@intutic/shared-types 2.3.0 → 2.5.0

package/dist/cloudProbe.js

@@ -0,0 +1,254 @@
+"use strict";
+/**
+ * Verification probes for cloud provider credentials: AWS Bedrock and Google
+ * Vertex AI, whose cheapest authenticated call has to be signed per request.
+ *
+ * Still no network here: this builds the request (SigV4-signed, or carrying a
+ * freshly signed service-account assertion) with WebCrypto, which Node and
+ * browsers both provide, and the executors in the CLI and the control plane
+ * send it exactly as they send every other provider's probe.
+ *
+ * - **Bedrock, access key pair**: STS `GetCallerIdentity`, which any valid
+ *   key may call — it proves the key, not its Bedrock permissions, which the
+ *   first model call checks.
+ *   <https://docs.aws.amazon.com/STS/latest/APIReference/API_GetCallerIdentity.html>
+ * - **Bedrock, API key**: `ListFoundationModels` with the key as a bearer
+ *   token (Bedrock API keys work with Bedrock control-plane actions).
+ *   <https://docs.aws.amazon.com/bedrock/latest/userguide/api-keys-use.html>
+ * - **Vertex AI**: the service account's OAuth token exchange — the key is
+ *   valid when Google mints a token for it; project access is checked on the
+ *   first model call. An `authorized_user` file is checked by its refresh
+ *   grant.
+ *
+ * @module
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GOOGLE_TOKEN_URI = void 0;
+exports.sigv4Headers = sigv4Headers;
+exports.serviceAccountAssertion = serviceAccountAssertion;
+exports.buildCloudVerificationProbe = buildCloudVerificationProbe;
+const enc = new TextEncoder();
+function subtle() {
+    const s = globalThis.crypto?.subtle;
+    if (!s)
+        throw new Error('WebCrypto is not available in this runtime');
+    return s;
+}
+function hex(buf) {
+    return [...new Uint8Array(buf)].map((b) => b.toString(16).padStart(2, '0')).join('');
+}
+async function sha256Hex(data) {
+    return hex(await subtle().digest('SHA-256', enc.encode(data)));
+}
+async function hmac(key, data) {
+    const k = await subtle().importKey('raw', key, { name: 'HMAC', hash: 'SHA-256' }, false, ['sign']);
+    return subtle().sign('HMAC', k, enc.encode(data));
+}
+/** RFC 3986 encoding as SigV4 requires it (unreserved characters kept). */
+function uriEncode(s) {
+    return [...enc.encode(s)]
+        .map((b) => {
+        const c = String.fromCharCode(b);
+        return /[A-Za-z0-9\-_.~]/.test(c) ? c : `%${b.toString(16).toUpperCase().padStart(2, '0')}`;
+    })
+        .join('');
+}
+/**
+ * AWS Signature Version 4: the headers to add (`x-amz-date`,
+ * `x-amz-security-token` for temporary credentials, `authorization`).
+ * Held to AWS's published test-suite vectors in this package's tests.
+ */
+async function sigv4Headers(i) {
+    const amzDate = i.now.toISOString().replace(/[-:]/g, '').replace(/\.\d{3}/, '');
+    const date = amzDate.slice(0, 8);
+    const signed = Object.entries(i.headers ?? {}).map(([k, v]) => [
+        k.toLowerCase(),
+        v.trim().replace(/\s+/g, ' '),
+    ]);
+    signed.push(['host', i.host.toLowerCase()], ['x-amz-date', amzDate]);
+    if (i.sessionToken)
+        signed.push(['x-amz-security-token', i.sessionToken]);
+    signed.sort(([a], [b]) => (a < b ? -1 : a > b ? 1 : 0));
+    const query = (i.query ?? [])
+        .map(([k, v]) => [uriEncode(k), uriEncode(v)])
+        .sort(([a, x], [b, y]) => (a < b ? -1 : a > b ? 1 : x < y ? -1 : x > y ? 1 : 0))
+        .map(([k, v]) => `${k}=${v}`)
+        .join('&');
+    const signedNames = signed.map(([k]) => k).join(';');
+    const canonical = [
+        i.method,
+        i.path,
+        query,
+        signed.map(([k, v]) => `${k}:${v}\n`).join(''),
+        signedNames,
+        await sha256Hex(i.body),
+    ].join('\n');
+    const scope = `${date}/${i.region}/${i.service}/aws4_request`;
+    const stringToSign = `AWS4-HMAC-SHA256\n${amzDate}\n${scope}\n${await sha256Hex(canonical)}`;
+    let key = await hmac(enc.encode(`AWS4${i.secretAccessKey}`), date);
+    key = await hmac(key, i.region);
+    key = await hmac(key, i.service);
+    key = await hmac(key, 'aws4_request');
+    const signature = hex(await hmac(key, stringToSign));
+    const out = { 'x-amz-date': amzDate };
+    if (i.sessionToken)
+        out['x-amz-security-token'] = i.sessionToken;
+    out.authorization = `AWS4-HMAC-SHA256 Credential=${i.accessKeyId}/${scope}, SignedHeaders=${signedNames}, Signature=${signature}`;
+    return out;
+}
+function b64url(data) {
+    const bytes = typeof data === 'string' ? enc.encode(data) : new Uint8Array(data);
+    let bin = '';
+    for (const b of bytes)
+        bin += String.fromCharCode(b);
+    return btoa(bin).replace(/\+/g, '-').replace(/\//g, '_').replace(/=+$/, '');
+}
+/** An RS256 JWT bearer assertion for Google's token endpoint. */
+async function serviceAccountAssertion(clientEmail, privateKeyPem, privateKeyId, now) {
+    const der = Uint8Array.from(atob(privateKeyPem.replace(/-----[^-]+-----/g, '').replace(/\s+/g, '')), (c) => c.charCodeAt(0));
+    const key = await subtle().importKey('pkcs8', der, { name: 'RSASSA-PKCS1-v1_5', hash: 'SHA-256' }, false, [
+        'sign',
+    ]);
+    const iat = Math.floor(now.getTime() / 1000);
+    const header = { alg: 'RS256', typ: 'JWT', ...(privateKeyId ? { kid: privateKeyId } : {}) };
+    const claims = {
+        iss: clientEmail,
+        scope: 'https://www.googleapis.com/auth/cloud-platform',
+        aud: exports.GOOGLE_TOKEN_URI,
+        iat,
+        exp: iat + 3600,
+    };
+    const input = `${b64url(JSON.stringify(header))}.${b64url(JSON.stringify(claims))}`;
+    const sig = await subtle().sign('RSASSA-PKCS1-v1_5', key, enc.encode(input));
+    return `${input}.${b64url(sig)}`;
+}
+exports.GOOGLE_TOKEN_URI = 'https://oauth2.googleapis.com/token';
+const AWS_INVALID = new Set([
+    'UnrecognizedClientException',
+    'InvalidClientTokenId',
+    'SignatureDoesNotMatch',
+    'InvalidSignatureException',
+    'ExpiredToken',
+    'ExpiredTokenException',
+    'IncompleteSignature',
+]);
+/** AWS: a credential error is invalid; `AccessDenied` means the key authenticated but lacks the permission. */
+function classifyAws(status, headers) {
+    if (status >= 200 && status < 300)
+        return 'valid';
+    const type = (headers.get('x-amzn-errortype') ?? '').split(':')[0];
+    if (AWS_INVALID.has(type))
+        return 'invalid';
+    if (status === 401)
+        return 'invalid';
+    if (status === 403 && !type.startsWith('AccessDenied'))
+        return 'invalid';
+    return 'unknown';
+}
+/** Google's token endpoint answers a bad key with 400 `invalid_grant` or 401 `invalid_client`. */
+function classifyGoogleToken(status) {
+    if (status >= 200 && status < 300)
+        return 'valid';
+    if (status === 400 || status === 401 || status === 403)
+        return 'invalid';
+    return 'unknown';
+}
+const REGION = /^[a-z0-9-]{1,32}$/;
+/**
+ * The verification request for a Bedrock or Vertex AI credential, or `null`
+ * when `fields` are not a complete credential for one.
+ */
+async function buildCloudVerificationProbe(provider, fields, now = new Date()) {
+    if (provider === 'bedrock') {
+        const region = fields.awsRegion?.trim();
+        if (!region || !REGION.test(region))
+            return null;
+        if (fields.awsAccessKeyId && fields.awsSecretAccessKey) {
+            const host = `sts.${region}.amazonaws.com`;
+            const body = 'Action=GetCallerIdentity&Version=2011-06-15';
+            const contentType = 'application/x-www-form-urlencoded; charset=utf-8';
+            const signed = await sigv4Headers({
+                method: 'POST',
+                host,
+                path: '/',
+                headers: { 'content-type': contentType },
+                body,
+                accessKeyId: fields.awsAccessKeyId.trim(),
+                secretAccessKey: fields.awsSecretAccessKey.trim(),
+                region,
+                service: 'sts',
+                now,
+            });
+            return {
+                url: `https://${host}/`,
+                method: 'POST',
+                headers: { 'content-type': contentType, ...signed },
+                body,
+                classify: classifyAws,
+                validDetail: 'the access key is valid; Bedrock model access is checked on the first request',
+            };
+        }
+        if (fields.apiKey) {
+            return {
+                url: `https://bedrock.${region}.amazonaws.com/foundation-models?byProvider=anthropic`,
+                method: 'GET',
+                headers: { Authorization: `Bearer ${fields.apiKey.trim()}` },
+                classify: classifyAws,
+            };
+        }
+        return null;
+    }
+    if (provider === 'vertex_ai') {
+        let doc;
+        try {
+            doc = JSON.parse(fields.serviceAccountJson ?? '');
+        }
+        catch {
+            return null;
+        }
+        if (doc.type === 'service_account' && doc.client_email && doc.private_key) {
+            let assertion;
+            try {
+                assertion = await serviceAccountAssertion(doc.client_email, doc.private_key, doc.private_key_id, now);
+            }
+            catch {
+                // A key that will not import is as invalid as one Google rejects.
+                return {
+                    url: exports.GOOGLE_TOKEN_URI,
+                    method: 'POST',
+                    headers: {},
+                    localVerdict: 'invalid',
+                    validDetail: 'the service-account private_key is not a usable RSA key',
+                };
+            }
+            return {
+                url: exports.GOOGLE_TOKEN_URI,
+                method: 'POST',
+                headers: { 'content-type': 'application/x-www-form-urlencoded' },
+                body: new URLSearchParams({
+                    grant_type: 'urn:ietf:params:oauth:grant-type:jwt-bearer',
+                    assertion,
+                }).toString(),
+                classify: classifyGoogleToken,
+                validDetail: 'the service-account key is valid; project access is checked on the first request',
+            };
+        }
+        if (doc.type === 'authorized_user' && doc.client_id && doc.refresh_token) {
+            return {
+                url: exports.GOOGLE_TOKEN_URI,
+                method: 'POST',
+                headers: { 'content-type': 'application/x-www-form-urlencoded' },
+                body: new URLSearchParams({
+                    grant_type: 'refresh_token',
+                    client_id: doc.client_id,
+                    client_secret: doc.client_secret ?? '',
+                    refresh_token: doc.refresh_token,
+                }).toString(),
+                classify: classifyGoogleToken,
+            };
+        }
+        return null;
+    }
+    return null;
+}
+//# sourceMappingURL=cloudProbe.js.map

