@neat.is/types 0.4.20-dev.20260630 → 0.4.22

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/dist/index.d.ts CHANGED
@@ -1049,6 +1049,137 @@ declare const TransitiveDependenciesResultSchema: z.ZodObject<{
1049
1049
  total: number;
1050
1050
  }>;
1051
1051
  type TransitiveDependenciesResult = z.infer<typeof TransitiveDependenciesResultSchema>;
1052
+ declare const ObservedDependenciesResultSchema: z.ZodObject<{
1053
+ origin: z.ZodString;
1054
+ dependencies: z.ZodArray<z.ZodObject<{
1055
+ id: z.ZodString;
1056
+ source: z.ZodString;
1057
+ target: z.ZodString;
1058
+ type: z.ZodEnum<["CALLS", "DEPENDS_ON", "CONNECTS_TO", "CONFIGURED_BY", "PUBLISHES_TO", "CONSUMES_FROM", "RUNS_ON", "CONTAINS", "IMPORTS"]>;
1059
+ provenance: z.ZodEnum<["EXTRACTED", "INFERRED", "OBSERVED", "STALE"]>;
1060
+ confidence: z.ZodOptional<z.ZodNumber>;
1061
+ lastObserved: z.ZodOptional<z.ZodString>;
1062
+ callCount: z.ZodOptional<z.ZodNumber>;
1063
+ evidence: z.ZodOptional<z.ZodObject<{
1064
+ file: z.ZodString;
1065
+ line: z.ZodOptional<z.ZodNumber>;
1066
+ snippet: z.ZodOptional<z.ZodString>;
1067
+ }, "strip", z.ZodTypeAny, {
1068
+ file: string;
1069
+ line?: number | undefined;
1070
+ snippet?: string | undefined;
1071
+ }, {
1072
+ file: string;
1073
+ line?: number | undefined;
1074
+ snippet?: string | undefined;
1075
+ }>>;
1076
+ signal: z.ZodOptional<z.ZodObject<{
1077
+ spanCount: z.ZodNumber;
1078
+ errorCount: z.ZodNumber;
1079
+ lastObservedAgeMs: z.ZodOptional<z.ZodNumber>;
1080
+ }, "strip", z.ZodTypeAny, {
1081
+ spanCount: number;
1082
+ errorCount: number;
1083
+ lastObservedAgeMs?: number | undefined;
1084
+ }, {
1085
+ spanCount: number;
1086
+ errorCount: number;
1087
+ lastObservedAgeMs?: number | undefined;
1088
+ }>>;
1089
+ }, "strip", z.ZodTypeAny, {
1090
+ type: "CALLS" | "DEPENDS_ON" | "CONNECTS_TO" | "CONFIGURED_BY" | "PUBLISHES_TO" | "CONSUMES_FROM" | "RUNS_ON" | "CONTAINS" | "IMPORTS";
1091
+ id: string;
1092
+ source: string;
1093
+ target: string;
1094
+ provenance: "EXTRACTED" | "INFERRED" | "OBSERVED" | "STALE";
1095
+ lastObserved?: string | undefined;
1096
+ confidence?: number | undefined;
1097
+ callCount?: number | undefined;
1098
+ evidence?: {
1099
+ file: string;
1100
+ line?: number | undefined;
1101
+ snippet?: string | undefined;
1102
+ } | undefined;
1103
+ signal?: {
1104
+ spanCount: number;
1105
+ errorCount: number;
1106
+ lastObservedAgeMs?: number | undefined;
1107
+ } | undefined;
1108
+ }, {
1109
+ type: "CALLS" | "DEPENDS_ON" | "CONNECTS_TO" | "CONFIGURED_BY" | "PUBLISHES_TO" | "CONSUMES_FROM" | "RUNS_ON" | "CONTAINS" | "IMPORTS";
1110
+ id: string;
1111
+ source: string;
1112
+ target: string;
1113
+ provenance: "EXTRACTED" | "INFERRED" | "OBSERVED" | "STALE";
1114
+ lastObserved?: string | undefined;
1115
+ confidence?: number | undefined;
1116
+ callCount?: number | undefined;
1117
+ evidence?: {
1118
+ file: string;
1119
+ line?: number | undefined;
1120
+ snippet?: string | undefined;
1121
+ } | undefined;
1122
+ signal?: {
1123
+ spanCount: number;
1124
+ errorCount: number;
1125
+ lastObservedAgeMs?: number | undefined;
1126
+ } | undefined;
1127
+ }>, "many">;
1128
+ observed: z.ZodBoolean;
1129
+ inboundObservedCount: z.ZodNumber;
1130
+ hasExtractedOutbound: z.ZodBoolean;
1131
+ }, "strip", z.ZodTypeAny, {
1132
+ dependencies: {
1133
+ type: "CALLS" | "DEPENDS_ON" | "CONNECTS_TO" | "CONFIGURED_BY" | "PUBLISHES_TO" | "CONSUMES_FROM" | "RUNS_ON" | "CONTAINS" | "IMPORTS";
1134
+ id: string;
1135
+ source: string;
1136
+ target: string;
1137
+ provenance: "EXTRACTED" | "INFERRED" | "OBSERVED" | "STALE";
1138
+ lastObserved?: string | undefined;
1139
+ confidence?: number | undefined;
1140
+ callCount?: number | undefined;
1141
+ evidence?: {
1142
+ file: string;
1143
+ line?: number | undefined;
1144
+ snippet?: string | undefined;
1145
+ } | undefined;
1146
+ signal?: {
1147
+ spanCount: number;
1148
+ errorCount: number;
1149
+ lastObservedAgeMs?: number | undefined;
1150
+ } | undefined;
1151
+ }[];
1152
+ origin: string;
1153
+ observed: boolean;
1154
+ inboundObservedCount: number;
1155
+ hasExtractedOutbound: boolean;
1156
+ }, {
1157
+ dependencies: {
1158
+ type: "CALLS" | "DEPENDS_ON" | "CONNECTS_TO" | "CONFIGURED_BY" | "PUBLISHES_TO" | "CONSUMES_FROM" | "RUNS_ON" | "CONTAINS" | "IMPORTS";
1159
+ id: string;
1160
+ source: string;
1161
+ target: string;
1162
