@intutic/shared-types 1.9.0 → 1.10.1

package/dist/finops.d.ts

@@ -40,8 +40,20 @@ export interface TraceEntry {
     complexityScore: number;
     /** Raw input tokens before compression. */
     rawInputTokens: number;
-    /** Input tokens after compression. */
+    /**
+     * Input tokens after compression.
+     *
+     * Written equal to `rawInputTokens` by every proxy trace path — the input
+     * compressor is not wired. Do not derive a saving from the difference.
+     */
     compressedInputTokens: number;
+    /**
+     * Bytes the SnipCompactor removed from the response body.
+     *
+     * The measured saving, in bytes rather than tokens, and response-side: it
+     * reduces the *next* turn's prompt, not this trace's input count.
+     */
+    toolResultBytesSaved?: number;
     /** Output tokens generated. */
     outputTokens: number;
     /** Cost at the raw model rate (USD). */
@@ -124,6 +136,10 @@ export interface TraceSummary {
     complianceScore: number;
     actualCostUsd: number;
     anomalyDetected: AnomalyType | string | null;
+    /** True when the request was served under a valid break-glass token, global or scoped (migration 170). */
+    breakGlass?: boolean;
+    /** The approval this trace ran under, joinable to `break_glass_requests`; null when `breakGlass` is false. */
+    breakGlassRequestId?: string | null;
 }
 /** Paginated result from trace listing. */
 export interface TraceListResult {
@@ -132,6 +148,26 @@ export interface TraceListResult {
     limit: number;
     offset: number;
 }
+/**
+ * One persisted detector finding on a trace, from `detector_findings`
+ * (migration 115). Distinct from `TraceDetail.anomalyDetected` /
+ * `anomalyConfidenceScore`, which carry only the single winning finding —
+ * this is every detector that fired, which is what lets a reviewer see two
+ * independent detectors agreeing (`detector_findings.md`-shaped corroboration)
+ * instead of one winner masking the rest.
+ */
+export interface TraceFindingSummary {
+    findingId: string;
+    detectorId: string;
+    anomalyKind: string;
+    severity: string;
+    /** STEER | REASK | ASK | KILL — what this finding actually did. */
+    disposition: string;
+    confidence: number;
+    reason: string;
+    /** True when the workspace was in shadow mode — recorded, not enforced. */
+    shadowed: boolean;
+}
 export interface TraceStep {
     logId: string;
     toolName: string;
@@ -157,10 +193,13 @@ export interface TraceDetail {
     complexityScore: number;
     rawInputTokens: number;
     compressedInputTokens: number;
+    toolResultBytesSaved?: number;
     outputTokens: number;
     rawCostUsd: number;
     actualCostUsd: number;
     savingsUsd: number;
+    /** Who re-classified this trace, if anyone. Null when it holds its insert-time value. */
+    tokenUtilityClassifiedBy?: string | null;
     tokenUtility: TokenUtility | string;
     tokenUtilityScore: number;
     complianceScore: number;
@@ -171,8 +210,65 @@ export interface TraceDetail {
     rootCauseAttribution: unknown | null;
     correctivePromptCard: unknown | null;
     reasoningTokens?: number | null;
+    /**
+     * Provider-reported prompt-cache token counts (TD-347; migration 165) —
+     * Anthropic's `usage.cache_read_input_tokens` / `cache_creation_input_tokens`
+     * today. Null when the provider/proxy build doesn't report them; distinct
+     * from `cacheHit`/`cacheSavingsUsd` (the proxy's own semantic response
+     * cache) — see `execution_traces.cache_read_input_tokens`'s column comment.
+     */
+    cacheReadInputTokens?: number | null;
+    cacheCreationInputTokens?: number | null;
     toolCallMetrics?: unknown | null;
+    /**
+     * 0–100 integrity score backing a WASTED `tokenUtility` verdict; null when
+     * the trace was never scored (e.g. it wasn't a candidate for waste
+     * classification). Written at ingest; previously selected nowhere, so a
+     * WASTED badge had no way to explain itself — see `qualityFault` below.
+     */
+    responseIntegrity?: number | null;
+    /**
+     * The specific check that failed when `responseIntegrity` is low — e.g.
+     * the first-failing-check name. Pairs with `responseIntegrity`; both are
+     * null together.
+     */
+    qualityFault?: string | null;
+    /**
+     * The model a shadow-routing evaluation would have picked for this trace,
+     * if the workspace has shadow routing configured; null otherwise. Written
+     * at ingest on both the streaming and non-streaming ingest paths; reading
+     * it back is what the shadow-routing savings report aggregates.
+     */
+    routingShadowModel?: string | null;
+    /** True when the request was served under a valid break-glass token, global or scoped (migration 170). */
+    breakGlass?: boolean;
+    /** The approval this trace ran under; what it skipped is that approval's `policyId`. */
+    breakGlassRequestId?: string | null;
+    /**
+     * What this request touched (migration 105). `toolCallMetrics` is token
+     * accounting per tool; this is the files, URLs and commands they named.
+     */
+    changeManifest?: ChangeManifestEntry[] | null;
     steps?: TraceStep[];
+    /**
+     * Every detector finding persisted for this trace, most severe first —
+     * see {@link TraceFindingSummary}. `anomalyDetected`/`anomalyConfidenceScore`
+     * above stay as the single winner for backward compatibility; this is the
+     * full set, present on allowed traces as well as blocked ones.
+     */
+    findings?: TraceFindingSummary[];
+}
+/**
+ * One thing an agent touched, as recorded by the proxy's change manifest.
+ * Mirrors `ChangeEntry` in `packages/proxy/src/manifest.rs`.
