@intutic/shared-types 2.2.0 → 2.4.0

package/dist/finops.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"finops.d.ts","sourceRoot":"","sources":["../src/finops.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EACV,WAAW,EACX,iBAAiB,EACjB,WAAW,EACX,YAAY,EACb,MAAM,YAAY,CAAA;AAInB;;;;;;;;GAQG;AACH,MAAM,WAAW,UAAU;IACzB,+CAA+C;IAC/C,OAAO,EAAE,MAAM,CAAA;IAEf,iEAAiE;IACjE,SAAS,EAAE,MAAM,CAAA;IAEjB,2CAA2C;IAC3C,SAAS,EAAE,MAAM,CAAA;IAEjB,oCAAoC;IACpC,SAAS,EAAE,MAAM,CAAA;IAEjB,qDAAqD;IACrD,gBAAgB,EAAE,MAAM,CAAA;IAGxB,yCAAyC;IACzC,cAAc,EAAE,MAAM,CAAA;IAEtB,yDAAyD;IACzD,iBAAiB,EAAE,MAAM,CAAA;IAEzB,kCAAkC;IAClC,WAAW,EAAE,WAAW,CAAA;IAExB,mDAAmD;IACnD,eAAe,EAAE,MAAM,CAAA;IAGvB,2CAA2C;IAC3C,cAAc,EAAE,MAAM,CAAA;IAEtB;;;;;OAKG;IACH,qBAAqB,EAAE,MAAM,CAAA;IAE7B;;;;;OAKG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAE7B,+BAA+B;IAC/B,YAAY,EAAE,MAAM,CAAA;IAGpB,wCAAwC;IACxC,UAAU,EAAE,MAAM,CAAA;IAElB,oDAAoD;IACpD,aAAa,EAAE,MAAM,CAAA;IAErB,kEAAkE;IAClE,UAAU,EAAE,MAAM,CAAA;IAGlB,oDAAoD;IACpD,YAAY,EAAE,YAAY,CAAA;IAE1B,0CAA0C;IAC1C,iBAAiB,EAAE,MAAM,CAAA;IAGzB,yDAAyD;IACzD,eAAe,EAAE,MAAM,CAAA;IAEvB,+CAA+C;IAC/C,iBAAiB,EAAE,iBAAiB,CAAA;IAGpC,qCAAqC;IACrC,eAAe,EAAE,WAAW,GAAG,IAAI,CAAA;IAEnC,oDAAoD;IACpD,sBAAsB,EAAE,MAAM,GAAG,IAAI,CAAA;IAErC,4CAA4C;IAC5C,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;IAGhD,yDAAyD;IACzD,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;IAG9C,8CAA8C;IAC9C,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IAEpB,8CAA8C;IAC9C,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAE3B,0CAA0C;IAC1C,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;IAG1C,+CAA+C;IAC/C,QAAQ,EAAE,OAAO,CAAA;IAEjB,oCAAoC;IACpC,eAAe,EAAE,MAAM,CAAA;IAGvB,uDAAuD;IACvD,oBAAoB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;IAEpD,yDAAyD;IACzD,oBAAoB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;CACrD;AAID;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,qCAAqC;IACrC,OAAO,EAAE,MAAM,CAAA;IAEf,4CAA4C;IAC5C,UAAU,EAAE,MAAM,CAAA;IAElB,8CAA8C;IAC9C,OAAO,EAAE,MAAM,CAAA;IAEf,2CAA2C;IAC3C,YAAY,EAAE,MAAM,CAAA;CACrB;AAID;;;;;;;GAOG;AACH,MAAM,WAAW,aAAa;IAC5B,8BAA8B;IAC9B,QAAQ,EAAE,MAAM,CAAA;IAEhB,+CAA+C;IAC/C,WAAW,EAAE,MAAM,CAAA;IAEnB,uCAAuC;IACvC,KAAK,CAAC,EAAE,MAAM,CAAA;IAEd,uCAAuC;IACvC,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB;AAID,gDAAgD;AAChD,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,MAAM,CAAA;IACjB,cAAc,EAAE,MAAM,CAAA;IACtB,iBAAiB,EAAE,MAAM,CAAA;IACzB,iBAAiB,EAAE,iBAAiB,GAAG,MAAM,CAAA;IAC7C,eAAe,EAAE,MAAM,CAAA;IACvB,aAAa,EAAE,MAAM,CAAA;IACrB,eAAe,EAAE,WAAW,GAAG,MAAM,GAAG,IAAI,CAAA;IAC5C,0GAA0G;IAC1G,UAAU,CAAC,EAAE,OAAO,CAAA;IACpB,8GAA8G;IAC9G,mBAAmB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CACpC;AAED,2CAA2C;AAC3C,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,YAAY,EAAE,CAAA;IACtB,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;CACf;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,CAAA;IAClB,WAAW,EAAE,MAAM,CAAA;IACnB,QAAQ,EAAE,MAAM,CAAA;IAChB,mEAAmE;IACnE,WAAW,EAAE,MAAM,CAAA;IACnB,UAAU,EAAE,MAAM,CAAA;IAClB,MAAM,EAAE,MAAM,CAAA;IACd,2EAA2E;IAC3E,QAAQ,EAAE,OAAO,CAAA;CAClB;AAED,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,MAAM,CAAA;IACb,QAAQ,EAAE,MAAM,CAAA;IAChB,aAAa,EAAE,OAAO,CAAA;IACtB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,EAAE,MAAM,CAAA;IAClB,MAAM,EAAE,MAAM,CAAA;IACd,YAAY,EAAE,OAAO,CAAA;IACrB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,qCAAqC;AACrC,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,gBAAgB,EAAE,MAAM,CAAA;IACxB,cAAc,EAAE,MAAM,CAAA;IACtB,iBAAiB,EAAE,MAAM,CAAA;IACzB,WAAW,EAAE,WAAW,GAAG,MAAM,CAAA;IACjC,eAAe,EAAE,MAAM,CAAA;IACvB,cAAc,EAAE,MAAM,CAAA;IACtB,qBAAqB,EAAE,MAAM,CAAA;IAC7B,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAC7B,YAAY,EAAE,MAAM,CAAA;IACpB,UAAU,EAAE,MAAM,CAAA;IAClB,aAAa,EAAE,MAAM,CAAA;IACrB,UAAU,EAAE,