+ provenance: "EXTRACTED" | "INFERRED" | "OBSERVED" | "STALE";
1163
+ lastObserved?: string | undefined;
1164
+ confidence?: number | undefined;
1165
+ callCount?: number | undefined;
1166
+ evidence?: {
1167
+ file: string;
1168
+ line?: number | undefined;
1169
+ snippet?: string | undefined;
1170
+ } | undefined;
1171
+ signal?: {
1172
+ spanCount: number;
1173
+ errorCount: number;
1174
+ lastObservedAgeMs?: number | undefined;
1175
+ } | undefined;
1176
+ }[];
1177
+ origin: string;
1178
+ observed: boolean;
1179
+ inboundObservedCount: number;
1180
+ hasExtractedOutbound: boolean;
1181
+ }>;
1182
+ type ObservedDependenciesResult = z.infer<typeof ObservedDependenciesResultSchema>;
1052
1183
 
1053
1184
  declare function serviceId(name: string, env?: string): string;
1054
1185
  declare function parseServiceId(id: string): {
@@ -1717,6 +1848,91 @@ declare const CheckPoliciesScopeSchema: z.ZodUnion<[z.ZodEnum<["all", "unresolve
1717
1848
  policyId: string;
1718
1849
  }>]>;
1719
1850
  type CheckPoliciesScope = z.infer<typeof CheckPoliciesScopeSchema>;
1851
+ declare const ApplicablePolicySchema: z.ZodObject<{
1852
+ policyId: z.ZodString;
1853
+ policyName: z.ZodString;
1854
+ description: z.ZodOptional<z.ZodString>;
1855
+ severity: z.ZodEnum<["info", "warning", "error", "critical"]>;
1856
+ onViolation: z.ZodEnum<["log", "alert", "block"]>;
1857
+ ruleType: z.ZodEnum<["structural", "compatibility", "provenance", "ownership", "blast-radius"]>;
1858
+ match: z.ZodEnum<["subject", "region"]>;
1859
+ reason: z.ZodString;
1860
+ }, "strip", z.ZodTypeAny, {
1861
+ reason: string;
1862
+ severity: "info" | "warning" | "error" | "critical";
1863
+ onViolation: "log" | "alert" | "block";
1864
+ policyId: string;
1865
+ policyName: string;
1866
+ ruleType: "provenance" | "structural" | "compatibility" | "ownership" | "blast-radius";
1867
+ match: "region" | "subject";
1868
+ description?: string | undefined;
1869
+ }, {
1870
+ reason: string;
1871
+ severity: "info" | "warning" | "error" | "critical";
1872
+ onViolation: "log" | "alert" | "block";
1873
+ policyId: string;
1874
+ policyName: string;
1875
+ ruleType: "provenance" | "structural" | "compatibility" | "ownership" | "blast-radius";
1876
+ match: "region" | "subject";
1877
+ description?: string | undefined;
1878
+ }>;
1879
+ type ApplicablePolicy = z.infer<typeof ApplicablePolicySchema>;
1880
+ declare const ApplicablePoliciesResponseSchema: z.ZodObject<{
1881
+ node: z.ZodString;
1882
+ applicable: z.ZodArray<z.ZodObject<{
1883
+ policyId: z.ZodString;
1884
+ policyName: z.ZodString;
1885
+ description: z.ZodOptional<z.ZodString>;
1886
+ severity: z.ZodEnum<["info", "warning", "error", "critical"]>;
1887
+ onViolation: z.ZodEnum<["log", "alert", "block"]>;
1888
+ ruleType: z.ZodEnum<["structural", "compatibility", "provenance", "ownership", "blast-radius"]>;
1889
+ match: z.ZodEnum<["subject", "region"]>;
1890
+ reason: z.ZodString;
1891
+ }, "strip", z.ZodTypeAny, {
1892
+ reason: string;
1893
+ severity: "info" | "warning" | "error" | "critical";
1894
+ onViolation: "log" | "alert" | "block";
1895
+ policyId: string;
1896
+ policyName: string;
1897
+ ruleType: "provenance" | "structural" | "compatibility" | "ownership" | "blast-radius";
1898
+ match: "region" | "subject";
1899
+ description?: string | undefined;
1900
+ }, {
1901
+ reason: string;
1902
+ severity: "info" | "warning" | "error" | "critical";
1903
+ onViolation: "log" | "alert" | "block";
1904
+ policyId: string;
1905
+ policyName: string;
1906
+ ruleType: "provenance" | "structural" | "compatibility" | "ownership" | "blast-radius";
1907
+ match: "region" | "subject";
1908
+ description?: string | undefined;
1909
+ }>, "many">;
1910
+ }, "strip", z.ZodTypeAny, {
1911
+ node: string;
1912
+ applicable: {
1913
+ reason: string;
1914
+ severity: "info" | "warning" | "error" | "critical";
1915
+ onViolation: "log" | "alert" | "block";
1916
+ policyId: string;
1917
+ policyName: string;
1918
+ ruleType: "provenance" | "structural" | "compatibility" | "ownership" | "blast-radius";
1919
+ match: "region" | "subject";
1920
+ description?: string | undefined;
1921
+ }[];
1922
+ }, {
1923
+ node: string;
1924
+ applicable: {
1925
+ reason: string;
1926
+ severity: "info" | "warning" | "error" | "critical";
1927
+ onViolation: "log" | "alert" | "block";
1928
+ policyId: string;
1929
+ policyName: string;