+ */
+export interface ChangeManifestEntry {
+    tool: string;
+    op: 'write' | 'edit' | 'delete' | 'move' | 'execute' | 'read' | 'fetch' | 'unknown';
+    target: string;
+    target_kind: 'path' | 'url' | 'command' | 'opaque';
+    risk?: string[];
+    bytes?: number;
 }
 /** Filters for trace query. */
 export interface TraceFilters {

package/dist/finops.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"finops.d.ts","sourceRoot":"","sources":["../src/finops.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EACV,WAAW,EACX,iBAAiB,EACjB,WAAW,EACX,YAAY,EACb,MAAM,YAAY,CAAA;AAInB;;;;;;;;GAQG;AACH,MAAM,WAAW,UAAU;IACzB,+CAA+C;IAC/C,OAAO,EAAE,MAAM,CAAA;IAEf,iEAAiE;IACjE,SAAS,EAAE,MAAM,CAAA;IAEjB,2CAA2C;IAC3C,SAAS,EAAE,MAAM,CAAA;IAEjB,oCAAoC;IACpC,SAAS,EAAE,MAAM,CAAA;IAEjB,qDAAqD;IACrD,gBAAgB,EAAE,MAAM,CAAA;IAGxB,yCAAyC;IACzC,cAAc,EAAE,MAAM,CAAA;IAEtB,yDAAyD;IACzD,iBAAiB,EAAE,MAAM,CAAA;IAEzB,kCAAkC;IAClC,WAAW,EAAE,WAAW,CAAA;IAExB,mDAAmD;IACnD,eAAe,EAAE,MAAM,CAAA;IAGvB,2CAA2C;IAC3C,cAAc,EAAE,MAAM,CAAA;IAEtB,sCAAsC;IACtC,qBAAqB,EAAE,MAAM,CAAA;IAE7B,+BAA+B;IAC/B,YAAY,EAAE,MAAM,CAAA;IAGpB,wCAAwC;IACxC,UAAU,EAAE,MAAM,CAAA;IAElB,oDAAoD;IACpD,aAAa,EAAE,MAAM,CAAA;IAErB,kEAAkE;IAClE,UAAU,EAAE,MAAM,CAAA;IAGlB,oDAAoD;IACpD,YAAY,EAAE,YAAY,CAAA;IAE1B,0CAA0C;IAC1C,iBAAiB,EAAE,MAAM,CAAA;IAGzB,yDAAyD;IACzD,eAAe,EAAE,MAAM,CAAA;IAEvB,+CAA+C;IAC/C,iBAAiB,EAAE,iBAAiB,CAAA;IAGpC,qCAAqC;IACrC,eAAe,EAAE,WAAW,GAAG,IAAI,CAAA;IAEnC,oDAAoD;IACpD,sBAAsB,EAAE,MAAM,GAAG,IAAI,CAAA;IAErC,4CAA4C;IAC5C,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;IAGhD,yDAAyD;IACzD,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;IAG9C,8CAA8C;IAC9C,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IAEpB,8CAA8C;IAC9C,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAE3B,0CAA0C;IAC1C,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;IAG1C,+CAA+C;IAC/C,QAAQ,EAAE,OAAO,CAAA;IAEjB,oCAAoC;IACpC,eAAe,EAAE,MAAM,CAAA;IAGvB,uDAAuD;IACvD,oBAAoB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;IAEpD,yDAAyD;IACzD,oBAAoB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;CACrD;AAID;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,qCAAqC;IACrC,OAAO,EAAE,MAAM,CAAA;IAEf,4CAA4C;IAC5C,UAAU,EAAE,MAAM,CAAA;IAElB,8CAA8C;IAC9C,OAAO,EAAE,MAAM,CAAA;IAEf,2CAA2C;IAC3C,YAAY,EAAE,MAAM,CAAA;CACrB;AAID;;;;;;;GAOG;AACH,MAAM,WAAW,aAAa;IAC5B,8BAA8B;IAC9B,QAAQ,EAAE,MAAM,CAAA;IAEhB,+CAA+C;IAC/C,WAAW,EAAE,MAAM,CAAA;IAEnB,uCAAuC;IACvC,KAAK,CAAC,EAAE,MAAM,CAAA;IAEd,uCAAuC;IACvC,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB;AAID,gDAAgD;AAChD,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,MAAM,CAAA;IACjB,cAAc,EAAE,MAAM,CAAA;IACtB,iBAAiB,EAAE,MAAM,CAAA;IACzB,iBAAiB,EAAE,iBAAiB,GAAG,MAAM,CAAA;IAC7C,eAAe,EAAE,MAAM,CAAA;IACvB,aAAa,EAAE,MAAM,CAAA;IACrB,eAAe,EAAE,WAAW,GAAG,MAAM,GAAG,IAAI,CAAA;CAC7C;AAED,2CAA2C;AAC3C,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,YAAY,EAAE,CAAA;IACtB,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;CACf;AAED,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,MAAM,CAAA;IACb,QAAQ,EAAE,MAAM,CAAA;IAChB,aAAa,EAAE,OAAO,CAAA;IACtB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,EAAE,MAAM,CAAA;IAClB,MAAM,EAAE,MAAM,CAAA;IACd,YAAY,EAAE,OAAO,CAAA;IACrB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,qCAAqC;AACrC,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,gBAAgB,EAAE,MAAM,CAAA;IACxB,cAAc,EAAE,MAAM,CAAA;IACtB,iBAAiB,EAAE,MAAM,CAAA;IACzB,WAAW,EAAE,WAAW,GAAG,MAAM,CAAA;IACjC,eAAe,EAAE,MAAM,CAAA;IACvB,cAAc,EAAE,MAAM,CAAA;IACtB,qBAAqB,EAAE,MAAM,CAAA;IAC7B,YAAY,EAAE,MAAM,CAAA;IACpB,UAAU,EAAE,MAAM,CAAA;IAClB,aAAa,EAAE,MAAM,CAAA;IACrB,UAAU,EAAE,MAAM,CAAA;IAClB,YAAY,EAAE,YAAY,GAAG,MAAM,CAAA;IACnC,iBAAiB,EAAE,MAAM,CAAA;IACzB,eAAe,EAAE,MAAM,CAAA;IACvB,iBAAiB,EAAE,iBAAiB,GAAG,MAAM,CAAA;IAC7C,eAAe,EAAE,WAAW,GAAG,MAAM,GAAG,IAAI,CAAA;IAC5C,sBAAsB,EAAE,MAAM,GAAG,IAAI,CAAA;IACrC,gBAAgB,EAAE,OAAO,GAAG,IAAI,CAAA;IAChC,oBAAoB,EAAE,OAAO,GAAG,IAAI,CAAA;IACpC,oBAAoB,EAAE,OAAO,GAAG,IAAI,CAAA;IACpC,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC/B,eAAe,CAAC,EAAE,OAAO,GAAG,IAAI,CAAA;IAChC,KAAK,CAAC,EAAE,SAAS,EAAE,CAAA;CACpB;AAED,+BAA+B;AAC/B,MAAM,WAAW,YAAY;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB"}
