@intutic/shared-types 2.2.0 → 2.4.0

package/dist/enums.d.ts

@@ -7,7 +7,7 @@
  * compile-time narrowing without Drizzle or Postgres dependencies.
  *
  * These mirror the Postgres enum types defined in
- * LLD 01-data-architecture §3.1.
+ * the data-architecture schema.
  *
  * @module
  */
@@ -166,8 +166,8 @@ export declare const HarnessType: {
      * (`GateKind: 'delegated'`, same as Xirp).
      *
      * All three wrapped backends are themselves supported harnesses: Claude
-     * Code and Codex through their hook files, and OpenCode (since TD-397
-     * closed, 2026-09-23) through the plugin `openCodeHooks.ts` generates —
+     * Code and Codex through their hook files, and OpenCode (since its gate
+     * landed, 2026-09-23) through the plugin `openCodeHooks.ts` generates —
      * the worktree propagation re-runs every backend's writer per worktree,
      * so a feature run against any `--providers` value is governed.
      */
@@ -208,7 +208,7 @@ export declare const HarnessType: {
     readonly STRANDS: "strands";
     /** Microsoft Agent Framework (`agent-framework` / `agent-framework-core` on
      *  PyPI, imported as `agent_framework` — the AutoGen + Semantic Kernel
-     *  successor; a separate framework from AUTOGEN, see TD-375). Detected via
+     *  successor; a separate framework from AUTOGEN). Detected via
      *  `agent-framework`/`agent_framework` in Python dependency manifests. Gate:
      *  `intutic_clawde.gate.adapters.agent_framework`'s
      *  `IntuticFunctionMiddleware`, a `FunctionMiddleware` that short-circuits
@@ -231,7 +231,7 @@ export declare const HarnessType: {
      *  check — either alone is too generic; see tools/cli/src/harness/eve.ts).
      *  Gate: `@intutic/gate/eve`'s `intuticApproval()` on eve's per-tool /
      *  per-connection `approval` policy surface — see gateRegistry.ts's `eve`
-     *  row and TD-410 for the preview-churn shield. */
+     *  row for the preview-churn shield. */
     readonly EVE: "eve";
     /**
      * TrueFoundry's "TrueForge" (github.com/truefoundry/trueforge, MIT,
@@ -271,7 +271,7 @@ export declare const HarnessType: {
      *  `toolApproval` setting is a STATIC record without callback support, so
      *  per-call gating routes through the tool-approval flow; built-in sandbox
      *  tools are governed only by `permissionMode`, which DEFAULTS to
-     *  'allow-all'. See gateRegistry.ts's NO_GATE row and TD-415..417. */
+     *  'allow-all'. See gateRegistry.ts's NO_GATE row. */
     readonly AI_SDK_HARNESS: "ai-sdk-harness";
     /** Vercel `@ai-sdk/workflow` (WorkflowAgent — durable workflow agents on
      *  the Workflow DevKit). Detected via `@ai-sdk/workflow` in `package.json`
@@ -280,8 +280,7 @@ export declare const HarnessType: {
      *  too generic). Gate: `@intutic/gate/workflow`'s `intuticNeedsApproval()`
      *  on each tool — WorkflowAgent itself has zero approval fields; refusals
      *  are FatalError-compatible so the durable runtime aborts rather than
-     *  retry-looping a governance denial. See gateRegistry.ts's NO_GATE row
-     *  and TD-418..419. */
+     *  retry-looping a governance denial. See gateRegistry.ts's NO_GATE row. */
     readonly AI_SDK_WORKFLOW: "ai-sdk-workflow";
     /**
      * AWS Bedrock AgentCore **Runtime** (GA 2025-10) — a managed hosting
@@ -308,24 +307,24 @@ export declare const HarnessType: {
      * framework-SDK code as the deployment target, so if that code uses no
      * framework this registry supports (raw boto3, a hand-rolled tool loop),
      * coverage is genuinely zero — the same honest gap AGENTIC_ORCHESTRATOR's
-     * OpenCode backend has (TD-397). Deployment-target constraints that are
+     * OpenCode backend has. Deployment-target constraints that are
      * NOT a gate concern (environment-variable caps, VPC/NAT egress topology,
      * SigV4 traffic not being proxyable) are documented in
      * apps/docs/integrations/agentcore.md rather than encoded here.
      *
      * AgentCore **Gateway** (the MCP-tool-call interceptor path) deliberately
-     * has NO enum entry here — same precedent QM set (see TD-400): it is a
+     * has NO enum entry here — same precedent QM set: it is a
      * deployed AWS resource (a Lambda attached to a Gateway), never something
      * `intutic init`/`intutic connect` finds on a developer's laptop. Its
      * coverage is the `tools/agentcore-interceptor` Lambda calling
-     * `POST /api/v1/integrations/agentcore/gateway-check` — see TD-430.
+     * `POST /api/v1/integrations/agentcore/gateway-check`.
      *
      * AgentCore **Policy** (Cedar/"Dogwood") has NO third-party HTTP policy
      * backend at all (confirmed against `GatewayPolicyEngineConfiguration`'s
      * real API reference: `arn` only ever names an AWS-native
      * `policy-engine/...` resource) — not integrable by design, not a gap.
      *
-     * See apps/docs/integrations/agentcore.md and TD-430..432.
+     * See apps/docs/integrations/agentcore.md.
      */
     readonly AGENTCORE_RUNTIME: "agentcore-runtime";
     /**
@@ -394,19 +393,19 @@ export declare const HARNESS_COUNT: number;
  * `HARNESS_COUNT` minus the harnesses with a confirmed, currently-open
  * support gap — the number safe to use in headline/marketing copy
  * ("works with N coding agents") without overclaiming. Each exclusion must
- * be a harness with its own `docs/TECH_DEBT.md` entry describing a REAL,
+ * be a harness with its own recorded gap describing a REAL,
  * currently-unactionable gap (not a caveat, not a "documented, not a
  * defect" note). The list is EMPTY since 2026-09-23 and the mechanism is
  * kept so the next real gap goes here and nowhere else:
  *
- * - `agentic-orchestrator` was excluded under TD-397 while its OpenCode
+ * - `agentic-orchestrator` was excluded while its OpenCode
  *   backend had no gate; OpenCode is a harness of its own now.
- * - `autogen` was excluded under TD-374 while `InterventionHandler.on_send`
+ * - `autogen` was excluded while `InterventionHandler.on_send`
  *   was blind to `AssistantAgent`'s own tool calls; `IntuticWorkbench`
  *   (2026-09-22) governs them.
  *
- * Deliberately does NOT exclude `mastra` — TD-380 is explicitly marked
- * "🟢 Documented, not a defect" in TECH_DEBT.md, a caveat about a call-site
+ * Deliberately does NOT exclude `mastra` — its gap is explicitly recorded
+ * as "documented, not a defect", a caveat about a call-site
  * hook override, not a coverage gap, so excluding it here would be the
  * exact overclaim-avoidance discipline applied backwards. Also does NOT
  * exclude `continue` over its headless-mode limitation (`cn -p` skips
@@ -433,6 +432,54 @@ export declare const IncidentStatus: {
 };
 /** Union of all incident status values. */
 export type IncidentStatus = typeof IncidentStatus[keyof typeof IncidentStatus];
+/**
+ * Incidents that are not an agent misbehaving, so they are not anomaly
+ * categories: nothing on the hot path detects them, no corrective card
+ * answers them, and enforcement cannot be promoted on them. They share the
+ * `anomaly_type` column (Postgres enum, migrations 218 and 219) with the
+ * taxonomy.
+ */
+export declare const SystemIncidentType: {
+    /** A proxy refused to load a custom WASM or Rego rule version (`ruleLoadFailures.ts`). */
+    readonly WASM_RULE_REFUSED: "WASM_RULE_REFUSED";
+    /**
+     * Anything else a proxy reports on `intutic:system_anomalies`: a
+     * dependency it could not reach, such as the LLM provider or the semantic
+     * cache's embedding service or vector store.
+     */
+    readonly SYSTEM_ANOMALY: "SYSTEM_ANOMALY";
+};
+/** Union of the system incident types. */
+export type SystemIncidentType = typeof SystemIncidentType[keyof typeof SystemIncidentType];
+/** What a governance incident is filed under: an anomaly category or a system incident type. */
+export declare const IncidentType: {
+    /** A proxy refused to load a custom WASM or Rego rule version (`ruleLoadFailures.ts`). */
+    readonly WASM_RULE_REFUSED: "WASM_RULE_REFUSED";
+    /**
+     * Anything else a proxy reports on `intutic:system_anomalies`: a
+     * dependency it could not reach, such as the LLM provider or the semantic
+     * cache's embedding service or vector store.
+     */
+    readonly SYSTEM_ANOMALY: "SYSTEM_ANOMALY";
+    readonly TOOL_ABUSE: "TOOL_ABUSE";
+    readonly TOKEN_WASTE: "TOKEN_WASTE";
+    readonly LOOP_DETECTED: "LOOP_DETECTED";
+    readonly UNAUTHORIZED_TOOL: "UNAUTHORIZED_TOOL";
+    readonly DATA_EXFILTRATION: "DATA_EXFILTRATION";
+    readonly PROMPT_INJECTION: "PROMPT_INJECTION";
+    readonly HALLUCINATION: "HALLUCINATION";
+    readonly SCOPE_VIOLATION: "SCOPE_VIOLATION";
+    readonly BUDGET_BREACH: "BUDGET_BREACH";
+    readonly SPAWN_BUDGET_BREACH: "SPAWN_BUDGET_BREACH";
+    readonly WORKFLOW_BUDGET_BREACH: "WORKFLOW_BUDGET_BREACH";
+    readonly WORKFLOW_GOAL_DRIFT: "WORKFLOW_GOAL_DRIFT";
+};
+/** Union of every incident type, as `governance_incidents.anomaly_type` holds it. */
+export type IncidentType = typeof IncidentType[keyof typeof IncidentType];
+/** Every incident type, for validating a filter or listing the choices. */
+export declare const INCIDENT_TYPES: [IncidentType, ...IncidentType[]];
+/** Whether an arbitrary string is an incident type. */
+export declare function isIncidentType(value: unknown): value is IncidentType;
 /** Lifecycle state for stored execution plans. */
 export declare const PlanLifecycleState: {
     readonly PENDING_APPROVAL: "PENDING_APPROVAL";
@@ -512,7 +559,7 @@ export type WorkspaceRole = typeof WorkspaceRole[keyof typeof WorkspaceRole];
  * Note: `closed` only affects harnesses with MCP proxy injection (9/20 —
  * 10 config paths across 9 harnesses, see sync-daemon mcpAutoWrite.ts).
  * For harnesses without MCP proxy injection (e.g. n8n, pi, codex,
- * open-webui), see TD-151.
+ * open-webui) there is no MCP proxy to fail, so this has no effect.