MAAM,CAAA;IAClB,yFAAyF;IACzF,wBAAwB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACxC,YAAY,EAAE,YAAY,GAAG,MAAM,CAAA;IACnC,iBAAiB,EAAE,MAAM,CAAA;IACzB,eAAe,EAAE,MAAM,CAAA;IACvB,iBAAiB,EAAE,iBAAiB,GAAG,MAAM,CAAA;IAC7C,eAAe,EAAE,WAAW,GAAG,MAAM,GAAG,IAAI,CAAA;IAC5C,sBAAsB,EAAE,MAAM,GAAG,IAAI,CAAA;IACrC,gBAAgB,EAAE,OAAO,GAAG,IAAI,CAAA;IAChC,oBAAoB,EAAE,OAAO,GAAG,IAAI,CAAA;IACpC,oBAAoB,EAAE,OAAO,GAAG,IAAI,CAAA;IACpC,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC/B;;;;;;OAMG;IACH,oBAAoB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACpC,wBAAwB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACxC,eAAe,CAAC,EAAE,OAAO,GAAG,IAAI,CAAA;IAChC;;;;;OAKG;IACH,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACjC;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B;;;;;OAKG;IACH,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAClC,0GAA0G;IAC1G,UAAU,CAAC,EAAE,OAAO,CAAA;IACpB,wFAAwF;IACxF,mBAAmB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACnC;;;OAGG;IACH,cAAc,CAAC,EAAE,mBAAmB,EAAE,GAAG,IAAI,CAAA;IAC7C,KAAK,CAAC,EAAE,SAAS,EAAE,CAAA;IACnB;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,mBAAmB,EAAE,CAAA;CACjC;AAED;;;GAGG;AACH,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAA;IACZ,EAAE,EAAE,OAAO,GAAG,MAAM,GAAG,QAAQ,GAAG,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,CAAA;IACnF,MAAM,EAAE,MAAM,CAAA;IACd,WAAW,EAAE,MAAM,GAAG,KAAK,GAAG,SAAS,GAAG,QAAQ,CAAA;IAClD,IAAI,CAAC,EAAE,MAAM,EAAE,CAAA;IACf,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED,+BAA+B;AAC/B,MAAM,WAAW,YAAY;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB"}
+{"version":3,"file":"finops.d.ts","sourceRoot":"","sources":["../src/finops.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EACV,WAAW,EACX,iBAAiB,EACjB,WAAW,EACX,YAAY,EACb,MAAM,YAAY,CAAA;AAInB;;;;;GAKG;AACH,eAAO,MAAM,wBAAwB,MAAM,CAAA;AAE3C;;;GAGG;AACH,eAAO,MAAM,0BAA0B,MAAM,CAAA;AAI7C;;;;;;;;GAQG;AACH,MAAM,WAAW,UAAU;IACzB,+CAA+C;IAC/C,OAAO,EAAE,MAAM,CAAA;IAEf,iEAAiE;IACjE,SAAS,EAAE,MAAM,CAAA;IAEjB,2CAA2C;IAC3C,SAAS,EAAE,MAAM,CAAA;IAEjB,oCAAoC;IACpC,SAAS,EAAE,MAAM,CAAA;IAEjB,qDAAqD;IACrD,gBAAgB,EAAE,MAAM,CAAA;IAGxB,yCAAyC;IACzC,cAAc,EAAE,MAAM,CAAA;IAEtB,yDAAyD;IACzD,iBAAiB,EAAE,MAAM,CAAA;IAEzB,kCAAkC;IAClC,WAAW,EAAE,WAAW,CAAA;IAExB,mDAAmD;IACnD,eAAe,EAAE,MAAM,CAAA;IAGvB,2CAA2C;IAC3C,cAAc,EAAE,MAAM,CAAA;IAEtB;;;;;OAKG;IACH,qBAAqB,EAAE,MAAM,CAAA;IAE7B;;;;;OAKG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAE7B,+BAA+B;IAC/B,YAAY,EAAE,MAAM,CAAA;IAGpB,wCAAwC;IACxC,UAAU,EAAE,MAAM,CAAA;IAElB,oDAAoD;IACpD,aAAa,EAAE,MAAM,CAAA;IAErB,kEAAkE;IAClE,UAAU,EAAE,MAAM,CAAA;IAGlB,oDAAoD;IACpD,YAAY,EAAE,YAAY,CAAA;IAE1B,0CAA0C;IAC1C,iBAAiB,EAAE,MAAM,CAAA;IAGzB,yDAAyD;IACzD,eAAe,EAAE,MAAM,CAAA;IAEvB,+CAA+C;IAC/C,iBAAiB,EAAE,iBAAiB,CAAA;IAGpC,qCAAqC;IACrC,eAAe,EAAE,WAAW,GAAG,IAAI,CAAA;IAEnC,oDAAoD;IACpD,sBAAsB,EAAE,MAAM,GAAG,IAAI,CAAA;IAErC,4CAA4C;IAC5C,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;IAGhD,yDAAyD;IACzD,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;IAG9C,8CAA8C;IAC9C,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IAEpB,8CAA8C;IAC9C,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAE3B,0CAA0C;IAC1C,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;IAG1C,+CAA+C;IAC/C,QAAQ,EAAE,OAAO,CAAA;IAEjB,oCAAoC;IACpC,eAAe,EAAE,MAAM,CAAA;IAGvB,uDAAuD;IACvD,oBAAoB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;IAEpD,yDAAyD;IACzD,oBAAoB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;CACrD;AAID;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,qCAAqC;IACrC,OAAO,EAAE,MAAM,CAAA;IAEf,4CAA4C;IAC5C,UAAU,EAAE,MAAM,CAAA;IAElB,8CAA8C;IAC9C,OAAO,EAAE,MAAM,CAAA;IAEf,2CAA2C;IAC3C,YAAY,EAAE,MAAM,CAAA;CACrB;AAID;;;;;;;GAOG;AACH,MAAM,WAAW,aAAa;IAC5B,8BAA8B;IAC9B,QAAQ,EAAE,MAAM,CAAA;IAEhB,+CAA+C;IAC/C,WAAW,EAAE,MAAM,CAAA;IAEnB,uCAAuC;IACvC,KAAK,CAAC,EAAE,