@intutic/shared-types 1.10.0 → 2.0.0

package/dist/sync.d.ts

@@ -126,6 +126,24 @@ export interface IntuticConfig {
     maxDailyBudgetUsd?: number;
     /** Local daily spending cap limit in USD (alias). */
     max_daily_budget_usd?: number;
+    /**
+     * Local approved-models allowlist for a standalone proxy with no control
+     * plane (Wave 6.3, audit-remediation) — read directly from this file by
+     * `packages/proxy/src/local_config.rs`, not by any TS code today. Declared
+     * here so a hand-edited value survives `intutic init`'s config rewrite
+     * (which loads and spreads the existing config rather than overwriting it
+     * wholesale) and so its shape is documented in one place. Absent, or an
+     * empty array, both mean unrestricted — never "no model allowed."
+     */
+    allowedModels?: string[];
+    /** Local approved-models allowlist (alias). */
+    allowed_models?: string[];
+    /**
+     * Workspace settings mirrored from the last successful sync, so policies
+     * that apply at proxy spawn (e.g. `allowLocalMemoryVaults`) survive a
+     * restart without waiting for the first fetch.
+     */
+    settings?: WorkspaceSettings;
 }
 /** Local integrity store at .intutic/integrity.json (per-workspace). */
 export interface IntegrityStore {
@@ -189,6 +207,30 @@ export declare const SopHashReportSchema: z.ZodObject<{
         readonly GOOSE: "goose";
         readonly OPEN_WEBUI: "open-webui";
         readonly GITHUB_COPILOT: "github-copilot";
+        readonly LANGGRAPH: "langgraph";
+        readonly MUSE_CODE: "muse-code";
+        readonly GROK: "grok";
+        readonly OPENCODE: "opencode";
+        readonly DEEPSEEK_HARNESS: "dsh";
+        readonly XIRP: "xirp";
+        readonly AGENTIC_ORCHESTRATOR: "agentic-orchestrator";
+        readonly LANGCHAIN: "langchain";
+        readonly CREWAI: "crewai";
+        readonly AUTOGEN: "autogen";
+        readonly AG2: "ag2";
+        readonly GOOGLE_ADK: "google-adk";
+        readonly OPENAI_AGENTS: "openai-agents";
+        readonly PYDANTIC_AI: "pydantic-ai";
+        readonly SMOLAGENTS: "smolagents";
+        readonly STRANDS: "strands";
+        readonly MASTRA: "mastra";
+        readonly VERCEL_AI_SDK: "vercel-ai-sdk";
+        readonly EVE: "eve";
+        readonly TRUEFORGE: "trueforge";
+        readonly AI_SDK_HARNESS: "ai-sdk-harness";
+        readonly AI_SDK_WORKFLOW: "ai-sdk-workflow";
+        readonly AGENTCORE_RUNTIME: "agentcore-runtime";
+        readonly TRUEFORGE_SERVER: "trueforge-server";
     }>;
     files: z.ZodArray<z.ZodObject<{
         filePath: z.ZodString;
@@ -209,7 +251,7 @@ export declare const SopHashReportSchema: z.ZodObject<{
     reportedAt: z.ZodString;
 }, "strip", z.ZodTypeAny, {
     workspaceId: string;
-    harnessType: "cursor" | "claude-code" | "antigravity" | "n8n" | "codex" | "windsurf" | "aider" | "openhands" | "openclaw" | "hermes" | "pi" | "cline" | "roo-code" | "continue" | "claude-desktop" | "goose" | "open-webui" | "github-copilot";
+    harnessType: "cursor" | "claude-code" | "antigravity" | "n8n" | "codex" | "windsurf" | "aider" | "openhands" | "openclaw" | "hermes" | "pi" | "cline" | "roo-code" | "continue" | "claude-desktop" | "goose" | "open-webui" | "github-copilot" | "langgraph" | "muse-code" | "grok" | "opencode" | "dsh" | "xirp" | "agentic-orchestrator" | "langchain" | "crewai" | "autogen" | "ag2" | "google-adk" | "openai-agents" | "pydantic-ai" | "smolagents" | "strands" | "mastra" | "vercel-ai-sdk" | "eve" | "trueforge" | "ai-sdk-harness" | "ai-sdk-workflow" | "agentcore-runtime" | "trueforge-server";
     files: {
         filePath: string;
         localHash: string;
@@ -219,7 +261,7 @@ export declare const SopHashReportSchema: z.ZodObject<{
     reportedAt: string;
 }, {
     workspaceId: string;
-    harnessType: "cursor" | "claude-code" | "antigravity" | "n8n" | "codex" | "windsurf" | "aider" | "openhands" | "openclaw" | "hermes" | "pi" | "cline" | "roo-code" | "continue" | "claude-desktop" | "goose" | "open-webui" | "github-copilot";
+    harnessType: "cursor" | "claude-code" | "antigravity" | "n8n" | "codex" | "windsurf" | "aider" | "openhands" | "openclaw" | "hermes" | "pi" | "cline" | "roo-code" | "continue" | "claude-desktop" | "goose" | "open-webui" | "github-copilot" | "langgraph" | "muse-code" | "grok" | "opencode" | "dsh" | "xirp" | "agentic-orchestrator" | "langchain" | "crewai" | "autogen" | "ag2" | "google-adk" | "openai-agents" | "pydantic-ai" | "smolagents" | "strands" | "mastra" | "vercel-ai-sdk" | "eve" | "trueforge" | "ai-sdk-harness" | "ai-sdk-workflow" | "agentcore-runtime" | "trueforge-server";
     files: {
         filePath: string;
         localHash: string;
@@ -254,17 +296,41 @@ export declare const DaemonStatusSchema: z.ZodObject<{
             readonly GOOSE: "goose";
             readonly OPEN_WEBUI: "open-webui";
             readonly GITHUB_COPILOT: "github-copilot";
+            readonly LANGGRAPH: "langgraph";
+            readonly MUSE_CODE: "muse-code";
+            readonly GROK: "grok";
+            readonly OPENCODE: "opencode";
+            readonly DEEPSEEK_HARNESS: "dsh";
+            readonly XIRP: "xirp";
+            readonly AGENTIC_ORCHESTRATOR: "agentic-orchestrator";
+            readonly LANGCHAIN: "langchain";
+            readonly CREWAI: "crewai";
+            readonly AUTOGEN: "autogen";
+            readonly AG2: "ag2";
+            readonly GOOGLE_ADK: "google-adk";
+            readonly OPENAI_AGENTS: "openai-agents";
+            readonly PYDANTIC_AI: "pydantic-ai";
+            readonly SMOLAGENTS: "smolagents";
+            readonly STRANDS: "strands";
+            readonly MASTRA: "mastra";
+            readonly VERCEL_AI_SDK: "vercel-ai-sdk";