package/dist/cloudProbe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloudProbe.js","sourceRoot":"","sources":["../src/cloudProbe.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;;;AAwDH,oCAmCC;AAUD,0DAyBC;AAqCD,kEA+FC;AA9PD,MAAM,GAAG,GAAG,IAAI,WAAW,EAAE,CAAA;AAE7B,SAAS,MAAM;IACb,MAAM,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,MAAM,CAAA;IACnC,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAA;IACrE,OAAO,CAAC,CAAA;AACV,CAAC;AAED,SAAS,GAAG,CAAC,GAAgB;IAC3B,OAAO,CAAC,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;AACtF,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,IAAY;IACnC,OAAO,GAAG,CAAC,MAAM,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;AAChE,CAAC;AAED,KAAK,UAAU,IAAI,CAAC,GAA6B,EAAE,IAAY;IAC7D,MAAM,CAAC,GAAG,MAAM,MAAM,EAAE,CAAC,SAAS,CAAC,KAAK,EAAE,GAAmB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,CAAC,MAAM,CAAC,CAAC,CAAA;IAClH,OAAO,MAAM,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAA;AACnD,CAAC;AAED,2EAA2E;AAC3E,SAAS,SAAS,CAAC,CAAS;IAC1B,OAAO,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;SACtB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACT,MAAM,CAAC,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;QAChC,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAA;IAC7F,CAAC,CAAC;SACD,IAAI,CAAC,EAAE,CAAC,CAAA;AACb,CAAC;AAkBD;;;;GAIG;AACI,KAAK,UAAU,YAAY,CAAC,CAAa;IAC9C,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAA;IAC/E,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IAChC,MAAM,MAAM,GAA4B,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC;QACtF,CAAC,CAAC,WAAW,EAAE;QACf,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;KAC9B,CAAC,CAAA;IACF,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,CAAA;IACpE,IAAI,CAAC,CAAC,YAAY;QAAE,MAAM,CAAC,IAAI,CAAC,CAAC,sBAAsB,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC,CAAA;IACzE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACvD,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;SAC1B,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,CAAU,CAAC;SACtD,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;SAC/E,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;SAC5B,IAAI,CAAC,GAAG,CAAC,CAAA;IACZ,MAAM,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IACpD,MAAM,SAAS,GAAG;QAChB,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,IAAI;QACN,KAAK;QACL,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9C,WAAW;QACX,MAAM,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;KACxB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACZ,MAAM,KAAK,GAAG,GAAG,IAAI,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,OAAO,eAAe,CAAA;IAC7D,MAAM,YAAY,GAAG,qBAAqB,OAAO,KAAK,KAAK,KAAK,MAAM,SAAS,CAAC,SAAS,CAAC,EAAE,CAAA;IAC5F,IAAI,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,eAAe,EAAE,CAAC,EAAE,IAAI,CAAC,CAAA;IAClE,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,CAAA;IAC/B,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,CAAA;IAChC,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAA;IACrC,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC,CAAA;IACpD,MAAM,GAAG,GAA2B,EAAE,YAAY,EAAE,OAAO,EAAE,CAAA;IAC7D,IAAI,CAAC,CAAC,YAAY;QAAE,GAAG,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC,YAAY,CAAA;IAChE,GAAG,CAAC,aAAa,GAAG,+BAA+B,CAAC,CAAC,WAAW,IAAI,KAAK,mBAAmB,WAAW,eAAe,SAAS,EAAE,CAAA;IACjI,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,SAAS,MAAM,CAAC,IAAuC;IACrD,MAAM,KAAK,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAA;IAChF,IAAI,GAAG,GAAG,EAAE,CAAA;IACZ,KAAK,MAAM,CAAC,IAAI,KAAK;QAAE,GAAG,IAAI,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;IACpD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;AAC7E,CAAC;AAED,iEAAiE;AAC1D,KAAK,UAAU,uBAAuB,CAC3C,WAAmB,EACnB,aAAqB,EACrB,YAAgC,EAChC,GAAS;IAET,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CACzB,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EACvE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CACvB,CAAA;IACD,MAAM,GAAG,GAAG,MAAM,MAAM,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE;QACxG,MAAM;KACP,CAAC,CAAA;IACF,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAA;IAC5C,MAAM,MAAM,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAA;IAC3F,MAAM,MAAM,GAAG;QACb,GAAG,EAAE,WAAW;QAChB,KAAK,EAAE,gDAAgD;QACvD,GAAG,EAAE,wBAAgB;QACrB,GAAG;QACH,GAAG,EAAE,GAAG,GAAG,IAAI;KAChB,CAAA;IACD,MAAM,KAAK,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,CAAA;IACnF,MAAM,GAAG,GAAG,MAAM,MAAM,EAAE,CAAC,IAAI,CAAC,mBAAmB,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;IAC5E,OAAO,GAAG,KAAK,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,CAAA;AAClC,CAAC;AAEY,QAAA,gBAAgB,GAAG,qCAAqC,CAAA;AAErE,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC;IAC1B,6BAA6B;IAC7B,sBAAsB;IACtB,uBAAuB;IACvB,2BAA2B;IAC3B,cAAc;IACd,uBAAuB;IACvB,qBAAqB;CACtB,CAAC,CAAA;AAEF,+GAA+G;AAC/G,SAAS,WAAW,CAAC,MAAc,EAAE,OAA6C;IAChF,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG;QAAE,OAAO,OAAO,CAAA;IACjD,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;IAClE,IAAI,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAA;IAC3C,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,SAAS,CAAA;IACpC,IAAI,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC;QAAE,OAAO,SAAS,CAAA;IACxE,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,kGAAkG;AAClG,SAAS,mBAAmB,CAAC,MAAc;IACzC,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG;QAAE,OAAO,OAAO,CAAA;IACjD,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,SAAS,CAAA;IACxE,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,MAAM,MAAM,GAAG,mBAAmB,CAAA;AAElC;;;GAGG;AACI,KAAK,UAAU,2BAA2B,CAC/C,QAAgB,EAChB,MAA8B,EAC9B,MAAY,IAAI,IAAI,EAAE;IAEtB,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,EAAE,IAAI,EAAE,CAAA;QACvC,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAA;QAChD,IAAI,MAAM,CAAC,cAAc,IAAI,MAAM,CAAC,kBAAkB,EAAE,CAAC;YACvD,MAAM,IAAI,GAAG,OAAO,MAAM,gBAAgB,CAAA;YAC1C,MAAM,IAAI,GAAG,6CAA6C,CAAA;YAC1D,MAAM,WAAW,GAAG,kDAAkD,CAAA;YACtE,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC;gBAChC,MAAM,EAAE,MAAM;gBACd,IAAI;gBACJ,IAAI,EAAE,GAAG;gBACT,OAAO,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE;gBACxC,IAAI;gBACJ,WAAW,EAAE,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE;gBACzC,eAAe,EAAE,MAAM,CAAC,kBAAkB,CAAC,IAAI,EAAE;gBACjD,MAAM;gBACN,OAAO,EAAE,KAAK;gBACd,GAAG;aACJ,CAAC,CAAA;YACF,OAAO;gBACL,GAAG,EAAE,WAAW,IAAI,GAAG;gBACvB,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,GAAG,MAAM,EAAE;gBACnD,IAAI;gBACJ,QAAQ,EAAE,WAAW;gBACrB,WAAW,EAAE,+EAA+E;aAC7F,CAAA;QACH,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAClB,OAAO;gBACL,GAAG,EAAE,mBAAmB,MAAM,uDAAuD;gBACrF,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,EAAE;gBAC5D,QAAQ,EAAE,WAAW;aACtB,CAAA;QACH,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC;IAED,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;QAC7B,IAAI,GAA2B,CAAA;QAC/B,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,kBAAkB,IAAI,EAAE,CAA2B,CAAA;QAC7E,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAA;QACb,CAAC;QACD,IAAI,GAAG,CAAC,IAAI,KAAK,iBAAiB,IAAI,GAAG,CAAC,YAAY,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;YAC1E,IAAI,SAAiB,CAAA;YACrB,IAAI,CAAC;gBACH,SAAS,GAAG,MAAM,uBAAuB,CAAC,GAAG,CAAC,YAAY,EAAE,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,cAAc,EAAE,GAAG,CAAC,CAAA;YACvG,CAAC;YAAC,MAAM,CAAC;gBACP,kEAAkE;gBAClE,OAAO;oBACL,GAAG,EAAE,wBAAgB;oBACrB,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,EAAE;oBACX,YAAY,EAAE,SAAS;oBACvB,WAAW,EAAE,yDAAyD;iBACvE,CAAA;YACH,CAAC;YACD,OAAO;gBACL,GAAG,EAAE,wBAAgB;gBACrB,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;gBAChE,IAAI,EAAE,IAAI,eAAe,CAAC;oBACxB,UAAU,EAAE,6CAA6C;oBACzD,SAAS;iBACV,CAAC,CAAC,QAAQ,EAAE;gBACb,QAAQ,EAAE,mBAAmB;gBAC7B,WAAW,EAAE,kFAAkF;aAChG,CAAA;QACH,CAAC;QACD,IAAI,GAAG,CAAC,IAAI,KAAK,iBAAiB,IAAI,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,aAAa,EAAE,CAAC;YACzE,OAAO;gBACL,GAAG,EAAE,wBAAgB;gBACrB,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;gBAChE,IAAI,EAAE,IAAI,eAAe,CAAC;oBACxB,UAAU,EAAE,eAAe;oBAC3B,SAAS,EAAE,GAAG,CAAC,SAAS;oBACxB,aAAa,EAAE,GAAG,CAAC,aAAa,IAAI,EAAE;oBACtC,aAAa,EAAE,GAAG,CAAC,aAAa;iBACjC,CAAC,CAAC,QAAQ,EAAE;gBACb,QAAQ,EAAE,mBAAmB;aAC9B,CAAA;QACH,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC;IAED,OAAO,IAAI,CAAA;AACb,CAAC"}

package/dist/enums.d.ts

@@ -432,6 +432,54 @@ export declare const IncidentStatus: {
 };
 /** Union of all incident status values. */
 export type IncidentStatus = typeof IncidentStatus[keyof typeof IncidentStatus];
+/**
+ * Incidents that are not an agent misbehaving, so they are not anomaly
+ * categories: nothing on the hot path detects them, no corrective card
+ * answers them, and enforcement cannot be promoted on them. They share the
+ * `anomaly_type` column (Postgres enum, migrations 218 and 219) with the
+ * taxonomy.
+ */
+export declare const SystemIncidentType: {
+    /** A proxy refused to load a custom WASM or Rego rule version (`ruleLoadFailures.ts`). */
+    readonly WASM_RULE_REFUSED: "WASM_RULE_REFUSED";
+    /**
+     * Anything else a proxy reports on `intutic:system_anomalies`: a
+     * dependency it could not reach, such as the LLM provider or the semantic
+     * cache's embedding service or vector store.
+     */
+    readonly SYSTEM_ANOMALY: "SYSTEM_ANOMALY";
+};
+/** Union of the system incident types. */
+export type SystemIncidentType = typeof SystemIncidentType[keyof typeof SystemIncidentType];
+/** What a governance incident is filed under: an anomaly category or a system incident type. */
+export declare const IncidentType: {
+    /** A proxy refused to load a custom WASM or Rego rule version (`ruleLoadFailures.ts`). */
+    readonly WASM_RULE_REFUSED: "WASM_RULE_REFUSED";
+    /**
+     * Anything else a proxy reports on `intutic:system_anomalies`: a
+     * dependency it could not reach, such as the LLM provider or the semantic
+     * cache's embedding service or vector store.
+     */
+    readonly SYSTEM_ANOMALY: "SYSTEM_ANOMALY";
+    readonly TOOL_ABUSE: "TOOL_ABUSE";
+    readonly TOKEN_WASTE: "TOKEN_WASTE";
+    readonly LOOP_DETECTED: "LOOP_DETECTED";
+    readonly UNAUTHORIZED_TOOL: "UNAUTHORIZED_TOOL";
+    readonly DATA_EXFILTRATION: "DATA_EXFILTRATION";
+    readonly PROMPT_INJECTION: "PROMPT_INJECTION";
+    readonly HALLUCINATION: "HALLUCINATION";
+    readonly SCOPE_VIOLATION: "SCOPE_VIOLATION";
+    readonly BUDGET_BREACH: "BUDGET_BREACH";
+    readonly SPAWN_BUDGET_BREACH: "SPAWN_BUDGET_BREACH";
+    readonly WORKFLOW_BUDGET_BREACH: "WORKFLOW_BUDGET_BREACH";
+    readonly WORKFLOW_GOAL_DRIFT: "WORKFLOW_GOAL_DRIFT";
+};
+/** Union of every incident type, as `governance_incidents.anomaly_type` holds it. */
+export type IncidentType = typeof IncidentType[keyof typeof IncidentType];
+/** Every incident type, for validating a filter or listing the choices. */
+export declare const INCIDENT_TYPES: [IncidentType, ...IncidentType[]];
+/** Whether an arbitrary string is an incident type. */
+export declare function isIncidentType(value: unknown): value is IncidentType;
 /** Lifecycle state for stored execution plans. */
 export declare const PlanLifecycleState: {
     readonly PENDING_APPROVAL: "PENDING_APPROVAL";

