@intutic/shared-types 2.1.0 → 2.3.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/anomaly.d.ts +6 -10
- package/dist/anomaly.d.ts.map +1 -1
- package/dist/anomaly.js +0 -2
- package/dist/anomaly.js.map +1 -1
- package/dist/api-contracts.d.ts +1 -1
- package/dist/api-contracts.js +1 -1
- package/dist/attenuation.d.ts +1 -1
- package/dist/attenuation.js +1 -1
- package/dist/auth.d.ts +10 -9
- package/dist/auth.d.ts.map +1 -1
- package/dist/auth.js +3 -4
- package/dist/auth.js.map +1 -1
- package/dist/billing.d.ts +1 -1
- package/dist/billing.js +1 -1
- package/dist/destructiveSql.d.ts +48 -0
- package/dist/destructiveSql.d.ts.map +1 -0
- package/dist/destructiveSql.js +43 -0
- package/dist/destructiveSql.js.map +1 -0
- package/dist/devInventory.d.ts +120 -0
- package/dist/devInventory.d.ts.map +1 -0
- package/dist/devInventory.js +80 -0
- package/dist/devInventory.js.map +1 -0
- package/dist/enums.d.ts +18 -21
- package/dist/enums.d.ts.map +1 -1
- package/dist/enums.js +24 -28
- package/dist/enums.js.map +1 -1
- package/dist/errors.js +3 -3
- package/dist/errors.js.map +1 -1
- package/dist/finops.d.ts +14 -2
- package/dist/finops.d.ts.map +1 -1
- package/dist/finops.js +15 -1
- package/dist/finops.js.map +1 -1
- package/dist/gateDecisions.d.ts +18 -0
- package/dist/gateDecisions.d.ts.map +1 -0
- package/dist/gateDecisions.js +20 -0
- package/dist/gateDecisions.js.map +1 -0
- package/dist/gateIdentity.d.ts +23 -0
- package/dist/gateIdentity.d.ts.map +1 -0
- package/dist/gateIdentity.js +32 -0
- package/dist/gateIdentity.js.map +1 -0
- package/dist/gateKind.d.ts +172 -0
- package/dist/gateKind.d.ts.map +1 -0
- package/dist/gateKind.js +160 -0
- package/dist/gateKind.js.map +1 -0
- package/dist/gateLimits.d.ts +170 -0
- package/dist/gateLimits.d.ts.map +1 -0
- package/dist/gateLimits.js +96 -0
- package/dist/gateLimits.js.map +1 -0
- package/dist/gitRemote.d.ts +17 -0
- package/dist/gitRemote.d.ts.map +1 -0
- package/dist/gitRemote.js +71 -0
- package/dist/gitRemote.js.map +1 -0
- package/dist/governanceCoverage.d.ts +3 -3
- package/dist/governanceCoverage.js +3 -3
- package/dist/guardrailIr.d.ts +3 -3
- package/dist/guardrailIr.d.ts.map +1 -1
- package/dist/guardrailIr.js +3 -3
- package/dist/guardrailIr.js.map +1 -1
- package/dist/guardrailRender.d.ts +1 -1
- package/dist/guardrailRender.js +1 -1
- package/dist/harnessRules.d.ts +74 -0
- package/dist/harnessRules.d.ts.map +1 -0
- package/dist/harnessRules.js +142 -0
- package/dist/harnessRules.js.map +1 -0
- package/dist/holdMessages.d.ts +25 -0
- package/dist/holdMessages.d.ts.map +1 -0
- package/dist/holdMessages.js +34 -0
- package/dist/holdMessages.js.map +1 -0
- package/dist/identity.d.ts +1 -1
- package/dist/identity.js +2 -2
- package/dist/identity.js.map +1 -1
- package/dist/index.d.ts +36 -6
- package/dist/index.d.ts.map +1 -1
- package/dist/index.js +141 -10
- package/dist/index.js.map +1 -1
- package/dist/intelligence.d.ts +1 -2
- package/dist/intelligence.d.ts.map +1 -1
- package/dist/intelligence.js.map +1 -1
- package/dist/mcpBudgets.d.ts +191 -0
- package/dist/mcpBudgets.d.ts.map +1 -0
- package/dist/mcpBudgets.js +144 -0
- package/dist/mcpBudgets.js.map +1 -0
- package/dist/mcpRegistryRecord.d.ts +143 -0
- package/dist/mcpRegistryRecord.d.ts.map +1 -0
- package/dist/mcpRegistryRecord.js +229 -0
- package/dist/mcpRegistryRecord.js.map +1 -0
- package/dist/mcpToolRisk.d.ts +82 -0
- package/dist/mcpToolRisk.d.ts.map +1 -0
- package/dist/mcpToolRisk.js +334 -0
- package/dist/mcpToolRisk.js.map +1 -0
- package/dist/modelCatalog.d.ts +2 -2
- package/dist/modelCatalog.generated.js +1 -1
- package/dist/modelCatalog.generated.js.map +1 -1
- package/dist/modelCatalog.js +2 -2
- package/dist/notifications.d.ts +20 -130
- package/dist/notifications.d.ts.map +1 -1
- package/dist/notifications.js +241 -1
- package/dist/notifications.js.map +1 -1
- package/dist/phrases.d.ts +87 -0
- package/dist/phrases.d.ts.map +1 -0
- package/dist/phrases.js +241 -0
- package/dist/phrases.js.map +1 -0
- package/dist/piiDetectors.d.ts +97 -0
- package/dist/piiDetectors.d.ts.map +1 -0
- package/dist/piiDetectors.js +96 -0
- package/dist/piiDetectors.js.map +1 -0
- package/dist/piiDetectors.json +71 -0
- package/dist/policy.d.ts +1 -1
- package/dist/policy.js +1 -1
- package/dist/policyGuardrails.d.ts +127 -10
- package/dist/policyGuardrails.d.ts.map +1 -1
- package/dist/policyGuardrails.js +59 -6
- package/dist/policyGuardrails.js.map +1 -1
- package/dist/posturePresets.js +1 -1
- package/dist/posturePresets.js.map +1 -1
- package/dist/providerVerification.d.ts +2 -2
- package/dist/providerVerification.js +2 -2
- package/dist/providers.d.ts +4 -4
- package/dist/providers.d.ts.map +1 -1
- package/dist/providers.js +11 -6
- package/dist/providers.js.map +1 -1
- package/dist/regoBuiltins.d.ts +42 -0
- package/dist/regoBuiltins.d.ts.map +1 -0
- package/dist/regoBuiltins.js +732 -0
- package/dist/regoBuiltins.js.map +1 -0
- package/dist/regoRules.d.ts +105 -0
- package/dist/regoRules.d.ts.map +1 -0
- package/dist/regoRules.js +407 -0
- package/dist/regoRules.js.map +1 -0
- package/dist/ruleLoadFailures.d.ts +15 -0
- package/dist/ruleLoadFailures.d.ts.map +1 -0
- package/dist/ruleLoadFailures.js +26 -0
- package/dist/ruleLoadFailures.js.map +1 -0
- package/dist/scriptScan.d.ts +5 -5
- package/dist/scriptScan.js +3 -3
- package/dist/sequence.d.ts +52 -0
- package/dist/sequence.d.ts.map +1 -0
- package/dist/sequence.js +127 -0
- package/dist/sequence.js.map +1 -0
- package/dist/session.d.ts +1 -1
- package/dist/session.js +1 -1
- package/dist/skillScan.d.ts +3 -3
- package/dist/skillScan.d.ts.map +1 -1
- package/dist/skillScan.js +26 -4
- package/dist/skillScan.js.map +1 -1
- package/dist/sop.d.ts +24 -11
- package/dist/sop.d.ts.map +1 -1
- package/dist/sop.js +10 -9
- package/dist/sop.js.map +1 -1
- package/dist/sourceProviders.d.ts +1 -8
- package/dist/sourceProviders.d.ts.map +1 -1
- package/dist/sourceProviders.js +2 -9
- package/dist/sourceProviders.js.map +1 -1
- package/dist/ssoGroupClearance.d.ts +119 -0
- package/dist/ssoGroupClearance.d.ts.map +1 -0
- package/dist/ssoGroupClearance.js +196 -0
- package/dist/ssoGroupClearance.js.map +1 -0
- package/dist/sync.d.ts +42 -14
- package/dist/sync.d.ts.map +1 -1
- package/dist/sync.js +3 -3
- package/dist/sync.js.map +1 -1
- package/dist/taskManagement.d.ts +0 -2
- package/dist/taskManagement.d.ts.map +1 -1
- package/dist/taskManagement.js +0 -2
- package/dist/taskManagement.js.map +1 -1
- package/dist/toolPoison.d.ts +33 -0
- package/dist/toolPoison.d.ts.map +1 -0
- package/dist/toolPoison.js +85 -0
- package/dist/toolPoison.js.map +1 -0
- package/dist/usage.d.ts +186 -0
- package/dist/usage.d.ts.map +1 -1
- package/dist/wasmBinary.d.ts +25 -0
- package/dist/wasmBinary.d.ts.map +1 -0
- package/dist/wasmBinary.js +111 -0
- package/dist/wasmBinary.js.map +1 -0
- package/dist/wasmFuel.d.ts +52 -0
- package/dist/wasmFuel.d.ts.map +1 -0
- package/dist/wasmFuel.js +320 -0
- package/dist/wasmFuel.js.map +1 -0
- package/dist/wasmMemoryCap.d.ts +21 -0
- package/dist/wasmMemoryCap.d.ts.map +1 -0
- package/dist/wasmMemoryCap.js +58 -0
- package/dist/wasmMemoryCap.js.map +1 -0
- package/dist/workspaceSettings.d.ts +126 -17
- package/dist/workspaceSettings.d.ts.map +1 -1
- package/dist/workspaceSettings.js +21 -2
- package/dist/workspaceSettings.js.map +1 -1
- package/package.json +2 -2
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"devInventory.js","sourceRoot":"","sources":["../src/devInventory.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;GAkBG;;;AAsGH,4CAOC;AAoBD,kDAeC;AA5ID,kGAAkG;AACrF,QAAA,+BAA+B,GAAG,CAAC,CAAA;AAyFhD,6DAA6D;AAChD,QAAA,aAAa,GAAG,YAAY,CAAA;AAEzC;;;;GAIG;AACH,SAAgB,gBAAgB,CAAC,YAAoB,EAAE,IAAY;IACjE,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAA;IACnE,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IAC1D,IAAI,IAAI,KAAK,EAAE;QAAE,OAAO,qBAAa,CAAA;IACrC,IAAI,YAAY,KAAK,IAAI;QAAE,OAAO,GAAG,CAAA;IACrC,IAAI,YAAY,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG,CAAC;QAAE,OAAO,KAAK,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAA;IAC/G,OAAO,qBAAa,CAAA;AACtB,CAAC;AAED,2DAA2D;AAC9C,QAAA,gBAAgB,GAAG,YAAY,CAAA;AAE5C;;;;GAIG;AACH,SAAS,cAAc,CAAC,OAAe;IACrC,OAAO,OAAO,CAAC,MAAM,IAAI,EAAE,IAAI,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;AACzH,CAAC;AAED;;;;;GAKG;AACH,SAAgB,mBAAmB,CAAC,GAAW;IAC7C,IAAI,GAAQ,CAAA;IACZ,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAA;IACpB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,OAAO,SAAS,CAAA;IAChF,8DAA8D;IAC9D,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,OAAO,SAAS,CAAA;IAChD,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ;SACtB,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,wBAAgB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;SACxE,IAAI,CAAC,GAAG,CAAC,CAAA;IACZ,OAAO,GAAG,GAAG,CAAC,QAAQ,KAAK,GAAG,CAAC,IAAI,GAAG,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;AAClE,CAAC"}
|
package/dist/enums.d.ts
CHANGED
|
@@ -7,7 +7,7 @@
|
|
|
7
7
|
* compile-time narrowing without Drizzle or Postgres dependencies.
|
|
8
8
|
*
|
|
9
9
|
* These mirror the Postgres enum types defined in
|
|
10
|
-
*
|
|
10
|
+
* the data-architecture schema.
|
|
11
11
|
*
|
|
12
12
|
* @module
|
|
13
13
|
*/
|
|
@@ -166,8 +166,8 @@ export declare const HarnessType: {
|
|
|
166
166
|
* (`GateKind: 'delegated'`, same as Xirp).
|
|
167
167
|
*
|
|
168
168
|
* All three wrapped backends are themselves supported harnesses: Claude
|
|
169
|
-
* Code and Codex through their hook files, and OpenCode (since
|
|
170
|
-
*
|
|
169
|
+
* Code and Codex through their hook files, and OpenCode (since its gate
|
|
170
|
+
* landed, 2026-09-23) through the plugin `openCodeHooks.ts` generates —
|
|
171
171
|
* the worktree propagation re-runs every backend's writer per worktree,
|
|
172
172
|
* so a feature run against any `--providers` value is governed.