MAAM,CAAA;IAEd,uCAAuC;IACvC,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB;AAID,gDAAgD;AAChD,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,MAAM,CAAA;IACjB,cAAc,EAAE,MAAM,CAAA;IACtB,iBAAiB,EAAE,MAAM,CAAA;IACzB,iBAAiB,EAAE,iBAAiB,GAAG,MAAM,CAAA;IAC7C,eAAe,EAAE,MAAM,CAAA;IACvB,aAAa,EAAE,MAAM,CAAA;IACrB,eAAe,EAAE,WAAW,GAAG,MAAM,GAAG,IAAI,CAAA;IAC5C,0GAA0G;IAC1G,UAAU,CAAC,EAAE,OAAO,CAAA;IACpB,8GAA8G;IAC9G,mBAAmB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CACpC;AAED,2CAA2C;AAC3C,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,YAAY,EAAE,CAAA;IACtB,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;CACf;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,CAAA;IAClB,WAAW,EAAE,MAAM,CAAA;IACnB,QAAQ,EAAE,MAAM,CAAA;IAChB,mEAAmE;IACnE,WAAW,EAAE,MAAM,CAAA;IACnB,UAAU,EAAE,MAAM,CAAA;IAClB,MAAM,EAAE,MAAM,CAAA;IACd,2EAA2E;IAC3E,QAAQ,EAAE,OAAO,CAAA;CAClB;AAED,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,MAAM,CAAA;IACb,QAAQ,EAAE,MAAM,CAAA;IAChB,aAAa,EAAE,OAAO,CAAA;IACtB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,EAAE,MAAM,CAAA;IAClB,MAAM,EAAE,MAAM,CAAA;IACd,YAAY,EAAE,OAAO,CAAA;IACrB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,SAAS,EAAE,MAAM,CAAA;CAClB;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAA;IACb,QAAQ,EAAE,MAAM,CAAA;IAChB,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,MAAM,CAAA;IACjB,qCAAqC;IACrC,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,gEAAgE;IAChE,WAAW,CAAC,EAAE,OAAO,CAAA;IACrB,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAED,0FAA0F;AAC1F,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,EAAE,MAAM,CAAA;IAClB,mGAAmG;IACnG,mBAAmB,CAAC,EAAE,OAAO,CAAA;CAC9B;AAED,qCAAqC;AACrC,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,gBAAgB,EAAE,MAAM,CAAA;IACxB,cAAc,EAAE,MAAM,CAAA;IACtB,iBAAiB,EAAE,MAAM,CAAA;IACzB,WAAW,EAAE,WAAW,GAAG,MAAM,CAAA;IACjC,eAAe,EAAE,MAAM,CAAA;IACvB,cAAc,EAAE,MAAM,CAAA;IACtB,qBAAqB,EAAE,MAAM,CAAA;IAC7B,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAC7B,YAAY,EAAE,MAAM,CAAA;IACpB,UAAU,EAAE,MAAM,CAAA;IAClB,aAAa,EAAE,MAAM,CAAA;IACrB,UAAU,EAAE,MAAM,CAAA;IAClB,yFAAyF;IACzF,wBAAwB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACxC,YAAY,EAAE,YAAY,GAAG,MAAM,CAAA;IACnC,iBAAiB,EAAE,MAAM,CAAA;IACzB,eAAe,EAAE,MAAM,CAAA;IACvB,iBAAiB,EAAE,iBAAiB,GAAG,MAAM,CAAA;IAC7C,eAAe,EAAE,WAAW,GAAG,MAAM,GAAG,IAAI,CAAA;IAC5C,sBAAsB,EAAE,MAAM,GAAG,IAAI,CAAA;IACrC,gBAAgB,EAAE,OAAO,GAAG,IAAI,CAAA;IAChC,oBAAoB,EAAE,OAAO,GAAG,IAAI,CAAA;IACpC,oBAAoB,EAAE,OAAO,GAAG,IAAI,CAAA;IACpC,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC/B;;;;;;OAMG;IACH,oBAAoB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACpC,wBAAwB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACxC,eAAe,CAAC,EAAE,OAAO,GAAG,IAAI,CAAA;IAChC;;;;;OAKG;IACH,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACjC;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B;;;;;OAKG;IACH,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAClC;;;OAGG;IACH,gBAAgB,CAAC,EAAE,eAAe,EAAE,GAAG,IAAI,CAAA;IAC3C,0FAA0F;IAC1F,gBAAgB,CAAC,EAAE,gBAAgB,GAAG,IAAI,CAAA;IAC1C,0GAA0G;IAC1G,UAAU,CAAC,EAAE,OAAO,CAAA;IACpB,wFAAwF;IACxF,mBAAmB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACnC;;;OAGG;IACH,cAAc,CAAC,EAAE,mBAAmB,EAAE,GAAG,IAAI,CAAA;IAC7C,KAAK,CAAC,EAAE,SAAS,EAAE,CAAA;IACnB;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,mBAAmB,EAAE,CAAA;CACjC;AAED;;;GAGG;AACH,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAA;IACZ,EAAE,EAAE,OAAO,GAAG,MAAM,GAAG,QAAQ,GAAG,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,CAAA;IACnF,MAAM,EAAE,MAAM,CAAA;IACd,WAAW,EAAE,MAAM,GAAG,KAAK,GAAG,SAAS,GAAG,QAAQ,CAAA;IAClD,IAAI,CAAC,EAAE,MAAM,EAAE,CAAA;IACf,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED,+BAA+B;AAC/B,MAAM,WAAW,YAAY;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB"}