  */
 export declare const McpProxyFailBehavior: {
     readonly OPEN: "open";
@@ -524,7 +571,7 @@ export type McpProxyFailBehavior = typeof McpProxyFailBehavior[keyof typeof McpP
  * - `per-session` (default, Phase 4): new proxy process per MCP connection
  * - `daemon`      (Phase 5): long-lived daemon, per-session shims delegate via Unix socket
  *
- * See TD-153 — daemon requires macOS notarization. Both modes are active: the
+ * Daemon mode requires macOS notarization. Both modes are active: the
  * mcp-proxy honours `daemon` by answering policy lookups over the daemon socket.
  */
 export declare const McpProxyMode: {
@@ -538,8 +585,6 @@ export type McpProxyMode = typeof McpProxyMode[keyof typeof McpProxyMode];
  * - `rewrite`    (default): drift watcher detects edits → immediate config rewrite (~1s)
  * - `immutable`  (opt-in):  after each write, sets macOS `chflags uchg` (user-immutable flag)
  * - `alert-only`: no rewrite; drift creates a governance incident only (audit mode)
- *
- * See TD-154 for immutable-flag UX risk notes.
  */
 export declare const BypassEnforcementTier: {
     readonly REWRITE: "rewrite";

package/dist/enums.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"enums.d.ts","sourceRoot":"","sources":["../src/enums.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAKH,uEAAuE;AACvE,eAAO,MAAM,SAAS;;;;;CAKZ,CAAA;AAEV,sCAAsC;AACtC,MAAM,MAAM,SAAS,GAAG,OAAO,SAAS,CAAC,MAAM,OAAO,SAAS,CAAC,CAAA;AAKhE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,eAAO,MAAM,iBAAiB;;;;;;;CAOpB,CAAA;AAEV,8CAA8C;AAC9C,MAAM,MAAM,iBAAiB,GAAG,OAAO,iBAAiB,CAAC,MAAM,OAAO,iBAAiB,CAAC,CAAA;AAKxF,0EAA0E;AAC1E,eAAO,MAAM,YAAY;;;CAGf,CAAA;AAEV,yCAAyC;AACzC,MAAM,MAAM,YAAY,GAAG,OAAO,YAAY,CAAC,MAAM,OAAO,YAAY,CAAC,CAAA;AAKzE,kEAAkE;AAClE,eAAO,MAAM,UAAU;;;;;CAKb,CAAA;AAEV,uCAAuC;AACvC,MAAM,MAAM,UAAU,GAAG,OAAO,UAAU,CAAC,MAAM,OAAO,UAAU,CAAC,CAAA;AAKnE,wDAAwD;AACxD,eAAO,MAAM,cAAc;;;;CAIjB,CAAA;AAEV,2CAA2C;AAC3C,MAAM,MAAM,cAAc,GAAG,OAAO,cAAc,CAAC,MAAM,OAAO,cAAc,CAAC,CAAA;AAK/E,qEAAqE;AACrE,eAAO,MAAM,oBAAoB;;;;;CAKvB,CAAA;AAEV,iDAAiD;AACjD,MAAM,MAAM,oBAAoB,GAAG,OAAO,oBAAoB,CAAC,MAAM,OAAO,oBAAoB,CAAC,CAAA;AAKjG;;;;;;;;;GASG;AACH,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAA;AACvD,YAAY,EACV,eAAe,GAChB,MAAM,2BAA2B,CAAA;AAYlC,mDAAmD;AACnD,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;IAoBtB,iFAAiF;;IAEjF,2EAA2E;;IAE3E;;;;+EAI2E;;IAE3E;;iEAE6D;;IAE7D;;;;;;;;OAQG;;IAEH;;;;;;;;;;;;;;;;;;;OAmBG;;IAOH;;;;;+DAK2D;;;IAG3D,0EAA0E;;;;IAI1E;;;;;;;;6DAQyD;;IAEzD,mDAAmD;;;IAGnD;;;;;;;iEAO6D;;IAE7D;;;;;;;iDAO6C;;IAQ7C;;kFAE8E;;IAE9E;;;4EAGwE;;IAExE;;;;;;;uDAOmD;;IAEnD;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA4BG;;IAQH;;;;;;;;0EAQsE;;IAEtE;;;;;;;;2BAQuB;;IAGvB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA2CG;;IAGH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAgDG;;CAEK,CAAA;AAEV,wCAAwC;AACxC,MAAM,MAAM,WAAW,GAAG,OAAO,WAAW,CAAC,MAAM,OAAO,WAAW,CAAC,CAAA;AAEtE;;;;;;;GAOG;AACH,eAAO,MAAM,aAAa,QAAkC,CAAA;AAE5D;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,eAAO,MAAM,sBAAsB,QAA4B,CAAA;AAK/D,uDAAuD;AACvD,eAAO,MAAM,aAAa;;;;;CAKhB,CAAA;AAEV,0CAA0C;AAC1C,MAAM,MAAM,aAAa,GAAG,OAAO,aAAa,CAAC,MAAM,OAAO,aAAa,CAAC,CAAA;AAK5E,gDAAgD;AAChD,eAAO,MAAM,cAAc;;;;;CAKjB,CAAA;AAEV,2CAA2C;AAC3C,MAAM,MAAM,cAAc,GAAG,OAAO,cAAc,CAAC,MAAM,OAAO,cAAc,CAAC,CAAA;AAK/E,kDAAkD;AAClD,eAAO,MAAM,kBAAkB;;;;;;CAMrB,CAAA;AAEV,gDAAgD;AAChD,MAAM,MAAM,kBAAkB,GAAG,OAAO,kBAAkB,CAAC,MAAM,OAAO,kBAAkB,CAAC,CAAA;AAO3F,4DAA4D;AAC5D,eAAO,MAAM,oBAAoB;;;;;CAKvB,CAAA;AAEV,kDAAkD;AAClD,MAAM,MAAM,oBAAoB,GAAG,OAAO,oBAAoB,CAAC,MAAM,OAAO,oBAAoB,CAAC,CAAA;AAMjG,gDAAgD;AAChD,eAAO,MAAM,iBAAiB;;;;;;;;CAQpB,CAAA;AAEV,+CAA+C;AAC/C,MAAM,MAAM,iBAAiB,GAAG,OAAO,iBAAiB,CAAC,MAAM,OAAO,iBAAiB,CAAC,CAAA;AAKxF,yDAAyD;AACzD,eAAO,MAAM,OAAO;IAClB,wDAAwD;;IAExD,sEAAsE;;CAE9D,CAAA;AAEV,oCAAoC;AACpC,MAAM,MAAM,OAAO,GAAG,OAAO,OAAO,CAAC,MAAM,OAAO,OAAO,CAAC,CAAA;AAK1D,kDAAkD;AAClD,eAAO,MAAM,SAAS;IACpB,mCAAmC;;IAEnC,kCAAkC;;IAElC,yCAAyC;;IAEzC,mCAAmC;;CAE3B,CAAA;AAEV,sCAAsC;AACtC,MAAM,MAAM,SAAS,GAAG,OAAO,SAAS,CAAC,MAAM,OAAO,SAAS,CAAC,CAAA;AAKhE,gDAAgD;AAChD,eAAO,MAAM,WAAW;;;;CAId,CAAA;AAEV,wCAAwC;AACxC,MAAM,MAAM,WAAW,GAAG,OAAO,WAAW,CAAC,MAAM,OAAO,WAAW,CAAC,CAAA;AAKtE,+EAA+E;AAC/E,eAAO,MAAM,aAAa;;;;;;CAMhB,CAAA;AAEV,0CAA0C;AAC1C,MAAM,MAAM,aAAa,GAAG,OAAO,aAAa,CAAC,MAAM,OAAO,aAAa,CAAC,CAAA;AAM5E;;;;;;;;;GASG;AACH,eAAO,MAAM,oBAAoB;;;CAGvB,CAAA;AACV,MAAM,MAAM,oBAAoB,GAAG,OAAO,oBAAoB,CAAC,MAAM,OAAO,oBAAoB,CAAC,CAAA;AAEjG;;;;;;;GAOG;AACH,eAAO,MAAM,YAAY;;;CAGf,CAAA;AACV,MAAM,MAAM,YAAY,GAAG,OAAO,YAAY,CAAC,MAAM,OAAO,YAAY,CAAC,CAAA;AAEzE;;;;;;;;GAQG;AACH,eAAO,MAAM,qBAAqB;;;;CAIxB,CAAA;AACV,MAAM,MAAM,qBAAqB,GAAG,OAAO,qBAAqB,CAAC,MAAM,OAAO,qBAAqB,CAAC,CAAA;AAKpG,8DAA8D;AAC9D,eAAO,MAAM,mBAAmB;;;;CAItB,CAAA;AACV,MAAM,MAAM,mBAAmB,GAAG,OAAO,mBAAmB,CAAC,MAAM,OAAO,mBAAmB,CAAC,CAAA;AAE9F,oFAAoF;AACpF,eAAO,MAAM,kBAAkB;;;CAGrB,CAAA;AACV,MAAM,MAAM,kBAAkB,GAAG,OAAO,kBAAkB,CAAC,MAAM,OAAO,kBAAkB,CAAC,CAAA;AAE3F;;;;;;;;;GASG;AACH,eAAO,MAAM,eAAe;;;;CAIlB,CAAA;AACV,MAAM,MAAM,eAAe,GAAG,OAAO,eAAe,CAAC,MAAM,OAAO,eAAe,CAAC,CAAA"}
+{"version":3,"file":"enums.d.ts","sourceRoot":"","sources":["../src/enums.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAOH,uEAAuE;AACvE,eAAO,MAAM,SAAS;;;;;CAKZ,CAAA;AAEV,sCAAsC;AACtC,MAAM,MAAM,SAAS,GAAG,OAAO,SAAS,CAAC,MAAM,OAAO,SAAS,CAAC,CAAA;AAKhE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,eAAO,MAAM,iBAAiB;;;;;;;CAOpB,CAAA;AAEV,8CAA8C;AAC9C,MAAM,MAAM,iBAAiB,GAAG,OAAO,iBAAiB,CAAC,MAAM,OAAO,iBAAiB,CAAC,CAAA;AAKxF,0EAA0E;AAC1E,eAAO,MAAM,YAAY;;;CAGf,CAAA;AAEV,yCAAyC;AACzC,MAAM,MAAM,YAAY,GAAG,OAAO,YAAY,CAAC,MAAM,OAAO,YAAY,CAAC,CAAA;AAKzE,kEAAkE;AAClE,eAAO,MAAM,UAAU;;;;;CAKb,CAAA;AAEV,uCAAuC;AACvC,MAAM,MAAM,UAAU,GAAG,OAAO,UAAU,CAAC,MAAM,OAAO,UAAU,CAAC,CAAA;AAKnE,wDAAwD;AACxD,eAAO,MAAM,cAAc;;;;CAIjB,CAAA;AAEV,2CAA2C;AAC3C,MAAM,MAAM,cAAc,GAAG,OAAO,cAAc,CAAC,MAAM,OAAO,cAAc,CAAC,CAAA;AAK/E,qEAAqE;AACrE,eAAO,MAAM,oBAAoB;;;;;CAKvB,CAAA;AAEV,iDAAiD;AACjD,MAAM,MAAM,oBAAoB,GAAG,OAAO,oBAAoB,CAAC,MAAM,OAAO,oBAAoB,CAAC,CAAA;AAKjG;;;;;;;;;GASG;AACH,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAA;AACvD,YAAY,EACV,eAAe,GAChB,MAAM,2BAA2B,CAAA;AAYlC,mDAAmD;AACnD,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;IAoBtB,iFAAiF;;IAEjF,2EAA2E;;IAE3E;;;;+EAI2E;;IAE3E;;iEAE6D;;IAE7D;;;;;;;;OAQG;;IAEH;;;;;;;;;;;;;;;;;;;OAmBG;;IAOH;;;;;+DAK2D;;;IAG3D,0EAA0E;;;;IAI1E;;;;;;;;6DAQyD;;IAEzD,mDAAmD;;;IAGnD;;;;;;;iEAO6D;;IAE7D;;;;;;;iDAO6C;;IAQ7C;;kFAE8E;;IAE9E;;;4EAGwE;;IAExE;;;;;;;4CAOwC;;IAExC;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA4BG;;IAQH;;;;;;;;0DAQsD;;IAEtD;;;;;;;gFAO4E;;IAG5E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA2CG;;IAGH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAgDG;;CAEK,CAAA;AAEV,wCAAwC;AACxC,MAAM,MAAM,WAAW,GAAG,OAAO,WAAW,CAAC,MAAM,OAAO,WAAW,CAAC,CAAA;AAEtE;;;;;;;GAOG;AACH,eAAO,MAAM,aAAa,QAAkC,CAAA;AAE5D;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,eAAO,MAAM,sBAAsB,QAA4B,CAAA;AAK/D,uDAAuD;AACvD,eAAO,MAAM,aAAa;;;;;CAKhB,CAAA;AAEV,0CAA0C;AAC1C,MAAM,MAAM,aAAa,GAAG,OAAO,aAAa,CAAC,MAAM,OAAO,aAAa,CAAC,CAAA;AAK5E,gDAAgD;AAChD,eAAO,MAAM,cAAc;;;;;CAKjB,CAAA;AAEV,2CAA2C;AAC3C,MAAM,MAAM,cAAc,GAAG,OAAO,cAAc,CAAC,MAAM,OAAO,cAAc,CAAC,CAAA;AAI/E;;;;;;GAMG;AACH,eAAO,MAAM,kBAAkB;IAC7B,0FAA0F;;IAE1F;;;;OAIG;;CAEK,CAAA;AAEV,0CAA0C;AAC1C,MAAM,MAAM,kBAAkB,GAAG,OAAO,kBAAkB,CAAC,MAAM,OAAO,kBAAkB,CAAC,CAAA;AAE3F,gGAAgG;AAChG,eAAO,MAAM,YAAY;IAdvB,0FAA0F;;IAE1F;;;;OAIG;;;;;;;;;;;;;;CAQ+E,CAAA;AAEpF,qFAAqF;AACrF,MAAM,MAAM,YAAY,GAAG,OAAO,YAAY,CAAC,MAAM,OAAO,YAAY,CAAC,CAAA;AAEzE,2EAA2E;AAC3E,eAAO,MAAM,cAAc,EAAkC,CAAC,YAAY,EAAE,GAAG,YAAY,EAAE,CAAC,CAAA;AAE9F,uDAAuD;AACvD,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,YAAY,CAEpE;AAKD,kDAAkD;AAClD,eAAO,MAAM,kBAAkB;;;;;;CAMrB,CAAA;AAEV,gDAAgD;AAChD,MAAM,MAAM,kBAAkB,GAAG,OAAO,kBAAkB,CAAC,MAAM,OAAO,kBAAkB,CAAC,CAAA;AAO3F,4DAA4D;AAC5D,eAAO,MAAM,oBAAoB;;;;;CAKvB,CAAA;AAEV,kDAAkD;AAClD,MAAM,MAAM,oBAAoB,GAAG,OAAO,oBAAoB,CAAC,MAAM,OAAO,oBAAoB,CAAC,CAAA;AAMjG,gDAAgD;AAChD,eAAO,MAAM,iBAAiB;;;;;;;;CAQpB,CAAA;AAEV,+CAA+C;AAC/C,MAAM,MAAM,iBAAiB,GAAG,OAAO,iBAAiB,CAAC,MAAM,OAAO,iBAAiB,CAAC,CAAA;AAKxF,yDAAyD;AACzD,eAAO,MAAM,OAAO;IAClB,wDAAwD;;IAExD,sEAAsE;;CAE9D,CAAA;AAEV,oCAAoC;AACpC,MAAM,MAAM,OAAO,GAAG,OAAO,OAAO,CAAC,MAAM,OAAO,OAAO,CAAC,CAAA;AAK1D,kDAAkD;AAClD,eAAO,MAAM,SAAS;IACpB,mCAAmC;;IAEnC,kCAAkC;;IAElC,yCAAyC;;IAEzC,mCAAmC;;CAE3B,CAAA;AAEV,sCAAsC;AACtC,MAAM,MAAM,SAAS,GAAG,OAAO,SAAS,CAAC,MAAM,OAAO,SAAS,CAAC,CAAA;AAKhE,gDAAgD;AAChD,eAAO,MAAM,WAAW;;;;CAId,CAAA;AAEV,wCAAwC;AACxC,MAAM,MAAM,WAAW,GAAG,OAAO,WAAW,CAAC,MAAM,OAAO,WAAW,CAAC,CAAA;AAKtE,+EAA+E;AAC/E,eAAO,MAAM,aAAa;;;;;;CAMhB,CAAA;AAEV,0CAA0C;AAC1C,MAAM,MAAM,aAAa,GAAG,OAAO,aAAa,CAAC,MAAM,OAAO,aAAa,CAAC,CAAA;AAK5E;;;;;;;;;GASG;AACH,eAAO,MAAM,oBAAoB;;;CAGvB,CAAA;AACV,MAAM,MAAM,oBAAoB,GAAG,OAAO,oBAAoB,CAAC,MAAM,OAAO,oBAAoB,CAAC,CAAA;AAEjG;;;;;;;GAOG;AACH,eAAO,MAAM,YAAY;;;CAGf,CAAA;AACV,MAAM,MAAM,YAAY,GAAG,OAAO,YAAY,CAAC,MAAM,OAAO,YAAY,CAAC,CAAA;AAEzE;;;;;;GAMG;AACH,eAAO,MAAM,qBAAqB;;;;CAIxB,CAAA;AACV,MAAM,MAAM,qBAAqB,GAAG,OAAO,qBAAqB,CAAC,MAAM,OAAO,qBAAqB,CAAC,CAAA;AAKpG,8DAA8D;AAC9D,eAAO,MAAM,mBAAmB;;;;CAItB,CAAA;AACV,MAAM,MAAM,mBAAmB,GAAG,OAAO,mBAAmB,CAAC,MAAM,OAAO,mBAAmB,CAAC,CAAA;AAE9F,oFAAoF;AACpF,eAAO,MAAM,kBAAkB;;;CAGrB,CAAA;AACV,MAAM,MAAM,kBAAkB,GAAG,OAAO,kBAAkB,CAAC,MAAM,OAAO,kBAAkB,CAAC,CAAA;AAE3F;;;;;;;;;GASG;AACH,eAAO,MAAM,eAAe;;;;CAIlB,CAAA;AACV,MAAM,MAAM,eAAe,GAAG,OAAO,eAAe,CAAC,MAAM,OAAO,eAAe,CAAC,CAAA"}

package/dist/enums.js

@@ -8,12 +8,14 @@
  * compile-time narrowing without Drizzle or Postgres dependencies.
  *
  * These mirror the Postgres enum types defined in
- * LLD 01-data-architecture §3.1.
+ * the data-architecture schema.
  *
  * @module
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.AmendmentSource = exports.DriftDetectionMode = exports.DriftClassification = exports.BypassEnforcementTier = exports.McpProxyMode = exports.McpProxyFailBehavior = exports.WorkspaceRole = exports.RoutingTier = exports.HookPhase = exports.SopType = exports.SopLifecycleState = exports.PlanExecutionOutcome = exports.PlanLifecycleState = exports.IncidentStatus = exports.ExecutionMode = exports.HARNESS_HEADLINE_COUNT = exports.HARNESS_COUNT = exports.HarnessType = exports.AnomalyType = exports.ChangeClassification = exports.ComplexityTier = exports.BudgetTier = exports.TokenUtility = exports.EnforcementAction = exports.RiskLevel = void 0;
+exports.AmendmentSource = exports.DriftDetectionMode = exports.DriftClassification = exports.BypassEnforcementTier = exports.McpProxyMode = exports.McpProxyFailBehavior = exports.WorkspaceRole = exports.RoutingTier = exports.HookPhase = exports.SopType = exports.SopLifecycleState = exports.PlanExecutionOutcome = exports.PlanLifecycleState = exports.INCIDENT_TYPES = exports.IncidentType = exports.SystemIncidentType = exports.IncidentStatus = exports.ExecutionMode = exports.HARNESS_HEADLINE_COUNT = exports.HARNESS_COUNT = exports.HarnessType = exports.AnomalyType = exports.ChangeClassification = exports.ComplexityTier = exports.BudgetTier = exports.TokenUtility = exports.EnforcementAction = exports.RiskLevel = void 0;
+exports.isIncidentType = isIncidentType;
+const anomaly_taxonomy_1 = require("@intutic/anomaly-taxonomy");
 // ─── Risk Level ──────────────────────────────────────────────────────
 // HLD §3.5, LLD §3.1 — risk_level enum
 /** Risk severity classification for SOPs, anomalies, and incidents. */
@@ -109,8 +111,8 @@ exports.ChangeClassification = {
  *
  * Re-exported rather than redeclared so this file cannot become a third copy.
  */
-var anomaly_taxonomy_1 = require("@intutic/anomaly-taxonomy");
-Object.defineProperty(exports, "AnomalyType", { enumerable: true, get: function () { return anomaly_taxonomy_1.AnomalyType; } });
+var anomaly_taxonomy_2 = require("@intutic/anomaly-taxonomy");
+Object.defineProperty(exports, "AnomalyType", { enumerable: true, get: function () { return anomaly_taxonomy_2.AnomalyType; } });
 // ─── Harness Type ────────────────────────────────────────────────────
 // HLD §3.14, §4.5 — Supported AI agent harness integrations
 // Full matrix: HLD §3.14 Harness Onboarding Matrix (31 harnesses — 21
@@ -180,8 +182,8 @@ exports.HarnessType = {
      * (`GateKind: 'delegated'`, same as Xirp).
      *
      * All three wrapped backends are themselves supported harnesses: Claude
-     * Code and Codex through their hook files, and OpenCode (since TD-397
-     * closed, 2026-09-23) through the plugin `openCodeHooks.ts` generates —
+     * Code and Codex through their hook files, and OpenCode (since its gate
+     * landed, 2026-09-23) through the plugin `openCodeHooks.ts` generates —
      * the worktree propagation re-runs every backend's writer per worktree,
      * so a feature run against any `--providers` value is governed.