|
|
173
173
|
*/
|
|
@@ -208,7 +208,7 @@ export declare const HarnessType: {
|
|
|
208
208
|
readonly STRANDS: "strands";
|
|
209
209
|
/** Microsoft Agent Framework (`agent-framework` / `agent-framework-core` on
|
|
210
210
|
* PyPI, imported as `agent_framework` — the AutoGen + Semantic Kernel
|
|
211
|
-
* successor; a separate framework from AUTOGEN
|
|
211
|
+
* successor; a separate framework from AUTOGEN). Detected via
|
|
212
212
|
* `agent-framework`/`agent_framework` in Python dependency manifests. Gate:
|
|
213
213
|
* `intutic_clawde.gate.adapters.agent_framework`'s
|
|
214
214
|
* `IntuticFunctionMiddleware`, a `FunctionMiddleware` that short-circuits
|
|
@@ -231,7 +231,7 @@ export declare const HarnessType: {
|
|
|
231
231
|
* check — either alone is too generic; see tools/cli/src/harness/eve.ts).
|
|
232
232
|
* Gate: `@intutic/gate/eve`'s `intuticApproval()` on eve's per-tool /
|
|
233
233
|
* per-connection `approval` policy surface — see gateRegistry.ts's `eve`
|
|
234
|
-
* row
|
|
234
|
+
* row for the preview-churn shield. */
|
|
235
235
|
readonly EVE: "eve";
|
|
236
236
|
/**
|
|
237
237
|
* TrueFoundry's "TrueForge" (github.com/truefoundry/trueforge, MIT,
|
|
@@ -271,7 +271,7 @@ export declare const HarnessType: {
|
|
|
271
271
|
* `toolApproval` setting is a STATIC record without callback support, so
|
|
272
272
|
* per-call gating routes through the tool-approval flow; built-in sandbox
|
|
273
273
|
* tools are governed only by `permissionMode`, which DEFAULTS to
|
|
274
|
-
* 'allow-all'. See gateRegistry.ts's NO_GATE row
|
|
274
|
+
* 'allow-all'. See gateRegistry.ts's NO_GATE row. */
|
|
275
275
|
readonly AI_SDK_HARNESS: "ai-sdk-harness";
|
|
276
276
|
/** Vercel `@ai-sdk/workflow` (WorkflowAgent — durable workflow agents on
|
|
277
277
|
* the Workflow DevKit). Detected via `@ai-sdk/workflow` in `package.json`
|
|
@@ -280,8 +280,7 @@ export declare const HarnessType: {
|
|
|
280
280
|
* too generic). Gate: `@intutic/gate/workflow`'s `intuticNeedsApproval()`
|
|
281
281
|
* on each tool — WorkflowAgent itself has zero approval fields; refusals
|
|
282
282
|
* are FatalError-compatible so the durable runtime aborts rather than
|
|
283
|
-
* retry-looping a governance denial. See gateRegistry.ts's NO_GATE row
|
|
284
|
-
* and TD-418..419. */
|
|
283
|
+
* retry-looping a governance denial. See gateRegistry.ts's NO_GATE row. */
|
|
285
284
|
readonly AI_SDK_WORKFLOW: "ai-sdk-workflow";
|
|
286
285
|
/**
|
|
287
286
|
* AWS Bedrock AgentCore **Runtime** (GA 2025-10) — a managed hosting
|
|
@@ -308,24 +307,24 @@ export declare const HarnessType: {
|
|
|
308
307
|
* framework-SDK code as the deployment target, so if that code uses no
|
|
309
308
|
* framework this registry supports (raw boto3, a hand-rolled tool loop),
|
|
310
309
|
* coverage is genuinely zero — the same honest gap AGENTIC_ORCHESTRATOR's
|
|
311
|
-
* OpenCode backend has
|
|
310
|
+
* OpenCode backend has. Deployment-target constraints that are
|
|
312
311
|
* NOT a gate concern (environment-variable caps, VPC/NAT egress topology,
|
|
313
312
|
* SigV4 traffic not being proxyable) are documented in
|
|
314
313
|
* apps/docs/integrations/agentcore.md rather than encoded here.
|
|
315
314
|
*
|
|
316
315
|
* AgentCore **Gateway** (the MCP-tool-call interceptor path) deliberately
|
|
317
|
-
* has NO enum entry here — same precedent QM set
|
|
316
|
+
* has NO enum entry here — same precedent QM set: it is a
|
|
318
317
|
* deployed AWS resource (a Lambda attached to a Gateway), never something
|
|
319
318
|
* `intutic init`/`intutic connect` finds on a developer's laptop. Its
|
|
320
319
|
* coverage is the `tools/agentcore-interceptor` Lambda calling
|
|
321
|
-
* `POST /api/v1/integrations/agentcore/gateway-check
|
|
320
|
+
* `POST /api/v1/integrations/agentcore/gateway-check`.
|
|
322
321
|
*
|
|
323
322
|
* AgentCore **Policy** (Cedar/"Dogwood") has NO third-party HTTP policy
|
|
324
323
|
* backend at all (confirmed against `GatewayPolicyEngineConfiguration`'s
|
|
325
324
|
* real API reference: `arn` only ever names an AWS-native
|
|
326
325
|
* `policy-engine/...` resource) — not integrable by design, not a gap.
|
|
327
326
|
*
|
|
328
|
-
* See apps/docs/integrations/agentcore.md
|
|
327
|
+
* See apps/docs/integrations/agentcore.md.
|
|
329
328
|
*/
|
|
330
329
|
readonly AGENTCORE_RUNTIME: "agentcore-runtime";
|
|
331
330
|
/**
|
|
@@ -394,19 +393,19 @@ export declare const HARNESS_COUNT: number;
|
|
|
394
393
|
* `HARNESS_COUNT` minus the harnesses with a confirmed, currently-open
|
|
395
394
|
* support gap — the number safe to use in headline/marketing copy
|
|
396
395
|
* ("works with N coding agents") without overclaiming. Each exclusion must
|
|
397
|
-
* be a harness with its own
|
|
396
|
+
* be a harness with its own recorded gap describing a REAL,
|
|
398
397
|
* currently-unactionable gap (not a caveat, not a "documented, not a
|
|
399
398
|
* defect" note). The list is EMPTY since 2026-09-23 and the mechanism is
|
|
400
399
|
* kept so the next real gap goes here and nowhere else:
|
|
401
400
|
*
|
|
402
|
-
* - `agentic-orchestrator` was excluded
|
|
401
|
+
* - `agentic-orchestrator` was excluded while its OpenCode
|
|
403
402
|
* backend had no gate; OpenCode is a harness of its own now.
|
|
404
|
-
* - `autogen` was excluded
|
|
403
|
+
* - `autogen` was excluded while `InterventionHandler.on_send`
|
|
405
404
|
* was blind to `AssistantAgent`'s own tool calls; `IntuticWorkbench`
|
|
406
405
|
* (2026-09-22) governs them.
|
|
407
406
|
*
|
|
408
|
-
* Deliberately does NOT exclude `mastra` —
|
|
409
|
-
* "
|
|
407
|
+
* Deliberately does NOT exclude `mastra` — its gap is explicitly recorded
|
|
408
|
+
* as "documented, not a defect", a caveat about a call-site
|
|
410
409
|
* hook override, not a coverage gap, so excluding it here would be the
|
|
411
410
|
* exact overclaim-avoidance discipline applied backwards. Also does NOT
|
|
412
411
|
* exclude `continue` over its headless-mode limitation (`cn -p` skips
|
|
@@ -512,7 +511,7 @@ export type WorkspaceRole = typeof WorkspaceRole[keyof typeof WorkspaceRole];
|
|
|
512
511
|
* Note: `closed` only affects harnesses with MCP proxy injection (9/20 —
|
|
513
512
|
* 10 config paths across 9 harnesses, see sync-daemon mcpAutoWrite.ts).
|
|
514
513
|
* For harnesses without MCP proxy injection (e.g. n8n, pi, codex,
|
|
515
|
-
* open-webui),
|
|
514
|
+
* open-webui) there is no MCP proxy to fail, so this has no effect.
|
|
516
515
|
*/
|
|
517
516
|
export declare const McpProxyFailBehavior: {
|
|
518
517
|
readonly OPEN: "open";
|
|
@@ -524,7 +523,7 @@ export type McpProxyFailBehavior = typeof McpProxyFailBehavior[keyof typeof McpP
|
|
|
524
523
|
* - `per-session` (default, Phase 4): new proxy process per MCP connection
|
|
525
524
|
* - `daemon` (Phase 5): long-lived daemon, per-session shims delegate via Unix socket
|
|
526
525
|
*
|
|
527
|
-
*
|
|
526
|
+
* Daemon mode requires macOS notarization. Both modes are active: the
|
|
528
527
|
* mcp-proxy honours `daemon` by answering policy lookups over the daemon socket.
|
|
529
528
|
*/
|
|
530
529
|
export declare const McpProxyMode: {
|
|
@@ -538,8 +537,6 @@ export type McpProxyMode = typeof McpProxyMode[keyof typeof McpProxyMode];
|
|
|
538
537
|
* - `rewrite` (default): drift watcher detects edits → immediate config rewrite (~1s)
|
|
539
538
|
* - `immutable` (opt-in): after each write, sets macOS `chflags uchg` (user-immutable flag)
|
|
540
539
|
* - `alert-only`: no rewrite; drift creates a governance incident only (audit mode)
|
|
541
|
-
*
|
|
542
|
-
* See TD-154 for immutable-flag UX risk notes.
