@intutic/shared-types 2.2.0 → 2.4.0

package/dist/upstreamRetry.d.ts

@@ -0,0 +1,121 @@
+/**
+ * The workspace setting `upstreamRetry`: how the LLM proxy retries a provider
+ * call that failed before any response reached the client, and where it falls
+ * back when those retries run out.
+ *
+ * Every field is optional and overrides the proxy's own `config.yaml` value
+ * (`intutic_settings.routing.retry` / `.fallbacks`) field by field, so a
+ * workspace can change one knob without restating the rest. The proxy reads
+ * it from `/api/v1/auth/key-context` (`packages/proxy/src/routing/retry.rs`,
+ * `WorkspaceRetry`); `fixtures/upstream-retry-vectors.json` holds the two
+ * readings together.
+ */
+import { z } from 'zod';
+/**
+ * The ceilings both the schema and the proxy enforce, so no setting can
+ * configure a retry storm. The proxy clamps `config.yaml` to the same values
+ * (`RetryConfig::bounded`); a test holds the two equal.
+ */
+export declare const UPSTREAM_RETRY_LIMITS: {
+    readonly maxAttempts: 5;
+    readonly maxBackoffMs: 60000;
+    readonly budgetMs: 120000;
+    readonly fallbackTargets: 5;
+    readonly fallbackModels: 50;
+};
+/** Retried by default: 429, 500, 502, 503, 504 and Anthropic's 529 overloaded. */
+export declare const DEFAULT_UPSTREAM_RETRY_STATUSES: readonly [429, 500, 502, 503, 504, 529];
+/** The defaults the proxy applies when neither config.yaml nor the workspace sets a field. */
+export declare const DEFAULT_UPSTREAM_RETRY: {
+    readonly enabled: true;
+    readonly maxAttempts: 3;
+    readonly initialBackoffMs: 500;
+    readonly maxBackoffMs: 8000;
+    readonly budgetMs: 30000;
+    readonly onStatus: readonly [429, 500, 502, 503, 504, 529];
+};
+/**
+ * Providers a fallback target may name: every id the proxy resolves
+ * (`provider_from_wire_id` in packages/proxy/src/proxy.rs), the cloud
+ * providers' aliases included, so a target copied from config.yaml is valid
+ * here too. A test holds the two lists equal.
+ */
+export declare const UPSTREAM_PROVIDERS: readonly ["anthropic", "openai", "gemini", "mistral", "openrouter", "deepseek", "bedrock", "vertex_ai", "vertex", "azure_openai", "azure"];
+export type UpstreamProvider = (typeof UPSTREAM_PROVIDERS)[number];
+/**
+ * One fallback target. `model` alone switches model on the provider that
+ * model resolves to; `provider` alone sends the same model to another
+ * provider; both pin the pair.
+ */
+export declare const UpstreamFallbackTargetSchema: z.ZodEffects<z.ZodObject<{
+    model: z.ZodOptional<z.ZodString>;
+    provider: z.ZodOptional<z.ZodEnum<["anthropic", "openai", "gemini", "mistral", "openrouter", "deepseek", "bedrock", "vertex_ai", "vertex", "azure_openai", "azure"]>>;
+}, "strict", z.ZodTypeAny, {
+    model?: string | undefined;
+    provider?: "anthropic" | "openai" | "mistral" | "openrouter" | "deepseek" | "gemini" | "azure_openai" | "bedrock" | "vertex_ai" | "vertex" | "azure" | undefined;
+}, {
+    model?: string | undefined;
+    provider?: "anthropic" | "openai" | "mistral" | "openrouter" | "deepseek" | "gemini" | "azure_openai" | "bedrock" | "vertex_ai" | "vertex" | "azure" | undefined;
+}>, {
+    model?: string | undefined;
+    provider?: "anthropic" | "openai" | "mistral" | "openrouter" | "deepseek" | "gemini" | "azure_openai" | "bedrock" | "vertex_ai" | "vertex" | "azure" | undefined;
+}, {
+    model?: string | undefined;
+    provider?: "anthropic" | "openai" | "mistral" | "openrouter" | "deepseek" | "gemini" | "azure_openai" | "bedrock" | "vertex_ai" | "vertex" | "azure" | undefined;
+}>;
+export type UpstreamFallbackTarget = z.infer<typeof UpstreamFallbackTargetSchema>;
+export declare const UpstreamRetrySettingsSchema: z.ZodObject<{
+    enabled: z.ZodOptional<z.ZodBoolean>;
+    maxAttempts: z.ZodOptional<z.ZodNumber>;
+    initialBackoffMs: z.ZodOptional<z.ZodNumber>;
+    maxBackoffMs: z.ZodOptional<z.ZodNumber>;
+    budgetMs: z.ZodOptional<z.ZodNumber>;
+    onStatus: z.ZodOptional<z.ZodArray<z.ZodNumber, "many">>;
+    /** Ordered targets, keyed by the model whose retries ran out. */
+    fallbacks: z.ZodOptional<z.ZodEffects<z.ZodRecord<z.ZodString, z.ZodArray<z.ZodEffects<z.ZodObject<{
+        model: z.ZodOptional<z.ZodString>;
+        provider: z.ZodOptional<z.ZodEnum<["anthropic", "openai", "gemini", "mistral", "openrouter", "deepseek", "bedrock", "vertex_ai", "vertex", "azure_openai", "azure"]>>;
+    }, "strict", z.ZodTypeAny, {
+        model?: string | undefined;
+        provider?: "anthropic" | "openai" | "mistral" | "openrouter" | "deepseek" | "gemini" | "azure_openai" | "bedrock" | "vertex_ai" | "vertex" | "azure" | undefined;
+    }, {
+        model?: string | undefined;
+        provider?: "anthropic" | "openai" | "mistral" | "openrouter" | "deepseek" | "gemini" | "azure_openai" | "bedrock" | "vertex_ai" | "vertex" | "azure" | undefined;
+    }>, {
+        model?: string | undefined;
+        provider?: "anthropic" | "openai" | "mistral" | "openrouter" | "deepseek" | "gemini" | "azure_openai" | "bedrock" | "vertex_ai" | "vertex" | "azure" | undefined;
+    }, {
+        model?: string | undefined;
+        provider?: "anthropic" | "openai" | "mistral" | "openrouter" | "deepseek" | "gemini" | "azure_openai" | "bedrock" | "vertex_ai" | "vertex" | "azure" | undefined;
+    }>, "many">>, Record<string, {
+        model?: string | undefined;
+        provider?: "anthropic" | "openai" | "mistral" | "openrouter" | "deepseek" | "gemini" | "azure_openai" | "bedrock" | "vertex_ai" | "vertex" | "azure" | undefined;
+    }[]>, Record<string, {
+        model?: string | undefined;
+        provider?: "anthropic" | "openai" | "mistral" | "openrouter" | "deepseek" | "gemini" | "azure_openai" | "bedrock" | "vertex_ai" | "vertex" | "azure" | undefined;
+    }[]>>>;
+}, "strict", z.ZodTypeAny, {
+    enabled?: boolean | undefined;
+    maxAttempts?: number | undefined;
+    initialBackoffMs?: number | undefined;
+    maxBackoffMs?: number | undefined;
+    budgetMs?: number | undefined;
+    onStatus?: number[] | undefined;
+    fallbacks?: Record<string, {
+        model?: string | undefined;
+        provider?: "anthropic" | "openai" | "mistral" | "openrouter" | "deepseek" | "gemini" | "azure_openai" | "bedrock" | "vertex_ai" | "vertex" | "azure" | undefined;
+    }[]> | undefined;
+}, {
+    enabled?: boolean | undefined;
+    maxAttempts?: number | undefined;
+    initialBackoffMs?: number | undefined;
+    maxBackoffMs?: number | undefined;
+    budgetMs?: number | undefined;
+    onStatus?: number[] | undefined;
+    fallbacks?: Record<string, {
+        model?: string | undefined;
+        provider?: "anthropic" | "openai" | "mistral" | "openrouter" | "deepseek" | "gemini" | "azure_openai" | "bedrock" | "vertex_ai" | "vertex" | "azure" | undefined;
+    }[]> | undefined;
+}>;
+export type UpstreamRetrySettings = z.infer<typeof UpstreamRetrySettingsSchema>;
+//# sourceMappingURL=upstreamRetry.d.ts.map

