@intutic/shared-types 2.1.0 → 2.3.0

package/dist/workspaceSettings.d.ts

@@ -6,12 +6,23 @@
  * proxy processes and hook scripts pick up changes without restarting.
  *
  * WS-5 — Q1 (fail behavior), Q2 (proxy mode), Q3 (bypass enforcement)
- * TD-151, TD-153, TD-154
  *
  * @module
  */
 import type { McpProxyFailBehavior, McpProxyMode, BypassEnforcementTier } from './enums.js';
+import type { SsoGroupPolicy } from './attenuation.js';
+import type { McpBudgetSettings } from './mcpBudgets.js';
+import type { PiiDetectorSettings } from './piiDetectors.js';
 export type { McpProxyFailBehavior, McpProxyMode, BypassEnforcementTier };
+/**
+ * The MCP governance proxy's anomaly detectors, by id. The proxy's own
+ * `DETECTOR_BASE_DISPOSITION` (packages/mcp-proxy/src/anomaly/index.ts) is
+ * typed against this list, so a detector added there without being added
+ * here fails to compile, and `mcpAnomalyOverrides` cannot name one that does
+ * not exist.
+ */
+export declare const MCP_ANOMALY_DETECTOR_IDS: readonly ["consecutive_repeat", "ping_pong_cycle", "landmark_cycle", "tool_diversity_collapse", "code_as_action", "tool_poisoning", "dlp_escalation"];
+export type McpAnomalyDetectorId = (typeof MCP_ANOMALY_DETECTOR_IDS)[number];
 /**
  * Per-workspace MCP governance settings.
  *
@@ -49,7 +60,7 @@ export interface WorkspaceSettings {
      * `null` disables the gate. Defaults to 30 days. SCIM provisioning was removed,
      * so nothing reconciles membership against the identity provider: without this,
      * removing a developer at the IdP stops their dashboard login but not their
-     * agents, because API-key auth never consults SSO (TD-218). Setting it makes IdP
+     * agents, because API-key auth never consults SSO. Setting it makes IdP
      * removal expire the keys on its own.
      *
      * Opt-in on purpose — a CI key belongs to a member who may never log in
@@ -63,6 +74,24 @@ export interface WorkspaceSettings {
      * recorded SSO login yet. Cleared when the gate is turned off.
      */
     ssoKeyGateEnabledAt: string | null;
+    /**
+     * Tools only members of named identity-provider groups may run, and tools
+     * only an on-behalf-of token may call (`SsoGroupPolicySchema`). Absent: no
+     * group restriction; `null` in a settings write clears it, and is never
+     * stored. Snake-case because the gates and the policy responses have always
+     * read it under this key. Every gate decides with `evaluateSsoGroupClearance`;
+     * see `ssoGroupClearance.ts`.
+     */
+    sso_group_policy?: SsoGroupPolicy | null;
+    /**
+     * The action (`off`, `redact`, `block`) of each PII detector this workspace
+     * governs centrally (`PiiDetectorSettingsSchema`). The LLM proxy and the
+     * MCP proxy apply it to the workspace's traffic as the baseline; a
+     * machine's own detector config may only tighten it (`effectivePiiActions`).
+     * Absent, or a detector left out: each machine's own config applies. `null`
+     * in a settings write clears it, and is never stored.
+     */
+    piiDetectors?: PiiDetectorSettings | null;
     /**
      * Bring-your-own-cloud trace storage. Optional — absent means Intutic-managed
      * storage. Previously accessed only through `as unknown as` casts; typed here
@@ -80,7 +109,7 @@ export interface WorkspaceSettings {
      *
      * Applies to 8/19 harnesses (those with MCP proxy injection — 9 config
      * paths across 8 harnesses, see sync-daemon mcpAutoWrite.ts).
-     * See TD-151 for the harnesses this does not reach.
+     * The other harnesses have no MCP proxy to fail, so this does not reach them.
      */
     mcpProxyFailBehavior: McpProxyFailBehavior;
     /**
@@ -90,7 +119,7 @@ export interface WorkspaceSettings {
      *   MCP connection. Policy is fetched from control plane at startup with a
      *   60s in-process TTL.
      * - `'daemon'` (active): a long-lived proxy daemon shares its policy cache
-     *   across all MCP sessions. Requires macOS notarization. See TD-153.
+     *   across all MCP sessions. Requires macOS notarization.
      *
      * The sync-daemon writes this value through verbatim to
      * ~/.intutic/env/runtime.env (lib/runtimeEnv.ts) and the MCP proxy honours
@@ -108,7 +137,7 @@ export interface WorkspaceSettings {
      *   governance incident.
      * - `'immutable'`  (opt-in, macOS only): after writing, sets `chflags uchg`
      *   on the config file. Direct edits fail immediately. The flag is cleared
-     *   before the next sync write. See TD-154 for UX risk.
+     *   before the next sync write.
      * - `'alert-only'`: drift triggers a governance incident but does NOT rewrite
      *   the config. For teams that want audit logs without enforced reversion.