|
|
543
540
|
*/
|
|
544
541
|
export declare const BypassEnforcementTier: {
|
|
545
542
|
readonly REWRITE: "rewrite";
|
package/dist/enums.d.ts.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"enums.d.ts","sourceRoot":"","sources":["../src/enums.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAKH,uEAAuE;AACvE,eAAO,MAAM,SAAS;;;;;CAKZ,CAAA;AAEV,sCAAsC;AACtC,MAAM,MAAM,SAAS,GAAG,OAAO,SAAS,CAAC,MAAM,OAAO,SAAS,CAAC,CAAA;AAKhE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,eAAO,MAAM,iBAAiB;;;;;;;CAOpB,CAAA;AAEV,8CAA8C;AAC9C,MAAM,MAAM,iBAAiB,GAAG,OAAO,iBAAiB,CAAC,MAAM,OAAO,iBAAiB,CAAC,CAAA;AAKxF,0EAA0E;AAC1E,eAAO,MAAM,YAAY;;;CAGf,CAAA;AAEV,yCAAyC;AACzC,MAAM,MAAM,YAAY,GAAG,OAAO,YAAY,CAAC,MAAM,OAAO,YAAY,CAAC,CAAA;AAKzE,kEAAkE;AAClE,eAAO,MAAM,UAAU;;;;;CAKb,CAAA;AAEV,uCAAuC;AACvC,MAAM,MAAM,UAAU,GAAG,OAAO,UAAU,CAAC,MAAM,OAAO,UAAU,CAAC,CAAA;AAKnE,wDAAwD;AACxD,eAAO,MAAM,cAAc;;;;CAIjB,CAAA;AAEV,2CAA2C;AAC3C,MAAM,MAAM,cAAc,GAAG,OAAO,cAAc,CAAC,MAAM,OAAO,cAAc,CAAC,CAAA;AAK/E,qEAAqE;AACrE,eAAO,MAAM,oBAAoB;;;;;CAKvB,CAAA;AAEV,iDAAiD;AACjD,MAAM,MAAM,oBAAoB,GAAG,OAAO,oBAAoB,CAAC,MAAM,OAAO,oBAAoB,CAAC,CAAA;AAKjG;;;;;;;;;GASG;AACH,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAA;AACvD,YAAY,EACV,eAAe,GAChB,MAAM,2BAA2B,CAAA;AAYlC,mDAAmD;AACnD,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;IAoBtB,iFAAiF;;IAEjF,2EAA2E;;IAE3E;;;;+EAI2E;;IAE3E;;iEAE6D;;IAE7D;;;;;;;;OAQG;;IAEH;;;;;;;;;;;;;;;;;;;OAmBG;;IAOH;;;;;+DAK2D;;;IAG3D,0EAA0E;;;;IAI1E;;;;;;;;6DAQyD;;IAEzD,mDAAmD;;;IAGnD;;;;;;;iEAO6D;;IAE7D;;;;;;;iDAO6C;;IAQ7C;;kFAE8E;;IAE9E;;;4EAGwE;;IAExE;;;;;;;
|
|
1
|
+
{"version":3,"file":"enums.d.ts","sourceRoot":"","sources":["../src/enums.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAKH,uEAAuE;AACvE,eAAO,MAAM,SAAS;;;;;CAKZ,CAAA;AAEV,sCAAsC;AACtC,MAAM,MAAM,SAAS,GAAG,OAAO,SAAS,CAAC,MAAM,OAAO,SAAS,CAAC,CAAA;AAKhE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,eAAO,MAAM,iBAAiB;;;;;;;CAOpB,CAAA;AAEV,8CAA8C;AAC9C,MAAM,MAAM,iBAAiB,GAAG,OAAO,iBAAiB,CAAC,MAAM,OAAO,iBAAiB,CAAC,CAAA;AAKxF,0EAA0E;AAC1E,eAAO,MAAM,YAAY;;;CAGf,CAAA;AAEV,yCAAyC;AACzC,MAAM,MAAM,YAAY,GAAG,OAAO,YAAY,CAAC,MAAM,OAAO,YAAY,CAAC,CAAA;AAKzE,kEAAkE;AAClE,eAAO,MAAM,UAAU;;;;;CAKb,CAAA;AAEV,uCAAuC;AACvC,MAAM,MAAM,UAAU,GAAG,OAAO,UAAU,CAAC,MAAM,OAAO,UAAU,CAAC,CAAA;AAKnE,wDAAwD;AACxD,eAAO,MAAM,cAAc;;;;CAIjB,CAAA;AAEV,2CAA2C;AAC3C,MAAM,MAAM,cAAc,GAAG,OAAO,cAAc,CAAC,MAAM,OAAO,cAAc,CAAC,CAAA;AAK/E,qEAAqE;AACrE,eAAO,MAAM,oBAAoB;;;;;CAKvB,CAAA;AAEV,iDAAiD;AACjD,MAAM,MAAM,oBAAoB,GAAG,OAAO,oBAAoB,CAAC,MAAM,OAAO,oBAAoB,CAAC,CAAA;AAKjG;;;;;;;;;GASG;AACH,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAA;AACvD,YAAY,EACV,eAAe,GAChB,MAAM,2BAA2B,CAAA;AAYlC,mDAAmD;AACnD,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;IAoBtB,iFAAiF;;IAEjF,2EAA2E;;IAE3E;;;;+EAI2E;;IAE3E;;iEAE6D;;IAE7D;;;;;;;;OAQG;;IAEH;;;;;;;;;;;;;;;;;;;OAmBG;;IAOH;;;;;+DAK2D;;;IAG3D,0EAA0E;;;;IAI1E;;;;;;;;6DAQyD;;IAEzD,mDAAmD;;;IAGnD;;;;;;;iEAO6D;;IAE7D;;;;;;;iDAO6C;;IAQ7C;;kFAE8E;;IAE9E;;;4EAGwE;;IAExE;;;;;;;4CAOwC;;IAExC;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA4BG;;IAQH;;;;;;;;0DAQsD;;IAEtD;;;;;;;gFAO4E;;IAG5E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA2CG;;IAGH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAgDG;;CAEK,CAAA;AAEV,wCAAwC;AACxC,MAAM,MAAM,WAAW,GAAG,OAAO,WAAW,CAAC,MAAM,OAAO,WAAW,CAAC,CAAA;AAEtE;;;;;;;GAOG;AACH,eAAO,MAAM,aAAa,QAAkC,CAAA;AAE5D;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,eAAO,MAAM,sBAAsB,QAA4B,CAAA;AAK/D,uDAAuD;AACvD,eAAO,MAAM,aAAa;;;;;CAKhB,CAAA;AAEV,0CAA0C;AAC1C,MAAM,MAAM,aAAa,GAAG,OAAO,aAAa,CAAC,MAAM,OAAO,aAAa,CAAC,CAAA;AAK5E,gDAAgD;AAChD,eAAO,MAAM,cAAc;;;;;CAKjB,CAAA;AAEV,2CAA2C;AAC3C,MAAM,MAAM,cAAc,GAAG,OAAO,cAAc,CAAC,MAAM,OAAO,cAAc,CAAC,CAAA;AAK/E,kDAAkD;AAClD,eAAO,MAAM,kBAAkB;;;;;;CAMrB,CAAA;AAEV,gDAAgD;AAChD,MAAM,MAAM,kBAAkB,GAAG,OAAO,kBAAkB,CAAC,MAAM,OAAO,kBAAkB,CAAC,CAAA;AAO3F,4DAA4D;AAC5D,eAAO,MAAM,oBAAoB;;;;;CAKvB,CAAA;AAEV,kDAAkD;AAClD,MAAM,MAAM,oBAAoB,GAAG,OAAO,oBAAoB,CAAC,MAAM,OAAO,oBAAoB,CAAC,CAAA;AAMjG,gDAAgD;AAChD,eAAO,MAAM,iBAAiB;;;;;;;;CAQpB,CAAA;AAEV,+CAA+C;AAC/C,MAAM,MAAM,iBAAiB,GAAG,OAAO,iBAAiB,CAAC,MAAM,OAAO,iBAAiB,CAAC,CAAA;AAKxF,yDAAyD;AACzD,eAAO,MAAM,OAAO;IAClB,wDAAwD;;IAExD,sEAAsE;;CAE9D,CAAA;AAEV,oCAAoC;AACpC,MAAM,MAAM,OAAO,GAAG,OAAO,OAAO,CAAC,MAAM,OAAO,OAAO,CAAC,CAAA;AAK1D,kDAAkD;AAClD,eAAO,MAAM,SAAS;IACpB,mCAAmC;;IAEnC,kCAAkC;;IAElC,yCAAyC;;IAEzC,mCAAmC;;CAE3B,CAAA;AAEV,sCAAsC;AACtC,MAAM,MAAM,SAAS,GAAG,OAAO,SAAS,CAAC,MAAM,OAAO,SAAS,CAAC,CAAA;AAKhE,gDAAgD;AAChD,eAAO,MAAM,WAAW;;;;CAId,CAAA;AAEV,wCAAwC;AACxC,MAAM,MAAM,WAAW,GAAG,OAAO,WAAW,CAAC,MAAM,OAAO,WAAW,CAAC,CAAA;AAKtE,+EAA+E;AAC/E,eAAO,MAAM,aAAa;;;;;;CAMhB,CAAA;AAEV,0CAA0C;AAC1C,MAAM,MAAM,aAAa,GAAG,OAAO,aAAa,CAAC,MAAM,OAAO,aAAa,CAAC,CAAA;AAK5E;;;;;;;;;GASG;AACH,eAAO,MAAM,oBAAoB;;;CAGvB,CAAA;AACV,MAAM,MAAM,oBAAoB,GAAG,OAAO,oBAAoB,CAAC,MAAM,OAAO,oBAAoB,CAAC,CAAA;AAEjG;;;;;;;GAOG;AACH,eAAO,MAAM,YAAY;;;CAGf,CAAA;AACV,MAAM,MAAM,YAAY,GAAG,OAAO,YAAY,CAAC,MAAM,OAAO,YAAY,CAAC,CAAA;AAEzE;;;;;;GAMG;AACH,eAAO,MAAM,qBAAqB;;;;CAIxB,CAAA;AACV,MAAM,MAAM,qBAAqB,GAAG,OAAO,qBAAqB,CAAC,MAAM,OAAO,qBAAqB,CAAC,CAAA;AAKpG,8DAA8D;AAC9D,eAAO,MAAM,mBAAmB;;;;CAItB,CAAA;AACV,MAAM,MAAM,mBAAmB,GAAG,OAAO,mBAAmB,CAAC,MAAM,OAAO,mBAAmB,CAAC,CAAA;AAE9F,oFAAoF;AACpF,eAAO,MAAM,kBAAkB;;;CAGrB,CAAA;AACV,MAAM,MAAM,kBAAkB,GAAG,OAAO,kBAAkB,CAAC,MAAM,OAAO,kBAAkB,CAAC,CAAA;AAE3F;;;;;;;;;GASG;AACH,eAAO,MAAM,eAAe;;;;CAIlB,CAAA;AACV,MAAM,MAAM,eAAe,GAAG,OAAO,eAAe,CAAC,MAAM,OAAO,eAAe,CAAC,CAAA"}
|
package/dist/enums.js
CHANGED
|
@@ -8,7 +8,7 @@
|
|
|
8
8
|
* compile-time narrowing without Drizzle or Postgres dependencies.
|
|
9
9
|
*
|
|
10
10
|
* These mirror the Postgres enum types defined in
|
|
11
|
-
*
|
|
11
|
+
* the data-architecture schema.
|
|
12
12
|
*
|
|
13
13
|
* @module
|
|
14
14
|
*/
|
|
@@ -180,8 +180,8 @@ exports.HarnessType = {
|
|
|
180
180
|
* (`GateKind: 'delegated'`, same as Xirp).
|
|
181
181
|
*
|
|
182
182
|
* All three wrapped backends are themselves supported harnesses: Claude
|
|
183
|
-
* Code and Codex through their hook files, and OpenCode (since
|
|
184
|
-
*
|
|
183
|
+
* Code and Codex through their hook files, and OpenCode (since its gate
|
|
184
|
+
* landed, 2026-09-23) through the plugin `openCodeHooks.ts` generates —
|
|
185
185
|
* the worktree propagation re-runs every backend's writer per worktree,
|
|
186
186
|
* so a feature run against any `--providers` value is governed.
|
|
187
187
|
*/
|
|
@@ -190,7 +190,7 @@ exports.HarnessType = {
|
|
|
190
190
|
// Same family as LANGGRAPH: the blocking gate ships in intutic-clawde
|
|
191
191
|
// (intutic_clawde.gate, python-raise contract), evaluated in-process before
|
|
192
192
|
// the tool body runs. This adapter writes .env.intutic (proxy base-URL vars
|
|
193
|
-
// only) — see gateRegistry.ts NO_GATE rows and
|
|
193
|
+
// only) — see gateRegistry.ts NO_GATE rows and shared-types/src/gateKind.ts.
|
|
194
194
|
/** LangChain — covers BOTH the Python (`langchain`/`langchain-core`) and
|
|
195
195
|
* JS/TS (`langchain` npm package) ecosystems for detection purposes, since
|
|
196
196
|
* the framework itself ships in both. This env-adapter (`langchain.ts`) is
|
|
@@ -227,7 +227,7 @@ exports.HarnessType = {
|
|
|
227
227
|
STRANDS: 'strands',
|
|
228
228
|
/** Microsoft Agent Framework (`agent-framework` / `agent-framework-core` on
|
|
229
229
|
* PyPI, imported as `agent_framework` — the AutoGen + Semantic Kernel
|
|
230
|
-
* successor; a separate framework from AUTOGEN
|
|
230
|
+
* successor; a separate framework from AUTOGEN). Detected via
|
|
231
231
|
* `agent-framework`/`agent_framework` in Python dependency manifests. Gate:
|
|
232
232
|
* `intutic_clawde.gate.adapters.agent_framework`'s
|
|
233
233
|
* `IntuticFunctionMiddleware`, a `FunctionMiddleware` that short-circuits
|
|
@@ -256,7 +256,7 @@ exports.HarnessType = {
|
|
|
256
256
|
* check — either alone is too generic; see tools/cli/src/harness/eve.ts).
|
|
257
257
|
* Gate: `@intutic/gate/eve`'s `intuticApproval()` on eve's per-tool /
|
|
258
258
|
* per-connection `approval` policy surface — see gateRegistry.ts's `eve`
|
|
259
|
-
* row
|
|
259
|
+
* row for the preview-churn shield. */
|
|
260
260
|
EVE: 'eve',
|
|
261
261
|
/**
|
|
262
262
|
* TrueFoundry's "TrueForge" (github.com/truefoundry/trueforge, MIT,
|
|
@@ -302,7 +302,7 @@ exports.HarnessType = {
|
|
|
302
302
|
* `toolApproval` setting is a STATIC record without callback support, so
|
|
303
303
|
* per-call gating routes through the tool-approval flow; built-in sandbox
|
|
304
304
|
* tools are governed only by `permissionMode`, which DEFAULTS to
|
|
305
|
-
* 'allow-all'. See gateRegistry.ts's NO_GATE row
|
|
305
|
+
* 'allow-all'. See gateRegistry.ts's NO_GATE row. */
|
|
306
306
|
AI_SDK_HARNESS: 'ai-sdk-harness',
|
|
307
307
|
/** Vercel `@ai-sdk/workflow` (WorkflowAgent — durable workflow agents on
|
|
308
308
|
* the Workflow DevKit). Detected via `@ai-sdk/workflow` in `package.json`
|
|
@@ -311,8 +311,7 @@ exports.HarnessType = {
|
|
|
311
311
|
* too generic). Gate: `@intutic/gate/workflow`'s `intuticNeedsApproval()`
|
|
312
312
|
* on each tool — WorkflowAgent itself has zero approval fields; refusals
|
|
313
313
|
* are FatalError-compatible so the durable runtime aborts rather than
|
|
314
|
-
* retry-looping a governance denial. See gateRegistry.ts's NO_GATE row
|
|
315
|
-
* and TD-418..419. */
|
|
314
|
+
* retry-looping a governance denial. See gateRegistry.ts's NO_GATE row. */
|
|
316
315
|
AI_SDK_WORKFLOW: 'ai-sdk-workflow',
|
|
317
316
|
// ─── B2: AWS Bedrock AgentCore ───────────────────────────────────────────
|
|
318
317
|
/**
|
|
@@ -340,24 +339,24 @@ exports.HarnessType = {
|
|
|
340
339
|
* framework-SDK code as the deployment target, so if that code uses no
|
|
341
340
|
* framework this registry supports (raw boto3, a hand-rolled tool loop),
|
|
342
341
|
* coverage is genuinely zero — the same honest gap AGENTIC_ORCHESTRATOR's
|
|
343
|
-
* OpenCode backend has
|
|
342
|
+
* OpenCode backend has. Deployment-target constraints that are
|
|
344
343
|
* NOT a gate concern (environment-variable caps, VPC/NAT egress topology,
|
|
345
344
|
* SigV4 traffic not being proxyable) are documented in
|
|
346
345
|
* apps/docs/integrations/agentcore.md rather than encoded here.
