@odigos/ui-kit 0.0.304 → 0.0.306

package/lib/types/insights/index.d.ts

@@ -20,9 +20,8 @@ export declare enum InsightsDeviationClass {
     D3_latency = "D3_latency",
     D4_args_returns = "D4_args_returns",
     D5_libraries = "D5_libraries",
-    D6_attr_relations = "D6_attr_relations",
-    D7_db_access = "D7_db_access",
-    D8_payload_size = "D8_payload_size"
+    D6_db_access = "D6_db_access",
+    D7_payload_size = "D7_payload_size"
 }
 export declare enum InsightsSampleReason {
     Example = "example",
@@ -186,7 +185,7 @@ export interface InsightsBaselineHistogramSeries {
     bars: InsightsBaselineHistogramBar[];
 }
 /**
- * Chart-ready exponential histogram for D3_latency and D8_payload_size.
+ * Chart-ready exponential histogram for D3_latency and D7_payload_size.
  * Plot `series[].bars`; do not recompute bounds from raw `data`.
  */
 export interface InsightsBaselineHistogram {
@@ -227,7 +226,7 @@ export interface InsightsBaselineClass {
     classDescription: string;
     /** JSON-encoded baseline data; shape varies per deviation class. */
     data?: string | null;
-    /** Chart-ready histogram for D3_latency / D8_payload_size. Omitted for other classes. */
+    /** Chart-ready histogram for D3_latency / D7_payload_size. Omitted for other classes. */
     histogram?: InsightsBaselineHistogram | null;
     dataSchemaVersion?: number | null;
     observationCount: number;
@@ -547,6 +546,298 @@ export interface InsightsGuardrailSeedInput {
     /** JSON-encoded map[string][]string; keys: allowed_callers | allowed_callees | allowed_egress | allowed_transactions. */
     items: string;
 }
+/**
+ * The guardrail rule type a recommendation would create.
+ *
+ * Unrelated to the platform `Recommendation` types in `@/types/recommendations`
+ * (InferDBAttributes, UrlTemplatization and friends) — those tune the Odigos
+ * pipeline, these are mined security rules.
+ *
+ * The wire shape is a **flattened union discriminated by `kind`**: there is one
+ * `Recommendation` object and the fields of the kind it is not are simply
+ * absent. Consumers must `switch (kind)` — never assume a field is there
+ * because the other kind always carries it.
+ */
+export declare enum InsightsRecommendationKind {
+    /** Two span attributes that always agreed on one transaction. Transaction-scoped. */
+    AttributeCorrelation = "attribute_correlation",
+    /**
+     * A service finished learning, so the callers / callees / egress /
+     * transactions it was seen with can become its guardrail. Service-scoped,
+     * one card per service, ever.
+     */
+    ServiceGuardrail = "service_guardrail"
+}
+/**
+ * The guardrail rule keys a `service_guardrail` recommendation can propose, in
+ * the order the engine emits them (and the order the UI renders them).
+ *
+ * `InsightsRecommendationRule.rule` is a plain **string** on the wire, not an
+ * enum — a future server may add a key this build has never heard of, so match
+ * on it defensively and fall back to the server-supplied `label`.
+ */
+export declare enum InsightsRecommendationRuleKey {
+    AllowedCallers = "allowed_callers",
+    AllowedCallees = "allowed_callees",
+    AllowedEgress = "allowed_egress",
+    AllowedTransactions = "allowed_transactions"
+}
+/** Lifecycle bucket. `dismissed` is sticky across re-mining. */
+export declare enum InsightsRecommendationState {
+    Open = "open",
+    Applied = "applied",
+    Dismissed = "dismissed"
+}
+/**
+ * How much the engine trusts the relation. `Low` means live traffic has already
+ * broken it, so applying would fire violations immediately.
+ */
+export declare enum InsightsRecommendationConfidenceLevel {
+    High = "high",
+    Medium = "medium",
+    Low = "low"
+}
+/** One stored sample the relation held on, with the two values it compared. */
+export interface InsightsRecommendationExample {
+    traceId: string;
+    leftValue: string;
+    rightValue: string;
+    observedAt: string;
+}
+/**
+ * Why the engine believes the relation. The sample stats come from the stored
+ * relation samples the mining run read; the live counters come from shadow
+ * evaluation against real traffic and keep growing until the recommendation is
+ * applied or dismissed.
