@intutic/shared-types 2.2.0 → 2.4.0

package/dist/workspaceSettings.d.ts

@@ -6,12 +6,14 @@
  * proxy processes and hook scripts pick up changes without restarting.
  *
  * WS-5 — Q1 (fail behavior), Q2 (proxy mode), Q3 (bypass enforcement)
- * TD-151, TD-153, TD-154
  *
  * @module
  */
 import type { McpProxyFailBehavior, McpProxyMode, BypassEnforcementTier } from './enums.js';
 import type { SsoGroupPolicy } from './attenuation.js';
+import type { McpBudgetSettings } from './mcpBudgets.js';
+import type { PiiDetectorSettings } from './piiDetectors.js';
+import type { UpstreamRetrySettings } from './upstreamRetry.js';
 export type { McpProxyFailBehavior, McpProxyMode, BypassEnforcementTier };
 /**
  * The MCP governance proxy's anomaly detectors, by id. The proxy's own
@@ -59,7 +61,7 @@ export interface WorkspaceSettings {
      * `null` disables the gate. Defaults to 30 days. SCIM provisioning was removed,
      * so nothing reconciles membership against the identity provider: without this,
      * removing a developer at the IdP stops their dashboard login but not their
-     * agents, because API-key auth never consults SSO (TD-218). Setting it makes IdP
+     * agents, because API-key auth never consults SSO. Setting it makes IdP
      * removal expire the keys on its own.
      *
      * Opt-in on purpose — a CI key belongs to a member who may never log in
@@ -82,6 +84,24 @@ export interface WorkspaceSettings {
      * see `ssoGroupClearance.ts`.
      */
     sso_group_policy?: SsoGroupPolicy | null;
+    /**
+     * The action (`off`, `redact`, `block`) of each PII detector this workspace
+     * governs centrally (`PiiDetectorSettingsSchema`). The LLM proxy and the
+     * MCP proxy apply it to the workspace's traffic as the baseline; a
+     * machine's own detector config may only tighten it (`effectivePiiActions`).
+     * Absent, or a detector left out: each machine's own config applies. `null`
+     * in a settings write clears it, and is never stored.
+     */
+    piiDetectors?: PiiDetectorSettings | null;
+    /**
+     * How the LLM proxy retries a provider call that failed before any response
+     * reached the client, and the ordered fallback targets it tries when those
+     * retries run out (`UpstreamRetrySettingsSchema`). Each field overrides the
+     * proxy's own config.yaml value; absent fields keep it. The proxy reads it
+     * from `/api/v1/auth/key-context`. `null` in a settings write clears it, and
+     * is never stored.
+     */
+    upstreamRetry?: UpstreamRetrySettings | null;
     /**
      * Bring-your-own-cloud trace storage. Optional — absent means Intutic-managed
      * storage. Previously accessed only through `as unknown as` casts; typed here
@@ -99,7 +119,7 @@ export interface WorkspaceSettings {
      *
      * Applies to 8/19 harnesses (those with MCP proxy injection — 9 config
      * paths across 8 harnesses, see sync-daemon mcpAutoWrite.ts).
-     * See TD-151 for the harnesses this does not reach.
+     * The other harnesses have no MCP proxy to fail, so this does not reach them.
      */
     mcpProxyFailBehavior: McpProxyFailBehavior;
     /**
@@ -109,7 +129,7 @@ export interface WorkspaceSettings {
      *   MCP connection. Policy is fetched from control plane at startup with a
      *   60s in-process TTL.
      * - `'daemon'` (active): a long-lived proxy daemon shares its policy cache
-     *   across all MCP sessions. Requires macOS notarization. See TD-153.
+     *   across all MCP sessions. Requires macOS notarization.
      *
      * The sync-daemon writes this value through verbatim to
      * ~/.intutic/env/runtime.env (lib/runtimeEnv.ts) and the MCP proxy honours
@@ -127,7 +147,7 @@ export interface WorkspaceSettings {
      *   governance incident.
      * - `'immutable'`  (opt-in, macOS only): after writing, sets `chflags uchg`
      *   on the config file. Direct edits fail immediately. The flag is cleared
-     *   before the next sync write. See TD-154 for UX risk.
+     *   before the next sync write.
      * - `'alert-only'`: drift triggers a governance incident but does NOT rewrite
      *   the config. For teams that want audit logs without enforced reversion.
      */
@@ -135,6 +155,12 @@ export interface WorkspaceSettings {
     /** Feature flags for platform capabilities (Phase 5+) */
     featureFlags?: {
         ff_bandit_routing?: boolean;
+        /**
+         * Run the router and record the model it would have picked, while every
+         * request is still served with the model it asked for. Read by the proxy
+         * from `workspace:feature_flags:{ws}`; the cost posture presets set it.