+            readonly EVE: "eve";
+            readonly TRUEFORGE: "trueforge";
+            readonly AI_SDK_HARNESS: "ai-sdk-harness";
+            readonly AI_SDK_WORKFLOW: "ai-sdk-workflow";
+            readonly AGENTCORE_RUNTIME: "agentcore-runtime";
+            readonly TRUEFORGE_SERVER: "trueforge-server";
         }>;
         configPath: z.ZodString;
         detected: z.ZodBoolean;
         lastWriteAt: z.ZodNullable<z.ZodString>;
     }, "strip", z.ZodTypeAny, {
-        type: "cursor" | "claude-code" | "antigravity" | "n8n" | "codex" | "windsurf" | "aider" | "openhands" | "openclaw" | "hermes" | "pi" | "cline" | "roo-code" | "continue" | "claude-desktop" | "goose" | "open-webui" | "github-copilot";
+        type: "cursor" | "claude-code" | "antigravity" | "n8n" | "codex" | "windsurf" | "aider" | "openhands" | "openclaw" | "hermes" | "pi" | "cline" | "roo-code" | "continue" | "claude-desktop" | "goose" | "open-webui" | "github-copilot" | "langgraph" | "muse-code" | "grok" | "opencode" | "dsh" | "xirp" | "agentic-orchestrator" | "langchain" | "crewai" | "autogen" | "ag2" | "google-adk" | "openai-agents" | "pydantic-ai" | "smolagents" | "strands" | "mastra" | "vercel-ai-sdk" | "eve" | "trueforge" | "ai-sdk-harness" | "ai-sdk-workflow" | "agentcore-runtime" | "trueforge-server";
         configPath: string;
         detected: boolean;
         lastWriteAt: string | null;
     }, {
-        type: "cursor" | "claude-code" | "antigravity" | "n8n" | "codex" | "windsurf" | "aider" | "openhands" | "openclaw" | "hermes" | "pi" | "cline" | "roo-code" | "continue" | "claude-desktop" | "goose" | "open-webui" | "github-copilot";
+        type: "cursor" | "claude-code" | "antigravity" | "n8n" | "codex" | "windsurf" | "aider" | "openhands" | "openclaw" | "hermes" | "pi" | "cline" | "roo-code" | "continue" | "claude-desktop" | "goose" | "open-webui" | "github-copilot" | "langgraph" | "muse-code" | "grok" | "opencode" | "dsh" | "xirp" | "agentic-orchestrator" | "langchain" | "crewai" | "autogen" | "ag2" | "google-adk" | "openai-agents" | "pydantic-ai" | "smolagents" | "strands" | "mastra" | "vercel-ai-sdk" | "eve" | "trueforge" | "ai-sdk-harness" | "ai-sdk-workflow" | "agentcore-runtime" | "trueforge-server";
         configPath: string;
         detected: boolean;
         lastWriteAt: string | null;
@@ -289,7 +355,7 @@ export declare const DaemonStatusSchema: z.ZodObject<{
     connectedSince: string;
     lastSyncAt: string;
     harnesses: {
-        type: "cursor" | "claude-code" | "antigravity" | "n8n" | "codex" | "windsurf" | "aider" | "openhands" | "openclaw" | "hermes" | "pi" | "cline" | "roo-code" | "continue" | "claude-desktop" | "goose" | "open-webui" | "github-copilot";
+        type: "cursor" | "claude-code" | "antigravity" | "n8n" | "codex" | "windsurf" | "aider" | "openhands" | "openclaw" | "hermes" | "pi" | "cline" | "roo-code" | "continue" | "claude-desktop" | "goose" | "open-webui" | "github-copilot" | "langgraph" | "muse-code" | "grok" | "opencode" | "dsh" | "xirp" | "agentic-orchestrator" | "langchain" | "crewai" | "autogen" | "ag2" | "google-adk" | "openai-agents" | "pydantic-ai" | "smolagents" | "strands" | "mastra" | "vercel-ai-sdk" | "eve" | "trueforge" | "ai-sdk-harness" | "ai-sdk-workflow" | "agentcore-runtime" | "trueforge-server";
         configPath: string;
         detected: boolean;
         lastWriteAt: string | null;
@@ -306,7 +372,7 @@ export declare const DaemonStatusSchema: z.ZodObject<{
     connectedSince: string;
     lastSyncAt: string;
     harnesses: {
-        type: "cursor" | "claude-code" | "antigravity" | "n8n" | "codex" | "windsurf" | "aider" | "openhands" | "openclaw" | "hermes" | "pi" | "cline" | "roo-code" | "continue" | "claude-desktop" | "goose" | "open-webui" | "github-copilot";
+        type: "cursor" | "claude-code" | "antigravity" | "n8n" | "codex" | "windsurf" | "aider" | "openhands" | "openclaw" | "hermes" | "pi" | "cline" | "roo-code" | "continue" | "claude-desktop" | "goose" | "open-webui" | "github-copilot" | "langgraph" | "muse-code" | "grok" | "opencode" | "dsh" | "xirp" | "agentic-orchestrator" | "langchain" | "crewai" | "autogen" | "ag2" | "google-adk" | "openai-agents" | "pydantic-ai" | "smolagents" | "strands" | "mastra" | "vercel-ai-sdk" | "eve" | "trueforge" | "ai-sdk-harness" | "ai-sdk-workflow" | "agentcore-runtime" | "trueforge-server";
         configPath: string;
         detected: boolean;
         lastWriteAt: string | null;
@@ -340,6 +406,30 @@ export declare const BatchConfigCapturePayloadSchema: z.ZodObject<{
         readonly GOOSE: "goose";
         readonly OPEN_WEBUI: "open-webui";
         readonly GITHUB_COPILOT: "github-copilot";
+        readonly LANGGRAPH: "langgraph";
+        readonly MUSE_CODE: "muse-code";
+        readonly GROK: "grok";
+        readonly OPENCODE: "opencode";
+        readonly DEEPSEEK_HARNESS: "dsh";
+        readonly XIRP: "xirp";
+        readonly AGENTIC_ORCHESTRATOR: "agentic-orchestrator";
+        readonly LANGCHAIN: "langchain";
+        readonly CREWAI: "crewai";
+        readonly AUTOGEN: "autogen";
+        readonly AG2: "ag2";
+        readonly GOOGLE_ADK: "google-adk";
+        readonly OPENAI_AGENTS: "openai-agents";
+        readonly PYDANTIC_AI: "pydantic-ai";
+        readonly SMOLAGENTS: "smolagents";
+        readonly STRANDS: "strands";
+        readonly MASTRA: "mastra";
+        readonly VERCEL_AI_SDK: "vercel-ai-sdk";
+        readonly EVE: "eve";
+        readonly TRUEFORGE: "trueforge";
+        readonly AI_SDK_HARNESS: "ai-sdk-harness";
+        readonly AI_SDK_WORKFLOW: "ai-sdk-workflow";
+        readonly AGENTCORE_RUNTIME: "agentcore-runtime";
+        readonly TRUEFORGE_SERVER: "trueforge-server";
