(['okta', 'entra_id', 'google', 'custom_oidc', 'ping_identity']),
+    issuer: zod_1.z.string().url(),
+    clientId: zod_1.z.string().min(1),
+    clientSecret: zod_1.z.string().min(1),
+    scopes: zod_1.z.array(zod_1.z.string()).default(['openid', 'profile', 'email']),
+    autoProvision: zod_1.z.boolean().default(false),
+    defaultRole: zod_1.z.enum(['ADMIN', 'EM', 'DEVELOPER', 'VIEWER']).default('DEVELOPER'),
+});
+// ── User management ──
+exports.UpdateUserProfileSchema = zod_1.z.object({
+    displayName: zod_1.z.string().min(1).max(255).optional(),
+    avatarUrl: zod_1.z.string().url().optional(),
+});
+//# sourceMappingURL=identity.js.map

package/dist/identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.js","sourceRoot":"","sources":["../src/identity.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;;AAEH,6BAAuB;AA+CV,QAAA,uBAAuB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC9C,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAChC,oEAAoE;IACpE,IAAI,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,aAAa,EAAE,eAAe,CAAC,CAAC;IAC5E,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACxB,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,MAAM,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IACnE,aAAa,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACzC,WAAW,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;CACjF,CAAC,CAAA;AAqBF,wBAAwB;AAEX,QAAA,uBAAuB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC9C,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAClD,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;CACvC,CAAC,CAAA"}

package/dist/index.d.ts

@@ -0,0 +1,40 @@
+/**
+ * @intutic/shared-types — Shared TypeScript types, interfaces, and enums
+ *
+ * This package is the single source of truth for all types used by 2+ packages
+ * in the Intutic monorepo. Never duplicate type definitions across services.
+ *
+ * @packageDocumentation
+ */
+export { RiskLevel, EnforcementAction, TokenUtility, BudgetTier, ComplexityTier, ChangeClassification, AnomalyType, HarnessType, ExecutionMode, IncidentStatus, PlanLifecycleState, SopLifecycleState, SopType, HookPhase, RoutingTier, WorkspaceRole, McpProxyFailBehavior, McpProxyMode, BypassEnforcementTier, } from './enums.js';
+export { DEFAULT_WORKSPACE_SETTINGS, resolveWorkspaceSettings, } from './workspaceSettings.js';
+export type { WorkspaceSettings, McpProxyFailBehavior as McpProxyFailBehaviorType, McpProxyMode as McpProxyModeType, BypassEnforcementTier as BypassEnforcementTierType, } from './workspaceSettings.js';
+export type { PermissionSet, PolicyVerdict, DctToken, RiskCategory, InterventionMode, PluginVerdict, EvaluationCascadeResult, } from './policy.js';
+export type { TraceEntry, CostBreakdown, Attribution4D, TraceSummary, TraceListResult, TraceDetail, TraceFilters, TraceStep, } from './finops.js';