package/dist/upstreamRetry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"upstreamRetry.d.ts","sourceRoot":"","sources":["../src/upstreamRetry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB;;;;GAIG;AACH,eAAO,MAAM,qBAAqB;;;;;;CAMxB,CAAA;AAEV,kFAAkF;AAClF,eAAO,MAAM,+BAA+B,yCAA0C,CAAA;AAEtF,8FAA8F;AAC9F,eAAO,MAAM,sBAAsB;;;;;;;CAOzB,CAAA;AAEV;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB,4IAYrB,CAAA;AACV,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAA;AAElE;;;;GAIG;AACH,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;EAQrC,CAAA;AACJ,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAA;AAEjF,eAAO,MAAM,2BAA2B;;;;;;;IAQpC,iEAAiE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAW1D,CAAA;AACX,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAA"}

package/dist/upstreamRetry.js

@@ -0,0 +1,90 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UpstreamRetrySettingsSchema = exports.UpstreamFallbackTargetSchema = exports.UPSTREAM_PROVIDERS = exports.DEFAULT_UPSTREAM_RETRY = exports.DEFAULT_UPSTREAM_RETRY_STATUSES = exports.UPSTREAM_RETRY_LIMITS = void 0;
+/**
+ * The workspace setting `upstreamRetry`: how the LLM proxy retries a provider
+ * call that failed before any response reached the client, and where it falls
+ * back when those retries run out.
+ *
+ * Every field is optional and overrides the proxy's own `config.yaml` value
+ * (`intutic_settings.routing.retry` / `.fallbacks`) field by field, so a
+ * workspace can change one knob without restating the rest. The proxy reads
+ * it from `/api/v1/auth/key-context` (`packages/proxy/src/routing/retry.rs`,
+ * `WorkspaceRetry`); `fixtures/upstream-retry-vectors.json` holds the two
+ * readings together.
+ */
+const zod_1 = require("zod");
+/**
+ * The ceilings both the schema and the proxy enforce, so no setting can
+ * configure a retry storm. The proxy clamps `config.yaml` to the same values
+ * (`RetryConfig::bounded`); a test holds the two equal.
+ */
+exports.UPSTREAM_RETRY_LIMITS = {
+    maxAttempts: 5,
+    maxBackoffMs: 60_000,
+    budgetMs: 120_000,
+    fallbackTargets: 5,
+    fallbackModels: 50,
+};
+/** Retried by default: 429, 500, 502, 503, 504 and Anthropic's 529 overloaded. */
+exports.DEFAULT_UPSTREAM_RETRY_STATUSES = [429, 500, 502, 503, 504, 529];
+/** The defaults the proxy applies when neither config.yaml nor the workspace sets a field. */
+exports.DEFAULT_UPSTREAM_RETRY = {
+    enabled: true,
+    maxAttempts: 3,
+    initialBackoffMs: 500,
+    maxBackoffMs: 8_000,
+    budgetMs: 30_000,
+    onStatus: [...exports.DEFAULT_UPSTREAM_RETRY_STATUSES],
+};
+/**
+ * Providers a fallback target may name: every id the proxy resolves
+ * (`provider_from_wire_id` in packages/proxy/src/proxy.rs), the cloud
+ * providers' aliases included, so a target copied from config.yaml is valid
+ * here too. A test holds the two lists equal.
+ */
+exports.UPSTREAM_PROVIDERS = [
+    'anthropic',
+    'openai',
+    'gemini',
+    'mistral',
+    'openrouter',
+    'deepseek',
+    'bedrock',
+    'vertex_ai',
+    'vertex',
+    'azure_openai',
+    'azure',
+];
+/**
+ * One fallback target. `model` alone switches model on the provider that
+ * model resolves to; `provider` alone sends the same model to another
+ * provider; both pin the pair.
+ */
+exports.UpstreamFallbackTargetSchema = zod_1.z
+    .object({
+    model: zod_1.z.string().trim().min(1).max(200).optional(),
+    provider: zod_1.z.enum(exports.UPSTREAM_PROVIDERS).optional(),
+})
+    .strict()
+    .refine((t) => t.model !== undefined || t.provider !== undefined, {
+    message: 'A fallback target names a model, a provider, or both',
+});
+exports.UpstreamRetrySettingsSchema = zod_1.z
+    .object({
+    enabled: zod_1.z.boolean().optional(),
+    maxAttempts: zod_1.z.number().int().min(1).max(exports.UPSTREAM_RETRY_LIMITS.maxAttempts).optional(),
+    initialBackoffMs: zod_1.z.number().int().min(0).max(exports.UPSTREAM_RETRY_LIMITS.maxBackoffMs).optional(),
+    maxBackoffMs: zod_1.z.number().int().min(0).max(exports.UPSTREAM_RETRY_LIMITS.maxBackoffMs).optional(),
+    budgetMs: zod_1.z.number().int().min(0).max(exports.UPSTREAM_RETRY_LIMITS.budgetMs).optional(),
+    onStatus: zod_1.z.array(zod_1.z.number().int().min(400).max(599)).max(20).optional(),
+    /** Ordered targets, keyed by the model whose retries ran out. */
+    fallbacks: zod_1.z
+        .record(zod_1.z.string().trim().min(1).max(200), zod_1.z.array(exports.UpstreamFallbackTargetSchema).min(1).max(exports.UPSTREAM_RETRY_LIMITS.fallbackTargets))
+        .refine((f) => Object.keys(f).length <= exports.UPSTREAM_RETRY_LIMITS.fallbackModels, {
+        message: `At most ${exports.UPSTREAM_RETRY_LIMITS.fallbackModels} models may have fallbacks`,
+    })
+        .optional(),
+})
+    .strict();
+//# sourceMappingURL=upstreamRetry.js.map