package/dist/enums.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"enums.d.ts","sourceRoot":"","sources":["../src/enums.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAKH,uEAAuE;AACvE,eAAO,MAAM,SAAS;;;;;CAKZ,CAAA;AAEV,sCAAsC;AACtC,MAAM,MAAM,SAAS,GAAG,OAAO,SAAS,CAAC,MAAM,OAAO,SAAS,CAAC,CAAA;AAKhE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,eAAO,MAAM,iBAAiB;;;;;;;CAOpB,CAAA;AAEV,8CAA8C;AAC9C,MAAM,MAAM,iBAAiB,GAAG,OAAO,iBAAiB,CAAC,MAAM,OAAO,iBAAiB,CAAC,CAAA;AAKxF,0EAA0E;AAC1E,eAAO,MAAM,YAAY;;;CAGf,CAAA;AAEV,yCAAyC;AACzC,MAAM,MAAM,YAAY,GAAG,OAAO,YAAY,CAAC,MAAM,OAAO,YAAY,CAAC,CAAA;AAKzE,kEAAkE;AAClE,eAAO,MAAM,UAAU;;;;;CAKb,CAAA;AAEV,uCAAuC;AACvC,MAAM,MAAM,UAAU,GAAG,OAAO,UAAU,CAAC,MAAM,OAAO,UAAU,CAAC,CAAA;AAKnE,wDAAwD;AACxD,eAAO,MAAM,cAAc;;;;CAIjB,CAAA;AAEV,2CAA2C;AAC3C,MAAM,MAAM,cAAc,GAAG,OAAO,cAAc,CAAC,MAAM,OAAO,cAAc,CAAC,CAAA;AAK/E,qEAAqE;AACrE,eAAO,MAAM,oBAAoB;;;;;CAKvB,CAAA;AAEV,iDAAiD;AACjD,MAAM,MAAM,oBAAoB,GAAG,OAAO,oBAAoB,CAAC,MAAM,OAAO,oBAAoB,CAAC,CAAA;AAKjG;;;;;;;;;GASG;AACH,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAA;AACvD,YAAY,EACV,eAAe,GAChB,MAAM,2BAA2B,CAAA;AAYlC,mDAAmD;AACnD,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;IAoBtB,iFAAiF;;IAEjF,2EAA2E;;IAE3E;;;;+EAI2E;;IAE3E;;iEAE6D;;IAE7D;;;;;;;;OAQG;;IAEH;;;;;;;;;;;;;;;;;;;OAmBG;;IAOH;;;;;+DAK2D;;;IAG3D,0EAA0E;;;;IAI1E;;;;;;;;6DAQyD;;IAEzD,mDAAmD;;;IAGnD;;;;;;;iEAO6D;;IAE7D;;;;;;;iDAO6C;;IAQ7C;;kFAE8E;;IAE9E;;;4EAGwE;;IAExE;;;;;;;4CAOwC;;IAExC;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA4BG;;IAQH;;;;;;;;0DAQsD;;IAEtD;;;;;;;gFAO4E;;IAG5E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA2CG;;IAGH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAgDG;;CAEK,CAAA;AAEV,wCAAwC;AACxC,MAAM,MAAM,WAAW,GAAG,OAAO,WAAW,CAAC,MAAM,OAAO,WAAW,CAAC,CAAA;AAEtE;;;;;;;GAOG;AACH,eAAO,MAAM,aAAa,QAAkC,CAAA;AAE5D;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,eAAO,MAAM,sBAAsB,QAA4B,CAAA;AAK/D,uDAAuD;AACvD,eAAO,MAAM,aAAa;;;;;CAKhB,CAAA;AAEV,0CAA0C;AAC1C,MAAM,MAAM,aAAa,GAAG,OAAO,aAAa,CAAC,MAAM,OAAO,aAAa,CAAC,CAAA;AAK5E,gDAAgD;AAChD,eAAO,MAAM,cAAc;;;;;CAKjB,CAAA;AAEV,2CAA2C;AAC3C,MAAM,MAAM,cAAc,GAAG,OAAO,cAAc,CAAC,MAAM,OAAO,cAAc,CAAC,CAAA;AAK/E,kDAAkD;AAClD,eAAO,MAAM,kBAAkB;;;;;;CAMrB,CAAA;AAEV,gDAAgD;AAChD,MAAM,MAAM,kBAAkB,GAAG,OAAO,kBAAkB,CAAC,MAAM,OAAO,kBAAkB,CAAC,CAAA;AAO3F,4DAA4D;AAC5D,eAAO,MAAM,oBAAoB;;;;;CAKvB,CAAA;AAEV,kDAAkD;AAClD,MAAM,MAAM,oBAAoB,GAAG,OAAO,oBAAoB,CAAC,MAAM,OAAO,oBAAoB,CAAC,CAAA;AAMjG,gDAAgD;AAChD,eAAO,MAAM,iBAAiB;;;;;;;;CAQpB,CAAA;AAEV,+CAA+C;AAC/C,MAAM,MAAM,iBAAiB,GAAG,OAAO,iBAAiB,CAAC,MAAM,OAAO,iBAAiB,CAAC,CAAA;AAKxF,yDAAyD;AACzD,eAAO,MAAM,OAAO;IAClB,wDAAwD;;IAExD,sEAAsE;;CAE9D,CAAA;AAEV,oCAAoC;AACpC,MAAM,MAAM,OAAO,GAAG,OAAO,OAAO,CAAC,MAAM,OAAO,OAAO,CAAC,CAAA;AAK1D,kDAAkD;AAClD,eAAO,MAAM,SAAS;IACpB,mCAAmC;;IAEnC,kCAAkC;;IAElC,yCAAyC;;IAEzC,mCAAmC;;CAE3B,CAAA;AAEV,sCAAsC;AACtC,MAAM,MAAM,SAAS,GAAG,OAAO,SAAS,CAAC,MAAM,OAAO,SAAS,CAAC,CAAA;AAKhE,gDAAgD;AAChD,eAAO,MAAM,WAAW;;;;CAId,CAAA;AAEV,wCAAwC;AACxC,MAAM,MAAM,WAAW,GAAG,OAAO,WAAW,CAAC,MAAM,OAAO,WAAW,CAAC,CAAA;AAKtE,+EAA+E;AAC/E,eAAO,MAAM,aAAa;;;;;;CAMhB,CAAA;AAEV,0CAA0C;AAC1C,MAAM,MAAM,aAAa,GAAG,OAAO,aAAa,CAAC,MAAM,OAAO,aAAa,CAAC,CAAA;AAK5E;;;;;;;;;GASG;AACH,eAAO,MAAM,oBAAoB;;;CAGvB,CAAA;AACV,MAAM,MAAM,oBAAoB,GAAG,OAAO,oBAAoB,CAAC,MAAM,OAAO,oBAAoB,CAAC,CAAA;AAEjG;;;;;;;GAOG;AACH,eAAO,MAAM,YAAY;;;CAGf,CAAA;AACV,MAAM,MAAM,YAAY,GAAG,OAAO,YAAY,CAAC,MAAM,OAAO,YAAY,CAAC,CAAA;AAEzE;;;;;;GAMG;AACH,eAAO,MAAM,qBAAqB;;;;CAIxB,CAAA;AACV,MAAM,MAAM,qBAAqB,GAAG,OAAO,qBAAqB,CAAC,MAAM,OAAO,qBAAqB,CAAC,CAAA;AAKpG,8DAA8D;AAC9D,eAAO,MAAM,mBAAmB;;;;CAItB,CAAA;AACV,MAAM,MAAM,mBAAmB,GAAG,OAAO,mBAAmB,CAAC,MAAM,OAAO,mBAAmB,CAAC,CAAA;AAE9F,oFAAoF;AACpF,eAAO,MAAM,kBAAkB;;;CAGrB,CAAA;AACV,MAAM,MAAM,kBAAkB,GAAG,OAAO,kBAAkB,CAAC,MAAM,OAAO,kBAAkB,CAAC,CAAA;AAE3F;;;;;;;;;GASG;AACH,eAAO,MAAM,eAAe;;;;CAIlB,CAAA;AACV,MAAM,MAAM,eAAe,GAAG,OAAO,eAAe,CAAC,MAAM,OAAO,eAAe,CAAC,CAAA"}
+{"version":3,"file":"enums.d.ts","sourceRoot":"","sources":["../src/enums.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAOH,uEAAuE;AACvE,eAAO,MAAM,SAAS;;;;;CAKZ,CAAA;AAEV,sCAAsC;AACtC,MAAM,MAAM,SAAS,GAAG,OAAO,SAAS,CAAC,MAAM,OAAO,SAAS,CAAC,CAAA;AAKhE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,eAAO,MAAM,iBAAiB;;;;;;;CAOpB,CAAA;AAEV,8CAA8C;AAC9C,MAAM,MAAM,iBAAiB,GAAG,OAAO,iBAAiB,CAAC,MAAM,OAAO,iBAAiB,CAAC,CAAA;AAKxF,0EAA0E;AAC1E,eAAO,MAAM,YAAY;;;CAGf,CAAA;AAEV,yCAAyC;AACzC,MAAM,MAAM,YAAY,GAAG,OAAO,YAAY,CAAC,MAAM,OAAO,YAAY,CAAC,CAAA;AAKzE,kEAAkE;AAClE,eAAO,MAAM,UAAU;;;;;CAKb,CAAA;AAEV,uCAAuC;AACvC,MAAM,MAAM,UAAU,GAAG,OAAO,UAAU,CAAC,MAAM,OAAO,UAAU,CAAC,CAAA;AAKnE,wDAAwD;AACxD,eAAO,MAAM,cAAc;;;;CAIjB,CAAA;AAEV,2CAA2C;AAC3C,MAAM,MAAM,cAAc,GAAG,OAAO,cAAc,CAAC,MAAM,OAAO,cAAc,CAAC,CAAA;AAK/E,qEAAqE;AACrE,eAAO,MAAM,oBAAoB;;;;;CAKvB,CAAA;AAEV,iDAAiD;AACjD,MAAM,MAAM,oBAAoB,GAAG,OAAO,oBAAoB,CAAC,MAAM,OAAO,oBAAoB,CAAC,CAAA;AAKjG;;;;;;;;;GASG;AACH,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAA;AACvD,YAAY,EACV,eAAe,GAChB,MAAM,2BAA2B,CAAA;AAYlC,mDAAmD;AACnD,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;IAoBtB,iFAAiF;;IAEjF,2EAA2E;;IAE3E;;;;+EAI2E;;IAE3E;;iEAE6D;;IAE7D;;;;;;;;OAQG;;IAEH;;;;;;;;;;;;;;;;;;;OAmBG;;IAOH;;;;;+DAK2D;;;IAG3D,0EAA0E;;;;IAI1E;;;;;;;;6DAQyD;;IAEzD,mDAAmD;;;IAGnD;;;;;;;iEAO6D;;IAE7D;;;;;;;iDAO6C;;IAQ7C;;kFAE8E;;IAE9E;;;4EAGwE;;IAExE;;;;;;;4CAOwC;;IAExC;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA4BG;;IAQH;;;;;;;;0DAQsD;;IAEtD;;;;;;;gFAO4E;;IAG5E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA2CG;;IAGH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAgDG;;CAEK,CAAA;AAEV,wCAAwC;AACxC,MAAM,MAAM,WAAW,GAAG,OAAO,WAAW,CAAC,MAAM,OAAO,WAAW,CAAC,CAAA;AAEtE;;;;;;;GAOG;AACH,eAAO,MAAM,aAAa,QAAkC,CAAA;AAE5D;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,eAAO,MAAM,sBAAsB,QAA4B,CAAA;AAK/D,uDAAuD;AACvD,eAAO,MAAM,aAAa;;;;;CAKhB,CAAA;AAEV,0CAA0C;AAC1C,MAAM,MAAM,aAAa,GAAG,OAAO,aAAa,CAAC,MAAM,OAAO,aAAa,CAAC,CAAA;AAK5E,gDAAgD;AAChD,eAAO,MAAM,cAAc;;;;;CAKjB,CAAA;AAEV,2CAA2C;AAC3C,MAAM,MAAM,cAAc,GAAG,OAAO,cAAc,CAAC,MAAM,OAAO,cAAc,CAAC,CAAA;AAI/E;;;;;;GAMG;AACH,eAAO,MAAM,kBAAkB;IAC7B,0FAA0F;;IAE1F;;;;OAIG;;CAEK,CAAA;AAEV,0CAA0C;AAC1C,MAAM,MAAM,kBAAkB,GAAG,OAAO,kBAAkB,CAAC,MAAM,OAAO,kBAAkB,CAAC,CAAA;AAE3F,gGAAgG;AAChG,eAAO,MAAM,YAAY;IAdvB,0FAA0F;;IAE1F;;;;OAIG;;;;;;;;;;;;;;CAQ+E,CAAA;AAEpF,qFAAqF;AACrF,MAAM,MAAM,YAAY,GAAG,OAAO,YAAY,CAAC,MAAM,OAAO,YAAY,CAAC,CAAA;AAEzE,2EAA2E;AAC3E,eAAO,MAAM,cAAc,EAAkC,CAAC,YAAY,EAAE,GAAG,YAAY,EAAE,CAAC,CAAA;AAE9F,uDAAuD;AACvD,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,YAAY,CAEpE;AAKD,kDAAkD;AAClD,eAAO,MAAM,kBAAkB;;;;;;CAMrB,CAAA;AAEV,gDAAgD;AAChD,MAAM,MAAM,kBAAkB,GAAG,OAAO,kBAAkB,CAAC,MAAM,OAAO,kBAAkB,CAAC,CAAA;AAO3F,4DAA4D;AAC5D,eAAO,MAAM,oBAAoB;;;;;CAKvB,CAAA;AAEV,kDAAkD;AAClD,MAAM,MAAM,oBAAoB,GAAG,OAAO,oBAAoB,CAAC,MAAM,OAAO,oBAAoB,CAAC,CAAA;AAMjG,gDAAgD;AAChD,eAAO,MAAM,iBAAiB;;;;;;;;CAQpB,CAAA;AAEV,+CAA+C;AAC/C,MAAM,MAAM,iBAAiB,GAAG,OAAO,iBAAiB,CAAC,MAAM,OAAO,iBAAiB,CAAC,CAAA;AAKxF,yDAAyD;AACzD,eAAO,MAAM,OAAO;IAClB,wDAAwD;;IAExD,sEAAsE;;CAE9D,CAAA;AAEV,oCAAoC;AACpC,MAAM,MAAM,OAAO,GAAG,OAAO,OAAO,CAAC,MAAM,OAAO,OAAO,CAAC,CAAA;AAK1D,kDAAkD;AAClD,eAAO,MAAM,SAAS;IACpB,mCAAmC;;IAEnC,kCAAkC;;IAElC,yCAAyC;;IAEzC,mCAAmC;;CAE3B,CAAA;AAEV,sCAAsC;AACtC,MAAM,MAAM,SAAS,GAAG,OAAO,SAAS,CAAC,MAAM,OAAO,SAAS,CAAC,CAAA;AAKhE,gDAAgD;AAChD,eAAO,MAAM,WAAW;;;;CAId,CAAA;AAEV,wCAAwC;AACxC,MAAM,MAAM,WAAW,GAAG,OAAO,WAAW,CAAC,MAAM,OAAO,WAAW,CAAC,CAAA;AAKtE,+EAA+E;AAC/E,eAAO,MAAM,aAAa;;;;;;CAMhB,CAAA;AAEV,0CAA0C;AAC1C,MAAM,MAAM,aAAa,GAAG,OAAO,aAAa,CAAC,MAAM,OAAO,aAAa,CAAC,CAAA;AAK5E;;;;;;;;;GASG;AACH,eAAO,MAAM,oBAAoB;;;CAGvB,CAAA;AACV,MAAM,MAAM,oBAAoB,GAAG,OAAO,oBAAoB,CAAC,MAAM,OAAO,oBAAoB,CAAC,CAAA;AAEjG;;;;;;;GAOG;AACH,eAAO,MAAM,YAAY;;;CAGf,CAAA;AACV,MAAM,MAAM,YAAY,GAAG,OAAO,YAAY,CAAC,MAAM,OAAO,YAAY,CAAC,CAAA;AAEzE;;;;;;GAMG;AACH,eAAO,MAAM,qBAAqB;;;;CAIxB,CAAA;AACV,MAAM,MAAM,qBAAqB,GAAG,OAAO,qBAAqB,CAAC,MAAM,OAAO,qBAAqB,CAAC,CAAA;AAKpG,8DAA8D;AAC9D,eAAO,MAAM,mBAAmB;;;;CAItB,CAAA;AACV,MAAM,MAAM,mBAAmB,GAAG,OAAO,mBAAmB,CAAC,MAAM,OAAO,mBAAmB,CAAC,CAAA;AAE9F,oFAAoF;AACpF,eAAO,MAAM,kBAAkB;;;CAGrB,CAAA;AACV,MAAM,MAAM,kBAAkB,GAAG,OAAO,kBAAkB,CAAC,MAAM,OAAO,kBAAkB,CAAC,CAAA;AAE3F;;;;;;;;;GASG;AACH,eAAO,MAAM,eAAe;;;;CAIlB,CAAA;AACV,MAAM,MAAM,eAAe,GAAG,OAAO,eAAe,CAAC,MAAM,OAAO,eAAe,CAAC,CAAA"}