+export { ANOMALY_SEVERITY_MAP, } from './anomaly.js';
+export type { AnomalyEvent, AnomalyClassification, AnomalySeverity, CorrectivePromptCard, ProbeType, ProbeResult, TrustScoreResult, TrustScoreUpdate, TrustEvent, GovernanceIncidentStatus, CapabilityMissEvent, CapabilityMissInput, DriftDirection, DriftEvent, } from './anomaly.js';
+export type { Session, SessionCheckpoint, } from './session.js';
+export type { Sop, SopProofTree, SopLifecycleTransition, SopHealthMetrics, DreamCycleQueueItem, DreamCycleEnqueueInput, GodelProbeResult, SopContentUpdate, SopLifecycleTransitionResult, CascadeImpactResult, CascadeInvalidationResult, AntiGamingResult, SopEdgeType, SopGraphEdge, DeviationType, PlanDeviation, PlanAdherenceScore, StoredPlan, DecisionRecommendation, DecisionMiningAnalysis, GodelGateResult, GodelScore, ProofTreeDiff, SopSummary, SopListResult, SopFilters, DecisionEntry, DecisionListResult, } from './sop.js';
+export { VALID_SOP_TRANSITIONS, ENFORCEMENT_BY_STATE, } from './sop.js';
+export { IntuticError, E_NOT_FOUND, E_CACHE_UNAVAILABLE, E_UNAUTHORIZED, E_FORBIDDEN, E_BUDGET_EXCEEDED, E_RATE_LIMITED, E_APPEND_ONLY_VIOLATION, E_APPROVAL_RATIONALE_REQUIRED, E_VALIDATION_FAILED, E_SSO_DISABLED, E_SSO_NO_MEMBERSHIP, E_OIDC_INVALID_STATE, E_OIDC_TOKEN_EXCHANGE_FAILED, E_OIDC_CLAIMS_MISSING, E_PROVIDER_DISABLED, E_PROVIDER_IN_USE, E_FEATURE_NOT_AVAILABLE, isIntuticError, } from './errors.js';
+export type { IntuticErrorCode } from './errors.js';
+export { CreateSessionSchema, CreateTraceSchema, PolicyVerdictSchema, } from './api-contracts.js';
+export type { CreateSessionInput, CreateTraceInput, PolicyVerdictInput, } from './api-contracts.js';
+export { LoginInputSchema, RegisterInputSchema, RefreshInputSchema, ChangePasswordInputSchema, InviteMemberInputSchema, UpdateRoleInputSchema, CreateApiKeyInputSchema, SignupInputSchema, VerifyEmailInputSchema, ResendVerificationInputSchema, MagicLinkRequestInputSchema, MagicLinkLoginInputSchema, } from './auth.js';
+export type { AuthContext, JwtPayload, LoginInput, LoginResult, RegisterInput, RegisterResult, RefreshResult, WorkspaceMemberInfo, InviteMemberInput, CreateApiKeyInput, CreateApiKeyResult, ApiKeyInfo, DashboardSummary, SignupParams, SignupResult, MagicLinkRequestInput, MagicLinkLoginInput, } from './auth.js';
+export { SopHashReportSchema, DaemonStatusSchema, BatchConfigCapturePayloadSchema, } from './sync.js';
+export type { SyncSopEntry, SyncConfigPayload, SopFileHash, SopHashReport, DetectedHarness, DaemonStatus, IntuticCredentials, IntuticConfig, IntegrityStore, CapturedConfigFile, BatchConfigCapturePayload, ConfigDiff, } from './sync.js';
+export { CreateSsoProviderSchema, UpdateUserProfileSchema, } from './identity.js';
+export type { User, UserInfo, SsoProvider, CreateSsoProviderInput, OidcClaims, UpdateUserProfileInput, } from './identity.js';