package/dist/upstreamRetry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"upstreamRetry.js","sourceRoot":"","sources":["../src/upstreamRetry.ts"],"names":[],"mappings":";;;AAAA;;;;;;;;;;;GAWG;AACH,6BAAuB;AAEvB;;;;GAIG;AACU,QAAA,qBAAqB,GAAG;IACnC,WAAW,EAAE,CAAC;IACd,YAAY,EAAE,MAAM;IACpB,QAAQ,EAAE,OAAO;IACjB,eAAe,EAAE,CAAC;IAClB,cAAc,EAAE,EAAE;CACV,CAAA;AAEV,kFAAkF;AACrE,QAAA,+BAA+B,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAU,CAAA;AAEtF,8FAA8F;AACjF,QAAA,sBAAsB,GAAG;IACpC,OAAO,EAAE,IAAI;IACb,WAAW,EAAE,CAAC;IACd,gBAAgB,EAAE,GAAG;IACrB,YAAY,EAAE,KAAK;IACnB,QAAQ,EAAE,MAAM;IAChB,QAAQ,EAAE,CAAC,GAAG,uCAA+B,CAAC;CACtC,CAAA;AAEV;;;;;GAKG;AACU,QAAA,kBAAkB,GAAG;IAChC,WAAW;IACX,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,YAAY;IACZ,UAAU;IACV,SAAS;IACT,WAAW;IACX,QAAQ;IACR,cAAc;IACd,OAAO;CACC,CAAA;AAGV;;;;GAIG;AACU,QAAA,4BAA4B,GAAG,OAAC;KAC1C,MAAM,CAAC;IACN,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACnD,QAAQ,EAAE,OAAC,CAAC,IAAI,CAAC,0BAAkB,CAAC,CAAC,QAAQ,EAAE;CAChD,CAAC;KACD,MAAM,EAAE;KACR,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,CAAC,QAAQ,KAAK,SAAS,EAAE;IAChE,OAAO,EAAE,sDAAsD;CAChE,CAAC,CAAA;AAGS,QAAA,2BAA2B,GAAG,OAAC;KACzC,MAAM,CAAC;IACN,OAAO,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC/B,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,6BAAqB,CAAC,WAAW,CAAC,CAAC,QAAQ,EAAE;IACtF,gBAAgB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,6BAAqB,CAAC,YAAY,CAAC,CAAC,QAAQ,EAAE;IAC5F,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,6BAAqB,CAAC,YAAY,CAAC,CAAC,QAAQ,EAAE;IACxF,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,6BAAqB,CAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE;IAChF,QAAQ,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IACxE,iEAAiE;IACjE,SAAS,EAAE,OAAC;SACT,MAAM,CACL,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EACjC,OAAC,CAAC,KAAK,CAAC,oCAA4B,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,6BAAqB,CAAC,eAAe,CAAC,CACxF;SACA,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,6BAAqB,CAAC,cAAc,EAAE;QAC5E,OAAO,EAAE,WAAW,6BAAqB,CAAC,cAAc,4BAA4B;KACrF,CAAC;SACD,QAAQ,EAAE;CACd,CAAC;KACD,MAAM,EAAE,CAAA"}