package/dist/enums.js

@@ -13,7 +13,9 @@
  * @module
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.AmendmentSource = exports.DriftDetectionMode = exports.DriftClassification = exports.BypassEnforcementTier = exports.McpProxyMode = exports.McpProxyFailBehavior = exports.WorkspaceRole = exports.RoutingTier = exports.HookPhase = exports.SopType = exports.SopLifecycleState = exports.PlanExecutionOutcome = exports.PlanLifecycleState = exports.IncidentStatus = exports.ExecutionMode = exports.HARNESS_HEADLINE_COUNT = exports.HARNESS_COUNT = exports.HarnessType = exports.AnomalyType = exports.ChangeClassification = exports.ComplexityTier = exports.BudgetTier = exports.TokenUtility = exports.EnforcementAction = exports.RiskLevel = void 0;
+exports.AmendmentSource = exports.DriftDetectionMode = exports.DriftClassification = exports.BypassEnforcementTier = exports.McpProxyMode = exports.McpProxyFailBehavior = exports.WorkspaceRole = exports.RoutingTier = exports.HookPhase = exports.SopType = exports.SopLifecycleState = exports.PlanExecutionOutcome = exports.PlanLifecycleState = exports.INCIDENT_TYPES = exports.IncidentType = exports.SystemIncidentType = exports.IncidentStatus = exports.ExecutionMode = exports.HARNESS_HEADLINE_COUNT = exports.HARNESS_COUNT = exports.HarnessType = exports.AnomalyType = exports.ChangeClassification = exports.ComplexityTier = exports.BudgetTier = exports.TokenUtility = exports.EnforcementAction = exports.RiskLevel = void 0;
+exports.isIncidentType = isIncidentType;
+const anomaly_taxonomy_1 = require("@intutic/anomaly-taxonomy");
 // ─── Risk Level ──────────────────────────────────────────────────────
 // HLD §3.5, LLD §3.1 — risk_level enum
 /** Risk severity classification for SOPs, anomalies, and incidents. */
@@ -109,8 +111,8 @@ exports.ChangeClassification = {
  *
  * Re-exported rather than redeclared so this file cannot become a third copy.
  */
-var anomaly_taxonomy_1 = require("@intutic/anomaly-taxonomy");
-Object.defineProperty(exports, "AnomalyType", { enumerable: true, get: function () { return anomaly_taxonomy_1.AnomalyType; } });
+var anomaly_taxonomy_2 = require("@intutic/anomaly-taxonomy");
+Object.defineProperty(exports, "AnomalyType", { enumerable: true, get: function () { return anomaly_taxonomy_2.AnomalyType; } });
 // ─── Harness Type ────────────────────────────────────────────────────
 // HLD §3.14, §4.5 — Supported AI agent harness integrations
 // Full matrix: HLD §3.14 Harness Onboarding Matrix (31 harnesses — 21
@@ -463,6 +465,32 @@ exports.IncidentStatus = {
     RESOLVED: 'RESOLVED',
     FALSE_POSITIVE: 'FALSE_POSITIVE',
 };
+// ─── Incident Type ───────────────────────────────────────────────────
+/**
+ * Incidents that are not an agent misbehaving, so they are not anomaly
+ * categories: nothing on the hot path detects them, no corrective card
+ * answers them, and enforcement cannot be promoted on them. They share the
+ * `anomaly_type` column (Postgres enum, migrations 218 and 219) with the
+ * taxonomy.
+ */
+exports.SystemIncidentType = {
+    /** A proxy refused to load a custom WASM or Rego rule version (`ruleLoadFailures.ts`). */
+    WASM_RULE_REFUSED: 'WASM_RULE_REFUSED',
+    /**
+     * Anything else a proxy reports on `intutic:system_anomalies`: a
+     * dependency it could not reach, such as the LLM provider or the semantic
+     * cache's embedding service or vector store.
+     */
+    SYSTEM_ANOMALY: 'SYSTEM_ANOMALY',
+};
+/** What a governance incident is filed under: an anomaly category or a system incident type. */
+exports.IncidentType = { ...anomaly_taxonomy_1.AnomalyType, ...exports.SystemIncidentType };
+/** Every incident type, for validating a filter or listing the choices. */
+exports.INCIDENT_TYPES = Object.values(exports.IncidentType);
+/** Whether an arbitrary string is an incident type. */
+function isIncidentType(value) {
+    return exports.INCIDENT_TYPES.includes(value);
+}
 // ─── Plan Lifecycle State ────────────────────────────────────────────
 // HLD §3.4.1 — Stored plan compliance trail lifecycle
 /** Lifecycle state for stored execution plans. */