|
|
347
346
|
*
|
|
348
347
|
* AgentCore **Gateway** (the MCP-tool-call interceptor path) deliberately
|
|
349
|
-
* has NO enum entry here — same precedent QM set
|
|
348
|
+
* has NO enum entry here — same precedent QM set: it is a
|
|
350
349
|
* deployed AWS resource (a Lambda attached to a Gateway), never something
|
|
351
350
|
* `intutic init`/`intutic connect` finds on a developer's laptop. Its
|
|
352
351
|
* coverage is the `tools/agentcore-interceptor` Lambda calling
|
|
353
|
-
* `POST /api/v1/integrations/agentcore/gateway-check
|
|
352
|
+
* `POST /api/v1/integrations/agentcore/gateway-check`.
|
|
354
353
|
*
|
|
355
354
|
* AgentCore **Policy** (Cedar/"Dogwood") has NO third-party HTTP policy
|
|
356
355
|
* backend at all (confirmed against `GatewayPolicyEngineConfiguration`'s
|
|
357
356
|
* real API reference: `arn` only ever names an AWS-native
|
|
358
357
|
* `policy-engine/...` resource) — not integrable by design, not a gap.
|
|
359
358
|
*
|
|
360
|
-
* See apps/docs/integrations/agentcore.md
|
|
359
|
+
* See apps/docs/integrations/agentcore.md.
|
|
361
360
|
*/
|
|
362
361
|
AGENTCORE_RUNTIME: 'agentcore-runtime',
|
|
363
362
|
// ─── B3: TrueForge, standalone/hosted server (bridge-gated) ─────────────
|
|
@@ -425,19 +424,19 @@ exports.HARNESS_COUNT = Object.keys(exports.HarnessType).length;
|
|
|
425
424
|
* `HARNESS_COUNT` minus the harnesses with a confirmed, currently-open
|
|
426
425
|
* support gap — the number safe to use in headline/marketing copy
|
|
427
426
|
* ("works with N coding agents") without overclaiming. Each exclusion must
|
|
428
|
-
* be a harness with its own
|
|
427
|
+
* be a harness with its own recorded gap describing a REAL,
|
|
429
428
|
* currently-unactionable gap (not a caveat, not a "documented, not a
|
|
430
429
|
* defect" note). The list is EMPTY since 2026-09-23 and the mechanism is
|
|
431
430
|
* kept so the next real gap goes here and nowhere else:
|
|
432
431
|
*
|
|
433
|
-
* - `agentic-orchestrator` was excluded
|
|
432
|
+
* - `agentic-orchestrator` was excluded while its OpenCode
|
|
434
433
|
* backend had no gate; OpenCode is a harness of its own now.
|
|
435
|
-
* - `autogen` was excluded
|
|
434
|
+
* - `autogen` was excluded while `InterventionHandler.on_send`
|
|
436
435
|
* was blind to `AssistantAgent`'s own tool calls; `IntuticWorkbench`
|
|
437
436
|
* (2026-09-22) governs them.
|
|
438
437
|
*
|
|
439
|
-
* Deliberately does NOT exclude `mastra` —
|
|
440
|
-
* "
|
|
438
|
+
* Deliberately does NOT exclude `mastra` — its gap is explicitly recorded
|
|
439
|
+
* as "documented, not a defect", a caveat about a call-site
|
|
441
440
|
* hook override, not a coverage gap, so excluding it here would be the
|
|
442
441
|
* exact overclaim-avoidance discipline applied backwards. Also does NOT
|
|
443
442
|
* exclude `continue` over its headless-mode limitation (`cn -p` skips
|
|
@@ -486,7 +485,7 @@ exports.PlanExecutionOutcome = {
|
|
|
486
485
|
ABORTED: 'ABORTED',
|
|
487
486
|
};
|
|
488
487
|
// ─── SOP Lifecycle State ─────────────────────────────────────────────
|
|
489
|
-
// HLD §3.4
|
|
488
|
+
// HLD §3.4 — 7-state FSM: DRAFT → PENDING_REVIEW → GENERATED
|
|
490
489
|
// → HYPOTHESIZED → REFINED → VALIDATED → INVALIDATED
|
|
491
490
|
/** Lifecycle state for SOPs in the registry. */
|
|
492
491
|
exports.SopLifecycleState = {
|
|
@@ -499,7 +498,7 @@ exports.SopLifecycleState = {
|
|
|
499
498
|
INVALIDATED: 'INVALIDATED',
|
|
500
499
|
};
|
|
501
500
|
// ─── SOP Type ────────────────────────────────────────────────────────
|
|
502
|
-
//
|
|
501
|
+
// SOP classification for hook pipeline
|
|
503
502
|
/** SOP type: standard markdown or executable V8 hook. */
|
|
504
503
|
exports.SopType = {
|
|
505
504
|
/** Standard SOP — markdown content enforced via SSL. */
|
|
@@ -508,7 +507,7 @@ exports.SopType = {
|
|
|
508
507
|
HOOK: 'hook',
|
|
509
508
|
};
|
|
510
509
|
// ─── Hook Phase ──────────────────────────────────────────────────────
|
|
511
|
-
//
|
|
510
|
+
// Pipeline phase for hook-type SOPs
|
|
512
511
|
/** Pipeline phase where a hook-type SOP fires. */
|
|
513
512
|
exports.HookPhase = {
|
|
514
513
|
/** Before tool call evaluation. */
|
|
@@ -529,7 +528,7 @@ exports.RoutingTier = {
|
|
|
529
528
|
LOCAL: 'local',
|
|
530
529
|
};
|
|
531
530
|
// ─── Workspace Role ──────────────────────────────────────────────────
|
|
532
|
-
// HLD §5.1
|
|
531
|
+
// HLD §5.1 — RBAC role hierarchy
|
|
533
532
|
/** Workspace member role for RBAC. OWNER > ADMIN > EM > DEVELOPER > VIEWER. */
|
|
534
533
|
exports.WorkspaceRole = {
|
|
535
534
|
OWNER: 'OWNER',
|
|
@@ -540,7 +539,6 @@ exports.WorkspaceRole = {
|
|
|
540
539
|
};
|
|
541
540
|
// ─── MCP Proxy Settings ──────────────────────────────────────────────
|
|
542
541
|
// WS-5 — Q1 fail behavior, Q2 deployment model, Q3 bypass enforcement
|
|
543
|
-
// TD-151, TD-152, TD-153, TD-154, TD-155
|
|
544
542
|
/**
|
|
545
543
|
* MCP proxy fail behavior when the Intutic control plane is unreachable.
|
|
546
544
|
* - `open` (default): pass through the tool call + emit a warning event
|
|
@@ -549,7 +547,7 @@ exports.WorkspaceRole = {
|
|
|
549
547
|
* Note: `closed` only affects harnesses with MCP proxy injection (9/20 —
|
|
550
548
|
* 10 config paths across 9 harnesses, see sync-daemon mcpAutoWrite.ts).
|
|
551
549
|
* For harnesses without MCP proxy injection (e.g. n8n, pi, codex,
|
|
552
|
-
* open-webui),
|
|
550
|
+
* open-webui) there is no MCP proxy to fail, so this has no effect.
|
|
553
551
|
*/
|
|
554
552
|
exports.McpProxyFailBehavior = {
|
|
555
553
|
OPEN: 'open',
|
|
@@ -560,7 +558,7 @@ exports.McpProxyFailBehavior = {
|
|
|
560
558
|
* - `per-session` (default, Phase 4): new proxy process per MCP connection
|
|
561
559
|
* - `daemon` (Phase 5): long-lived daemon, per-session shims delegate via Unix socket
|
|
562
560
|
*
|
|
563
|
-
*
|
|
561
|
+
* Daemon mode requires macOS notarization. Both modes are active: the
|
|
564
562
|
* mcp-proxy honours `daemon` by answering policy lookups over the daemon socket.
|
|
565
563
|
*/
|
|
566
564
|
exports.McpProxyMode = {
|
|
@@ -573,8 +571,6 @@ exports.McpProxyMode = {
|
|
|
573
571
|
* - `rewrite` (default): drift watcher detects edits → immediate config rewrite (~1s)
|
|
574
572
|
* - `immutable` (opt-in): after each write, sets macOS `chflags uchg` (user-immutable flag)
|
|
575
573
|
* - `alert-only`: no rewrite; drift creates a governance incident only (audit mode)
|
|
576
|
-
*
|
|
577
|
-
* See TD-154 for immutable-flag UX risk notes.