      */
@@ -229,9 +258,10 @@ export interface WorkspaceSettings {
      * Whether an APPROVED `review_before` decision may let the *matching retried
      * call* through the local gate, instead of only recording the decision.
      *
-     * Off (undefined/false) by default. `POST /api/v1/decisions` and its Slack
-     * approve button have always recorded a decision — this flag governs a
-     * separate, additive effect: when true, approving a decision tied to a
+     * Off (undefined/false) by default. Approving a decision — `intutic decision
+     * approve`, `POST /api/v1/decisions/:id/review` or the Slack card, one code
+     * path — always records it; this flag governs a separate, additive effect:
+     * when true, approving a decision tied to a
      * `review_before` hold writes a short-lived, exact-match bypass entry
      * (workspace + SOP rule + normalised tool name + hashed target/command) to
      * Valkey, synced to `.intutic/hooks/approved-bypasses.jsonl` and consulted by
@@ -248,9 +278,22 @@ export interface WorkspaceSettings {
      * exemption.
      */
     reviewHoldBypassTtlMinutes?: number;
+    /**
+     * Held loop runs (`review_before:` on a whole run, reviewed with `intutic
+     * loop review`). With `requireDistinctApprover` true, the member who started
+     * a run cannot approve or reject it; another OWNER, ADMIN or EM must. Off by
+     * default: the person who ran the agent is usually best placed to judge its
+     * change manifest, and a small team must not be locked out of its own
+     * deploys. Break-glass requests always need a second person, whatever this
+     * says. Stored under the snake_case key the reader
+     * (`requiresDistinctApprover` in loopGovernanceService.ts) uses.
+     */
+    loop_review?: {
+        requireDistinctApprover?: boolean;
+    };
     /**
      * Central egress-enforcement posture, distributed to this workspace's proxies
-     * (LLD #63 §4). One of `'off'` | `'monitor'` | `'enforce'`. When set, the
+     * One of `'off'` | `'monitor'` | `'enforce'`. When set, the
      * sync-daemon writes it to `.intutic/hooks/egress-policy.json` and the proxy
      * hot-reloads it, so an admin sets the mode once here rather than in each
      * developer's local config. Undefined leaves the proxy on its local config /
@@ -291,15 +334,65 @@ export interface WorkspaceSettings {
      * start refusing every MCP server because a default changed.
      */
     mcpAllowedServers?: string[];
+    /**
+     * What the MCP governance proxy does with a server the workspace has not
+     * approved in its MCP server registry. `allow` (the default, and what an
+     * absent value means) lets every server through that is not explicitly
+     * blocked; `deny` refuses every server until an OWNER or ADMIN approves it,
+     * and a server the proxy has not seen before lands in the registry as a
+     * candidate awaiting that decision. A blocked server is refused under both.
+     * Delivered to the proxy with the registry decisions (`mcpRegistry` on
+     * `GET /api/v1/sop/rules` and `GET /api/v1/policy/resolve`).
+     */
+    mcpDefaultPolicy?: 'allow' | 'deny';
+    /**
+     * What the MCP governance proxy does when a prompt-injection pattern
+     * matches: `warn` reports it and lets the call (or result) through, `block`
+     * refuses the call or withholds the result. Delivered with the MCP policy
+     * and wins over the proxy's local `INTUTIC_MCP_INJECTION_ACTION`; absent
+     * leaves the local setting (default `warn`) in force.
+     */
+    mcpInjectionAction?: 'warn' | 'block';
+    /**
+     * The MCP proxy's anomaly detectors: `enforce` lets each act up to its own
+     * ceiling, `warn` reports without blocking, `off` skips them. Delivered with
+     * the MCP policy and wins over `INTUTIC_MCP_ANOMALY_MODE`; absent leaves the
+     * local setting (default `enforce`) in force.
+     */
+    mcpAnomalyMode?: 'enforce' | 'warn' | 'off';
+    /**
+     * Per-detector overrides for the MCP proxy's anomaly detectors, by
+     * detector id. A value can only demote a detector below its own ceiling,
+     * never promote it. Merged per detector over `INTUTIC_MCP_ANOMALY_OVERRIDES`,
+     * this setting winning.
+     */
+    mcpAnomalyOverrides?: Partial<Record<McpAnomalyDetectorId, 'steer' | 'reask' | 'kill' | 'off'>>;
     /**
      * Workspace-supplied prompt-injection regex sources for the MCP governance
-     * proxy (TD-436), on top of its hardcoded floor. Delivered with the rest of
+     * proxy, on top of its hardcoded floor. Delivered with the rest of
      * the MCP curation; the proxy compiles them and drops one that does not.
      * Absent or empty means the floor alone.
      */
     mcpInjectionPatterns?: string[];
     /**
-     * Negotiated per-token rates, by model id, in USD per 1k tokens (TD-434).
+     * Limits on MCP tool calls per hour or per day — per server, per tool, per
+     * member, or per member on one server (`mcpBudgets.ts`). Delivered with the
+     * MCP policy; the MCP proxy counts calls in Valkey and refuses one that
+     * would go over a limit, naming the budget and when it resets. Absent means
+     * no limits.
