@intutic/shared-types 2.5.0 → 2.6.0

package/dist/piiDetectors.json

@@ -1,5 +1,5 @@
 {
-    "$comment": "PII detectors for both DLP scanners. The Rust proxy embeds this file (packages/proxy/src/dlp/pii_detectors.json); the MCP proxy reads a byte-identical copy (packages/shared-types/src/piiDetectors.json). Edit one, copy it over the other: a test on each side fails while they differ. Regexes are the subset Rust regex and JavaScript RegExp agree on — ASCII classes, no \\b, no \\d, no lookaround — and each match is then checked by the named validator and boundary rule, implemented identically in packages/proxy/src/dlp/pii.rs and packages/mcp-proxy/src/dlpPii.ts. Conformance vectors: packages/shared-types/fixtures/pii-detector-vectors.json.",
+    "$comment": "PII detectors for both DLP scanners. The Rust proxy embeds this file (packages/proxy/src/dlp/pii_detectors.json); the MCP proxy reads a byte-identical copy (packages/shared-types/src/piiDetectors.json). Edit one, copy it over the other: a test on each side fails while they differ. Regexes are the subset Rust regex and JavaScript RegExp agree on — ASCII classes, no \\b, no \\d, no lookaround — and each match is then checked by the named validator and boundary rule, implemented identically in packages/proxy/src/dlp/pii.rs and packages/mcp-proxy/src/dlpPii.ts. Conformance vectors: packages/shared-types/fixtures/pii-detector-vectors.json. `default_action` is what a detector does to live traffic (the request sent to the model, the response returned to the client) when neither the workspace nor the machine sets an action; `stored_action` is what it does to the copies Intutic keeps, whatever the live action: matches are redacted in sampled replay contexts and change-manifest targets, and a prompt or response with a match is not written to the response cache. Email and phone stay off on live traffic because coding agents edit real addresses and numbers (package.json authors, git config, fixtures) and a redacted one gets written back as the placeholder; nothing an agent needs is lost by keeping them out of what Intutic stores.",
     "version": 1,
     "detectors": [
         {
@@ -9,7 +9,8 @@
             "regex": "[0-9]{4}[ -][0-9]{4}[ -][0-9]{4}[ -][0-9]{4}|[0-9]{4}[ -][0-9]{6}[ -][0-9]{4,5}|[0-9]{13,19}",
             "boundary": "numeric",
             "validator": "card_luhn",
-            "default_action": "redact"
+            "default_action": "redact",
+            "stored_action": "redact"
         },
         {
             "id": "pii.iban",
@@ -18,7 +19,8 @@
             "regex": "[A-Z]{2}[0-9]{2}(?: ?[A-Z0-9]){11,30}",
             "boundary": "word",
             "validator": "iban_mod97",
-            "default_action": "redact"
+            "default_action": "redact",
+            "stored_action": "redact"
         },
         {
             "id": "pii.ssn",
@@ -27,7 +29,8 @@
             "regex": "[0-9]{3}-[0-9]{2}-[0-9]{4}",
             "boundary": "numeric",
             "validator": "ssn_ranges",
-            "default_action": "redact"
+            "default_action": "redact",
+            "stored_action": "redact"
         },
         {
             "id": "pii.email",
@@ -36,7 +39,8 @@
             "regex": "[A-Za-z0-9._%+-]{1,64}@[A-Za-z0-9-]{1,63}(?:\\.[A-Za-z0-9-]{1,63}){1,8}",
             "boundary": "word",
             "validator": "email_shape",
-            "default_action": "off"
+            "default_action": "off",
+            "stored_action": "redact"
         },
         {
             "id": "pii.phone",
@@ -45,7 +49,8 @@
             "regex": "\\+[1-9][0-9]{0,2}(?:[ .-]?\\([0-9]{1,4}\\)|[ .-]?[0-9]{1,4}){2,7}|(?:1[ .-])?(?:\\([2-9][0-9]{2}\\) ?|[2-9][0-9]{2}[ .-])[2-9][0-9]{2}[ .-][0-9]{4}",
             "boundary": "numeric",
             "validator": "phone_digits",
-            "default_action": "off"
+            "default_action": "off",
+            "stored_action": "redact"
         }
     ],
     "card_brands": [