|
|
578
574
|
*/
|
|
579
575
|
exports.BypassEnforcementTier = {
|
|
580
576
|
REWRITE: 'rewrite',
|
|
@@ -582,7 +578,7 @@ exports.BypassEnforcementTier = {
|
|
|
582
578
|
ALERT_ONLY: 'alert-only',
|
|
583
579
|
};
|
|
584
580
|
// ─── Phase 5 Enums ───────────────────────────────────────────────────
|
|
585
|
-
//
|
|
581
|
+
// Production Hardening & SOC 2
|
|
586
582
|
/** TurboVec behavioral drift classification. @see HLD §7.7 */
|
|
587
583
|
exports.DriftClassification = {
|
|
588
584
|
POSITIVE_DRIFT: 'POSITIVE_DRIFT',
|
package/dist/enums.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"enums.js","sourceRoot":"","sources":["../src/enums.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;GAYG;;;AAEH,wEAAwE;AACxE,uCAAuC;AAEvC,uEAAuE;AAC1D,QAAA,SAAS,GAAG;IACvB,GAAG,EAAE,KAAK;IACV,MAAM,EAAE,QAAQ;IAChB,IAAI,EAAE,MAAM;IACZ,QAAQ,EAAE,UAAU;CACZ,CAAA;AAKV,wEAAwE;AACxE,oDAAoD;AAEpD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACU,QAAA,iBAAiB,GAAG;IAC/B,MAAM,EAAE,QAAQ;IAChB,OAAO,EAAE,SAAS;IAClB,MAAM,EAAE,QAAQ;IAChB,KAAK,EAAE,OAAO;IACd,IAAI,EAAE,MAAM;IACZ,QAAQ,EAAE,UAAU;CACZ,CAAA;AAKV,wEAAwE;AACxE,+CAA+C;AAE/C,0EAA0E;AAC7D,QAAA,YAAY,GAAG;IAC1B,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,QAAQ;CACR,CAAA;AAKV,wEAAwE;AACxE,6CAA6C;AAE7C,kEAAkE;AACrD,QAAA,UAAU,GAAG;IACxB,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,QAAQ;IAChB,KAAK,EAAE,OAAO;IACd,SAAS,EAAE,WAAW;CACd,CAAA;AAKV,wEAAwE;AACxE,4CAA4C;AAE5C,wDAAwD;AAC3C,QAAA,cAAc,GAAG;IAC5B,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,QAAQ;CACR,CAAA;AAKV,uEAAuE;AACvE,kDAAkD;AAElD,qEAAqE;AACxD,QAAA,oBAAoB,GAAG;IAClC,UAAU,EAAE,YAAY;IACxB,OAAO,EAAE,SAAS;IAClB,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,QAAQ;CACR,CAAA;AAKV,wEAAwE;AACxE,wEAAwE;AAExE;;;;;;;;;GASG;AACH,8DAAuD;AAA9C,+GAAA,WAAW,OAAA;AAKpB,wEAAwE;AACxE,4DAA4D;AAC5D,sEAAsE;AACtE,qEAAqE;AACrE,yEAAyE;AACzE,yEAAyE;AACzE,2EAA2E;AAC3E,4EAA4E;AAC5E,qCAAqC;AAErC,mDAAmD;AACtC,QAAA,WAAW,GAAG;IACzB,MAAM,EAAE,QAAQ;IAChB,WAAW,EAAE,aAAa;IAC1B,WAAW,EAAE,aAAa;IAC1B,GAAG,EAAE,KAAK;IACV,KAAK,EAAE,OAAO;IACd,QAAQ,EAAE,UAAU;IACpB,KAAK,EAAE,OAAO;IACd,SAAS,EAAE,WAAW;IACtB,QAAQ,EAAE,UAAU;IACpB,MAAM,EAAE,QAAQ;IAChB,EAAE,EAAE,IAAI;IACR,KAAK,EAAE,OAAO;IACd,QAAQ,EAAE,UAAU;IACpB,QAAQ,EAAE,UAAU;IACpB,cAAc,EAAE,gBAAgB;IAChC,KAAK,EAAE,OAAO;IACd,UAAU,EAAE,YAAY;IACxB,cAAc,EAAE,gBAAgB;IAChC,SAAS,EAAE,WAAW;IACtB,iFAAiF;IACjF,SAAS,EAAE,WAAW;IACtB,2EAA2E;IAC3E,IAAI,EAAE,MAAM;IACZ;;;;+EAI2E;IAC3E,QAAQ,EAAE,UAAU;IACpB;;iEAE6D;IAC7D,gBAAgB,EAAE,KAAK;IACvB;;;;;;;;OAQG;IACH,IAAI,EAAE,MAAM;IACZ;;;;;;;;;;;;;;;;;;;OAmBG;IACH,oBAAoB,EAAE,sBAAsB;IAC5C,4EAA4E;IAC5E,sEAAsE;IACtE,4EAA4E;IAC5E,4EAA4E;IAC5E,
|
|
1
|
+
{"version":3,"file":"enums.js","sourceRoot":"","sources":["../src/enums.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;GAYG;;;AAEH,wEAAwE;AACxE,uCAAuC;AAEvC,uEAAuE;AAC1D,QAAA,SAAS,GAAG;IACvB,GAAG,EAAE,KAAK;IACV,MAAM,EAAE,QAAQ;IAChB,IAAI,EAAE,MAAM;IACZ,QAAQ,EAAE,UAAU;CACZ,CAAA;AAKV,wEAAwE;AACxE,oDAAoD;AAEpD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACU,QAAA,iBAAiB,GAAG;IAC/B,MAAM,EAAE,QAAQ;IAChB,OAAO,EAAE,SAAS;IAClB,MAAM,EAAE,QAAQ;IAChB,KAAK,EAAE,OAAO;IACd,IAAI,EAAE,MAAM;IACZ,QAAQ,EAAE,UAAU;CACZ,CAAA;AAKV,wEAAwE;AACxE,+CAA+C;AAE/C,0EAA0E;AAC7D,QAAA,YAAY,GAAG;IAC1B,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,QAAQ;CACR,CAAA;AAKV,wEAAwE;AACxE,6CAA6C;AAE7C,kEAAkE;AACrD,QAAA,UAAU,GAAG;IACxB,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,QAAQ;IAChB,KAAK,EAAE,OAAO;IACd,SAAS,EAAE,WAAW;CACd,CAAA;AAKV,wEAAwE;AACxE,4CAA4C;AAE5C,wDAAwD;AAC3C,QAAA,cAAc,GAAG;IAC5B,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,QAAQ;CACR,CAAA;AAKV,uEAAuE;AACvE,kDAAkD;AAElD,qEAAqE;AACxD,QAAA,oBAAoB,GAAG;IAClC,UAAU,EAAE,YAAY;IACxB,OAAO,EAAE,SAAS;IAClB,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,QAAQ;CACR,CAAA;AAKV,wEAAwE;AACxE,wEAAwE;AAExE;;;;;;;;;GASG;AACH,8DAAuD;AAA9C,+GAAA,WAAW,OAAA;AAKpB,wEAAwE;AACxE,4DAA4D;AAC5D,sEAAsE;AACtE,qEAAqE;AACrE,yEAAyE;AACzE,yEAAyE;AACzE,2EAA2E;AAC3E,4EAA4E;AAC5E,qCAAqC;AAErC,mDAAmD;AACtC,QAAA,WAAW,GAAG;IACzB,MAAM,EAAE,QAAQ;IAChB,WAAW,EAAE,aAAa;IAC1B,WAAW,EAAE,aAAa;IAC1B,GAAG,EAAE,KAAK;IACV,KAAK,EAAE,OAAO;IACd,QAAQ,EAAE,UAAU;IACpB,KAAK,EAAE,OAAO;IACd,SAAS,EAAE,WAAW;IACtB,QAAQ,EAAE,UAAU;IACpB,MAAM,EAAE,QAAQ;IAChB,EAAE,EAAE,IAAI;IACR,KAAK,EAAE,OAAO;IACd,QAAQ,EAAE,UAAU;IACpB,QAAQ,EAAE,UAAU;IACpB,cAAc,EAAE,gBAAgB;IAChC,KAAK,EAAE,OAAO;IACd,UAAU,EAAE,YAAY;IACxB,cAAc,EAAE,gBAAgB;IAChC,SAAS,EAAE,WAAW;IACtB,iFAAiF;IACjF,SAAS,EAAE,WAAW;IACtB,2EAA2E;IAC3E,IAAI,EAAE,MAAM;IACZ;;;;+EAI2E;IAC3E,QAAQ,EAAE,UAAU;IACpB;;iEAE6D;IAC7D,gBAAgB,EAAE,KAAK;IACvB;;;;;;;;OAQG;IACH,IAAI,EAAE,MAAM;IACZ;;;;;;;;;;;;;;;;;;;OAmBG;IACH,oBAAoB,EAAE,sBAAsB;IAC5C,4EAA4E;IAC5E,sEAAsE;IACtE,4EAA4E;IAC5E,4EAA4E;IAC5E,6EAA6E;IAC7E;;;;;+DAK2D;IAC3D,SAAS,EAAE,WAAW;IACtB,MAAM,EAAE,QAAQ;IAChB,0EAA0E;IAC1E,OAAO,EAAE,SAAS;IAClB,GAAG,EAAE,KAAK;IACV,UAAU,EAAE,YAAY;IACxB;;;;;;;;6DAQyD;IACzD,aAAa,EAAE,eAAe;IAC9B,mDAAmD;IACnD,WAAW,EAAE,aAAa;IAC1B,UAAU,EAAE,YAAY;IACxB;;;;;;;iEAO6D;IAC7D,OAAO,EAAE,SAAS;IAClB;;;;;;;iDAO6C;IAC7C,eAAe,EAAE,iBAAiB;IAClC,2EAA2E;IAC3E,2EAA2E;IAC3E,wEAAwE;IACxE,kEAAkE;IAClE,kEAAkE;IAClE,4EAA4E;IAC5E;;kFAE8E;IAC9E,MAAM,EAAE,QAAQ;IAChB;;;4EAGwE;IACxE,aAAa,EAAE,eAAe;IAC9B;;;;;;;4CAOwC;IACxC,GAAG,EAAE,KAAK;IACV;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA4BG;IACH,SAAS,EAAE,WAAW;IACtB,2EAA2E;IAC3E,oEAAoE;IACpE,oEAAoE;IACpE,qEAAqE;IACrE,yEAAyE;IACzE,2EAA2E;IAC3E;;;;;;;;0DAQsD;IACtD,cAAc,EAAE,gBAAgB;IAChC;;;;;;;gFAO4E;IAC5E,eAAe,EAAE,iBAAiB;IAClC,4EAA4E;IAC5E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA2CG;IACH,iBAAiB,EAAE,mBAAmB;IACtC,2EAA2E;IAC3E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAgDG;IACH,gBAAgB,EAAE,kBAAkB;CAC5B,CAAA;AAKV;;;;;;;GAOG;AACU,QAAA,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,mBAAW,CAAC,CAAC,MAAM,CAAA;AAE5D;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACU,QAAA,sBAAsB,GAAG,qBAAa,GAAG,EAAE,CAAC,MAAM,CAAA;AAE/D,wEAAwE;AACxE,mCAAmC;AAEnC,uDAAuD;AAC1C,QAAA,aAAa,GAAG;IAC3B,QAAQ,EAAE,UAAU;IACpB,SAAS,EAAE,WAAW;IACtB,MAAM,EAAE,QAAQ;IAChB,UAAU,EAAE,YAAY;CAChB,CAAA;AAKV,wEAAwE;AACxE,uDAAuD;AAEvD,gDAAgD;AACnC,QAAA,cAAc,GAAG;IAC5B,IAAI,EAAE,MAAM;IACZ,YAAY,EAAE,cAAc;IAC5B,QAAQ,EAAE,UAAU;IACpB,cAAc,EAAE,gBAAgB;CACxB,CAAA;AAKV,wEAAwE;AACxE,sDAAsD;AAEtD,kDAAkD;AACrC,QAAA,kBAAkB,GAAG;IAChC,gBAAgB,EAAE,kBAAkB;IACpC,QAAQ,EAAE,UAAU;IACpB,QAAQ,EAAE,UAAU;IACpB,SAAS,EAAE,WAAW;IACtB,SAAS,EAAE,WAAW;CACd,CAAA;AAKV,wEAAwE;AACxE,8DAA8D;AAC9D,qEAAqE;AACrE,oEAAoE;AAEpE,4DAA4D;AAC/C,QAAA,oBAAoB,GAAG;IAClC,OAAO,EAAE,SAAS;IAClB,MAAM,EAAE,QAAQ;IAChB,OAAO,EAAE,SAAS;IAClB,OAAO,EAAE,SAAS;CACV,CAAA;AAKV,wEAAwE;AACxE,6DAA6D;AAC7D,uDAAuD;AAEvD,gDAAgD;AACnC,QAAA,iBAAiB,GAAG;IAC/B,KAAK,EAAE,OAAO;IACd,cAAc,EAAE,gBAAgB;IAChC,SAAS,EAAE,WAAW;IACtB,YAAY,EAAE,cAAc;IAC5B,OAAO,EAAE,SAAS;IAClB,SAAS,EAAE,WAAW;IACtB,WAAW,EAAE,aAAa;CAClB,CAAA;AAKV,wEAAwE;AACxE,uCAAuC;AAEvC,yDAAyD;AAC5C,QAAA,OAAO,GAAG;IACrB,wDAAwD;IACxD,QAAQ,EAAE,UAAU;IACpB,sEAAsE;IACtE,IAAI,EAAE,MAAM;CACJ,CAAA;AAKV,wEAAwE;AACxE,oCAAoC;AAEpC,kDAAkD;AACrC,QAAA,SAAS,GAAG;IACvB,mCAAmC;IACnC,QAAQ,EAAE,UAAU;IACpB,kCAAkC;IAClC,SAAS,EAAE,WAAW;IACtB,yCAAyC;IACzC,YAAY,EAAE,cAAc;IAC5B,mCAAmC;IACnC,aAAa,EAAE,eAAe;CACtB,CAAA;AAKV,wEAAwE;AACxE,yDAAyD;AAEzD,gDAAgD;AACnC,QAAA,WAAW,GAAG;IACzB,QAAQ,EAAE,UAAU;IACpB,OAAO,EAAE,SAAS;IAClB,KAAK,EAAE,OAAO;CACN,CAAA;AAKV,wEAAwE;AACxE,iCAAiC;AAEjC,+EAA+E;AAClE,QAAA,aAAa,GAAG;IAC3B,KAAK,EAAE,OAAO;IACd,KAAK,EAAE,OAAO;IACd,EAAE,EAAE,IAAI;IACR,SAAS,EAAE,WAAW;IACtB,MAAM,EAAE,QAAQ;CACR,CAAA;AAKV,wEAAwE;AACxE,sEAAsE;AAEtE;;;;;;;;;GASG;AACU,QAAA,oBAAoB,GAAG;IAClC,IAAI,EAAI,MAAM;IACd,MAAM,EAAE,QAAQ;CACR,CAAA;AAGV;;;;;;;GAOG;AACU,QAAA,YAAY,GAAG;IAC1B,WAAW,EAAE,aAAa;IAC1B,MAAM,EAAO,QAAQ;CACb,CAAA;AAGV;;;;;;GAMG;AACU,QAAA,qBAAqB,GAAG;IACnC,OAAO,EAAK,SAAS;IACrB,SAAS,EAAG,WAAW;IACvB,UAAU,EAAE,YAAY;CAChB,CAAA;AAGV,wEAAwE;AACxE,+BAA+B;AAE/B,8DAA8D;AACjD,QAAA,mBAAmB,GAAG;IACjC,cAAc,EAAE,gBAAgB;IAChC,cAAc,EAAE,gBAAgB;IAChC,aAAa,EAAG,eAAe;CACvB,CAAA;AAGV,oFAAoF;AACvE,QAAA,kBAAkB,GAAG;IAChC,QAAQ,EAAmB,UAAU;IACrC,yBAAyB,EAAE,2BAA2B;CAC9C,CAAA;AAGV;;;;;;;;;GASG;AACU,QAAA,eAAe,GAAG;IAC7B,eAAe,EAAE,iBAAiB;IAClC,QAAQ,EAAE,UAAU;IACpB,WAAW,EAAE,aAAa;CAClB,CAAA"}
|
package/dist/errors.js
CHANGED
|
@@ -82,7 +82,7 @@ exports.E_ALREADY_VERIFIED = 'ALREADY_VERIFIED';
|
|
|
82
82
|
exports.E_DOMAIN_NOT_VERIFIED = 'DOMAIN_NOT_VERIFIED';
|
|
83
83
|
/** Generic validation failure (legacy alias). */
|
|
84
84
|
exports.E_VALIDATION = 'E_VALIDATION';
|
|
85
|
-
// ─── Identity Federation Error Codes
|
|
85
|
+
// ─── Identity Federation Error Codes ─────────────────────
|
|
86
86
|
/** SSO is not configured or disabled for this workspace. */
|
|
87
87
|
exports.E_SSO_DISABLED = 'SSO_DISABLED';
|
|
88
88
|
/** SSO user has no workspace membership. */
|
|
@@ -109,13 +109,13 @@ exports.E_FEATURE_NOT_AVAILABLE = 'FEATURE_NOT_AVAILABLE';
|
|
|
109
109
|
* which made the unenforced sessions rank best in a workspace's audit history.