package/dist/usage.d.ts

@@ -54,4 +54,190 @@ export interface VirtualKeyBreakdown {
     totalOutputTokens: number;
     traceCount: number;
 }
+/**
+ * One developer's usage for a period (`GET /api/v1/usage/members`).
+ *
+ * A call is attributed to the workspace member who owns the virtual key that
+ * authenticated it. `memberId: null` is the unattributed bucket: calls with no
+ * virtual-key auth context, and calls whose key prefix no single member owns.
+ */
+export interface MemberUsage {
+    memberId: string | null;
+    /** Null for the unattributed bucket, and for a member since removed. */
+    displayName: string | null;
+    email: string | null;
+    totalCostUsd: number;
+    totalRawCostUsd: number;
+    totalInputTokens: number;
+    totalOutputTokens: number;
+    traceCount: number;
+    /** Distinct requested models, sorted. */
+    models: string[];
+    /** Distinct UTC calendar days with at least one call. */
+    activeDays: number;
+}
+/**
+ * `GET /api/v1/usage/members`. `scope: 'self'` when the caller may only see
+ * their own row (DEVELOPER and VIEWER); `'workspace'` for OWNER, ADMIN and EM.
+ */
+export interface MemberUsageResponse {
+    scope: 'workspace' | 'self';
+    members: MemberUsage[];
+}
+/**
+ * One SCIM group's usage for a period (`GET /api/v1/usage/teams`): the sum over
+ * every member in the group, directly or through nested groups. A member in
+ * several groups counts in each, so team totals can add up to more than the
+ * workspace total.
+ */
+export interface TeamUsage {
+    groupId: string;
+    displayName: string;
+    /** Members in the group, transitively. */
+    memberCount: number;
+    /** Members of the group with at least one attributed call in the period. */
+    activeMembers: number;
+    totalCostUsd: number;
+    totalRawCostUsd: number;
+    totalInputTokens: number;
+    totalOutputTokens: number;
+    traceCount: number;
+}
+/**
+ * `GET /api/v1/usage/teams`. `scimGroups: false` means the workspace has no
+ * SCIM groups, so there are no teams to roll up to; per-member usage is the
+ * finest grouping available.
+ */
+export interface TeamUsageResponse {
+    scimGroups: boolean;
+    teams: TeamUsage[];
+}
+/**
+ * Usage per repository and branch (`GET /api/v1/usage/branches`), from the git
+ * context copied onto each trace when it was recorded. `repo` and `branch` are
+ * both null on the row for calls made with no git context.
+ */
+export interface BranchUsage {
+    /** Normalised `origin` remote, host/path. Null when the directory had no `origin`. */
+    repo: string | null;
+    branch: string | null;
+    /** Distinct HEAD commits the calls were made at. */
+    commitCount: number;
+    totalCostUsd: number;
+    totalRawCostUsd: number;
+    totalInputTokens: number;
+    totalOutputTokens: number;
+    traceCount: number;
+    /** Latest call, ISO 8601. */
+    lastCallAt: string;
+}
+/**
+ * Usage per HEAD commit (`GET /api/v1/usage/commits`): the calls made while
+ * that commit was checked out, which is the work that led to the next commit,
+ * not the work that produced this one.
+ */
+export interface CommitUsage {
+    repo: string | null;
+    branch: string | null;
+    commit: string | null;
+    totalCostUsd: number;
+    totalRawCostUsd: number;
+    totalInputTokens: number;
+    totalOutputTokens: number;
+    traceCount: number;
+    /** First and latest call at this commit, ISO 8601. */
+    firstCallAt: string;
+    lastCallAt: string;
+}
+/** `scope` as on {@link MemberUsageResponse}: `'self'` counts only the caller's own calls. */
+export interface BranchUsageResponse {
+    scope: 'workspace' | 'self';
+    branches: BranchUsage[];
+}
+export interface CommitUsageResponse {
+    scope: 'workspace' | 'self';
+    commits: CommitUsage[];
+}
+export type PullRequestState = 'open' | 'closed' | 'merged';
+/**
+ * One pull request's usage for a period (`GET /api/v1/usage/pull-requests`):
+ * the calls made on its head branch, in its repository, between the end of
+ * the previous pull request from that branch (or the branch's first call) and
+ * this one's merge or close. A call belongs to one pull request at most.
+ */
+export interface PullRequestUsage {
+    /** Normalised host/owner/name, lower-cased. */
+    repo: string;
+    number: number;
+    title: string;
+    /** GitHub login of whoever opened it. */
+    author: string | null;
+    state: PullRequestState;
+    headBranch: string;
+    baseBranch: string | null;
+    /** The pull request on GitHub. */
+    url: string;
+    /** ISO 8601. */
+    openedAt: string;
+    mergedAt: string | null;
+    closedAt: string | null;
+    totalCostUsd: number;
+    totalRawCostUsd: number;
+    totalInputTokens: number;
+    totalOutputTokens: number;
+    traceCount: number;
+    /** Members with an attributed call on it in the period. */
+    memberCount: number;
+    /** First and latest call in the period, ISO 8601. */
+    firstCallAt: string;
+    lastCallAt: string;
+}
+/** Where pull requests come from, and whether that is working, for the empty states. */
+export interface PullRequestSources {
+    /** The workspace has a GitHub source connector whose token lists pull requests. */
+    connector: boolean;
+    /** The pull-request webhook is set up. */
+    webhook: boolean;
+    /** The GitHub host the connector's token is used against, e.g. `github.com`. */
+    apiHost: string;
+    /** Repositories whose pull requests the connector's token was refused (missing scope or access). */
+    noAccessRepos: string[];
+    /** Pull requests mapped in the workspace, any period. */
+    mappedPullRequests: number;
+    /** Last time a branch was looked up through the connector, ISO 8601. */
+    lastCheckedAt: string | null;
+}
+/** `scope` as on {@link MemberUsageResponse}: `'self'` counts only the caller's own calls. */
+export interface PullRequestUsageResponse {
+    scope: 'workspace' | 'self';
+    github: PullRequestSources;
+    pullRequests: PullRequestUsage[];
+}
+/** `POST /api/v1/usage/pull-requests/refresh`. */
+export interface PullRequestRefreshResult {
+    /** Branches looked up. */
+    checked: number;
+    /** Answered 304: the ETag matched and nothing changed. */
+    notModified: number;
+    /** Pull requests written or updated. */
+    pullRequests: number;
+    /** Branches the token could not list. */
+    noAccess: number;
+    /** True when GitHub's rate limit stopped the run early. */
+    rateLimited: boolean;
+}
+/** `GET /api/v1/integrations/github/webhook`. The secret is never returned here. */
+export interface GitHubWebhookInfo {
+    configured: boolean;
+    /** Payload URL to paste into GitHub. Null until a secret has been made. */
+    url: string | null;
+    createdAt: string | null;
+    secretRotatedAt: string | null;
+    lastDeliveryAt: string | null;
+}
+/** `POST /api/v1/integrations/github/webhook/secret`: the new secret, shown once. */
+export interface GitHubWebhookSecret {
+    url: string;
+    secret: string;
+}
 //# sourceMappingURL=usage.d.ts.map