+ */
+export interface InsightsRecommendationConfidence {
+    level: InsightsRecommendationConfidenceLevel;
+    /**
+     * held / observed on the stored samples (0..1).
+     * `attribute_correlation` only — absent on a `service_guardrail` card.
+     */
+    holdRatio?: number | null;
+    /**
+     * Stored samples where both values were present.
+     * `attribute_correlation` only — absent on a `service_guardrail` card.
+     */
+    observed?: number | null;
+    /**
+     * Of those, how many satisfied the relation.
+     * `attribute_correlation` only — absent on a `service_guardrail` card.
+     */
+    held?: number | null;
+    /**
+     * Distinct left-hand values seen agreeing.
+     * `attribute_correlation` only — absent on a `service_guardrail` card.
+     */
+    distinct?: number | null;
+    /**
+     * Per kind: `attribute_correlation` — relation samples the mining run looked
+     * at; `service_guardrail` — promoted transactions whose learned profile
+     * seeded the lists. Label it accordingly.
+     */
+    sampleCount: number;
+    /**
+     * `attribute_correlation`: live **traces** the relation held on.
+     * `service_guardrail`: Σ over `rules[]` of `liveChecked - liveViolated`, i.e.
+     * **rule-checks**, not traces — one trace contributes up to one per rule.
+     */
+    liveHeld: number;
+    /**
+     * `attribute_correlation`: live **traces** the relation broke on.
+     * `service_guardrail`: Σ over `rules[]` of `liveViolated` — again rule-checks.
+     */
+    liveBroken: number;
+    /**
+     * Null until the first live trace was evaluated.
+     *
+     * ⚠ The server emits the Go zero time (`0001-01-01T00:00:00Z`) instead of
+     * omitting the field, so treat that value as null — `isLiveTimestamp()` does.
+     */
+    liveSince?: string | null;
+    /** Null until the first live trace was evaluated. Same zero-time caveat as `liveSince`. */
+    liveLast?: string | null;
+    /** Render-ready evidence lines, e.g. "Held on 50 of 50 stored samples". Never parse them. */
+    reasons: string[];
+}
+/**
+ * One allowlist rule a `service_guardrail` recommendation would write, with the
+ * list as it stands and how live traffic has fared against it while the card
+ * sat open (shadow evaluation — nothing is enforced until apply).
+ */
+export interface InsightsRecommendationRule {
+    /**
+     * The catalog rule key — one of `InsightsRecommendationRuleKey` today, but a
+     * plain open-ended string on the wire.
+     */
+    rule: string;
+    /** Catalog label, e.g. "Allowed callers". Falls back to the raw key server-side. */
+    label: string;
+    /** One-line "what it enforces", straight from the catalog. */
+    description: string;
+    /**
+     * The allowlist apply would write: trimmed, de-duplicated, sorted ascending.
+     * Never null, and an **empty list is meaningful** — "this service does none
+     * of this, so enforcing forbids any".
+     *
+     * `allowed_transactions` items are `"<KIND>\toperation"`, TAB-separated —
+     * split on `\t` to render, never on a space.
+     */
+    items: string[];
+    /** This rule's own level: `low` if violated live, `high` at 50+ live checks, else `medium`. */
+    confidence: InsightsRecommendationConfidenceLevel;
+    /** Live traces of this service checked silently against the proposed list. */
+    liveChecked: number;
+    /** Of those, how many carried something outside the list. > 0 means traffic already disagrees. */
+    liveViolated: number;
+    /** Null until the rule was first checked. Same Go zero-time caveat as the confidence block. */
+    liveSince?: string | null;
+    /** Null until the rule was first checked. Same Go zero-time caveat as the confidence block. */
+    liveLast?: string | null;
+}
+/**
+ * One mined recommendation the operator can apply as-is, edit and apply, or
+ * dismiss. `title`, `summary`, `whyItMatters` and `confidence.reasons` are
+ * written by the engine, so the UI lays them out rather than interpreting the
+ * numbers itself.