1930
+ ruleType: "provenance" | "structural" | "compatibility" | "ownership" | "blast-radius";
1931
+ match: "region" | "subject";
1932
+ description?: string | undefined;
1933
+ }[];
1934
+ }>;
1935
+ type ApplicablePoliciesResponse = z.infer<typeof ApplicablePoliciesResponseSchema>;
1720
1936
  declare const PolicyViolationSchema: z.ZodObject<{
1721
1937
  id: z.ZodString;
1722
1938
  policyId: z.ZodString;
@@ -2080,7 +2296,6 @@ declare const MissingExtractedDivergenceSchema: z.ZodObject<{
2080
2296
  target: string;
2081
2297
  confidence: number;
2082
2298
  edgeType: "CALLS" | "DEPENDS_ON" | "CONNECTS_TO" | "CONFIGURED_BY" | "PUBLISHES_TO" | "CONSUMES_FROM" | "RUNS_ON" | "CONTAINS" | "IMPORTS";
2083
- recommendation: string;
2084
2299
  observed: {
2085
2300
  type: "CALLS" | "DEPENDS_ON" | "CONNECTS_TO" | "CONFIGURED_BY" | "PUBLISHES_TO" | "CONSUMES_FROM" | "RUNS_ON" | "CONTAINS" | "IMPORTS";
2086
2301
  id: string;
@@ -2101,6 +2316,7 @@ declare const MissingExtractedDivergenceSchema: z.ZodObject<{
2101
2316
  lastObservedAgeMs?: number | undefined;
2102
2317
  } | undefined;
2103
2318
  };
2319
+ recommendation: string;
2104
2320
  }, {
2105
2321
  type: "missing-extracted";
2106
2322
  reason: string;
@@ -2108,7 +2324,6 @@ declare const MissingExtractedDivergenceSchema: z.ZodObject<{
2108
2324
  target: string;
2109
2325
  confidence: number;
2110
2326
  edgeType: "CALLS" | "DEPENDS_ON" | "CONNECTS_TO" | "CONFIGURED_BY" | "PUBLISHES_TO" | "CONSUMES_FROM" | "RUNS_ON" | "CONTAINS" | "IMPORTS";
2111
- recommendation: string;
2112
2327
  observed: {
2113
2328
  type: "CALLS" | "DEPENDS_ON" | "CONNECTS_TO" | "CONFIGURED_BY" | "PUBLISHES_TO" | "CONSUMES_FROM" | "RUNS_ON" | "CONTAINS" | "IMPORTS";
2114
2329
  id: string;
@@ -2129,6 +2344,7 @@ declare const MissingExtractedDivergenceSchema: z.ZodObject<{
2129
2344
  lastObservedAgeMs?: number | undefined;
2130
2345
  } | undefined;
2131
2346
  };
2347
+ recommendation: string;
2132
2348
  }>;
2133
2349
  type MissingExtractedDivergence = z.infer<typeof MissingExtractedDivergenceSchema>;
2134
2350
  declare const CompatibilityVerdictSchema: z.ZodEnum<["incompatible", "deprecated", "unknown"]>;
@@ -2320,14 +2536,6 @@ declare const CompatViolationDivergenceSchema: z.ZodObject<{
2320
2536
  source: string;
2321
2537
  target: string;
2322
2538
  confidence: number;
2323
- rule: {
2324
- kind: string;
2325
- reason: string;
2326
- driver?: string | undefined;
2327
- engine?: string | undefined;
2328
- package?: string | undefined;
2329
- };
2330
- recommendation: string;
2331
2539
  observed: {
2332
2540
  type: "CALLS" | "DEPENDS_ON" | "CONNECTS_TO" | "CONFIGURED_BY" | "PUBLISHES_TO" | "CONSUMES_FROM" | "RUNS_ON" | "CONTAINS" | "IMPORTS";
2333
2541
  id: string;
@@ -2348,12 +2556,6 @@ declare const CompatViolationDivergenceSchema: z.ZodObject<{
2348
2556
  lastObservedAgeMs?: number | undefined;
2349
2557
  } | undefined;
2350
2558
  };
2351
- }, {
2352
- type: "compat-violation";
2353
- reason: string;
2354
- source: string;
2355
- target: string;
2356
- confidence: number;
2357
2559
  rule: {
2358
2560
  kind: string;
2359
2561
  reason: string;
@@ -2362,6 +2564,12 @@ declare const CompatViolationDivergenceSchema: z.ZodObject<{
2362
2564
  package?: string | undefined;
2363
2565
  };
2364
2566
  recommendation: string;
2567
+ }, {
2568
+ type: "compat-violation";
2569
+ reason: string;
2570
+ source: string;
2571
+ target: string;
2572
+ confidence: number;
2365
2573
  observed: {
2366
2574
  type: "CALLS" | "DEPENDS_ON" | "CONNECTS_TO" | "CONFIGURED_BY" | "PUBLISHES_TO" | "CONSUMES_FROM" | "RUNS_ON" | "CONTAINS" | "IMPORTS";
2367
2575
  id: string;
@@ -2382,6 +2590,14 @@ declare const CompatViolationDivergenceSchema: z.ZodObject<{
2382
2590
  lastObservedAgeMs?: number | undefined;
2383
2591
  } | undefined;
2384
2592
  };
2593
+ rule: {
2594
+ kind: string;
2595
+ reason: string;
2596
+ driver?: string | undefined;
2597
+ engine?: string | undefined;
2598
+ package?: string | undefined;
2599
+ };
2600
+ recommendation: string;
2385
2601
  }>;
2386
2602
  type CompatViolationDivergence = z.infer<typeof CompatViolationDivergenceSchema>;
2387
2603
  declare const DivergenceSchema: z.ZodDiscriminatedUnion<"type", [z.ZodObject<{
@@ -2611,7 +2827,6 @@ declare const DivergenceSchema: z.ZodDiscriminatedUnion<"type", [z.ZodObject<{
2611
2827
  target: string;
2612
2828
  confidence: number;