      */
@@ -190,7 +192,7 @@ exports.HarnessType = {
     // Same family as LANGGRAPH: the blocking gate ships in intutic-clawde
     // (intutic_clawde.gate, python-raise contract), evaluated in-process before
     // the tool body runs. This adapter writes .env.intutic (proxy base-URL vars
-    // only) — see gateRegistry.ts NO_GATE rows and harness/gateKind.ts.
+    // only) — see gateRegistry.ts NO_GATE rows and shared-types/src/gateKind.ts.
     /** LangChain — covers BOTH the Python (`langchain`/`langchain-core`) and
      *  JS/TS (`langchain` npm package) ecosystems for detection purposes, since
      *  the framework itself ships in both. This env-adapter (`langchain.ts`) is
@@ -227,7 +229,7 @@ exports.HarnessType = {
     STRANDS: 'strands',
     /** Microsoft Agent Framework (`agent-framework` / `agent-framework-core` on
      *  PyPI, imported as `agent_framework` — the AutoGen + Semantic Kernel
-     *  successor; a separate framework from AUTOGEN, see TD-375). Detected via
+     *  successor; a separate framework from AUTOGEN). Detected via
      *  `agent-framework`/`agent_framework` in Python dependency manifests. Gate:
      *  `intutic_clawde.gate.adapters.agent_framework`'s
      *  `IntuticFunctionMiddleware`, a `FunctionMiddleware` that short-circuits
@@ -256,7 +258,7 @@ exports.HarnessType = {
      *  check — either alone is too generic; see tools/cli/src/harness/eve.ts).
      *  Gate: `@intutic/gate/eve`'s `intuticApproval()` on eve's per-tool /
      *  per-connection `approval` policy surface — see gateRegistry.ts's `eve`
-     *  row and TD-410 for the preview-churn shield. */
+     *  row for the preview-churn shield. */
     EVE: 'eve',
     /**
      * TrueFoundry's "TrueForge" (github.com/truefoundry/trueforge, MIT,
@@ -302,7 +304,7 @@ exports.HarnessType = {
      *  `toolApproval` setting is a STATIC record without callback support, so
      *  per-call gating routes through the tool-approval flow; built-in sandbox
      *  tools are governed only by `permissionMode`, which DEFAULTS to
-     *  'allow-all'. See gateRegistry.ts's NO_GATE row and TD-415..417. */
+     *  'allow-all'. See gateRegistry.ts's NO_GATE row. */
     AI_SDK_HARNESS: 'ai-sdk-harness',
     /** Vercel `@ai-sdk/workflow` (WorkflowAgent — durable workflow agents on
      *  the Workflow DevKit). Detected via `@ai-sdk/workflow` in `package.json`
@@ -311,8 +313,7 @@ exports.HarnessType = {
      *  too generic). Gate: `@intutic/gate/workflow`'s `intuticNeedsApproval()`
      *  on each tool — WorkflowAgent itself has zero approval fields; refusals
      *  are FatalError-compatible so the durable runtime aborts rather than
-     *  retry-looping a governance denial. See gateRegistry.ts's NO_GATE row
-     *  and TD-418..419. */
+     *  retry-looping a governance denial. See gateRegistry.ts's NO_GATE row. */
     AI_SDK_WORKFLOW: 'ai-sdk-workflow',
     // ─── B2: AWS Bedrock AgentCore ───────────────────────────────────────────
     /**
@@ -340,24 +341,24 @@ exports.HarnessType = {
      * framework-SDK code as the deployment target, so if that code uses no
      * framework this registry supports (raw boto3, a hand-rolled tool loop),
      * coverage is genuinely zero — the same honest gap AGENTIC_ORCHESTRATOR's
-     * OpenCode backend has (TD-397). Deployment-target constraints that are
+     * OpenCode backend has. Deployment-target constraints that are
      * NOT a gate concern (environment-variable caps, VPC/NAT egress topology,
      * SigV4 traffic not being proxyable) are documented in
      * apps/docs/integrations/agentcore.md rather than encoded here.
      *
      * AgentCore **Gateway** (the MCP-tool-call interceptor path) deliberately
-     * has NO enum entry here — same precedent QM set (see TD-400): it is a
+     * has NO enum entry here — same precedent QM set: it is a
      * deployed AWS resource (a Lambda attached to a Gateway), never something
      * `intutic init`/`intutic connect` finds on a developer's laptop. Its
      * coverage is the `tools/agentcore-interceptor` Lambda calling
-     * `POST /api/v1/integrations/agentcore/gateway-check` — see TD-430.
+     * `POST /api/v1/integrations/agentcore/gateway-check`.
      *
      * AgentCore **Policy** (Cedar/"Dogwood") has NO third-party HTTP policy
      * backend at all (confirmed against `GatewayPolicyEngineConfiguration`'s
      * real API reference: `arn` only ever names an AWS-native
      * `policy-engine/...` resource) — not integrable by design, not a gap.
      *
-     * See apps/docs/integrations/agentcore.md and TD-430..432.
+     * See apps/docs/integrations/agentcore.md.
      */
     AGENTCORE_RUNTIME: 'agentcore-runtime',
     // ─── B3: TrueForge, standalone/hosted server (bridge-gated) ─────────────
@@ -425,19 +426,19 @@ exports.HARNESS_COUNT = Object.keys(exports.HarnessType).length;
  * `HARNESS_COUNT` minus the harnesses with a confirmed, currently-open
  * support gap — the number safe to use in headline/marketing copy
  * ("works with N coding agents") without overclaiming. Each exclusion must
- * be a harness with its own `docs/TECH_DEBT.md` entry describing a REAL,
+ * be a harness with its own recorded gap describing a REAL,
  * currently-unactionable gap (not a caveat, not a "documented, not a
  * defect" note). The list is EMPTY since 2026-09-23 and the mechanism is
  * kept so the next real gap goes here and nowhere else:
  *
- * - `agentic-orchestrator` was excluded under TD-397 while its OpenCode
+ * - `agentic-orchestrator` was excluded while its OpenCode
  *   backend had no gate; OpenCode is a harness of its own now.
- * - `autogen` was excluded under TD-374 while `InterventionHandler.on_send`
+ * - `autogen` was excluded while `InterventionHandler.on_send`
  *   was blind to `AssistantAgent`'s own tool calls; `IntuticWorkbench`
  *   (2026-09-22) governs them.
  *
- * Deliberately does NOT exclude `mastra` — TD-380 is explicitly marked
- * "🟢 Documented, not a defect" in TECH_DEBT.md, a caveat about a call-site
+ * Deliberately does NOT exclude `mastra` — its gap is explicitly recorded
+ * as "documented, not a defect", a caveat about a call-site
  * hook override, not a coverage gap, so excluding it here would be the
  * exact overclaim-avoidance discipline applied backwards. Also does NOT
  * exclude `continue` over its headless-mode limitation (`cn -p` skips
@@ -464,6 +465,32 @@ exports.IncidentStatus = {
     RESOLVED: 'RESOLVED',
     FALSE_POSITIVE: 'FALSE_POSITIVE',
 };
+// ─── Incident Type ───────────────────────────────────────────────────
+/**
+ * Incidents that are not an agent misbehaving, so they are not anomaly
+ * categories: nothing on the hot path detects them, no corrective card
+ * answers them, and enforcement cannot be promoted on them. They share the
+ * `anomaly_type` column (Postgres enum, migrations 218 and 219) with the
+ * taxonomy.
+ */
+exports.SystemIncidentType = {
+    /** A proxy refused to load a custom WASM or Rego rule version (`ruleLoadFailures.ts`). */
+    WASM_RULE_REFUSED: 'WASM_RULE_REFUSED',
+    /**
+     * Anything else a proxy reports on `intutic:system_anomalies`: a
+     * dependency it could not reach, such as the LLM provider or the semantic
+     * cache's embedding service or vector store.
+     */
+    SYSTEM_ANOMALY: 'SYSTEM_ANOMALY',
+};
+/** What a governance incident is filed under: an anomaly category or a system incident type. */
+exports.IncidentType = { ...anomaly_taxonomy_1.AnomalyType, ...exports.SystemIncidentType };
+/** Every incident type, for validating a filter or listing the choices. */
+exports.INCIDENT_TYPES = Object.values(exports.IncidentType);
+/** Whether an arbitrary string is an incident type. */
+function isIncidentType(value) {
+    return exports.INCIDENT_TYPES.includes(value);
+}
 // ─── Plan Lifecycle State ────────────────────────────────────────────
 // HLD §3.4.1 — Stored plan compliance trail lifecycle
 /** Lifecycle state for stored execution plans. */
@@ -486,7 +513,7 @@ exports.PlanExecutionOutcome = {
     ABORTED: 'ABORTED',
 };
 // ─── SOP Lifecycle State ─────────────────────────────────────────────
-// HLD §3.4, LLD #6 §4.2 — 7-state FSM: DRAFT → PENDING_REVIEW → GENERATED
+// HLD §3.4 — 7-state FSM: DRAFT → PENDING_REVIEW → GENERATED
 //   → HYPOTHESIZED → REFINED → VALIDATED → INVALIDATED
 /** Lifecycle state for SOPs in the registry. */
 exports.SopLifecycleState = {
@@ -499,7 +526,7 @@ exports.SopLifecycleState = {
     INVALIDATED: 'INVALIDATED',
 };
 // ─── SOP Type ────────────────────────────────────────────────────────
-// TD-022 item 0.4 — SOP classification for hook pipeline
+// SOP classification for hook pipeline
 /** SOP type: standard markdown or executable V8 hook. */
 exports.SopType = {
     /** Standard SOP — markdown content enforced via SSL. */
@@ -508,7 +535,7 @@ exports.SopType = {
     HOOK: 'hook',
 };
 // ─── Hook Phase ──────────────────────────────────────────────────────
-// TD-022 item 0.4 — Pipeline phase for hook-type SOPs
+// Pipeline phase for hook-type SOPs
 /** Pipeline phase where a hook-type SOP fires. */
 exports.HookPhase = {
     /** Before tool call evaluation. */
@@ -529,7 +556,7 @@ exports.RoutingTier = {
     LOCAL: 'local',
 };
 // ─── Workspace Role ──────────────────────────────────────────────────
-// HLD §5.1, LLD #7 — RBAC role hierarchy
+// HLD §5.1 — RBAC role hierarchy
 /** Workspace member role for RBAC. OWNER > ADMIN > EM > DEVELOPER > VIEWER. */
 exports.WorkspaceRole = {
     OWNER: 'OWNER',
@@ -540,7 +567,6 @@ exports.WorkspaceRole = {
 };
 // ─── MCP Proxy Settings ──────────────────────────────────────────────
 // WS-5 — Q1 fail behavior, Q2 deployment model, Q3 bypass enforcement
-// TD-151, TD-152, TD-153, TD-154, TD-155
 /**
  * MCP proxy fail behavior when the Intutic control plane is unreachable.