package/dist/usage.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"usage.d.ts","sourceRoot":"","sources":["../src/usage.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,MAAM,WAAW,YAAY;IAC3B,WAAW,EAAE,MAAM,CAAA;IACnB,MAAM,EAAE,OAAO,GAAG,QAAQ,GAAG,SAAS,CAAA;IACtC,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,EAAE,MAAM,CAAA;IACf,YAAY,EAAE,MAAM,CAAA;IACpB,eAAe,EAAE,MAAM,CAAA;IACvB,eAAe,EAAE,MAAM,CAAA;IACvB,gBAAgB,EAAE,MAAM,CAAA;IACxB,iBAAiB,EAAE,MAAM,CAAA;IACzB,UAAU,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,EAAE,MAAM,CAAA;IAChB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,KAAK,EAAE,MAAM,CAAA;IACb,YAAY,EAAE,MAAM,CAAA;IACpB,aAAa,EAAE,MAAM,CAAA;IACrB,QAAQ,EAAE,MAAM,CAAA;IAChB,kBAAkB,EAAE,MAAM,CAAA;IAC1B,aAAa,EAAE,QAAQ,GAAG,QAAQ,GAAG,IAAI,CAAA;CAC1C;AAED,MAAM,WAAW,cAAc;IAC7B,cAAc,EAAE,MAAM,CAAA;IACtB,YAAY,EAAE,MAAM,CAAA;IACpB,eAAe,EAAE,MAAM,CAAA;IACvB,gBAAgB,EAAE,MAAM,CAAA;IACxB,iBAAiB,EAAE,MAAM,CAAA;IACzB,UAAU,EAAE,MAAM,CAAA;CACnB;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,mBAAmB;IAClC;;;;;OAKG;IACH,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,YAAY,EAAE,MAAM,CAAA;IACpB,eAAe,EAAE,MAAM,CAAA;IACvB,gBAAgB,EAAE,MAAM,CAAA;IACxB,iBAAiB,EAAE,MAAM,CAAA;IACzB,UAAU,EAAE,MAAM,CAAA;CACnB"}
+{"version":3,"file":"usage.d.ts","sourceRoot":"","sources":["../src/usage.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,MAAM,WAAW,YAAY;IAC3B,WAAW,EAAE,MAAM,CAAA;IACnB,MAAM,EAAE,OAAO,GAAG,QAAQ,GAAG,SAAS,CAAA;IACtC,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,EAAE,MAAM,CAAA;IACf,YAAY,EAAE,MAAM,CAAA;IACpB,eAAe,EAAE,MAAM,CAAA;IACvB,eAAe,EAAE,MAAM,CAAA;IACvB,gBAAgB,EAAE,MAAM,CAAA;IACxB,iBAAiB,EAAE,MAAM,CAAA;IACzB,UAAU,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,EAAE,MAAM,CAAA;IAChB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,KAAK,EAAE,MAAM,CAAA;IACb,YAAY,EAAE,MAAM,CAAA;IACpB,aAAa,EAAE,MAAM,CAAA;IACrB,QAAQ,EAAE,MAAM,CAAA;IAChB,kBAAkB,EAAE,MAAM,CAAA;IAC1B,aAAa,EAAE,QAAQ,GAAG,QAAQ,GAAG,IAAI,CAAA;CAC1C;AAED,MAAM,WAAW,cAAc;IAC7B,cAAc,EAAE,MAAM,CAAA;IACtB,YAAY,EAAE,MAAM,CAAA;IACpB,eAAe,EAAE,MAAM,CAAA;IACvB,gBAAgB,EAAE,MAAM,CAAA;IACxB,iBAAiB,EAAE,MAAM,CAAA;IACzB,UAAU,EAAE,MAAM,CAAA;CACnB;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,mBAAmB;IAClC;;;;;OAKG;IACH,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,YAAY,EAAE,MAAM,CAAA;IACpB,eAAe,EAAE,MAAM,CAAA;IACvB,gBAAgB,EAAE,MAAM,CAAA;IACxB,iBAAiB,EAAE,MAAM,CAAA;IACzB,UAAU,EAAE,MAAM,CAAA;CACnB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB,wEAAwE;IACxE,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB,YAAY,EAAE,MAAM,CAAA;IACpB,eAAe,EAAE,MAAM,CAAA;IACvB,gBAAgB,EAAE,MAAM,CAAA;IACxB,iBAAiB,EAAE,MAAM,CAAA;IACzB,UAAU,EAAE,MAAM,CAAA;IAClB,yCAAyC;IACzC,MAAM,EAAE,MAAM,EAAE,CAAA;IAChB,yDAAyD;IACzD,UAAU,EAAE,MAAM,CAAA;CACnB;AAED;;;GAGG;AACH,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,WAAW,GAAG,MAAM,CAAA;IAC3B,OAAO,EAAE,WAAW,EAAE,CAAA;CACvB;AAED;;;;;GAKG;AACH,MAAM,WAAW,SAAS;IACxB,OAAO,EAAE,MAAM,CAAA;IACf,WAAW,EAAE,MAAM,CAAA;IACnB,0CAA0C;IAC1C,WAAW,EAAE,MAAM,CAAA;IACnB,4EAA4E;IAC5E,aAAa,EAAE,MAAM,CAAA;IACrB,YAAY,EAAE,MAAM,CAAA;IACpB,eAAe,EAAE,MAAM,CAAA;IACvB,gBAAgB,EAAE,MAAM,CAAA;IACxB,iBAAiB,EAAE,MAAM,CAAA;IACzB,UAAU,EAAE,MAAM,CAAA;CACnB;AAED;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,UAAU,EAAE,OAAO,CAAA;IACnB,KAAK,EAAE,SAAS,EAAE,CAAA;CACnB;AAED;;;;GAIG;AACH,MAAM,WAAW,WAAW;IAC1B,sFAAsF;IACtF,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;IACnB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;IACrB,oDAAoD;IACpD,WAAW,EAAE,MAAM,CAAA;IACnB,YAAY,EAAE,MAAM,CAAA;IACpB,eAAe,EAAE,MAAM,CAAA;IACvB,gBAAgB,EAAE,MAAM,CAAA;IACxB,iBAAiB,EAAE,MAAM,CAAA;IACzB,UAAU,EAAE,MAAM,CAAA;IAClB,6BAA6B;IAC7B,UAAU,EAAE,MAAM,CAAA;CACnB;AAED;;;;GAIG;AACH,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;IACnB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;IACrB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;IACrB,YAAY,EAAE,MAAM,CAAA;IACpB,eAAe,EAAE,MAAM,CAAA;IACvB,gBAAgB,EAAE,MAAM,CAAA;IACxB,iBAAiB,EAAE,MAAM,CAAA;IACzB,UAAU,EAAE,MAAM,CAAA;IAClB,sDAAsD;IACtD,WAAW,EAAE,MAAM,CAAA;IACnB,UAAU,EAAE,MAAM,CAAA;CACnB;AAED,8FAA8F;AAC9F,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,WAAW,GAAG,MAAM,CAAA;IAC3B,QAAQ,EAAE,WAAW,EAAE,CAAA;CACxB;AAED,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,WAAW,GAAG,MAAM,CAAA;IAC3B,OAAO,EAAE,WAAW,EAAE,CAAA;CACvB;AAED,MAAM,MAAM,gBAAgB,GAAG,MAAM,GAAG,QAAQ,GAAG,QAAQ,CAAA;AAE3D;;;;;GAKG;AACH,MAAM,WAAW,gBAAgB;IAC/B,+CAA+C;IAC/C,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,MAAM,CAAA;IACb,yCAAyC;IACzC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;IACrB,KAAK,EAAE,gBAAgB,CAAA;IACvB,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,kCAAkC;IAClC,GAAG,EAAE,MAAM,CAAA;IACX,gBAAgB;IAChB,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB,YAAY,EAAE,MAAM,CAAA;IACpB,eAAe,EAAE,MAAM,CAAA;IACvB,gBAAgB,EAAE,MAAM,CAAA;IACxB,iBAAiB,EAAE,MAAM,CAAA;IACzB,UAAU,EAAE,MAAM,CAAA;IAClB,2DAA2D;IAC3D,WAAW,EAAE,MAAM,CAAA;IACnB,qDAAqD;IACrD,WAAW,EAAE,MAAM,CAAA;IACnB,UAAU,EAAE,MAAM,CAAA;CACnB;AAED,wFAAwF;AACxF,MAAM,WAAW,kBAAkB;IACjC,mFAAmF;IACnF,SAAS,EAAE,OAAO,CAAA;IAClB,0CAA0C;IAC1C,OAAO,EAAE,OAAO,CAAA;IAChB,gFAAgF;IAChF,OAAO,EAAE,MAAM,CAAA;IACf,oGAAoG;IACpG,aAAa,EAAE,MAAM,EAAE,CAAA;IACvB,yDAAyD;IACzD,kBAAkB,EAAE,MAAM,CAAA;IAC1B,wEAAwE;IACxE,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;CAC7B;AAED,8FAA8F;AAC9F,MAAM,WAAW,wBAAwB;IACvC,KAAK,EAAE,WAAW,GAAG,MAAM,CAAA;IAC3B,MAAM,EAAE,kBAAkB,CAAA;IAC1B,YAAY,EAAE,gBAAgB,EAAE,CAAA;CACjC;AAED,kDAAkD;AAClD,MAAM,WAAW,wBAAwB;IACvC,0BAA0B;IAC1B,OAAO,EAAE,MAAM,CAAA;IACf,0DAA0D;IAC1D,WAAW,EAAE,MAAM,CAAA;IACnB,wCAAwC;IACxC,YAAY,EAAE,MAAM,CAAA;IACpB,yCAAyC;IACzC,QAAQ,EAAE,MAAM,CAAA;IAChB,2DAA2D;IAC3D,WAAW,EAAE,OAAO,CAAA;CACrB;AAED,oFAAoF;AACpF,MAAM,WAAW,iBAAiB;IAChC,UAAU,EAAE,OAAO,CAAA;IACnB,2EAA2E;IAC3E,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;IAClB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAA;CAC9B;AAED,qFAAqF;AACrF,MAAM,WAAW,mBAAmB;IAClC,GAAG,EAAE,MAAM,CAAA;IACX,MAAM,EAAE,MAAM,CAAA;CACf"}