+         */
+        ff_shadow_routing?: boolean;
         ff_response_cache_exact?: boolean;
         ff_response_cache_semantic?: boolean;
         /** Phase 5 — MetaClaw prompt evolution engine (Enterprise only) */
@@ -248,9 +274,10 @@ export interface WorkspaceSettings {
      * Whether an APPROVED `review_before` decision may let the *matching retried
      * call* through the local gate, instead of only recording the decision.
      *
-     * Off (undefined/false) by default. `POST /api/v1/decisions` and its Slack
-     * approve button have always recorded a decision — this flag governs a
-     * separate, additive effect: when true, approving a decision tied to a
+     * Off (undefined/false) by default. Approving a decision — `intutic decision
+     * approve`, `POST /api/v1/decisions/:id/review` or the Slack card, one code
+     * path — always records it; this flag governs a separate, additive effect:
+     * when true, approving a decision tied to a
      * `review_before` hold writes a short-lived, exact-match bypass entry
      * (workspace + SOP rule + normalised tool name + hashed target/command) to
      * Valkey, synced to `.intutic/hooks/approved-bypasses.jsonl` and consulted by
@@ -267,9 +294,22 @@ export interface WorkspaceSettings {
      * exemption.
      */
     reviewHoldBypassTtlMinutes?: number;
+    /**
+     * Held loop runs (`review_before:` on a whole run, reviewed with `intutic
+     * loop review`). With `requireDistinctApprover` true, the member who started
+     * a run cannot approve or reject it; another OWNER, ADMIN or EM must. Off by
+     * default: the person who ran the agent is usually best placed to judge its
+     * change manifest, and a small team must not be locked out of its own
+     * deploys. Break-glass requests always need a second person, whatever this
+     * says. Stored under the snake_case key the reader
+     * (`requiresDistinctApprover` in loopGovernanceService.ts) uses.
+     */
+    loop_review?: {
+        requireDistinctApprover?: boolean;
+    };
     /**
      * Central egress-enforcement posture, distributed to this workspace's proxies
-     * (LLD #63 §4). One of `'off'` | `'monitor'` | `'enforce'`. When set, the
+     * One of `'off'` | `'monitor'` | `'enforce'`. When set, the
      * sync-daemon writes it to `.intutic/hooks/egress-policy.json` and the proxy
      * hot-reloads it, so an admin sets the mode once here rather than in each
      * developer's local config. Undefined leaves the proxy on its local config /
@@ -295,6 +335,16 @@ export interface WorkspaceSettings {
      * must not start refusing completions because a default changed.
      */
     allowedModels?: string[];
+    /**
+     * The models smart routing may choose between for this workspace.
+     * Distributed to the proxy under `workspace:routing_candidates:{workspaceId}`
+     * (same pattern as `allowedModels` above). Absent or empty means the proxy's
+     * own configured pool. Either way the proxy narrows the pool further to the
+     * models this workspace can actually reach: a provider it holds a
+     * credential for, the `allowedModels` allowlist, and the models a verified
+     * credential's provider listed.
+     */
+    routingCandidates?: string[];
     /**
      * Additive MCP server allowlist: server names the MCP governance proxy
      * (`packages/mcp-proxy`) will proxy for this workspace, matched against
@@ -345,13 +395,41 @@ export interface WorkspaceSettings {
     mcpAnomalyOverrides?: Partial<Record<McpAnomalyDetectorId, 'steer' | 'reask' | 'kill' | 'off'>>;
     /**
      * Workspace-supplied prompt-injection regex sources for the MCP governance
-     * proxy (TD-436), on top of its hardcoded floor. Delivered with the rest of
+     * proxy, on top of its hardcoded floor. Delivered with the rest of
      * the MCP curation; the proxy compiles them and drops one that does not.
      * Absent or empty means the floor alone.
      */
     mcpInjectionPatterns?: string[];
     /**
-     * Negotiated per-token rates, by model id, in USD per 1k tokens (TD-434).
+     * Limits on MCP tool calls per hour or per day — per server, per tool, per
+     * member, or per member on one server (`mcpBudgets.ts`). Delivered with the
+     * MCP policy; the MCP proxy counts calls in Valkey and refuses one that
+     * would go over a limit, naming the budget and when it resets. Absent means
+     * no limits.
+     */
+    mcpBudgets?: McpBudgetSettings;
+    /**
+     * The plan's daily spend cap (`workspaces.daily_spend_cap_usd`, set from the
+     * plan) as a hard block: with `enforcement_mode: 'hard'` AND
+     * `workspace_hard_cap_enabled: true`, the control plane checks the day's
+     * spend every five minutes and, once it is over the cap, the proxy refuses
+     * every request with `OVERAGE_HARD_CAP_EXCEEDED` until midnight UTC
+     * (`billingService.enforceOverageCap`). Either one absent or off: no block.
+     * Separate from the workspace budget caps (`PUT /api/v1/budget`).