     }>;
     files: z.ZodArray<z.ZodObject<{
         path: z.ZodString;
@@ -356,7 +446,7 @@ export declare const BatchConfigCapturePayloadSchema: z.ZodObject<{
     }>, "many">;
 }, "strip", z.ZodTypeAny, {
     workspaceId: string;
-    harnessType: "cursor" | "claude-code" | "antigravity" | "n8n" | "codex" | "windsurf" | "aider" | "openhands" | "openclaw" | "hermes" | "pi" | "cline" | "roo-code" | "continue" | "claude-desktop" | "goose" | "open-webui" | "github-copilot";
+    harnessType: "cursor" | "claude-code" | "antigravity" | "n8n" | "codex" | "windsurf" | "aider" | "openhands" | "openclaw" | "hermes" | "pi" | "cline" | "roo-code" | "continue" | "claude-desktop" | "goose" | "open-webui" | "github-copilot" | "langgraph" | "muse-code" | "grok" | "opencode" | "dsh" | "xirp" | "agentic-orchestrator" | "langchain" | "crewai" | "autogen" | "ag2" | "google-adk" | "openai-agents" | "pydantic-ai" | "smolagents" | "strands" | "mastra" | "vercel-ai-sdk" | "eve" | "trueforge" | "ai-sdk-harness" | "ai-sdk-workflow" | "agentcore-runtime" | "trueforge-server";
     files: {
         path: string;
         content: string;
@@ -364,7 +454,7 @@ export declare const BatchConfigCapturePayloadSchema: z.ZodObject<{
     }[];
 }, {
     workspaceId: string;
-    harnessType: "cursor" | "claude-code" | "antigravity" | "n8n" | "codex" | "windsurf" | "aider" | "openhands" | "openclaw" | "hermes" | "pi" | "cline" | "roo-code" | "continue" | "claude-desktop" | "goose" | "open-webui" | "github-copilot";
+    harnessType: "cursor" | "claude-code" | "antigravity" | "n8n" | "codex" | "windsurf" | "aider" | "openhands" | "openclaw" | "hermes" | "pi" | "cline" | "roo-code" | "continue" | "claude-desktop" | "goose" | "open-webui" | "github-copilot" | "langgraph" | "muse-code" | "grok" | "opencode" | "dsh" | "xirp" | "agentic-orchestrator" | "langchain" | "crewai" | "autogen" | "ag2" | "google-adk" | "openai-agents" | "pydantic-ai" | "smolagents" | "strands" | "mastra" | "vercel-ai-sdk" | "eve" | "trueforge" | "ai-sdk-harness" | "ai-sdk-workflow" | "agentcore-runtime" | "trueforge-server";
     files: {
         path: string;
         content: string;

package/dist/sync.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sync.d.ts","sourceRoot":"","sources":["../src/sync.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AACxC,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAA;AAG/D,YAAY,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAK7C,oDAAoD;AACpD,MAAM,WAAW,YAAY;IAC3B,uBAAuB;IACvB,KAAK,EAAE,MAAM,CAAA;IACb,gCAAgC;IAChC,KAAK,EAAE,MAAM,CAAA;IACb,oEAAoE;IACpE,OAAO,EAAE,MAAM,CAAA;IACf,gDAAgD;IAChD,WAAW,EAAE,MAAM,CAAA;IACnB,0DAA0D;IAC1D,cAAc,EAAE,WAAW,EAAE,CAAA;IAC7B,6FAA6F;IAC7F,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED,6DAA6D;AAC7D,MAAM,WAAW,iBAAiB;IAChC,wCAAwC;IACxC,WAAW,EAAE,MAAM,CAAA;IACnB,yEAAyE;IACzE,aAAa,EAAE,MAAM,CAAA;IACrB,oDAAoD;IACpD,IAAI,EAAE,YAAY,EAAE,CAAA;IACpB,sEAAsE;IACtE,QAAQ,EAAE,MAAM,CAAA;IAChB;;;;;OAKG;IACH,QAAQ,EAAE,iBAAiB,CAAA;IAC3B,sDAAsD;IACtD,YAAY,CAAC,EAAE,GAAG,EAAE,CAAA;CACrB;AAMD,8CAA8C;AAC9C,MAAM,WAAW,WAAW;IAC1B,mEAAmE;IACnE,QAAQ,EAAE,MAAM,CAAA;IAChB,iDAAiD;IACjD,SAAS,EAAE,MAAM,CAAA;IACjB,gDAAgD;IAChD,aAAa,EAAE,MAAM,CAAA;IACrB,6CAA6C;IAC7C,OAAO,EAAE,OAAO,CAAA;CACjB;AAED,iEAAiE;AACjE,MAAM,WAAW,aAAa;IAC5B,oBAAoB;IACpB,WAAW,EAAE,MAAM,CAAA;IACnB,qCAAqC;IACrC,WAAW,EAAE,WAAW,CAAA;IACxB,+CAA+C;IAC/C,KAAK,EAAE,WAAW,EAAE,CAAA;IACpB,0CAA0C;IAC1C,UAAU,EAAE,MAAM,CAAA;CACnB;AAKD,6DAA6D;AAC7D,MAAM,WAAW,eAAe;IAC9B,oBAAoB;IACpB,IAAI,EAAE,WAAW,CAAA;IACjB,gDAAgD;IAChD,UAAU,EAAE,MAAM,CAAA;IAClB,6CAA6C;IAC7C,QAAQ,EAAE,OAAO,CAAA;IACjB,uEAAuE;IACvE,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;CAC3B;AAED,uCAAuC;AACvC,MAAM,WAAW,YAAY;IAC3B,oBAAoB;IACpB,WAAW,EAAE,MAAM,CAAA;IACnB,oCAAoC;IACpC,aAAa,EAAE,MAAM,CAAA;IACrB,2CAA2C;IAC3C,cAAc,EAAE,MAAM,CAAA;IACtB,6CAA6C;IAC7C,UAAU,EAAE,MAAM,CAAA;IAClB,2CAA2C;IAC3C,SAAS,EAAE,eAAe,EAAE,CAAA;IAC5B,kEAAkE;IAClE,eAAe,CAAC,EAAE,MAAM,EAAE,CAAA;IAC1B,8CAA8C;IAC9C,UAAU,CAAC,EAAE;QACX,KAAK,EAAE,SAAS,GAAG,WAAW,GAAG,SAAS,CAAA;QAC1C,MAAM,EAAE,SAAS,GAAG,WAAW,GAAG,SAAS,CAAA;QAC3C,QAAQ,EAAE,SAAS,GAAG,WAAW,CAAA;KAClC,CAAA;CACF;AAKD,yDAAyD;AACzD,MAAM,WAAW,kBAAkB;IACjC,0CAA0C;IAC1C,MAAM,EAAE,MAAM,CAAA;IACd,oBAAoB;IACpB,WAAW,EAAE,MAAM,CAAA;IACnB,yBAAyB;IACzB,eAAe,EAAE,MAAM,CAAA;IACvB,kCAAkC;IAClC,KAAK,EAAE,MAAM,CAAA;IACb,kDAAkD;IAClD,QAAQ,EAAE,MAAM,CAAA;CACjB;AAED,yDAAyD;AACzD,MAAM,WAAW,aAAa;IAC5B,gDAAgD;IAChD,aAAa,EAAE,MAAM,CAAA;IACrB,0BAA0B;IAC1B,SAAS,EAAE,WAAW,EAAE,CAAA;IACxB,6CAA6C;IAC7C,aAAa,EAAE,MAAM,CAAA;IACrB,wDAAwD;IACxD,OAAO,EAAE,OAAO,CAAA;IAChB,6CAA6C;IAC7C,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,qDAAqD;IACrD,oBAAoB,CAAC,EAAE,MAAM,CAAA;CAC9B;AAED,wEAAwE;AACxE,MAAM,WAAW,cAAc;IAC7B,2BAA2B;IAC3B,UAAU,EAAE,MAAM,CAAA;IAClB,mCAAmC;IACnC,aAAa,EAAE,MAAM,CAAA;IACrB,wCAAwC;IACxC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAC9B;AAKD,2DAA2D;AAC3D,MAAM,WAAW,kBAAkB;IACjC,8DAA8D;IAC9D,IAAI,EAAE,MAAM,CAAA;IACZ,yBAAyB;IACzB,OAAO,EAAE,MAAM,CAAA;IACf,+BAA+B;IAC/B,WAAW,EAAE,MAAM,CAAA;CACpB;AAED,+EAA+E;AAC/E,MAAM,WAAW,yBAAyB;IACxC,oBAAoB;IACpB,WAAW,EAAE,MAAM,CAAA;IACnB,0CAA0C;IAC1C,WAAW,EAAE,WAAW,CAAA;IACxB,6BAA6B;IAC7B,KAAK,EAAE,kBAAkB,EAAE,CAAA;CAC5B;AAED,oDAAoD;AACpD,MAAM,WAAW,UAAU;IACzB,mBAAmB;IACnB,UAAU,EAAE,MAAM,CAAA;IAClB,qBAAqB;IACrB,YAAY,EAAE,MAAM,CAAA;IACpB,0BAA0B;IAC1B,OAAO,EAAE,MAAM,CAAA;IACf,iDAAiD;IACjD,eAAe,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B,uBAAuB;IACvB,cAAc,EAAE,MAAM,CAAA;CACvB;AAID,+DAA+D;AAC/D,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAU9B,CAAA;AAEF,gDAAgD;AAChD,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAiB7B,CAAA;AAEF,4EAA4E;AAC5E,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAQ1C,CAAA"}