package/dist/enums.js.map

@@ -1 +1 @@
-{"version":3,"file":"enums.js","sourceRoot":"","sources":["../src/enums.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;GAYG;;;AAEH,wEAAwE;AACxE,uCAAuC;AAEvC,uEAAuE;AAC1D,QAAA,SAAS,GAAG;IACvB,GAAG,EAAE,KAAK;IACV,MAAM,EAAE,QAAQ;IAChB,IAAI,EAAE,MAAM;IACZ,QAAQ,EAAE,UAAU;CACZ,CAAA;AAKV,wEAAwE;AACxE,oDAAoD;AAEpD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACU,QAAA,iBAAiB,GAAG;IAC/B,MAAM,EAAE,QAAQ;IAChB,OAAO,EAAE,SAAS;IAClB,MAAM,EAAE,QAAQ;IAChB,KAAK,EAAE,OAAO;IACd,IAAI,EAAE,MAAM;IACZ,QAAQ,EAAE,UAAU;CACZ,CAAA;AAKV,wEAAwE;AACxE,+CAA+C;AAE/C,0EAA0E;AAC7D,QAAA,YAAY,GAAG;IAC1B,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,QAAQ;CACR,CAAA;AAKV,wEAAwE;AACxE,6CAA6C;AAE7C,kEAAkE;AACrD,QAAA,UAAU,GAAG;IACxB,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,QAAQ;IAChB,KAAK,EAAE,OAAO;IACd,SAAS,EAAE,WAAW;CACd,CAAA;AAKV,wEAAwE;AACxE,4CAA4C;AAE5C,wDAAwD;AAC3C,QAAA,cAAc,GAAG;IAC5B,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,QAAQ;CACR,CAAA;AAKV,uEAAuE;AACvE,kDAAkD;AAElD,qEAAqE;AACxD,QAAA,oBAAoB,GAAG;IAClC,UAAU,EAAE,YAAY;IACxB,OAAO,EAAE,SAAS;IAClB,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,QAAQ;CACR,CAAA;AAKV,wEAAwE;AACxE,wEAAwE;AAExE;;;;;;;;;GASG;AACH,8DAAuD;AAA9C,+GAAA,WAAW,OAAA;AAKpB,wEAAwE;AACxE,4DAA4D;AAC5D,sEAAsE;AACtE,qEAAqE;AACrE,yEAAyE;AACzE,yEAAyE;AACzE,2EAA2E;AAC3E,4EAA4E;AAC5E,qCAAqC;AAErC,mDAAmD;AACtC,QAAA,WAAW,GAAG;IACzB,MAAM,EAAE,QAAQ;IAChB,WAAW,EAAE,aAAa;IAC1B,WAAW,EAAE,aAAa;IAC1B,GAAG,EAAE,KAAK;IACV,KAAK,EAAE,OAAO;IACd,QAAQ,EAAE,UAAU;IACpB,KAAK,EAAE,OAAO;IACd,SAAS,EAAE,WAAW;IACtB,QAAQ,EAAE,UAAU;IACpB,MAAM,EAAE,QAAQ;IAChB,EAAE,EAAE,IAAI;IACR,KAAK,EAAE,OAAO;IACd,QAAQ,EAAE,UAAU;IACpB,QAAQ,EAAE,UAAU;IACpB,cAAc,EAAE,gBAAgB;IAChC,KAAK,EAAE,OAAO;IACd,UAAU,EAAE,YAAY;IACxB,cAAc,EAAE,gBAAgB;IAChC,SAAS,EAAE,WAAW;IACtB,iFAAiF;IACjF,SAAS,EAAE,WAAW;IACtB,2EAA2E;IAC3E,IAAI,EAAE,MAAM;IACZ;;;;+EAI2E;IAC3E,QAAQ,EAAE,UAAU;IACpB;;iEAE6D;IAC7D,gBAAgB,EAAE,KAAK;IACvB;;;;;;;;OAQG;IACH,IAAI,EAAE,MAAM;IACZ;;;;;;;;;;;;;;;;;;;OAmBG;IACH,oBAAoB,EAAE,sBAAsB;IAC5C,4EAA4E;IAC5E,sEAAsE;IACtE,4EAA4E;IAC5E,4EAA4E;IAC5E,6EAA6E;IAC7E;;;;;+DAK2D;IAC3D,SAAS,EAAE,WAAW;IACtB,MAAM,EAAE,QAAQ;IAChB,0EAA0E;IAC1E,OAAO,EAAE,SAAS;IAClB,GAAG,EAAE,KAAK;IACV,UAAU,EAAE,YAAY;IACxB;;;;;;;;6DAQyD;IACzD,aAAa,EAAE,eAAe;IAC9B,mDAAmD;IACnD,WAAW,EAAE,aAAa;IAC1B,UAAU,EAAE,YAAY;IACxB;;;;;;;iEAO6D;IAC7D,OAAO,EAAE,SAAS;IAClB;;;;;;;iDAO6C;IAC7C,eAAe,EAAE,iBAAiB;IAClC,2EAA2E;IAC3E,2EAA2E;IAC3E,wEAAwE;IACxE,kEAAkE;IAClE,kEAAkE;IAClE,4EAA4E;IAC5E;;kFAE8E;IAC9E,MAAM,EAAE,QAAQ;IAChB;;;4EAGwE;IACxE,aAAa,EAAE,eAAe;IAC9B;;;;;;;4CAOwC;IACxC,GAAG,EAAE,KAAK;IACV;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA4BG;IACH,SAAS,EAAE,WAAW;IACtB,2EAA2E;IAC3E,oEAAoE;IACpE,oEAAoE;IACpE,qEAAqE;IACrE,yEAAyE;IACzE,2EAA2E;IAC3E;;;;;;;;0DAQsD;IACtD,cAAc,EAAE,gBAAgB;IAChC;;;;;;;gFAO4E;IAC5E,eAAe,EAAE,iBAAiB;IAClC,4EAA4E;IAC5E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA2CG;IACH,iBAAiB,EAAE,mBAAmB;IACtC,2EAA2E;IAC3E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAgDG;IACH,gBAAgB,EAAE,kBAAkB;CAC5B,CAAA;AAKV;;;;;;;GAOG;AACU,QAAA,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,mBAAW,CAAC,CAAC,MAAM,CAAA;AAE5D;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACU,QAAA,sBAAsB,GAAG,qBAAa,GAAG,EAAE,CAAC,MAAM,CAAA;AAE/D,wEAAwE;AACxE,mCAAmC;AAEnC,uDAAuD;AAC1C,QAAA,aAAa,GAAG;IAC3B,QAAQ,EAAE,UAAU;IACpB,SAAS,EAAE,WAAW;IACtB,MAAM,EAAE,QAAQ;IAChB,UAAU,EAAE,YAAY;CAChB,CAAA;AAKV,wEAAwE;AACxE,uDAAuD;AAEvD,gDAAgD;AACnC,QAAA,cAAc,GAAG;IAC5B,IAAI,EAAE,MAAM;IACZ,YAAY,EAAE,cAAc;IAC5B,QAAQ,EAAE,UAAU;IACpB,cAAc,EAAE,gBAAgB;CACxB,CAAA;AAKV,wEAAwE;AACxE,sDAAsD;AAEtD,kDAAkD;AACrC,QAAA,kBAAkB,GAAG;IAChC,gBAAgB,EAAE,kBAAkB;IACpC,QAAQ,EAAE,UAAU;IACpB,QAAQ,EAAE,UAAU;IACpB,SAAS,EAAE,WAAW;IACtB,SAAS,EAAE,WAAW;CACd,CAAA;AAKV,wEAAwE;AACxE,8DAA8D;AAC9D,qEAAqE;AACrE,oEAAoE;AAEpE,4DAA4D;AAC/C,QAAA,oBAAoB,GAAG;IAClC,OAAO,EAAE,SAAS;IAClB,MAAM,EAAE,QAAQ;IAChB,OAAO,EAAE,SAAS;IAClB,OAAO,EAAE,SAAS;CACV,CAAA;AAKV,wEAAwE;AACxE,6DAA6D;AAC7D,uDAAuD;AAEvD,gDAAgD;AACnC,QAAA,iBAAiB,GAAG;IAC/B,KAAK,EAAE,OAAO;IACd,cAAc,EAAE,gBAAgB;IAChC,SAAS,EAAE,WAAW;IACtB,YAAY,EAAE,cAAc;IAC5B,OAAO,EAAE,SAAS;IAClB,SAAS,EAAE,WAAW;IACtB,WAAW,EAAE,aAAa;CAClB,CAAA;AAKV,wEAAwE;AACxE,uCAAuC;AAEvC,yDAAyD;AAC5C,QAAA,OAAO,GAAG;IACrB,wDAAwD;IACxD,QAAQ,EAAE,UAAU;IACpB,sEAAsE;IACtE,IAAI,EAAE,MAAM;CACJ,CAAA;AAKV,wEAAwE;AACxE,oCAAoC;AAEpC,kDAAkD;AACrC,QAAA,SAAS,GAAG;IACvB,mCAAmC;IACnC,QAAQ,EAAE,UAAU;IACpB,kCAAkC;IAClC,SAAS,EAAE,WAAW;IACtB,yCAAyC;IACzC,YAAY,EAAE,cAAc;IAC5B,mCAAmC;IACnC,aAAa,EAAE,eAAe;CACtB,CAAA;AAKV,wEAAwE;AACxE,yDAAyD;AAEzD,gDAAgD;AACnC,QAAA,WAAW,GAAG;IACzB,QAAQ,EAAE,UAAU;IACpB,OAAO,EAAE,SAAS;IAClB,KAAK,EAAE,OAAO;CACN,CAAA;AAKV,wEAAwE;AACxE,iCAAiC;AAEjC,+EAA+E;AAClE,QAAA,aAAa,GAAG;IAC3B,KAAK,EAAE,OAAO;IACd,KAAK,EAAE,OAAO;IACd,EAAE,EAAE,IAAI;IACR,SAAS,EAAE,WAAW;IACtB,MAAM,EAAE,QAAQ;CACR,CAAA;AAKV,wEAAwE;AACxE,sEAAsE;AAEtE;;;;;;;;;GASG;AACU,QAAA,oBAAoB,GAAG;IAClC,IAAI,EAAI,MAAM;IACd,MAAM,EAAE,QAAQ;CACR,CAAA;AAGV;;;;;;;GAOG;AACU,QAAA,YAAY,GAAG;IAC1B,WAAW,EAAE,aAAa;IAC1B,MAAM,EAAO,QAAQ;CACb,CAAA;AAGV;;;;;;GAMG;AACU,QAAA,qBAAqB,GAAG;IACnC,OAAO,EAAK,SAAS;IACrB,SAAS,EAAG,WAAW;IACvB,UAAU,EAAE,YAAY;CAChB,CAAA;AAGV,wEAAwE;AACxE,+BAA+B;AAE/B,8DAA8D;AACjD,QAAA,mBAAmB,GAAG;IACjC,cAAc,EAAE,gBAAgB;IAChC,cAAc,EAAE,gBAAgB;IAChC,aAAa,EAAG,eAAe;CACvB,CAAA;AAGV,oFAAoF;AACvE,QAAA,kBAAkB,GAAG;IAChC,QAAQ,EAAmB,UAAU;IACrC,yBAAyB,EAAE,2BAA2B;CAC9C,CAAA;AAGV;;;;;;;;;GASG;AACU,QAAA,eAAe,GAAG;IAC7B,eAAe,EAAE,iBAAiB;IAClC,QAAQ,EAAE,UAAU;IACpB,WAAW,EAAE,aAAa;CAClB,CAAA"}