|
|
110
110
|
*/
|
|
111
111
|
exports.E_SSL_NOT_ENFORCED = 'SSL_NOT_ENFORCED';
|
|
112
|
-
// ─── WS4 — Enterprise Identity & Compliance
|
|
112
|
+
// ─── WS4 — Enterprise Identity & Compliance ───────────────
|
|
113
113
|
/**
|
|
114
114
|
* Requested child capabilities are not a subset of the parent key's capabilities.
|
|
115
115
|
* HLD §5.6 — DCT Token Attenuation (Patent Family A).
|
|
116
116
|
*/
|
|
117
117
|
exports.E_ATTENUATION_CAP_VIOLATION = 'ATTENUATION_CAP_VIOLATION';
|
|
118
|
-
// ─── WS5 — Monetization & Financial Ledger
|
|
118
|
+
// ─── WS5 — Monetization & Financial Ledger ────────────────
|
|
119
119
|
/**
|
|
120
120
|
* Daily spend cap exceeded with hard enforcement mode active.
|
|
121
121
|
* Proxy returns this when budget:hard_block:{wid} Valkey key is set.
|
package/dist/errors.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":";AAAA;;;;;;;;GAQG;;;AA6PH,wCAQC;AAnQD,wEAAwE;AAExE,0BAA0B;AACb,QAAA,WAAW,GAAG,aAAsB,CAAA;AAEjD,wDAAwD;AAC3C,QAAA,mBAAmB,GAAG,qBAA8B,CAAA;AAGjE,qDAAqD;AACxC,QAAA,cAAc,GAAG,gBAAyB,CAAA;AACvD,8DAA8D;AACjD,QAAA,kBAAkB,GAAG,kBAA2B,CAAA;AAC7D,uEAAuE;AAC1D,QAAA,gBAAgB,GAAG,gBAAyB,CAAA;AAEzD,kDAAkD;AACrC,QAAA,WAAW,GAAG,aAAsB,CAAA;AAEjD,yDAAyD;AAC5C,QAAA,iBAAiB,GAAG,mBAA4B,CAAA;AAE7D,mCAAmC;AACtB,QAAA,cAAc,GAAG,gBAAyB,CAAA;AAEvD,gFAAgF;AACnE,QAAA,uBAAuB,GAAG,yBAAkC,CAAA;AAEzE,sFAAsF;AACzE,QAAA,6BAA6B,GAAG,+BAAwC,CAAA;AAErF,oDAAoD;AACvC,QAAA,mBAAmB,GAAG,qBAA8B,CAAA;AAEjE,uDAAuD;AAC1C,QAAA,mBAAmB,GAAG,mBAA4B,CAAA;AAE/D;;;;GAIG;AACU,QAAA,sBAAsB,GAAG,sBAA+B,CAAA;AACrE;;;;;;;GAOG;AACU,QAAA,iBAAiB,GAAG,iBAA0B,CAAA;AAE3D,+CAA+C;AAClC,QAAA,iBAAiB,GAAG,iBAA0B,CAAA;AAE3D,wBAAwB;AACX,QAAA,cAAc,GAAG,cAAuB,CAAA;AAErD,wGAAwG;AAC3F,QAAA,yBAAyB,GAAG,yBAAkC,CAAA;AAE3E,qGAAqG;AACxF,QAAA,eAAe,GAAG,eAAwB,CAAA;AAEvD,2CAA2C;AAC9B,QAAA,mBAAmB,GAAG,mBAA4B,CAAA;AAE/D,wCAAwC;AAC3B,QAAA,eAAe,GAAG,eAAwB,CAAA;AAEvD,gCAAgC;AACnB,QAAA,sBAAsB,GAAG,sBAA+B,CAAA;AAErE,0BAA0B;AACb,QAAA,cAAc,GAAG,cAAuB,CAAA;AAErD,qCAAqC;AACxB,QAAA,eAAe,GAAG,eAAwB,CAAA;AAEvD,yBAAyB;AACZ,QAAA,eAAe,GAAG,eAAwB,CAAA;AAEvD,+CAA+C;AAClC,QAAA,kBAAkB,GAAG,kBAA2B,CAAA;AAE7D;;;;;GAKG;AACU,QAAA,qBAAqB,GAAG,qBAA8B,CAAA;AAEnE,iDAAiD;AACpC,QAAA,YAAY,GAAG,cAAuB,CAAA;AAEnD,
|
|
1
|
+
{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":";AAAA;;;;;;;;GAQG;;;AA6PH,wCAQC;AAnQD,wEAAwE;AAExE,0BAA0B;AACb,QAAA,WAAW,GAAG,aAAsB,CAAA;AAEjD,wDAAwD;AAC3C,QAAA,mBAAmB,GAAG,qBAA8B,CAAA;AAGjE,qDAAqD;AACxC,QAAA,cAAc,GAAG,gBAAyB,CAAA;AACvD,8DAA8D;AACjD,QAAA,kBAAkB,GAAG,kBAA2B,CAAA;AAC7D,uEAAuE;AAC1D,QAAA,gBAAgB,GAAG,gBAAyB,CAAA;AAEzD,kDAAkD;AACrC,QAAA,WAAW,GAAG,aAAsB,CAAA;AAEjD,yDAAyD;AAC5C,QAAA,iBAAiB,GAAG,mBAA4B,CAAA;AAE7D,mCAAmC;AACtB,QAAA,cAAc,GAAG,gBAAyB,CAAA;AAEvD,gFAAgF;AACnE,QAAA,uBAAuB,GAAG,yBAAkC,CAAA;AAEzE,sFAAsF;AACzE,QAAA,6BAA6B,GAAG,+BAAwC,CAAA;AAErF,oDAAoD;AACvC,QAAA,mBAAmB,GAAG,qBAA8B,CAAA;AAEjE,uDAAuD;AAC1C,QAAA,mBAAmB,GAAG,mBAA4B,CAAA;AAE/D;;;;GAIG;AACU,QAAA,sBAAsB,GAAG,sBAA+B,CAAA;AACrE;;;;;;;GAOG;AACU,QAAA,iBAAiB,GAAG,iBAA0B,CAAA;AAE3D,+CAA+C;AAClC,QAAA,iBAAiB,GAAG,iBAA0B,CAAA;AAE3D,wBAAwB;AACX,QAAA,cAAc,GAAG,cAAuB,CAAA;AAErD,wGAAwG;AAC3F,QAAA,yBAAyB,GAAG,yBAAkC,CAAA;AAE3E,qGAAqG;AACxF,QAAA,eAAe,GAAG,eAAwB,CAAA;AAEvD,2CAA2C;AAC9B,QAAA,mBAAmB,GAAG,mBAA4B,CAAA;AAE/D,wCAAwC;AAC3B,QAAA,eAAe,GAAG,eAAwB,CAAA;AAEvD,gCAAgC;AACnB,QAAA,sBAAsB,GAAG,sBAA+B,CAAA;AAErE,0BAA0B;AACb,QAAA,cAAc,GAAG,cAAuB,CAAA;AAErD,qCAAqC;AACxB,QAAA,eAAe,GAAG,eAAwB,CAAA;AAEvD,yBAAyB;AACZ,QAAA,eAAe,GAAG,eAAwB,CAAA;AAEvD,+CAA+C;AAClC,QAAA,kBAAkB,GAAG,kBAA2B,CAAA;AAE7D;;;;;GAKG;AACU,QAAA,qBAAqB,GAAG,qBAA8B,CAAA;AAEnE,iDAAiD;AACpC,QAAA,YAAY,GAAG,cAAuB,CAAA;AAEnD,4DAA4D;AAE5D,4DAA4D;AAC/C,QAAA,cAAc,GAAG,cAAuB,CAAA;AAErD,4CAA4C;AAC/B,QAAA,mBAAmB,GAAG,mBAA4B,CAAA;AAE/D,kDAAkD;AACrC,QAAA,oBAAoB,GAAG,oBAA6B,CAAA;AAEjE,+CAA+C;AAClC,QAAA,4BAA4B,GAAG,4BAAqC,CAAA;AAEjF,kDAAkD;AACrC,QAAA,qBAAqB,GAAG,qBAA8B,CAAA;AAEnE,2CAA2C;AAC9B,QAAA,mBAAmB,GAAG,mBAA4B,CAAA;AAE/D,4DAA4D;AAC/C,QAAA,iBAAiB,GAAG,iBAA0B,CAAA;AAE3D,4DAA4D;AAC/C,QAAA,yBAAyB,GAAG,yBAAkC,CAAA;AAE3E,yDAAyD;AAC5C,QAAA,uBAAuB,GAAG,uBAAgC,CAAA;AAEvE;;;;;;GAMG;AACU,QAAA,kBAAkB,GAAG,kBAA2B,CAAA;AAE7D,6DAA6D;AAE7D;;;GAGG;AACU,QAAA,2BAA2B,GAAG,2BAAoC,CAAA;AAE/E,6DAA6D;AAE7D;;;GAGG;AACU,QAAA,2BAA2B,GAAG,2BAAoC,CAAA;AAuD/E,wEAAwE;AAExE;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAa,YAAa,SAAQ,KAAK;IACrC,+DAA+D;IACtD,IAAI,CAAkB;IAE/B,wDAAwD;IAC/C,UAAU,CAAQ;IAE3B,mDAAmD;IAC1C,OAAO,CAA0B;IAE1C,YACE,IAAsB,EACtB,UAAkB,EAClB,OAAe,EACf,OAAiC;QAEjC,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,cAAc,CAAA;QAC1B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;QAChB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAA;QAC5B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;IACxB,CAAC;CACF;AAtBD,oCAsBC;AAED;;GAEG;AACH,SAAgB,cAAc,CAAC,GAAY;IACzC,OAAO,CACL,GAAG,YAAY,KAAK;QACpB,CAAC,GAAG,CAAC,IAAI,KAAK,cAAc;YAC1B,GAAG,CAAC,WAAW,CAAC,IAAI,KAAK,cAAc;YACvC,CAAC,iBAAiB,IAAI,GAAG,IAAK,GAAW,CAAC,eAAe,KAAK,IAAI,CAAC;YACnE,CAAC,MAAM,IAAI,GAAG,IAAI,YAAY,IAAI,GAAG,CAAC,CAAC,CAC1C,CAAC;AACJ,CAAC"}
|
package/dist/finops.d.ts
CHANGED
|
@@ -3,13 +3,25 @@
|
|
|
3
3
|
*
|
|
4
4
|
* These types correspond to the `execution_traces` table and the
|
|
5
5
|
* `finops_attribution_4d` materialized view defined in
|
|
6
|
-
*
|
|
6
|
+
* the data-architecture schema.
|
|
7
7
|
*
|
|
8
8
|
* HLD §3.6 (FinOps Ledger), §3.19 (4D Attribution)
|
|
9
9
|
*
|
|
10
10
|
* @module
|
|
11
11
|
*/
|
|
12
12
|
import type { AnomalyType, EnforcementAction, RoutingTier, TokenUtility } from './enums.js';
|
|
13
|
+
/**
|
|
14
|
+
* The daily spend cap, in USD, of a workspace that has never saved one. A
|
|
15
|
+
* hard cap: the proxy refuses a request that would take the day's spend over
|
|
16
|
+
* it (`429 BUDGET_EXCEEDED`). An owner or admin changes it on Settings ›
|
|
17
|
+
* Billing › Budget Limits or with `PUT /api/v1/budget`.
|
|
18
|
+
*/
|
|
19
|
+
export declare const DEFAULT_DAILY_BUDGET_USD = 100;
|
|
20
|
+
/**
|
|
21
|
+
* The monthly cap, in USD, of a workspace that has never saved one. Alerts
|
|
22
|
+
* only: reaching it raises budget alerts and refuses nothing.