+export type { UsageSummary, UsageEvent, ModelBreakdown, } from './usage.js';
+export { PromptEstimateInputSchema, } from './observability.js';
+export type { PromptEstimateInput, PromptEstimateResult, CostHistoryEntry, CostHistoryResult, DriftReportResult, TraceDagNode, TraceDagResult, } from './observability.js';
+export { IssueOboTokenInputSchema, AttenuateTokenInputSchema, } from './attenuation.js';
+export type { OboTokenGrant, AttenuationResult, AttenuationChainLink, IssueOboTokenInput, AttenuateTokenInput, SsoGroupClearance, SsoGroupPolicy, } from './attenuation.js';
+export { E_ATTENUATION_CAP_VIOLATION, E_OVERAGE_HARD_CAP_EXCEEDED, } from './errors.js';
+export type { SslSchedulingContext, SslActivationResult, SslGraphJson, SslStep, SslToolCallContext, SslEnforcementResult, SslStepState, SslViolationEntry, SslComplianceReport, SslOutOfOrderEntry, ConstraintViolation, ConstraintEvalResult, SslStepReport, GovernanceNotification, NotificationConfig, ToolCallTokenBreakdown, CostPrediction, TokenBaseline, TokenUtilityResult, TraceClassificationContext, WastePattern, OptimizationRecommendation, LlmProbeResult, ProbeViolation, PromptQualityScore, PromptQualityContext, ContextGap, DedupHint, SlashCommandRequest, SlashCommandResponse, HarnessConfigSnapshot, ConfigEdit, ConfigEditWithTarget, SkillOptSuggestion, ConfigCapturePayload, } from './intelligence.js';
+export { type NotificationPriority, type NotificationCategory, type InputTokenBucket, getInputBucket, type WasteCategory, type RecommendationType, } from './intelligence.js';
+export * from './notifications.js';
+export * from './billing.js';
+export * from './taskManagement.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EACL,SAAS,EACT,iBAAiB,EACjB,YAAY,EACZ,UAAU,EACV,cAAc,EACd,oBAAoB,EACpB,WAAW,EACX,WAAW,EACX,aAAa,EACb,cAAc,EACd,kBAAkB,EAClB,iBAAiB,EACjB,OAAO,EACP,SAAS,EACT,WAAW,EACX,aAAa,EAEb,oBAAoB,EACpB,YAAY,EACZ,qBAAqB,GACtB,MAAM,YAAY,CAAA;AAEnB,OAAO,EACL,0BAA0B,EAC1B,wBAAwB,GACzB,MAAM,wBAAwB,CAAA;AAE/B,YAAY,EACV,iBAAiB,EACjB,oBAAoB,IAAI,wBAAwB,EAChD,YAAY,IAAI,gBAAgB,EAChC,qBAAqB,IAAI,yBAAyB,GACnD,MAAM,wBAAwB,CAAA;AAE/B,YAAY,EACV,aAAa,EACb,aAAa,EACb,QAAQ,EACR,YAAY,EACZ,gBAAgB,EAChB,aAAa,EACb,uBAAuB,GACxB,MAAM,aAAa,CAAA;AAEpB,YAAY,EACV,UAAU,EACV,aAAa,EACb,aAAa,EACb,YAAY,EACZ,eAAe,EACf,WAAW,EACX,YAAY,EACZ,SAAS,GACV,MAAM,aAAa,CAAA;AAGpB,OAAO,EACL,oBAAoB,GACrB,MAAM,cAAc,CAAA;AAErB,YAAY,EACV,YAAY,EACZ,qBAAqB,EACrB,eAAe,EACf,oBAAoB,EACpB,SAAS,EACT,WAAW,EACX,gBAAgB,EAChB,gBAAgB,EAChB,UAAU,EACV,wBAAwB,EACxB,mBAAmB,EACnB,mBAAmB,EACnB,cAAc,EACd,UAAU,GACX,MAAM,cAAc,CAAA;AAErB,YAAY,EACV,OAAO,EACP,iBAAiB,GAClB,MAAM,cAAc,CAAA;AAErB,YAAY,EACV,GAAG,EACH,YAAY,EACZ,sBAAsB,EACtB,gBAAgB,EAChB,mBAAmB,EACnB,sBAAsB,EACtB,gBAAgB,EAChB,gBAAgB,EAChB,4BAA4B,EAC5B,mBAAmB,EACnB,yBAAyB,EACzB,gBAAgB,EAChB,WAAW,EACX,YAAY,EACZ,aAAa,EACb,aAAa,EACb,kBAAkB,EAClB,UAAU,EACV,sBAAsB,EACtB,sBAAsB,EACtB,eAAe,EACf,UAAU,EACV,aAAa,EACb,UAAU,EACV,aAAa,EACb,UAAU,EACV,aAAa,EACb,kBAAkB,GACnB,MAAM,UAAU,CAAA;AAGjB,OAAO,EACL,qBAAqB,EACrB,oBAAoB,GACrB,MAAM,UAAU,CAAA;AAEjB,OAAO,EACL,YAAY,EACZ,WAAW,EACX,mBAAmB,EACnB,cAAc,EACd,WAAW,EACX,iBAAiB,EACjB,cAAc,EACd,uBAAuB,EACvB,6BAA6B,EAC7B,mBAAmB,EAEnB,cAAc,EACd,mBAAmB,EACnB,oBAAoB,EACpB,4BAA4B,EAC5B,qBAAqB,EACrB,mBAAmB,EACnB,iBAAiB,EACjB,uBAAuB,EACvB,cAAc,GACf,MAAM,aAAa,CAAA;AACpB,YAAY,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAEnD,OAAO,EACL,mBAAmB,EACnB,iBAAiB,EACjB,mBAAmB,GACpB,MAAM,oBAAoB,CAAA;AAC3B,YAAY,EACV,kBAAkB,EAClB,gBAAgB,EAChB,kBAAkB,GACnB,MAAM,oBAAoB,CAAA;AAE3B,OAAO,EACL,gBAAgB,EAChB,mBAAmB,EACnB,kBAAkB,EAClB,yBAAyB,EACzB,uBAAuB,EACvB,qBAAqB,EACrB,uBAAuB,EACvB,iBAAiB,EACjB,sBAAsB,EACtB,6BAA6B,EAC7B,2BAA2B,EAC3B,yBAAyB,GAC1B,MAAM,WAAW,CAAA;AAElB,YAAY,EACV,WAAW,EACX,UAAU,EACV,UAAU,EACV,WAAW,EACX,aAAa,EACb,cAAc,EACd,aAAa,EACb,mBAAmB,EACnB,iBAAiB,EACjB,iBAAiB,EACjB,kBAAkB,EAClB,UAAU,EACV,gBAAgB,EAChB,YAAY,EACZ,YAAY,EACZ,qBAAqB,EACrB,mBAAmB,GACpB,MAAM,WAAW,CAAA;AAElB,OAAO,EACL,mBAAmB,EACnB,kBAAkB,EAClB,+BAA+B,GAChC,MAAM,WAAW,CAAA;AAElB,YAAY,EACV,YAAY,EACZ,iBAAiB,EACjB,WAAW,EACX,aAAa,EACb,eAAe,EACf,YAAY,EACZ,kBAAkB,EAClB,aAAa,EACb,cAAc,EACd,kBAAkB,EAClB,yBAAyB,EACzB,UAAU,GACX,MAAM,WAAW,CAAA;AAElB,OAAO,EACL,uBAAuB,EACvB,uBAAuB,GACxB,MAAM,eAAe,CAAA;AAEtB,YAAY,EACV,IAAI,EACJ,QAAQ,EACR,WAAW,EACX,sBAAsB,EACtB,UAAU,EACV,sBAAsB,GACvB,MAAM,eAAe,CAAA;AAGtB,YAAY,EACV,YAAY,EACZ,UAAU,EACV,cAAc,GACf,MAAM,YAAY,CAAA;AAGnB,OAAO,EACL,yBAAyB,GAC1B,MAAM,oBAAoB,CAAA;AAE3B,YAAY,EACV,mBAAmB,EACnB,oBAAoB,EACpB,gBAAgB,EAChB,iBAAiB,EACjB,iBAAiB,EACjB,YAAY,EACZ,cAAc,GACf,MAAM,oBAAoB,CAAA;AAG3B,OAAO,EACL,wBAAwB,EACxB,yBAAyB,GAC1B,MAAM,kBAAkB,CAAA;AAEzB,YAAY,EACV,aAAa,EACb,iBAAiB,EACjB,oBAAoB,EACpB,kBAAkB,EAClB,mBAAmB,EACnB,iBAAiB,EACjB,cAAc,GACf,MAAM,kBAAkB,CAAA;AAGzB,OAAO,EACL,2BAA2B,EAC3B,2BAA2B,GAC5B,MAAM,aAAa,CAAA;AAGpB,YAAY,EAEV,oBAAoB,EACpB,mBAAmB,EACnB,YAAY,EACZ,OAAO,EACP,kBAAkB,EAClB,oBAAoB,EACpB,YAAY,EACZ,iBAAiB,EACjB,mBAAmB,EACnB,kBAAkB,EAClB,mBAAmB,EACnB,oBAAoB,EACpB,aAAa,EAEb,sBAAsB,EACtB,kBAAkB,EAElB,sBAAsB,EACtB,cAAc,EACd,aAAa,EAEb,kBAAkB,EAClB,0BAA0B,EAC1B,YAAY,EACZ,0BAA0B,EAC1B,cAAc,EACd,cAAc,EAEd,kBAAkB,EAClB,oBAAoB,EACpB,UAAU,EACV,SAAS,EACT,mBAAmB,EACnB,oBAAoB,EAEpB,qBAAqB,EACrB,UAAU,EACV,oBAAoB,EACpB,kBAAkB,EAClB,oBAAoB,GACrB,MAAM,mBAAmB,CAAA;AAE1B,OAAO,EAEL,KAAK,oBAAoB,EACzB,KAAK,oBAAoB,EAEzB,KAAK,gBAAgB,EACrB,cAAc,EAEd,KAAK,aAAa,EAClB,KAAK,kBAAkB,GACxB,MAAM,mBAAmB,CAAA;AAG1B,cAAc,oBAAoB,CAAA;AAGlC,cAAc,cAAc,CAAA;AAG5B,cAAc,qBAAqB,CAAA"}

package/dist/index.js

@@ -0,0 +1,120 @@
+"use strict";
+/**
+ * @intutic/shared-types — Shared TypeScript types, interfaces, and enums
+ *
+ * This package is the single source of truth for all types used by 2+ packages
+ * in the Intutic monorepo. Never duplicate type definitions across services.
