@intutic/shared-types 2.3.0 → 2.5.0

package/dist/spendBudgets.js

@@ -0,0 +1,92 @@
+"use strict";
+/**
+ * Spend budgets and key rate limits — how much LLM spend a workspace, one
+ * virtual key or one member may run up per day or per month, and how many
+ * requests and tokens a virtual key may send per minute.
+ *
+ * A budget is `hard` or `soft`. The LLM proxy refuses a request that a hard
+ * budget's remainder does not cover (`BUDGET_EXCEEDED`, 429, before the
+ * request leaves); a soft budget never refuses. Both raise the workspace's
+ * budget alerts — once at the alert threshold and once at the limit, per
+ * period — as `finops.budget.threshold` / `finops.budget.exceeded`.
+ *
+ * Periods are fixed UTC windows, like MCP call budgets (`mcpBudgets.ts`): a
+ * day starts at 00:00 UTC, a month on the 1st at 00:00 UTC. The window id is
+ * part of every per-key and per-member spend counter's Valkey key, so a new
+ * day or month starts from zero and an old counter expires on its own.
+ *
+ * Spend is what the control plane records per completed call
+ * (`finopsService.incrementSpend`), so a request's own cost lands after it
+ * finishes: the proxy checks a hard budget against the spend recorded so far
+ * plus the request's estimated cost, with the same 20% margin the workspace
+ * cap has always used.
+ *
+ * @module
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.KeyRateLimitSchema = exports.MAX_KEY_TPM = exports.MAX_KEY_RPM = exports.SpendBudgetListSchema = exports.SpendBudgetSchema = exports.MEMBER_BUDGET_DEFAULT = exports.MAX_SPEND_BUDGET_USD = exports.SPEND_BUDGET_SCOPES = exports.SPEND_BUDGET_PERIODS = void 0;
+exports.spendBudgetWindow = spendBudgetWindow;
+exports.describeSpendBudget = describeSpendBudget;
+const zod_1 = require("zod");
+exports.SPEND_BUDGET_PERIODS = ['day', 'month'];
+exports.SPEND_BUDGET_SCOPES = ['workspace', 'key', 'member'];
+exports.MAX_SPEND_BUDGET_USD = 1_000_000;
+/**
+ * The member budget that applies to every member without one of their own,
+ * period by period. A member's own day budget replaces the default day
+ * budget; the default month budget still applies to them unless they have a
+ * month budget too.
+ */
+exports.MEMBER_BUDGET_DEFAULT = 'default';
+exports.SpendBudgetSchema = zod_1.z
+    .object({
+    period: zod_1.z.enum(['day', 'month']),
+    limitUsd: zod_1.z.number().positive().max(exports.MAX_SPEND_BUDGET_USD),
+    enforcement: zod_1.z.enum(['hard', 'soft']).default('hard'),
+})
+    .strict();
+/** One budget per period at most: a key or member has a day budget, a month budget, both or neither. */
+exports.SpendBudgetListSchema = zod_1.z
+    .array(exports.SpendBudgetSchema)
+    .max(2)
+    .superRefine((list, ctx) => {
+    const seen = new Set();
+    list.forEach((b, i) => {
+        if (seen.has(b.period))
+            ctx.addIssue({ code: 'custom', path: [i, 'period'], message: `two ${b.period} budgets` });
+        seen.add(b.period);
+    });
+});
+exports.MAX_KEY_RPM = 100_000;
+exports.MAX_KEY_TPM = 100_000_000;
+exports.KeyRateLimitSchema = zod_1.z
+    .object({
+    rpm: zod_1.z.number().int().min(1).max(exports.MAX_KEY_RPM).nullable().optional(),
+    tpm: zod_1.z.number().int().min(1).max(exports.MAX_KEY_TPM).nullable().optional(),
+})
+    .strict();
+/** The UTC window a moment falls in: its id (part of the counter key), when it began and when it resets. */
+function spendBudgetWindow(period, nowMs) {
+    const d = new Date(nowMs);
+    const y = d.getUTCFullYear();
+    const m = d.getUTCMonth();
+    if (period === 'day') {
+        const startMs = Date.UTC(y, m, d.getUTCDate());
+        return { id: new Date(startMs).toISOString().slice(0, 10), startMs, resetAtMs: startMs + 86_400_000 };
+    }
+    const startMs = Date.UTC(y, m, 1);
+    return { id: new Date(startMs).toISOString().slice(0, 7), startMs, resetAtMs: Date.UTC(y, m + 1, 1) };
+}
+/** A budget in words, for alerts, refusals and the dashboard. */
+function describeSpendBudget(scope, budget, subjectLabel) {
+    const whose = scope === 'workspace'
+        ? 'Workspace'
+        : scope === 'key'
+            ? `Key ${subjectLabel ?? ''}`.trim()
+            : subjectLabel === exports.MEMBER_BUDGET_DEFAULT || subjectLabel === undefined
+                ? 'Member'
+                : `Member ${subjectLabel}`;
+    const per = budget.period === 'day' ? 'day' : 'month';
+    return `${whose} ${budget.enforcement} budget: $${budget.limitUsd.toFixed(2)} per ${per}`;
+}
+//# sourceMappingURL=spendBudgets.js.map