+     */
+    mcpBudgets?: McpBudgetSettings;
+    /**
+     * What happens when a server's tool set changes and the change scores high
+     * risk (`mcpToolRisk.ts`). `notify` (the default, and what an absent value
+     * means) records the change and sends `mcp.server.tool_change_risk`;
+     * `hold` also returns the server to the approval queue, where the MCP proxy
+     * refuses it under either default policy until an owner or admin approves
+     * it again.
+     */
+    mcpHighRiskToolChange?: 'notify' | 'hold';
+    /**
+     * Negotiated per-token rates, by model id, in USD per 1k tokens.
      * The `model_pricing` table is LIST price; a workspace paying below list
      * had every savings figure skewed by the difference. Where a model is
      * listed here it is priced at these rates in the routing shadow-savings
@@ -311,7 +404,7 @@ export interface WorkspaceSettings {
         outputCostPer1k: number;
     }>;
     /**
-     * Whether agents in this workspace must run inside a sandbox (LLD #63 §6).
+     * Whether agents in this workspace must run inside a sandbox.
      * - `'off'` (default): `intutic exec` runs on the host as before.
      * - `'warn'`: an un-sandboxed `intutic exec` runs but prints a warning.
      * - `'require'`: `intutic exec` refuses to run un-sandboxed and tells the
@@ -358,7 +451,7 @@ export interface WorkspaceSettings {
         categories?: string[];
     };
     /**
-     * Server-side trajectory monitoring mode (LLD #52, parallel monitoring).
+     * Server-side trajectory monitoring mode (parallel monitoring).
      * Read by `services/control-plane/src/services/trajectoryAnalysisService.ts`'s
      * `getWorkspaceMonitorMode` on every `/trajectory/analyze` call:
      *
@@ -429,7 +522,7 @@ export interface WorkspaceSettings {
      */
     decisionsLogEnabled?: boolean;
     /**
-     * Opt-in LLM-based semantic analysis of skill files (Phase S5, TD-357),
+     * Opt-in LLM-based semantic analysis of skill files (Phase S5),
      * on top of the always-on deterministic `scanSkillContent` pattern scan.
      * When true:
      * - The CLI (`intutic skill audit`) attaches the FULL content of a
@@ -451,8 +544,8 @@ export interface WorkspaceSettings {
      */
     semanticSkillAnalysisEnabled?: boolean;
     /**
-     * Opt-in VirusTotal hash lookup for skill-bundled SCRIPTS (Phase S4,
-     * TD-361). When true, and only when a `connector_credentials` row for
+     * Opt-in VirusTotal hash lookup for skill-bundled SCRIPTS (Phase S4).
+     * When true, and only when a `connector_credentials` row for
      * provider `'virustotal'` is also stored, `POST .../skills/report`
      * fire-and-forget enqueues any reported script sha256 hashes for a
      * `GET /api/v3/files/{sha256}` lookup — never an upload, never SKILL.md
@@ -463,10 +556,26 @@ export interface WorkspaceSettings {
      *
      * Distinct from, and narrower than, this product's standing decline of a
      * global MCP-server-reputation/VirusTotal integration — see
-     * `apps/docs/guide/mcp-governance.md` and `docs/TECH_DEBT.md` TD-359 for
+     * `apps/docs/guide/mcp-governance.md` for
      * that separate decision, which this setting does not reverse.
      */
     virusTotalSkillLookupEnabled?: boolean;
+    /**
+     * Upload the content of harness config files, not only their hashes.
+     *
+     * `intutic connect` captures each recorded harness's rules file (the list is
+     * `HARNESS_FILES` in `@intutic/sync-daemon`). Off, it uploads the file's
+     * path, the SHA-256 of its redacted text, its size, the harness and the
+     * time: the config history records what changed and when, and its hash
+     * chain stays verifiable. On, it also uploads the text, with credential-
+     * shaped strings replaced by `[redacted]` before it leaves the machine,
+     * which is what config diffs and SkillOpt's config-edit suggestions need.
+     *
+     * Off by default: file content leaving developer machines is a privacy
+     * choice a workspace makes, not one a default makes for it. The control
+     * plane refuses a body sent while this is off.