+ *
+ * @packageDocumentation
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ChangePasswordInputSchema = exports.RefreshInputSchema = exports.RegisterInputSchema = exports.LoginInputSchema = exports.PolicyVerdictSchema = exports.CreateTraceSchema = exports.CreateSessionSchema = exports.isIntuticError = exports.E_FEATURE_NOT_AVAILABLE = exports.E_PROVIDER_IN_USE = exports.E_PROVIDER_DISABLED = exports.E_OIDC_CLAIMS_MISSING = exports.E_OIDC_TOKEN_EXCHANGE_FAILED = exports.E_OIDC_INVALID_STATE = exports.E_SSO_NO_MEMBERSHIP = exports.E_SSO_DISABLED = exports.E_VALIDATION_FAILED = exports.E_APPROVAL_RATIONALE_REQUIRED = exports.E_APPEND_ONLY_VIOLATION = exports.E_RATE_LIMITED = exports.E_BUDGET_EXCEEDED = exports.E_FORBIDDEN = exports.E_UNAUTHORIZED = exports.E_CACHE_UNAVAILABLE = exports.E_NOT_FOUND = exports.IntuticError = exports.ENFORCEMENT_BY_STATE = exports.VALID_SOP_TRANSITIONS = exports.ANOMALY_SEVERITY_MAP = exports.resolveWorkspaceSettings = exports.DEFAULT_WORKSPACE_SETTINGS = exports.BypassEnforcementTier = exports.McpProxyMode = exports.McpProxyFailBehavior = exports.WorkspaceRole = exports.RoutingTier = exports.HookPhase = exports.SopType = exports.SopLifecycleState = exports.PlanLifecycleState = exports.IncidentStatus = exports.ExecutionMode = exports.HarnessType = exports.AnomalyType = exports.ChangeClassification = exports.ComplexityTier = exports.BudgetTier = exports.TokenUtility = exports.EnforcementAction = exports.RiskLevel = void 0;
+exports.getInputBucket = exports.E_OVERAGE_HARD_CAP_EXCEEDED = exports.E_ATTENUATION_CAP_VIOLATION = exports.AttenuateTokenInputSchema = exports.IssueOboTokenInputSchema = exports.PromptEstimateInputSchema = exports.UpdateUserProfileSchema = exports.CreateSsoProviderSchema = exports.BatchConfigCapturePayloadSchema = exports.DaemonStatusSchema = exports.SopHashReportSchema = exports.MagicLinkLoginInputSchema = exports.MagicLinkRequestInputSchema = exports.ResendVerificationInputSchema = exports.VerifyEmailInputSchema = exports.SignupInputSchema = exports.CreateApiKeyInputSchema = exports.UpdateRoleInputSchema = exports.InviteMemberInputSchema = void 0;
+var enums_js_1 = require("./enums.js");
+Object.defineProperty(exports, "RiskLevel", { enumerable: true, get: function () { return enums_js_1.RiskLevel; } });
+Object.defineProperty(exports, "EnforcementAction", { enumerable: true, get: function () { return enums_js_1.EnforcementAction; } });
+Object.defineProperty(exports, "TokenUtility", { enumerable: true, get: function () { return enums_js_1.TokenUtility; } });
+Object.defineProperty(exports, "BudgetTier", { enumerable: true, get: function () { return enums_js_1.BudgetTier; } });
+Object.defineProperty(exports, "ComplexityTier", { enumerable: true, get: function () { return enums_js_1.ComplexityTier; } });
+Object.defineProperty(exports, "ChangeClassification", { enumerable: true, get: function () { return enums_js_1.ChangeClassification; } });
+Object.defineProperty(exports, "AnomalyType", { enumerable: true, get: function () { return enums_js_1.AnomalyType; } });
+Object.defineProperty(exports, "HarnessType", { enumerable: true, get: function () { return enums_js_1.HarnessType; } });
+Object.defineProperty(exports, "ExecutionMode", { enumerable: true, get: function () { return enums_js_1.ExecutionMode; } });
+Object.defineProperty(exports, "IncidentStatus", { enumerable: true, get: function () { return enums_js_1.IncidentStatus; } });
+Object.defineProperty(exports, "PlanLifecycleState", { enumerable: true, get: function () { return enums_js_1.PlanLifecycleState; } });
+Object.defineProperty(exports, "SopLifecycleState", { enumerable: true, get: function () { return enums_js_1.SopLifecycleState; } });