package/dist/spendBudgets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"spendBudgets.js","sourceRoot":"","sources":["../src/spendBudgets.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;;;AAoFH,8CAaC;AAGD,kDAWC;AA7GD,6BAAuB;AAsBV,QAAA,oBAAoB,GAAiC,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;AACrE,QAAA,mBAAmB,GAAgC,CAAC,WAAW,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAA;AACjF,QAAA,oBAAoB,GAAG,SAAS,CAAA;AAE7C;;;;;GAKG;AACU,QAAA,qBAAqB,GAAG,SAAS,CAAA;AAEjC,QAAA,iBAAiB,GAAG,OAAC;KAC/B,MAAM,CAAC;IACN,MAAM,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAChC,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,4BAAoB,CAAC;IACzD,WAAW,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;CACtD,CAAC;KACD,MAAM,EAAE,CAAA;AAEX,wGAAwG;AAC3F,QAAA,qBAAqB,GAAG,OAAC;KACnC,KAAK,CAAC,yBAAiB,CAAC;KACxB,GAAG,CAAC,CAAC,CAAC;KACN,WAAW,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;IACzB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACpB,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC;YAAE,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,QAAQ,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,MAAM,UAAU,EAAE,CAAC,CAAA;QACjH,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;IACpB,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAQS,QAAA,WAAW,GAAG,OAAO,CAAA;AACrB,QAAA,WAAW,GAAG,WAAW,CAAA;AAEzB,QAAA,kBAAkB,GAAG,OAAC;KAChC,MAAM,CAAC;IACN,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,mBAAW,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACnE,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,mBAAW,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACpE,CAAC;KACD,MAAM,EAAE,CAAA;AAaX,4GAA4G;AAC5G,SAAgB,iBAAiB,CAC/B,MAAyB,EACzB,KAAa;IAEb,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,CAAA;IACzB,MAAM,CAAC,GAAG,CAAC,CAAC,cAAc,EAAE,CAAA;IAC5B,MAAM,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAA;IACzB,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;QACrB,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAA;QAC9C,OAAO,EAAE,EAAE,EAAE,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,GAAG,UAAU,EAAE,CAAA;IACvG,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAA;IACjC,OAAO,EAAE,EAAE,EAAE,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,CAAA;AACvG,CAAC;AAED,iEAAiE;AACjE,SAAgB,mBAAmB,CAAC,KAAuB,EAAE,MAAmB,EAAE,YAAqB;IACrG,MAAM,KAAK,GACT,KAAK,KAAK,WAAW;QACnB,CAAC,CAAC,WAAW;QACb,CAAC,CAAC,KAAK,KAAK,KAAK;YACf,CAAC,CAAC,OAAO,YAAY,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE;YACpC,CAAC,CAAC,YAAY,KAAK,6BAAqB,IAAI,YAAY,KAAK,SAAS;gBACpE,CAAC,CAAC,QAAQ;gBACV,CAAC,CAAC,UAAU,YAAY,EAAE,CAAA;IAClC,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAA;IACrD,OAAO,GAAG,KAAK,IAAI,MAAM,CAAC,WAAW,aAAa,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,GAAG,EAAE,CAAA;AAC3F,CAAC"}

package/dist/taskManagement.d.ts

@@ -1,14 +1,14 @@
 /**
- * Task Management Adapter — Generic interface for external task/issue trackers.
+ * Task Management Adapter — read-only interface over external task trackers
+ * and incident tools.
  *
- * Provides a unified abstraction over external task management tools
- * (Jira, Linear, GitHub Issues, etc.) so the control plane can
- * create/update tasks based on governance events.
+ * The control plane reads tickets (Jira, Linear) and incidents (PagerDuty) to
+ * attach task context to agent sessions. It does not create or update them.
  *
  * @module
  */
-/** Supported task management providers. */
-export type TaskProvider = 'jira' | 'linear' | 'github' | 'asana' | 'pagerduty';
+/** Providers with a registered adapter. */
+export type TaskProvider = 'jira' | 'pagerduty' | 'linear';
 /** Priority levels mapped across providers. */
 export type TaskPriority = 'CRITICAL' | 'HIGH' | 'MEDIUM' | 'LOW';
 /** Task status (normalized across providers). */
@@ -20,62 +20,17 @@ export interface TaskProviderCredentials {
     baseUrl: string;
     /** Authentication token or API key. */
     authToken: string;
-    /** Project or board identifier within the provider. */
+    /** Project, team or routing key within the provider. */
     projectKey: string;
+    /**
+     * Jira Cloud only: the email of the Atlassian account the API token belongs
+     * to. Jira Cloud authenticates an API token as Basic `email:token`. A
+     * connection stores it as `metadata.accountEmail`.
+     */
+    accountEmail?: string;
     /** Additional provider-specific config. */
     metadata?: Record<string, unknown>;
 }
-/** Payload for creating a new task. */
-export interface CreateTaskPayload {
-    /** Human-readable task title. */
-    title: string;