package/dist/wasmBinary.d.ts

@@ -0,0 +1,25 @@
+/**
+ * The few pieces of the WebAssembly binary format the load-time rewrites
+ * (`wasmMemoryCap.ts`, `wasmFuel.ts`) share: LEB128 integers, the section list, and
+ * reassembly. Not a general decoder; each rewrite parses only what it changes.
+ */
+export interface Section {
+    id: number;
+    payload: Uint8Array<ArrayBuffer>;
+}
+export declare function malformed(what: string): Error;
+export declare function readU32(bytes: Uint8Array, at: number): {
+    value: number;
+    next: number;
+};
+/** Skip any LEB128 integer, signed or unsigned, up to 64 bits. */
+export declare function skipLeb(bytes: Uint8Array, at: number): number;
+export declare function writeU32(value: number): number[];
+/** Signed LEB128, for `i32.const` immediates. */
+export declare function writeS32(value: number): number[];
+export declare function readSections(bytes: Uint8Array<ArrayBuffer>): Section[];
+/** Replace the section with `id`, or insert it where the spec's order puts it. */
+export declare function putSection(sections: Section[], id: number, payload: Uint8Array<ArrayBuffer>): void;
+export declare function assembleModule(header: Uint8Array, sections: Section[]): Uint8Array<ArrayBuffer>;
+export declare function concat(parts: Uint8Array[]): Uint8Array<ArrayBuffer>;
+//# sourceMappingURL=wasmBinary.d.ts.map

package/dist/wasmBinary.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wasmBinary.d.ts","sourceRoot":"","sources":["../src/wasmBinary.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,MAAM,WAAW,OAAO;IACtB,EAAE,EAAE,MAAM,CAAA;IACV,OAAO,EAAE,UAAU,CAAC,WAAW,CAAC,CAAA;CACjC;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,KAAK,CAE7C;AAED,wBAAgB,OAAO,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAUtF;AAED,kEAAkE;AAClE,wBAAgB,OAAO,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,GAAG,MAAM,CAK7D;AAED,wBAAgB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CAShD;AAED,iDAAiD;AACjD,wBAAgB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CAShD;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,UAAU,CAAC,WAAW,CAAC,GAAG,OAAO,EAAE,CAYtE;AAKD,kFAAkF;AAClF,wBAAgB,UAAU,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,CAAC,WAAW,CAAC,GAAG,IAAI,CAYlG;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,UAAU,CAAC,WAAW,CAAC,CAM/F;AAED,wBAAgB,MAAM,CAAC,KAAK,EAAE,UAAU,EAAE,GAAG,UAAU,CAAC,WAAW,CAAC,CAQnE"}