2613
2829
  edgeType: "CALLS" | "DEPENDS_ON" | "CONNECTS_TO" | "CONFIGURED_BY" | "PUBLISHES_TO" | "CONSUMES_FROM" | "RUNS_ON" | "CONTAINS" | "IMPORTS";
2614
- recommendation: string;
2615
2830
  observed: {
2616
2831
  type: "CALLS" | "DEPENDS_ON" | "CONNECTS_TO" | "CONFIGURED_BY" | "PUBLISHES_TO" | "CONSUMES_FROM" | "RUNS_ON" | "CONTAINS" | "IMPORTS";
2617
2832
  id: string;
@@ -2632,6 +2847,7 @@ declare const DivergenceSchema: z.ZodDiscriminatedUnion<"type", [z.ZodObject<{
2632
2847
  lastObservedAgeMs?: number | undefined;
2633
2848
  } | undefined;
2634
2849
  };
2850
+ recommendation: string;
2635
2851
  }, {
2636
2852
  type: "missing-extracted";
2637
2853
  reason: string;
@@ -2639,7 +2855,6 @@ declare const DivergenceSchema: z.ZodDiscriminatedUnion<"type", [z.ZodObject<{
2639
2855
  target: string;
2640
2856
  confidence: number;
2641
2857
  edgeType: "CALLS" | "DEPENDS_ON" | "CONNECTS_TO" | "CONFIGURED_BY" | "PUBLISHES_TO" | "CONSUMES_FROM" | "RUNS_ON" | "CONTAINS" | "IMPORTS";
2642
- recommendation: string;
2643
2858
  observed: {
2644
2859
  type: "CALLS" | "DEPENDS_ON" | "CONNECTS_TO" | "CONFIGURED_BY" | "PUBLISHES_TO" | "CONSUMES_FROM" | "RUNS_ON" | "CONTAINS" | "IMPORTS";
2645
2860
  id: string;
@@ -2660,6 +2875,7 @@ declare const DivergenceSchema: z.ZodDiscriminatedUnion<"type", [z.ZodObject<{
2660
2875
  lastObservedAgeMs?: number | undefined;
2661
2876
  } | undefined;
2662
2877
  };
2878
+ recommendation: string;
2663
2879
  }>, z.ZodObject<{
2664
2880
  extractedVersion: z.ZodString;
2665
2881
  observedVersion: z.ZodString;
@@ -2823,14 +3039,6 @@ declare const DivergenceSchema: z.ZodDiscriminatedUnion<"type", [z.ZodObject<{
2823
3039
  source: string;
2824
3040
  target: string;
2825
3041
  confidence: number;
2826
- rule: {
2827
- kind: string;
2828
- reason: string;
2829
- driver?: string | undefined;
2830
- engine?: string | undefined;
2831
- package?: string | undefined;
2832
- };
2833
- recommendation: string;
2834
3042
  observed: {
2835
3043
  type: "CALLS" | "DEPENDS_ON" | "CONNECTS_TO" | "CONFIGURED_BY" | "PUBLISHES_TO" | "CONSUMES_FROM" | "RUNS_ON" | "CONTAINS" | "IMPORTS";
2836
3044
  id: string;
@@ -2851,12 +3059,6 @@ declare const DivergenceSchema: z.ZodDiscriminatedUnion<"type", [z.ZodObject<{
2851
3059
  lastObservedAgeMs?: number | undefined;
2852
3060
  } | undefined;
2853
3061
  };
2854
- }, {
2855
- type: "compat-violation";
2856
- reason: string;
2857
- source: string;
2858
- target: string;
2859
- confidence: number;
2860
3062
  rule: {
2861
3063
  kind: string;
2862
3064
  reason: string;
@@ -2865,6 +3067,12 @@ declare const DivergenceSchema: z.ZodDiscriminatedUnion<"type", [z.ZodObject<{
2865
3067
  package?: string | undefined;
2866
3068
  };
2867
3069
  recommendation: string;
3070
+ }, {
3071
+ type: "compat-violation";
3072
+ reason: string;
3073
+ source: string;
3074
+ target: string;
3075
+ confidence: number;
2868
3076
  observed: {
2869
3077
  type: "CALLS" | "DEPENDS_ON" | "CONNECTS_TO" | "CONFIGURED_BY" | "PUBLISHES_TO" | "CONSUMES_FROM" | "RUNS_ON" | "CONTAINS" | "IMPORTS";
2870
3078
  id: string;
@@ -2885,6 +3093,14 @@ declare const DivergenceSchema: z.ZodDiscriminatedUnion<"type", [z.ZodObject<{
2885
3093
  lastObservedAgeMs?: number | undefined;
2886
3094
  } | undefined;
2887
3095
  };
3096
+ rule: {
3097
+ kind: string;
3098
+ reason: string;
3099
+ driver?: string | undefined;
3100
+ engine?: string | undefined;
3101
+ package?: string | undefined;
3102
+ };
3103
+ recommendation: string;
2888
3104
  }>]>;
2889
3105
  type Divergence = z.infer<typeof DivergenceSchema>;
2890
3106
  declare const DivergenceResultSchema: z.ZodObject<{
@@ -3115,7 +3331,6 @@ declare const DivergenceResultSchema: z.ZodObject<{
3115
3331
  target: string;
3116
3332
  confidence: number;
3117
3333
  edgeType: "CALLS" | "DEPENDS_ON" | "CONNECTS_TO" | "CONFIGURED_BY" | "PUBLISHES_TO" | "CONSUMES_FROM" | "RUNS_ON" | "CONTAINS" | "IMPORTS";
3118
- recommendation: string;
3119
3334
  observed: {
3120
3335
  type: "CALLS" | "DEPENDS_ON" | "CONNECTS_TO" | "CONFIGURED_BY" | "PUBLISHES_TO" | "CONSUMES_FROM" | "RUNS_ON" | "CONTAINS" | "IMPORTS";
3121
3336
  id: string;
@@ -3136,6 +3351,7 @@ declare const DivergenceResultSchema: z.ZodObject<{
3136
3351
  lastObservedAgeMs?: number | undefined;
3137
3352
  } | undefined;
3138
3353
  };
3354
+ recommendation: string;
3139
3355
  }, {
3140