package/dist/finops.js

@@ -4,11 +4,25 @@
  *
  * These types correspond to the `execution_traces` table and the
  * `finops_attribution_4d` materialized view defined in
- * LLD 01-data-architecture §3.1.
+ * the data-architecture schema.
  *
  * HLD §3.6 (FinOps Ledger), §3.19 (4D Attribution)
  *
  * @module
  */
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.DEFAULT_MONTHLY_BUDGET_USD = exports.DEFAULT_DAILY_BUDGET_USD = void 0;
+// ─── Workspace spend caps ────────────────────────────────────────────
+/**
+ * The daily spend cap, in USD, of a workspace that has never saved one. A
+ * hard cap: the proxy refuses a request that would take the day's spend over
+ * it (`429 BUDGET_EXCEEDED`). An owner or admin changes it on Settings ›
+ * Billing › Budget Limits or with `PUT /api/v1/budget`.
+ */
+exports.DEFAULT_DAILY_BUDGET_USD = 100;
+/**
+ * The monthly cap, in USD, of a workspace that has never saved one. Alerts
+ * only: reaching it raises budget alerts and refuses nothing.
+ */
+exports.DEFAULT_MONTHLY_BUDGET_USD = 500;
 //# sourceMappingURL=finops.js.map

package/dist/finops.js.map

@@ -1 +1 @@
-{"version":3,"file":"finops.js","sourceRoot":"","sources":["../src/finops.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;GAUG"}
+{"version":3,"file":"finops.js","sourceRoot":"","sources":["../src/finops.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;GAUG;;;AASH,wEAAwE;AAExE;;;;;GAKG;AACU,QAAA,wBAAwB,GAAG,GAAG,CAAA;AAE3C;;;GAGG;AACU,QAAA,0BAA0B,GAAG,GAAG,CAAA"}

package/dist/gateDecisions.d.ts

@@ -0,0 +1,18 @@
+/**
+ * The verdicts a gate decision records (the SIEM `gate_decisions` source),
+ * and what each means. Every one is a gate's verdict on a tool call except
+ * `TAMPER`, the verdict on the gate's own files.
+ *
+ * @module
+ */
+export declare const GATE_DECISION_VERDICTS: {
+    readonly ALLOW: "the call ran";
+    readonly BLOCK: "the call was refused";
+    readonly FLAG: "the call ran, flagged by an advisory rule";
+    readonly WOULD_BLOCK: "the call ran; a shadow rule would have refused it";
+    readonly HOLD: "the call waits for a reviewer";
+    readonly BYPASS_APPROVED: "the call ran on an approved hold";
+    readonly TAMPER: "a governance file (a gate, a hook registration, the policy snapshot, a VS Code hook setting) changed outside the sync daemon, which restored it";
+};
+export type GateDecisionVerdict = keyof typeof GATE_DECISION_VERDICTS;
+//# sourceMappingURL=gateDecisions.d.ts.map

package/dist/gateDecisions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gateDecisions.d.ts","sourceRoot":"","sources":["../src/gateDecisions.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,eAAO,MAAM,sBAAsB;;;;;;;;CAQzB,CAAA;AAEV,MAAM,MAAM,mBAAmB,GAAG,MAAM,OAAO,sBAAsB,CAAA"}

package/dist/gateDecisions.js

@@ -0,0 +1,20 @@
+"use strict";
+/**
+ * The verdicts a gate decision records (the SIEM `gate_decisions` source),
+ * and what each means. Every one is a gate's verdict on a tool call except
+ * `TAMPER`, the verdict on the gate's own files.
+ *
+ * @module
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GATE_DECISION_VERDICTS = void 0;
+exports.GATE_DECISION_VERDICTS = {
+    ALLOW: 'the call ran',
+    BLOCK: 'the call was refused',
+    FLAG: 'the call ran, flagged by an advisory rule',
+    WOULD_BLOCK: 'the call ran; a shadow rule would have refused it',
+    HOLD: 'the call waits for a reviewer',
+    BYPASS_APPROVED: 'the call ran on an approved hold',
+    TAMPER: 'a governance file (a gate, a hook registration, the policy snapshot, a VS Code hook setting) changed outside the sync daemon, which restored it',
+};
+//# sourceMappingURL=gateDecisions.js.map

package/dist/gateDecisions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gateDecisions.js","sourceRoot":"","sources":["../src/gateDecisions.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;;AAEU,QAAA,sBAAsB,GAAG;IACpC,KAAK,EAAE,cAAc;IACrB,KAAK,EAAE,sBAAsB;IAC7B,IAAI,EAAE,2CAA2C;IACjD,WAAW,EAAE,mDAAmD;IAChE,IAAI,EAAE,+BAA+B;IACrC,eAAe,EAAE,kCAAkC;IACnD,MAAM,EAAE,iJAAiJ;CACjJ,CAAA"}

package/dist/gateIdentity.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Which gate an event came from, for the one harness that installs two.
+ *
+ * A harness is one `HarnessType`: one integration that `intutic connect` sets
+ * up, and the unit the harness count counts. Its gate reports under the same
+ * id, in hook events (`harnessType`), agent reports, the AI inventory and the
+ * SIEM export. `antigravity` is the exception: the integration installs
+ * Google Antigravity's `PreToolUse` gate and Gemini CLI's `BeforeTool` gate,
+ * for two products a machine may have together or apart. Each reports under
+ * its own gate id, `antigravity` and `gemini-cli`, so the silent-gate check
+ * expects only the gate of the product that is there, and the inventory and
+ * SIEM say which product a call came through. The harness, its rules file and
+ * its count stay one.
+ *
+ * @module
+ */
+/** The gate id Gemini CLI's gate reports under. */
+export declare const GEMINI_CLI_GATE_ID = "gemini-cli";
+/** The gate ids a harness's gates report under: its own id, or two for `antigravity`. */
+export declare function gateIdentitiesOf(harness: string): readonly string[];
+/** The harness a gate id belongs to. */
+export declare function harnessOfGate(gateId: string): string;
+//# sourceMappingURL=gateIdentity.d.ts.map

package/dist/gateIdentity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gateIdentity.d.ts","sourceRoot":"","sources":["../src/gateIdentity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,mDAAmD;AACnD,eAAO,MAAM,kBAAkB,eAAe,CAAA;AAE9C,yFAAyF;AACzF,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,CAEnE;AAED,wCAAwC;AACxC,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAEpD"}

package/dist/gateIdentity.js

@@ -0,0 +1,32 @@
+"use strict";
+/**
+ * Which gate an event came from, for the one harness that installs two.
+ *
+ * A harness is one `HarnessType`: one integration that `intutic connect` sets
+ * up, and the unit the harness count counts. Its gate reports under the same
+ * id, in hook events (`harnessType`), agent reports, the AI inventory and the
+ * SIEM export. `antigravity` is the exception: the integration installs
+ * Google Antigravity's `PreToolUse` gate and Gemini CLI's `BeforeTool` gate,
+ * for two products a machine may have together or apart. Each reports under
+ * its own gate id, `antigravity` and `gemini-cli`, so the silent-gate check
+ * expects only the gate of the product that is there, and the inventory and
+ * SIEM say which product a call came through. The harness, its rules file and
+ * its count stay one.
+ *
+ * @module
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GEMINI_CLI_GATE_ID = void 0;
+exports.gateIdentitiesOf = gateIdentitiesOf;
+exports.harnessOfGate = harnessOfGate;
+/** The gate id Gemini CLI's gate reports under. */
+exports.GEMINI_CLI_GATE_ID = 'gemini-cli';
+/** The gate ids a harness's gates report under: its own id, or two for `antigravity`. */
+function gateIdentitiesOf(harness) {
+    return harness === 'antigravity' ? ['antigravity', exports.GEMINI_CLI_GATE_ID] : [harness];
+}
+/** The harness a gate id belongs to. */
+function harnessOfGate(gateId) {
+    return gateId === exports.GEMINI_CLI_GATE_ID ? 'antigravity' : gateId;
+}
+//# sourceMappingURL=gateIdentity.js.map