+ *
+ * This is a **flattened union discriminated by `kind`**. Only the fields marked
+ * required below are present on both kinds; everything else belongs to one kind
+ * and is absent — not false, not zero, absent — on the other. And because the
+ * server uses `omitempty`, a kind's own field also vanishes when it is
+ * zero-valued, so read every optional as optional-with-default.
+ */
+export interface InsightsRecommendation {
+    id: string;
+    kind: InsightsRecommendationKind;
+    state: InsightsRecommendationState;
+    /** The latest mining run no longer produced this row. Orthogonal to `state`. */
+    stale: boolean;
+    /** Position among the scope's recommendations, 0 = strongest. Always 0 on a service card. */
+    rank: number;
+    /**
+     * The guardrail this would extend: `transaction` for `attribute_correlation`,
+     * `service` for `service_guardrail`.
+     */
+    scope: InsightsPolicyScope;
+    /** Decimal transaction id for `attribute_correlation`, `"<namespace>/<service>"` for `service_guardrail`. */
+    scopeKey: string;
+    /** `attribute_correlation` only — a service card has no transaction. */
+    transactionId?: string | null;
+    /** `attribute_correlation` only. */
+    transactionKind?: InsightsTransactionKind | null;
+    service: string;
+    namespace: string;
+    /** `attribute_correlation` only — a service card covers every operation. */
+    operation?: string | null;
+    /**
+     * One-line headline, e.g. "resolvePrincipal return.value matches getCart arg.0"
+     * or "Lock down account-service". Never parse anything out of it — in
+     * particular the rule count is `rules.length`, it is not in the title.
+     */
+    title: string;
+    /** One sentence explaining what this would do and on what evidence. */
+    summary: string;
+    /** The security story — what breaking this would mean. */
+    whyItMatters: string;
+    /**
+     * `attribute_correlation` only. How the two values relate: `exact`
+     * (identical), `core` (identical after a constant prefix/suffix), `digits`
+     * (same numeric id), `contains` (one value is embedded in the other).
+     */
+    transform?: string | null;
+    /**
+     * `attribute_correlation` only. Guaranteed by the transport rather than by
+     * business logic — the same field on both ends of one hop, such as a Kafka
+     * message key. Shown as a tag, mined at low severity, and ranked after every
+     * business relation. Absent rather than `false` when it does not apply.
+     */
+    transport?: boolean | null;
+    /**
+     * `attribute_correlation` only. The exact rule apply would add; edit it and
+     * pass it back to apply something else. **Never send it with a
+     * `service_guardrail` id** — the server validates the spec before it knows
+     * the kind, so it can 400 the whole batch.
+     */
+    spec?: InsightsCorrelationSpec | null;
+    confidence: InsightsRecommendationConfidence;
+    /** `attribute_correlation` only. Up to three stored samples the relation held on. */
+    examples?: InsightsRecommendationExample[] | null;
+    /**
+     * `attribute_correlation` only. The transaction's guardrail already has a rule
+     * on the same two attributes (e.g. written by hand), so applying would replace it.
+     */
+    alreadyCovered?: boolean | null;
+    /**
+     * `service_guardrail` only. The allowlist rules apply would write, in catalog
+     * order. Rules the service already enforces (or switched off) are left out,
+     * so applying only ever extends a guardrail.
+     */
+    rules?: InsightsRecommendationRule[] | null;
+    /**
+     * `service_guardrail` only, and only once applied: the rule keys that apply
+     * actually turned on — a subset of `rules[]` when the operator edited first.
+     */
+    appliedRules?: string[] | null;
+    minedAt: string;
+    createdAt: string;
+    updatedAt: string;
+}
+export interface InsightsRecommendationItemError {
+    id: string;
+    error: string;
+}
+/**
+ * Outcome of a bulk action. Items are independent — one failing does not stop
+ * the rest — so `done` and `errors` can both be non-empty. Always check
+ * `errors`, not just the absence of a request error.