3356
  type: "missing-extracted";
3141
3357
  reason: string;
@@ -3143,7 +3359,6 @@ declare const DivergenceResultSchema: z.ZodObject<{
3143
3359
  target: string;
3144
3360
  confidence: number;
3145
3361
  edgeType: "CALLS" | "DEPENDS_ON" | "CONNECTS_TO" | "CONFIGURED_BY" | "PUBLISHES_TO" | "CONSUMES_FROM" | "RUNS_ON" | "CONTAINS" | "IMPORTS";
3146
- recommendation: string;
3147
3362
  observed: {
3148
3363
  type: "CALLS" | "DEPENDS_ON" | "CONNECTS_TO" | "CONFIGURED_BY" | "PUBLISHES_TO" | "CONSUMES_FROM" | "RUNS_ON" | "CONTAINS" | "IMPORTS";
3149
3364
  id: string;
@@ -3164,6 +3379,7 @@ declare const DivergenceResultSchema: z.ZodObject<{
3164
3379
  lastObservedAgeMs?: number | undefined;
3165
3380
  } | undefined;
3166
3381
  };
3382
+ recommendation: string;
3167
3383
  }>, z.ZodObject<{
3168
3384
  extractedVersion: z.ZodString;
3169
3385
  observedVersion: z.ZodString;
@@ -3327,14 +3543,6 @@ declare const DivergenceResultSchema: z.ZodObject<{
3327
3543
  source: string;
3328
3544
  target: string;
3329
3545
  confidence: number;
3330
- rule: {
3331
- kind: string;
3332
- reason: string;
3333
- driver?: string | undefined;
3334
- engine?: string | undefined;
3335
- package?: string | undefined;
3336
- };
3337
- recommendation: string;
3338
3546
  observed: {
3339
3547
  type: "CALLS" | "DEPENDS_ON" | "CONNECTS_TO" | "CONFIGURED_BY" | "PUBLISHES_TO" | "CONSUMES_FROM" | "RUNS_ON" | "CONTAINS" | "IMPORTS";
3340
3548
  id: string;
@@ -3355,12 +3563,6 @@ declare const DivergenceResultSchema: z.ZodObject<{
3355
3563
  lastObservedAgeMs?: number | undefined;
3356
3564
  } | undefined;
3357
3565
  };
3358
- }, {
3359
- type: "compat-violation";
3360
- reason: string;
3361
- source: string;
3362
- target: string;
3363
- confidence: number;
3364
3566
  rule: {
3365
3567
  kind: string;
3366
3568
  reason: string;
@@ -3369,6 +3571,12 @@ declare const DivergenceResultSchema: z.ZodObject<{
3369
3571
  package?: string | undefined;
3370
3572
  };
3371
3573
  recommendation: string;
3574
+ }, {
3575
+ type: "compat-violation";
3576
+ reason: string;
3577
+ source: string;
3578
+ target: string;
3579
+ confidence: number;
3372
3580
  observed: {
3373
3581
  type: "CALLS" | "DEPENDS_ON" | "CONNECTS_TO" | "CONFIGURED_BY" | "PUBLISHES_TO" | "CONSUMES_FROM" | "RUNS_ON" | "CONTAINS" | "IMPORTS";
3374
3582
  id: string;
@@ -3389,6 +3597,14 @@ declare const DivergenceResultSchema: z.ZodObject<{
3389
3597
  lastObservedAgeMs?: number | undefined;
3390
3598
  } | undefined;
3391
3599
  };
3600
+ rule: {
3601
+ kind: string;
3602
+ reason: string;
3603
+ driver?: string | undefined;
3604
+ engine?: string | undefined;
3605
+ package?: string | undefined;
3606
+ };
3607
+ recommendation: string;
3392
3608
  }>]>, "many">;
3393
3609
  totalAffected: z.ZodNumber;
3394
3610
  computedAt: z.ZodString;
@@ -3429,7 +3645,6 @@ declare const DivergenceResultSchema: z.ZodObject<{
3429
3645
  target: string;
3430
3646
  confidence: number;
3431
3647
  edgeType: "CALLS" | "DEPENDS_ON" | "CONNECTS_TO" | "CONFIGURED_BY" | "PUBLISHES_TO" | "CONSUMES_FROM" | "RUNS_ON" | "CONTAINS" | "IMPORTS";
3432
- recommendation: string;
3433
3648
  observed: {
3434
3649
  type: "CALLS" | "DEPENDS_ON" | "CONNECTS_TO" | "CONFIGURED_BY" | "PUBLISHES_TO" | "CONSUMES_FROM" | "RUNS_ON" | "CONTAINS" | "IMPORTS";
3435
3650
  id: string;
@@ -3450,6 +3665,7 @@ declare const DivergenceResultSchema: z.ZodObject<{
3450
3665
  lastObservedAgeMs?: number | undefined;
3451
3666
  } | undefined;
3452
3667
  };
3668
+ recommendation: string;
3453
3669
  } | {
3454
3670
  type: "version-mismatch";
3455
3671
  reason: string;
@@ -3475,14 +3691,6 @@ declare const DivergenceResultSchema: z.ZodObject<{
3475
3691
  source: string;
3476
3692
  target: string;
3477
3693
  confidence: number;
3478
- rule: {
3479
- kind: string;
3480
- reason: string;
3481
- driver?: string | undefined;
3482
- engine?: string | undefined;
3483
- package?: string | undefined;
3484
- };
3485
- recommendation: string;
3486
3694
  observed: {
3487
3695
  type: "CALLS" | "DEPENDS_ON" | "CONNECTS_TO" | "CONFIGURED_BY" | "PUBLISHES_TO" | "CONSUMES_FROM" | "RUNS_ON" | "CONTAINS" | "IMPORTS";
3488
3696
  id: string;
@@ -3503,6 +3711,14 @@ declare const DivergenceResultSchema: z.ZodObject<{
3503
3711
  lastObservedAgeMs?: number | undefined;
3504
3712
  } | undefined;
3505
3713
  };
3714
+ rule: {
3715
+ kind: string;
3716