+Object.defineProperty(exports, "SopType", { enumerable: true, get: function () { return enums_js_1.SopType; } });
+Object.defineProperty(exports, "HookPhase", { enumerable: true, get: function () { return enums_js_1.HookPhase; } });
+Object.defineProperty(exports, "RoutingTier", { enumerable: true, get: function () { return enums_js_1.RoutingTier; } });
+Object.defineProperty(exports, "WorkspaceRole", { enumerable: true, get: function () { return enums_js_1.WorkspaceRole; } });
+// WS-5 — MCP proxy governance settings
+Object.defineProperty(exports, "McpProxyFailBehavior", { enumerable: true, get: function () { return enums_js_1.McpProxyFailBehavior; } });
+Object.defineProperty(exports, "McpProxyMode", { enumerable: true, get: function () { return enums_js_1.McpProxyMode; } });
+Object.defineProperty(exports, "BypassEnforcementTier", { enumerable: true, get: function () { return enums_js_1.BypassEnforcementTier; } });
+var workspaceSettings_js_1 = require("./workspaceSettings.js");
+Object.defineProperty(exports, "DEFAULT_WORKSPACE_SETTINGS", { enumerable: true, get: function () { return workspaceSettings_js_1.DEFAULT_WORKSPACE_SETTINGS; } });
+Object.defineProperty(exports, "resolveWorkspaceSettings", { enumerable: true, get: function () { return workspaceSettings_js_1.resolveWorkspaceSettings; } });
+var anomaly_js_1 = require("./anomaly.js");
+Object.defineProperty(exports, "ANOMALY_SEVERITY_MAP", { enumerable: true, get: function () { return anomaly_js_1.ANOMALY_SEVERITY_MAP; } });
+var sop_js_1 = require("./sop.js");
+Object.defineProperty(exports, "VALID_SOP_TRANSITIONS", { enumerable: true, get: function () { return sop_js_1.VALID_SOP_TRANSITIONS; } });
+Object.defineProperty(exports, "ENFORCEMENT_BY_STATE", { enumerable: true, get: function () { return sop_js_1.ENFORCEMENT_BY_STATE; } });
+var errors_js_1 = require("./errors.js");
+Object.defineProperty(exports, "IntuticError", { enumerable: true, get: function () { return errors_js_1.IntuticError; } });
+Object.defineProperty(exports, "E_NOT_FOUND", { enumerable: true, get: function () { return errors_js_1.E_NOT_FOUND; } });
+Object.defineProperty(exports, "E_CACHE_UNAVAILABLE", { enumerable: true, get: function () { return errors_js_1.E_CACHE_UNAVAILABLE; } });
+Object.defineProperty(exports, "E_UNAUTHORIZED", { enumerable: true, get: function () { return errors_js_1.E_UNAUTHORIZED; } });
+Object.defineProperty(exports, "E_FORBIDDEN", { enumerable: true, get: function () { return errors_js_1.E_FORBIDDEN; } });
+Object.defineProperty(exports, "E_BUDGET_EXCEEDED", { enumerable: true, get: function () { return errors_js_1.E_BUDGET_EXCEEDED; } });
+Object.defineProperty(exports, "E_RATE_LIMITED", { enumerable: true, get: function () { return errors_js_1.E_RATE_LIMITED; } });
+Object.defineProperty(exports, "E_APPEND_ONLY_VIOLATION", { enumerable: true, get: function () { return errors_js_1.E_APPEND_ONLY_VIOLATION; } });
+Object.defineProperty(exports, "E_APPROVAL_RATIONALE_REQUIRED", { enumerable: true, get: function () { return errors_js_1.E_APPROVAL_RATIONALE_REQUIRED; } });
+Object.defineProperty(exports, "E_VALIDATION_FAILED", { enumerable: true, get: function () { return errors_js_1.E_VALIDATION_FAILED; } });
+// Identity Federation (LLD #11)
+Object.defineProperty(exports, "E_SSO_DISABLED", { enumerable: true, get: function () { return errors_js_1.E_SSO_DISABLED; } });
+Object.defineProperty(exports, "E_SSO_NO_MEMBERSHIP", { enumerable: true, get: function () { return errors_js_1.E_SSO_NO_MEMBERSHIP; } });
+Object.defineProperty(exports, "E_OIDC_INVALID_STATE", { enumerable: true, get: function () { return errors_js_1.E_OIDC_INVALID_STATE; } });