-    /** Markdown description of the task. */
-    description: string;
-    /** Normalized priority. */
-    priority: TaskPriority;
-    /** Intutic-specific labels for categorization. */
-    labels?: string[];
-    /** Assignee identifier (provider-specific). */
-    assigneeId?: string;
-    /** Link back to the Intutic governance event. */
-    intuticLink?: {
-        /** Type of governance event that created this task. */
-        eventType: 'INCIDENT' | 'ANOMALY' | 'SOP_REVIEW' | 'COMPLIANCE';
-        /** ID of the governance event. */
-        eventId: string;
-        /** Workspace this event belongs to. */
-        workspaceId: string;
-    };
-}
-/** Result of creating a task in the external system. */
-export interface CreateTaskResult {
-    /** Whether the task was successfully created. */
-    success: boolean;
-    /** External task ID (e.g., Jira issue key like "PROJ-123"). */
-    externalTaskId?: string;
-    /** URL to the task in the external system. */
-    externalUrl?: string;
-    /** Error message if creation failed. */
-    error?: string;
-}
-/** Payload for updating an existing task. */
-export interface UpdateTaskPayload {
-    /** External task ID to update. */
-    externalTaskId: string;
-    /** New status (optional). */
-    status?: TaskStatus;
-    /** Comment to add (optional). */
-    comment?: string;
-    /** Updated priority (optional). */
-    priority?: TaskPriority;
-    /** Additional fields (provider-specific). */
-    fields?: Record<string, unknown>;
-}
-/** Result of updating a task. */
-export interface UpdateTaskResult {
-    success: boolean;
-    error?: string;
-}
 /** A task as retrieved from the external system. */
 export interface ExternalTask {
     externalTaskId: string;
@@ -90,13 +45,22 @@ export interface ExternalTask {
     sprint?: string;
     epic?: string;
 }
+/** Filters for `TaskManagementAdapter.searchTasks`. */
+export interface TaskSearchFilters {
+    status?: TaskStatus;
+    priority?: TaskPriority;
+    labels?: string[];
+    /**
+     * The provider's own id for the assignee. An adapter must apply it: a search
+     * for one person's work that comes back with everyone's is worse than none.
+     */
+    assigneeId?: string;
+}
 /**
  * Generic task management adapter interface.
  *
- * Implementations of this interface connect Intutic's governance engine
- * to external task management tools. The control plane calls these methods
- * when governance events (incidents, anomalies, SOP reviews) require
- * external task creation or updates.
+ * Implementations read from an external tracker so the control plane can
+ * resolve which ticket or incident an agent session is working on.
  */
 export interface TaskManagementAdapter {
     /** Provider name for this adapter. */
@@ -106,18 +70,6 @@ export interface TaskManagementAdapter {
      * @returns true if the connection is healthy
      */
     testConnection(): Promise<boolean>;
-    /**
-     * Create a new task in the external system.
-     * @param payload - Task creation payload
-     * @returns Result with external task ID and URL
-     */
-    createTask(payload: CreateTaskPayload): Promise<CreateTaskResult>;
-    /**
-     * Update an existing task in the external system.
-     * @param payload - Task update payload
-     * @returns Result indicating success/failure
-     */
-    updateTask(payload: UpdateTaskPayload): Promise<UpdateTaskResult>;
     /**
      * Retrieve a task by its external ID.
      * @param externalTaskId - The external system's task identifier
@@ -125,15 +77,15 @@ export interface TaskManagementAdapter {
      */
     getTask(externalTaskId: string): Promise<ExternalTask | null>;
     /**
-     * Search for tasks matching Intutic criteria.
-     * @param workspaceId - Intutic workspace ID to filter by
-     * @param filters - Optional filters (status, priority, labels)
+     * Search for open tasks.
+     *
+     * Rejects when the provider cannot be asked (unreachable, refused, timed
+     * out), so a caller can tell "nothing open" from "could not ask".
+     *
+     * @param workspaceId - Intutic workspace ID, for logging
+     * @param filters - Optional filters (status, priority, labels, assignee)
      * @returns List of matching external tasks
      */
-    searchTasks(workspaceId: string, filters?: {
-        status?: TaskStatus;
-        priority?: TaskPriority;
-        labels?: string[];
-    }): Promise<ExternalTask[]>;
+    searchTasks(workspaceId: string, filters?: TaskSearchFilters): Promise<ExternalTask[]>;
 }
 //# sourceMappingURL=taskManagement.d.ts.map