  * - `open`   (default): pass through the tool call + emit a warning event
@@ -549,7 +575,7 @@ exports.WorkspaceRole = {
  * Note: `closed` only affects harnesses with MCP proxy injection (9/20 —
  * 10 config paths across 9 harnesses, see sync-daemon mcpAutoWrite.ts).
  * For harnesses without MCP proxy injection (e.g. n8n, pi, codex,
- * open-webui), see TD-151.
+ * open-webui) there is no MCP proxy to fail, so this has no effect.
  */
 exports.McpProxyFailBehavior = {
     OPEN: 'open',
@@ -560,7 +586,7 @@ exports.McpProxyFailBehavior = {
  * - `per-session` (default, Phase 4): new proxy process per MCP connection
  * - `daemon`      (Phase 5): long-lived daemon, per-session shims delegate via Unix socket
  *
- * See TD-153 — daemon requires macOS notarization. Both modes are active: the
+ * Daemon mode requires macOS notarization. Both modes are active: the
  * mcp-proxy honours `daemon` by answering policy lookups over the daemon socket.
  */
 exports.McpProxyMode = {
@@ -573,8 +599,6 @@ exports.McpProxyMode = {
  * - `rewrite`    (default): drift watcher detects edits → immediate config rewrite (~1s)
  * - `immutable`  (opt-in):  after each write, sets macOS `chflags uchg` (user-immutable flag)
  * - `alert-only`: no rewrite; drift creates a governance incident only (audit mode)
- *
- * See TD-154 for immutable-flag UX risk notes.
  */
 exports.BypassEnforcementTier = {
     REWRITE: 'rewrite',
@@ -582,7 +606,7 @@ exports.BypassEnforcementTier = {
     ALERT_ONLY: 'alert-only',
 };
 // ─── Phase 5 Enums ───────────────────────────────────────────────────
-// LLD #27: Production Hardening & SOC 2
+// Production Hardening & SOC 2
 /** TurboVec behavioral drift classification. @see HLD §7.7 */
 exports.DriftClassification = {
     POSITIVE_DRIFT: 'POSITIVE_DRIFT',

package/dist/enums.js.map

@@ -1 +1 @@
-{"version":3,"file":"enums.js","sourceRoot":"","sources":["../src/enums.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;GAYG;;;AAEH,wEAAwE;AACxE,uCAAuC;AAEvC,uEAAuE;AAC1D,QAAA,SAAS,GAAG;IACvB,GAAG,EAAE,KAAK;IACV,MAAM,EAAE,QAAQ;IAChB,IAAI,EAAE,MAAM;IACZ,QAAQ,EAAE,UAAU;CACZ,CAAA;AAKV,wEAAwE;AACxE,oDAAoD;AAEpD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACU,QAAA,iBAAiB,GAAG;IAC/B,MAAM,EAAE,QAAQ;IAChB,OAAO,EAAE,SAAS;IAClB,MAAM,EAAE,QAAQ;IAChB,KAAK,EAAE,OAAO;IACd,IAAI,EAAE,MAAM;IACZ,QAAQ,EAAE,UAAU;CACZ,CAAA;AAKV,wEAAwE;AACxE,+CAA+C;AAE/C,0EAA0E;AAC7D,QAAA,YAAY,GAAG;IAC1B,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,QAAQ;CACR,CAAA;AAKV,wEAAwE;AACxE,6CAA6C;AAE7C,kEAAkE;AACrD,QAAA,UAAU,GAAG;IACxB,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,QAAQ;IAChB,KAAK,EAAE,OAAO;IACd,SAAS,EAAE,WAAW;CACd,CAAA;AAKV,wEAAwE;AACxE,4CAA4C;AAE5C,wDAAwD;AAC3C,QAAA,cAAc,GAAG;IAC5B,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,QAAQ;CACR,CAAA;AAKV,uEAAuE;AACvE,kDAAkD;AAElD,qEAAqE;AACxD,QAAA,oBAAoB,GAAG;IAClC,UAAU,EAAE,YAAY;IACxB,OAAO,EAAE,SAAS;IAClB,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,QAAQ;CACR,CAAA;AAKV,wEAAwE;AACxE,wEAAwE;AAExE;;;;;;;;;GASG;AACH,8DAAuD;AAA9C,+GAAA,WAAW,OAAA;AAKpB,wEAAwE;AACxE,4DAA4D;AAC5D,sEAAsE;AACtE,qEAAqE;AACrE,yEAAyE;AACzE,yEAAyE;AACzE,2EAA2E;AAC3E,4EAA4E;AAC5E,qCAAqC;AAErC,mDAAmD;AACtC,QAAA,WAAW,GAAG;IACzB,MAAM,EAAE,QAAQ;IAChB,WAAW,EAAE,aAAa;IAC1B,WAAW,EAAE,aAAa;IAC1B,GAAG,EAAE,KAAK;IACV,KAAK,EAAE,OAAO;IACd,QAAQ,EAAE,UAAU;IACpB,KAAK,EAAE,OAAO;IACd,SAAS,EAAE,WAAW;IACtB,QAAQ,EAAE,UAAU;IACpB,MAAM,EAAE,QAAQ;IAChB,EAAE,EAAE,IAAI;IACR,KAAK,EAAE,OAAO;IACd,QAAQ,EAAE,UAAU;IACpB,QAAQ,EAAE,UAAU;IACpB,cAAc,EAAE,gBAAgB;IAChC,KAAK,EAAE,OAAO;IACd,UAAU,EAAE,YAAY;IACxB,cAAc,EAAE,gBAAgB;IAChC,SAAS,EAAE,WAAW;IACtB,iFAAiF;IACjF,SAAS,EAAE,WAAW;IACtB,2EAA2E;IAC3E,IAAI,EAAE,MAAM;IACZ;;;;+EAI2E;IAC3E,QAAQ,EAAE,UAAU;IACpB;;iEAE6D;IAC7D,gBAAgB,EAAE,KAAK;IACvB;;;;;;;;OAQG;IACH,IAAI,EAAE,MAAM;IACZ;;;;;;;;;;;;;;;;;;;OAmBG;IACH,oBAAoB,EAAE,sBAAsB;IAC5C,4EAA4E;IAC5E,sEAAsE;IACtE,4EAA4E;IAC5E,4EAA4E;IAC5E,oEAAoE;IACpE;;;;;+DAK2D;IAC3D,SAAS,EAAE,WAAW;IACtB,MAAM,EAAE,QAAQ;IAChB,0EAA0E;IAC1E,OAAO,EAAE,SAAS;IAClB,GAAG,EAAE,KAAK;IACV,UAAU,EAAE,YAAY;IACxB;;;;;;;;6DAQyD;IACzD,aAAa,EAAE,eAAe;IAC9B,mDAAmD;IACnD,WAAW,EAAE,aAAa;IAC1B,UAAU,EAAE,YAAY;IACxB;;;;;;;iEAO6D;IAC7D,OAAO,EAAE,SAAS;IAClB;;;;;;;iDAO6C;IAC7C,eAAe,EAAE,iBAAiB;IAClC,2EAA2E;IAC3E,2EAA2E;IAC3E,wEAAwE;IACxE,kEAAkE;IAClE,kEAAkE;IAClE,4EAA4E;IAC5E;;kFAE8E;IAC9E,MAAM,EAAE,QAAQ;IAChB;;;4EAGwE;IACxE,aAAa,EAAE,eAAe;IAC9B;;;;;;;uDAOmD;IACnD,GAAG,EAAE,KAAK;IACV;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA4BG;IACH,SAAS,EAAE,WAAW;IACtB,2EAA2E;IAC3E,oEAAoE;IACpE,oEAAoE;IACpE,qEAAqE;IACrE,yEAAyE;IACzE,2EAA2E;IAC3E;;;;;;;;0EAQsE;IACtE,cAAc,EAAE,gBAAgB;IAChC;;;;;;;;2BAQuB;IACvB,eAAe,EAAE,iBAAiB;IAClC,4EAA4E;IAC5E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA2CG;IACH,iBAAiB,EAAE,mBAAmB;IACtC,2EAA2E;IAC3E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAgDG;IACH,gBAAgB,EAAE,kBAAkB;CAC5B,CAAA;AAKV;;;;;;;GAOG;AACU,QAAA,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,mBAAW,CAAC,CAAC,MAAM,CAAA;AAE5D;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACU,QAAA,sBAAsB,GAAG,qBAAa,GAAG,EAAE,CAAC,MAAM,CAAA;AAE/D,wEAAwE;AACxE,mCAAmC;AAEnC,uDAAuD;AAC1C,QAAA,aAAa,GAAG;IAC3B,QAAQ,EAAE,UAAU;IACpB,SAAS,EAAE,WAAW;IACtB,MAAM,EAAE,QAAQ;IAChB,UAAU,EAAE,YAAY;CAChB,CAAA;AAKV,wEAAwE;AACxE,uDAAuD;AAEvD,gDAAgD;AACnC,QAAA,cAAc,GAAG;IAC5B,IAAI,EAAE,MAAM;IACZ,YAAY,EAAE,cAAc;IAC5B,QAAQ,EAAE,UAAU;IACpB,cAAc,EAAE,gBAAgB;CACxB,CAAA;AAKV,wEAAwE;AACxE,sDAAsD;AAEtD,kDAAkD;AACrC,QAAA,kBAAkB,GAAG;IAChC,gBAAgB,EAAE,kBAAkB;IACpC,QAAQ,EAAE,UAAU;IACpB,QAAQ,EAAE,UAAU;IACpB,SAAS,EAAE,WAAW;IACtB,SAAS,EAAE,WAAW;CACd,CAAA;AAKV,wEAAwE;AACxE,8DAA8D;AAC9D,qEAAqE;AACrE,oEAAoE;AAEpE,4DAA4D;AAC/C,QAAA,oBAAoB,GAAG;IAClC,OAAO,EAAE,SAAS;IAClB,MAAM,EAAE,QAAQ;IAChB,OAAO,EAAE,SAAS;IAClB,OAAO,EAAE,SAAS;CACV,CAAA;AAKV,wEAAwE;AACxE,0EAA0E;AAC1E,uDAAuD;AAEvD,gDAAgD;AACnC,QAAA,iBAAiB,GAAG;IAC/B,KAAK,EAAE,OAAO;IACd,cAAc,EAAE,gBAAgB;IAChC,SAAS,EAAE,WAAW;IACtB,YAAY,EAAE,cAAc;IAC5B,OAAO,EAAE,SAAS;IAClB,SAAS,EAAE,WAAW;IACtB,WAAW,EAAE,aAAa;CAClB,CAAA;AAKV,wEAAwE;AACxE,yDAAyD;AAEzD,yDAAyD;AAC5C,QAAA,OAAO,GAAG;IACrB,wDAAwD;IACxD,QAAQ,EAAE,UAAU;IACpB,sEAAsE;IACtE,IAAI,EAAE,MAAM;CACJ,CAAA;AAKV,wEAAwE;AACxE,sDAAsD;AAEtD,kDAAkD;AACrC,QAAA,SAAS,GAAG;IACvB,mCAAmC;IACnC,QAAQ,EAAE,UAAU;IACpB,kCAAkC;IAClC,SAAS,EAAE,WAAW;IACtB,yCAAyC;IACzC,YAAY,EAAE,cAAc;IAC5B,mCAAmC;IACnC,aAAa,EAAE,eAAe;CACtB,CAAA;AAKV,wEAAwE;AACxE,yDAAyD;AAEzD,gDAAgD;AACnC,QAAA,WAAW,GAAG;IACzB,QAAQ,EAAE,UAAU;IACpB,OAAO,EAAE,SAAS;IAClB,KAAK,EAAE,OAAO;CACN,CAAA;AAKV,wEAAwE;AACxE,yCAAyC;AAEzC,+EAA+E;AAClE,QAAA,aAAa,GAAG;IAC3B,KAAK,EAAE,OAAO;IACd,KAAK,EAAE,OAAO;IACd,EAAE,EAAE,IAAI;IACR,SAAS,EAAE,WAAW;IACtB,MAAM,EAAE,QAAQ;CACR,CAAA;AAKV,wEAAwE;AACxE,sEAAsE;AACtE,yCAAyC;AAEzC;;;;;;;;;GASG;AACU,QAAA,oBAAoB,GAAG;IAClC,IAAI,EAAI,MAAM;IACd,MAAM,EAAE,QAAQ;CACR,CAAA;AAGV;;;;;;;GAOG;AACU,QAAA,YAAY,GAAG;IAC1B,WAAW,EAAE,aAAa;IAC1B,MAAM,EAAO,QAAQ;CACb,CAAA;AAGV;;;;;;;;GAQG;AACU,QAAA,qBAAqB,GAAG;IACnC,OAAO,EAAK,SAAS;IACrB,SAAS,EAAG,WAAW;IACvB,UAAU,EAAE,YAAY;CAChB,CAAA;AAGV,wEAAwE;AACxE,wCAAwC;AAExC,8DAA8D;AACjD,QAAA,mBAAmB,GAAG;IACjC,cAAc,EAAE,gBAAgB;IAChC,cAAc,EAAE,gBAAgB;IAChC,aAAa,EAAG,eAAe;CACvB,CAAA;AAGV,oFAAoF;AACvE,QAAA,kBAAkB,GAAG;IAChC,QAAQ,EAAmB,UAAU;IACrC,yBAAyB,EAAE,2BAA2B;CAC9C,CAAA;AAGV;;;;;;;;;GASG;AACU,QAAA,eAAe,GAAG;IAC7B,eAAe,EAAE,iBAAiB;IAClC,QAAQ,EAAE,UAAU;IACpB,WAAW,EAAE,aAAa;CAClB,CAAA"}
+{"version":3,"file":"enums.js","sourceRoot":"","sources":["../src/enums.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;GAYG;;;AAyhBH,wCAEC;AAzhBD,gEAA4E;AAE5E,wEAAwE;AACxE,uCAAuC;AAEvC,uEAAuE;AAC1D,QAAA,SAAS,GAAG;IACvB,GAAG,EAAE,KAAK;IACV,MAAM,EAAE,QAAQ;IAChB,IAAI,EAAE,MAAM;IACZ,QAAQ,EAAE,UAAU;CACZ,CAAA;AAKV,wEAAwE;AACxE,oDAAoD;AAEpD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACU,QAAA,iBAAiB,GAAG;IAC/B,MAAM,EAAE,QAAQ;IAChB,OAAO,EAAE,SAAS;IAClB,MAAM,EAAE,QAAQ;IAChB,KAAK,EAAE,OAAO;IACd,IAAI,EAAE,MAAM;IACZ,QAAQ,EAAE,UAAU;CACZ,CAAA;AAKV,wEAAwE;AACxE,+CAA+C;AAE/C,0EAA0E;AAC7D,QAAA,YAAY,GAAG;IAC1B,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,QAAQ;CACR,CAAA;AAKV,wEAAwE;AACxE,6CAA6C;AAE7C,kEAAkE;AACrD,QAAA,UAAU,GAAG;IACxB,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,QAAQ;IAChB,KAAK,EAAE,OAAO;IACd,SAAS,EAAE,WAAW;CACd,CAAA;AAKV,wEAAwE;AACxE,4CAA4C;AAE5C,wDAAwD;AAC3C,QAAA,cAAc,GAAG;IAC5B,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,QAAQ;CACR,CAAA;AAKV,uEAAuE;AACvE,kDAAkD;AAElD,qEAAqE;AACxD,QAAA,oBAAoB,GAAG;IAClC,UAAU,EAAE,YAAY;IACxB,OAAO,EAAE,SAAS;IAClB,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,QAAQ;CACR,CAAA;AAKV,wEAAwE;AACxE,wEAAwE;AAExE;;;;;;;;;GASG;AACH,8DAAuD;AAA9C,+GAAA,WAAW,OAAA;AAKpB,wEAAwE;AACxE,4DAA4D;AAC5D,sEAAsE;AACtE,qEAAqE;AACrE,yEAAyE;AACzE,yEAAyE;AACzE,2EAA2E;AAC3E,4EAA4E;AAC5E,qCAAqC;AAErC,mDAAmD;AACtC,QAAA,WAAW,GAAG;IACzB,MAAM,EAAE,QAAQ;IAChB,WAAW,EAAE,aAAa;IAC1B,WAAW,EAAE,aAAa;IAC1B,GAAG,EAAE,KAAK;IACV,KAAK,EAAE,OAAO;IACd,QAAQ,EAAE,UAAU;IACpB,KAAK,EAAE,OAAO;IACd,SAAS,EAAE,WAAW;IACtB,QAAQ,EAAE,UAAU;IACpB,MAAM,EAAE,QAAQ;IAChB,EAAE,EAAE,IAAI;IACR,KAAK,EAAE,OAAO;IACd,QAAQ,EAAE,UAAU;IACpB,QAAQ,EAAE,UAAU;IACpB,cAAc,EAAE,gBAAgB;IAChC,KAAK,EAAE,OAAO;IACd,UAAU,EAAE,YAAY;IACxB,cAAc,EAAE,gBAAgB;IAChC,SAAS,EAAE,WAAW;IACtB,iFAAiF;IACjF,SAAS,EAAE,WAAW;IACtB,2EAA2E;IAC3E,IAAI,EAAE,MAAM;IACZ;;;;+EAI2E;IAC3E,QAAQ,EAAE,UAAU;IACpB;;iEAE6D;IAC7D,gBAAgB,EAAE,KAAK;IACvB;;;;;;;;OAQG;IACH,IAAI,EAAE,MAAM;IACZ;;;;;;;;;;;;;;;;;;;OAmBG;IACH,oBAAoB,EAAE,sBAAsB;IAC5C,4EAA4E;IAC5E,sEAAsE;IACtE,4EAA4E;IAC5E,4EAA4E;IAC5E,6EAA6E;IAC7E;;;;;+DAK2D;IAC3D,SAAS,EAAE,WAAW;IACtB,MAAM,EAAE,QAAQ;IAChB,0EAA0E;IAC1E,OAAO,EAAE,SAAS;IAClB,GAAG,EAAE,KAAK;IACV,UAAU,EAAE,YAAY;IACxB;;;;;;;;6DAQyD;IACzD,aAAa,EAAE,eAAe;IAC9B,mDAAmD;IACnD,WAAW,EAAE,aAAa;IAC1B,UAAU,EAAE,YAAY;IACxB;;;;;;;iEAO6D;IAC7D,OAAO,EAAE,SAAS;IAClB;;;;;;;iDAO6C;IAC7C,eAAe,EAAE,iBAAiB;IAClC,2EAA2E;IAC3E,2EAA2E;IAC3E,wEAAwE;IACxE,kEAAkE;IAClE,kEAAkE;IAClE,4EAA4E;IAC5E;;kFAE8E;IAC9E,MAAM,EAAE,QAAQ;IAChB;;;4EAGwE;IACxE,aAAa,EAAE,eAAe;IAC9B;;;;;;;4CAOwC;IACxC,GAAG,EAAE,KAAK;IACV;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA4BG;IACH,SAAS,EAAE,WAAW;IACtB,2EAA2E;IAC3E,oEAAoE;IACpE,oEAAoE;IACpE,qEAAqE;IACrE,yEAAyE;IACzE,2EAA2E;IAC3E;;;;;;;;0DAQsD;IACtD,cAAc,EAAE,gBAAgB;IAChC;;;;;;;gFAO4E;IAC5E,eAAe,EAAE,iBAAiB;IAClC,4EAA4E;IAC5E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA2CG;IACH,iBAAiB,EAAE,mBAAmB;IACtC,2EAA2E;IAC3E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAgDG;IACH,gBAAgB,EAAE,kBAAkB;CAC5B,CAAA;AAKV;;;;;;;GAOG;AACU,QAAA,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,mBAAW,CAAC,CAAC,MAAM,CAAA;AAE5D;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACU,QAAA,sBAAsB,GAAG,qBAAa,GAAG,EAAE,CAAC,MAAM,CAAA;AAE/D,wEAAwE;AACxE,mCAAmC;AAEnC,uDAAuD;AAC1C,QAAA,aAAa,GAAG;IAC3B,QAAQ,EAAE,UAAU;IACpB,SAAS,EAAE,WAAW;IACtB,MAAM,EAAE,QAAQ;IAChB,UAAU,EAAE,YAAY;CAChB,CAAA;AAKV,wEAAwE;AACxE,uDAAuD;AAEvD,gDAAgD;AACnC,QAAA,cAAc,GAAG;IAC5B,IAAI,EAAE,MAAM;IACZ,YAAY,EAAE,cAAc;IAC5B,QAAQ,EAAE,UAAU;IACpB,cAAc,EAAE,gBAAgB;CACxB,CAAA;AAKV,wEAAwE;AAExE;;;;;;GAMG;AACU,QAAA,kBAAkB,GAAG;IAChC,0FAA0F;IAC1F,iBAAiB,EAAE,mBAAmB;IACtC;;;;OAIG;IACH,cAAc,EAAE,gBAAgB;CACxB,CAAA;AAKV,gGAAgG;AACnF,QAAA,YAAY,GAAG,EAAE,GAAG,8BAAiB,EAAE,GAAG,0BAAkB,EAAW,CAAA;AAKpF,2EAA2E;AAC9D,QAAA,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,oBAAY,CAAsC,CAAA;AAE9F,uDAAuD;AACvD,SAAgB,cAAc,CAAC,KAAc;IAC3C,OAAQ,sBAAqC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;AAC/D,CAAC;AAED,wEAAwE;AACxE,sDAAsD;AAEtD,kDAAkD;AACrC,QAAA,kBAAkB,GAAG;IAChC,gBAAgB,EAAE,kBAAkB;IACpC,QAAQ,EAAE,UAAU;IACpB,QAAQ,EAAE,UAAU;IACpB,SAAS,EAAE,WAAW;IACtB,SAAS,EAAE,WAAW;CACd,CAAA;AAKV,wEAAwE;AACxE,8DAA8D;AAC9D,qEAAqE;AACrE,oEAAoE;AAEpE,4DAA4D;AAC/C,QAAA,oBAAoB,GAAG;IAClC,OAAO,EAAE,SAAS;IAClB,MAAM,EAAE,QAAQ;IAChB,OAAO,EAAE,SAAS;IAClB,OAAO,EAAE,SAAS;CACV,CAAA;AAKV,wEAAwE;AACxE,6DAA6D;AAC7D,uDAAuD;AAEvD,gDAAgD;AACnC,QAAA,iBAAiB,GAAG;IAC/B,KAAK,EAAE,OAAO;IACd,cAAc,EAAE,gBAAgB;IAChC,SAAS,EAAE,WAAW;IACtB,YAAY,EAAE,cAAc;IAC5B,OAAO,EAAE,SAAS;IAClB,SAAS,EAAE,WAAW;IACtB,WAAW,EAAE,aAAa;CAClB,CAAA;AAKV,wEAAwE;AACxE,uCAAuC;AAEvC,yDAAyD;AAC5C,QAAA,OAAO,GAAG;IACrB,wDAAwD;IACxD,QAAQ,EAAE,UAAU;IACpB,sEAAsE;IACtE,IAAI,EAAE,MAAM;CACJ,CAAA;