+     */
+    enforcement_mode?: 'soft' | 'hard';
+    workspace_hard_cap_enabled?: boolean;
+    /**
+     * What happens when a server's tool set changes and the change scores high
+     * risk (`mcpToolRisk.ts`). `notify` (the default, and what an absent value
+     * means) records the change and sends `mcp.server.tool_change_risk`;
+     * `hold` also returns the server to the approval queue, where the MCP proxy
+     * refuses it under either default policy until an owner or admin approves
+     * it again.
+     */
+    mcpHighRiskToolChange?: 'notify' | 'hold';
+    /**
+     * Negotiated per-token rates, by model id, in USD per 1k tokens.
      * The `model_pricing` table is LIST price; a workspace paying below list
      * had every savings figure skewed by the difference. Where a model is
      * listed here it is priced at these rates in the routing shadow-savings
@@ -363,7 +441,7 @@ export interface WorkspaceSettings {
         outputCostPer1k: number;
     }>;
     /**
-     * Whether agents in this workspace must run inside a sandbox (LLD #63 §6).
+     * Whether agents in this workspace must run inside a sandbox.
      * - `'off'` (default): `intutic exec` runs on the host as before.
      * - `'warn'`: an un-sandboxed `intutic exec` runs but prints a warning.
      * - `'require'`: `intutic exec` refuses to run un-sandboxed and tells the
@@ -410,7 +488,7 @@ export interface WorkspaceSettings {
         categories?: string[];
     };
     /**
-     * Server-side trajectory monitoring mode (LLD #52, parallel monitoring).
+     * Server-side trajectory monitoring mode (parallel monitoring).
      * Read by `services/control-plane/src/services/trajectoryAnalysisService.ts`'s
      * `getWorkspaceMonitorMode` on every `/trajectory/analyze` call:
      *
@@ -481,7 +559,7 @@ export interface WorkspaceSettings {
      */
     decisionsLogEnabled?: boolean;
     /**
-     * Opt-in LLM-based semantic analysis of skill files (Phase S5, TD-357),
+     * Opt-in LLM-based semantic analysis of skill files (Phase S5),
      * on top of the always-on deterministic `scanSkillContent` pattern scan.
      * When true:
      * - The CLI (`intutic skill audit`) attaches the FULL content of a
@@ -503,8 +581,8 @@ export interface WorkspaceSettings {
      */
     semanticSkillAnalysisEnabled?: boolean;
     /**
-     * Opt-in VirusTotal hash lookup for skill-bundled SCRIPTS (Phase S4,
-     * TD-361). When true, and only when a `connector_credentials` row for
+     * Opt-in VirusTotal hash lookup for skill-bundled SCRIPTS (Phase S4).
+     * When true, and only when a `connector_credentials` row for
      * provider `'virustotal'` is also stored, `POST .../skills/report`
      * fire-and-forget enqueues any reported script sha256 hashes for a
      * `GET /api/v3/files/{sha256}` lookup — never an upload, never SKILL.md
@@ -515,7 +593,7 @@ export interface WorkspaceSettings {
      *
      * Distinct from, and narrower than, this product's standing decline of a
      * global MCP-server-reputation/VirusTotal integration — see
-     * `apps/docs/guide/mcp-governance.md` and `docs/TECH_DEBT.md` TD-359 for
+     * `apps/docs/guide/mcp-governance.md` for
      * that separate decision, which this setting does not reverse.
      */
     virusTotalSkillLookupEnabled?: boolean;