+{"version":3,"file":"sync.d.ts","sourceRoot":"","sources":["../src/sync.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AACxC,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAA;AAG/D,YAAY,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAK7C,oDAAoD;AACpD,MAAM,WAAW,YAAY;IAC3B,uBAAuB;IACvB,KAAK,EAAE,MAAM,CAAA;IACb,gCAAgC;IAChC,KAAK,EAAE,MAAM,CAAA;IACb,oEAAoE;IACpE,OAAO,EAAE,MAAM,CAAA;IACf,gDAAgD;IAChD,WAAW,EAAE,MAAM,CAAA;IACnB,0DAA0D;IAC1D,cAAc,EAAE,WAAW,EAAE,CAAA;IAC7B,6FAA6F;IAC7F,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED,6DAA6D;AAC7D,MAAM,WAAW,iBAAiB;IAChC,wCAAwC;IACxC,WAAW,EAAE,MAAM,CAAA;IACnB,yEAAyE;IACzE,aAAa,EAAE,MAAM,CAAA;IACrB,oDAAoD;IACpD,IAAI,EAAE,YAAY,EAAE,CAAA;IACpB,sEAAsE;IACtE,QAAQ,EAAE,MAAM,CAAA;IAChB;;;;;OAKG;IACH,QAAQ,EAAE,iBAAiB,CAAA;IAC3B,sDAAsD;IACtD,YAAY,CAAC,EAAE,GAAG,EAAE,CAAA;CACrB;AAMD,8CAA8C;AAC9C,MAAM,WAAW,WAAW;IAC1B,mEAAmE;IACnE,QAAQ,EAAE,MAAM,CAAA;IAChB,iDAAiD;IACjD,SAAS,EAAE,MAAM,CAAA;IACjB,gDAAgD;IAChD,aAAa,EAAE,MAAM,CAAA;IACrB,6CAA6C;IAC7C,OAAO,EAAE,OAAO,CAAA;CACjB;AAED,iEAAiE;AACjE,MAAM,WAAW,aAAa;IAC5B,oBAAoB;IACpB,WAAW,EAAE,MAAM,CAAA;IACnB,qCAAqC;IACrC,WAAW,EAAE,WAAW,CAAA;IACxB,+CAA+C;IAC/C,KAAK,EAAE,WAAW,EAAE,CAAA;IACpB,0CAA0C;IAC1C,UAAU,EAAE,MAAM,CAAA;CACnB;AAKD,6DAA6D;AAC7D,MAAM,WAAW,eAAe;IAC9B,oBAAoB;IACpB,IAAI,EAAE,WAAW,CAAA;IACjB,gDAAgD;IAChD,UAAU,EAAE,MAAM,CAAA;IAClB,6CAA6C;IAC7C,QAAQ,EAAE,OAAO,CAAA;IACjB,uEAAuE;IACvE,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;CAC3B;AAED,uCAAuC;AACvC,MAAM,WAAW,YAAY;IAC3B,oBAAoB;IACpB,WAAW,EAAE,MAAM,CAAA;IACnB,oCAAoC;IACpC,aAAa,EAAE,MAAM,CAAA;IACrB,2CAA2C;IAC3C,cAAc,EAAE,MAAM,CAAA;IACtB,6CAA6C;IAC7C,UAAU,EAAE,MAAM,CAAA;IAClB,2CAA2C;IAC3C,SAAS,EAAE,eAAe,EAAE,CAAA;IAC5B,kEAAkE;IAClE,eAAe,CAAC,EAAE,MAAM,EAAE,CAAA;IAC1B,8CAA8C;IAC9C,UAAU,CAAC,EAAE;QACX,KAAK,EAAE,SAAS,GAAG,WAAW,GAAG,SAAS,CAAA;QAC1C,MAAM,EAAE,SAAS,GAAG,WAAW,GAAG,SAAS,CAAA;QAC3C,QAAQ,EAAE,SAAS,GAAG,WAAW,CAAA;KAClC,CAAA;CACF;AAKD,yDAAyD;AACzD,MAAM,WAAW,kBAAkB;IACjC,0CAA0C;IAC1C,MAAM,EAAE,MAAM,CAAA;IACd,oBAAoB;IACpB,WAAW,EAAE,MAAM,CAAA;IACnB,yBAAyB;IACzB,eAAe,EAAE,MAAM,CAAA;IACvB,kCAAkC;IAClC,KAAK,EAAE,MAAM,CAAA;IACb,kDAAkD;IAClD,QAAQ,EAAE,MAAM,CAAA;CACjB;AAED,yDAAyD;AACzD,MAAM,WAAW,aAAa;IAC5B,gDAAgD;IAChD,aAAa,EAAE,MAAM,CAAA;IACrB,0BAA0B;IAC1B,SAAS,EAAE,WAAW,EAAE,CAAA;IACxB,6CAA6C;IAC7C,aAAa,EAAE,MAAM,CAAA;IACrB,wDAAwD;IACxD,OAAO,EAAE,OAAO,CAAA;IAChB,6CAA6C;IAC7C,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,qDAAqD;IACrD,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAC7B;;;;;;;;OAQG;IACH,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;IACxB,+CAA+C;IAC/C,cAAc,CAAC,EAAE,MAAM,EAAE,CAAA;IACzB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,iBAAiB,CAAA;CAC7B;AAED,wEAAwE;AACxE,MAAM,WAAW,cAAc;IAC7B,2BAA2B;IAC3B,UAAU,EAAE,MAAM,CAAA;IAClB,mCAAmC;IACnC,aAAa,EAAE,MAAM,CAAA;IACrB,wCAAwC;IACxC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAC9B;AAKD,2DAA2D;AAC3D,MAAM,WAAW,kBAAkB;IACjC,8DAA8D;IAC9D,IAAI,EAAE,MAAM,CAAA;IACZ,yBAAyB;IACzB,OAAO,EAAE,MAAM,CAAA;IACf,+BAA+B;IAC/B,WAAW,EAAE,MAAM,CAAA;CACpB;AAED,+EAA+E;AAC/E,MAAM,WAAW,yBAAyB;IACxC,oBAAoB;IACpB,WAAW,EAAE,MAAM,CAAA;IACnB,0CAA0C;IAC1C,WAAW,EAAE,WAAW,CAAA;IACxB,6BAA6B;IAC7B,KAAK,EAAE,kBAAkB,EAAE,CAAA;CAC5B;AAED,oDAAoD;AACpD,MAAM,WAAW,UAAU;IACzB,mBAAmB;IACnB,UAAU,EAAE,MAAM,CAAA;IAClB,qBAAqB;IACrB,YAAY,EAAE,MAAM,CAAA;IACpB,0BAA0B;IAC1B,OAAO,EAAE,MAAM,CAAA;IACf,iDAAiD;IACjD,eAAe,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B,uBAAuB;IACvB,cAAc,EAAE,MAAM,CAAA;CACvB;AAID,+DAA+D;AAC/D,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAU9B,CAAA;AAEF,gDAAgD;AAChD,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAiB7B,CAAA;AAEF,4EAA4E;AAC5E,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAQ1C,CAAA"}

package/dist/sync.js.map

@@ -1 +1 @@
-{"version":3,"file":"sync.js","sourceRoot":"","sources":["../src/sync.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;;AAEH,6BAAuB;AACvB,yCAAwC;AA+LxC,wEAAwE;AAExE,+DAA+D;AAClD,QAAA,mBAAmB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC1C,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,WAAW,EAAE,OAAC,CAAC,UAAU,CAAC,sBAAW,CAAC;IACtC,KAAK,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,CAAC;QACtB,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3B,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,EAAG,cAAc;QACjD,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;QACpC,OAAO,EAAE,OAAC,CAAC,OAAO,EAAE;KACrB,CAAC,CAAC;IACH,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAClC,CAAC,CAAA;AAEF,gDAAgD;AACnC,QAAA,kBAAkB,GAAG,OAAC,CAAC,MAAM,CAAC;IACzC,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACtC,cAAc,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACrC,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,SAAS,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,CAAC;QAC1B,IAAI,EAAE,OAAC,CAAC,UAAU,CAAC,sBAAW,CAAC;QAC/B,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE;QACtB,QAAQ,EAAE,OAAC,CAAC,OAAO,EAAE;QACrB,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;KAC9C,CAAC,CAAC;IACH,eAAe,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC/C,UAAU,EAAE,OAAC,CAAC,MAAM,CAAC;QACnB,KAAK,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC;QAClD,MAAM,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC;QACnD,QAAQ,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;KAC3C,CAAC,CAAC,QAAQ,EAAE;CACd,CAAC,CAAA;AAEF,4EAA4E;AAC/D,QAAA,+BAA+B,GAAG,OAAC,CAAC,MAAM,CAAC;IACtD,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,WAAW,EAAE,OAAC,CAAC,UAAU,CAAC,sBAAW,CAAC;IACtC,KAAK,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,CAAC;QACtB,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACvB,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE;QACnB,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;KACnC,CAAC,CAAC;CACJ,CAAC,CAAA"}