AAKV,wEAAwE;AACxE,oCAAoC;AAEpC,kDAAkD;AACrC,QAAA,SAAS,GAAG;IACvB,mCAAmC;IACnC,QAAQ,EAAE,UAAU;IACpB,kCAAkC;IAClC,SAAS,EAAE,WAAW;IACtB,yCAAyC;IACzC,YAAY,EAAE,cAAc;IAC5B,mCAAmC;IACnC,aAAa,EAAE,eAAe;CACtB,CAAA;AAKV,wEAAwE;AACxE,yDAAyD;AAEzD,gDAAgD;AACnC,QAAA,WAAW,GAAG;IACzB,QAAQ,EAAE,UAAU;IACpB,OAAO,EAAE,SAAS;IAClB,KAAK,EAAE,OAAO;CACN,CAAA;AAKV,wEAAwE;AACxE,iCAAiC;AAEjC,+EAA+E;AAClE,QAAA,aAAa,GAAG;IAC3B,KAAK,EAAE,OAAO;IACd,KAAK,EAAE,OAAO;IACd,EAAE,EAAE,IAAI;IACR,SAAS,EAAE,WAAW;IACtB,MAAM,EAAE,QAAQ;CACR,CAAA;AAKV,wEAAwE;AACxE,sEAAsE;AAEtE;;;;;;;;;GASG;AACU,QAAA,oBAAoB,GAAG;IAClC,IAAI,EAAI,MAAM;IACd,MAAM,EAAE,QAAQ;CACR,CAAA;AAGV;;;;;;;GAOG;AACU,QAAA,YAAY,GAAG;IAC1B,WAAW,EAAE,aAAa;IAC1B,MAAM,EAAO,QAAQ;CACb,CAAA;AAGV;;;;;;GAMG;AACU,QAAA,qBAAqB,GAAG;IACnC,OAAO,EAAK,SAAS;IACrB,SAAS,EAAG,WAAW;IACvB,UAAU,EAAE,YAAY;CAChB,CAAA;AAGV,wEAAwE;AACxE,+BAA+B;AAE/B,8DAA8D;AACjD,QAAA,mBAAmB,GAAG;IACjC,cAAc,EAAE,gBAAgB;IAChC,cAAc,EAAE,gBAAgB;IAChC,aAAa,EAAG,eAAe;CACvB,CAAA;AAGV,oFAAoF;AACvE,QAAA,kBAAkB,GAAG;IAChC,QAAQ,EAAmB,UAAU;IACrC,yBAAyB,EAAE,2BAA2B;CAC9C,CAAA;AAGV;;;;;;;;;GASG;AACU,QAAA,eAAe,GAAG;IAC7B,eAAe,EAAE,iBAAiB;IAClC,QAAQ,EAAE,UAAU;IACpB,WAAW,EAAE,aAAa;CAClB,CAAA"}

package/dist/errors.js

@@ -82,7 +82,7 @@ exports.E_ALREADY_VERIFIED = 'ALREADY_VERIFIED';
 exports.E_DOMAIN_NOT_VERIFIED = 'DOMAIN_NOT_VERIFIED';
 /** Generic validation failure (legacy alias). */
 exports.E_VALIDATION = 'E_VALIDATION';
-// ─── Identity Federation Error Codes (LLD #11) ─────────────────────
+// ─── Identity Federation Error Codes ─────────────────────
 /** SSO is not configured or disabled for this workspace. */
 exports.E_SSO_DISABLED = 'SSO_DISABLED';
 /** SSO user has no workspace membership. */
@@ -109,13 +109,13 @@ exports.E_FEATURE_NOT_AVAILABLE = 'FEATURE_NOT_AVAILABLE';
  * which made the unenforced sessions rank best in a workspace's audit history.
  */
 exports.E_SSL_NOT_ENFORCED = 'SSL_NOT_ENFORCED';
-// ─── WS4 — Enterprise Identity & Compliance (LLD #19) ───────────────
+// ─── WS4 — Enterprise Identity & Compliance ───────────────
 /**
  * Requested child capabilities are not a subset of the parent key's capabilities.
  * HLD §5.6 — DCT Token Attenuation (Patent Family A).
  */
 exports.E_ATTENUATION_CAP_VIOLATION = 'ATTENUATION_CAP_VIOLATION';
-// ─── WS5 — Monetization & Financial Ledger (LLD #20) ────────────────
+// ─── WS5 — Monetization & Financial Ledger ────────────────
 /**
  * Daily spend cap exceeded with hard enforcement mode active.
  * Proxy returns this when budget:hard_block:{wid} Valkey key is set.

package/dist/errors.js.map

@@ -1 +1 @@
-{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":";AAAA;;;;;;;;GAQG;;;AA6PH,wCAQC;AAnQD,wEAAwE;AAExE,0BAA0B;AACb,QAAA,WAAW,GAAG,aAAsB,CAAA;AAEjD,wDAAwD;AAC3C,QAAA,mBAAmB,GAAG,qBAA8B,CAAA;AAGjE,qDAAqD;AACxC,QAAA,cAAc,GAAG,gBAAyB,CAAA;AACvD,8DAA8D;AACjD,QAAA,kBAAkB,GAAG,kBAA2B,CAAA;AAC7D,uEAAuE;AAC1D,QAAA,gBAAgB,GAAG,gBAAyB,CAAA;AAEzD,kDAAkD;AACrC,QAAA,WAAW,GAAG,aAAsB,CAAA;AAEjD,yDAAyD;AAC5C,QAAA,iBAAiB,GAAG,mBAA4B,CAAA;AAE7D,mCAAmC;AACtB,QAAA,cAAc,GAAG,gBAAyB,CAAA;AAEvD,gFAAgF;AACnE,QAAA,uBAAuB,GAAG,yBAAkC,CAAA;AAEzE,sFAAsF;AACzE,QAAA,6BAA6B,GAAG,+BAAwC,CAAA;AAErF,oDAAoD;AACvC,QAAA,mBAAmB,GAAG,qBAA8B,CAAA;AAEjE,uDAAuD;AAC1C,QAAA,mBAAmB,GAAG,mBAA4B,CAAA;AAE/D;;;;GAIG;AACU,QAAA,sBAAsB,GAAG,sBAA+B,CAAA;AACrE;;;;;;;GAOG;AACU,QAAA,iBAAiB,GAAG,iBAA0B,CAAA;AAE3D,+CAA+C;AAClC,QAAA,iBAAiB,GAAG,iBAA0B,CAAA;AAE3D,wBAAwB;AACX,QAAA,cAAc,GAAG,cAAuB,CAAA;AAErD,wGAAwG;AAC3F,QAAA,yBAAyB,GAAG,yBAAkC,CAAA;AAE3E,qGAAqG;AACxF,QAAA,eAAe,GAAG,eAAwB,CAAA;AAEvD,2CAA2C;AAC9B,QAAA,mBAAmB,GAAG,mBAA4B,CAAA;AAE/D,wCAAwC;AAC3B,QAAA,eAAe,GAAG,eAAwB,CAAA;AAEvD,gCAAgC;AACnB,QAAA,sBAAsB,GAAG,sBAA+B,CAAA;AAErE,0BAA0B;AACb,QAAA,cAAc,GAAG,cAAuB,CAAA;AAErD,qCAAqC;AACxB,QAAA,eAAe,GAAG,eAAwB,CAAA;AAEvD,yBAAyB;AACZ,QAAA,eAAe,GAAG,eAAwB,CAAA;AAEvD,+CAA+C;AAClC,QAAA,kBAAkB,GAAG,kBAA2B,CAAA;AAE7D;;;;;GAKG;AACU,QAAA,qBAAqB,GAAG,qBAA8B,CAAA;AAEnE,iDAAiD;AACpC,QAAA,YAAY,GAAG,cAAuB,CAAA;AAEnD,sEAAsE;AAEtE,4DAA4D;AAC/C,QAAA,cAAc,GAAG,cAAuB,CAAA;AAErD,4CAA4C;AAC/B,QAAA,mBAAmB,GAAG,mBAA4B,CAAA;AAE/D,kDAAkD;AACrC,QAAA,oBAAoB,GAAG,oBAA6B,CAAA;AAEjE,+CAA+C;AAClC,QAAA,4BAA4B,GAAG,4BAAqC,CAAA;AAEjF,kDAAkD;AACrC,QAAA,qBAAqB,GAAG,qBAA8B,CAAA;AAEnE,2CAA2C;AAC9B,QAAA,mBAAmB,GAAG,mBAA4B,CAAA;AAE/D,4DAA4D;AAC/C,QAAA,iBAAiB,GAAG,iBAA0B,CAAA;AAE3D,4DAA4D;AAC/C,QAAA,yBAAyB,GAAG,yBAAkC,CAAA;AAE3E,yDAAyD;AAC5C,QAAA,uBAAuB,GAAG,uBAAgC,CAAA;AAEvE;;;;;;GAMG;AACU,QAAA,kBAAkB,GAAG,kBAA2B,CAAA;AAE7D,uEAAuE;AAEvE;;;GAGG;AACU,QAAA,2BAA2B,GAAG,2BAAoC,CAAA;AAE/E,uEAAuE;AAEvE;;;GAGG;AACU,QAAA,2BAA2B,GAAG,2BAAoC,CAAA;AAuD/E,wEAAwE;AAExE;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAa,YAAa,SAAQ,KAAK;IACrC,+DAA+D;IACtD,IAAI,CAAkB;IAE/B,wDAAwD;IAC/C,UAAU,CAAQ;IAE3B,mDAAmD;IAC1C,OAAO,CAA0B;IAE1C,YACE,IAAsB,EACtB,UAAkB,EAClB,OAAe,EACf,OAAiC;QAEjC,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,cAAc,CAAA;QAC1B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;QAChB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAA;QAC5B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;IACxB,CAAC;CACF;AAtBD,oCAsBC;AAED;;GAEG;AACH,SAAgB,cAAc,CAAC,GAAY;IACzC,OAAO,CACL,GAAG,YAAY,KAAK;QACpB,CAAC,GAAG,CAAC,IAAI,KAAK,cAAc;YAC1B,GAAG,CAAC,WAAW,CAAC,IAAI,KAAK,cAAc;YACvC,CAAC,iBAAiB,IAAI,GAAG,IAAK,GAAW,CAAC,eAAe,KAAK,IAAI,CAAC;YACnE,CAAC,MAAM,IAAI,GAAG,IAAI,YAAY,IAAI,GAAG,CAAC,CAAC,CAC1C,CAAC;AACJ,CAAC"}