package/dist/taskManagement.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"taskManagement.d.ts","sourceRoot":"","sources":["../src/taskManagement.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,2CAA2C;AAC3C,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,QAAQ,GAAG,QAAQ,GAAG,OAAO,GAAG,WAAW,CAAA;AAE/E,+CAA+C;AAC/C,MAAM,MAAM,YAAY,GAAG,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAA;AAEjE,iDAAiD;AACjD,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,aAAa,GAAG,UAAU,GAAG,QAAQ,CAAA;AAEvE,gEAAgE;AAChE,MAAM,WAAW,uBAAuB;IACtC,QAAQ,EAAE,YAAY,CAAA;IACtB,+EAA+E;IAC/E,OAAO,EAAE,MAAM,CAAA;IACf,uCAAuC;IACvC,SAAS,EAAE,MAAM,CAAA;IACjB,uDAAuD;IACvD,UAAU,EAAE,MAAM,CAAA;IAClB,2CAA2C;IAC3C,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CACnC;AAED,uCAAuC;AACvC,MAAM,WAAW,iBAAiB;IAChC,iCAAiC;IACjC,KAAK,EAAE,MAAM,CAAA;IACb,wCAAwC;IACxC,WAAW,EAAE,MAAM,CAAA;IACnB,2BAA2B;IAC3B,QAAQ,EAAE,YAAY,CAAA;IACtB,kDAAkD;IAClD,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;IACjB,+CAA+C;IAC/C,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,iDAAiD;IACjD,WAAW,CAAC,EAAE;QACZ,uDAAuD;QACvD,SAAS,EAAE,UAAU,GAAG,SAAS,GAAG,YAAY,GAAG,YAAY,CAAA;QAC/D,kCAAkC;QAClC,OAAO,EAAE,MAAM,CAAA;QACf,uCAAuC;QACvC,WAAW,EAAE,MAAM,CAAA;KACpB,CAAA;CACF;AAED,wDAAwD;AACxD,MAAM,WAAW,gBAAgB;IAC/B,iDAAiD;IACjD,OAAO,EAAE,OAAO,CAAA;IAChB,+DAA+D;IAC/D,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,8CAA8C;IAC9C,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,wCAAwC;IACxC,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED,6CAA6C;AAC7C,MAAM,WAAW,iBAAiB;IAChC,kCAAkC;IAClC,cAAc,EAAE,MAAM,CAAA;IACtB,6BAA6B;IAC7B,MAAM,CAAC,EAAE,UAAU,CAAA;IACnB,iCAAiC;IACjC,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,mCAAmC;IACnC,QAAQ,CAAC,EAAE,YAAY,CAAA;IACvB,6CAA6C;IAC7C,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CACjC;AAED,iCAAiC;AACjC,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,OAAO,CAAA;IAChB,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED,oDAAoD;AACpD,MAAM,WAAW,YAAY;IAC3B,cAAc,EAAE,MAAM,CAAA;IACtB,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,UAAU,CAAA;IAClB,QAAQ,EAAE,YAAY,CAAA;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,WAAW,EAAE,MAAM,CAAA;IACnB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,IAAI,CAAC,EAAE,MAAM,CAAA;CACd;AAID;;;;;;;GAOG;AACH,MAAM,WAAW,qBAAqB;IACpC,sCAAsC;IACtC,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAA;IAE/B;;;OAGG;IACH,cAAc,IAAI,OAAO,CAAC,OAAO,CAAC,CAAA;IAElC;;;;OAIG;IACH,UAAU,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAA;IAEjE;;;;OAIG;IACH,UAAU,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAA;IAEjE;;;;OAIG;IACH,OAAO,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAAA;IAE7D;;;;;OAKG;IACH,WAAW,CACT,WAAW,EAAE,MAAM,EACnB,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,UAAU,CAAC;QAAC,QAAQ,CAAC,EAAE,YAAY,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,GAC5E,OAAO,CAAC,YAAY,EAAE,CAAC,CAAA;CAC3B"}
+{"version":3,"file":"taskManagement.d.ts","sourceRoot":"","sources":["../src/taskManagement.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,2CAA2C;AAC3C,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,WAAW,GAAG,QAAQ,CAAA;AAE1D,+CAA+C;AAC/C,MAAM,MAAM,YAAY,GAAG,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAA;AAEjE,iDAAiD;AACjD,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,aAAa,GAAG,UAAU,GAAG,QAAQ,CAAA;AAEvE,gEAAgE;AAChE,MAAM,WAAW,uBAAuB;IACtC,QAAQ,EAAE,YAAY,CAAA;IACtB,+EAA+E;IAC/E,OAAO,EAAE,MAAM,CAAA;IACf,uCAAuC;IACvC,SAAS,EAAE,MAAM,CAAA;IACjB,wDAAwD;IACxD,UAAU,EAAE,MAAM,CAAA;IAClB;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,2CAA2C;IAC3C,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CACnC;AAED,oDAAoD;AACpD,MAAM,WAAW,YAAY;IAC3B,cAAc,EAAE,MAAM,CAAA;IACtB,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,UAAU,CAAA;IAClB,QAAQ,EAAE,YAAY,CAAA;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,WAAW,EAAE,MAAM,CAAA;IACnB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,IAAI,CAAC,EAAE,MAAM,CAAA;CACd;AAED,uDAAuD;AACvD,MAAM,WAAW,iBAAiB;IAChC,MAAM,CAAC,EAAE,UAAU,CAAA;IACnB,QAAQ,CAAC,EAAE,YAAY,CAAA;IACvB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;IACjB;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AAID;;;;;GAKG;AACH,MAAM,WAAW,qBAAqB;IACpC,sCAAsC;IACtC,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAA;IAE/B;;;OAGG;IACH,cAAc,IAAI,OAAO,CAAC,OAAO,CAAC,CAAA;IAElC;;;;OAIG;IACH,OAAO,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAAA;IAE7D;;;;;;;;;OASG;IACH,WAAW,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAAA;CACvF"}