package/dist/posturePresets.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"posturePresets.d.ts","sourceRoot":"","sources":["../src/posturePresets.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,CAAA;IACb,WAAW,EAAE,MAAM,CAAA;IACnB,8CAA8C;IAC9C,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,CAAA;IAC1C,wEAAwE;IACxE,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CACtC;AAED;;GAEG;AACH,eAAO,MAAM,iBAAiB,EAAE,SAAS,aAAa,EAkD5C,CAAA;AAEV;;;;;;;GAOG;AACH,eAAO,MAAM,aAAa,EAAE,SAAS,aAAa,EA6CxC,CAAA;AAEV,MAAM,MAAM,WAAW,GAAG,UAAU,GAAG,MAAM,CAAA;AAE7C,yEAAyE;AACzE,wBAAgB,WAAW,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS,CAGtF;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAA;IACV,UAAU,EAAE,MAAM,CAAA;IAClB,IAAI,EAAE,MAAM,CAAA;IACZ,uFAAuF;IACvF,MAAM,EAAE,MAAM,CAAA;IACd,oFAAoF;IACpF,OAAO,EAAE,OAAO,CAAA;IAChB,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;IACd,WAAW,EAAE,MAAM,CAAA;CACpB"}
+{"version":3,"file":"posturePresets.d.ts","sourceRoot":"","sources":["../src/posturePresets.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,CAAA;IACb,WAAW,EAAE,MAAM,CAAA;IACnB,8CAA8C;IAC9C,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,CAAA;IAC1C,wEAAwE;IACxE,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CACtC;AAED;;GAEG;AACH,eAAO,MAAM,iBAAiB,EAAE,SAAS,aAAa,EAkD5C,CAAA;AAUV;;;;;;;GAOG;AACH,eAAO,MAAM,aAAa,EAAE,SAAS,aAAa,EAgDxC,CAAA;AAEV,MAAM,MAAM,WAAW,GAAG,UAAU,GAAG,MAAM,CAAA;AAE7C,yEAAyE;AACzE,wBAAgB,WAAW,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS,CAGtF;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAA;IACV,UAAU,EAAE,MAAM,CAAA;IAClB,IAAI,EAAE,MAAM,CAAA;IACZ,uFAAuF;IACvF,MAAM,EAAE,MAAM,CAAA;IACd,oFAAoF;IACpF,OAAO,EAAE,OAAO,CAAA;IAChB,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;IACd,WAAW,EAAE,MAAM,CAAA;CACpB"}

package/dist/posturePresets.js

@@ -80,6 +80,12 @@ exports.SECURITY_POSTURES = [
         featureFlags: { ff_shadow_enforcement: true },
     },
 ];
+/**
+ * What every cost posture's response cache keeps, said where the posture is
+ * chosen: all three turn exact caching on, and a cache is stored data.
+ */
+const CACHE_STORAGE_NOTE = 'Cached answers are kept with their prompt text for 24 hours, scoped to this workspace; ' +
+    'an exchange in which DLP finds a secret or personal data is never cached.';
 /**
  * Cost postures: how aggressively the workspace pursues savings.
  *
@@ -94,7 +100,8 @@ exports.COST_POSTURES = [
         title: 'Max savings',
         description: 'Bandit routing enforces its selections, and both response caches serve ' +
             'repeats without an upstream call. Routing learns from measured integrity ' +
-            'and cost; it detects malformed and truncated responses, not subtly worse ones.',
+            'and cost; it detects malformed and truncated responses, not subtly worse ones. ' +
+            CACHE_STORAGE_NOTE,
         settings: {},
         featureFlags: {
             ff_bandit_routing: true,
@@ -108,7 +115,8 @@ exports.COST_POSTURES = [
         title: 'Balanced',
         description: 'Routing runs in shadow — it reports what it would have picked and what that ' +
             'would have saved, while every request is served by the model you asked for. ' +
-            'Exact-match caching on; semantic caching off.',
+            'Exact-match caching on; semantic caching off. ' +
+            CACHE_STORAGE_NOTE,
         settings: {},
         featureFlags: {
             ff_bandit_routing: false,
@@ -121,7 +129,8 @@ exports.COST_POSTURES = [
         name: 'quality-first',
         title: 'Quality first',
         description: 'No routing, no semantic cache: every request is served by the requested ' +
-            'model, fresh, with only exact repeats of a whole request served from cache.',
+            'model, fresh, with only exact repeats of a whole request served from cache. ' +
+            CACHE_STORAGE_NOTE,
         settings: {},
         featureFlags: {
             ff_bandit_routing: false,