+Object.defineProperty(exports, "E_OIDC_TOKEN_EXCHANGE_FAILED", { enumerable: true, get: function () { return errors_js_1.E_OIDC_TOKEN_EXCHANGE_FAILED; } });
+Object.defineProperty(exports, "E_OIDC_CLAIMS_MISSING", { enumerable: true, get: function () { return errors_js_1.E_OIDC_CLAIMS_MISSING; } });
+Object.defineProperty(exports, "E_PROVIDER_DISABLED", { enumerable: true, get: function () { return errors_js_1.E_PROVIDER_DISABLED; } });
+Object.defineProperty(exports, "E_PROVIDER_IN_USE", { enumerable: true, get: function () { return errors_js_1.E_PROVIDER_IN_USE; } });
+Object.defineProperty(exports, "E_FEATURE_NOT_AVAILABLE", { enumerable: true, get: function () { return errors_js_1.E_FEATURE_NOT_AVAILABLE; } });
+Object.defineProperty(exports, "isIntuticError", { enumerable: true, get: function () { return errors_js_1.isIntuticError; } });
+var api_contracts_js_1 = require("./api-contracts.js");
+Object.defineProperty(exports, "CreateSessionSchema", { enumerable: true, get: function () { return api_contracts_js_1.CreateSessionSchema; } });
+Object.defineProperty(exports, "CreateTraceSchema", { enumerable: true, get: function () { return api_contracts_js_1.CreateTraceSchema; } });
+Object.defineProperty(exports, "PolicyVerdictSchema", { enumerable: true, get: function () { return api_contracts_js_1.PolicyVerdictSchema; } });
+var auth_js_1 = require("./auth.js");
+Object.defineProperty(exports, "LoginInputSchema", { enumerable: true, get: function () { return auth_js_1.LoginInputSchema; } });
+Object.defineProperty(exports, "RegisterInputSchema", { enumerable: true, get: function () { return auth_js_1.RegisterInputSchema; } });
+Object.defineProperty(exports, "RefreshInputSchema", { enumerable: true, get: function () { return auth_js_1.RefreshInputSchema; } });
+Object.defineProperty(exports, "ChangePasswordInputSchema", { enumerable: true, get: function () { return auth_js_1.ChangePasswordInputSchema; } });
+Object.defineProperty(exports, "InviteMemberInputSchema", { enumerable: true, get: function () { return auth_js_1.InviteMemberInputSchema; } });
+Object.defineProperty(exports, "UpdateRoleInputSchema", { enumerable: true, get: function () { return auth_js_1.UpdateRoleInputSchema; } });
+Object.defineProperty(exports, "CreateApiKeyInputSchema", { enumerable: true, get: function () { return auth_js_1.CreateApiKeyInputSchema; } });
+Object.defineProperty(exports, "SignupInputSchema", { enumerable: true, get: function () { return auth_js_1.SignupInputSchema; } });
+Object.defineProperty(exports, "VerifyEmailInputSchema", { enumerable: true, get: function () { return auth_js_1.VerifyEmailInputSchema; } });
+Object.defineProperty(exports, "ResendVerificationInputSchema", { enumerable: true, get: function () { return auth_js_1.ResendVerificationInputSchema; } });
+Object.defineProperty(exports, "MagicLinkRequestInputSchema", { enumerable: true, get: function () { return auth_js_1.MagicLinkRequestInputSchema; } });
+Object.defineProperty(exports, "MagicLinkLoginInputSchema", { enumerable: true, get: function () { return auth_js_1.MagicLinkLoginInputSchema; } });
+var sync_js_1 = require("./sync.js");
+Object.defineProperty(exports, "SopHashReportSchema", { enumerable: true, get: function () { return sync_js_1.SopHashReportSchema; } });
+Object.defineProperty(exports, "DaemonStatusSchema", { enumerable: true, get: function () { return sync_js_1.DaemonStatusSchema; } });
+Object.defineProperty(exports, "BatchConfigCapturePayloadSchema", { enumerable: true, get: function () { return sync_js_1.BatchConfigCapturePayloadSchema; } });
+var identity_js_1 = require("./identity.js");
+Object.defineProperty(exports, "CreateSsoProviderSchema", { enumerable: true, get: function () { return identity_js_1.CreateSsoProviderSchema; } });