package/dist/gateIdentity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gateIdentity.js","sourceRoot":"","sources":["../src/gateIdentity.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;GAeG;;;AAMH,4CAEC;AAGD,sCAEC;AAXD,mDAAmD;AACtC,QAAA,kBAAkB,GAAG,YAAY,CAAA;AAE9C,yFAAyF;AACzF,SAAgB,gBAAgB,CAAC,OAAe;IAC9C,OAAO,OAAO,KAAK,aAAa,CAAC,CAAC,CAAC,CAAC,aAAa,EAAE,0BAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAA;AACpF,CAAC;AAED,wCAAwC;AACxC,SAAgB,aAAa,CAAC,MAAc;IAC1C,OAAO,MAAM,KAAK,0BAAkB,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAA;AAC/D,CAAC"}

package/dist/gateKind.d.ts

@@ -0,0 +1,172 @@
+/**
+ * gateKind.ts — classifies each harness by HOW its tool calls get governed:
+ * for the sync daemon's agent report (`agentReporter.ts`'s `guardrails`
+ * facet) and AI inventory, and for the control plane's silent-gate check,
+ * which expects a gate only from a harness that has one of its own.
+ *
+ * # Why this exists
+ *
+ * `collectAgentReport` used to report `hook_gate: true` unconditionally for
+ * every harness, with the comment "the daemon writes the hook gate for every
+ * harness it supports." That was already false for `langgraph` — which has
+ * no on-disk hook, only the SDK-side `intutic_clawde.gate` — and for `aider`,
+ * whose only NO_GATE-registered mechanism is a post-edit, /run-blind
+ * pre-commit hook (see `aiderConfigMerger.ts`'s NO_GATE row in
+ * `__tests__/harness/gateRegistry.ts`). Wave 1 adds eight more SDK-gated
+ * harnesses, which would have made the lie eight times larger without this
+ * fix.
+ *
+ * # What this does NOT do
+ *
+ * This does not verify that a user actually pip-installed `intutic-clawde`
+ * and wired `guard_tools`/`IntuticMiddleware`/etc. into their process — the
+ * daemon cannot observe another process's imports, the same way it cannot
+ * observe whether a written hook file was left executable. It only reports
+ * which MECHANISM this harness's governance model uses (a file the daemon
+ * itself writes and can verify existence of, vs. an SDK the harness's own
+ * process must import), matching the trust level `hook_gate: true` already
+ * carried for file-based harnesses before this fix.
+ *
+ * # Keeping this in sync with the gate registry
+ *
+ * `services/sync-daemon/__tests__/harness/gateRegistry.ts` (the GATES/NO_GATE
+ * completeness registry exercised by `generatedGateBehaviour.test.ts`) is the
+ * authoritative decision per harness, but it is a test-only module (it
+ * dynamically imports every writer's compiled `.js` from a temp build dir)
+ * and must not be imported from daemon runtime code. `services/sync-daemon/__tests__/harness/gateKind.test.ts`
+ * cross-checks the two lists so this file cannot silently drift from that
+ * registry's own NO_GATE rows: `file: null` harnesses split between 'sdk'
+ * (LangGraph + the Python frameworks — the gate ships in intutic-clawde),
+ * 'delegated' (xirp — the gate is whichever wrapped harness's own gate is
+ * running), and 'bridge' (trueforge-server — the gate runs in a separate
+ * Intutic-operated service, not in any process this repo's writers touch),
+ * and 'none' (roo-code, claude-desktop — no hook system); the one non-null
+ * row (aiderConfigMerger.ts, "no ... exists") is 'none' too.
+ *
+ * @module
+ */
+import { type HarnessType as HarnessTypeT } from './enums.js';
+/**
+ * `'hook'`      — the daemon writes an on-disk hook/config file this harness
+ *                 reads before running a tool call (the 19-harness majority).
+ * `'sdk'`       — the blocking gate ships in `intutic-clawde`, imported into
+ *                 the harness's own Python process; no file for the daemon
+ *                 to write or verify (LangGraph + the eight Wave/Wave-2
+ *                 frameworks).
+ * `'none'`      — no tool-call gate exists for this harness (aider: its only
+ *                 native hook is post-edit and /run-blind; Roo Code and
+ *                 Claude Desktop: no hook system).
+ * `'delegated'` — this harness has no gate mechanism of its own because it
+ *                 does not run tools itself: it wraps OTHER harnesses that
+ *                 are already `'hook'`- or `'sdk'`-gated, and a tool call
+ *                 made inside it is governed by whichever wrapped harness's
+ *                 own gate is running (Xirp, Agentic Orchestrator, and — a
+ *                 different shape of the same idea — AgentCore Runtime,
+ *                 which HOSTS a customer's already-gated framework code
+ *                 rather than spawning it as a subprocess; see
+ *                 gateRegistry.ts's NO_GATE rows for the reasoning this
+ *                 precedent sets for future orchestrator/host-shaped
+ *                 harnesses).
+ *                 Every wrapped backend of the two orchestrators has a gate of
+ *                 its own (Agentic Orchestrator's `opencode` backend through
+ *                 `openCodeHooks.ts`), so `'delegated'`
+ *                 claims exactly what happens. Distinct from
+ *                 `'none'`: `'none'` means no enforcement point exists
+ *                 ANYWHERE for this harness's tool calls; `'delegated'`
+ *                 means one exists, just not one this harness's own row
+ *                 owns or can be credited for independently — reporting it
+ *                 as `'none'` would undercount real coverage, and reporting
+ *                 it as `'hook'` would overclaim a file this daemon never
+ *                 writes for the wrapping harness itself.
+ * `'bridge'`    — the gate runs OUT OF PROCESS, in an Intutic-operated
+ *                 service reacting to the harness's own async
+ *                 approval/event API, rather than a file this daemon writes
+ *                 (`'hook'`), an SDK imported into the harness's own process
+ *                 (`'sdk'`), no enforcement point at all (`'none'`), or
+ *                 governance credited to a wrapped harness's own gate
+ *                 (`'delegated'`) — a fifth, genuinely different shape.
+ *                 TRUEFORGE_SERVER is the first and so far only member: a