package/dist/workspaceSettings.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"workspaceSettings.d.ts","sourceRoot":"","sources":["../src/workspaceSettings.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,oBAAoB,EAAE,YAAY,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAA;AAC3F,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAA;AAGtD,YAAY,EAAE,oBAAoB,EAAE,YAAY,EAAE,qBAAqB,EAAE,CAAA;AAEzE;;;;;;GAMG;AACH,eAAO,MAAM,wBAAwB,uJAQ3B,CAAA;AACV,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,wBAAwB,CAAC,CAAC,MAAM,CAAC,CAAA;AAE5E;;;;;;GAMG;AACH,0FAA0F;AAC1F,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,KAAK,GAAG,IAAI,GAAG,UAAU,CAAA;IACnC,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,IAAI,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAA;CAC5B;AAED,MAAM,WAAW,iBAAiB;IAChC;;;;;;;;;OASG;IACH,sBAAsB,EAAE,OAAO,CAAA;IAE/B;;;;;;;;;;;OAWG;IACH,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAA;IAEhC;;;;;OAKG;IACH,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAA;IAElC;;;;;;;OAOG;IACH,gBAAgB,CAAC,EAAE,cAAc,GAAG,IAAI,CAAA;IAExC;;;;OAIG;IACH,WAAW,CAAC,EAAE,iBAAiB,CAAA;IAE/B;;;;;;;;;;;;OAYG;IACH,oBAAoB,EAAE,oBAAoB,CAAA;IAE1C;;;;;;;;;;;;;;OAcG;IACH,YAAY,EAAE,YAAY,CAAA;IAE1B;;;;;;;;;;;;OAYG;IACH,qBAAqB,EAAE,qBAAqB,CAAA;IAC5C,yDAAyD;IACzD,YAAY,CAAC,EAAE;QACb,iBAAiB,CAAC,EAAE,OAAO,CAAA;QAC3B,uBAAuB,CAAC,EAAE,OAAO,CAAA;QACjC,0BAA0B,CAAC,EAAE,OAAO,CAAA;QACpC,mEAAmE;QACnE,qBAAqB,CAAC,EAAE,OAAO,CAAA;QAC/B;;;;;;;;WAQG;QACH,qBAAqB,CAAC,EAAE,OAAO,CAAA;QAC/B;;;;;;;;WAQG;QACH,sBAAsB,CAAC,EAAE,OAAO,CAAA;QAChC;;;;;WAKG;QACH,sBAAsB,CAAC,EAAE,OAAO,CAAA;QAChC;;;;;;;;;;;;;;;;;;;WAmBG;QACH,wBAAwB,CAAC,EAAE,OAAO,CAAA;KACnC,CAAA;IAGD;;;;OAIG;IACH,2BAA2B,CAAC,EAAE,OAAO,CAAA;IAErC;;;;;;;;;;;;;;;;;;OAkBG;IACH,wBAAwB,CAAC,EAAE,OAAO,CAAA;IAElC;;OAEG;IACH,cAAc,CAAC,EAAE;QACf,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;QAClB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAA;QACrB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;QACjB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAA;KACrB,CAAA;IAED;;;;;;;;;;OAUG;IACH,eAAe,CAAC,EAAE;QAChB,OAAO,CAAC,EAAE,OAAO,CAAA;QACjB,2DAA2D;QAC3D,aAAa,CAAC,EAAE,OAAO,CAAA;QACvB,kEAAkE;QAClE,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAA;QAC5B,kFAAkF;QAClF,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;QAC1C,kBAAkB,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,OAAO,CAAA;KAChD,CAAA;IAED;;;;;;;;;;;;;OAaG;IACH,uBAAuB,CAAC,EAAE,OAAO,CAAA;IAEjC;;;;;;OAMG;IACH,0BAA0B,CAAC,EAAE,MAAM,CAAA;IAEnC;;;;;;;;OAQG;IACH,UAAU,CAAC,EAAE,KAAK,GAAG,SAAS,GAAG,SAAS,CAAA;IAE1C;;;;;OAKG;IACH,WAAW,CAAC,EAAE,MAAM,EAAE,CAAA;IAEtB;;;;;;;;;OASG;IACH,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;IAExB;;;;;;;;;;;;;OAaG;IACH,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAA;IAE5B;;;;;;;;;OASG;IACH,gBAAgB,CAAC,EAAE,OAAO,GAAG,MAAM,CAAA;IAEnC;;;;;;OAMG;IACH,kBAAkB,CAAC,EAAE,MAAM,GAAG,OAAO,CAAA;IAErC;;;;;OAKG;IACH,cAAc,CAAC,EAAE,SAAS,GAAG,MAAM,GAAG,KAAK,CAAA;IAE3C;;;;;OAKG;IACH,mBAAmB,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,oBAAoB,EAAE,OAAO,GAAG,OAAO,GAAG,MAAM,GAAG,KAAK,CAAC,CAAC,CAAA;IAE/F;;;;;OAKG;IACH,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAA;IAE/B;;;;;;;OAOG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,cAAc,EAAE,MAAM,CAAC;QAAC,eAAe,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAErF;;;;;;;;;;;;;OAaG;IACH,kBAAkB,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,SAAS,CAAA;IAE/C;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACH,mBAAmB,CAAC,EAAE;QACpB,OAAO,CAAC,EAAE,OAAO,CAAA;QACjB,UAAU,CAAC,EAAE,MAAM,CAAA