+ */
+export interface InsightsRecommendationBulkResult {
+    done: number;
+    failed: number;
+    errors: InsightsRecommendationItemError[];
+}
+/** One recommendation to apply, optionally with the operator's edits. */
+export interface InsightsRecommendationApplyItemInput {
+    id: string;
+    /**
+     * `attribute_correlation` only. Optional edited rule applied instead of the
+     * mined one. Left/right service, span and attr must match the recommendation;
+     * name, severity, why, relation and extract regexes may differ.
+     *
+     * ⚠ Never send it alongside a `service_guardrail` id: the server validates
+     * every spec before it knows the item's kind, so an invalid one rejects the
+     * **whole** request with a 400, even though it would then be ignored.
+     */
+    spec?: InsightsCorrelationSpecInput | null;
+    /**
+     * `service_guardrail` only. Which of the card's rules to turn on — the
+     * "edit & apply" subset selector.
+     *
+     * ⚠ Omitting it, sending `[]`, or sending only blanks all mean **every rule
+     * on the card**. There is no way to say "apply nothing": a UI that wants that
+     * must not call apply at all. A key that is not on the card fails that one
+     * item; a key that has meanwhile been enforced or switched off is skipped
+     * silently, and the item only fails when every selected rule was skipped.
+     */
+    rules?: string[] | null;
+}
+/**
+ * How a spec fares on the transaction's stored relation samples. Backs the
+ * "edit & apply" flow so the operator sees how often the rule would have held
+ * before enforcing it.
+ */
+export interface InsightsRecommendationPreview {
+    sampleCount: number;
+    observed: number;
+    held: number;
+    distinct: number;
+    holdRatio: number;
+    examples: InsightsRecommendationExample[];
+    /** Up to three samples where the relation did not hold. */
+    counterExamples: InsightsRecommendationExample[];
+}
 export interface InsightsCatalogClass {
     id: string;
     label: string;

package/lib/types/instrumentation-agents/index.d.ts

@@ -0,0 +1,71 @@
+export declare enum InstrumentationAgentTier {
+    Community = "community",
+    Enterprise = "enterprise"
+}
+export declare enum InstrumentationAgentKind {
+    Ebpf = "ebpf",
+    CodeAgent = "code_agent"
+}
+export interface InstrumentationAgent {
+    language: string;
+    distroName: string;
+    distroDisplayName: string;
+    description: string;
+    tier: InstrumentationAgentTier;
+    kind: InstrumentationAgentKind;
+    runtimeEnvironment: string;
+    supportedRuntimeVersions: string;
+    instrumentedContainers: number;
+    uninstrumentedContainers: number;
+    /** Sources holding at least one container of this language. A source running more than one language is counted on each agent. */
+    sources: number;
+}
+/** A minor version line (e.g. `1.21`) and the patch versions offsets exist for. */
+export interface GoOffsetMinorVersion {
+    minorVersion: string;
+    versions: string[];
+}
+export interface GoOffsetModule {
+    module: string;
+    minVersion: string;
+    maxVersion: string;
+    minorVersions: GoOffsetMinorVersion[];
+}
+/** Struct field offsets the Go eBPF agent uses to read instrumented libraries. */
+export interface GoOffsets {
+    /** False when the odigos-go-offsets ConfigMap is missing from the cluster; an update recreates it. */
+    installed: boolean;
+    timestamp: string;
+    mods: GoOffsetModule[];
+}
+export interface GoOffsetVersionUpdate {
+    version: string;
+    isNew: boolean;
+    isRemoved: boolean;
+}
+export interface GoOffsetMinorVersionUpdate {
+    minorVersion: string;
+    isNew: boolean;
+    isRemoved: boolean;
+    versions: GoOffsetVersionUpdate[];
+}
+export interface GoOffsetModuleUpdate {
+    module: string;
+    isNew: boolean;
+    isRemoved: boolean;
+    minVersion: string;
+    maxVersion: string;
+    minorVersions: GoOffsetMinorVersionUpdate[];
+}
+/**
+ * Result of diffing a candidate offsets manifest against the installed one.
+ * An update overwrites the manifest, so `mods` is the union of both sets: the
+ * same list renders the current state plus everything the update would add
+ * (`isNew`) or drop (`isRemoved`).