package/dist/taskManagement.js

@@ -1,10 +1,10 @@
 "use strict";
 /**
- * Task Management Adapter — Generic interface for external task/issue trackers.
+ * Task Management Adapter — read-only interface over external task trackers
+ * and incident tools.
  *
- * Provides a unified abstraction over external task management tools
- * (Jira, Linear, GitHub Issues, etc.) so the control plane can
- * create/update tasks based on governance events.
+ * The control plane reads tickets (Jira, Linear) and incidents (PagerDuty) to
+ * attach task context to agent sessions. It does not create or update them.
  *
  * @module
  */

package/dist/toolPoison.d.ts

@@ -2,7 +2,7 @@
  * toolPoison.ts — Tool-description poisoning patterns.
  *
  * Direct TypeScript port of `packages/proxy/src/tool_poison.rs`'s `scan`
- * function and its seven named patterns. This is a SEPARATE pattern set from
+ * function and its named patterns. This is a SEPARATE pattern set from
  * the MCP proxy's `injection.ts`, on purpose: `tool_poison.rs`'s own module
  * doc records that it tried reusing `injection::scan` for this and measured
  * that its five patterns match ZERO of the tool-poisoning payloads — they are
@@ -21,10 +21,23 @@
  * module's own `gating_never_changes_a_verdict` test), and the volume of tool
  * descriptions scanned here is orders of magnitude below the Rust proxy's
  * request path. The pattern SOURCE TEXT below is unchanged from the Rust
- * `PATTERNS` array.
+ * `PATTERNS` array, `/` escaped as `\/` for a regex literal;
+ * `__tests__/toolPoison.test.ts` reads the Rust file and holds the two equal.
  *
  @module
  */
+export interface ToolPoisonPattern {
+    name: string;
+    regex: RegExp;
+}
+/**
+ * Ported verbatim from `tool_poison.rs`'s `PATTERNS` const. All bounded
+ * repetitions here are small fixed-width gaps (`{0,40}`, `{0,60}`, `{0,80}`)
+ * over a handful of alternations — the same "no wide bounded repetition, no
+ * RegexSet performance regression" shape the MCP proxy's `injection.ts` documents, not the
+ * `dlp.rs` shape that regressed.
+ */
+export declare const TOOL_POISON_PATTERNS: readonly ToolPoisonPattern[];
 /**
  * Pattern names matching this tool description, deduplicated, empty when it
  * looks like ordinary prose (the overwhelmingly common case).