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":";AAAA;;;;;;;;GAQG;;;AA6PH,wCAQC;AAnQD,wEAAwE;AAExE,0BAA0B;AACb,QAAA,WAAW,GAAG,aAAsB,CAAA;AAEjD,wDAAwD;AAC3C,QAAA,mBAAmB,GAAG,qBAA8B,CAAA;AAGjE,qDAAqD;AACxC,QAAA,cAAc,GAAG,gBAAyB,CAAA;AACvD,8DAA8D;AACjD,QAAA,kBAAkB,GAAG,kBAA2B,CAAA;AAC7D,uEAAuE;AAC1D,QAAA,gBAAgB,GAAG,gBAAyB,CAAA;AAEzD,kDAAkD;AACrC,QAAA,WAAW,GAAG,aAAsB,CAAA;AAEjD,yDAAyD;AAC5C,QAAA,iBAAiB,GAAG,mBAA4B,CAAA;AAE7D,mCAAmC;AACtB,QAAA,cAAc,GAAG,gBAAyB,CAAA;AAEvD,gFAAgF;AACnE,QAAA,uBAAuB,GAAG,yBAAkC,CAAA;AAEzE,sFAAsF;AACzE,QAAA,6BAA6B,GAAG,+BAAwC,CAAA;AAErF,oDAAoD;AACvC,QAAA,mBAAmB,GAAG,qBAA8B,CAAA;AAEjE,uDAAuD;AAC1C,QAAA,mBAAmB,GAAG,mBAA4B,CAAA;AAE/D;;;;GAIG;AACU,QAAA,sBAAsB,GAAG,sBAA+B,CAAA;AACrE;;;;;;;GAOG;AACU,QAAA,iBAAiB,GAAG,iBAA0B,CAAA;AAE3D,+CAA+C;AAClC,QAAA,iBAAiB,GAAG,iBAA0B,CAAA;AAE3D,wBAAwB;AACX,QAAA,cAAc,GAAG,cAAuB,CAAA;AAErD,wGAAwG;AAC3F,QAAA,yBAAyB,GAAG,yBAAkC,CAAA;AAE3E,qGAAqG;AACxF,QAAA,eAAe,GAAG,eAAwB,CAAA;AAEvD,2CAA2C;AAC9B,QAAA,mBAAmB,GAAG,mBAA4B,CAAA;AAE/D,wCAAwC;AAC3B,QAAA,eAAe,GAAG,eAAwB,CAAA;AAEvD,gCAAgC;AACnB,QAAA,sBAAsB,GAAG,sBAA+B,CAAA;AAErE,0BAA0B;AACb,QAAA,cAAc,GAAG,cAAuB,CAAA;AAErD,qCAAqC;AACxB,QAAA,eAAe,GAAG,eAAwB,CAAA;AAEvD,yBAAyB;AACZ,QAAA,eAAe,GAAG,eAAwB,CAAA;AAEvD,+CAA+C;AAClC,QAAA,kBAAkB,GAAG,kBAA2B,CAAA;AAE7D;;;;;GAKG;AACU,QAAA,qBAAqB,GAAG,qBAA8B,CAAA;AAEnE,iDAAiD;AACpC,QAAA,YAAY,GAAG,cAAuB,CAAA;AAEnD,4DAA4D;AAE5D,4DAA4D;AAC/C,QAAA,cAAc,GAAG,cAAuB,CAAA;AAErD,4CAA4C;AAC/B,QAAA,mBAAmB,GAAG,mBAA4B,CAAA;AAE/D,kDAAkD;AACrC,QAAA,oBAAoB,GAAG,oBAA6B,CAAA;AAEjE,+CAA+C;AAClC,QAAA,4BAA4B,GAAG,4BAAqC,CAAA;AAEjF,kDAAkD;AACrC,QAAA,qBAAqB,GAAG,qBAA8B,CAAA;AAEnE,2CAA2C;AAC9B,QAAA,mBAAmB,GAAG,mBAA4B,CAAA;AAE/D,4DAA4D;AAC/C,QAAA,iBAAiB,GAAG,iBAA0B,CAAA;AAE3D,4DAA4D;AAC/C,QAAA,yBAAyB,GAAG,yBAAkC,CAAA;AAE3E,yDAAyD;AAC5C,QAAA,uBAAuB,GAAG,uBAAgC,CAAA;AAEvE;;;;;;GAMG;AACU,QAAA,kBAAkB,GAAG,kBAA2B,CAAA;AAE7D,6DAA6D;AAE7D;;;GAGG;AACU,QAAA,2BAA2B,GAAG,2BAAoC,CAAA;AAE/E,6DAA6D;AAE7D;;;GAGG;AACU,QAAA,2BAA2B,GAAG,2BAAoC,CAAA;AAuD/E,wEAAwE;AAExE;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAa,YAAa,SAAQ,KAAK;IACrC,+DAA+D;IACtD,IAAI,CAAkB;IAE/B,wDAAwD;IAC/C,UAAU,CAAQ;IAE3B,mDAAmD;IAC1C,OAAO,CAA0B;IAE1C,YACE,IAAsB,EACtB,UAAkB,EAClB,OAAe,EACf,OAAiC;QAEjC,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,cAAc,CAAA;QAC1B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;QAChB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAA;QAC5B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;IACxB,CAAC;CACF;AAtBD,oCAsBC;AAED;;GAEG;AACH,SAAgB,cAAc,CAAC,GAAY;IACzC,OAAO,CACL,GAAG,YAAY,KAAK;QACpB,CAAC,GAAG,CAAC,IAAI,KAAK,cAAc;YAC1B,GAAG,CAAC,WAAW,CAAC,IAAI,KAAK,cAAc;YACvC,CAAC,iBAAiB,IAAI,GAAG,IAAK,GAAW,CAAC,eAAe,KAAK,IAAI,CAAC;YACnE,CAAC,MAAM,IAAI,GAAG,IAAI,YAAY,IAAI,GAAG,CAAC,CAAC,CAC1C,CAAC;AACJ,CAAC"}

package/dist/finops.d.ts

@@ -3,13 +3,25 @@
  *
  * These types correspond to the `execution_traces` table and the
  * `finops_attribution_4d` materialized view defined in
- * LLD 01-data-architecture §3.1.
+ * the data-architecture schema.
  *
  * HLD §3.6 (FinOps Ledger), §3.19 (4D Attribution)
  *
  * @module
  */
 import type { AnomalyType, EnforcementAction, RoutingTier, TokenUtility } from './enums.js';
+/**
+ * The daily spend cap, in USD, of a workspace that has never saved one. A
+ * hard cap: the proxy refuses a request that would take the day's spend over
+ * it (`429 BUDGET_EXCEEDED`). An owner or admin changes it on Settings ›
+ * Billing › Budget Limits or with `PUT /api/v1/budget`.
+ */
+export declare const DEFAULT_DAILY_BUDGET_USD = 100;
+/**
+ * The monthly cap, in USD, of a workspace that has never saved one. Alerts
+ * only: reaching it raises budget alerts and refuses nothing.
+ */
+export declare const DEFAULT_MONTHLY_BUDGET_USD = 500;
 /**
  * A single row in the `execution_traces` table — the append-only FinOps ledger.
  *
@@ -180,6 +192,37 @@ export interface TraceStep {
     latencyMs: number | null;
     timestamp: string;
 }
+/**
+ * One upstream call the LLM proxy made for a request: a retry of the routed
+ * model or a fallback target. `outcome` is `ok`, `http_<status>`, `timeout`,
+ * `connect_error`, `transport_error`, or `skipped` for a fallback target that
+ * was not called; `stopped` says why no further call was made (`max_attempts`,
+ * `time_budget`, `retry_after_exceeds_budget`, `provider_declined`,
+ * `quota_exhausted`) or, for a skipped target, why it was skipped
+ * (`same_target`, `wire_mismatch`, `model_not_allowed`, `budget` — priced
+ * for its model, the request would not fit a spend budget — `no_credential`,
+ * `unknown_provider`, `time_budget`).
+ */
+export interface UpstreamAttempt {
+    model: string;
+    provider: string;
+    outcome: string;
+    status?: number;
+    latencyMs: number;
+    /** The wait before the next call. */
+    backoffMs?: number;
+    /** True when that wait was the provider's own `retry-after`. */
+    serverDelay?: boolean;
+    stopped?: string;
+}
+/** The fallback target that served a request after the routed model's retries ran out. */
+export interface UpstreamFallback {
+    fromModel: string;
+    toModel: string;
+    toProvider: string;
+    /** True when the routed model's prompt cache was warm and the fallback is another model family. */
+    cacheAffinityBroken?: boolean;
+}
 /** Full detail of a single trace. */
 export interface TraceDetail {
     traceId: string;
@@ -211,7 +254,7 @@ export interface TraceDetail {
     correctivePromptCard: unknown | null;
     reasoningTokens?: number | null;
     /**
-     * Provider-reported prompt-cache token counts (TD-347; migration 165) —
+     * Provider-reported prompt-cache token counts (migration 165) —
      * Anthropic's `usage.cache_read_input_tokens` / `cache_creation_input_tokens`
      * today. Null when the provider/proxy build doesn't report them; distinct
      * from `cacheHit`/`cacheSavingsUsd` (the proxy's own semantic response
@@ -240,6 +283,13 @@ export interface TraceDetail {
      * it back is what the shadow-routing savings report aggregates.
      */
     routingShadowModel?: string | null;
+    /**
+     * Every upstream call the proxy made when it retried or ran fallbacks, in
+     * order (migration 216). Null for the ordinary request that took one call.
+     */
+    upstreamAttempts?: UpstreamAttempt[] | null;
+    /** The fallback target that served the request, or null when none did (migration 216). */
+    upstreamFallback?: UpstreamFallback | null;
     /** True when the request was served under a valid break-glass token, global or scoped (migration 170). */
     breakGlass?: boolean;
     /** The approval this trace ran under; what it skipped is that approval's `policyId`. */