;QACnB,aAAa,CAAC,EAAE,MAAM,CAAA;QACtB,MAAM,CAAC,EAAE,QAAQ,GAAG,MAAM,CAAA;QAC1B,yEAAyE;QACzE,UAAU,CAAC,EAAE,MAAM,EAAE,CAAA;KACtB,CAAA;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;;OA2BG;IACH,uBAAuB,CAAC,EAAE,QAAQ,GAAG,SAAS,GAAG,KAAK,CAAA;IAEtD;;;;;;;;;;OAUG;IACH,eAAe,CAAC,EAAE,MAAM,EAAE,CAAA;IAE1B;;;;;;OAMG;IACH,2BAA2B,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAEpD;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,mBAAmB,CAAC,EAAE,OAAO,CAAA;IAE7B;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,4BAA4B,CAAC,EAAE,OAAO,CAAA;IAEtC;;;;;;;;;;;;;;;OAeG;IACH,4BAA4B,CAAC,EAAE,OAAO,CAAA;IAEtC;;;;;;;;;;;;;;OAcG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAA;IAE1B;;;;;;;;;;;;;;;;OAgBG;IACH,uBAAuB,CAAC,EAAE,MAAM,CAAA;IAEhC;;;;;;;;;;;;;;;;;;OAkBG;IACH,6BAA6B,EAAE,OAAO,CAAA;CACvC;AAED;;;;GAIG;AACH,eAAO,MAAM,0BAA0B,EAAE,iBAqFxC,CAAA;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,OAAO,CAAC,iBAAiB,CAAC,GAAG,IAAI,GAAG,SAAS,GACpD,iBAAiB,CAKnB;AAED;;;;;;;;GAQG;AACH,wBAAgB,8BAA8B,CAAC,QAAQ,EAAE,iBAAiB,GAAG,MAAM,CAIlF"}
+{"version":3,"file":"workspaceSettings.d.ts","sourceRoot":"","sources":["../src/workspaceSettings.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,oBAAoB,EAAE,YAAY,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAA;AAC3F,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAA;AACtD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAA;AACxD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAA;AAC5D,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAA;AAG/D,YAAY,EAAE,oBAAoB,EAAE,YAAY,EAAE,qBAAqB,EAAE,CAAA;AAEzE;;;;;;GAMG;AACH,eAAO,MAAM,wBAAwB,uJAQ3B,CAAA;AACV,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,wBAAwB,CAAC,CAAC,MAAM,CAAC,CAAA;AAE5E;;;;;;GAMG;AACH,0FAA0F;AAC1F,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,KAAK,GAAG,IAAI,GAAG,UAAU,CAAA;IACnC,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,IAAI,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAA;CAC5B;AAED,MAAM,WAAW,iBAAiB;IAChC;;;;;;;;;OASG;IACH,sBAAsB,EAAE,OAAO,CAAA;IAE/B;;;;;;;;;;;OAWG;IACH,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAA;IAEhC;;;;;OAKG;IACH,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAA;IAElC;;;;;;;OAOG;IACH,gBAAgB,CAAC,EAAE,cAAc,GAAG,IAAI,CAAA;IAExC;;;;;;;OAOG;IACH,YAAY,CAAC,EAAE,mBAAmB,GAAG,IAAI,CAAA;IAEzC;;;;;;;OAOG;IACH,aAAa,CAAC,EAAE,qBAAqB,GAAG,IAAI,CAAA;IAE5C;;;;OAIG;IACH,WAAW,CAAC,EAAE,iBAAiB,CAAA;IAE/B;;;;;;;;;;;;OAYG;IACH,oBAAoB,EAAE,oBAAoB,CAAA;IAE1C;;;;;;;;;;;;;;OAcG;IACH,YAAY,EAAE,YAAY,CAAA;IAE1B;;;;;;;;;;;;OAYG;IACH,qBAAqB,EAAE,qBAAqB,CAAA;IAC5C,yDAAyD;IACzD,YAAY,CAAC,EAAE;QACb,iBAAiB,CAAC,EAAE,OAAO,CAAA;QAC3B;;;;WAIG;QACH,iBAAiB,CAAC,EAAE,OAAO,CAAA;QAC3B,uBAAuB,CAAC,EAAE,OAAO,CAAA;QACjC,0BAA0B,CAAC,EAAE,OAAO,CAAA;QACpC,mEAAmE;QACnE,qBAAqB,CAAC,EAAE,OAAO,CAAA;QAC/B;;;;;;;;WAQG;QACH,qBAAqB,CAAC,EAAE,OAAO,CAAA;QAC/B;;;;;;;;WAQG;QACH,sBAAsB,CAAC,EAAE,OAAO,CAAA;QAChC;;;;;WAKG;QACH,sBAAsB,CAAC,EAAE,OAAO,CAAA;QAChC;;;;;;;;;;;;;;;;;;;WAmBG;QACH,wBAAwB,CAAC,EAAE,OAAO,CAAA;KACnC,CAAA;IAGD;;;;OAIG;IACH,2BAA2B,CAAC,EAAE,OAAO,CAAA;IAErC;;;;;;;;;;;;;;;;;;OAkBG;IACH,wBAAwB,CAAC,EAAE,OAAO,CAAA;IAElC;;OAEG;IACH,cAAc,CAAC,EAAE;QACf,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;QAClB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAA;QACrB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;QACjB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAA;KACrB,CAAA;IAED;;;;;;;;;;OAUG;IACH,eAAe,CAAC,EAAE;QAChB,OAAO,CAAC,