+     */
+    configBodyUpload?: boolean;
     /**
      * Fraction of ingested traces that receive the two heavier, LLM-adjacent
      * security probes — `traceIngestClassifier.classifyTraceAtIngest`'s

package/dist/workspaceSettings.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"workspaceSettings.d.ts","sourceRoot":"","sources":["../src/workspaceSettings.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,oBAAoB,EAAE,YAAY,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAA;AAG3F,YAAY,EAAE,oBAAoB,EAAE,YAAY,EAAE,qBAAqB,EAAE,CAAA;AAEzE;;;;;;GAMG;AACH,0FAA0F;AAC1F,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,KAAK,GAAG,IAAI,GAAG,UAAU,CAAA;IACnC,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,IAAI,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAA;CAC5B;AAED,MAAM,WAAW,iBAAiB;IAChC;;;;;;;;;OASG;IACH,sBAAsB,EAAE,OAAO,CAAA;IAE/B;;;;;;;;;;;OAWG;IACH,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAA;IAEhC;;;;;OAKG;IACH,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAA;IAElC;;;;OAIG;IACH,WAAW,CAAC,EAAE,iBAAiB,CAAA;IAE/B;;;;;;;;;;;;OAYG;IACH,oBAAoB,EAAE,oBAAoB,CAAA;IAE1C;;;;;;;;;;;;;;OAcG;IACH,YAAY,EAAE,YAAY,CAAA;IAE1B;;;;;;;;;;;;OAYG;IACH,qBAAqB,EAAE,qBAAqB,CAAA;IAC5C,yDAAyD;IACzD,YAAY,CAAC,EAAE;QACb,iBAAiB,CAAC,EAAE,OAAO,CAAA;QAC3B,uBAAuB,CAAC,EAAE,OAAO,CAAA;QACjC,0BAA0B,CAAC,EAAE,OAAO,CAAA;QACpC,mEAAmE;QACnE,qBAAqB,CAAC,EAAE,OAAO,CAAA;QAC/B;;;;;;;;WAQG;QACH,qBAAqB,CAAC,EAAE,OAAO,CAAA;QAC/B;;;;;;;;WAQG;QACH,sBAAsB,CAAC,EAAE,OAAO,CAAA;QAChC;;;;;WAKG;QACH,sBAAsB,CAAC,EAAE,OAAO,CAAA;QAChC;;;;;;;;;;;;;;;;;;;WAmBG;QACH,wBAAwB,CAAC,EAAE,OAAO,CAAA;KACnC,CAAA;IAGD;;;;OAIG;IACH,2BAA2B,CAAC,EAAE,OAAO,CAAA;IAErC;;;;;;;;;;;;;;;;;;OAkBG;IACH,wBAAwB,CAAC,EAAE,OAAO,CAAA;IAElC;;OAEG;IACH,cAAc,CAAC,EAAE;QACf,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;QAClB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAA;QACrB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;QACjB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAA;KACrB,CAAA;IAED;;;;;;;;;;OAUG;IACH,eAAe,CAAC,EAAE;QAChB,OAAO,CAAC,EAAE,OAAO,CAAA;QACjB,2DAA2D;QAC3D,aAAa,CAAC,EAAE,OAAO,CAAA;QACvB,kEAAkE;QAClE,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAA;QAC5B,kFAAkF;QAClF,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;QAC1C,kBAAkB,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,OAAO,CAAA;KAChD,CAAA;IAED;;;;;;;;;;;;;OAaG;IACH,uBAAuB,CAAC,EAAE,OAAO,CAAA;IAEjC;;;;;;OAMG;IACH,0BAA0B,CAAC,EAAE,MAAM,CAAA;IAEnC;;;;;;;;OAQG;IACH,UAAU,CAAC,EAAE,KAAK,GAAG,SAAS,GAAG,SAAS,CAAA;IAE1C;;;;;OAKG;IACH,WAAW,CAAC,EAAE,MAAM,EAAE,CAAA;IAEtB;;;;;;;;;OASG;IACH,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;IAExB;;;;;;;;;;;;;OAaG;IACH,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAA;IAE5B;;;;;OAKG;IACH,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAA;IAE/B;;;;;;;OAOG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,cAAc,EAAE,MAAM,CAAC;QAAC,eAAe,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAErF;;;;;;;;;;;;;OAaG;IACH,kBAAkB,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,SAAS,CAAA;IAE/C;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACH,mBAAmB,CAAC,EAAE;QACpB,OAAO,CAAC,EAAE,OAAO,CAAA;QACjB,UAAU,CAAC,EAAE,MAAM,CAAA;QACnB,aAAa,CAAC,EAAE,MAAM,CAAA;QACtB,MAAM,CAAC,EAAE,QAAQ,GAAG,MAAM,CAAA;QAC1B,yEAAyE;QACzE,UAAU,CAAC,EAAE,MAAM,EAAE,CAAA;KACtB,CAAA;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;;OA2BG;IACH,uBAAuB,CAAC,EAAE,QAAQ,GAAG,SAAS,GAAG,KAAK,CAAA;IAEtD;;;;;;;;;;OAUG;IACH,eAAe,CAAC,EAAE,MAAM,EAAE,CAAA;IAE1B;;;;;;OAMG;IACH,2BAA2B,