+{"version":3,"file":"finops.d.ts","sourceRoot":"","sources":["../src/finops.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EACV,WAAW,EACX,iBAAiB,EACjB,WAAW,EACX,YAAY,EACb,MAAM,YAAY,CAAA;AAInB;;;;;;;;GAQG;AACH,MAAM,WAAW,UAAU;IACzB,+CAA+C;IAC/C,OAAO,EAAE,MAAM,CAAA;IAEf,iEAAiE;IACjE,SAAS,EAAE,MAAM,CAAA;IAEjB,2CAA2C;IAC3C,SAAS,EAAE,MAAM,CAAA;IAEjB,oCAAoC;IACpC,SAAS,EAAE,MAAM,CAAA;IAEjB,qDAAqD;IACrD,gBAAgB,EAAE,MAAM,CAAA;IAGxB,yCAAyC;IACzC,cAAc,EAAE,MAAM,CAAA;IAEtB,yDAAyD;IACzD,iBAAiB,EAAE,MAAM,CAAA;IAEzB,kCAAkC;IAClC,WAAW,EAAE,WAAW,CAAA;IAExB,mDAAmD;IACnD,eAAe,EAAE,MAAM,CAAA;IAGvB,2CAA2C;IAC3C,cAAc,EAAE,MAAM,CAAA;IAEtB;;;;;OAKG;IACH,qBAAqB,EAAE,MAAM,CAAA;IAE7B;;;;;OAKG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAE7B,+BAA+B;IAC/B,YAAY,EAAE,MAAM,CAAA;IAGpB,wCAAwC;IACxC,UAAU,EAAE,MAAM,CAAA;IAElB,oDAAoD;IACpD,aAAa,EAAE,MAAM,CAAA;IAErB,kEAAkE;IAClE,UAAU,EAAE,MAAM,CAAA;IAGlB,oDAAoD;IACpD,YAAY,EAAE,YAAY,CAAA;IAE1B,0CAA0C;IAC1C,iBAAiB,EAAE,MAAM,CAAA;IAGzB,yDAAyD;IACzD,eAAe,EAAE,MAAM,CAAA;IAEvB,+CAA+C;IAC/C,iBAAiB,EAAE,iBAAiB,CAAA;IAGpC,qCAAqC;IACrC,eAAe,EAAE,WAAW,GAAG,IAAI,CAAA;IAEnC,oDAAoD;IACpD,sBAAsB,EAAE,MAAM,GAAG,IAAI,CAAA;IAErC,4CAA4C;IAC5C,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;IAGhD,yDAAyD;IACzD,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;IAG9C,8CAA8C;IAC9C,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IAEpB,8CAA8C;IAC9C,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAE3B,0CAA0C;IAC1C,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;IAG1C,+CAA+C;IAC/C,QAAQ,EAAE,OAAO,CAAA;IAEjB,oCAAoC;IACpC,eAAe,EAAE,MAAM,CAAA;IAGvB,uDAAuD;IACvD,oBAAoB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;IAEpD,yDAAyD;IACzD,oBAAoB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;CACrD;AAID;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,qCAAqC;IACrC,OAAO,EAAE,MAAM,CAAA;IAEf,4CAA4C;IAC5C,UAAU,EAAE,MAAM,CAAA;IAElB,8CAA8C;IAC9C,OAAO,EAAE,MAAM,CAAA;IAEf,2CAA2C;IAC3C,YAAY,EAAE,MAAM,CAAA;CACrB;AAID;;;;;;;GAOG;AACH,MAAM,WAAW,aAAa;IAC5B,8BAA8B;IAC9B,QAAQ,EAAE,MAAM,CAAA;IAEhB,+CAA+C;IAC/C,WAAW,EAAE,MAAM,CAAA;IAEnB,uCAAuC;IACvC,KAAK,CAAC,EAAE,MAAM,CAAA;IAEd,uCAAuC;IACvC,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB;AAID,gDAAgD;AAChD,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,MAAM,CAAA;IACjB,cAAc,EAAE,MAAM,CAAA;IACtB,iBAAiB,EAAE,MAAM,CAAA;IACzB,iBAAiB,EAAE,iBAAiB,GAAG,MAAM,CAAA;IAC7C,eAAe,EAAE,MAAM,CAAA;IACvB,aAAa,EAAE,MAAM,CAAA;IACrB,eAAe,EAAE,WAAW,GAAG,MAAM,GAAG,IAAI,CAAA;IAC5C,0GAA0G;IAC1G,UAAU,CAAC,EAAE,OAAO,CAAA;IACpB,8GAA8G;IAC9G,mBAAmB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CACpC;AAED,2CAA2C;AAC3C,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,YAAY,EAAE,CAAA;IACtB,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;CACf;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,CAAA;IAClB,WAAW,EAAE,MAAM,CAAA;IACnB,QAAQ,EAAE,MAAM,CAAA;IAChB,mEAAmE;IACnE,WAAW,EAAE,MAAM,CAAA;IACnB,UAAU,EAAE,MAAM,CAAA;IAClB,MAAM,EAAE,MAAM,CAAA;IACd,2EAA2E;IAC3E,QAAQ,EAAE,OAAO,CAAA;CAClB;AAED,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,MAAM,CAAA;IACb,QAAQ,EAAE,MAAM,CAAA;IAChB,aAAa,EAAE,OAAO,CAAA;IACtB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,EAAE,MAAM,CAAA;IAClB,MAAM,EAAE,MAAM,CAAA;IACd,YAAY,EAAE,OAAO,CAAA;IACrB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,qCAAqC;AACrC,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,gBAAgB,EAAE,MAAM,CAAA;IACxB,cAAc,EAAE,MAAM,CAAA;IACtB,iBAAiB,EAAE,MAAM,CAAA;IACzB,WAAW,EAAE,WAAW,GAAG,MAAM,CAAA;IACjC,eAAe,EAAE,MAAM,CAAA;IACvB,cAAc,EAAE,MAAM,CAAA;IACtB,qBAAqB,EAAE,MAAM,CAAA;IAC7B,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAC7B,YAAY,EAAE,MAAM,CAAA;IACpB,UAAU,EAAE,MAAM,