+{"version":3,"file":"sync.js","sourceRoot":"","sources":["../src/sync.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;;AAEH,6BAAuB;AACvB,yCAAwC;AAiNxC,wEAAwE;AAExE,+DAA+D;AAClD,QAAA,mBAAmB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC1C,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,WAAW,EAAE,OAAC,CAAC,UAAU,CAAC,sBAAW,CAAC;IACtC,KAAK,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,CAAC;QACtB,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3B,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,EAAG,cAAc;QACjD,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;QACpC,OAAO,EAAE,OAAC,CAAC,OAAO,EAAE;KACrB,CAAC,CAAC;IACH,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAClC,CAAC,CAAA;AAEF,gDAAgD;AACnC,QAAA,kBAAkB,GAAG,OAAC,CAAC,MAAM,CAAC;IACzC,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACtC,cAAc,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACrC,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,SAAS,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,CAAC;QAC1B,IAAI,EAAE,OAAC,CAAC,UAAU,CAAC,sBAAW,CAAC;QAC/B,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE;QACtB,QAAQ,EAAE,OAAC,CAAC,OAAO,EAAE;QACrB,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;KAC9C,CAAC,CAAC;IACH,eAAe,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC/C,UAAU,EAAE,OAAC,CAAC,MAAM,CAAC;QACnB,KAAK,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC;QAClD,MAAM,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC;QACnD,QAAQ,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;KAC3C,CAAC,CAAC,QAAQ,EAAE;CACd,CAAC,CAAA;AAEF,4EAA4E;AAC/D,QAAA,+BAA+B,GAAG,OAAC,CAAC,MAAM,CAAC;IACtD,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,WAAW,EAAE,OAAC,CAAC,UAAU,CAAC,sBAAW,CAAC;IACtC,KAAK,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,CAAC;QACtB,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACvB,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE;QACnB,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;KACnC,CAAC,CAAC;CACJ,CAAC,CAAA"}

package/dist/toon.d.ts

@@ -0,0 +1,80 @@
+/**
+ * The TOON wire format — one encoder, one decoder, one place.
+ *
+ * TOON is a compact tabular encoding for large row arrays:
+ *
+ * ```
+ * TOON|col1,col2,...,colN
+ * val1|val2|...|valN
+ * val1|val2|...|valN
+ * ```
+ *
+ * It is produced by the control plane (`routes/incidents.ts`, `routes/traces.ts`)
+ * and consumed by the dashboard and the CLI. Pipe-delimited rather than CSV so
+ * commas in values need no escaping, with column headers up front so an LLM
+ * reading a tool result gets type context, and a `TOON` sentinel so a decoder
+ * can tell the format apart from JSON.
+ *
+ * # Why this module exists at all
+ *
+ * It used to live in `services/control-plane/src/lib/toon.ts`, with the decoder
+ * hand-copied into `tools/cli/src/lib/api.ts` and `apps/dashboard/src/lib/api.ts`
+ * — three implementations of one wire format, bound together by a comment saying
+ * they must not diverge.
+ *
+ * That is not a hypothetical risk; it already cost a live bug. `escapeCell`
+ * escaped `|` and newlines without escaping the backslash first, so a cell ending
+ * in `\` escaped the delimiter the encoder appended after it and merged with the
+ * next cell. On a governance incident from `GET /api/v1/incidents` that reads:
+ *
+ *     severity     "CRITICAL"  ->  "tr_…"   (the trace id)
+ *     workspace_id  "ws_…"     ->  null
+ *
+ * so the row stopped rendering and filtering as CRITICAL in the dashboard and
+ * printing as CRITICAL in the CLI, for any holder of a workspace API key. It also
+ * corrupted ordinary data with no attacker present: a Windows path `C:\new` had
+ * its `\n` turned into a real newline.
+ *
+ * The repair was applied to the encoder and to the control plane's own decoder —
+ * and **nothing in the control plane decodes TOON**. The two decoders on the read
+ * path kept their private copies, so the exploit still reproduced end to end
+ * afterwards, and the half-fix additionally made a benign mid-string backslash
+ * render doubled. Consolidating here is what stops the next fix landing in one
+ * copy of three.
+ *
+ * # What is deliberately NOT here
+ *
+ * `toonEncodeWithMetrics` stays in the control plane. It calls
+ * `Buffer.byteLength`, and this module is imported by the dashboard's browser
+ * bundle — a Node built-in in here would work only for as long as tree-shaking
+ * happened to drop it, which is the kind of guarantee that fails silently. The
+ * wire format is universal; the byte accounting is a server concern.
+ *
+ * @module
+ */
+/** Minimum number of rows before TOON encoding activates. */
+export declare const TOON_THRESHOLD_ROWS = 20;
+/** Max characters per cell value before truncation. */
+export declare const TOON_MAX_CELL_CHARS = 120;
+/** Sentinel prefix for detecting TOON-encoded strings. */
+export declare const TOON_MAGIC = "TOON";
+/**
+ * A consistent ordered column set: the union of all keys, most common first.
+ */
+export declare function extractColumns(rows: Record<string, unknown>[]): string[];
+/** Serialises one cell value to a compact, pipe-safe string. */
+export declare function serializeCell(value: unknown): string;
+/** Encodes an array of objects to TOON wire format. */
+export declare function toonEncode(rows: Record<string, unknown>[], columns?: string[]): string;
+/**
+ * Decodes a TOON string back to plain objects, or `null` if it is not TOON.
+ */
+export declare function toonDecode(toon: string): Record<string, unknown>[] | null;
+export declare function shouldToon(rows: unknown[]): boolean;
+/**
+ * Encodes a tool-result payload for context-window efficiency: TOON at or above
+ * {@link TOON_THRESHOLD_ROWS} rows, JSON below it.