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAEpD;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,mBAAmB,CAAC,EAAE,OAAO,CAAA;IAE7B;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,4BAA4B,CAAC,EAAE,OAAO,CAAA;IAEtC;;;;;;;;;;;;;;;OAeG;IACH,4BAA4B,CAAC,EAAE,OAAO,CAAA;IAEtC;;;;;;;;;;;;;;;;OAgBG;IACH,uBAAuB,CAAC,EAAE,MAAM,CAAA;IAEhC;;;;;;;;;;;;;;;;;;OAkBG;IACH,6BAA6B,EAAE,OAAO,CAAA;CACvC;AAED;;;;GAIG;AACH,eAAO,MAAM,0BAA0B,EAAE,iBAmFxC,CAAA;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,OAAO,CAAC,iBAAiB,CAAC,GAAG,IAAI,GAAG,SAAS,GACpD,iBAAiB,CAKnB;AAED;;;;;;;;GAQG;AACH,wBAAgB,8BAA8B,CAAC,QAAQ,EAAE,iBAAiB,GAAG,MAAM,CAIlF"}
+{"version":3,"file":"workspaceSettings.d.ts","sourceRoot":"","sources":["../src/workspaceSettings.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,oBAAoB,EAAE,YAAY,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAA;AAC3F,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAA;AACtD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAA;AACxD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAA;AAG5D,YAAY,EAAE,oBAAoB,EAAE,YAAY,EAAE,qBAAqB,EAAE,CAAA;AAEzE;;;;;;GAMG;AACH,eAAO,MAAM,wBAAwB,uJAQ3B,CAAA;AACV,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,wBAAwB,CAAC,CAAC,MAAM,CAAC,CAAA;AAE5E;;;;;;GAMG;AACH,0FAA0F;AAC1F,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,KAAK,GAAG,IAAI,GAAG,UAAU,CAAA;IACnC,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,IAAI,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAA;CAC5B;AAED,MAAM,WAAW,iBAAiB;IAChC;;;;;;;;;OASG;IACH,sBAAsB,EAAE,OAAO,CAAA;IAE/B;;;;;;;;;;;OAWG;IACH,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAA;IAEhC;;;;;OAKG;IACH,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAA;IAElC;;;;;;;OAOG;IACH,gBAAgB,CAAC,EAAE,cAAc,GAAG,IAAI,CAAA;IAExC;;;;;;;OAOG;IACH,YAAY,CAAC,EAAE,mBAAmB,GAAG,IAAI,CAAA;IAEzC;;;;OAIG;IACH,WAAW,CAAC,EAAE,iBAAiB,CAAA;IAE/B;;;;;;;;;;;;OAYG;IACH,oBAAoB,EAAE,oBAAoB,CAAA;IAE1C;;;;;;;;;;;;;;OAcG;IACH,YAAY,EAAE,YAAY,CAAA;IAE1B;;;;;;;;;;;;OAYG;IACH,qBAAqB,EAAE,qBAAqB,CAAA;IAC5C,yDAAyD;IACzD,YAAY,CAAC,EAAE;QACb,iBAAiB,CAAC,EAAE,OAAO,CAAA;QAC3B,uBAAuB,CAAC,EAAE,OAAO,CAAA;QACjC,0BAA0B,CAAC,EAAE,OAAO,CAAA;QACpC,mEAAmE;QACnE,qBAAqB,CAAC,EAAE,OAAO,CAAA;QAC/B;;;;;;;;WAQG;QACH,qBAAqB,CAAC,EAAE,OAAO,CAAA;QAC/B;;;;;;;;WAQG;QACH,sBAAsB,CAAC,EAAE,OAAO,CAAA;QAChC;;;;;WAKG;QACH,sBAAsB,CAAC,EAAE,OAAO,CAAA;QAChC;;;;;;;;;;;;;;;;;;;WAmBG;QACH,wBAAwB,CAAC,EAAE,OAAO,CAAA;KACnC,CAAA;IAGD;;;;OAIG;IACH,2BAA2B,CAAC,EAAE,OAAO,CAAA;IAErC;;;;;;;;;;;;;;;;;;OAkBG;IACH,wBAAwB,CAAC,EAAE,OAAO,CAAA;IAElC;;OAEG;IACH,cAAc,CAAC,EAAE;QACf,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;QAClB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAA;QACrB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;QACjB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAA;KACrB,CAAA;IAED;;;;;;;;;;OAUG;IACH,eAAe,CAAC,EAAE;QAChB,OAAO,CAAC,EAAE,OAAO,CAAA;QACjB,2DAA2D;QAC3D,aAAa,CAAC,EAAE,OAAO,CAAA;QACvB,kEAAkE;QAClE,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAA;QAC5B,kFAAkF;QAClF,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;QAC1C,kBAAkB,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,OAAO,CAAA;KAChD,CAAA;IAED;;;;;;;;;;;;;;OAcG;IACH,uBAAuB,CAAC,EAAE,OAAO,CAAA;IAEjC;;;;;;OAMG;IACH,0BAA0B,CAAC,EAAE,MAAM,CAAA;IAEnC;;;;;;;;;OASG;IACH,WAAW,CAAC,EAAE;QACZ,uBAAuB,CAAC,EAAE,OAAO,CAAA;KAClC,CAAA;IAED;;;;;;;;OAQG;IACH,UAAU,CAAC,EAAE,KAAK,GAAG,SAAS,GAAG,SAAS,CAAA;IAE1C;;;;;OAKG;IACH,WAAW,CAAC,EAAE,MAAM,EAAE,CAAA;IAEtB;;;;;;;;;OASG;IACH,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