EAAE,OAAO,CAAA;QACjB,2DAA2D;QAC3D,aAAa,CAAC,EAAE,OAAO,CAAA;QACvB,kEAAkE;QAClE,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAA;QAC5B,kFAAkF;QAClF,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;QAC1C,kBAAkB,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,OAAO,CAAA;KAChD,CAAA;IAED;;;;;;;;;;;;;;OAcG;IACH,uBAAuB,CAAC,EAAE,OAAO,CAAA;IAEjC;;;;;;OAMG;IACH,0BAA0B,CAAC,EAAE,MAAM,CAAA;IAEnC;;;;;;;;;OASG;IACH,WAAW,CAAC,EAAE;QACZ,uBAAuB,CAAC,EAAE,OAAO,CAAA;KAClC,CAAA;IAED;;;;;;;;OAQG;IACH,UAAU,CAAC,EAAE,KAAK,GAAG,SAAS,GAAG,SAAS,CAAA;IAE1C;;;;;OAKG;IACH,WAAW,CAAC,EAAE,MAAM,EAAE,CAAA;IAEtB;;;;;;;;;OASG;IACH,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;IAExB;;;;;;;;OAQG;IACH,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAA;IAE5B;;;;;;;;;;;;;OAaG;IACH,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAA;IAE5B;;;;;;;;;OASG;IACH,gBAAgB,CAAC,EAAE,OAAO,GAAG,MAAM,CAAA;IAEnC;;;;;;OAMG;IACH,kBAAkB,CAAC,EAAE,MAAM,GAAG,OAAO,CAAA;IAErC;;;;;OAKG;IACH,cAAc,CAAC,EAAE,SAAS,GAAG,MAAM,GAAG,KAAK,CAAA;IAE3C;;;;;OAKG;IACH,mBAAmB,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,oBAAoB,EAAE,OAAO,GAAG,OAAO,GAAG,MAAM,GAAG,KAAK,CAAC,CAAC,CAAA;IAE/F;;;;;OAKG;IACH,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAA;IAE/B;;;;;;OAMG;IACH,UAAU,CAAC,EAAE,iBAAiB,CAAA;IAE9B;;;;;;;;OAQG;IACH,gBAAgB,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;IAClC,0BAA0B,CAAC,EAAE,OAAO,CAAA;IAEpC;;;;;;;OAOG;IACH,qBAAqB,CAAC,EAAE,QAAQ,GAAG,MAAM,CAAA;IAEzC;;;;;;;OAOG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,cAAc,EAAE,MAAM,CAAC;QAAC,eAAe,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAErF;;;;;;;;;;;;;OAaG;IACH,kBAAkB,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,SAAS,CAAA;IAE/C;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACH,mBAAmB,CAAC,EAAE;QACpB,OAAO,CAAC,EAAE,OAAO,CAAA;QACjB,UAAU,CAAC,EAAE,MAAM,CAAA;QACnB,aAAa,CAAC,EAAE,MAAM,CAAA;QACtB,MAAM,CAAC,EAAE,QAAQ,GAAG,MAAM,CAAA;QAC1B,yEAAyE;QACzE,UAAU,CAAC,EAAE,MAAM,EAAE,CAAA;KACtB,CAAA;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;;OA2BG;IACH,uBAAuB,CAAC,EAAE,QAAQ,GAAG,SAAS,GAAG,KAAK,CAAA;IAEtD;;;;;;;;;;OAUG;IACH,eAAe,CAAC,EAAE,MAAM,EAAE,CAAA;IAE1B;;;;;;OAMG;IACH,2BAA2B,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAEpD;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,mBAAmB,CAAC,EAAE,OAAO,CAAA;IAE7B;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,4BAA4B,CAAC,EAAE,OAAO,CAAA;IAEtC;;;;;;;;;;;;;;;OAeG;IACH,4BAA4B,CAAC,EAAE,OAAO,CAAA;IAEtC;;;;;;;;;;;;;;OAcG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAA;IAE1B;;;;;;;;;;;;;;;;OAgBG;IACH,uBAAuB,CAAC,EAAE,MAAM,CAAA;IAEhC;;;;;;;;;;;;;;;;;;OAkBG;IACH,6BAA6B,EAAE,OAAO,CAAA;CACvC;AAED;;;;GAIG;AACH,eAAO,MAAM,0BAA0B,EAAE,iBAuFxC,CAAA;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,OAAO,CAAC,iBAAiB,CAAC,GAAG,IAAI,GAAG,SAAS,GACpD,iBAAiB,CAKnB;AAED;;;;;;;;GAQG;AACH,wBAAgB,8BAA8B,CAAC,QAAQ,EAAE,iBAAiB,GAAG,MAAM,CAIlF"}

package/dist/workspaceSettings.js

@@ -7,7 +7,6 @@
  * proxy processes and hook scripts pick up changes without restarting.
  *
  * WS-5 — Q1 (fail behavior), Q2 (proxy mode), Q3 (bypass enforcement)
- * TD-151, TD-153, TD-154
  *
  * @module
  */
@@ -91,6 +90,8 @@ exports.DEFAULT_WORKSPACE_SETTINGS = {
     // Only load-bearing once reviewHoldBypassEnabled is true; the value here is
     // what "enabled but unset" resolves to.
     reviewHoldBypassTtlMinutes: 10,
+    // Off by default, as the reader's fallback is: see the field doc.