+ *                 TrueForge standalone/hosted server is a separate process
+ *                 nobody embeds an Intutic gate into (unlike TRUEFORGE,
+ *                 embedded mode, which IS `'sdk'`-gated — see that row's own
+ *                 doc), so `services/trueforge-bridge` watches its turn/event
+ *                 stream externally and answers pending approvals over HTTP.
+ *                 Distinct from `'delegated'`: a delegated harness's tool
+ *                 calls are governed by ANOTHER HARNESS's own gate running
+ *                 in that other harness's process; a bridge-gated harness's
+ *                 tool calls are governed by a service this repo ships and
+ *                 operates, running in neither the harness's process nor any
+ *                 other harness's. Distinct from `'sdk'`: no code from this
+ *                 repo ever runs inside the governed harness's own process
+ *                 at all — the harness's only obligation is to expose the
+ *                 async approval API the bridge polls/subscribes to.
+ */
+export type GateKind = 'hook' | 'sdk' | 'none' | 'delegated' | 'bridge';
+/**
+ * Harnesses whose blocking gate ships SDK-side, in the harness's own
+ * process — no on-disk hook/config file exists to point a gate at. Mirrors
+ * the `file: null` NO_GATE rows in `gateRegistry.ts`.
+ *
+ * MASTRA, VERCEL_AI_SDK (T2), EVE (A2), and TRUEFORGE (embedded-library mode
+ * only — see its own HarnessType doc) are the JS/TS-native members of this
+ * family: their blocking gate ships in `@intutic/gate/mastra`/
+ * `@intutic/gate/vercel`/`@intutic/gate/eve`/`@intutic/gate/trueforge`
+ * (packages/gate-js) rather than `intutic-clawde`, but the shape is
+ * identical — no on-disk hook/config file, tools run as plain callables in
+ * the harness's own process (for eve, as per-tool/per-connection `approval`
+ * policies attached in the agent directory's own TypeScript; for TrueForge,
+ * as `intuticApprovalResponder()` answering `tool.approval_required`
+ * pauses — see `@intutic/gate/trueforge`'s module doc for why that shape
+ * differs from mastra/vercel's single-callback pattern).
+ *
+ * AI_SDK_HARNESS and AI_SDK_WORKFLOW (A3) are the same `@intutic/gate`
+ * family with one nuance worth naming: the VETO still runs SDK-side in the
+ * caller's own Node.js process (an approval responder / a `needsApproval`
+ * function), which is what `'sdk'` classifies — but for AI_SDK_HARNESS the
+ * tool EXECUTION it vetoes happens server-side in a Vercel Sandbox microVM,
+ * and its built-in sandbox tools have no veto surface at all beyond
+ * `permissionMode` (defaults to 'allow-all'). `'sdk'` describes where the
+ * gate mechanism lives, not a claim that every tool the harness can run
+ * passes through it — see gateRegistry.ts's NO_GATE rows for the honest
+ * scope statement per harness.
+ */
+export declare const SDK_GATED_HARNESSES: ReadonlySet<HarnessTypeT>;
+/**
+ * Harnesses with no tool-call gate of their own: the proxy and the MCP
+ * governance proxy are their enforcement. Mirrors the NO_GATE rows in
+ * `gateRegistry.ts`: aider's only native hook (`--git-commit-verify`) is
+ * opt-in, post-edit, and blind to `/run`; Roo Code and Claude Desktop have no
+ * hook system at all (Claude Desktop's Code tab is Claude Code, gated by the
+ * claude-code gate); Continue's CLI loads PreToolUse hooks but never fires
+ * them, and its IDE extension has none (see the continueConfigMerger.ts row).
+ */
+export declare const NO_GATE_HARNESSES: ReadonlySet<HarnessTypeT>;
+/**
+ * Harnesses that wrap OTHER already-gated harnesses instead of running tools
+ * themselves — no gate of their own, but not ungoverned either. Mirrors the
+ * `file: null` NO_GATE rows for `xirp` and `agentic-orchestrator` in
+ * `gateRegistry.ts`. Xirp was the first entry of this shape; Agentic
+ * Orchestrator (O3) is the second. O2 (QM) is expected to add a third, same
+ * "wraps other harnesses" shape, in a concurrent phase not yet merged as of
+ * this one.
+ */
+export declare const DELEGATED_GATE_HARNESSES: ReadonlySet<HarnessTypeT>;
+/**
+ * Harnesses whose blocking gate runs OUT OF PROCESS, in an Intutic-operated
+ * service reacting to the harness's own async approval/event API — not a
+ * file this daemon writes, and not an SDK imported into the harness's own
+ * process (no process of ours runs inside the harness at all). Mirrors the
+ * `file: null` NO_GATE row for `trueforge-server` in `gateRegistry.ts`.
+ *
+ * TRUEFORGE_SERVER (B3) is the first member: a TrueForge standalone/hosted
+ * server has no in-process host to hang an SDK gate off of (contrast
+ * TRUEFORGE, embedded mode, in `SDK_GATED_HARNESSES` above) — instead
+ * `services/trueforge-bridge` watches its turn/event stream externally and
+ * answers pending `tool.approval_required` pauses over HTTP. See the
+ * `'bridge'` `GateKind` doc above for the full distinction from `'sdk'` and
+ * `'delegated'`.
+ */
+export declare const BRIDGE_GATED_HARNESSES: ReadonlySet<HarnessTypeT>;
+/** How this harness's tool calls get gated. Defaults to `'hook'`. */
+export declare function gateKindForHarness(type: HarnessTypeT): GateKind;
+//# sourceMappingURL=gateKind.d.ts.map

package/dist/gateKind.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gateKind.d.ts","sourceRoot":"","sources":["../src/gateKind.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8CG;AAEH,OAAO,EAAe,KAAK,WAAW,IAAI,YAAY,EAAE,MAAM,YAAY,CAAA;AAE1E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsDG;AACH,MAAM,MAAM,QAAQ,GAAG,MAAM,GAAG,KAAK,GAAG,MAAM,GAAG,WAAW,GAAG,QAAQ,CAAA;AAEvE;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,eAAO,MAAM,mBAAmB,EAAE,WAAW,CAAC,YAAY,CAkBxD,CAAA;AAEF;;;;;;;;GAQG;AACH,eAAO,MAAM,iBAAiB,EAAE,WAAW,CAAC,YAAY,CAKtD,CAAA;AAEF;;;;;;;;GAQG;AACH,eAAO,MAAM,wBAAwB,EAAE,WAAW,CAAC,YAAY,CAO7D,CAAA;AAEF;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,sBAAsB,EAAE,WAAW,CAAC,YAAY,CAA2C,CAAA;AAExG,qEAAqE;AACrE,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,YAAY,GAAG,QAAQ,CAM/D"}