;IAExB;;;;;;;;;;;;;OAaG;IACH,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAA;IAE5B;;;;;;;;;OASG;IACH,gBAAgB,CAAC,EAAE,OAAO,GAAG,MAAM,CAAA;IAEnC;;;;;;OAMG;IACH,kBAAkB,CAAC,EAAE,MAAM,GAAG,OAAO,CAAA;IAErC;;;;;OAKG;IACH,cAAc,CAAC,EAAE,SAAS,GAAG,MAAM,GAAG,KAAK,CAAA;IAE3C;;;;;OAKG;IACH,mBAAmB,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,oBAAoB,EAAE,OAAO,GAAG,OAAO,GAAG,MAAM,GAAG,KAAK,CAAC,CAAC,CAAA;IAE/F;;;;;OAKG;IACH,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAA;IAE/B;;;;;;OAMG;IACH,UAAU,CAAC,EAAE,iBAAiB,CAAA;IAE9B;;;;;;;OAOG;IACH,qBAAqB,CAAC,EAAE,QAAQ,GAAG,MAAM,CAAA;IAEzC;;;;;;;OAOG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,cAAc,EAAE,MAAM,CAAC;QAAC,eAAe,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAErF;;;;;;;;;;;;;OAaG;IACH,kBAAkB,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,SAAS,CAAA;IAE/C;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACH,mBAAmB,CAAC,EAAE;QACpB,OAAO,CAAC,EAAE,OAAO,CAAA;QACjB,UAAU,CAAC,EAAE,MAAM,CAAA;QACnB,aAAa,CAAC,EAAE,MAAM,CAAA;QACtB,MAAM,CAAC,EAAE,QAAQ,GAAG,MAAM,CAAA;QAC1B,yEAAyE;QACzE,UAAU,CAAC,EAAE,MAAM,EAAE,CAAA;KACtB,CAAA;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;;OA2BG;IACH,uBAAuB,CAAC,EAAE,QAAQ,GAAG,SAAS,GAAG,KAAK,CAAA;IAEtD;;;;;;;;;;OAUG;IACH,eAAe,CAAC,EAAE,MAAM,EAAE,CAAA;IAE1B;;;;;;OAMG;IACH,2BAA2B,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAEpD;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,mBAAmB,CAAC,EAAE,OAAO,CAAA;IAE7B;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,4BAA4B,CAAC,EAAE,OAAO,CAAA;IAEtC;;;;;;;;;;;;;;;OAeG;IACH,4BAA4B,CAAC,EAAE,OAAO,CAAA;IAEtC;;;;;;;;;;;;;;OAcG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAA;IAE1B;;;;;;;;;;;;;;;;OAgBG;IACH,uBAAuB,CAAC,EAAE,MAAM,CAAA;IAEhC;;;;;;;;;;;;;;;;;;OAkBG;IACH,6BAA6B,EAAE,OAAO,CAAA;CACvC;AAED;;;;GAIG;AACH,eAAO,MAAM,0BAA0B,EAAE,iBAuFxC,CAAA;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,OAAO,CAAC,iBAAiB,CAAC,GAAG,IAAI,GAAG,SAAS,GACpD,iBAAiB,CAKnB;AAED;;;;;;;;GAQG;AACH,wBAAgB,8BAA8B,CAAC,QAAQ,EAAE,iBAAiB,GAAG,MAAM,CAIlF"}

package/dist/workspaceSettings.js

@@ -7,14 +7,29 @@
  * proxy processes and hook scripts pick up changes without restarting.
  *
  * WS-5 — Q1 (fail behavior), Q2 (proxy mode), Q3 (bypass enforcement)
- * TD-151, TD-153, TD-154
  *
  * @module
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.DEFAULT_WORKSPACE_SETTINGS = void 0;
+exports.DEFAULT_WORKSPACE_SETTINGS = exports.MCP_ANOMALY_DETECTOR_IDS = void 0;
 exports.resolveWorkspaceSettings = resolveWorkspaceSettings;
 exports.resolveSecurityProbeSampleRate = resolveSecurityProbeSampleRate;
+/**
+ * The MCP governance proxy's anomaly detectors, by id. The proxy's own
+ * `DETECTOR_BASE_DISPOSITION` (packages/mcp-proxy/src/anomaly/index.ts) is
+ * typed against this list, so a detector added there without being added
+ * here fails to compile, and `mcpAnomalyOverrides` cannot name one that does
+ * not exist.
+ */
+exports.MCP_ANOMALY_DETECTOR_IDS = [
+    'consecutive_repeat',
+    'ping_pong_cycle',
+    'landmark_cycle',
+    'tool_diversity_collapse',
+    'code_as_action',
+    'tool_poisoning',
+    'dlp_escalation',
+];
 /**
  * Default workspace settings.
  * Applied when a workspace has no explicit settings (new workspaces)
@@ -75,6 +90,8 @@ exports.DEFAULT_WORKSPACE_SETTINGS = {
     // Only load-bearing once reviewHoldBypassEnabled is true; the value here is
     // what "enabled but unset" resolves to.
     reviewHoldBypassTtlMinutes: 10,
+    // Off by default, as the reader's fallback is: see the field doc.