+ reason: string;
3717
+ driver?: string | undefined;
3718
+ engine?: string | undefined;
3719
+ package?: string | undefined;
3720
+ };
3721
+ recommendation: string;
3506
3722
  })[];
3507
3723
  computedAt: string;
3508
3724
  }, {
@@ -3542,7 +3758,6 @@ declare const DivergenceResultSchema: z.ZodObject<{
3542
3758
  target: string;
3543
3759
  confidence: number;
3544
3760
  edgeType: "CALLS" | "DEPENDS_ON" | "CONNECTS_TO" | "CONFIGURED_BY" | "PUBLISHES_TO" | "CONSUMES_FROM" | "RUNS_ON" | "CONTAINS" | "IMPORTS";
3545
- recommendation: string;
3546
3761
  observed: {
3547
3762
  type: "CALLS" | "DEPENDS_ON" | "CONNECTS_TO" | "CONFIGURED_BY" | "PUBLISHES_TO" | "CONSUMES_FROM" | "RUNS_ON" | "CONTAINS" | "IMPORTS";
3548
3763
  id: string;
@@ -3563,6 +3778,7 @@ declare const DivergenceResultSchema: z.ZodObject<{
3563
3778
  lastObservedAgeMs?: number | undefined;
3564
3779
  } | undefined;
3565
3780
  };
3781
+ recommendation: string;
3566
3782
  } | {
3567
3783
  type: "version-mismatch";
3568
3784
  reason: string;
@@ -3588,14 +3804,6 @@ declare const DivergenceResultSchema: z.ZodObject<{
3588
3804
  source: string;
3589
3805
  target: string;
3590
3806
  confidence: number;
3591
- rule: {
3592
- kind: string;
3593
- reason: string;
3594
- driver?: string | undefined;
3595
- engine?: string | undefined;
3596
- package?: string | undefined;
3597
- };
3598
- recommendation: string;
3599
3807
  observed: {
3600
3808
  type: "CALLS" | "DEPENDS_ON" | "CONNECTS_TO" | "CONFIGURED_BY" | "PUBLISHES_TO" | "CONSUMES_FROM" | "RUNS_ON" | "CONTAINS" | "IMPORTS";
3601
3809
  id: string;
@@ -3616,6 +3824,14 @@ declare const DivergenceResultSchema: z.ZodObject<{
3616
3824
  lastObservedAgeMs?: number | undefined;
3617
3825
  } | undefined;
3618
3826
  };
3827
+ rule: {
3828
+ kind: string;
3829
+ reason: string;
3830
+ driver?: string | undefined;
3831
+ engine?: string | undefined;
3832
+ package?: string | undefined;
3833
+ };
3834
+ recommendation: string;
3619
3835
  })[];
3620
3836
  computedAt: string;
3621
3837
  }>;
@@ -9221,7 +9437,7 @@ declare const GraphDiffResultSchema: z.ZodObject<{
9221
9437
  }>;
9222
9438
  type GraphDiffResult = z.infer<typeof GraphDiffResultSchema>;
9223
9439
 
9224
- type ExtractedConfidenceKind = 'structural' | 'verified-call-site' | 'url-with-structural-support' | 'hostname-shape-match';
9440
+ type ExtractedConfidenceKind = 'structural' | 'verified-call-site' | 'url-with-structural-support' | 'url-literal-service-target' | 'hostname-shape-match';
9225
9441
  declare const EXTRACTED_CONFIDENCE: Record<ExtractedConfidenceKind, number>;
9226
9442
  declare function confidenceForExtracted(kind: ExtractedConfidenceKind): number;
9227
9443
  declare function confidenceForObservedSignal(signal: EdgeSignal | undefined): number;
@@ -9229,4 +9445,4 @@ declare const DEFAULT_EXTRACTED_PRECISION_FLOOR = 0.7;
9229
9445
  declare function extractedPrecisionFloor(): number;
9230
9446
  declare function passesExtractedFloor(confidence: number): boolean;
9231
9447
 
9232
- export { type BlastRadiusAffectedNode, BlastRadiusAffectedNodeSchema, type BlastRadiusResult, BlastRadiusResultSchema, type BlastRadiusRule, BlastRadiusRuleSchema, type CheckPoliciesScope, CheckPoliciesScopeSchema, type CompatRuleRef, CompatRuleRefSchema, type CompatViolationDivergence, CompatViolationDivergenceSchema, type CompatibilityRule, CompatibilityRuleSchema, type CompatibilityVerdict, CompatibilityVerdictSchema, type CompatibleDriver, CompatibleDriverSchema, type ConfigNode, ConfigNodeSchema, DEFAULT_EXTRACTED_PRECISION_FLOOR, type DaemonHealthResponse, DaemonHealthResponseSchema, type DatabaseNode, DatabaseNodeSchema, type DiscoveredVia, DiscoveredViaSchema, type Divergence, type DivergenceResult, DivergenceResultSchema, DivergenceSchema, type DivergenceType, DivergenceTypeSchema, EMPTY_REGISTRY, EXTRACTED_CONFIDENCE, type EdgeEvidence, EdgeEvidenceSchema, type EdgeSignal, EdgeSignalSchema, EdgeType, EdgeTypeSchema, type EdgeTypeValue, type ErrorEvent, ErrorEventSchema, type ExtractedConfidenceKind, type FileNode, FileNodeSchema, type FrontierNode, FrontierNodeSchema, type GraphDiffResult, GraphDiffResultSchema, type GraphEdge, GraphEdgeSchema, type GraphEdgesResponse, GraphEdgesResponseSchema, type GraphNode, type GraphNodeResponse, GraphNodeResponseSchema, GraphNodeSchema, type HealthResponse, HealthResponseSchema, type