+ */
+export declare function toonEncodeToolResult(toolName: string, rows: Record<string, unknown>[]): string;
+export declare function toonDecodeToolResult(payload: string): Record<string, unknown>[] | null;
+//# sourceMappingURL=toon.d.ts.map

package/dist/toon.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"toon.d.ts","sourceRoot":"","sources":["../src/toon.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqDG;AAIH,6DAA6D;AAC7D,eAAO,MAAM,mBAAmB,KAAK,CAAA;AAErC,uDAAuD;AACvD,eAAO,MAAM,mBAAmB,MAAM,CAAA;AAEtC,0DAA0D;AAC1D,eAAO,MAAM,UAAU,SAAS,CAAA;AAIhC;;GAEG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,MAAM,EAAE,CAUxE;AAqCD,gEAAgE;AAChE,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CASpD;AAED,uDAAuD;AACvD,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,MAAM,CAQtF;AAuCD;;GAEG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,IAAI,CA6BzE;AAID,wBAAgB,UAAU,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,OAAO,CAEnD;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAC9B,MAAM,CAGR;AAED,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,IAAI,CAStF"}

package/dist/toon.js

@@ -0,0 +1,278 @@
+"use strict";
+/**
+ * The TOON wire format — one encoder, one decoder, one place.
+ *
+ * TOON is a compact tabular encoding for large row arrays:
+ *
+ * ```
+ * TOON|col1,col2,...,colN
+ * val1|val2|...|valN
+ * val1|val2|...|valN
+ * ```
+ *
+ * It is produced by the control plane (`routes/incidents.ts`, `routes/traces.ts`)
+ * and consumed by the dashboard and the CLI. Pipe-delimited rather than CSV so
+ * commas in values need no escaping, with column headers up front so an LLM
+ * reading a tool result gets type context, and a `TOON` sentinel so a decoder
+ * can tell the format apart from JSON.
+ *
+ * # Why this module exists at all
+ *
+ * It used to live in `services/control-plane/src/lib/toon.ts`, with the decoder
+ * hand-copied into `tools/cli/src/lib/api.ts` and `apps/dashboard/src/lib/api.ts`
+ * — three implementations of one wire format, bound together by a comment saying
+ * they must not diverge.
+ *
+ * That is not a hypothetical risk; it already cost a live bug. `escapeCell`
+ * escaped `|` and newlines without escaping the backslash first, so a cell ending
+ * in `\` escaped the delimiter the encoder appended after it and merged with the
+ * next cell. On a governance incident from `GET /api/v1/incidents` that reads:
+ *
+ *     severity     "CRITICAL"  ->  "tr_…"   (the trace id)
+ *     workspace_id  "ws_…"     ->  null
+ *
+ * so the row stopped rendering and filtering as CRITICAL in the dashboard and
+ * printing as CRITICAL in the CLI, for any holder of a workspace API key. It also
+ * corrupted ordinary data with no attacker present: a Windows path `C:\new` had
+ * its `\n` turned into a real newline.
+ *
+ * The repair was applied to the encoder and to the control plane's own decoder —
+ * and **nothing in the control plane decodes TOON**. The two decoders on the read
+ * path kept their private copies, so the exploit still reproduced end to end
+ * afterwards, and the half-fix additionally made a benign mid-string backslash
+ * render doubled. Consolidating here is what stops the next fix landing in one
+ * copy of three.
+ *
+ * # What is deliberately NOT here
+ *
+ * `toonEncodeWithMetrics` stays in the control plane. It calls
+ * `Buffer.byteLength`, and this module is imported by the dashboard's browser
+ * bundle — a Node built-in in here would work only for as long as tree-shaking
+ * happened to drop it, which is the kind of guarantee that fails silently. The
+ * wire format is universal; the byte accounting is a server concern.
+ *
+ * @module
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TOON_MAGIC = exports.TOON_MAX_CELL_CHARS = exports.TOON_THRESHOLD_ROWS = void 0;
+exports.extractColumns = extractColumns;
+exports.serializeCell = serializeCell;
+exports.toonEncode = toonEncode;
+exports.toonDecode = toonDecode;
+exports.shouldToon = shouldToon;
+exports.toonEncodeToolResult = toonEncodeToolResult;
+exports.toonDecodeToolResult = toonDecodeToolResult;
+// ── Configuration ───────────────────────────────────────────────────────────
+/** Minimum number of rows before TOON encoding activates. */
+exports.TOON_THRESHOLD_ROWS = 20;
+/** Max characters per cell value before truncation. */
+exports.TOON_MAX_CELL_CHARS = 120;
+/** Sentinel prefix for detecting TOON-encoded strings. */
+exports.TOON_MAGIC = 'TOON';
+// ── Encoder ─────────────────────────────────────────────────────────────────
+/**
+ * A consistent ordered column set: the union of all keys, most common first.
+ */
+function extractColumns(rows) {
+    const freq = new Map();
+    for (const row of rows) {
+        for (const key of Object.keys(row)) {
+            freq.set(key, (freq.get(key) ?? 0) + 1);
+        }
+    }
+    return [...freq.entries()]
+        .sort((a, b) => b[1] - a[1] || a[0].localeCompare(b[0]))
+        .map(([k]) => k);
+}
+/**
+ * Escapes a cell body so nothing in it can be mistaken for structure.
+ *
+ * **The backslash is escaped first, and that ordering is the whole point.**
+ * Escaping `|` and `\n` while passing the backslash through means a value ending
+ * in one escapes the delimiter the encoder appends after it: `x\` + `|` + `y`
+ * decodes as the single cell `x|y`, every later column shifts one place left, and
+ * the last decodes as null. Repeating the trailing backslash shifts further.
+ *
+ * The value is reachable without an attacker: `routes/incidents.ts` builds
+ * `description` from a hook event's `reason`, which any holder of a workspace API
+ * key sets on `POST /api/v1/hook-events`.
+ */
+function escapeCell(s) {
+    return s.replace(/\\/g, '\\\\').replace(/\|/g, '\\|').replace(/\n/g, '\\n');
+}
+/**
+ * Truncates an already-escaped cell without severing an escape pair.
+ *
+ * `slice()` counts characters, not escape sequences, so a naive cut can land
+ * between a backslash and the character it escapes and leave a dangling backslash
+ * at the end of the cell — reintroducing the delimiter-swallowing bug through the
+ * back door. A trailing run of backslashes is even by construction (each came
+ * from `\\`), so an odd count means the cut split a pair.
+ */
+function truncateEscaped(escaped) {
+    if (escaped.length <= exports.TOON_MAX_CELL_CHARS)
+        return escaped;
+    let cut = escaped.slice(0, exports.TOON_MAX_CELL_CHARS);
+    let trailing = 0;
+    while (trailing < cut.length && cut[cut.length - 1 - trailing] === '\\')
+        trailing++;
+    if (trailing % 2 === 1)
+        cut = cut.slice(0, -1);
+    return cut + '\u2026';
+}
+/** Serialises one cell value to a compact, pipe-safe string. */
+function serializeCell(value) {
+    if (value === null || value === undefined)
+        return '-';
+    if (typeof value === 'boolean')
+        return value ? 't' : 'f';
+    if (typeof value === 'number')
+        return String(value);
+    if (typeof value === 'string')
+        return truncateEscaped(escapeCell(value));
+    // `JSON.stringify` escapes backslashes and newlines *within* the JSON string
+    // literals it emits, but the result is still a plain string that can end in a
+    // backslash (`{"p":"C:\\"}`), so it goes through the same escaper.