package/dist/posturePresets.js.map

@@ -1 +1 @@
-{"version":3,"file":"posturePresets.js","sourceRoot":"","sources":["../src/posturePresets.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;;;AA6HH,kCAGC;AApHD;;GAEG;AACU,QAAA,iBAAiB,GAA6B;IACzD;QACE,IAAI,EAAE,QAAQ;QACd,KAAK,EAAE,QAAQ;QACf,WAAW,EACT,iFAAiF;YACjF,2EAA2E;YAC3E,oEAAoE;QACtE,QAAQ,EAAE;YACR,qBAAqB,EAAE,WAAW;YAClC,oBAAoB,EAAE,QAAQ;SAC/B;QACD,qEAAqE;QACrE,mEAAmE;QACnE,uEAAuE;QACvE,+DAA+D;QAC/D,kEAAkE;QAClE,kEAAkE;QAClE,kEAAkE;QAClE,sEAAsE;QACtE,yEAAyE;QACzE,uEAAuE;QACvE,YAAY,EAAE,EAAE,qBAAqB,EAAE,KAAK,EAAE,wBAAwB,EAAE,IAAI,EAAE;KAC/E;IACD;QACE,IAAI,EAAE,UAAU;QAChB,KAAK,EAAE,UAAU;QACjB,WAAW,EACT,+EAA+E;YAC/E,0EAA0E;YAC1E,6BAA6B;QAC/B,QAAQ,EAAE;YACR,qBAAqB,EAAE,SAAS;YAChC,oBAAoB,EAAE,MAAM;SAC7B;QACD,YAAY,EAAE,EAAE,qBAAqB,EAAE,KAAK,EAAE;KAC/C;IACD;QACE,IAAI,EAAE,SAAS;QACf,KAAK,EAAE,SAAS;QAChB,WAAW,EACT,gFAAgF;YAChF,gFAAgF;YAChF,4EAA4E;QAC9E,QAAQ,EAAE;YACR,qBAAqB,EAAE,YAAY;YACnC,oBAAoB,EAAE,MAAM;SAC7B;QACD,YAAY,EAAE,EAAE,qBAAqB,EAAE,IAAI,EAAE;KAC9C;CACO,CAAA;AAEV;;;;;;;GAOG;AACU,QAAA,aAAa,GAA6B;IACrD;QACE,IAAI,EAAE,SAAS;QACf,KAAK,EAAE,aAAa;QACpB,WAAW,EACT,yEAAyE;YACzE,2EAA2E;YAC3E,gFAAgF;QAClF,QAAQ,EAAE,EAAE;QACZ,YAAY,EAAE;YACZ,iBAAiB,EAAE,IAAI;YACvB,iBAAiB,EAAE,KAAK;YACxB,uBAAuB,EAAE,IAAI;YAC7B,0BAA0B,EAAE,IAAI;SACjC;KACF;IACD;QACE,IAAI,EAAE,UAAU;QAChB,KAAK,EAAE,UAAU;QACjB,WAAW,EACT,8EAA8E;YAC9E,8EAA8E;YAC9E,+CAA+C;QACjD,QAAQ,EAAE,EAAE;QACZ,YAAY,EAAE;YACZ,iBAAiB,EAAE,KAAK;YACxB,iBAAiB,EAAE,IAAI;YACvB,uBAAuB,EAAE,IAAI;YAC7B,0BAA0B,EAAE,KAAK;SAClC;KACF;IACD;QACE,IAAI,EAAE,eAAe;QACrB,KAAK,EAAE,eAAe;QACtB,WAAW,EACT,0EAA0E;YAC1E,6EAA6E;QAC/E,QAAQ,EAAE,EAAE;QACZ,YAAY,EAAE;YACZ,iBAAiB,EAAE,KAAK;YACxB,iBAAiB,EAAE,KAAK;YACxB,uBAAuB,EAAE,IAAI;YAC7B,0BAA0B,EAAE,KAAK;SAClC;KACF;CACO,CAAA;AAIV,yEAAyE;AACzE,SAAgB,WAAW,CAAC,IAAiB,EAAE,IAAY;IACzD,MAAM,GAAG,GAAG,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,yBAAiB,CAAC,CAAC,CAAC,qBAAa,CAAA;IACnE,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAA;AACzC,CAAC"}