CAAA;IAClB,aAAa,EAAE,MAAM,CAAA;IACrB,UAAU,EAAE,MAAM,CAAA;IAClB,yFAAyF;IACzF,wBAAwB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACxC,YAAY,EAAE,YAAY,GAAG,MAAM,CAAA;IACnC,iBAAiB,EAAE,MAAM,CAAA;IACzB,eAAe,EAAE,MAAM,CAAA;IACvB,iBAAiB,EAAE,iBAAiB,GAAG,MAAM,CAAA;IAC7C,eAAe,EAAE,WAAW,GAAG,MAAM,GAAG,IAAI,CAAA;IAC5C,sBAAsB,EAAE,MAAM,GAAG,IAAI,CAAA;IACrC,gBAAgB,EAAE,OAAO,GAAG,IAAI,CAAA;IAChC,oBAAoB,EAAE,OAAO,GAAG,IAAI,CAAA;IACpC,oBAAoB,EAAE,OAAO,GAAG,IAAI,CAAA;IACpC,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC/B;;;;;;OAMG;IACH,oBAAoB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACpC,wBAAwB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACxC,eAAe,CAAC,EAAE,OAAO,GAAG,IAAI,CAAA;IAChC;;;;;OAKG;IACH,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACjC;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B;;;;;OAKG;IACH,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAClC,0GAA0G;IAC1G,UAAU,CAAC,EAAE,OAAO,CAAA;IACpB,wFAAwF;IACxF,mBAAmB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACnC;;;OAGG;IACH,cAAc,CAAC,EAAE,mBAAmB,EAAE,GAAG,IAAI,CAAA;IAC7C,KAAK,CAAC,EAAE,SAAS,EAAE,CAAA;IACnB;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,mBAAmB,EAAE,CAAA;CACjC;AAED;;;GAGG;AACH,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAA;IACZ,EAAE,EAAE,OAAO,GAAG,MAAM,GAAG,QAAQ,GAAG,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,CAAA;IACnF,MAAM,EAAE,MAAM,CAAA;IACd,WAAW,EAAE,MAAM,GAAG,KAAK,GAAG,SAAS,GAAG,QAAQ,CAAA;IAClD,IAAI,CAAC,EAAE,MAAM,EAAE,CAAA;IACf,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED,+BAA+B;AAC/B,MAAM,WAAW,YAAY;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB"}

package/dist/governanceCoverage.d.ts

@@ -0,0 +1,82 @@
+/**
+ * Governance-coverage enforcement-input mapping — declared once.
+ *
+ * `POST /api/v1/governance-coverage/snapshot` takes four booleans
+ * (`mcpProxyActive`, `nativeHookActive`, `llmProxyActive`, `hasRulesFile`)
+ * that grade one harness's enforcement tier. Two independent producers
+ * compute them from the same underlying signal — an agent's reported
+ * `facets` — with what used to be the identical mapping written out twice:
+ *
+ *   - `services/control-plane/src/services/harnessGradeSweep.ts`'s
+ *     `deriveEnforcementInputs`, run hourly for every workspace, reading
+ *     `agents.facets` back out of Postgres.
+ *   - `services/sync-daemon/src/syncLoop.ts`'s `runSyncIteration` (step 5b),
+ *     run every sync cycle, reading the `facets` object `collectAgentReport`
+ *     just built in memory for the same cycle's `POST /api/v1/agents/report`
+ *     call.
+ *
+ * Hand-copying this mapping between the two is how it drifted (TD-443):
+ * `syncLoop.ts`'s copy read `report.facets.mcp_tools.length > 0` with no
+ * `Array.isArray` guard, while `harnessGradeSweep.ts`'s copy guarded it —
+ * the exact two-hand-kept-copies failure `secretPatterns.ts`'s module doc
+ * comment describes for credential-value patterns. This module is the fix:
+ * one mapping, one source, both sides import it.
+ *
+ * `EnforcementFacets` is deliberately a NEW, narrower structural type, not a
+ * re-export of either service's own facets type. Neither service's
+ * `AgentFacets` moves here — `services/control-plane/src/lib/agentPosture.ts`'s
+ * and `services/sync-daemon/src/agentReporter.ts`'s each carry a great deal
+ * more shape (skills, sops, budgets, memory, …) than this mapping needs, and
+ * `services/sync-daemon` is publicly mirrored byte-identical into the
+ * open-core `intutic` repo and must not import from `services/control-plane`
+ * (or any enterprise-only package) — so there is no single existing type both
+ * sides could share directly even if one of them exported it. Both services'
+ * `AgentFacets` are structurally assignable to `EnforcementFacets` as it
+ * stands (checked, not just asserted — see this module's tests and the two
+ * call sites), which is all a structural type needs.