package/dist/toolPoison.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"toolPoison.d.ts","sourceRoot":"","sources":["../src/toolPoison.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAkDH;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,EAAE,CAOjE"}
+{"version":3,"file":"toolPoison.d.ts","sourceRoot":"","sources":["../src/toolPoison.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,CAAA;CACd;AAED;;;;;;GAMG;AACH,eAAO,MAAM,oBAAoB,EAAE,SAAS,iBAAiB,EA2C5D,CAAA;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,EAAE,CAOjE"}

package/dist/toolPoison.js

@@ -3,7 +3,7 @@
  * toolPoison.ts — Tool-description poisoning patterns.
  *
  * Direct TypeScript port of `packages/proxy/src/tool_poison.rs`'s `scan`
- * function and its seven named patterns. This is a SEPARATE pattern set from
+ * function and its named patterns. This is a SEPARATE pattern set from
  * the MCP proxy's `injection.ts`, on purpose: `tool_poison.rs`'s own module
  * doc records that it tried reusing `injection::scan` for this and measured
  * that its five patterns match ZERO of the tool-poisoning payloads — they are
@@ -22,11 +22,13 @@
  * module's own `gating_never_changes_a_verdict` test), and the volume of tool
  * descriptions scanned here is orders of magnitude below the Rust proxy's
  * request path. The pattern SOURCE TEXT below is unchanged from the Rust
- * `PATTERNS` array.
+ * `PATTERNS` array, `/` escaped as `\/` for a regex literal;
+ * `__tests__/toolPoison.test.ts` reads the Rust file and holds the two equal.
  *
  @module
  */
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.TOOL_POISON_PATTERNS = void 0;
 exports.scanToolDescription = scanToolDescription;
 /**
  * Ported verbatim from `tool_poison.rs`'s `PATTERNS` const. All bounded
@@ -35,7 +37,7 @@ exports.scanToolDescription = scanToolDescription;
  * RegexSet performance regression" shape the MCP proxy's `injection.ts` documents, not the
  * `dlp.rs` shape that regressed.
  */
-const PATTERNS = [
+exports.TOOL_POISON_PATTERNS = [
     {
         name: 'hidden-instruction-block',
         regex: /<\s*(important|secret|system|hidden|instructions?)\s*>/i,
@@ -67,6 +69,14 @@ const PATTERNS = [
         name: 'tool-scoped-instruction-override',
         regex: /\b(ignore|disregard|override)\b[^.!?]{0,40}\b(other\s+tools?|previous\s+tools?|system\s+prompt)\b/i,
     },
+    {
+        // An order to run a command that destroys the machine or its data: a
+        // recursive delete of the filesystem root or the home directory (never a
+        // path below either), formatting or raw-writing a block device, dropping a
+        // database, piping a download into a shell, a fork bomb.
+        name: 'destructive-command-instruction',
+        regex: /\b(run|execute|exec|invoke|issue|type|enter|paste)\b[^.!?]{0,40}(\brm\s+-[a-z-]*[rf][a-z-]*\s+(-\S+\s+){0,4}["'`]?(\/\*?|~\/?\*?|\$\{?home\}?\/?\*?)(["'`;&|)\s]|$)|\bmkfs\b|\bdd\s[^.!?]{0,60}\bof=\/dev\/|\bdrop\s+(database|schema)\b|\b(curl|wget)\s[^|\n]{0,120}\|\s*(sudo\s+)?(ba|z|da|k)?sh\b|:\(\)\s*\{\s*:\s*\|\s*:)/i,
+    },
 ];
 /**
  * Pattern names matching this tool description, deduplicated, empty when it
@@ -76,7 +86,7 @@ function scanToolDescription(description) {
     if (!description)
         return [];
     const found = [];
-    for (const { name, regex } of PATTERNS) {
+    for (const { name, regex } of exports.TOOL_POISON_PATTERNS) {
         if (regex.test(description))
             found.push(name);
     }

package/dist/toolPoison.js.map

@@ -1 +1 @@
-{"version":3,"file":"toolPoison.js","sourceRoot":"","sources":["../src/toolPoison.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;;AAsDH,kDAOC;AAtDD;;;;;;GAMG;AACH,MAAM,QAAQ,GAAiC;IAC7C;QACE,IAAI,EAAE,0BAA0B;QAChC,KAAK,EAAE,yDAAyD;KACjE;IACD;QACE,IAAI,EAAE,mBAAmB;QACzB,KAAK,EACH,kJAAkJ;KACrJ;IACD;QACE,IAAI,EAAE,mBAAmB;QACzB,KAAK,EACH,oKAAoK;KACvK;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,qEAAqE;QACrE,iEAAiE;QACjE,sDAAsD;QACtD,KAAK,EAAE,+GAA+G;KACvH;IACD;QACE,IAAI,EAAE,sBAAsB;QAC5B,KAAK,EAAE,0GAA0G;KAClH;IACD;QACE,IAAI,EAAE,6BAA6B;QACnC,KAAK,EAAE,kHAAkH;KAC1H;IACD;QACE,IAAI,EAAE,kCAAkC;QACxC,KAAK,EAAE,oGAAoG;KAC5G;CACF,CAAA;AAED;;;GAGG;AACH,SAAgB,mBAAmB,CAAC,WAAmB;IACrD,IAAI,CAAC,WAAW;QAAE,OAAO,EAAE,CAAA;IAC3B,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,KAAK,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,QAAQ,EAAE,CAAC;QACvC,IAAI,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC/C,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC"}
+{"version":3,"file":"toolPoison.js","sourceRoot":"","sources":["../src/toolPoison.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;;;AA+DH,kDAOC;AA/DD;;;;;;GAMG;AACU,QAAA,oBAAoB,GAAiC;IAChE;QACE,IAAI,EAAE,0BAA0B;QAChC,KAAK,EAAE,yDAAyD;KACjE;IACD;QACE,IAAI,EAAE,mBAAmB;QACzB,KAAK,EACH,kJAAkJ;KACrJ;IACD;QACE,IAAI,EAAE,mBAAmB;QACzB,KAAK,EACH,oKAAoK;KACvK;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,qEAAqE;QACrE,iEAAiE;QACjE,sDAAsD;QACtD,KAAK,EAAE,+GAA+G;KACvH;IACD;QACE,IAAI,EAAE,sBAAsB;QAC5B,KAAK,EAAE,0GAA0G;KAClH;IACD;QACE,IAAI,EAAE,6BAA6B;QACnC,KAAK,EAAE,kHAAkH;KAC1H;IACD;QACE,IAAI,EAAE,kCAAkC;QACxC,KAAK,EAAE,oGAAoG;KAC5G;IACD;QACE,qEAAqE;QACrE,yEAAyE;QACzE,2EAA2E;QAC3E,yDAAyD;QACzD,IAAI,EAAE,iCAAiC;QACvC,KAAK,EACH,gUAAgU;KACnU;CACF,CAAA;AAED;;;GAGG;AACH,SAAgB,mBAAmB,CAAC,WAAmB;IACrD,IAAI,CAAC,WAAW;QAAE,OAAO,EAAE,CAAA;IAC3B,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,KAAK,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,4BAAoB,EAAE,CAAC;QACnD,IAAI,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC/C,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC"}

