@oked/sdk 0.1.0

package/dist/degraded.js

@@ -0,0 +1,25 @@
+/** Severity ordering for risk tiers. Higher = more dangerous. */
+export const TIER_ORDER = {
+    safe: 0,
+    warning: 1,
+    review: 2,
+    high_stakes: 3,
+};
+/**
+ * Decide what to do with a sensitive action when the OKed backend is
+ * unreachable (NOT when the user explicitly denied — that is always honored,
+ * and NOT for auth errors — those always deny).
+ *
+ *   strictFailClosed === true  -> "deny"  (original fail-safe: deny everything)
+ *   otherwise                  -> "deny"  iff tier is high_stakes,
+ *                                 "allow" for every lower tier.
+ *
+ * Rationale: a single backend outage should not mass-abort every user's
+ * agent, but an irreversible action (rm -rf, payments, drops, force-push)
+ * must never slip through unsupervised because of a network blip.
+ */
+export function degradedDecision(tier, opts) {
+    if (opts.strictFailClosed)
+        return "deny";
+    return tier === "high_stakes" ? "deny" : "allow";
+}

package/dist/describe.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Context translation - converts raw tool calls into human-readable
+ * approvals. Output is a sentence-shaped Rendered value: title + optional
+ * subline + optional body (quoted block) + optional footnote.
+ *
+ * Surfaces (Telegram, dashboard) consume Title/Subline/Body/Footnote keys
+ * from the `fields` payload. `describe()` returns just the title for
+ * backwards-compatible single-line consumers (audit logs, SMS).
+ */
+import type { OperationKind } from "./kinds.js";
+export interface Rendered {
+    title: string;
+    target?: string;
+    annotation?: string;
+    subline?: string;
+    body?: string;
+    footnote?: string;
+    kind: OperationKind;
+}
+export declare function describe(toolName: string, toolInput: Record<string, unknown>): string;
+export declare function describeFields(toolName: string, toolInput: Record<string, unknown>): Record<string, string> | null;
+export declare const SQL_KEYWORDS_RE: RegExp;
+export declare function findSqlInCommand(cmd: string): string | null;