+ *
+ * @module
+ */
+/**
+ * The narrow slice of an agent's reported `facets` this mapping reads. Both
+ * `services/control-plane/src/lib/agentPosture.ts#AgentFacets` and
+ * `services/sync-daemon/src/agentReporter.ts`'s local `AgentFacets` are
+ * structurally assignable to this — neither type moves here, this is a new
+ * narrower type they both already satisfy.
+ */
+export interface EnforcementFacets {
+    /** Only `Array.isArray` and `.length` are read — element shape differs
+     *  between the two producers' real facets types, so it is not narrowed
+     *  further here. */
+    mcp_tools?: readonly unknown[];
+    guardrails?: {
+        hook_gate?: boolean;
+        pcas?: boolean;
+    };
+    harness?: {
+        config_synced?: boolean;
+    };
+}
+/**
+ * The four enforcement inputs `POST /api/v1/governance-coverage/snapshot`
+ * (and `resolveEnforcementTier` on the control-plane side) expect.
+ */
+export interface GovernanceCoverageInputs {
+    mcpProxyActive: boolean;
+    nativeHookActive: boolean;
+    llmProxyActive: boolean;
+    hasRulesFile: boolean;
+}
+/**
+ * Map reported facets onto the four enforcement inputs a harness's
+ * enforcement tier is graded from. Pure function — no I/O, testable without
+ * a DB or a running daemon.
+ *
+ * Every field is read with the same strictness the original control-plane
+ * implementation used: `Array.isArray` (not just truthy) for `mcp_tools`,
+ * and `=== true` (not merely truthy) for every guardrail/harness boolean —
+ * a wrong mapping overstates enforcement, which is worse than an empty grid,
+ * so a loosely-truthy value (e.g. `hook_gate: 'yes'`) must not pass.
+ */
+export declare function deriveEnforcementInputs(facets: EnforcementFacets | null | undefined): GovernanceCoverageInputs;
+//# sourceMappingURL=governanceCoverage.d.ts.map

package/dist/governanceCoverage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"governanceCoverage.d.ts","sourceRoot":"","sources":["../src/governanceCoverage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AAEH;;;;;;GAMG;AACH,MAAM,WAAW,iBAAiB;IAChC;;wBAEoB;IACpB,SAAS,CAAC,EAAE,SAAS,OAAO,EAAE,CAAA;IAC9B,UAAU,CAAC,EAAE;QACX,SAAS,CAAC,EAAE,OAAO,CAAA;QACnB,IAAI,CAAC,EAAE,OAAO,CAAA;KACf,CAAA;IACD,OAAO,CAAC,EAAE;QACR,aAAa,CAAC,EAAE,OAAO,CAAA;KACxB,CAAA;CACF;AAED;;;GAGG;AACH,MAAM,WAAW,wBAAwB;IACvC,cAAc,EAAE,OAAO,CAAA;IACvB,gBAAgB,EAAE,OAAO,CAAA;IACzB,cAAc,EAAE,OAAO,CAAA;IACvB,YAAY,EAAE,OAAO,CAAA;CACtB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,iBAAiB,GAAG,IAAI,GAAG,SAAS,GAC3C,wBAAwB,CAiB1B"}

package/dist/governanceCoverage.js

@@ -0,0 +1,72 @@
+"use strict";
+/**
+ * Governance-coverage enforcement-input mapping — declared once.
+ *
+ * `POST /api/v1/governance-coverage/snapshot` takes four booleans
+ * (`mcpProxyActive`, `nativeHookActive`, `llmProxyActive`, `hasRulesFile`)
+ * that grade one harness's enforcement tier. Two independent producers
+ * compute them from the same underlying signal — an agent's reported
+ * `facets` — with what used to be the identical mapping written out twice:
+ *
+ *   - `services/control-plane/src/services/harnessGradeSweep.ts`'s
+ *     `deriveEnforcementInputs`, run hourly for every workspace, reading
+ *     `agents.facets` back out of Postgres.
+ *   - `services/sync-daemon/src/syncLoop.ts`'s `runSyncIteration` (step 5b),
+ *     run every sync cycle, reading the `facets` object `collectAgentReport`
+ *     just built in memory for the same cycle's `POST /api/v1/agents/report`
+ *     call.
+ *
+ * Hand-copying this mapping between the two is how it drifted (TD-443):
+ * `syncLoop.ts`'s copy read `report.facets.mcp_tools.length > 0` with no
+ * `Array.isArray` guard, while `harnessGradeSweep.ts`'s copy guarded it —
+ * the exact two-hand-kept-copies failure `secretPatterns.ts`'s module doc
+ * comment describes for credential-value patterns. This module is the fix:
+ * one mapping, one source, both sides import it.
+ *
+ * `EnforcementFacets` is deliberately a NEW, narrower structural type, not a
+ * re-export of either service's own facets type. Neither service's
+ * `AgentFacets` moves here — `services/control-plane/src/lib/agentPosture.ts`'s
+ * and `services/sync-daemon/src/agentReporter.ts`'s each carry a great deal
+ * more shape (skills, sops, budgets, memory, …) than this mapping needs, and
+ * `services/sync-daemon` is publicly mirrored byte-identical into the
+ * open-core `intutic` repo and must not import from `services/control-plane`
+ * (or any enterprise-only package) — so there is no single existing type both
+ * sides could share directly even if one of them exported it. Both services'
+ * `AgentFacets` are structurally assignable to `EnforcementFacets` as it
+ * stands (checked, not just asserted — see this module's tests and the two
+ * call sites), which is all a structural type needs.
+ *
+ * @module
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.deriveEnforcementInputs = deriveEnforcementInputs;
+/**
+ * Map reported facets onto the four enforcement inputs a harness's
+ * enforcement tier is graded from. Pure function — no I/O, testable without
+ * a DB or a running daemon.
+ *
+ * Every field is read with the same strictness the original control-plane
+ * implementation used: `Array.isArray` (not just truthy) for `mcp_tools`,
+ * and `=== true` (not merely truthy) for every guardrail/harness boolean —
+ * a wrong mapping overstates enforcement, which is worse than an empty grid,
+ * so a loosely-truthy value (e.g. `hook_gate: 'yes'`) must not pass.