+    return truncateEscaped(escapeCell(JSON.stringify(value)));
+}
+/** Encodes an array of objects to TOON wire format. */
+function toonEncode(rows, columns) {
+    if (rows.length === 0)
+        return `${exports.TOON_MAGIC}|(empty)\n`;
+    const cols = columns ?? extractColumns(rows);
+    const lines = [`${exports.TOON_MAGIC}|${cols.join(',')}`];
+    for (const row of rows) {
+        lines.push(cols.map((col) => serializeCell(row[col])).join('|'));
+    }
+    return lines.join('\n') + '\n';
+}
+// ── Decoder ─────────────────────────────────────────────────────────────────
+/**
+ * Splits one encoded row into cells, unescaping as it goes.
+ *
+ * A single left-to-right pass, not a chain of `.replace()` calls. The decoder
+ * this replaces swapped `\|` for a NUL placeholder before splitting, which cannot
+ * express the `\\` that {@link escapeCell} emits: given `x\\|y` the regex pairs
+ * the *second* backslash with the delimiter and swallows it, merging two cells —
+ * the exact bug the encoder change closes. Scanning is the only way the two
+ * escapes stay distinguishable.
+ *
+ * A lone backslash before anything other than `\`, `|` or `n` is kept literal
+ * rather than dropped. That is deliberate: it is what a payload from a control
+ * plane predating the encoder fix looks like, and a stale value is a better
+ * failure than a discarded character.
+ */
+function splitCells(line) {
+    const cells = [];
+    let cur = '';
+    for (let i = 0; i < line.length; i++) {
+        const ch = line[i];
+        if (ch === '\\') {
+            const next = line[i + 1];
+            if (next === '\\') {
+                cur += '\\';
+                i++;
+                continue;
+            }
+            if (next === '|') {
+                cur += '|';
+                i++;
+                continue;
+            }
+            if (next === 'n') {
+                cur += '\n';
+                i++;
+                continue;
+            }
+            cur += '\\';
+            continue;
+        }
+        if (ch === '|') {
+            cells.push(cur);
+            cur = '';
+            continue;
+        }
+        cur += ch;
+    }
+    cells.push(cur);
+    return cells;
+}
+/**
+ * Decodes a TOON string back to plain objects, or `null` if it is not TOON.
+ */
+function toonDecode(toon) {
+    const lines = toon.trimEnd().split('\n');
+    if (lines.length < 1)
+        return null;
+    const header = lines[0];
+    if (!header.startsWith(`${exports.TOON_MAGIC}|`))
+        return null;
+    const colsStr = header.slice(exports.TOON_MAGIC.length + 1);
+    if (colsStr === '(empty)')
+        return [];
+    const cols = colsStr.split(',');
+    const rows = [];
+    for (const line of lines.slice(1)) {
+        if (!line.trim())
+            continue;
+        const cells = splitCells(line);
+        const obj = {};
+        for (let i = 0; i < cols.length; i++) {
+            const key = cols[i];
+            const raw = cells[i] ?? '-';
+            if (raw === '-') {
+                obj[key] = null;
+                continue;
+            }
+            if (raw === 't') {
+                obj[key] = true;
+                continue;
+            }
+            if (raw === 'f') {
+                obj[key] = false;
+                continue;
+            }
+            const num = Number(raw);
+            if (!isNaN(num) && raw !== '') {
+                obj[key] = num;
+                continue;
+            }
+            if (raw.startsWith('{') || raw.startsWith('[')) {
+                try {
+                    obj[key] = JSON.parse(raw);
+                    continue;
+                }
+                catch { /* fall through */ }
+            }
+            obj[key] = raw;
+        }
+        rows.push(obj);
+    }
+    return rows;
+}
+// ── Threshold-gated encode ──────────────────────────────────────────────────
+function shouldToon(rows) {
+    return rows.length >= exports.TOON_THRESHOLD_ROWS;
+}
+/**
+ * Encodes a tool-result payload for context-window efficiency: TOON at or above
+ * {@link TOON_THRESHOLD_ROWS} rows, JSON below it.
+ */
+function toonEncodeToolResult(toolName, rows) {
+    if (!shouldToon(rows))
+        return JSON.stringify(rows);
+    return `# ${toolName} [${rows.length} rows, TOON-compressed]\n` + toonEncode(rows);
+}
+function toonDecodeToolResult(payload) {
+    const body = payload.replace(/^#[^\n]*\n/, '');
+    if (body.startsWith(`${exports.TOON_MAGIC}|`))
+        return toonDecode(body);
+    try {
+        const parsed = JSON.parse(body);
+        return Array.isArray(parsed) ? parsed : null;
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=toon.js.map

package/dist/toon.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"toon.js","sourceRoot":"","sources":["../src/toon.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqDG;;;AAkBH,wCAUC;AAsCD,sCASC;AAGD,gCAQC;AA0CD,gCA6BC;AAID,gCAEC;AAMD,oDAMC;AAED,oDASC;AAxLD,+EAA+E;AAE/E,6DAA6D;AAChD,QAAA,mBAAmB,GAAG,EAAE,CAAA;AAErC,uDAAuD;AAC1C,QAAA,mBAAmB,GAAG,GAAG,CAAA;AAEtC,0DAA0D;AAC7C,QAAA,UAAU,GAAG,MAAM,CAAA;AAEhC,+EAA+E;AAE/E;;GAEG;AACH,SAAgB,cAAc,CAAC,IAA+B;IAC5D,MAAM,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAA;IACtC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACnC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;QACzC,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;SACvB,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;SACvD,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAA;AACpB,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAS,UAAU,CAAC,CAAS;IAC3B,OAAO,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;AAC7E,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,eAAe,CAAC,OAAe;IACtC,IAAI,OAAO,CAAC,MAAM,IAAI,2BAAmB;QAAE,OAAO,OAAO,CAAA;IACzD,IAAI,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,2BAAmB,CAAC,CAAA;IAC/C,IAAI,QAAQ,GAAG,CAAC,CAAA;IAChB,OAAO,QAAQ,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,GAAG,QAAQ,CAAC,KAAK,IAAI;QAAE,QAAQ,EAAE,CAAA;IACnF,IAAI,QAAQ,GAAG,CAAC,KAAK,CAAC;QAAE,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;IAC9C,OAAO,GAAG,GAAG,QAAQ,CAAA;AACvB,CAAC;AAED,gEAAgE;AAChE,SAAgB,aAAa,CAAC,KAAc;IAC1C,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,GAAG,CAAA;IACrD,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAA;IACxD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAA;IACnD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,eAAe,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAA;IACxE,6EAA6E;IAC7E,8EAA8E;IAC9E,mEAAmE;IACnE,OAAO,eAAe,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;AAC3D,CAAC;AAED,uDAAuD;AACvD,SAAgB,UAAU,CAAC,IAA+B,EAAE,OAAkB;IAC5E,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,GAAG,kBAAU,YAAY,CAAA;IACvD,MAAM,IAAI,GAAG,OAAO,IAAI,cAAc,CAAC,IAAI,CAAC,CAAA;IAC5C,MAAM,KAAK,GAAa,CAAC,GAAG,kBAAU,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;IAC3D,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;IAClE,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAA;AAChC,CAAC;AAED,+EAA+E;AAE/E;;;;;;;;;;;;;;GAcG;AACH,SAAS,UAAU,CAAC,IAAY;IAC9B,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,IAAI,GAAG,GAAG,EAAE,CAAA;IACZ,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAA;QAClB,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;YAChB,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;YACxB,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;gBAAC,GAAG,IAAI,IAAI,CAAC;gBAAC,CAAC,EAAE,CAAC;gBAAC,SAAQ;YAAC,CAAC;YACjD,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;gBAAC,GAAG,IAAI,GAAG,CAAC;gBAAC,CAAC,EAAE,CAAC;gBAAC,SAAQ;YAAC,CAAC;YAC/C,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;gBAAC,GAAG,IAAI,IAAI,CAAC;gBAAC,CAAC,EAAE,CAAC;gBAAC,SAAQ;YAAC,CAAC;YAChD,GAAG,IAAI,IAAI,CAAA;YACX,SAAQ;QACV,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAAC,GAAG,GAAG,EAAE,CAAC;YAAC,SAAQ;QAAC,CAAC;QACvD,GAAG,IAAI,EAAE,CAAA;IACX,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IACf,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;GAEG;AACH,SAAgB,UAAU,CAAC,IAAY;IACrC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IACxC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAA;IACjC,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAW,CAAA;IACjC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,kBAAU,GAAG,CAAC;QAAE,OAAO,IAAI,CAAA;IACrD,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,kBAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;IACnD,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,EAAE,CAAA;IACpC,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAC/B,MAAM,IAAI,GAA8B,EAAE,CAAA;IAC1C,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QAClC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;YAAE,SAAQ;QAC1B,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,CAAA;QAC9B,MAAM,GAAG,GAA4B,EAAE,CAAA;QACvC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACrC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAW,CAAA;YAC7B,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,GAAG,CAAA;YAC3B,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;gBAAC,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;gBAAC,SAAQ;YAAC,CAAC;YAC9C,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;gBAAC,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;gBAAC,SAAQ;YAAC,CAAC;YAC9C,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;gBAAC,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;gBAAC,SAAQ;YAAC,CAAC;YAC/C,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,CAAA;YACvB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,GAAG,KAAK,EAAE,EAAE,CAAC;gBAAC,GAAG,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;gBAAC,SAAQ;YAAC,CAAC;YAC3D,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC/C,IAAI,CAAC;oBAAC,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;oBAAC,SAAQ;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;YAC3E,CAAC;YACD,GAAG,CAAC,GAAG,CAAC,GAAG,GAAG,CAAA;QAChB,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAChB,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,+EAA+E;AAE/E,SAAgB,UAAU,CAAC,IAAe;IACxC,OAAO,IAAI,CAAC,MAAM,IAAI,2BAAmB,CAAA;AAC3C,CAAC;AAED;;;GAGG;AACH,SAAgB,oBAAoB,CAClC,QAAgB,EAChB,IAA+B;IAE/B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;IAClD,OAAO,KAAK,QAAQ,KAAK,IAAI,CAAC,MAAM,2BAA2B,GAAG,UAAU,CAAC,IAAI,CAAC,CAAA;AACpF,CAAC;AAED,SAAgB,oBAAoB,CAAC,OAAe;IAClD,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAA;IAC9C,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,kBAAU,GAAG,CAAC;QAAE,OAAO,UAAU,CAAC,IAAI,CAAC,CAAA;IAC9D,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QAC/B,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAE,MAAoC,CAAC,CAAC,CAAC,IAAI,CAAA;IAC7E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC"}

package/dist/usage.d.ts

@@ -31,4 +31,27 @@ export interface ModelBreakdown {
     totalOutputTokens: number;
     traceCount: number;
 }
+/**
+ * Per-virtual-key cost breakdown (`GET /api/v1/usage/virtual-keys`).
+ *
+ * "Desktop vs. app" and similar traffic-class splits work today by minting
+ * one virtual key per class and pointing that traffic at it — this is the
+ * meter that makes those separate keys actually read as separate cost
+ * figures. Same shape as {@link ModelBreakdown}, grouped by key instead of
+ * model. See migration 174.
+ */
+export interface VirtualKeyBreakdown {
+    /**
+     * The key's non-secret key_prefix — `null` groups every trace with no
+     * virtual-key auth context (standalone/offline traces synced back, or any
+     * trace older than migration 174), never invented as `'unknown'` inline
+     * with a real prefix.
+     */
+    virtualKeyId: string | null;
+    totalCostUsd: number;
+    totalRawCostUsd: number;
+    totalInputTokens: number;
+    totalOutputTokens: number;
+    traceCount: number;
+}
 //# sourceMappingURL=usage.d.ts.map

package/dist/usage.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"usage.d.ts","sourceRoot":"","sources":["../src/usage.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,MAAM,WAAW,YAAY;IAC3B,WAAW,EAAE,MAAM,CAAA;IACnB,MAAM,EAAE,OAAO,GAAG,QAAQ,GAAG,SAAS,CAAA;IACtC,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,EAAE,MAAM,CAAA;IACf,YAAY,EAAE,MAAM,CAAA;IACpB,eAAe,EAAE,MAAM,CAAA;IACvB,eAAe,EAAE,MAAM,CAAA;IACvB,gBAAgB,EAAE,MAAM,CAAA;IACxB,iBAAiB,EAAE,MAAM,CAAA;IACzB,UAAU,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,EAAE,MAAM,CAAA;IAChB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,KAAK,EAAE,MAAM,CAAA;IACb,YAAY,EAAE,MAAM,CAAA;IACpB,aAAa,EAAE,MAAM,CAAA;IACrB,QAAQ,EAAE,MAAM,CAAA;IAChB,kBAAkB,EAAE,MAAM,CAAA;IAC1B,aAAa,EAAE,QAAQ,GAAG,QAAQ,GAAG,IAAI,CAAA;CAC1C;AAED,MAAM,WAAW,cAAc;IAC7B,cAAc,EAAE,MAAM,CAAA;IACtB,YAAY,EAAE,MAAM,CAAA;IACpB,eAAe,EAAE,MAAM,CAAA;IACvB,gBAAgB,EAAE,MAAM,CAAA;IACxB,iBAAiB,EAAE,MAAM,CAAA;IACzB,UAAU,EAAE,MAAM,CAAA;CACnB"}
+{"version":3,"file":"usage.d.ts","sourceRoot":"","sources":["../src/usage.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,MAAM,WAAW,YAAY;IAC3B,WAAW,EAAE,MAAM,CAAA;IACnB,MAAM,EAAE,OAAO,GAAG,QAAQ,GAAG,SAAS,CAAA;IACtC,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,EAAE,MAAM,CAAA;IACf,YAAY,EAAE,MAAM,CAAA;IACpB,eAAe,EAAE,MAAM,CAAA;IACvB,eAAe,EAAE,MAAM,CAAA;IACvB,gBAAgB,EAAE,MAAM,CAAA;IACxB,iBAAiB,EAAE,MAAM,CAAA;IACzB,UAAU,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,EAAE,MAAM,CAAA;IAChB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,KAAK,EAAE,MAAM,CAAA;IACb,YAAY,EAAE,MAAM,CAAA;IACpB,aAAa,EAAE,MAAM,CAAA;IACrB,QAAQ,EAAE,MAAM,CAAA;IAChB,kBAAkB,EAAE,MAAM,CAAA;IAC1B,aAAa,EAAE,QAAQ,GAAG,QAAQ,GAAG,IAAI,CAAA;CAC1C;AAED,MAAM,WAAW,cAAc;IAC7B,cAAc,EAAE,MAAM,CAAA;IACtB,YAAY,EAAE,MAAM,CAAA;IACpB,eAAe,EAAE,MAAM,CAAA;IACvB,gBAAgB,EAAE,MAAM,CAAA;IACxB,iBAAiB,EAAE,MAAM,CAAA;IACzB,UAAU,EAAE,MAAM,CAAA;CACnB;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,mBAAmB;IAClC;;;;;OAKG;IACH,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,YAAY,EAAE,MAAM,CAAA;IACpB,eAAe,EAAE,MAAM,CAAA;IACvB,gBAAgB,EAAE,MAAM,CAAA;IACxB,iBAAiB,EAAE,MAAM,CAAA;IACzB,UAAU,EAAE,MAAM,CAAA;CACnB"}