+{"version":3,"file":"enums.js","sourceRoot":"","sources":["../src/enums.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;GAYG;;;AAyhBH,wCAEC;AAzhBD,gEAA4E;AAE5E,wEAAwE;AACxE,uCAAuC;AAEvC,uEAAuE;AAC1D,QAAA,SAAS,GAAG;IACvB,GAAG,EAAE,KAAK;IACV,MAAM,EAAE,QAAQ;IAChB,IAAI,EAAE,MAAM;IACZ,QAAQ,EAAE,UAAU;CACZ,CAAA;AAKV,wEAAwE;AACxE,oDAAoD;AAEpD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACU,QAAA,iBAAiB,GAAG;IAC/B,MAAM,EAAE,QAAQ;IAChB,OAAO,EAAE,SAAS;IAClB,MAAM,EAAE,QAAQ;IAChB,KAAK,EAAE,OAAO;IACd,IAAI,EAAE,MAAM;IACZ,QAAQ,EAAE,UAAU;CACZ,CAAA;AAKV,wEAAwE;AACxE,+CAA+C;AAE/C,0EAA0E;AAC7D,QAAA,YAAY,GAAG;IAC1B,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,QAAQ;CACR,CAAA;AAKV,wEAAwE;AACxE,6CAA6C;AAE7C,kEAAkE;AACrD,QAAA,UAAU,GAAG;IACxB,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,QAAQ;IAChB,KAAK,EAAE,OAAO;IACd,SAAS,EAAE,WAAW;CACd,CAAA;AAKV,wEAAwE;AACxE,4CAA4C;AAE5C,wDAAwD;AAC3C,QAAA,cAAc,GAAG;IAC5B,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,QAAQ;CACR,CAAA;AAKV,uEAAuE;AACvE,kDAAkD;AAElD,qEAAqE;AACxD,QAAA,oBAAoB,GAAG;IAClC,UAAU,EAAE,YAAY;IACxB,OAAO,EAAE,SAAS;IAClB,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,QAAQ;CACR,CAAA;AAKV,wEAAwE;AACxE,wEAAwE;AAExE;;;;;;;;;GASG;AACH,8DAAuD;AAA9C,+GAAA,WAAW,OAAA;AAKpB,wEAAwE;AACxE,4DAA4D;AAC5D,sEAAsE;AACtE,qEAAqE;AACrE,yEAAyE;AACzE,yEAAyE;AACzE,2EAA2E;AAC3E,4EAA4E;AAC5E,qCAAqC;AAErC,mDAAmD;AACtC,QAAA,WAAW,GAAG;IACzB,MAAM,EAAE,QAAQ;IAChB,WAAW,EAAE,aAAa;IAC1B,WAAW,EAAE,aAAa;IAC1B,GAAG,EAAE,KAAK;IACV,KAAK,EAAE,OAAO;IACd,QAAQ,EAAE,UAAU;IACpB,KAAK,EAAE,OAAO;IACd,SAAS,EAAE,WAAW;IACtB,QAAQ,EAAE,UAAU;IACpB,MAAM,EAAE,QAAQ;IAChB,EAAE,EAAE,IAAI;IACR,KAAK,EAAE,OAAO;IACd,QAAQ,EAAE,UAAU;IACpB,QAAQ,EAAE,UAAU;IACpB,cAAc,EAAE,gBAAgB;IAChC,KAAK,EAAE,OAAO;IACd,UAAU,EAAE,YAAY;IACxB,cAAc,EAAE,gBAAgB;IAChC,SAAS,EAAE,WAAW;IACtB,iFAAiF;IACjF,SAAS,EAAE,WAAW;IACtB,2EAA2E;IAC3E,IAAI,EAAE,MAAM;IACZ;;;;+EAI2E;IAC3E,QAAQ,EAAE,UAAU;IACpB;;iEAE6D;IAC7D,gBAAgB,EAAE,KAAK;IACvB;;;;;;;;OAQG;IACH,IAAI,EAAE,MAAM;IACZ;;;;;;;;;;;;;;;;;;;OAmBG;IACH,oBAAoB,EAAE,sBAAsB;IAC5C,4EAA4E;IAC5E,sEAAsE;IACtE,4EAA4E;IAC5E,4EAA4E;IAC5E,6EAA6E;IAC7E;;;;;+DAK2D;IAC3D,SAAS,EAAE,WAAW;IACtB,MAAM,EAAE,QAAQ;IAChB,0EAA0E;IAC1E,OAAO,EAAE,SAAS;IAClB,GAAG,EAAE,KAAK;IACV,UAAU,EAAE,YAAY;IACxB;;;;;;;;6DAQyD;IACzD,aAAa,EAAE,eAAe;IAC9B,mDAAmD;IACnD,WAAW,EAAE,aAAa;IAC1B,UAAU,EAAE,YAAY;IACxB;;;;;;;iEAO6D;IAC7D,OAAO,EAAE,SAAS;IAClB;;;;;;;iDAO6C;IAC7C,eAAe,EAAE,iBAAiB;IAClC,2EAA2E;IAC3E,2EAA2E;IAC3E,wEAAwE;IACxE,kEAAkE;IAClE,kEAAkE;IAClE,4EAA4E;IAC5E;;kFAE8E;IAC9E,MAAM,EAAE,QAAQ;IAChB;;;4EAGwE;IACxE,aAAa,EAAE,eAAe;IAC9B;;;;;;;4CAOwC;IACxC,GAAG,EAAE,KAAK;IACV;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA4BG;IACH,SAAS,EAAE,WAAW;IACtB,2EAA2E;IAC3E,oEAAoE;IACpE,oEAAoE;IACpE,qEAAqE;IACrE,yEAAyE;IACzE,2EAA2E;IAC3E;;;;;;;;0DAQsD;IACtD,cAAc,EAAE,gBAAgB;IAChC;;;;;;;gFAO4E;IAC5E,eAAe,EAAE,iBAAiB;IAClC,4EAA4E;IAC5E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA2CG;IACH,iBAAiB,EAAE,mBAAmB;IACtC,2EAA2E;IAC3E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAgDG;IACH,gBAAgB,EAAE,kBAAkB;CAC5B,CAAA;AAKV;;;;;;;GAOG;AACU,QAAA,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,mBAAW,CAAC,CAAC,MAAM,CAAA;AAE5D;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACU,QAAA,sBAAsB,GAAG,qBAAa,GAAG,EAAE,CAAC,MAAM,CAAA;AAE/D,wEAAwE;AACxE,mCAAmC;AAEnC,uDAAuD;AAC1C,QAAA,aAAa,GAAG;IAC3B,QAAQ,EAAE,UAAU;IACpB,SAAS,EAAE,WAAW;IACtB,MAAM,EAAE,QAAQ;IAChB,UAAU,EAAE,YAAY;CAChB,CAAA;AAKV,wEAAwE;AACxE,uDAAuD;AAEvD,gDAAgD;AACnC,QAAA,cAAc,GAAG;IAC5B,IAAI,EAAE,MAAM;IACZ,YAAY,EAAE,cAAc;IAC5B,QAAQ,EAAE,UAAU;IACpB,cAAc,EAAE,gBAAgB;CACxB,CAAA;AAKV,wEAAwE;AAExE;;;;;;GAMG;AACU,QAAA,kBAAkB,GAAG;IAChC,0FAA0F;IAC1F,iBAAiB,EAAE,mBAAmB;IACtC;;;;OAIG;IACH,cAAc,EAAE,gBAAgB;CACxB,CAAA;AAKV,gGAAgG;AACnF,QAAA,YAAY,GAAG,EAAE,GAAG,8BAAiB,EAAE,GAAG,0BAAkB,EAAW,CAAA;AAKpF,2EAA2E;AAC9D,QAAA,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,oBAAY,CAAsC,CAAA;AAE9F,uDAAuD;AACvD,SAAgB,cAAc,CAAC,KAAc;IAC3C,OAAQ,sBAAqC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;AAC/D,CAAC;AAED,wEAAwE;AACxE,sDAAsD;AAEtD,kDAAkD;AACrC,QAAA,kBAAkB,GAAG;IAChC,gBAAgB,EAAE,kBAAkB;IACpC,QAAQ,EAAE,UAAU;IACpB,QAAQ,EAAE,UAAU;IACpB,SAAS,EAAE,WAAW;IACtB,SAAS,EAAE,WAAW;CACd,CAAA;AAKV,wEAAwE;AACxE,8DAA8D;AAC9D,qEAAqE;AACrE,oEAAoE;AAEpE,4DAA4D;AAC/C,QAAA,oBAAoB,GAAG;IAClC,OAAO,EAAE,SAAS;IAClB,MAAM,EAAE,QAAQ;IAChB,OAAO,EAAE,SAAS;IAClB,OAAO,EAAE,SAAS;CACV,CAAA;AAKV,wEAAwE;AACxE,6DAA6D;AAC7D,uDAAuD;AAEvD,gDAAgD;AACnC,QAAA,iBAAiB,GAAG;IAC/B,KAAK,EAAE,OAAO;IACd,cAAc,EAAE,gBAAgB;IAChC,SAAS,EAAE,WAAW;IACtB,YAAY,EAAE,cAAc;IAC5B,OAAO,EAAE,SAAS;IAClB,SAAS,EAAE,WAAW;IACtB,WAAW,EAAE,aAAa;CAClB,CAAA;AAKV,wEAAwE;AACxE,uCAAuC;AAEvC,yDAAyD;AAC5C,QAAA,OAAO,GAAG;IACrB,wDAAwD;IACxD,QAAQ,EAAE,UAAU;IACpB,sEAAsE;IACtE,IAAI,EAAE,MAAM;CACJ,CAAA;AAKV,wEAAwE;AACxE,oCAAoC;AAEpC,kDAAkD;AACrC,QAAA,SAAS,GAAG;IACvB,mCAAmC;IACnC,QAAQ,EAAE,UAAU;IACpB,kCAAkC;IAClC,SAAS,EAAE,WAAW;IACtB,yCAAyC;IACzC,YAAY,EAAE,cAAc;IAC5B,mCAAmC;IACnC,aAAa,EAAE,eAAe;CACtB,CAAA;AAKV,wEAAwE;AACxE,yDAAyD;AAEzD,gDAAgD;AACnC,QAAA,WAAW,GAAG;IACzB,QAAQ,EAAE,UAAU;IACpB,OAAO,EAAE,SAAS;IAClB,KAAK,EAAE,OAAO;CACN,CAAA;AAKV,wEAAwE;AACxE,iCAAiC;AAEjC,+EAA+E;AAClE,QAAA,aAAa,GAAG;IAC3B,KAAK,EAAE,OAAO;IACd,KAAK,EAAE,OAAO;IACd,EAAE,EAAE,IAAI;IACR,SAAS,EAAE,WAAW;IACtB,MAAM,EAAE,QAAQ;CACR,CAAA;AAKV,wEAAwE;AACxE,sEAAsE;AAEtE;;;;;;;;;GASG;AACU,QAAA,oBAAoB,GAAG;IAClC,IAAI,EAAI,MAAM;IACd,MAAM,EAAE,QAAQ;CACR,CAAA;AAGV;;;;;;;GAOG;AACU,QAAA,YAAY,GAAG;IAC1B,WAAW,EAAE,aAAa;IAC1B,MAAM,EAAO,QAAQ;CACb,CAAA;AAGV;;;;;;GAMG;AACU,QAAA,qBAAqB,GAAG;IACnC,OAAO,EAAK,SAAS;IACrB,SAAS,EAAG,WAAW;IACvB,UAAU,EAAE,YAAY;CAChB,CAAA;AAGV,wEAAwE;AACxE,+BAA+B;AAE/B,8DAA8D;AACjD,QAAA,mBAAmB,GAAG;IACjC,cAAc,EAAE,gBAAgB;IAChC,cAAc,EAAE,gBAAgB;IAChC,aAAa,EAAG,eAAe;CACvB,CAAA;AAGV,oFAAoF;AACvE,QAAA,kBAAkB,GAAG;IAChC,QAAQ,EAAmB,UAAU;IACrC,yBAAyB,EAAE,2BAA2B;CAC9C,CAAA;AAGV;;;;;;;;;GASG;AACU,QAAA,eAAe,GAAG;IAC7B,eAAe,EAAE,iBAAiB;IAClC,QAAQ,EAAE,UAAU;IACpB,WAAW,EAAE,aAAa;CAClB,CAAA"}