HostMismatchDivergence, HostMismatchDivergenceSchema, type HypotheticalAction, HypotheticalActionSchema, type IncidentsResponse, IncidentsResponseSchema, type InfraNode, InfraNodeSchema, type MCPToolName, MCP_TOOL_NAMES, type MissingExtractedDivergence, MissingExtractedDivergenceSchema, type MissingObservedDivergence, MissingObservedDivergenceSchema, NodeType, NodeTypeSchema, type NodeTypeValue, type OwnershipRule, OwnershipRuleSchema, PROV_RANK, type PoliciesCheckBody, PoliciesCheckBodySchema, type PoliciesViolationsResponse, PoliciesViolationsResponseSchema, type Policy, type PolicyAction, PolicyActionSchema, type PolicyFile, PolicyFileSchema, type PolicyRule, PolicyRuleSchema, PolicySchema, type PolicySeverity, PolicySeveritySchema, type PolicyViolation, PolicyViolationSchema, Provenance, type ProvenanceRule, ProvenanceRuleSchema, ProvenanceSchema, type ProvenanceValue, type RegistryEntry, RegistryEntrySchema, type RegistryFile, RegistryFileSchema, type RegistryStatus, RegistryStatusSchema, type RootCauseResult, RootCauseResultSchema, type SearchMatch, SearchMatchSchema, type SearchResponse, SearchResponseSchema, type SerializedGraph, SerializedGraphSchema, type ServiceNode, ServiceNodeSchema, type SingleProjectResponse, SingleProjectResponseSchema, type SpanAttributes, SpanAttributesSchema, type StaleEvent, StaleEventSchema, type StaleEventsResponse, StaleEventsResponseSchema, type StructuralRule, StructuralRuleSchema, type TransitiveDependenciesResult, TransitiveDependenciesResultSchema, type TransitiveDependency, TransitiveDependencySchema, type VersionMismatchDivergence, VersionMismatchDivergenceSchema, confidenceForExtracted, confidenceForObservedSignal, configId, databaseId, extractedEdgeId, extractedPrecisionFloor, fileId, frontierId, inferredEdgeId, infraId, observedEdgeId, parseConfigId, parseDatabaseId, parseEdgeId, parseFileId, parseFrontierId, parseInfraId, parseServiceId, passesExtractedFloor, serviceId };
9448
+ export { type ApplicablePoliciesResponse, ApplicablePoliciesResponseSchema, type ApplicablePolicy, ApplicablePolicySchema, type BlastRadiusAffectedNode, BlastRadiusAffectedNodeSchema, type BlastRadiusResult, BlastRadiusResultSchema, type BlastRadiusRule, BlastRadiusRuleSchema, type CheckPoliciesScope, CheckPoliciesScopeSchema, type CompatRuleRef, CompatRuleRefSchema, type CompatViolationDivergence, CompatViolationDivergenceSchema, type CompatibilityRule, CompatibilityRuleSchema, type CompatibilityVerdict, CompatibilityVerdictSchema, type CompatibleDriver, CompatibleDriverSchema, type ConfigNode, ConfigNodeSchema, DEFAULT_EXTRACTED_PRECISION_FLOOR, type DaemonHealthResponse, DaemonHealthResponseSchema, type DatabaseNode, DatabaseNodeSchema, type DiscoveredVia, DiscoveredViaSchema, type Divergence, type DivergenceResult, DivergenceResultSchema, DivergenceSchema, type DivergenceType, DivergenceTypeSchema, EMPTY_REGISTRY, EXTRACTED_CONFIDENCE, type EdgeEvidence, EdgeEvidenceSchema, type EdgeSignal, EdgeSignalSchema, EdgeType, EdgeTypeSchema, type EdgeTypeValue, type ErrorEvent, ErrorEventSchema, type ExtractedConfidenceKind, type FileNode, FileNodeSchema, type FrontierNode, FrontierNodeSchema, type GraphDiffResult, GraphDiffResultSchema, type GraphEdge, GraphEdgeSchema, type GraphEdgesResponse, GraphEdgesResponseSchema, type GraphNode, type GraphNodeResponse, GraphNodeResponseSchema, GraphNodeSchema, type HealthResponse, HealthResponseSchema, type HostMismatchDivergence, HostMismatchDivergenceSchema, type HypotheticalAction, HypotheticalActionSchema, type IncidentsResponse, IncidentsResponseSchema, type InfraNode, InfraNodeSchema, type MCPToolName, MCP_TOOL_NAMES, type MissingExtractedDivergence, MissingExtractedDivergenceSchema, type MissingObservedDivergence, MissingObservedDivergenceSchema, NodeType, NodeTypeSchema, type NodeTypeValue, type ObservedDependenciesResult, ObservedDependenciesResultSchema, type OwnershipRule, OwnershipRuleSchema, PROV_RANK, type PoliciesCheckBody, PoliciesCheckBodySchema, type PoliciesViolationsResponse, PoliciesViolationsResponseSchema, type Policy, type PolicyAction, PolicyActionSchema, type PolicyFile, PolicyFileSchema, type PolicyRule, PolicyRuleSchema, PolicySchema, type PolicySeverity, PolicySeveritySchema, type PolicyViolation, PolicyViolationSchema, Provenance, type ProvenanceRule, ProvenanceRuleSchema, ProvenanceSchema, type ProvenanceValue, type RegistryEntry, RegistryEntrySchema, type