+Object.defineProperty(exports, "UpdateUserProfileSchema", { enumerable: true, get: function () { return identity_js_1.UpdateUserProfileSchema; } });
+// WS2: Advanced Observability
+var observability_js_1 = require("./observability.js");
+Object.defineProperty(exports, "PromptEstimateInputSchema", { enumerable: true, get: function () { return observability_js_1.PromptEstimateInputSchema; } });
+// WS4: Enterprise Identity & Compliance (LLD #19)
+var attenuation_js_1 = require("./attenuation.js");
+Object.defineProperty(exports, "IssueOboTokenInputSchema", { enumerable: true, get: function () { return attenuation_js_1.IssueOboTokenInputSchema; } });
+Object.defineProperty(exports, "AttenuateTokenInputSchema", { enumerable: true, get: function () { return attenuation_js_1.AttenuateTokenInputSchema; } });
+// WS4 + WS5 new error codes
+var errors_js_2 = require("./errors.js");
+Object.defineProperty(exports, "E_ATTENUATION_CAP_VIOLATION", { enumerable: true, get: function () { return errors_js_2.E_ATTENUATION_CAP_VIOLATION; } });
+Object.defineProperty(exports, "E_OVERAGE_HARD_CAP_EXCEEDED", { enumerable: true, get: function () { return errors_js_2.E_OVERAGE_HARD_CAP_EXCEEDED; } });
+var intelligence_js_1 = require("./intelligence.js");
+Object.defineProperty(exports, "getInputBucket", { enumerable: true, get: function () { return intelligence_js_1.getInputBucket; } });
+// LLD #45-slack: Notification Hub + Slack Adapter
+__exportStar(require("./notifications.js"), exports);
+// Restored Stripe billing & subscription types
+__exportStar(require("./billing.js"), exports);
+// Restored task management and alerting adapter types
+__exportStar(require("./taskManagement.js"), exports);
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;;;;;;;;;;;;;;;;;AAEH,uCAqBmB;AApBjB,qGAAA,SAAS,OAAA;AACT,6GAAA,iBAAiB,OAAA;AACjB,wGAAA,YAAY,OAAA;AACZ,sGAAA,UAAU,OAAA;AACV,0GAAA,cAAc,OAAA;AACd,gHAAA,oBAAoB,OAAA;AACpB,uGAAA,WAAW,OAAA;AACX,uGAAA,WAAW,OAAA;AACX,yGAAA,aAAa,OAAA;AACb,0GAAA,cAAc,OAAA;AACd,8GAAA,kBAAkB,OAAA;AAClB,6GAAA,iBAAiB,OAAA;AACjB,mGAAA,OAAO,OAAA;AACP,qGAAA,SAAS,OAAA;AACT,uGAAA,WAAW,OAAA;AACX,yGAAA,aAAa,OAAA;AACb,uCAAuC;AACvC,gHAAA,oBAAoB,OAAA;AACpB,wGAAA,YAAY,OAAA;AACZ,iHAAA,qBAAqB,OAAA;AAGvB,+DAG+B;AAF7B,kIAAA,0BAA0B,OAAA;AAC1B,gIAAA,wBAAwB,OAAA;AAgC1B,2CAEqB;AADnB,kHAAA,oBAAoB,OAAA;AAyDtB,mCAGiB;AAFf,+GAAA,qBAAqB,OAAA;AACrB,8GAAA,oBAAoB,OAAA;AAGtB,yCAqBoB;AApBlB,yGAAA,YAAY,OAAA;AACZ,wGAAA,WAAW,OAAA;AACX,gHAAA,mBAAmB,OAAA;AACnB,2GAAA,cAAc,OAAA;AACd,wGAAA,WAAW,OAAA;AACX,8GAAA,iBAAiB,OAAA;AACjB,2GAAA,cAAc,OAAA;AACd,oHAAA,uBAAuB,OAAA;AACvB,0HAAA,6BAA6B,OAAA;AAC7B,gHAAA,mBAAmB,OAAA;AACnB,gCAAgC;AAChC,2GAAA,cAAc,OAAA;AACd,gHAAA,mBAAmB,OAAA;AACnB,iHAAA,oBAAoB,OAAA;AACpB,yHAAA,4BAA4B,OAAA;AAC5B,kHAAA,qBAAqB,OAAA;AACrB,gHAAA,mBAAmB,OAAA;AACnB,8GAAA,iBAAiB,OAAA;AACjB,oHAAA,uBAAuB,OAAA;AACvB,2GAAA,cAAc,OAAA;AAIhB,uDAI2B;AAHzB,uHAAA,mBAAmB,OAAA;AACnB,qHAAA,iBAAiB,OAAA;AACjB,uHAAA,mBAAmB,OAAA;AAQrB,qCAakB;AAZhB,2GAAA,gBAAgB,OAAA;AAChB,8GAAA,mBAAmB,OAAA;AACnB,6GAAA,kBAAkB,OAAA;AAClB,oHAAA,yBAAyB,OAAA;AACzB,kHAAA,uBAAuB,OAAA;AACvB,gHAAA,qBAAqB,OAAA;AACrB,kHAAA,uBAAuB,OAAA;AACvB,4GAAA,iBAAiB,OAAA;AACjB,iHAAA,sBAAsB,OAAA;AACtB,wHAAA,6BAA6B,OAAA;AAC7B,sHAAA,2BAA2B,OAAA;AAC3B,oHAAA,yBAAyB,OAAA;AAuB3B,qCAIkB;AAHhB,8GAAA,mBAAmB,OAAA;AACnB,6GAAA,kBAAkB,OAAA;AAClB,0HAAA,+BAA+B,OAAA;AAkBjC,6CAGsB;AAFpB,sHAAA,uBAAuB,OAAA;AACvB,sHAAA,uBAAuB,OAAA;AAmBzB,8BAA8B;AAC9B,uDAE2B;AADzB,6HAAA,yBAAyB,OAAA;AAa3B,kDAAkD;AAClD,mDAGyB;AAFvB,0HAAA,wBAAwB,OAAA;AACxB,2HAAA,yBAAyB,OAAA;AAa3B,4BAA4B;AAC5B,yCAGoB;AAFlB,wHAAA,2BAA2B,OAAA;AAC3B,wHAAA,2BAA2B,OAAA;AAgD7B,qDAU0B;AAJxB,iHAAA,cAAc,OAAA;AAMhB,kDAAkD;AAClD,qDAAkC;AAElC,+CAA+C;AAC/C,+CAA4B;AAE5B,sDAAsD;AACtD,sDAAmC"}