package/dist/finops.d.ts

@@ -120,24 +120,6 @@ export interface CostBreakdown {
     /** Total savings from cache hits (USD). */
     cacheSavings: number;
 }
-/**
- * Four-dimensional attribution key for FinOps rollup.
- *
- * Maps to the `finops_attribution_4d` materialized view's grouping dimensions:
- * Person × Harness × App × Agent Chain.
- *
- * HLD §3.19, LLD §3.1 — finops_attribution_4d materialized view
- */
-export interface Attribution4D {
-    /** User/person identifier. */
-    personId: string;
-    /** Harness/IDE type that produced the cost. */
-    harnessType: string;
-    /** Optional application identifier. */
-    appId?: string;
-    /** Optional agent chain identifier. */
-    agentChainId?: string;
-}
 /** Summary row for listing traces in the UI. */
 export interface TraceSummary {
     traceId: string;
@@ -192,6 +174,37 @@ export interface TraceStep {
     latencyMs: number | null;
     timestamp: string;
 }
+/**
+ * One upstream call the LLM proxy made for a request: a retry of the routed
+ * model or a fallback target. `outcome` is `ok`, `http_<status>`, `timeout`,
+ * `connect_error`, `transport_error`, or `skipped` for a fallback target that
+ * was not called; `stopped` says why no further call was made (`max_attempts`,
+ * `time_budget`, `retry_after_exceeds_budget`, `provider_declined`,
+ * `quota_exhausted`) or, for a skipped target, why it was skipped
+ * (`same_target`, `wire_mismatch`, `model_not_allowed`, `budget` — priced
+ * for its model, the request would not fit a spend budget — `no_credential`,
+ * `unknown_provider`, `time_budget`).
+ */
+export interface UpstreamAttempt {
+    model: string;
+    provider: string;
+    outcome: string;
+    status?: number;
+    latencyMs: number;
+    /** The wait before the next call. */
+    backoffMs?: number;
+    /** True when that wait was the provider's own `retry-after`. */
+    serverDelay?: boolean;
+    stopped?: string;
+}
+/** The fallback target that served a request after the routed model's retries ran out. */
+export interface UpstreamFallback {
+    fromModel: string;
+    toModel: string;
+    toProvider: string;
+    /** True when the routed model's prompt cache was warm and the fallback is another model family. */
+    cacheAffinityBroken?: boolean;
+}
 /** Full detail of a single trace. */
 export interface TraceDetail {
     traceId: string;
@@ -252,6 +265,13 @@ export interface TraceDetail {
      * it back is what the shadow-routing savings report aggregates.
      */
     routingShadowModel?: string | null;
+    /**
+     * Every upstream call the proxy made when it retried or ran fallbacks, in
+     * order (migration 216). Null for the ordinary request that took one call.
+     */
+    upstreamAttempts?: UpstreamAttempt[] | null;
+    /** The fallback target that served the request, or null when none did (migration 216). */
+    upstreamFallback?: UpstreamFallback | null;
     /** True when the request was served under a valid break-glass token, global or scoped (migration 170). */
     breakGlass?: boolean;
     /** The approval this trace ran under; what it skipped is that approval's `policyId`. */