package/dist/wasmBinary.js

@@ -0,0 +1,111 @@
+"use strict";
+/**
+ * The few pieces of the WebAssembly binary format the load-time rewrites
+ * (`wasmMemoryCap.ts`, `wasmFuel.ts`) share: LEB128 integers, the section list, and
+ * reassembly. Not a general decoder; each rewrite parses only what it changes.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.malformed = malformed;
+exports.readU32 = readU32;
+exports.skipLeb = skipLeb;
+exports.writeU32 = writeU32;
+exports.writeS32 = writeS32;
+exports.readSections = readSections;
+exports.putSection = putSection;
+exports.assembleModule = assembleModule;
+exports.concat = concat;
+const HEADER_BYTES = 8; // `\0asm` + version
+function malformed(what) {
+    return new Error(`malformed WASM module: ${what}`);
+}
+function readU32(bytes, at) {
+    let value = 0;
+    let shift = 0;
+    for (let i = at; i < bytes.length && i < at + 5; i++) {
+        const byte = bytes[i];
+        value += (byte & 0x7f) * 2 ** shift;
+        if ((byte & 0x80) === 0)
+            return { value, next: i + 1 };
+        shift += 7;
+    }
+    throw malformed('truncated or oversized LEB128 integer');
+}
+/** Skip any LEB128 integer, signed or unsigned, up to 64 bits. */
+function skipLeb(bytes, at) {
+    for (let i = at; i < bytes.length && i < at + 10; i++) {
+        if ((bytes[i] & 0x80) === 0)
+            return i + 1;
+    }
+    throw malformed('truncated or oversized LEB128 integer');
+}
+function writeU32(value) {
+    const out = [];
+    do {
+        let byte = value & 0x7f;
+        value = Math.floor(value / 128);
+        if (value !== 0)
+            byte |= 0x80;
+        out.push(byte);
+    } while (value !== 0);
+    return out;
+}
+/** Signed LEB128, for `i32.const` immediates. */
+function writeS32(value) {
+    const out = [];
+    for (;;) {
+        const byte = value & 0x7f;
+        value >>= 7;
+        const done = (value === 0 && (byte & 0x40) === 0) || (value === -1 && (byte & 0x40) !== 0);
+        out.push(done ? byte : byte | 0x80);
+        if (done)
+            return out;
+    }
+}
+function readSections(bytes) {
+    const sections = [];
+    let at = HEADER_BYTES;
+    while (at < bytes.length) {
+        const id = bytes[at];
+        const size = readU32(bytes, at + 1);
+        const end = size.next + size.value;
+        if (end > bytes.length)
+            throw malformed('section runs past the end');
+        sections.push({ id, payload: bytes.subarray(size.next, end) });
+        at = end;
+    }
+    return sections;
+}
+/** Section order the spec requires; custom sections (id 0) may sit anywhere. */
+const SECTION_RANK = { 1: 1, 2: 2, 3: 3, 4: 4, 5: 5, 13: 6, 6: 7, 7: 8, 8: 9, 9: 10, 12: 11, 10: 12, 11: 13 };
+/** Replace the section with `id`, or insert it where the spec's order puts it. */
+function putSection(sections, id, payload) {
+    const existing = sections.findIndex((s) => s.id === id);
+    if (existing >= 0) {
+        sections[existing] = { id, payload };
+        return;
+    }
+    const rank = SECTION_RANK[id];
+    let insertAt = 0;
+    sections.forEach((s, i) => {
+        if (s.id !== 0 && SECTION_RANK[s.id] < rank)
+            insertAt = i + 1;
+    });
+    sections.splice(insertAt, 0, { id, payload });
+}
+function assembleModule(header, sections) {
+    const parts = [header.subarray(0, HEADER_BYTES)];
+    for (const s of sections) {
+        parts.push(Uint8Array.from([s.id, ...writeU32(s.payload.length)]), s.payload);
+    }
+    return concat(parts);
+}
+function concat(parts) {
+    const out = new Uint8Array(parts.reduce((n, p) => n + p.length, 0));
+    let at = 0;
+    for (const p of parts) {
+        out.set(p, at);
+        at += p.length;
+    }
+    return out;
+}
+//# sourceMappingURL=wasmBinary.js.map