+{"version":3,"file":"posturePresets.js","sourceRoot":"","sources":["../src/posturePresets.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;;;AAwIH,kCAGC;AA/HD;;GAEG;AACU,QAAA,iBAAiB,GAA6B;IACzD;QACE,IAAI,EAAE,QAAQ;QACd,KAAK,EAAE,QAAQ;QACf,WAAW,EACT,iFAAiF;YACjF,2EAA2E;YAC3E,oEAAoE;QACtE,QAAQ,EAAE;YACR,qBAAqB,EAAE,WAAW;YAClC,oBAAoB,EAAE,QAAQ;SAC/B;QACD,qEAAqE;QACrE,mEAAmE;QACnE,uEAAuE;QACvE,+DAA+D;QAC/D,kEAAkE;QAClE,kEAAkE;QAClE,kEAAkE;QAClE,sEAAsE;QACtE,yEAAyE;QACzE,uEAAuE;QACvE,YAAY,EAAE,EAAE,qBAAqB,EAAE,KAAK,EAAE,wBAAwB,EAAE,IAAI,EAAE;KAC/E;IACD;QACE,IAAI,EAAE,UAAU;QAChB,KAAK,EAAE,UAAU;QACjB,WAAW,EACT,+EAA+E;YAC/E,0EAA0E;YAC1E,6BAA6B;QAC/B,QAAQ,EAAE;YACR,qBAAqB,EAAE,SAAS;YAChC,oBAAoB,EAAE,MAAM;SAC7B;QACD,YAAY,EAAE,EAAE,qBAAqB,EAAE,KAAK,EAAE;KAC/C;IACD;QACE,IAAI,EAAE,SAAS;QACf,KAAK,EAAE,SAAS;QAChB,WAAW,EACT,gFAAgF;YAChF,gFAAgF;YAChF,4EAA4E;QAC9E,QAAQ,EAAE;YACR,qBAAqB,EAAE,YAAY;YACnC,oBAAoB,EAAE,MAAM;SAC7B;QACD,YAAY,EAAE,EAAE,qBAAqB,EAAE,IAAI,EAAE;KAC9C;CACO,CAAA;AAEV;;;GAGG;AACH,MAAM,kBAAkB,GACtB,yFAAyF;IACzF,2EAA2E,CAAA;AAE7E;;;;;;;GAOG;AACU,QAAA,aAAa,GAA6B;IACrD;QACE,IAAI,EAAE,SAAS;QACf,KAAK,EAAE,aAAa;QACpB,WAAW,EACT,yEAAyE;YACzE,2EAA2E;YAC3E,iFAAiF;YACjF,kBAAkB;QACpB,QAAQ,EAAE,EAAE;QACZ,YAAY,EAAE;YACZ,iBAAiB,EAAE,IAAI;YACvB,iBAAiB,EAAE,KAAK;YACxB,uBAAuB,EAAE,IAAI;YAC7B,0BAA0B,EAAE,IAAI;SACjC;KACF;IACD;QACE,IAAI,EAAE,UAAU;QAChB,KAAK,EAAE,UAAU;QACjB,WAAW,EACT,8EAA8E;YAC9E,8EAA8E;YAC9E,gDAAgD;YAChD,kBAAkB;QACpB,QAAQ,EAAE,EAAE;QACZ,YAAY,EAAE;YACZ,iBAAiB,EAAE,KAAK;YACxB,iBAAiB,EAAE,IAAI;YACvB,uBAAuB,EAAE,IAAI;YAC7B,0BAA0B,EAAE,KAAK;SAClC;KACF;IACD;QACE,IAAI,EAAE,eAAe;QACrB,KAAK,EAAE,eAAe;QACtB,WAAW,EACT,0EAA0E;YAC1E,8EAA8E;YAC9E,kBAAkB;QACpB,QAAQ,EAAE,EAAE;QACZ,YAAY,EAAE;YACZ,iBAAiB,EAAE,KAAK;YACxB,iBAAiB,EAAE,KAAK;YACxB,uBAAuB,EAAE,IAAI;YAC7B,0BAA0B,EAAE,KAAK;SAClC;KACF;CACO,CAAA;AAIV,yEAAyE;AACzE,SAAgB,WAAW,CAAC,IAAiB,EAAE,IAAY;IACzD,MAAM,GAAG,GAAG,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,yBAAiB,CAAC,CAAC,CAAC,qBAAa,CAAA;IACnE,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAA;AACzC,CAAC"}