package/dist/upstreamRetry.d.ts

@@ -0,0 +1,121 @@
+/**
+ * The workspace setting `upstreamRetry`: how the LLM proxy retries a provider
+ * call that failed before any response reached the client, and where it falls
+ * back when those retries run out.
+ *
+ * Every field is optional and overrides the proxy's own `config.yaml` value
+ * (`intutic_settings.routing.retry` / `.fallbacks`) field by field, so a
+ * workspace can change one knob without restating the rest. The proxy reads
+ * it from `/api/v1/auth/key-context` (`packages/proxy/src/routing/retry.rs`,
+ * `WorkspaceRetry`); `fixtures/upstream-retry-vectors.json` holds the two
+ * readings together.
+ */
+import { z } from 'zod';
+/**
+ * The ceilings both the schema and the proxy enforce, so no setting can
+ * configure a retry storm. The proxy clamps `config.yaml` to the same values
+ * (`RetryConfig::bounded`); a test holds the two equal.
+ */
+export declare const UPSTREAM_RETRY_LIMITS: {
+    readonly maxAttempts: 5;
+    readonly maxBackoffMs: 60000;
+    readonly budgetMs: 120000;
+    readonly fallbackTargets: 5;
+    readonly fallbackModels: 50;
+};
+/** Retried by default: 429, 500, 502, 503, 504 and Anthropic's 529 overloaded. */
+export declare const DEFAULT_UPSTREAM_RETRY_STATUSES: readonly [429, 500, 502, 503, 504, 529];
+/** The defaults the proxy applies when neither config.yaml nor the workspace sets a field. */
+export declare const DEFAULT_UPSTREAM_RETRY: {
+    readonly enabled: true;
+    readonly maxAttempts: 3;
+    readonly initialBackoffMs: 500;
+    readonly maxBackoffMs: 8000;
+    readonly budgetMs: 30000;
+    readonly onStatus: readonly [429, 500, 502, 503, 504, 529];
+};
+/**
+ * Providers a fallback target may name: every id the proxy resolves
+ * (`provider_from_wire_id` in packages/proxy/src/proxy.rs), the cloud
+ * providers' aliases included, so a target copied from config.yaml is valid
+ * here too. A test holds the two lists equal.
+ */
+export declare const UPSTREAM_PROVIDERS: readonly ["anthropic", "openai", "gemini", "mistral", "openrouter", "deepseek", "bedrock", "vertex_ai", "vertex", "azure_openai", "azure"];
+export type UpstreamProvider = (typeof UPSTREAM_PROVIDERS)[number];
+/**
+ * One fallback target. `model` alone switches model on the provider that
+ * model resolves to; `provider` alone sends the same model to another
+ * provider; both pin the pair.
+ */
+export declare const UpstreamFallbackTargetSchema: z.ZodEffects<z.ZodObject<{
+    model: z.ZodOptional<z.ZodString>;
+    provider: z.ZodOptional<z.ZodEnum<["anthropic", "openai", "gemini", "mistral", "openrouter", "deepseek", "bedrock", "vertex_ai", "vertex", "azure_openai", "azure"]>>;
+}, "strict", z.ZodTypeAny, {
+    model?: string | undefined;
+    provider?: "anthropic" | "openai" | "mistral" | "openrouter" | "deepseek" | "gemini" | "azure_openai" | "bedrock" | "vertex_ai" | "vertex" | "azure" | undefined;
+}, {
+    model?: string | undefined;
+    provider?: "anthropic" | "openai" | "mistral" | "openrouter" | "deepseek" | "gemini" | "azure_openai" | "bedrock" | "vertex_ai" | "vertex" | "azure" | undefined;
+}>, {
+    model?: string | undefined;
+    provider?: "anthropic" | "openai" | "mistral" | "openrouter" | "deepseek" | "gemini" | "azure_openai" | "bedrock" | "vertex_ai" | "vertex" | "azure" | undefined;
+}, {
+    model?: string | undefined;
+    provider?: "anthropic" | "openai" | "mistral" | "openrouter" | "deepseek" | "gemini" | "azure_openai" | "bedrock" | "vertex_ai" | "vertex" | "azure" | undefined;
+}>;
+export type UpstreamFallbackTarget = z.infer<typeof UpstreamFallbackTargetSchema>;
+export declare const UpstreamRetrySettingsSchema: z.ZodObject<{
+    enabled: z.ZodOptional<z.ZodBoolean>;
+    maxAttempts: z.ZodOptional<z.ZodNumber>;
+    initialBackoffMs: z.ZodOptional<z.ZodNumber>;
+    maxBackoffMs: z.ZodOptional<z.ZodNumber>;
+    budgetMs: z.ZodOptional<z.ZodNumber>;
+    onStatus: z.ZodOptional<z.ZodArray<z.ZodNumber, "many">>;
+    /** Ordered targets, keyed by the model whose retries ran out. */
+    fallbacks: z.ZodOptional<z.ZodEffects<z.ZodRecord<z.ZodString, z.ZodArray<z.ZodEffects<z.ZodObject<{
+        model: z.ZodOptional<z.ZodString>;
+        provider: z.ZodOptional<z.ZodEnum<["anthropic", "openai", "gemini", "mistral", "openrouter", "deepseek", "bedrock", "vertex_ai", "vertex", "azure_openai", "azure"]>>;
+    }, "strict", z.ZodTypeAny, {
+        model?: string | undefined;
+        provider?: "anthropic" | "openai" | "mistral" | "openrouter" | "deepseek" | "gemini" | "azure_openai" | "bedrock" | "vertex_ai" | "vertex" | "azure" | undefined;
+    }, {
+        model?: string | undefined;
+        provider?: "anthropic" | "openai" | "mistral" | "openrouter" | "deepseek" | "gemini" | "azure_openai" | "bedrock" | "vertex_ai" | "vertex" | "azure" | undefined;
+    }>, {
+        model?: string | undefined;
+        provider?: "anthropic" | "openai" | "mistral" | "openrouter" | "deepseek" | "gemini" | "azure_openai" | "bedrock" | "vertex_ai" | "vertex" | "azure" | undefined;
+    }, {
+        model?: string | undefined;
+        provider?: "anthropic" | "openai" | "mistral" | "openrouter" | "deepseek" | "gemini" | "azure_openai" | "bedrock" | "vertex_ai" | "vertex" | "azure" | undefined;
+    }>, "many">>, Record<string, {
+        model?: string | undefined;
+        provider?: "anthropic" | "openai" | "mistral" | "openrouter" | "deepseek" | "gemini" | "azure_openai" | "bedrock" | "vertex_ai" | "vertex" | "azure" | undefined;
+    }[]>, Record<string, {
+        model?: string | undefined;
+        provider?: "anthropic" | "openai" | "mistral" | "openrouter" | "deepseek" | "gemini" | "azure_openai" | "bedrock" | "vertex_ai" | "vertex" | "azure" | undefined;
+    }[]>>>;
+}, "strict", z.ZodTypeAny, {
+    enabled?: boolean | undefined;
+    maxAttempts?: number | undefined;
+    initialBackoffMs?: number | undefined;
+    maxBackoffMs?: number | undefined;
+    budgetMs?: number | undefined;
+    onStatus?: number[] | undefined;
+    fallbacks?: Record<string, {
+        model?: string | undefined;
+        provider?: "anthropic" | "openai" | "mistral" | "openrouter" | "deepseek" | "gemini" | "azure_openai" | "bedrock" | "vertex_ai" | "vertex" | "azure" | undefined;
+    }[]> | undefined;
+}, {
+    enabled?: boolean | undefined;
+    maxAttempts?: number | undefined;
+    initialBackoffMs?: number | undefined;
+    maxBackoffMs?: number | undefined;
+    budgetMs?: number | undefined;
+    onStatus?: number[] | undefined;
+    fallbacks?: Record<string, {
+        model?: string | undefined;
+        provider?: "anthropic" | "openai" | "mistral" | "openrouter" | "deepseek" | "gemini" | "azure_openai" | "bedrock" | "vertex_ai" | "vertex" | "azure" | undefined;
+    }[]> | undefined;
+}>;
+export type UpstreamRetrySettings = z.infer<typeof UpstreamRetrySettingsSchema>;
+//# sourceMappingURL=upstreamRetry.d.ts.map