+ */
+export interface GoOffsetsUpdateCheck {
+    hasUpdates: boolean;
+    currentTimestamp: string;
+    proposedTimestamp: string;
+    mods: GoOffsetModuleUpdate[];
+}

package/lib/types.js

@@ -1 +1 @@
-export{eV as ActionCategoryTypes,bB as ActionKeyTypes,bC as ActionType,lK as AgentInjectedReason,lL as BooleanOperation,f2 as CloudConnectorFeatureKey,aj as CodeAttributesKeyTypes,lM as ConditionType,bg as Crud,ad as CustomInstrumentationsKeyTypes,fC as DesiredConditionActionItemType,fg as DesiredStateProgress,lN as DestinationTypes,bh as EntityTypes,cf as ExtractionDataFormat,o as FieldTypes,af as GolangCustomProbe,ah as HeadersCollectionKeyTypes,G as InputTypes,lO as InsightsAnomalyClassFindingKind,jw as InsightsAnomalyResolution,jt as InsightsAnomalyStatus,lP as InsightsBaselineHistogramUnit,jx as InsightsBaselineLearningPhase,jv as InsightsBulkResolution,bQ as InsightsCorrelationRelation,b_ as InsightsDeviationClass,bp as InsightsEntityTypes,ju as InsightsFindingKind,c0 as InsightsLearningConditionType,c2 as InsightsLearningMode,bT as InsightsPolicyScope,bU as InsightsRuleMode,jI as InsightsSampleReason,bP as InsightsSeverity,kd as InsightsStorageDiskStatus,lQ as InsightsStorageHealthStatus,cS as InsightsTransactionKind,js as InsightsViolationStatus,lR as InstallationMethod,lS as InstallationStatus,ac as InstrumentationRuleType,lT as IntrumentationStatus,ae as JavaCustomProbe,lU as JsonOperation,cd as K8sAttributesFrom,c7 as K8sResourceKind,lV as K8sWorkloadContainerAgentConfigTracesHeadSamplingSpanMetricsMode,lW as ListDirection,lX as NumberOperation,lY as OtelDistroName,bq as OtherEntityTypes,ai as PayloadCollectionKeyTypes,ag as PhpCustomProbe,P as PlatformType,lZ as PodContainerLifecycleStatus,l_ as PodContainerStatus,l$ as PodPhase,m0 as Profile,X as ProgrammingLanguages,fR as RecommendationApplyExampleType,m1 as RecommendationRemediationType,fO as RecommendationState,m2 as RecommendationType,m3 as SIGNAL_KEY_TO_TYPE,m4 as SIGNAL_TYPE_TO_KEY,m5 as SignalKey,bH as SignalType,m6 as SortDirection,S as StatusType,m7 as StringOperation,b as Tier,m8 as WorkloadRolloutReason,kz as WorkloadRolloutStatus}from"./chunks/ui-components-CM2SQ_TO.js";import"react/jsx-runtime";import"react";import"styled-components";import"./icons.js";import"zustand";import"javascript-time-ago";import"javascript-time-ago/locale/en";import"react-dom";import"flubber";import"prism-react-renderer";import"react-error-boundary";import"virtua";
+export{f0 as ActionCategoryTypes,bI as ActionKeyTypes,bJ as ActionType,nz as AgentInjectedReason,nA as BooleanOperation,f9 as CloudConnectorFeatureKey,aj as CodeAttributesKeyTypes,nB as ConditionType,bg as Crud,ad as CustomInstrumentationsKeyTypes,fJ as DesiredConditionActionItemType,fn as DesiredStateProgress,nC as DestinationTypes,bh as EntityTypes,cm as ExtractionDataFormat,o as FieldTypes,af as GolangCustomProbe,ah as HeadersCollectionKeyTypes,G as InputTypes,nD as InsightsAnomalyClassFindingKind,k6 as InsightsAnomalyResolution,k3 as InsightsAnomalyStatus,nE as InsightsBaselineHistogramUnit,k7 as InsightsBaselineLearningPhase,k5 as InsightsBulkResolution,bX as InsightsCorrelationRelation,c5 as InsightsDeviationClass,bp as