package/dist/responses/common.d.ts

@@ -0,0 +1,63 @@
+/**
+ * Building blocks of the control plane's response schemas.
+ *
+ * Each schema in `src/responses/` describes a response body as the client
+ * receives it: JSON, so a timestamp is a string and a field the handler left
+ * `undefined` is absent (`.optional()`), not `null` (`.nullable()`). A route
+ * declares its schema by answering through `respond(c, Schema, body)`
+ * (`services/control-plane/src/lib/respond.ts`); the OpenAPI document
+ * publishes it, `tsc` holds the handler's body to it, and the control plane's
+ * tests reject a body that does not match it or carries a field it does not
+ * declare. Write one from the handler and the service code it returns, never
+ * from what a client expects: where the two disagree, the handler is right.
+ *
+ * Conventions:
+ * - Top-level schemas are named `<Thing>Response` and exported with their
+ *   inferred type under the same name.
+ * - No transforms, defaults or coercions: a schema describes, it does not
+ *   convert.
+ * - In a union, put the branch with more fields first: zod keeps the first
+ *   branch that matches and drops the fields it does not declare, which the
+ *   tests then report as undeclared.
+ *
+ * @module
+ */
+import { z } from 'zod';
+/** A timestamp: a `Date` the handler returned, serialized by `JSON.stringify`. */
+export declare const IsoTimestamp: z.ZodString;
+/** How a list response's row keys are cased (`lib/listEnvelope.ts` in the control plane). */
+export declare const RowCase: z.ZodEnum<["snake", "camel", "mixed"]>;
+/**
+ * The two keys `applyListEnvelope` adds to a list response: the key that
+ * holds the rows, and how their keys are cased.
+ */
+export declare function listEnvelope<K extends string, C extends z.infer<typeof RowCase>>(listProperty: K, rowCase: C): z.ZodObject<{
+    listProperty: z.ZodLiteral<K>;
+    rowCase: z.ZodLiteral<C>;
+}, "strip", z.ZodTypeAny, z.objectUtil.addQuestionMarks<z.baseObjectOutputType<{
+    listProperty: z.ZodLiteral<K>;
+    rowCase: z.ZodLiteral<C>;
+}>, any> extends infer T ? { [k in keyof T]: T[k]; } : never, z.baseObjectInputType<{
+    listProperty: z.ZodLiteral<K>;
+    rowCase: z.ZodLiteral<C>;
+}> extends infer T_1 ? { [k_1 in keyof T_1]: T_1[k_1]; } : never>;
+/**
+ * A response as a client reads it defensively: every field the schema
+ * declares (of any branch of a union), each `unknown` until the client checks
+ * it. A client that casts a body to `WireFields<SomeResponse>` instead of
+ * `Record<string, unknown>` can read only fields the route sends, so a field
+ * renamed on either side fails `tsc` rather than reading as absent forever.
+ */
+export type WireFields<T> = {
+    [K in T extends unknown ? keyof T : never]?: unknown;
+};
+/** `{ deleted: true }`, the answer of a delete that has nothing else to say. */
+export declare const DeletedResponse: z.ZodObject<{
+    deleted: z.ZodLiteral<true>;
+}, "strip", z.ZodTypeAny, {
+    deleted: true;
+}, {
+    deleted: true;
+}>;
+export type DeletedResponse = z.infer<typeof DeletedResponse>;
+//# sourceMappingURL=common.d.ts.map