+    loop_review: { requireDistinctApprover: false },
     // Off by default — see the field doc for why a growing auto-written
     // context file must be opt-in.
     decisionsLogEnabled: false,

package/dist/workspaceSettings.js.map

@@ -1 +1 @@
-{"version":3,"file":"workspaceSettings.js","sourceRoot":"","sources":["../src/workspaceSettings.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;GAWG;;;AAosBH,4DAOC;AAWD,wEAIC;AAltBD;;;;;;GAMG;AACU,QAAA,wBAAwB,GAAG;IACtC,oBAAoB;IACpB,iBAAiB;IACjB,gBAAgB;IAChB,yBAAyB;IACzB,gBAAgB;IAChB,gBAAgB;IAChB,gBAAgB;CACR,CAAA;AA6kBV;;;;GAIG;AACU,QAAA,0BAA0B,GAAsB;IAC3D,oBAAoB,EAAE,MAAM;IAC5B,sBAAsB,EAAE,IAAI;IAC5B,iFAAiF;IACjF,iFAAiF;IACjF,+EAA+E;IAC/E,kFAAkF;IAClF,iFAAiF;IACjF,0EAA0E;IAC1E,iBAAiB,EAAE,EAAE;IACrB,mBAAmB,EAAE,IAAI;IACzB,YAAY,EAAU,aAAa;IACnC,qBAAqB,EAAE,SAAS;IAChC,YAAY,EAAE;QACZ,iBAAiB,EAAE,KAAK;QACxB,uBAAuB,EAAE,KAAK;QAC9B,0BAA0B,EAAE,KAAK;QACjC,qBAAqB,EAAE,KAAK;QAC5B,2EAA2E;QAC3E,uEAAuE;QACvE,qBAAqB,EAAE,KAAK;QAC5B,sBAAsB,EAAE,KAAK;QAC7B,sBAAsB,EAAE,KAAK;QAC7B,oEAAoE;QACpE,yCAAyC;QACzC,wBAAwB,EAAE,KAAK;KAChC;IACD,2BAA2B,EAAE,KAAK;IAClC,wEAAwE;IACxE,qEAAqE;IACrE,wBAAwB,EAAE,KAAK;IAC/B,uEAAuE;IACvE,wEAAwE;IACxE,4BAA4B,EAAE,KAAK;IACnC,cAAc,EAAE;QACd,OAAO,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC;QACjE,UAAU,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,YAAY,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,CAAC;QACrF,MAAM,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC;QACnD,SAAS,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC;KAC9D;IACD,4EAA4E;IAC5E,qEAAqE;IACrE,eAAe,EAAE;QACf,OAAO,EAAE,KAAK;QACd,aAAa,EAAE,IAAI;QACnB,iBAAiB,EAAE,EAAE;QACrB,eAAe,EAAE,EAAE;QACnB,kBAAkB,EAAE,OAAO;KAC5B;IACD,0EAA0E;IAC1E,4EAA4E;IAC5E,uBAAuB,EAAE,KAAK;IAC9B,4EAA4E;IAC5E,wCAAwC;IACxC,0BAA0B,EAAE,EAAE;IAC9B,oEAAoE;IACpE,+BAA+B;IAC/B,mBAAmB,EAAE,KAAK;IAC1B,8DAA8D;IAC9D,yEAAyE;IACzE,wEAAwE;IACxE,yEAAyE;IACzE,8DAA8D;IAC9D,uBAAuB,EAAE,SAAS;IAClC,uEAAuE;IACvE,sEAAsE;IACtE,uEAAuE;IACvE,mBAAmB,EAAE;QACnB,OAAO,EAAE,KAAK;QACd,UAAU,EAAE,CAAC;QACb,aAAa,EAAE,GAAG;QAClB,MAAM,EAAE,QAAQ;QAChB,UAAU,EAAE,EAAE;KACf;IACD,wEAAwE;IACxE,oEAAoE;IACpE,4BAA4B,EAAE,KAAK;IACnC,gEAAgE;IAChE,gBAAgB,EAAE,KAAK;IACvB,0EAA0E;IAC1E,6DAA6D;IAC7D,6BAA6B,EAAE,IAAI;IACnC,mEAAmE;IACnE,oEAAoE;IACpE,uBAAuB,EAAE,GAAG;CAC7B,CAAA;AAED;;;GAGG;AACH,SAAgB,wBAAwB,CACtC,MAAqD;IAErD,OAAO;QACL,GAAG,kCAA0B;QAC7B,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC;KAClB,CAAA;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,SAAgB,8BAA8B,CAAC,QAA2B;IACxE,MAAM,IAAI,GAAG,QAAQ,CAAC,uBAAuB,CAAA;IAC7C,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC;QAAE,OAAO,GAAG,CAAA;IAC1F,OAAO,IAAI,CAAA;AACb,CAAC"}