+ */
+function deriveEnforcementInputs(facets) {
+    const f = facets ?? {};
+    return {
+        // Tool calls are mediated only if the agent actually has MCP tools
+        // routed through the governance proxy. An empty list means nothing to
+        // mediate.
+        mcpProxyActive: Array.isArray(f.mcp_tools) && f.mcp_tools.length > 0,
+        // The daemon writes the hook gate for every harness it supports, so this
+        // is a genuine "native hooks installed" signal rather than a constant.
+        nativeHookActive: f.guardrails?.hook_gate === true,
+        // pcas is set from the presence of a control-plane URL, i.e. LLM traffic
+        // is being proxied through governance rather than going direct.
+        llmProxyActive: f.guardrails?.pcas === true,
+        // A synced harness config is the rules file being in place and
+        // undrifted.
+        hasRulesFile: f.harness?.config_synced === true,
+    };
+}
+//# sourceMappingURL=governanceCoverage.js.map

package/dist/governanceCoverage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"governanceCoverage.js","sourceRoot":"","sources":["../src/governanceCoverage.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;;AA6CH,0DAmBC;AA9BD;;;;;;;;;;GAUG;AACH,SAAgB,uBAAuB,CACrC,MAA4C;IAE5C,MAAM,CAAC,GAAG,MAAM,IAAI,EAAE,CAAA;IACtB,OAAO;QACL,mEAAmE;QACnE,sEAAsE;QACtE,WAAW;QACX,cAAc,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC;QACpE,yEAAyE;QACzE,uEAAuE;QACvE,gBAAgB,EAAE,CAAC,CAAC,UAAU,EAAE,SAAS,KAAK,IAAI;QAClD,yEAAyE;QACzE,gEAAgE;QAChE,cAAc,EAAE,CAAC,CAAC,UAAU,EAAE,IAAI,KAAK,IAAI;QAC3C,+DAA+D;QAC/D,aAAa;QACb,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,aAAa,KAAK,IAAI;KAChD,CAAA;AACH,CAAC"}

package/dist/guardrailIr.d.ts

@@ -0,0 +1,287 @@
+/**
+ * Guardrail IR — the only thing a policy compiler may say (LLD #71).
+ *
+ * An LLM reading corporate policy prose is allowed to propose exactly two
+ * things: a verbatim quote anchored to a passage it was shown, and a clause in
+ * this closed IR. Everything after that is deterministic code: the validator
+ * (`services/control-plane/src/lib/guardrailValidator.ts`) checks the quote by
+ * containment and the IR against the grammar the proxy and the harness gates
+ * already enforce, the renderers in `./guardrailRender.ts` turn it into the
+ * exact bytes those enforcers read, and cross-language parity fixtures prove
+ * the renderers and the Rust / gate-script parsers agree.
+ *
+ * The grammar is a subset of what a human may author, on purpose:
+ *
+ * - `hook_rule` — a per-call condition on a tool and its arguments, enforced
+ *   by the sync daemon's emitted harness gate scripts. Regexes are never model
+ *   output: the tool pattern is rendered from literal tool tokens and the
+ *   argument pattern from literal substrings (`argContains` / `argNotContains`),
+ *   escaped and composed as lookaheads — the dialect JS `RegExp` and Python
+ *   `re` share, so the bash gates' `python3` clause and the JS gates agree.
+ * - the six union-safe SOP front-matter keys the Rust proxy enforces
+ *   (`deny_tools`, `review_before`, `requires_before`, `forbid_after`,
+ *   `max_calls`, `forbid_with`). `~>` adjacency is not offered; `->` only.
+ * - `wasm_predicate` — the existing closed predicate DSL, verdict 3 (reask)
+ *   only. A generated rule can never originate a block.
+ * - `none` — "this passage contains no enforceable rule", so the corpus can
+ *   measure over-generation.
+ *
+ * Deliberately absent: the three allowlist keys (`allow_harnesses`,
+ * `plan_steps`, `scope_paths` — intersection-composed, empty-means-unrestricted;
+ * a generated allowlist can silently deny everything), raw regexes, raw
+ * AssemblyScript, `BLOCK:` titles, DLP patterns, SSL graphs, verdict 1, OR.
+ *
+ * Structural impossibilities match the Rust parser's own refusals: a token with
+ * whitespace (a shell command) cannot exist, a `forbid_with` taint is an enum,
+ * and an ordering rule is one pair.
+ *
+ * @module
+ */
+import { z } from 'zod';
+/**
+ * The eight `action:` tokens the proxy's classifier synthesises from tool
+ * calls. Moved here from `services/control-plane/src/services/learnedHoldService.ts`
+ * so the IR, the validator and the hold miner read one list; that file
+ * re-exports it. A token outside this set and outside the observed tool names
+ * compiles into a control that can never fire.
+ */
+export declare const ACTION_TOKENS: readonly ["action:deploy", "action:publish", "action:release", "action:db_write", "action:secret_read", "action:http_post", "action:pii_export", "action:run_tests"];
+export type ActionToken = (typeof ACTION_TOKENS)[number];
+export declare function isActionToken(value: string): value is ActionToken;
+/**
+ * A tool name the harness could plausibly call: `Bash`, `run_command`,
+ * `mcp__github__create_issue`, `developer__shell`. No whitespace, so a shell
+ * command can never be mistaken for a tool (sops.rs `parse_ordering` refuses
+ * the same shape for the same reason). `.`, `:` and `-` are allowed because
+ * namespaced harness tools carry them.