package/dist/gateKind.js

@@ -0,0 +1,160 @@
+"use strict";
+/**
+ * gateKind.ts — classifies each harness by HOW its tool calls get governed:
+ * for the sync daemon's agent report (`agentReporter.ts`'s `guardrails`
+ * facet) and AI inventory, and for the control plane's silent-gate check,
+ * which expects a gate only from a harness that has one of its own.
+ *
+ * # Why this exists
+ *
+ * `collectAgentReport` used to report `hook_gate: true` unconditionally for
+ * every harness, with the comment "the daemon writes the hook gate for every
+ * harness it supports." That was already false for `langgraph` — which has
+ * no on-disk hook, only the SDK-side `intutic_clawde.gate` — and for `aider`,
+ * whose only NO_GATE-registered mechanism is a post-edit, /run-blind
+ * pre-commit hook (see `aiderConfigMerger.ts`'s NO_GATE row in
+ * `__tests__/harness/gateRegistry.ts`). Wave 1 adds eight more SDK-gated
+ * harnesses, which would have made the lie eight times larger without this
+ * fix.
+ *
+ * # What this does NOT do
+ *
+ * This does not verify that a user actually pip-installed `intutic-clawde`
+ * and wired `guard_tools`/`IntuticMiddleware`/etc. into their process — the
+ * daemon cannot observe another process's imports, the same way it cannot
+ * observe whether a written hook file was left executable. It only reports
+ * which MECHANISM this harness's governance model uses (a file the daemon
+ * itself writes and can verify existence of, vs. an SDK the harness's own
+ * process must import), matching the trust level `hook_gate: true` already
+ * carried for file-based harnesses before this fix.
+ *
+ * # Keeping this in sync with the gate registry
+ *
+ * `services/sync-daemon/__tests__/harness/gateRegistry.ts` (the GATES/NO_GATE
+ * completeness registry exercised by `generatedGateBehaviour.test.ts`) is the
+ * authoritative decision per harness, but it is a test-only module (it
+ * dynamically imports every writer's compiled `.js` from a temp build dir)
+ * and must not be imported from daemon runtime code. `services/sync-daemon/__tests__/harness/gateKind.test.ts`
+ * cross-checks the two lists so this file cannot silently drift from that
+ * registry's own NO_GATE rows: `file: null` harnesses split between 'sdk'
+ * (LangGraph + the Python frameworks — the gate ships in intutic-clawde),
+ * 'delegated' (xirp — the gate is whichever wrapped harness's own gate is
+ * running), and 'bridge' (trueforge-server — the gate runs in a separate
+ * Intutic-operated service, not in any process this repo's writers touch),
+ * and 'none' (roo-code, claude-desktop — no hook system); the one non-null
+ * row (aiderConfigMerger.ts, "no ... exists") is 'none' too.
+ *
+ * @module
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BRIDGE_GATED_HARNESSES = exports.DELEGATED_GATE_HARNESSES = exports.NO_GATE_HARNESSES = exports.SDK_GATED_HARNESSES = void 0;
+exports.gateKindForHarness = gateKindForHarness;
+const enums_js_1 = require("./enums.js");
+/**
+ * Harnesses whose blocking gate ships SDK-side, in the harness's own
+ * process — no on-disk hook/config file exists to point a gate at. Mirrors
+ * the `file: null` NO_GATE rows in `gateRegistry.ts`.
+ *
+ * MASTRA, VERCEL_AI_SDK (T2), EVE (A2), and TRUEFORGE (embedded-library mode
+ * only — see its own HarnessType doc) are the JS/TS-native members of this
+ * family: their blocking gate ships in `@intutic/gate/mastra`/
+ * `@intutic/gate/vercel`/`@intutic/gate/eve`/`@intutic/gate/trueforge`
+ * (packages/gate-js) rather than `intutic-clawde`, but the shape is
+ * identical — no on-disk hook/config file, tools run as plain callables in
+ * the harness's own process (for eve, as per-tool/per-connection `approval`
+ * policies attached in the agent directory's own TypeScript; for TrueForge,
+ * as `intuticApprovalResponder()` answering `tool.approval_required`
+ * pauses — see `@intutic/gate/trueforge`'s module doc for why that shape
+ * differs from mastra/vercel's single-callback pattern).
+ *
+ * AI_SDK_HARNESS and AI_SDK_WORKFLOW (A3) are the same `@intutic/gate`
+ * family with one nuance worth naming: the VETO still runs SDK-side in the
+ * caller's own Node.js process (an approval responder / a `needsApproval`
+ * function), which is what `'sdk'` classifies — but for AI_SDK_HARNESS the
+ * tool EXECUTION it vetoes happens server-side in a Vercel Sandbox microVM,
+ * and its built-in sandbox tools have no veto surface at all beyond
+ * `permissionMode` (defaults to 'allow-all'). `'sdk'` describes where the
+ * gate mechanism lives, not a claim that every tool the harness can run
+ * passes through it — see gateRegistry.ts's NO_GATE rows for the honest
+ * scope statement per harness.
+ */
+exports.SDK_GATED_HARNESSES = new Set([
+    enums_js_1.HarnessType.LANGGRAPH,
+    enums_js_1.HarnessType.LANGCHAIN,
+    enums_js_1.HarnessType.CREWAI,
+    enums_js_1.HarnessType.AUTOGEN,
+    enums_js_1.HarnessType.AG2,
+    enums_js_1.HarnessType.GOOGLE_ADK,
+    enums_js_1.HarnessType.OPENAI_AGENTS,
+    enums_js_1.HarnessType.PYDANTIC_AI,
+    enums_js_1.HarnessType.SMOLAGENTS,
+    enums_js_1.HarnessType.STRANDS,
+    enums_js_1.HarnessType.AGENT_FRAMEWORK,
+    enums_js_1.HarnessType.MASTRA,
+    enums_js_1.HarnessType.VERCEL_AI_SDK,
+    enums_js_1.HarnessType.EVE,
+    enums_js_1.HarnessType.TRUEFORGE,
+    enums_js_1.HarnessType.AI_SDK_HARNESS,
+    enums_js_1.HarnessType.AI_SDK_WORKFLOW,
+]);
+/**
+ * Harnesses with no tool-call gate of their own: the proxy and the MCP
+ * governance proxy are their enforcement. Mirrors the NO_GATE rows in
+ * `gateRegistry.ts`: aider's only native hook (`--git-commit-verify`) is
+ * opt-in, post-edit, and blind to `/run`; Roo Code and Claude Desktop have no
+ * hook system at all (Claude Desktop's Code tab is Claude Code, gated by the
+ * claude-code gate); Continue's CLI loads PreToolUse hooks but never fires
+ * them, and its IDE extension has none (see the continueConfigMerger.ts row).
+ */
+exports.NO_GATE_HARNESSES = new Set([
+    enums_js_1.HarnessType.AIDER,
+    enums_js_1.HarnessType.ROO_CODE,
+    enums_js_1.HarnessType.CLAUDE_DESKTOP,
+    enums_js_1.HarnessType.CONTINUE,
+]);
+/**
+ * Harnesses that wrap OTHER already-gated harnesses instead of running tools
+ * themselves — no gate of their own, but not ungoverned either. Mirrors the
+ * `file: null` NO_GATE rows for `xirp` and `agentic-orchestrator` in
+ * `gateRegistry.ts`. Xirp was the first entry of this shape; Agentic
+ * Orchestrator (O3) is the second. O2 (QM) is expected to add a third, same
+ * "wraps other harnesses" shape, in a concurrent phase not yet merged as of
+ * this one.
+ */
+exports.DELEGATED_GATE_HARNESSES = new Set([
+    enums_js_1.HarnessType.XIRP,
+    enums_js_1.HarnessType.AGENTIC_ORCHESTRATOR,
+    // B2: AWS Bedrock AgentCore Runtime — hosts a customer's own framework
+    // code unchanged; governed by whichever already-supported framework
+    // adapter that code uses. See tools/cli/src/harness/agentcore.ts.
+    enums_js_1.HarnessType.AGENTCORE_RUNTIME,
+]);
+/**
+ * Harnesses whose blocking gate runs OUT OF PROCESS, in an Intutic-operated
+ * service reacting to the harness's own async approval/event API — not a
+ * file this daemon writes, and not an SDK imported into the harness's own
+ * process (no process of ours runs inside the harness at all). Mirrors the
+ * `file: null` NO_GATE row for `trueforge-server` in `gateRegistry.ts`.
+ *
+ * TRUEFORGE_SERVER (B3) is the first member: a TrueForge standalone/hosted
+ * server has no in-process host to hang an SDK gate off of (contrast
+ * TRUEFORGE, embedded mode, in `SDK_GATED_HARNESSES` above) — instead
+ * `services/trueforge-bridge` watches its turn/event stream externally and
+ * answers pending `tool.approval_required` pauses over HTTP. See the
+ * `'bridge'` `GateKind` doc above for the full distinction from `'sdk'` and
+ * `'delegated'`.
+ */
+exports.BRIDGE_GATED_HARNESSES = new Set([enums_js_1.HarnessType.TRUEFORGE_SERVER]);
+/** How this harness's tool calls get gated. Defaults to `'hook'`. */
+function gateKindForHarness(type) {
+    if (exports.SDK_GATED_HARNESSES.has(type))
+        return 'sdk';
+    if (exports.NO_GATE_HARNESSES.has(type))
+        return 'none';
+    if (exports.DELEGATED_GATE_HARNESSES.has(type))
+        return 'delegated';
+    if (exports.BRIDGE_GATED_HARNESSES.has(type))
+        return 'bridge';
+    return 'hook';
+}
+//# sourceMappingURL=gateKind.js.map