RegistryFile, RegistryFileSchema, type RegistryStatus, RegistryStatusSchema, type RootCauseResult, RootCauseResultSchema, type SearchMatch, SearchMatchSchema, type SearchResponse, SearchResponseSchema, type SerializedGraph, SerializedGraphSchema, type ServiceNode, ServiceNodeSchema, type SingleProjectResponse, SingleProjectResponseSchema, type SpanAttributes, SpanAttributesSchema, type StaleEvent, StaleEventSchema, type StaleEventsResponse, StaleEventsResponseSchema, type StructuralRule, StructuralRuleSchema, type TransitiveDependenciesResult, TransitiveDependenciesResultSchema, type TransitiveDependency, TransitiveDependencySchema, type VersionMismatchDivergence, VersionMismatchDivergenceSchema, confidenceForExtracted, confidenceForObservedSignal, configId, databaseId, extractedEdgeId, extractedPrecisionFloor, fileId, frontierId, inferredEdgeId, infraId, observedEdgeId, parseConfigId, parseDatabaseId, parseEdgeId, parseFileId, parseFrontierId, parseInfraId, parseServiceId, passesExtractedFloor, serviceId };
package/dist/index.js CHANGED
@@ -320,6 +320,21 @@ var TransitiveDependenciesResultSchema = z5.object({
320
320
  dependencies: z5.array(TransitiveDependencySchema),
321
321
  total: z5.number().int().nonnegative()
322
322
  });
323
+ var ObservedDependenciesResultSchema = z5.object({
324
+ origin: z5.string(),
325
+ // OBSERVED outbound edges (CALLS/CONNECTS_TO/etc.), file-grained. Structural
326
+ // CONTAINS ownership is never listed here — it is not a runtime dependency.
327
+ dependencies: z5.array(GraphEdgeSchema),
328
+ // Did OTel see this node (or a file it owns) at all — as caller or callee?
329
+ // Distinguishes a pure receiver from a node runtime has never touched.
330
+ observed: z5.boolean(),
331
+ // Count of OBSERVED inbound edges into the node (and its owned files). A
332
+ // non-zero count with zero dependencies is the pure-receiver signal.
333
+ inboundObservedCount: z5.number().int().nonnegative(),
334
+ // Are there EXTRACTED outbound edges but no OBSERVED ones? Only then is
335
+ // "static deps exist but no runtime traffic — is OTel running?" the honest note.
336
+ hasExtractedOutbound: z5.boolean()
337
+ });
323
338
 
324
339
  // src/identity.ts
325
340
  var SERVICE_PREFIX = "service:";
@@ -523,6 +538,24 @@ var CheckPoliciesScopeSchema = z6.union([
523
538
  z6.enum(["all", "unresolved"]),
524
539
  z6.object({ policyId: z6.string().min(1) })
525
540
  ]);
541
+ var ApplicablePolicySchema = z6.object({
542
+ policyId: z6.string().min(1),
543
+ policyName: z6.string().min(1),
544
+ description: z6.string().optional(),
545
+ severity: PolicySeveritySchema,
546
+ // The action the post-launch kernel gate WOULD take (ADR-093) — resolved
547
+ // from policy.onViolation or the severity default. Shown for awareness only;
548
+ // the soft guardrail never acts on it.
549
+ onViolation: PolicyActionSchema,
550
+ ruleType: z6.enum(["structural", "compatibility", "provenance", "ownership", "blast-radius"]),
551
+ match: z6.enum(["subject", "region"]),
552
+ // Human-readable reason the policy applies here — rides into agent context.
553
+ reason: z6.string().min(1)
554
+ });
555
+ var ApplicablePoliciesResponseSchema = z6.object({
556
+ node: z6.string().min(1),
557
+ applicable: z6.array(ApplicablePolicySchema)
558
+ });
526
559
  var PolicyViolationSchema = z6.object({
527
560
  // ${policy.id}:${violation-context}. The violation-context is shape-
528
561
  // specific (e.g. nodeId for structural; edgeId for provenance).
@@ -746,6 +779,7 @@ var GraphDiffResultSchema = z9.object({
746
779
  var EXTRACTED_CONFIDENCE = {
747
780
  structural: 0.85,
748
781
  "verified-call-site": 0.85,
782
+ "url-literal-service-target": 0.7,
749
783
  "url-with-structural-support": 0.5,
750
784
  "hostname-shape-match": 0.2
751
785
  };
@@ -797,6 +831,8 @@ function passesExtractedFloor(confidence) {
797
831
  return confidence >= extractedPrecisionFloor();
798
832
  }
799
833
  export {
834
+ ApplicablePoliciesResponseSchema,
835
+ ApplicablePolicySchema,
800
836
  BlastRadiusAffectedNodeSchema,
801
837
  BlastRadiusResultSchema,
802
838
  BlastRadiusRuleSchema,
@@ -838,6 +874,7 @@ export {
838
874
  MissingObservedDivergenceSchema,
839
875
  NodeType,
840
876
  NodeTypeSchema,
877
+ ObservedDependenciesResultSchema,
841
878
  OwnershipRuleSchema,
842
879
  PROV_RANK,
843
880
  PoliciesCheckBodySchema,