+ */
+export declare const TOOL_TOKEN_RE: RegExp;
+export declare const MAX_HOOK_TOOLS = 8;
+export declare const MAX_LIST_TOKENS = 16;
+export declare const MAX_LITERALS = 4;
+export declare const MAX_LITERAL_CHARS = 64;
+export declare const MAX_ROLES = 8;
+export declare const MAX_TITLE_CHARS = 80;
+export declare const MAX_RATIONALE_CHARS = 480;
+export declare const MAX_CALLS_LIMIT = 1000;
+declare const HookRuleSchema: z.ZodObject<{
+    kind: z.ZodLiteral<"hook_rule">;
+    title: z.ZodString;
+    tools: z.ZodArray<z.ZodEffects<z.ZodString, string, string>, "many">;
+    argContains: z.ZodOptional<z.ZodArray<z.ZodEffects<z.ZodString, string, string>, "many">>;
+    argNotContains: z.ZodOptional<z.ZodArray<z.ZodEffects<z.ZodString, string, string>, "many">>;
+    roles: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+}, "strict", z.ZodTypeAny, {
+    kind: "hook_rule";
+    title: string;
+    tools: string[];
+    argContains?: string[] | undefined;
+    argNotContains?: string[] | undefined;
+    roles?: string[] | undefined;
+}, {
+    kind: "hook_rule";
+    title: string;
+    tools: string[];
+    argContains?: string[] | undefined;
+    argNotContains?: string[] | undefined;
+    roles?: string[] | undefined;
+}>;
+declare const WasmPredicateSchema: z.ZodObject<{
+    kind: z.ZodLiteral<"wasm_predicate">;
+    title: z.ZodString;
+    rationale: z.ZodString;
+    predicate: z.ZodUnknown;
+    verdict: z.ZodLiteral<3>;
+    roles: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+}, "strict", z.ZodTypeAny, {
+    kind: "wasm_predicate";
+    title: string;
+    rationale: string;
+    verdict: 3;
+    roles?: string[] | undefined;
+    predicate?: unknown;
+}, {
+    kind: "wasm_predicate";
+    title: string;
+    rationale: string;
+    verdict: 3;
+    roles?: string[] | undefined;
+    predicate?: unknown;
+}>;
+export declare const GuardrailIrSchema: z.ZodDiscriminatedUnion<"kind", [z.ZodObject<{
+    kind: z.ZodLiteral<"hook_rule">;
+    title: z.ZodString;
+    tools: z.ZodArray<z.ZodEffects<z.ZodString, string, string>, "many">;
+    argContains: z.ZodOptional<z.ZodArray<z.ZodEffects<z.ZodString, string, string>, "many">>;
+    argNotContains: z.ZodOptional<z.ZodArray<z.ZodEffects<z.ZodString, string, string>, "many">>;
+    roles: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+}, "strict", z.ZodTypeAny, {
+    kind: "hook_rule";
+    title: string;
+    tools: string[];
+    argContains?: string[] | undefined;
+    argNotContains?: string[] | undefined;
+    roles?: string[] | undefined;
+}, {
+    kind: "hook_rule";
+    title: string;
+    tools: string[];
+    argContains?: string[] | undefined;
+    argNotContains?: string[] | undefined;
+    roles?: string[] | undefined;
+}>, z.ZodObject<{
+    kind: z.ZodLiteral<"deny_tools">;
+    tools: z.ZodArray<z.ZodEffects<z.ZodString, string, string>, "many">;
+    roles: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+}, "strict", z.ZodTypeAny, {
+    kind: "deny_tools";
+    tools: string[];
+    roles?: string[] | undefined;
+}, {
+    kind: "deny_tools";
+    tools: string[];
+    roles?: string[] | undefined;
+}>, z.ZodObject<{
+    kind: z.ZodLiteral<"review_before">;
+    tokens: z.ZodArray<z.ZodEffects<z.ZodString, string, string>, "many">;
+    roles: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+}, "strict", z.ZodTypeAny, {
+    kind: "review_before";
+    tokens: string[];
+    roles?: string[] | undefined;
+}, {
+    kind: "review_before";
+    tokens: string[];
+    roles?: string[] | undefined;
+}>, z.ZodObject<{
+    first: z.ZodEffects<z.ZodString, string, string>;
+    then: z.ZodEffects<z.ZodString, string, string>;
+    roles: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    kind: z.ZodLiteral<"requires_before">;
+}, "strict", z.ZodTypeAny, {
+    kind: "requires_before";
+    first: string;
+    then: string;
+    roles?: string[] | undefined;
+}, {
+    kind: "requires_before";
+    first: string;
+    then: string;
+    roles?: string[] | undefined;
+}>, z.ZodObject<{
+    first: z.ZodEffects<z.ZodString, string, string>;
+    then: z.ZodEffects<z.ZodString, string, string>;
+    roles: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    kind: z.ZodLiteral<"forbid_after">;
+}, "strict", z.ZodTypeAny, {
+    kind: "forbid_after";
+    first: string;
+    then: string;
+    roles?: string[] | undefined;
+}, {
+    kind: "forbid_after";
+    first: string;
+    then: string;
+    roles?: string[] | undefined;
+}>, z.ZodObject<{
+    kind: z.ZodLiteral<"max_calls">;
+    token: z.ZodEffects<z.ZodString, string, string>;
+    limit: z.ZodNumber;
+    roles: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+}, "strict", z.ZodTypeAny, {
+    token: string;
+    kind: "max_calls";
+    limit: number;
+    roles?: string[] | undefined;
+}, {
+    token: string;
+    kind: "max_calls";
+    limit: number;
+    roles?: string[] | undefined;
+}>, z.ZodObject<{
+    kind: z.ZodLiteral<"forbid_with">;
+    taint: z.ZodEnum<["secrets()", "pii()"]>;
+    token: z.ZodEffects<z.ZodString, string, string>;