package/dist/gateKind.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gateKind.js","sourceRoot":"","sources":["../src/gateKind.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8CG;;;AAiKH,gDAMC;AArKD,yCAA0E;AA2D1E;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACU,QAAA,mBAAmB,GAA8B,IAAI,GAAG,CAAC;IACpE,sBAAW,CAAC,SAAS;IACrB,sBAAW,CAAC,SAAS;IACrB,sBAAW,CAAC,MAAM;IAClB,sBAAW,CAAC,OAAO;IACnB,sBAAW,CAAC,GAAG;IACf,sBAAW,CAAC,UAAU;IACtB,sBAAW,CAAC,aAAa;IACzB,sBAAW,CAAC,WAAW;IACvB,sBAAW,CAAC,UAAU;IACtB,sBAAW,CAAC,OAAO;IACnB,sBAAW,CAAC,eAAe;IAC3B,sBAAW,CAAC,MAAM;IAClB,sBAAW,CAAC,aAAa;IACzB,sBAAW,CAAC,GAAG;IACf,sBAAW,CAAC,SAAS;IACrB,sBAAW,CAAC,cAAc;IAC1B,sBAAW,CAAC,eAAe;CAC5B,CAAC,CAAA;AAEF;;;;;;;;GAQG;AACU,QAAA,iBAAiB,GAA8B,IAAI,GAAG,CAAC;IAClE,sBAAW,CAAC,KAAK;IACjB,sBAAW,CAAC,QAAQ;IACpB,sBAAW,CAAC,cAAc;IAC1B,sBAAW,CAAC,QAAQ;CACrB,CAAC,CAAA;AAEF;;;;;;;;GAQG;AACU,QAAA,wBAAwB,GAA8B,IAAI,GAAG,CAAC;IACzE,sBAAW,CAAC,IAAI;IAChB,sBAAW,CAAC,oBAAoB;IAChC,uEAAuE;IACvE,oEAAoE;IACpE,kEAAkE;IAClE,sBAAW,CAAC,iBAAiB;CAC9B,CAAC,CAAA;AAEF;;;;;;;;;;;;;;GAcG;AACU,QAAA,sBAAsB,GAA8B,IAAI,GAAG,CAAC,CAAC,sBAAW,CAAC,gBAAgB,CAAC,CAAC,CAAA;AAExG,qEAAqE;AACrE,SAAgB,kBAAkB,CAAC,IAAkB;IACnD,IAAI,2BAAmB,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAA;IAC/C,IAAI,yBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,MAAM,CAAA;IAC9C,IAAI,gCAAwB,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,WAAW,CAAA;IAC1D,IAAI,8BAAsB,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,QAAQ,CAAA;IACrD,OAAO,MAAM,CAAA;AACf,CAAC"}