|
|
23
|
+
*/
|
|
24
|
+
export declare const DEFAULT_MONTHLY_BUDGET_USD = 500;
|
|
13
25
|
/**
|
|
14
26
|
* A single row in the `execution_traces` table — the append-only FinOps ledger.
|
|
15
27
|
*
|
|
@@ -211,7 +223,7 @@ export interface TraceDetail {
|
|
|
211
223
|
correctivePromptCard: unknown | null;
|
|
212
224
|
reasoningTokens?: number | null;
|
|
213
225
|
/**
|
|
214
|
-
* Provider-reported prompt-cache token counts (
|
|
226
|
+
* Provider-reported prompt-cache token counts (migration 165) —
|
|
215
227
|
* Anthropic's `usage.cache_read_input_tokens` / `cache_creation_input_tokens`
|
|
216
228
|
* today. Null when the provider/proxy build doesn't report them; distinct
|
|
217
229
|
* from `cacheHit`/`cacheSavingsUsd` (the proxy's own semantic response
|
package/dist/finops.d.ts.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"finops.d.ts","sourceRoot":"","sources":["../src/finops.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EACV,WAAW,EACX,iBAAiB,EACjB,WAAW,EACX,YAAY,EACb,MAAM,YAAY,CAAA;AAInB;;;;;;;;GAQG;AACH,MAAM,WAAW,UAAU;IACzB,+CAA+C;IAC/C,OAAO,EAAE,MAAM,CAAA;IAEf,iEAAiE;IACjE,SAAS,EAAE,MAAM,CAAA;IAEjB,2CAA2C;IAC3C,SAAS,EAAE,MAAM,CAAA;IAEjB,oCAAoC;IACpC,SAAS,EAAE,MAAM,CAAA;IAEjB,qDAAqD;IACrD,gBAAgB,EAAE,MAAM,CAAA;IAGxB,yCAAyC;IACzC,cAAc,EAAE,MAAM,CAAA;IAEtB,yDAAyD;IACzD,iBAAiB,EAAE,MAAM,CAAA;IAEzB,kCAAkC;IAClC,WAAW,EAAE,WAAW,CAAA;IAExB,mDAAmD;IACnD,eAAe,EAAE,MAAM,CAAA;IAGvB,2CAA2C;IAC3C,cAAc,EAAE,MAAM,CAAA;IAEtB;;;;;OAKG;IACH,qBAAqB,EAAE,MAAM,CAAA;IAE7B;;;;;OAKG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAE7B,+BAA+B;IAC/B,YAAY,EAAE,MAAM,CAAA;IAGpB,wCAAwC;IACxC,UAAU,EAAE,MAAM,CAAA;IAElB,oDAAoD;IACpD,aAAa,EAAE,MAAM,CAAA;IAErB,kEAAkE;IAClE,UAAU,EAAE,MAAM,CAAA;IAGlB,oDAAoD;IACpD,YAAY,EAAE,YAAY,CAAA;IAE1B,0CAA0C;IAC1C,iBAAiB,EAAE,MAAM,CAAA;IAGzB,yDAAyD;IACzD,eAAe,EAAE,MAAM,CAAA;IAEvB,+CAA+C;IAC/C,iBAAiB,EAAE,iBAAiB,CAAA;IAGpC,qCAAqC;IACrC,eAAe,EAAE,WAAW,GAAG,IAAI,CAAA;IAEnC,oDAAoD;IACpD,sBAAsB,EAAE,MAAM,GAAG,IAAI,CAAA;IAErC,4CAA4C;IAC5C,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;IAGhD,yDAAyD;IACzD,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;IAG9C,8CAA8C;IAC9C,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IAEpB,8CAA8C;IAC9C,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAE3B,0CAA0C;IAC1C,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;IAG1C,+CAA+C;IAC/C,QAAQ,EAAE,OAAO,CAAA;IAEjB,oCAAoC;IACpC,eAAe,EAAE,MAAM,CAAA;IAGvB,uDAAuD;IACvD,oBAAoB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;IAEpD,yDAAyD;IACzD,oBAAoB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;CACrD;AAID;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,qCAAqC;IACrC,OAAO,EAAE,MAAM,CAAA;IAEf,4CAA4C;IAC5C,UAAU,EAAE,MAAM,CAAA;IAElB,8CAA8C;IAC9C,OAAO,EAAE,MAAM,CAAA;IAEf,2CAA2C;IAC3C,YAAY,EAAE,MAAM,CAAA;CACrB;AAID;;;;;;;GAOG;AACH,MAAM,WAAW,aAAa;IAC5B,8BAA8B;IAC9B,QAAQ,EAAE,MAAM,CAAA;IAEhB,+CAA+C;IAC/C,WAAW,EAAE,MAAM,CAAA;IAEnB,uCAAuC;IACvC,KAAK,CAAC,EAAE,MAAM,CAAA;IAEd,uCAAuC;IACvC,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB;AAID,gDAAgD;AAChD,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,MAAM,CAAA;IACjB,cAAc,EAAE,MAAM,CAAA;IACtB,iBAAiB,EAAE,MAAM,CAAA;IACzB,iBAAiB,EAAE,iBAAiB,GAAG,MAAM,CAAA;IAC7C,eAAe,EAAE,MAAM,CAAA;IACvB,aAAa,EAAE,MAAM,CAAA;IACrB,eAAe,EAAE,WAAW,GAAG,MAAM,GAAG,IAAI,CAAA;IAC5C,0GAA0G;IAC1G,UAAU,CAAC,EAAE,OAAO,CAAA;IACpB,8GAA8G;IAC9G,mBAAmB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CACpC;AAED,2CAA2C;AAC3C,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,YAAY,EAAE,CAAA;IACtB,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;CACf;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,CAAA;IAClB,WAAW,EAAE,MAAM,CAAA;IACnB,QAAQ,EAAE,MAAM,CAAA;IAChB,mEAAmE;IACnE,WAAW,EAAE,MAAM,CAAA;IACnB,UAAU,EAAE,MAAM,CAAA;IAClB,MAAM,EAAE,MAAM,CAAA;IACd,2EAA2E;IAC3E,QAAQ,EAAE,OAAO,CAAA;CAClB;AAED,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,MAAM,CAAA;IACb,QAAQ,EAAE,MAAM,CAAA;IAChB,aAAa,EAAE,OAAO,CAAA;IACtB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,EAAE,MAAM,CAAA;IAClB,MAAM,EAAE,MAAM,CAAA;IACd,YAAY,EAAE,OAAO,CAAA;IACrB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,qCAAqC;AACrC,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,gBAAgB,EAAE,MAAM,CAAA;IACxB,cAAc,EAAE,MAAM,CAAA;IACtB,iBAAiB,EAAE,MAAM,CAAA;IACzB,WAAW,EAAE,WAAW,GAAG,MAAM,CAAA;IACjC,eAAe,EAAE,MAAM,CAAA;IACvB,cAAc,EAAE,MAAM,CAAA;IACtB,qBAAqB,EAAE,MAAM,CAAA;IAC7B,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAC7B,YAAY,EAAE,MAAM,CAAA;IACpB,UAAU,EAAE,MAAM,CAAA;IAClB,aAAa,EAAE,MAAM,CAAA;IACrB,UAAU,EAAE,MAAM,CAAA;IAClB,yFAAyF;IACzF,wBAAwB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACxC,YAAY,EAAE,YAAY,GAAG,MAAM,CAAA;IACnC,iBAAiB,EAAE,MAAM,CAAA;IACzB,eAAe,EAAE,MAAM,CAAA;IACvB,iBAAiB,EAAE,iBAAiB,GAAG,MAAM,CAAA;IAC7C,eAAe,EAAE,WAAW,GAAG,MAAM,GAAG,IAAI,CAAA;IAC5C,sBAAsB,EAAE,MAAM,GAAG,IAAI,CAAA;IACrC,gBAAgB,EAAE,OAAO,GAAG,IAAI,CAAA;IAChC,oBAAoB,EAAE,OAAO,GAAG,IAAI,CAAA;IACpC,oBAAoB,EAAE,OAAO,GAAG,IAAI,CAAA;IACpC,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC/B;;;;;;OAMG;IACH,oBAAoB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACpC,wBAAwB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACxC,eAAe,CAAC,EAAE,OAAO,GAAG,IAAI,CAAA;IAChC;;;;;OAKG;IACH,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACjC;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B;;;;;OAKG;IACH,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAClC,0GAA0G;IAC1G,UAAU,CAAC,EAAE,OAAO,CAAA;IACpB,wFAAwF;IACxF,mBAAmB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACnC;;;OAGG;IACH,cAAc,CAAC,EAAE,mBAAmB,EAAE,GAAG,IAAI,CAAA;IAC7C,KAAK,CAAC,EAAE,SAAS,EAAE,CAAA;IACnB;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,mBAAmB,EAAE,CAAA;CACjC;AAED;;;GAGG;AACH,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAA;IACZ,EAAE,EAAE,OAAO,GAAG,MAAM,GAAG,QAAQ,GAAG,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,CAAA;IACnF,MAAM,EAAE,MAAM,CAAA;IACd,WAAW,EAAE,MAAM,GAAG,KAAK,GAAG,SAAS,GAAG,QAAQ,CAAA;IAClD,IAAI,CAAC,EAAE,MAAM,EAAE,CAAA;IACf,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED,+BAA+B;AAC/B,MAAM,WAAW,YAAY;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB"}
|
|
1
|
+
{"version":3,"file":"finops.d.ts","sourceRoot":"","sources":["../src/finops.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EACV,WAAW,EACX,iBAAiB,EACjB,WAAW,EACX,YAAY,EACb,MAAM,YAAY,CAAA;AAInB;;;;;GAKG;AACH,eAAO,MAAM,wBAAwB,MAAM,CAAA;AAE3C;;;GAGG;AACH,eAAO,MAAM,0BAA0B,MAAM,CAAA;AAI7C;;;;;;;;GAQG;AACH,MAAM,WAAW,UAAU;IACzB,+CAA+C;IAC/C,OAAO,EAAE,MAAM,CAAA;IAEf,iEAAiE;IACjE,SAAS,EAAE,MAAM,CAAA;IAEjB,2CAA2C;IAC3C,SAAS,EAAE,MAAM,CAAA;IAEjB,oCAAoC;IACpC,SAAS,EAAE,MAAM,CAAA;IAEjB,qDAAqD;IACrD,gBAAgB,EAAE,MAAM,CAAA;IAGxB,yCAAyC;IACzC,cAAc,EAAE,MAAM,CAAA;IAEtB,yDAAyD;IACzD,iBAAiB,EAAE,MAAM,CAAA;IAEzB,kCAAkC;IAClC,WAAW,EAAE,WAAW,CAAA;IAExB,mDAAmD;IACnD,eAAe,EAAE,MAAM,CAAA;IAGvB,2CAA2C;IAC3C,cAAc,EAAE,MAAM,CAAA;IAEtB;;;;;OAKG;IACH,qBAAqB,EAAE,MAAM,CAAA;IAE7B;;;;;OAKG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAE7B,+BAA+B;IAC/B,YAAY,EAAE,MAAM,CAAA;IAGpB,wCAAwC;IACxC,UAAU,EAAE,MAAM,CAAA;IAElB,oDAAoD;IACpD,aAAa,EAAE,MAAM,CAAA;IAErB,kEAAkE;IAClE,UAAU,EAAE,MAAM,CAAA;IAGlB,oDAAoD;IACpD,YAAY,EAAE,YAAY,CAAA;IAE1B,0CAA0C;IAC1C,iBAAiB,EAAE,MAAM,CAAA;IAGzB,yDAAyD;IACzD,eAAe,EAAE,MAAM,CAAA;IAEvB,+CAA+C;IAC/C,iBAAiB,EAAE,iBAAiB,CAAA;IAGpC,qCAAqC;IACrC,eAAe,EAAE,WAAW,GAAG,IAAI,CAAA;IAEnC,oDAAoD;IACpD,sBAAsB,EAAE,MAAM,GAAG,IAAI,CAAA;IAErC,4CAA4C;IAC5C,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;IAGhD,yDAAyD;IACzD,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;IAG9C,8CAA8C;IAC9C,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IAEpB,8CAA8C;IAC9C,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAE3B,0CAA0C;IAC1C,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;IAG1C,+CAA+C;IAC/C,QAAQ,EAAE,OAAO,CAAA;IAEjB,oCAAoC;IACpC,eAAe,EAAE,MAAM,CAAA;IAGvB,uDAAuD;IACvD,oBAAoB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;IAEpD,yDAAyD;IACzD,oBAAoB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;CACrD;AAID;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,qCAAqC;IACrC,OAAO,EAAE,MAAM,CAAA;IAEf,4CAA4C;IAC5C,UAAU,EAAE,MAAM,CAAA;IAElB,8CAA8C;IAC9C,OAAO,EAAE,MAAM,CAAA;IAEf,2CAA2C;IAC3C,YAAY,EAAE,MAAM,CAAA;CACrB;AAID;;;;;;;GAOG;AACH,MAAM,WAAW,aAAa;IAC5B,8BAA8B;IAC9B,QAAQ,EAAE,MAAM,CAAA;IAEhB,+CAA+C;IAC/C,WAAW,EAAE,MAAM,CAAA;IAEnB,uCAAuC;IACvC,KAAK,CAAC,EAAE,MAAM,CAAA;IAEd,uCAAuC;IACvC,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB;AAID,gDAAgD;AAChD,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,MAAM,CAAA;IACjB,cAAc,EAAE,MAAM,CAAA;IACtB,iBAAiB,EAAE,MAAM,CAAA;IACzB,iBAAiB,EAAE,iBAAiB,GAAG,MAAM,CAAA;IAC7C,eAAe,EAAE,MAAM,CAAA;IACvB,aAAa,EAAE,MAAM,CAAA;IACrB,eAAe,EAAE,WAAW,GAAG,MAAM,GAAG,IAAI,CAAA;IAC5C,0GAA0G;IAC1G,UAAU,CAAC,EAAE,OAAO,CAAA;IACpB,8GAA8G;IAC9G,mBAAmB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CACpC;AAED,2CAA2C;AAC3C,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,YAAY,EAAE,CAAA;IACtB,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