package/dist/upstreamRetry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"upstreamRetry.d.ts","sourceRoot":"","sources":["../src/upstreamRetry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB;;;;GAIG;AACH,eAAO,MAAM,qBAAqB;;;;;;CAMxB,CAAA;AAEV,kFAAkF;AAClF,eAAO,MAAM,+BAA+B,yCAA0C,CAAA;AAEtF,8FAA8F;AAC9F,eAAO,MAAM,sBAAsB;;;;;;;CAOzB,CAAA;AAEV;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB,4IAYrB,CAAA;AACV,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAA;AAElE;;;;GAIG;AACH,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;EAQrC,CAAA;AACJ,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAA;AAEjF,eAAO,MAAM,2BAA2B;;;;;;;IAQpC,iEAAiE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAW1D,CAAA;AACX,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAA"}

package/dist/upstreamRetry.js

@@ -0,0 +1,90 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UpstreamRetrySettingsSchema = exports.UpstreamFallbackTargetSchema = exports.UPSTREAM_PROVIDERS = exports.DEFAULT_UPSTREAM_RETRY = exports.DEFAULT_UPSTREAM_RETRY_STATUSES = exports.UPSTREAM_RETRY_LIMITS = void 0;
+/**
+ * The workspace setting `upstreamRetry`: how the LLM proxy retries a provider
+ * call that failed before any response reached the client, and where it falls
+ * back when those retries run out.
+ *
+ * Every field is optional and overrides the proxy's own `config.yaml` value
+ * (`intutic_settings.routing.retry` / `.fallbacks`) field by field, so a
+ * workspace can change one knob without restating the rest. The proxy reads
+ * it from `/api/v1/auth/key-context` (`packages/proxy/src/routing/retry.rs`,
+ * `WorkspaceRetry`); `fixtures/upstream-retry-vectors.json` holds the two
+ * readings together.
+ */
+const zod_1 = require("zod");
+/**
+ * The ceilings both the schema and the proxy enforce, so no setting can
+ * configure a retry storm. The proxy clamps `config.yaml` to the same values
+ * (`RetryConfig::bounded`); a test holds the two equal.
+ */
+exports.UPSTREAM_RETRY_LIMITS = {
+    maxAttempts: 5,
+    maxBackoffMs: 60_000,
+    budgetMs: 120_000,
+    fallbackTargets: 5,
+    fallbackModels: 50,
+};
+/** Retried by default: 429, 500, 502, 503, 504 and Anthropic's 529 overloaded. */
+exports.DEFAULT_UPSTREAM_RETRY_STATUSES = [429, 500, 502, 503, 504, 529];
+/** The defaults the proxy applies when neither config.yaml nor the workspace sets a field. */
+exports.DEFAULT_UPSTREAM_RETRY = {
+    enabled: true,
+    maxAttempts: 3,
+    initialBackoffMs: 500,
+    maxBackoffMs: 8_000,
+    budgetMs: 30_000,
+    onStatus: [...exports.DEFAULT_UPSTREAM_RETRY_STATUSES],
+};
+/**
+ * Providers a fallback target may name: every id the proxy resolves
+ * (`provider_from_wire_id` in packages/proxy/src/proxy.rs), the cloud
+ * providers' aliases included, so a target copied from config.yaml is valid
+ * here too. A test holds the two lists equal.
+ */
+exports.UPSTREAM_PROVIDERS = [
+    'anthropic',
+    'openai',
+    'gemini',
+    'mistral',
+    'openrouter',
+    'deepseek',
+    'bedrock',
+    'vertex_ai',
+    'vertex',
+    'azure_openai',
+    'azure',
+];
+/**
+ * One fallback target. `model` alone switches model on the provider that
+ * model resolves to; `provider` alone sends the same model to another
+ * provider; both pin the pair.
+ */
+exports.UpstreamFallbackTargetSchema = zod_1.z
+    .object({
+    model: zod_1.z.string().trim().min(1).max(200).optional(),
+    provider: zod_1.z.enum(exports.UPSTREAM_PROVIDERS).optional(),
+})
+    .strict()
+    .refine((t) => t.model !== undefined || t.provider !== undefined, {
+    message: 'A fallback target names a model, a provider, or both',
+});
+exports.UpstreamRetrySettingsSchema = zod_1.z
+    .object({
+    enabled: zod_1.z.boolean().optional(),
+    maxAttempts: zod_1.z.number().int().min(1).max(exports.UPSTREAM_RETRY_LIMITS.maxAttempts).optional(),
+    initialBackoffMs: zod_1.z.number().int().min(0).max(exports.UPSTREAM_RETRY_LIMITS.maxBackoffMs).optional(),
+    maxBackoffMs: zod_1.z.number().int().min(0).max(exports.UPSTREAM_RETRY_LIMITS.maxBackoffMs).optional(),
+    budgetMs: zod_1.z.number().int().min(0).max(exports.UPSTREAM_RETRY_LIMITS.budgetMs).optional(),
+    onStatus: zod_1.z.array(zod_1.z.number().int().min(400).max(599)).max(20).optional(),
+    /** Ordered targets, keyed by the model whose retries ran out. */
+    fallbacks: zod_1.z
+        .record(zod_1.z.string().trim().min(1).max(200), zod_1.z.array(exports.UpstreamFallbackTargetSchema).min(1).max(exports.UPSTREAM_RETRY_LIMITS.fallbackTargets))
+        .refine((f) => Object.keys(f).length <= exports.UPSTREAM_RETRY_LIMITS.fallbackModels, {
+        message: `At most ${exports.UPSTREAM_RETRY_LIMITS.fallbackModels} models may have fallbacks`,
+    })
+        .optional(),
+})
+    .strict();
+//# sourceMappingURL=upstreamRetry.js.map

package/dist/upstreamRetry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"upstreamRetry.js","sourceRoot":"","sources":["../src/upstreamRetry.ts"],"names":[],"mappings":";;;AAAA;;;;;;;;;;;GAWG;AACH,6BAAuB;AAEvB;;;;GAIG;AACU,QAAA,qBAAqB,GAAG;IACnC,WAAW,EAAE,CAAC;IACd,YAAY,EAAE,MAAM;IACpB,QAAQ,EAAE,OAAO;IACjB,eAAe,EAAE,CAAC;IAClB,cAAc,EAAE,EAAE;CACV,CAAA;AAEV,kFAAkF;AACrE,QAAA,+BAA+B,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAU,CAAA;AAEtF,8FAA8F;AACjF,QAAA,sBAAsB,GAAG;IACpC,OAAO,EAAE,IAAI;IACb,WAAW,EAAE,CAAC;IACd,gBAAgB,EAAE,GAAG;IACrB,YAAY,EAAE,KAAK;IACnB,QAAQ,EAAE,MAAM;IAChB,QAAQ,EAAE,CAAC,GAAG,uCAA+B,CAAC;CACtC,CAAA;AAEV;;;;;GAKG;AACU,QAAA,kBAAkB,GAAG;IAChC,WAAW;IACX,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,YAAY;IACZ,UAAU;IACV,SAAS;IACT,WAAW;IACX,QAAQ;IACR,cAAc;IACd,OAAO;CACC,CAAA;AAGV;;;;GAIG;AACU,QAAA,4BAA4B,GAAG,OAAC;KAC1C,MAAM,CAAC;IACN,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACnD,QAAQ,EAAE,OAAC,CAAC,IAAI,CAAC,0BAAkB,CAAC,CAAC,QAAQ,EAAE;CAChD,CAAC;KACD,MAAM,EAAE;KACR,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,CAAC,QAAQ,KAAK,SAAS,EAAE;IAChE,OAAO,EAAE,sDAAsD;CAChE,CAAC,CAAA;AAGS,QAAA,2BAA2B,GAAG,OAAC;KACzC,MAAM,CAAC;IACN,OAAO,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC/B,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,6BAAqB,CAAC,WAAW,CAAC,CAAC,QAAQ,EAAE;IACtF,gBAAgB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,6BAAqB,CAAC,YAAY,CAAC,CAAC,QAAQ,EAAE;IAC5F,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,6BAAqB,CAAC,YAAY,CAAC,CAAC,QAAQ,EAAE;IACxF,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,6BAAqB,CAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE;IAChF,QAAQ,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IACxE,iEAAiE;IACjE,SAAS,EAAE,OAAC;SACT,MAAM,CACL,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EACjC,OAAC,CAAC,KAAK,CAAC,oCAA4B,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,6BAAqB,CAAC,eAAe,CAAC,CACxF;SACA,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,6BAAqB,CAAC,cAAc,EAAE;QAC5E,OAAO,EAAE,WAAW,6BAAqB,CAAC,cAAc,4BAA4B;KACrF,CAAC;SACD,QAAQ,EAAE;CACd,CAAC;KACD,MAAM,EAAE,CAAA"}