package/dist/wasmBinary.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wasmBinary.js","sourceRoot":"","sources":["../src/wasmBinary.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;AASH,8BAEC;AAED,0BAUC;AAGD,0BAKC;AAED,4BASC;AAGD,4BASC;AAED,oCAYC;AAMD,gCAYC;AAED,wCAMC;AAED,wBAQC;AAtGD,MAAM,YAAY,GAAG,CAAC,CAAA,CAAC,oBAAoB;AAO3C,SAAgB,SAAS,CAAC,IAAY;IACpC,OAAO,IAAI,KAAK,CAAC,0BAA0B,IAAI,EAAE,CAAC,CAAA;AACpD,CAAC;AAED,SAAgB,OAAO,CAAC,KAAiB,EAAE,EAAU;IACnD,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,KAAK,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QACrD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAA;QACtB,KAAK,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,CAAA;QACnC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,CAAA;QACtD,KAAK,IAAI,CAAC,CAAA;IACZ,CAAC;IACD,MAAM,SAAS,CAAC,uCAAuC,CAAC,CAAA;AAC1D,CAAC;AAED,kEAAkE;AAClE,SAAgB,OAAO,CAAC,KAAiB,EAAE,EAAU;IACnD,KAAK,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;QACtD,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,GAAG,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,CAAA;IAC5C,CAAC;IACD,MAAM,SAAS,CAAC,uCAAuC,CAAC,CAAA;AAC1D,CAAC;AAED,SAAgB,QAAQ,CAAC,KAAa;IACpC,MAAM,GAAG,GAAa,EAAE,CAAA;IACxB,GAAG,CAAC;QACF,IAAI,IAAI,GAAG,KAAK,GAAG,IAAI,CAAA;QACvB,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,GAAG,CAAC,CAAA;QAC/B,IAAI,KAAK,KAAK,CAAC;YAAE,IAAI,IAAI,IAAI,CAAA;QAC7B,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAChB,CAAC,QAAQ,KAAK,KAAK,CAAC,EAAC;IACrB,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,iDAAiD;AACjD,SAAgB,QAAQ,CAAC,KAAa;IACpC,MAAM,GAAG,GAAa,EAAE,CAAA;IACxB,SAAS,CAAC;QACR,MAAM,IAAI,GAAG,KAAK,GAAG,IAAI,CAAA;QACzB,KAAK,KAAK,CAAC,CAAA;QACX,MAAM,IAAI,GAAG,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA;QAC1F,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,IAAI,CAAC,CAAA;QACnC,IAAI,IAAI;YAAE,OAAO,GAAG,CAAA;IACtB,CAAC;AACH,CAAC;AAED,SAAgB,YAAY,CAAC,KAA8B;IACzD,MAAM,QAAQ,GAAc,EAAE,CAAA;IAC9B,IAAI,EAAE,GAAG,YAAY,CAAA;IACrB,OAAO,EAAE,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;QACzB,MAAM,EAAE,GAAG,KAAK,CAAC,EAAE,CAAE,CAAA;QACrB,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,EAAE,EAAE,GAAG,CAAC,CAAC,CAAA;QACnC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAA;QAClC,IAAI,GAAG,GAAG,KAAK,CAAC,MAAM;YAAE,MAAM,SAAS,CAAC,2BAA2B,CAAC,CAAA;QACpE,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC,CAAA;QAC9D,EAAE,GAAG,GAAG,CAAA;IACV,CAAC;IACD,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED,gFAAgF;AAChF,MAAM,YAAY,GAA2B,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAA;AAErI,kFAAkF;AAClF,SAAgB,UAAU,CAAC,QAAmB,EAAE,EAAU,EAAE,OAAgC;IAC1F,MAAM,QAAQ,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAA;IACvD,IAAI,QAAQ,IAAI,CAAC,EAAE,CAAC;QAClB,QAAQ,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,CAAA;QACpC,OAAM;IACR,CAAC;IACD,MAAM,IAAI,GAAG,YAAY,CAAC,EAAE,CAAE,CAAA;IAC9B,IAAI,QAAQ,GAAG,CAAC,CAAA;IAChB,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACxB,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,IAAI,YAAY,CAAC,CAAC,CAAC,EAAE,CAAE,GAAG,IAAI;YAAE,QAAQ,GAAG,CAAC,GAAG,CAAC,CAAA;IAChE,CAAC,CAAC,CAAA;IACF,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAA;AAC/C,CAAC;AAED,SAAgB,cAAc,CAAC,MAAkB,EAAE,QAAmB;IACpE,MAAM,KAAK,GAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,CAAA;IAC9D,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAA;IAC/E,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAA;AACtB,CAAC;AAED,SAAgB,MAAM,CAAC,KAAmB;IACxC,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAA;IACnE,IAAI,EAAE,GAAG,CAAC,CAAA;IACV,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;QACd,EAAE,IAAI,CAAC,CAAC,MAAM,CAAA;IAChB,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC"}

package/dist/wasmFuel.d.ts

@@ -0,0 +1,52 @@
+/**
+ * Instruction budget for WASM rules: the stand-in for Wasmtime fuel, which
+ * the Rust proxy sets to 1,000,000 per evaluation (`limits.rs`), wherever a
+ * rule runs on V8 — the MCP proxy, and `intutic rules test`, `policy test`
+ * and `policy install`, so a rule that runs out in a proxy runs out there.
+ *
+ * V8 has no metering hook, so the rule's own code is rewritten at load to
+ * count. A new mutable i32 global starts at the budget, and a charge is
+ * inserted at every function entry and every loop header: subtract the number
+ * of instructions that can run before the next charge point, and trap
+ * (`unreachable`) once the counter goes negative. Code between two charge
+ * points is straight-line apart from forward branches, so each charge is an
+ * upper bound on what it pays for, and the budget bounds the instructions the
+ * rule actually executes. Structural instructions (`block`, `loop`, `end`,
+ * `else`, `nop`, `drop`, `return`, `unreachable`) cost nothing, roughly as
+ * Wasmtime prices them.
+ *
+ * The global is exported as `FUEL_EXPORT` so the worker can tell a trap caused
+ * by the budget from any other trap. Each evaluation instantiates the module
+ * afresh, so the budget is per evaluation, like a Wasmtime `Store`.
+ *
+ * The decoder knows the MVP instruction set plus the extensions compilers
+ * emit by default (sign extension, saturating truncation, bulk memory,
+ * reference types, multi-value, tail calls, SIMD). A module using anything
+ * else (exceptions, GC, threads) is refused at load rather than run unmetered.
+ */
+/** `runner.rs`: `store.set_fuel(1_000_000)`. */
+export declare const DEFAULT_FUEL_BUDGET = 1000000;
+/**
+ * A Rego rule's budget: three times the Rust proxy's 100,000,000
+ * (`limits::REGO`), because this meter counts differently.
+ *
+ * It charges each straight-line run in full at its entry, branches skipped or
+ * not, and an OPA build is mostly short runs with early exits: on the largest
+ * input (a 64 KB command) the destructive-shell and production-deploy examples
+ * count 74,000,000 here against 21,000,000 under Wasmtime, and the
+ * deny-writes and conformance policies about 8,000,000. The budget is four
+ * times the largest, so a heavier policy on the largest input still fits, and
+ * a rule that does not fit is stopped deterministically, whatever the load.
+ * Using it all up takes at most 350 ms idle and 4.4 s on a loaded machine;
+ * the deadline (`REGO_EVALUATE_TIMEOUT_MS`) is set above that.
+ */
+export declare const REGO_FUEL_BUDGET = 300000000;
+/** The export the worker reads to tell budget exhaustion from other traps. */
+export declare const FUEL_EXPORT = "__intutic_fuel";
+/**
+ * The module with every function metered against `budget` instructions per
+ * instantiation, and the counter exported as `FUEL_EXPORT`. Throws for a
+ * module the decoder cannot meter.
+ */
+export declare function meterFuel(bytes: Uint8Array<ArrayBuffer>, budget: number): Uint8Array<ArrayBuffer>;
+//# sourceMappingURL=wasmFuel.d.ts.map

package/dist/wasmFuel.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wasmFuel.d.ts","sourceRoot":"","sources":["../src/wasmFuel.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAeH,gDAAgD;AAChD,eAAO,MAAM,mBAAmB,UAAY,CAAA;AAE5C;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,gBAAgB,YAAc,CAAA;AAE3C,8EAA8E;AAC9E,eAAO,MAAM,WAAW,mBAAmB,CAAA;AAoM3C;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,UAAU,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,MAAM,GAAG,UAAU,CAAC,WAAW,CAAC,CA+BjG"}