+    loop_review: { requireDistinctApprover: false },
     // Off by default — see the field doc for why a growing auto-written
     // context file must be opt-in.
     decisionsLogEnabled: false,
@@ -97,6 +114,8 @@ exports.DEFAULT_WORKSPACE_SETTINGS = {
     // Off by default — see the field doc for the hash-only doctrine and why
     // this must never turn on for a workspace that never configured it.
     virusTotalSkillLookupEnabled: false,
+    // Off by default — see the field doc: hashes and metadata only.
+    configBodyUpload: false,
     // ON by default — see the field doc. Opting out stops label retention for
     // the judge fine-tuning dataset, never card delivery itself.
     governanceCardLabelingEnabled: true,

package/dist/workspaceSettings.js.map

@@ -1 +1 @@
-{"version":3,"file":"workspaceSettings.js","sourceRoot":"","sources":["../src/workspaceSettings.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;GAWG;;;AA+mBH,4DAOC;AAWD,wEAIC;AApHD;;;;GAIG;AACU,QAAA,0BAA0B,GAAsB;IAC3D,oBAAoB,EAAE,MAAM;IAC5B,sBAAsB,EAAE,IAAI;IAC5B,iFAAiF;IACjF,iFAAiF;IACjF,+EAA+E;IAC/E,kFAAkF;IAClF,iFAAiF;IACjF,0EAA0E;IAC1E,iBAAiB,EAAE,EAAE;IACrB,mBAAmB,EAAE,IAAI;IACzB,YAAY,EAAU,aAAa;IACnC,qBAAqB,EAAE,SAAS;IAChC,YAAY,EAAE;QACZ,iBAAiB,EAAE,KAAK;QACxB,uBAAuB,EAAE,KAAK;QAC9B,0BAA0B,EAAE,KAAK;QACjC,qBAAqB,EAAE,KAAK;QAC5B,2EAA2E;QAC3E,uEAAuE;QACvE,qBAAqB,EAAE,KAAK;QAC5B,sBAAsB,EAAE,KAAK;QAC7B,sBAAsB,EAAE,KAAK;QAC7B,oEAAoE;QACpE,yCAAyC;QACzC,wBAAwB,EAAE,KAAK;KAChC;IACD,2BAA2B,EAAE,KAAK;IAClC,wEAAwE;IACxE,qEAAqE;IACrE,wBAAwB,EAAE,KAAK;IAC/B,uEAAuE;IACvE,wEAAwE;IACxE,4BAA4B,EAAE,KAAK;IACnC,cAAc,EAAE;QACd,OAAO,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC;QACjE,UAAU,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,YAAY,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,CAAC;QACrF,MAAM,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC;QACnD,SAAS,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC;KAC9D;IACD,4EAA4E;IAC5E,qEAAqE;IACrE,eAAe,EAAE;QACf,OAAO,EAAE,KAAK;QACd,aAAa,EAAE,IAAI;QACnB,iBAAiB,EAAE,EAAE;QACrB,eAAe,EAAE,EAAE;QACnB,kBAAkB,EAAE,OAAO;KAC5B;IACD,0EAA0E;IAC1E,4EAA4E;IAC5E,uBAAuB,EAAE,KAAK;IAC9B,4EAA4E;IAC5E,wCAAwC;IACxC,0BAA0B,EAAE,EAAE;IAC9B,oEAAoE;IACpE,+BAA+B;IAC/B,mBAAmB,EAAE,KAAK;IAC1B,8DAA8D;IAC9D,yEAAyE;IACzE,wEAAwE;IACxE,yEAAyE;IACzE,8DAA8D;IAC9D,uBAAuB,EAAE,SAAS;IAClC,uEAAuE;IACvE,sEAAsE;IACtE,uEAAuE;IACvE,mBAAmB,EAAE;QACnB,OAAO,EAAE,KAAK;QACd,UAAU,EAAE,CAAC;QACb,aAAa,EAAE,GAAG;QAClB,MAAM,EAAE,QAAQ;QAChB,UAAU,EAAE,EAAE;KACf;IACD,wEAAwE;IACxE,oEAAoE;IACpE,4BAA4B,EAAE,KAAK;IACnC,0EAA0E;IAC1E,6DAA6D;IAC7D,6BAA6B,EAAE,IAAI;IACnC,mEAAmE;IACnE,oEAAoE;IACpE,uBAAuB,EAAE,GAAG;CAC7B,CAAA;AAED;;;GAGG;AACH,SAAgB,wBAAwB,CACtC,MAAqD;IAErD,OAAO;QACL,GAAG,kCAA0B;QAC7B,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC;KAClB,CAAA;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,SAAgB,8BAA8B,CAAC,QAA2B;IACxE,MAAM,IAAI,GAAG,QAAQ,CAAC,uBAAuB,CAAA;IAC7C,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC;QAAE,OAAO,GAAG,CAAA;IAC1F,OAAO,IAAI,CAAA;AACb,CAAC"}