;CACf;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,CAAA;IAClB,WAAW,EAAE,MAAM,CAAA;IACnB,QAAQ,EAAE,MAAM,CAAA;IAChB,mEAAmE;IACnE,WAAW,EAAE,MAAM,CAAA;IACnB,UAAU,EAAE,MAAM,CAAA;IAClB,MAAM,EAAE,MAAM,CAAA;IACd,2EAA2E;IAC3E,QAAQ,EAAE,OAAO,CAAA;CAClB;AAED,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,MAAM,CAAA;IACb,QAAQ,EAAE,MAAM,CAAA;IAChB,aAAa,EAAE,OAAO,CAAA;IACtB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,EAAE,MAAM,CAAA;IAClB,MAAM,EAAE,MAAM,CAAA;IACd,YAAY,EAAE,OAAO,CAAA;IACrB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,qCAAqC;AACrC,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,gBAAgB,EAAE,MAAM,CAAA;IACxB,cAAc,EAAE,MAAM,CAAA;IACtB,iBAAiB,EAAE,MAAM,CAAA;IACzB,WAAW,EAAE,WAAW,GAAG,MAAM,CAAA;IACjC,eAAe,EAAE,MAAM,CAAA;IACvB,cAAc,EAAE,MAAM,CAAA;IACtB,qBAAqB,EAAE,MAAM,CAAA;IAC7B,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAC7B,YAAY,EAAE,MAAM,CAAA;IACpB,UAAU,EAAE,MAAM,CAAA;IAClB,aAAa,EAAE,MAAM,CAAA;IACrB,UAAU,EAAE,MAAM,CAAA;IAClB,yFAAyF;IACzF,wBAAwB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACxC,YAAY,EAAE,YAAY,GAAG,MAAM,CAAA;IACnC,iBAAiB,EAAE,MAAM,CAAA;IACzB,eAAe,EAAE,MAAM,CAAA;IACvB,iBAAiB,EAAE,iBAAiB,GAAG,MAAM,CAAA;IAC7C,eAAe,EAAE,WAAW,GAAG,MAAM,GAAG,IAAI,CAAA;IAC5C,sBAAsB,EAAE,MAAM,GAAG,IAAI,CAAA;IACrC,gBAAgB,EAAE,OAAO,GAAG,IAAI,CAAA;IAChC,oBAAoB,EAAE,OAAO,GAAG,IAAI,CAAA;IACpC,oBAAoB,EAAE,OAAO,GAAG,IAAI,CAAA;IACpC,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC/B;;;;;;OAMG;IACH,oBAAoB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACpC,wBAAwB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACxC,eAAe,CAAC,EAAE,OAAO,GAAG,IAAI,CAAA;IAChC;;;;;OAKG;IACH,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACjC;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B;;;;;OAKG;IACH,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAClC,0GAA0G;IAC1G,UAAU,CAAC,EAAE,OAAO,CAAA;IACpB,wFAAwF;IACxF,mBAAmB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACnC;;;OAGG;IACH,cAAc,CAAC,EAAE,mBAAmB,EAAE,GAAG,IAAI,CAAA;IAC7C,KAAK,CAAC,EAAE,SAAS,EAAE,CAAA;IACnB;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,mBAAmB,EAAE,CAAA;CACjC;AAED;;;GAGG;AACH,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAA;IACZ,EAAE,EAAE,OAAO,GAAG,MAAM,GAAG,QAAQ,GAAG,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,CAAA;IACnF,MAAM,EAAE,MAAM,CAAA;IACd,WAAW,EAAE,MAAM,GAAG,KAAK,GAAG,SAAS,GAAG,QAAQ,CAAA;IAClD,IAAI,CAAC,EAAE,MAAM,EAAE,CAAA;IACf,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED,+BAA+B;AAC/B,MAAM,WAAW,YAAY;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB"}
|
package/dist/finops.js
CHANGED
|
@@ -4,11 +4,25 @@
|
|
|
4
4
|
*
|
|
5
5
|
* These types correspond to the `execution_traces` table and the
|
|
6
6
|
* `finops_attribution_4d` materialized view defined in
|
|
7
|
-
*
|
|
7
|
+
* the data-architecture schema.
|
|
8
8
|
*
|
|
9
9
|
* HLD §3.6 (FinOps Ledger), §3.19 (4D Attribution)
|
|
10
10
|
*
|
|
11
11
|
* @module
|
|
12
12
|
*/
|
|
13
13
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
14
|
+
exports.DEFAULT_MONTHLY_BUDGET_USD = exports.DEFAULT_DAILY_BUDGET_USD = void 0;
|
|
15
|
+
// ─── Workspace spend caps ────────────────────────────────────────────
|
|
16
|
+
/**
|
|
17
|
+
* The daily spend cap, in USD, of a workspace that has never saved one. A
|
|
18
|
+
* hard cap: the proxy refuses a request that would take the day's spend over
|
|
19
|
+
* it (`429 BUDGET_EXCEEDED`). An owner or admin changes it on Settings ›
|
|
20
|
+
* Billing › Budget Limits or with `PUT /api/v1/budget`.
|
|
21
|
+
*/
|
|
22
|
+
exports.DEFAULT_DAILY_BUDGET_USD = 100;
|
|
23
|
+
/**
|
|
24
|
+
* The monthly cap, in USD, of a workspace that has never saved one. Alerts
|
|
25
|
+
* only: reaching it raises budget alerts and refuses nothing.
|
|
26
|
+
*/
|
|
27
|
+
exports.DEFAULT_MONTHLY_BUDGET_USD = 500;
|
|
14
28
|
//# sourceMappingURL=finops.js.map
|
package/dist/finops.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"finops.js","sourceRoot":"","sources":["../src/finops.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;GAUG"}
|
|
1
|
+
{"version":3,"file":"finops.js","sourceRoot":"","sources":["../src/finops.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;GAUG;;;AASH,wEAAwE;AAExE;;;;;GAKG;AACU,QAAA,wBAAwB,GAAG,GAAG,CAAA;AAE3C;;;GAGG;AACU,QAAA,0BAA0B,GAAG,GAAG,CAAA"}
|
|
@@ -0,0 +1,18 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* The verdicts a gate decision records (the SIEM `gate_decisions` source),
|
|
3
|
+
* and what each means. Every one is a gate's verdict on a tool call except
|
|
4
|
+
* `TAMPER`, the verdict on the gate's own files.
|
|
5
|
+
*
|
|
6
|
+
* @module
|
|
7
|
+
*/
|
|
8
|
+
export declare const GATE_DECISION_VERDICTS: {
|
|
9
|
+
readonly ALLOW: "the call ran";
|
|
10
|
+
readonly BLOCK: "the call was refused";
|
|
11
|
+
readonly FLAG: "the call ran, flagged by an advisory rule";
|
|
12
|
+
readonly WOULD_BLOCK: "the call ran; a shadow rule would have refused it";
|
|
13
|
+
readonly HOLD: "the call waits for a reviewer";
|
|
14
|
+
readonly BYPASS_APPROVED: "the call ran on an approved hold";
|
|
15
|
+
readonly TAMPER: "a governance file (a gate, a hook registration, the policy snapshot, a VS Code hook setting) changed outside the sync daemon, which restored it";
|
|
16
|
+
};
|
|
17
|
+
export type GateDecisionVerdict = keyof typeof GATE_DECISION_VERDICTS;
|
|
18
|
+
//# sourceMappingURL=gateDecisions.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"gateDecisions.d.ts","sourceRoot":"","sources":["../src/gateDecisions.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,eAAO,MAAM,sBAAsB;;;;;;;;CAQzB,CAAA;AAEV,MAAM,MAAM,mBAAmB,GAAG,MAAM,OAAO,sBAAsB,CAAA"}
|
|
@@ -0,0 +1,20 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
/**
|
|
3
|
+
* The verdicts a gate decision records (the SIEM `gate_decisions` source),
|
|
4
|
+
* and what each means. Every one is a gate's verdict on a tool call except
|
|
5
|
+
* `TAMPER`, the verdict on the gate's own files.
|
|
6
|
+
*
|
|
7
|
+
* @module
|
|
8
|
+
*/
|
|
9
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
10
|
+
exports.GATE_DECISION_VERDICTS = void 0;
|
|
11
|
+
exports.GATE_DECISION_VERDICTS = {
|
|
12
|
+
ALLOW: 'the call ran',
|
|
13
|
+
BLOCK: 'the call was refused',
|
|
14
|
+
FLAG: 'the call ran, flagged by an advisory rule',
|
|
15
|
+
WOULD_BLOCK: 'the call ran; a shadow rule would have refused it',
|
|
16
|
+
HOLD: 'the call waits for a reviewer',
|
|
17
|
+
BYPASS_APPROVED: 'the call ran on an approved hold',
|
|
18
|
+
TAMPER: 'a governance file (a gate, a hook registration, the policy snapshot, a VS Code hook setting) changed outside the sync daemon, which restored it',
|
|
19
|
+
};
|
|
20
|
+
//# sourceMappingURL=gateDecisions.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"gateDecisions.js","sourceRoot":"","sources":["../src/gateDecisions.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;;AAEU,QAAA,sBAAsB,GAAG;IACpC,KAAK,EAAE,cAAc;IACrB,KAAK,EAAE,sBAAsB;IAC7B,IAAI,EAAE,2CAA2C;IACjD,WAAW,EAAE,mDAAmD;IAChE,IAAI,EAAE,+BAA+B;IACrC,eAAe,EAAE,kCAAkC;IACnD,MAAM,EAAE,iJAAiJ;CACjJ,CAAA"}
|
|
@@ -0,0 +1,23 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Which gate an event came from, for the one harness that installs two.
|
|
3
|
+
*
|
|
4
|
+
* A harness is one `HarnessType`: one integration that `intutic connect` sets
|
|
5
|
+
* up, and the unit the harness count counts. Its gate reports under the same
|
|
6
|
+
* id, in hook events (`harnessType`), agent reports, the AI inventory and the
|
|
7
|
+
* SIEM export. `antigravity` is the exception: the integration installs
|
|
8
|
+
* Google Antigravity's `PreToolUse` gate and Gemini CLI's `BeforeTool` gate,
|
|
9
|
+
* for two products a machine may have together or apart. Each reports under
|
|
10
|
+
* its own gate id, `antigravity` and `gemini-cli`, so the silent-gate check
|
|
11
|
+
* expects only the gate of the product that is there, and the inventory and
|
|
12
|
+
* SIEM say which product a call came through. The harness, its rules file and
|
|
13
|
+
* its count stay one.
|
|
14
|
+
*
|
|
15
|
+
* @module
|
|
16
|
+
*/
|
|
17
|
+
/** The gate id Gemini CLI's gate reports under. */
|
|
18
|
+
export declare const GEMINI_CLI_GATE_ID = "gemini-cli";
|
|
19
|
+
/** The gate ids a harness's gates report under: its own id, or two for `antigravity`. */
|
|
20
|
+
export declare function gateIdentitiesOf(harness: string): readonly string[];
|
|
21
|
+
/** The harness a gate id belongs to. */
|
|
22
|
+
export declare function harnessOfGate(gateId: string): string;
|
|
23
|
+
//# sourceMappingURL=gateIdentity.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"gateIdentity.d.ts","sourceRoot":"","sources":["../src/gateIdentity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,mDAAmD;AACnD,eAAO,MAAM,kBAAkB,eAAe,CAAA;AAE9C,yFAAyF;AACzF,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,CAEnE;AAED,wCAAwC;AACxC,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAEpD"}
|