package/dist/finops.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"finops.d.ts","sourceRoot":"","sources":["../src/finops.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EACV,WAAW,EACX,iBAAiB,EACjB,WAAW,EACX,YAAY,EACb,MAAM,YAAY,CAAA;AAInB;;;;;GAKG;AACH,eAAO,MAAM,wBAAwB,MAAM,CAAA;AAE3C;;;GAGG;AACH,eAAO,MAAM,0BAA0B,MAAM,CAAA;AAI7C;;;;;;;;GAQG;AACH,MAAM,WAAW,UAAU;IACzB,+CAA+C;IAC/C,OAAO,EAAE,MAAM,CAAA;IAEf,iEAAiE;IACjE,SAAS,EAAE,MAAM,CAAA;IAEjB,2CAA2C;IAC3C,SAAS,EAAE,MAAM,CAAA;IAEjB,oCAAoC;IACpC,SAAS,EAAE,MAAM,CAAA;IAEjB,qDAAqD;IACrD,gBAAgB,EAAE,MAAM,CAAA;IAGxB,yCAAyC;IACzC,cAAc,EAAE,MAAM,CAAA;IAEtB,yDAAyD;IACzD,iBAAiB,EAAE,MAAM,CAAA;IAEzB,kCAAkC;IAClC,WAAW,EAAE,WAAW,CAAA;IAExB,mDAAmD;IACnD,eAAe,EAAE,MAAM,CAAA;IAGvB,2CAA2C;IAC3C,cAAc,EAAE,MAAM,CAAA;IAEtB;;;;;OAKG;IACH,qBAAqB,EAAE,MAAM,CAAA;IAE7B;;;;;OAKG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAE7B,+BAA+B;IAC/B,YAAY,EAAE,MAAM,CAAA;IAGpB,wCAAwC;IACxC,UAAU,EAAE,MAAM,CAAA;IAElB,oDAAoD;IACpD,aAAa,EAAE,MAAM,CAAA;IAErB,kEAAkE;IAClE,UAAU,EAAE,MAAM,CAAA;IAGlB,oDAAoD;IACpD,YAAY,EAAE,YAAY,CAAA;IAE1B,0CAA0C;IAC1C,iBAAiB,EAAE,MAAM,CAAA;IAGzB,yDAAyD;IACzD,eAAe,EAAE,MAAM,CAAA;IAEvB,+CAA+C;IAC/C,iBAAiB,EAAE,iBAAiB,CAAA;IAGpC,qCAAqC;IACrC,eAAe,EAAE,WAAW,GAAG,IAAI,CAAA;IAEnC,oDAAoD;IACpD,sBAAsB,EAAE,MAAM,GAAG,IAAI,CAAA;IAErC,4CAA4C;IAC5C,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;IAGhD,yDAAyD;IACzD,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;IAG9C,8CAA8C;IAC9C,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IAEpB,8CAA8C;IAC9C,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAE3B,0CAA0C;IAC1C,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;IAG1C,+CAA+C;IAC/C,QAAQ,EAAE,OAAO,CAAA;IAEjB,oCAAoC;IACpC,eAAe,EAAE,MAAM,CAAA;IAGvB,uDAAuD;IACvD,oBAAoB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;IAEpD,yDAAyD;IACzD,oBAAoB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;CACrD;AAID;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,qCAAqC;IACrC,OAAO,EAAE,MAAM,CAAA;IAEf,4CAA4C;IAC5C,UAAU,EAAE,MAAM,CAAA;IAElB,8CAA8C;IAC9C,OAAO,EAAE,MAAM,CAAA;IAEf,2CAA2C;IAC3C,YAAY,EAAE,MAAM,CAAA;CACrB;AAID;;;;;;;GAOG;AACH,MAAM,WAAW,aAAa;IAC5B,8BAA8B;IAC9B,QAAQ,EAAE,MAAM,CAAA;IAEhB,+CAA+C;IAC/C,WAAW,EAAE,MAAM,CAAA;IAEnB,uCAAuC;IACvC,KAAK,CAAC,EAAE,MAAM,CAAA;IAEd,uCAAuC;IACvC,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB;AAID,gDAAgD;AAChD,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,MAAM,CAAA;IACjB,cAAc,EAAE,MAAM,CAAA;IACtB,iBAAiB,EAAE,MAAM,CAAA;IACzB,iBAAiB,EAAE,iBAAiB,GAAG,MAAM,CAAA;IAC7C,eAAe,EAAE,MAAM,CAAA;IACvB,aAAa,EAAE,MAAM,CAAA;IACrB,eAAe,EAAE,WAAW,GAAG,MAAM,GAAG,IAAI,CAAA;IAC5C,0GAA0G;IAC1G,UAAU,CAAC,EAAE,OAAO,CAAA;IACpB,8GAA8G;IAC9G,mBAAmB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CACpC;AAED,2CAA2C;AAC3C,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,YAAY,EAAE,CAAA;IACtB,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;CACf;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,CAAA;IAClB,WAAW,EAAE,MAAM,CAAA;IACnB,QAAQ,EAAE,MAAM,CAAA;IAChB,mEAAmE;IACnE,WAAW,EAAE,MAAM,CAAA;IACnB,UAAU,EAAE,MAAM,CAAA;IAClB,MAAM,EAAE,MAAM,CAAA;IACd,2EAA2E;IAC3E,QAAQ,EAAE,OAAO,CAAA;CAClB;AAED,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,MAAM,CAAA;IACb,QAAQ,EAAE,MAAM,CAAA;IAChB,aAAa,EAAE,OAAO,CAAA;IACtB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,EAAE,MAAM,CAAA;IAClB,MAAM,EAAE,MAAM,CAAA;IACd,YAAY,EAAE,OAAO,CAAA;IACrB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,qCAAqC;AACrC,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,gBAAgB,EAAE,MAAM,CAAA;IACxB,cAAc,EAAE,MAAM,CAAA;IACtB,iBAAiB,EAAE,MAAM,CAAA;IACzB,WAAW,EAAE,WAAW,GAAG,MAAM,CAAA;IACjC,eAAe,EAAE,MAAM,CAAA;IACvB,cAAc,EAAE,MAAM,CAAA;IACtB,qBAAqB,EAAE,MAAM,CAAA;IAC7B,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAC7B,YAAY,EAAE,MAAM,CAAA;IACpB,UAAU,EAAE,MAAM,CAAA;IAClB,aAAa,EAAE,MAAM,CAAA;IACrB,UAAU,EAAE,MAAM,CAAA;IAClB,yFAAyF;IACzF,wBAAwB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACxC,YAAY,EAAE,YAAY,GAAG,MAAM,CAAA;IACnC,iBAAiB,EAAE,MAAM,CAAA;IACzB,eAAe,EAAE,MAAM,CAAA;IACvB,iBAAiB,EAAE,iBAAiB,GAAG,MAAM,CAAA;IAC7C,eAAe,EAAE,WAAW,GAAG,MAAM,GAAG,IAAI,CAAA;IAC5C,sBAAsB,EAAE,MAAM,GAAG,IAAI,CAAA;IACrC,gBAAgB,EAAE,OAAO,GAAG,IAAI,CAAA;IAChC,oBAAoB,EAAE,OAAO,GAAG,IAAI,CAAA;IACpC,oBAAoB,EAAE,OAAO,GAAG,IAAI,CAAA;IACpC,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC/B;;;;;;OAMG;IACH,oBAAoB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACpC,wBAAwB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACxC,eAAe,CAAC,EAAE,OAAO,GAAG,IAAI,CAAA;IAChC;;;;;OAKG;IACH,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACjC;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B;;;;;OAKG;IACH,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAClC,0GAA0G;IAC1G,UAAU,CAAC,EAAE,OAAO,CAAA;IACpB,wFAAwF;IACxF,mBAAmB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACnC;;;OAGG;IACH,cAAc,CAAC,EAAE,mBAAmB,EAAE,GAAG,IAAI,CAAA;IAC7C,KAAK,CAAC,EAAE,SAAS,EAAE,CAAA;IACnB;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,mBAAmB,EAAE,CAAA;CACjC;AAED;;;GAGG;AACH,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAA;IACZ,EAAE,EAAE,OAAO,GAAG,MAAM,GAAG,QAAQ,GAAG,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,CAAA;IACnF,MAAM,EAAE,MAAM,CAAA;IACd,WAAW,EAAE,MAAM,GAAG,KAAK,GAAG,SAAS,GAAG,QAAQ,CAAA;IAClD,IAAI,CAAC,EAAE,MAAM,EAAE,CAAA;IACf,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED,+BAA+B;AAC/B,MAAM,WAAW,YAAY;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB"}
+{"version":3,"file":"finops.d.ts","sourceRoot":"","sources":["../src/finops.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EACV,WAAW,EACX,iBAAiB,EACjB,WAAW,EACX,YAAY,EACb,MAAM,YAAY,CAAA;AAInB;;;;;GAKG;AACH,eAAO,MAAM,wBAAwB,MAAM,CAAA;AAE3C;;;GAGG;AACH,eAAO,MAAM,0BAA0B,MAAM,CAAA;AAI7C;;;;;;;;GAQG;AACH,MAAM,WAAW,UAAU;IACzB,+CAA+C;IAC/C,OAAO,EAAE,MAAM,CAAA;IAEf,iEAAiE;IACjE,SAAS,EAAE,MAAM,CAAA;IAEjB,2CAA2C;IAC3C,SAAS,EAAE,MAAM,CAAA;IAEjB,oCAAoC;IACpC,SAAS,EAAE,MAAM,CAAA;IAEjB,qDAAqD;IACrD,gBAAgB,EAAE,MAAM,CAAA;IAGxB,yCAAyC;IACzC,cAAc,EAAE,MAAM,CAAA;IAEtB,yDAAyD;IACzD,iBAAiB,EAAE,MAAM,CAAA;IAEzB,kCAAkC;IAClC,WAAW,EAAE,WAAW,CAAA;IAExB,mDAAmD;IACnD,eAAe,EAAE,MAAM,CAAA;IAGvB,2CAA2C;IAC3C,cAAc,EAAE,MAAM,CAAA;IAEtB;;;;;OAKG;IACH,qBAAqB,EAAE,MAAM,CAAA;IAE7B;;;;;OAKG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAE7B,+BAA+B;IAC/B,YAAY,EAAE,MAAM,CAAA;IAGpB,wCAAwC;IACxC,UAAU,EAAE,MAAM,CAAA;IAElB,oDAAoD;IACpD,aAAa,EAAE,MAAM,CAAA;IAErB,kEAAkE;IAClE,UAAU,EAAE,MAAM,CAAA;IAGlB,oDAAoD;IACpD,YAAY,EAAE,YAAY,CAAA;IAE1B,0CAA0C;IAC1C,iBAAiB,EAAE,MAAM,CAAA;IAGzB,yDAAyD;IACzD,eAAe,EAAE,MAAM,CAAA;IAEvB,+CAA+C;IAC/C,iBAAiB,EAAE,iBAAiB,CAAA;IAGpC,qCAAqC;IACrC,eAAe,EAAE,WAAW,GAAG,IAAI,CAAA;IAEnC,oDAAoD;IACpD,sBAAsB,EAAE,MAAM,GAAG,IAAI,CAAA;IAErC,4CAA4C;IAC5C,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;IAGhD,yDAAyD;IACzD,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;IAG9C,8CAA8C;IAC9C,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IAEpB,8CAA8C;IAC9C,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAE3B,0CAA0C;IAC1C,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;IAG1C,+CAA+C;IAC/C,QAAQ,EAAE,OAAO,CAAA;IAEjB,oCAAoC;IACpC,eAAe,EAAE,MAAM,CAAA;IAGvB,uDAAuD;IACvD,oBAAoB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;IAEpD,yDAAyD;IACzD,oBAAoB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;CACrD;AAID;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,qCAAqC;IACrC,OAAO,EAAE,MAAM,CAAA;IAEf,4CAA4C;IAC5C,UAAU,EAAE,MAAM,CAAA;IAElB,8CAA8C;IAC9C,OAAO,EAAE,MAAM,CAAA;IAEf,2CAA2C;IAC3C,YAAY,EAAE,MAAM,CAAA;CACrB;AAID,gDAAgD;AAChD,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,MAAM,CAAA;IACjB,cAAc,EAAE,MAAM,CAAA;IACtB,iBAAiB,EAAE,MAAM,CAAA;IACzB,iBAAiB,EAAE,iBAAiB,GAAG,MAAM,CAAA;IAC7C,eAAe,EAAE,MAAM,CAAA;IACvB,aAAa,EAAE,MAAM,CAAA;IACrB,eAAe,EAAE,WAAW,GAAG,MAAM,GAAG,IAAI,CAAA;IAC5C,0GAA0G;IAC1G,UAAU,CAAC,EAAE,OAAO,CAAA;IACpB,8GAA8G;IAC9G,mBAAmB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CACpC;AAED,2CAA2C;AAC3C,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,YAAY,EAAE,CAAA;IACtB,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;CACf;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,CAAA;IAClB,WAAW,EAAE,MAAM,CAAA;IACnB,QAAQ,EAAE,MAAM,CAAA;IAChB,mEAAmE;IACnE,WAAW,EAAE,MAAM,CAAA;IACnB,UAAU,EAAE,MAAM,CAAA;IAClB,MAAM,EAAE,MAAM,CAAA;IACd,2EAA2E;IAC3E,QAAQ,EAAE,OAAO,CAAA;CAClB;AAED,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,MAAM,CAAA;IACb,QAAQ,EAAE,MAAM,CAAA;IAChB,aAAa,EAAE,OAAO,CAAA;IACtB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,EAAE,MAAM,CAAA;IAClB,MAAM,EAAE,MAAM,CAAA;IACd,YAAY,EAAE,OAAO,CAAA;IACrB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,SAAS,EAAE,MAAM,CAAA;CAClB;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAA;IACb,QAAQ,EAAE,MAAM,CAAA;IAChB,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,MAAM,CAAA;IACjB,qCAAqC;IACrC,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,gEAAgE;IAChE,WAAW,CAAC,EAAE,OAAO,CAAA;IACrB,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAED,0FAA0F;AAC1F,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,EAAE,MAAM,CAAA;IAClB,mGAAmG;IACnG,mBAAmB,CAAC,EAAE,OAAO,CAAA;CAC9B;AAED,qCAAqC;AACrC,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,gBAAgB,EAAE,MAAM,CAAA;IACxB,cAAc,EAAE,MAAM,CAAA;IACtB,iBAAiB,EAAE,MAAM,CAAA;IACzB,WAAW,EAAE,WAAW,GAAG,MAAM,CAAA;IACjC,eAAe,EAAE,MAAM,CAAA;IACvB,cAAc,EAAE,MAAM,CAAA;IACtB,qBAAqB,EAAE,MAAM,CAAA;IAC7B,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAC7B,YAAY,EAAE,MAAM,CAAA;IACpB,UAAU,EAAE,MAAM,CAAA;IAClB,aAAa,EAAE,MAAM,CAAA;IACrB,UAAU,EAAE,MAAM,CAAA;IAClB,yFAAyF;IACzF,wBAAwB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACxC,YAAY,EAAE,YAAY,GAAG,MAAM,CAAA;IACnC,iBAAiB,EAAE,MAAM,CAAA;IACzB,eAAe,EAAE,MAAM,CAAA;IACvB,iBAAiB,EAAE,iBAAiB,GAAG,MAAM,CAAA;IAC7C,eAAe,EAAE,WAAW,GAAG,MAAM,GAAG,IAAI,CAAA;IAC5C,sBAAsB,EAAE,MAAM,GAAG,IAAI,CAAA;IACrC,gBAAgB,EAAE,OAAO,GAAG,IAAI,CAAA;IAChC,oBAAoB,EAAE,OAAO,GAAG,IAAI,CAAA;IACpC,oBAAoB,EAAE,OAAO,GAAG,IAAI,CAAA;IACpC,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC/B;;;;;;OAMG;IACH,oBAAoB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACpC,wBAAwB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACxC,eAAe,CAAC,EAAE,OAAO,GAAG,IAAI,CAAA;IAChC;;;;;OAKG;IACH,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACjC;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B;;;;;OAKG;IACH,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAClC;;;OAGG;IACH,gBAAgB,CAAC,EAAE,eAAe,EAAE,GAAG,IAAI,CAAA;IAC3C,0FAA0F;IAC1F,gBAAgB,CAAC,EAAE,gBAAgB,GAAG,IAAI,CAAA;IAC1C,0GAA0G;IAC1G,UAAU,CAAC,EAAE,OAAO,CAAA;IACpB,wFAAwF;IACxF,mBAAmB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACnC;;;OAGG;IACH,cAAc,CAAC,EAAE,mBAAmB,EAAE,GAAG,IAAI,CAAA;IAC7C,KAAK,CAAC,EAAE,SAAS,EAAE,CAAA;IACnB;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,mBAAmB,EAAE,CAAA;CACjC;AAED;;;GAGG;AACH,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAA;IACZ,EAAE,EAAE,OAAO,GAAG,MAAM,GAAG,QAAQ,GAAG,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,CAAA;IACnF,MAAM,EAAE,MAAM,CAAA;IACd,WAAW,EAAE,MAAM,GAAG,KAAK,GAAG,SAAS,GAAG,QAAQ,CAAA;IAClD,IAAI,CAAC,EAAE,MAAM,EAAE,CAAA;IACf,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED,+BAA+B;AAC/B,MAAM,WAAW,YAAY;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB"}

package/dist/guardrailIr.d.ts

@@ -193,13 +193,13 @@ export declare const GuardrailIrSchema: z.ZodDiscriminatedUnion<"kind", [z.ZodOb
     kind: z.ZodLiteral<"requires_before">;
 }, "strict", z.ZodTypeAny, {
     kind: "requires_before";
-    first: string;
     then: string;
+    first: string;
     roles?: string[] | undefined;
 }, {
     kind: "requires_before";
-    first: string;
     then: string;
+    first: string;
     roles?: string[] | undefined;
 }>, z.ZodObject<{
     first: z.ZodEffects<z.ZodString, string, string>;
@@ -208,13 +208,13 @@ export declare const GuardrailIrSchema: z.ZodDiscriminatedUnion<"kind", [z.ZodOb
     kind: z.ZodLiteral<"forbid_after">;
 }, "strict", z.ZodTypeAny, {
     kind: "forbid_after";
-    first: string;
     then: string;
+    first: string;
     roles?: string[] | undefined;
 }, {
     kind: "forbid_after";
-    first: string;
     then: string;
+    first: string;
     roles?: string[] | undefined;
 }>, z.ZodObject<{
     kind: z.ZodLiteral<"max_calls">;