+{"version":3,"file":"workspaceSettings.js","sourceRoot":"","sources":["../src/workspaceSettings.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;GAUG;;;AAovBH,4DAOC;AAWD,wEAIC;AAhwBD;;;;;;GAMG;AACU,QAAA,wBAAwB,GAAG;IACtC,oBAAoB;IACpB,iBAAiB;IACjB,gBAAgB;IAChB,yBAAyB;IACzB,gBAAgB;IAChB,gBAAgB;IAChB,gBAAgB;CACR,CAAA;AAynBV;;;;GAIG;AACU,QAAA,0BAA0B,GAAsB;IAC3D,oBAAoB,EAAE,MAAM;IAC5B,sBAAsB,EAAE,IAAI;IAC5B,iFAAiF;IACjF,iFAAiF;IACjF,+EAA+E;IAC/E,kFAAkF;IAClF,iFAAiF;IACjF,0EAA0E;IAC1E,iBAAiB,EAAE,EAAE;IACrB,mBAAmB,EAAE,IAAI;IACzB,YAAY,EAAU,aAAa;IACnC,qBAAqB,EAAE,SAAS;IAChC,YAAY,EAAE;QACZ,iBAAiB,EAAE,KAAK;QACxB,uBAAuB,EAAE,KAAK;QAC9B,0BAA0B,EAAE,KAAK;QACjC,qBAAqB,EAAE,KAAK;QAC5B,2EAA2E;QAC3E,uEAAuE;QACvE,qBAAqB,EAAE,KAAK;QAC5B,sBAAsB,EAAE,KAAK;QAC7B,sBAAsB,EAAE,KAAK;QAC7B,oEAAoE;QACpE,yCAAyC;QACzC,wBAAwB,EAAE,KAAK;KAChC;IACD,2BAA2B,EAAE,KAAK;IAClC,wEAAwE;IACxE,qEAAqE;IACrE,wBAAwB,EAAE,KAAK;IAC/B,uEAAuE;IACvE,wEAAwE;IACxE,4BAA4B,EAAE,KAAK;IACnC,cAAc,EAAE;QACd,OAAO,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC;QACjE,UAAU,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,YAAY,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,CAAC;QACrF,MAAM,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC;QACnD,SAAS,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC;KAC9D;IACD,4EAA4E;IAC5E,qEAAqE;IACrE,eAAe,EAAE;QACf,OAAO,EAAE,KAAK;QACd,aAAa,EAAE,IAAI;QACnB,iBAAiB,EAAE,EAAE;QACrB,eAAe,EAAE,EAAE;QACnB,kBAAkB,EAAE,OAAO;KAC5B;IACD,0EAA0E;IAC1E,4EAA4E;IAC5E,uBAAuB,EAAE,KAAK;IAC9B,4EAA4E;IAC5E,wCAAwC;IACxC,0BAA0B,EAAE,EAAE;IAC9B,kEAAkE;IAClE,WAAW,EAAE,EAAE,uBAAuB,EAAE,KAAK,EAAE;IAC/C,oEAAoE;IACpE,+BAA+B;IAC/B,mBAAmB,EAAE,KAAK;IAC1B,8DAA8D;IAC9D,yEAAyE;IACzE,wEAAwE;IACxE,yEAAyE;IACzE,8DAA8D;IAC9D,uBAAuB,EAAE,SAAS;IAClC,uEAAuE;IACvE,sEAAsE;IACtE,uEAAuE;IACvE,mBAAmB,EAAE;QACnB,OAAO,EAAE,KAAK;QACd,UAAU,EAAE,CAAC;QACb,aAAa,EAAE,GAAG;QAClB,MAAM,EAAE,QAAQ;QAChB,UAAU,EAAE,EAAE;KACf;IACD,wEAAwE;IACxE,oEAAoE;IACpE,4BAA4B,EAAE,KAAK;IACnC,gEAAgE;IAChE,gBAAgB,EAAE,KAAK;IACvB,0EAA0E;IAC1E,6DAA6D;IAC7D,6BAA6B,EAAE,IAAI;IACnC,mEAAmE;IACnE,oEAAoE;IACpE,uBAAuB,EAAE,GAAG;CAC7B,CAAA;AAED;;;GAGG;AACH,SAAgB,wBAAwB,CACtC,MAAqD;IAErD,OAAO;QACL,GAAG,kCAA0B;QAC7B,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC;KAClB,CAAA;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,SAAgB,8BAA8B,CAAC,QAA2B;IACxE,MAAM,IAAI,GAAG,QAAQ,CAAC,uBAAuB,CAAA;IAC7C,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC;QAAE,OAAO,GAAG,CAAA;IAC1F,OAAO,IAAI,CAAA;AACb,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@intutic/shared-types",
-  "version": "2.1.0",
+  "version": "2.3.0",
   "description": "Shared TypeScript types for the Intutic control plane, CLI, and sync daemon",
   "license": "MIT",
   "repository": {
@@ -18,7 +18,7 @@
   ],
   "dependencies": {
     "zod": "^3.23",
-    "@intutic/anomaly-taxonomy": "2.1.0"
+    "@intutic/anomaly-taxonomy": "2.3.0"
   },
   "devDependencies": {
     "typescript": "^5.5",