InsightsEntityTypes,k4 as InsightsFindingKind,c7 as InsightsLearningConditionType,c9 as InsightsLearningMode,b_ as InsightsPolicyScope,kd as InsightsRecommendationConfidenceLevel,ke as InsightsRecommendationKind,ky as InsightsRecommendationRuleKey,kc as InsightsRecommendationState,b$ as InsightsRuleMode,ll as InsightsSampleReason,bW as InsightsSeverity,lS as InsightsStorageDiskStatus,nF as InsightsStorageHealthStatus,cZ as InsightsTransactionKind,k2 as InsightsViolationStatus,nG as InstallationMethod,nH as InstallationStatus,nI as InstrumentationAgentKind,nJ as InstrumentationAgentTier,ac as InstrumentationRuleType,nK as IntrumentationStatus,ae as JavaCustomProbe,nL as JsonOperation,ck as K8sAttributesFrom,ce as K8sResourceKind,nM as K8sWorkloadContainerAgentConfigTracesHeadSamplingSpanMetricsMode,nN as ListDirection,nO as NumberOperation,nP as OtelDistroName,bq as OtherEntityTypes,ai as PayloadCollectionKeyTypes,ag as PhpCustomProbe,P as PlatformType,nQ as PodContainerLifecycleStatus,nR as PodContainerStatus,nS as PodPhase,nT as Profile,X as ProgrammingLanguages,gr as RecommendationApplyExampleType,nU as RecommendationRemediationType,go as RecommendationState,nV as RecommendationType,nW as SIGNAL_KEY_TO_TYPE,nX as SIGNAL_TYPE_TO_KEY,nY as SignalKey,bO as SignalType,nZ as SortDirection,S as StatusType,n_ as StringOperation,b as Tier,n$ as WorkloadRolloutReason,mo as WorkloadRolloutStatus}from"./chunks/ui-components-DRnj62bc.js";import"react/jsx-runtime";import"react";import"styled-components";import"./icons.js";import"zustand";import"javascript-time-ago";import"javascript-time-ago/locale/en";import"react-dom";import"flubber";import"prism-react-renderer";import"react-error-boundary";import"virtua";

package/lib/visuals.js

@@ -1 +1 @@
-export{jn as VISUAL_CONNECTION_MORPH_HEIGHT,jm as VISUAL_CONNECTION_MORPH_WIDTH,m9 as VISUAL_ODIGOS_LOGO_HEIGHT,ma as VISUAL_ODIGOS_LOGO_WIDTH,mb as VISUAL_TERMINAL_HEIGHT,mc as VISUAL_TERMINAL_WIDTH,jl as VisualConnectionMorph,b4 as VisualGreenRings,md as VisualOdigosLogo,ie as VisualPurpleRings,me as VisualTerminal}from"./chunks/ui-components-CM2SQ_TO.js";import"react/jsx-runtime";import"react";import"styled-components";import"./icons.js";import"zustand";import"javascript-time-ago";import"javascript-time-ago/locale/en";import"react-dom";import"flubber";import"prism-react-renderer";import"react-error-boundary";import"virtua";
+export{jZ as VISUAL_CONNECTION_MORPH_HEIGHT,jY as VISUAL_CONNECTION_MORPH_WIDTH,o0 as VISUAL_ODIGOS_LOGO_HEIGHT,o1 as VISUAL_ODIGOS_LOGO_WIDTH,o2 as VISUAL_TERMINAL_HEIGHT,o3 as VISUAL_TERMINAL_WIDTH,jX as VisualConnectionMorph,b4 as VisualGreenRings,o4 as VisualOdigosLogo,iS as VisualPurpleRings,o5 as VisualTerminal}from"./chunks/ui-components-DRnj62bc.js";import"react/jsx-runtime";import"react";import"styled-components";import"./icons.js";import"zustand";import"javascript-time-ago";import"javascript-time-ago/locale/en";import"react-dom";import"flubber";import"prism-react-renderer";import"react-error-boundary";import"virtua";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@odigos/ui-kit",
-  "version": "0.0.304",
+  "version": "0.0.306",
   "author": "Odigos",
   "license": "MIT",
   "repository": {