package/dist/responses/common.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"common.d.ts","sourceRoot":"","sources":["../../src/responses/common.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB,kFAAkF;AAClF,eAAO,MAAM,YAAY,aAAwC,CAAA;AAEjE,6FAA6F;AAC7F,eAAO,MAAM,OAAO,wCAAsC,CAAA;AAE1D;;;GAGG;AACH,wBAAgB,YAAY,CAAC,CAAC,SAAS,MAAM,EAAE,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,OAAO,OAAO,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC;;;;;;;;;kEAE5G;AAED;;;;;;GAMG;AACH,MAAM,MAAM,UAAU,CAAC,CAAC,IAAI;KAAG,CAAC,IAAI,CAAC,SAAS,OAAO,GAAG,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,EAAE,OAAO;CAAE,CAAA;AAEpF,gFAAgF;AAChF,eAAO,MAAM,eAAe;;;;;;EAAyC,CAAA;AACrE,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAA"}

package/dist/responses/common.js

@@ -0,0 +1,43 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DeletedResponse = exports.RowCase = exports.IsoTimestamp = void 0;
+exports.listEnvelope = listEnvelope;
+/**
+ * Building blocks of the control plane's response schemas.
+ *
+ * Each schema in `src/responses/` describes a response body as the client
+ * receives it: JSON, so a timestamp is a string and a field the handler left
+ * `undefined` is absent (`.optional()`), not `null` (`.nullable()`). A route
+ * declares its schema by answering through `respond(c, Schema, body)`
+ * (`services/control-plane/src/lib/respond.ts`); the OpenAPI document
+ * publishes it, `tsc` holds the handler's body to it, and the control plane's
+ * tests reject a body that does not match it or carries a field it does not
+ * declare. Write one from the handler and the service code it returns, never
+ * from what a client expects: where the two disagree, the handler is right.
+ *
+ * Conventions:
+ * - Top-level schemas are named `<Thing>Response` and exported with their
+ *   inferred type under the same name.
+ * - No transforms, defaults or coercions: a schema describes, it does not
+ *   convert.
+ * - In a union, put the branch with more fields first: zod keeps the first
+ *   branch that matches and drops the fields it does not declare, which the
+ *   tests then report as undeclared.
+ *
+ * @module
+ */
+const zod_1 = require("zod");
+/** A timestamp: a `Date` the handler returned, serialized by `JSON.stringify`. */
+exports.IsoTimestamp = zod_1.z.string().datetime({ offset: true });
+/** How a list response's row keys are cased (`lib/listEnvelope.ts` in the control plane). */
+exports.RowCase = zod_1.z.enum(['snake', 'camel', 'mixed']);
+/**
+ * The two keys `applyListEnvelope` adds to a list response: the key that
+ * holds the rows, and how their keys are cased.
+ */
+function listEnvelope(listProperty, rowCase) {
+    return zod_1.z.object({ listProperty: zod_1.z.literal(listProperty), rowCase: zod_1.z.literal(rowCase) });
+}
+/** `{ deleted: true }`, the answer of a delete that has nothing else to say. */
+exports.DeletedResponse = zod_1.z.object({ deleted: zod_1.z.literal(true) });
+//# sourceMappingURL=common.js.map

package/dist/responses/common.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"common.js","sourceRoot":"","sources":["../../src/responses/common.ts"],"names":[],"mappings":";;;AAoCA,oCAEC;AAtCD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,6BAAuB;AAEvB,kFAAkF;AACrE,QAAA,YAAY,GAAG,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;AAEjE,6FAA6F;AAChF,QAAA,OAAO,GAAG,OAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAA;AAE1D;;;GAGG;AACH,SAAgB,YAAY,CAAsD,YAAe,EAAE,OAAU;IAC3G,OAAO,OAAC,CAAC,MAAM,CAAC,EAAE,YAAY,EAAE,OAAC,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,OAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;AACzF,CAAC;AAWD,gFAAgF;AACnE,QAAA,eAAe,GAAG,OAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,OAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA"}