+    roles: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+}, "strict", z.ZodTypeAny, {
+    token: string;
+    kind: "forbid_with";
+    taint: "secrets()" | "pii()";
+    roles?: string[] | undefined;
+}, {
+    token: string;
+    kind: "forbid_with";
+    taint: "secrets()" | "pii()";
+    roles?: string[] | undefined;
+}>, z.ZodObject<{
+    kind: z.ZodLiteral<"wasm_predicate">;
+    title: z.ZodString;
+    rationale: z.ZodString;
+    predicate: z.ZodUnknown;
+    verdict: z.ZodLiteral<3>;
+    roles: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+}, "strict", z.ZodTypeAny, {
+    kind: "wasm_predicate";
+    title: string;
+    rationale: string;
+    verdict: 3;
+    roles?: string[] | undefined;
+    predicate?: unknown;
+}, {
+    kind: "wasm_predicate";
+    title: string;
+    rationale: string;
+    verdict: 3;
+    roles?: string[] | undefined;
+    predicate?: unknown;
+}>, z.ZodObject<{
+    kind: z.ZodLiteral<"none">;
+    reason: z.ZodString;
+}, "strict", z.ZodTypeAny, {
+    reason: string;
+    kind: "none";
+}, {
+    reason: string;
+    kind: "none";
+}>]>;
+export type GuardrailIr = z.infer<typeof GuardrailIrSchema>;
+export type HookRuleIr = z.infer<typeof HookRuleSchema>;
+export type WasmPredicateIr = z.infer<typeof WasmPredicateSchema>;
+export type FrontMatterIr = Extract<GuardrailIr, {
+    kind: 'deny_tools' | 'review_before' | 'requires_before' | 'forbid_after' | 'max_calls' | 'forbid_with';
+}>;
+export type IrKind = GuardrailIr['kind'];
+/** Every kind, in one place, for the lint gate (`check-guardrail-ir-keys.js`). */
+export declare const IR_KINDS: readonly ["hook_rule", "deny_tools", "review_before", "requires_before", "forbid_after", "max_calls", "forbid_with", "wasm_predicate", "none"];
+/** The kinds that render to a SOP front-matter key the Rust proxy reads. */
+export declare const FRONT_MATTER_KINDS: readonly ["deny_tools", "review_before", "requires_before", "forbid_after", "max_calls", "forbid_with"];
+export declare function isFrontMatterIr(ir: GuardrailIr): ir is FrontMatterIr;
+export type IrValidation = {
+    ok: true;
+    ir: GuardrailIr;
+} | {
+    ok: false;
+    reason: string;
+};
+/**
+ * Parse an untrusted value into the IR, or say why it is not one. Never
+ * throws. This — not `GuardrailIrSchema.parse` — is the entry point: the
+ * shape parse cannot express "the two ordering tokens differ" or "the wasm
+ * predicate is in the closed DSL", so both are checked here.
+ */
+export declare function validateGuardrailIr(value: unknown): IrValidation;
+/**
+ * The identity of a control, as a stable string.
+ *
+ * Two proposals that name the same control from the same passage are one
+ * proposal — `policy_clauses` is unique on `(passage_hash, ir_canonical)` —
+ * so the title and rationale, which change nothing about what is enforced,
+ * are not part of it. Lists are sorted and deduplicated; roles are lower-case
+ * (the proxy lowercases them too); tool tokens keep their case (the proxy
+ * matches `Bash` case-sensitively).
+ */
+export declare function canonicalizeIr(ir: GuardrailIr): string;
+/** Every token (tool or action) an IR names — the set a validator must find in the cited passage. */
+export declare function irTokens(ir: GuardrailIr): string[];
+export {};
+//# sourceMappingURL=guardrailIr.d.ts.map

package/dist/guardrailIr.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"guardrailIr.d.ts","sourceRoot":"","sources":["../src/guardrailIr.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAGvB;;;;;;GAMG;AACH,eAAO,MAAM,aAAa,sKAShB,CAAA;AAEV,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,aAAa,CAAC,CAAC,MAAM,CAAC,CAAA;AAExD,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,WAAW,CAEjE;AAED;;;;;;GAMG;AACH,eAAO,MAAM,aAAa,QAAoC,CAAA;AAE9D,eAAO,MAAM,cAAc,IAAI,CAAA;AAC/B,eAAO,MAAM,eAAe,KAAK,CAAA;AACjC,eAAO,MAAM,YAAY,IAAI,CAAA;AAC7B,eAAO,MAAM,iBAAiB,KAAK,CAAA;AACnC,eAAO,MAAM,SAAS,IAAI,CAAA;AAC1B,eAAO,MAAM,eAAe,KAAK,CAAA;AACjC,eAAO,MAAM,mBAAmB,MAAM,CAAA;AACtC,eAAO,MAAM,eAAe,OAAO,CAAA;AAgCnC,QAAA,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;EAST,CAAA;AAyCX,QAAA,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;EASd,CAAA;AAIX,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAU5B,CAAA;AAEF,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAA;AAC3D,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAA;AACvD,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAA;AACjE,MAAM,MAAM,aAAa,GAAG,OAAO,CAAC,WAAW,EAAE;IAAE,IAAI,EAAE,YAAY,GAAG,eAAe,GAAG,iBAAiB,GAAG,cAAc,GAAG,WAAW,GAAG,aAAa,CAAA;CAAE,CAAC,CAAA;AAC7J,MAAM,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,CAAA;AAExC,kFAAkF;AAClF,eAAO,MAAM,QAAQ,gJAUX,CAAA;AAEV,4EAA4E;AAC5E,eAAO,MAAM,kBAAkB,yGAOrB,CAAA;AAEV,wBAAgB,eAAe,CAAC,EAAE,EAAE,WAAW,GAAG,EAAE,IAAI,aAAa,CAEpE;AAED,MAAM,MAAM,YAAY,GAAG;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,EAAE,EAAE,WAAW,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAA;AAExF;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,YAAY,CAmBhE;AAMD;;;;;;;;;GASG;AACH,wBAAgB,cAAc,CAAC,EAAE,EAAE,WAAW,GAAG,MAAM,CAmCtD;AASD,qGAAqG;AACrG,wBAAgB,QAAQ,CAAC,EAAE,EAAE,WAAW,GAAG,MAAM,EAAE,CAiBlD"}