+{"version":3,"file":"workspaceSettings.js","sourceRoot":"","sources":["../src/workspaceSettings.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;GAUG;;;AA4xBH,4DAOC;AAWD,wEAIC;AAvyBD;;;;;;GAMG;AACU,QAAA,wBAAwB,GAAG;IACtC,oBAAoB;IACpB,iBAAiB;IACjB,gBAAgB;IAChB,yBAAyB;IACzB,gBAAgB;IAChB,gBAAgB;IAChB,gBAAgB;CACR,CAAA;AAgqBV;;;;GAIG;AACU,QAAA,0BAA0B,GAAsB;IAC3D,oBAAoB,EAAE,MAAM;IAC5B,sBAAsB,EAAE,IAAI;IAC5B,iFAAiF;IACjF,iFAAiF;IACjF,+EAA+E;IAC/E,kFAAkF;IAClF,iFAAiF;IACjF,0EAA0E;IAC1E,iBAAiB,EAAE,EAAE;IACrB,mBAAmB,EAAE,IAAI;IACzB,YAAY,EAAU,aAAa;IACnC,qBAAqB,EAAE,SAAS;IAChC,YAAY,EAAE;QACZ,iBAAiB,EAAE,KAAK;QACxB,uBAAuB,EAAE,KAAK;QAC9B,0BAA0B,EAAE,KAAK;QACjC,qBAAqB,EAAE,KAAK;QAC5B,2EAA2E;QAC3E,uEAAuE;QACvE,qBAAqB,EAAE,KAAK;QAC5B,sBAAsB,EAAE,KAAK;QAC7B,sBAAsB,EAAE,KAAK;QAC7B,oEAAoE;QACpE,yCAAyC;QACzC,wBAAwB,EAAE,KAAK;KAChC;IACD,2BAA2B,EAAE,KAAK;IAClC,wEAAwE;IACxE,qEAAqE;IACrE,wBAAwB,EAAE,KAAK;IAC/B,uEAAuE;IACvE,wEAAwE;IACxE,4BAA4B,EAAE,KAAK;IACnC,cAAc,EAAE;QACd,OAAO,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC;QACjE,UAAU,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,YAAY,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,CAAC;QACrF,MAAM,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC;QACnD,SAAS,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC;KAC9D;IACD,4EAA4E;IAC5E,qEAAqE;IACrE,eAAe,EAAE;QACf,OAAO,EAAE,KAAK;QACd,aAAa,EAAE,IAAI;QACnB,iBAAiB,EAAE,EAAE;QACrB,eAAe,EAAE,EAAE;QACnB,kBAAkB,EAAE,OAAO;KAC5B;IACD,0EAA0E;IAC1E,4EAA4E;IAC5E,uBAAuB,EAAE,KAAK;IAC9B,4EAA4E;IAC5E,wCAAwC;IACxC,0BAA0B,EAAE,EAAE;IAC9B,kEAAkE;IAClE,WAAW,EAAE,EAAE,uBAAuB,EAAE,KAAK,EAAE;IAC/C,oEAAoE;IACpE,+BAA+B;IAC/B,mBAAmB,EAAE,KAAK;IAC1B,8DAA8D;IAC9D,yEAAyE;IACzE,wEAAwE;IACxE,yEAAyE;IACzE,8DAA8D;IAC9D,uBAAuB,EAAE,SAAS;IAClC,uEAAuE;IACvE,sEAAsE;IACtE,uEAAuE;IACvE,mBAAmB,EAAE;QACnB,OAAO,EAAE,KAAK;QACd,UAAU,EAAE,CAAC;QACb,aAAa,EAAE,GAAG;QAClB,MAAM,EAAE,QAAQ;QAChB,UAAU,EAAE,EAAE;KACf;IACD,wEAAwE;IACxE,oEAAoE;IACpE,4BAA4B,EAAE,KAAK;IACnC,gEAAgE;IAChE,gBAAgB,EAAE,KAAK;IACvB,0EAA0E;IAC1E,6DAA6D;IAC7D,6BAA6B,EAAE,IAAI;IACnC,mEAAmE;IACnE,oEAAoE;IACpE,uBAAuB,EAAE,GAAG;CAC7B,CAAA;AAED;;;GAGG;AACH,SAAgB,wBAAwB,CACtC,MAAqD;IAErD,OAAO;QACL,GAAG,kCAA0B;QAC7B,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC;KAClB,CAAA;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,SAAgB,8BAA8B,CAAC,QAA2B;IACxE,MAAM,IAAI,GAAG,QAAQ,CAAC,uBAAuB,CAAA;IAC7C,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC;QAAE,OAAO,GAAG,CAAA;IAC1F,OAAO,IAAI,CAAA;AACb,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@intutic/shared-types",
-  "version": "2.2.0",
+  "version": "2.4.0",
   "description": "Shared TypeScript types for the Intutic control plane, CLI, and sync daemon",
   "license": "MIT",
   "repository": {
@@ -18,7 +18,7 @@
   ],
   "dependencies": {
     "zod": "^3.23",
-    "@intutic/anomaly-taxonomy": "2.2.0"
+    "@intutic/anomaly-taxonomy": "2.4.0"
   },
   "devDependencies": {
     "typescript": "^5.5",