@tracearr/shared 2.2.0-beta.1 → 2.2.0-beta.3

package/dist/automations/definition.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"definition.d.ts","sourceRoot":"","sources":["../../src/automations/definition.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAuBxB,OAAO,KAAK,EAAU,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAC9D,OAAO,KAAK,EACV,oBAAoB,EACpB,cAAc,EAGd,cAAc,EACd,QAAQ,EACT,MAAM,iBAAiB,CAAC;AACzB,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AACjD,OAAO,KAAK,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAEhE,eAAO,MAAM,gBAAgB,qCAAsC,CAAC;AACpE,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;AAI/D,eAAO,MAAM,YAAY,yDAA0D,CAAC;AACpF,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC;AAEvD,uFAAuF;AACvF,eAAO,MAAM,kBAAkB;;;CAGoB,CAAC;AAEpD,+DAA+D;AAC/D,eAAO,MAAM,mBAAmB,MAAM,CAAC;AAEvC,mEAAmE;AACnE,eAAO,MAAM,0BAA0B,MAAM,CAAC;AAuK9C,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAA4D,CAAC;AAEpG,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAE2C,CAAC;AAE/E,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAG2C,CAAC;AAE/E,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAC3E,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAE3E,eAAO,MAAM,sBAAsB,iEAMzB,CAAC;AACX,MAAM,MAAM,mBAAmB,GAAG,CAAC,OAAO,sBAAsB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE1E,uFAAuF;AACvF,QAAA,MAAM,gBAAgB,yCAA0C,CAAC;AACjE,eAAO,MAAM,kBAAkB,gDAAwC,CAAC;AACxE,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEnE,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAUiB,CAAC;AACxD,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E,eAAO,MAAM,eAAe,iDAAkD,CAAC;AAC/E,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC;AAE5D,+EAA+E;AAC/E,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;iBAO/B,CAAC;AAEH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;iBAEiB,CAAC;AACjD,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D,gFAAgF;AAChF,MAAM,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,GAAG;IACnD,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B,CAAC;AAEF,eAAO,MAAM,iBAAiB,wFAKpB,CAAC;AACX,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEhE,wFAAwF;AACxF,eAAO,MAAM,mBAAmB;;;;;;;;;;iBAK9B,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE,qFAAqF;AACrF,MAAM,WAAW,UAAU;IACzB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAGD,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,cAAc,CAAC;IACtB,QAAQ,EAAE,QAAQ,CAAC;IACnB,SAAS,EAAE,cAAc,CAAC;IAC1B,MAAM,EAAE,OAAO,CAAC;IAChB,OAAO,EAAE,OAAO,CAAC;IACjB,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;IACjB,kGAAkG;IAClG,KAAK,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC;IACtB,UAAU,EAAE,iBAAiB,EAAE,CAAC;CACjC;AAGD,MAAM,WAAW,YAAY;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,wDAAwD;AACxD,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,QAAQ,GAAG,SAAS,GAAG,QAAQ,CAAC;IACtC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,8EAA8E;IAC9E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,2EAA2E;AAC3E,MAAM,WAAW,qBAAqB;IACpC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;IAC1C,mEAAmE;IACnE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,kFAAkF;IAClF,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,8EAA8E;AAC9E,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CACrB;AAED,kFAAkF;AAClF,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,IAAI,EAAE,cAAc,CAAC;IACrB,QAAQ,EAAE,iBAAiB,GAAG,IAAI,CAAC;IACnC,QAAQ,EAAE,WAAW,EAAE,CAAC;IACxB,UAAU,EAAE,oBAAoB,CAAC;IACjC,OAAO,EAAE,iBAAiB,CAAC;IAC3B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,oBAAoB,EAAE,OAAO,CAAC;IAC9B,QAAQ,EAAE,OAAO,CAAC;IAClB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,sDAAsD;IACtD,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,QAAQ,EAAE,kBAAkB,GAAG,IAAI,CAAC;IACpC,QAAQ,EAAE,qBAAqB,GAAG,IAAI,CAAC;IACvC,qFAAqF;IACrF,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC/C,MAAM,EAAE,gBAAgB,GAAG,IAAI,CAAC;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,sDAAsD;AACtD,MAAM,MAAM,cAAc,GAAG,SAAS,GAAG,SAAS,GAAG,OAAO,GAAG,QAAQ,GAAG,SAAS,CAAC;AAEpF,uFAAuF;AACvF,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,cAAc,CAAC;IACrB,iFAAiF;IACjF,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,2EAA2E;IAC3E,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,2DAA2D;IAC3D,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,qEAAqE;IACrE,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,2CAA2C;IAC3C,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,gFAAgF;IAChF,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,EAAE,SAAS,GAAG,IAAI,CAAC;IAC5B,sCAAsC;IACtC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAED,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,MAAM,CAAC;IACX,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,cAAc,CAAC;IACrB,OAAO,EAAE,UAAU,CAAC;IACpB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,QAAQ,EAAE,iBAAiB,GAAG,IAAI,CAAC;IACnC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,qEAAqE;IACrE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,OAAO,EAAE,UAAU,CAAC;IACpB,wEAAwE;IACxE,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAED;;;;GAIG;AACH,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,cAAc,CAAC;IACrB,OAAO,EAAE,UAAU,CAAC;CACrB;AAED,MAAM,WAAW,aAAc,SAAQ,oBAAoB;IACzD,0DAA0D;IAC1D,KAAK,EAAE,OAAO,EAAE,CAAC;IACjB,yFAAyF;IACzF,OAAO,EAAE,iBAAiB,GAAG,IAAI,CAAC;IAClC,gFAAgF;IAChF,QAAQ,EAAE,aAAa,EAAE,CAAC;IAC1B,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;CACpC"}

package/dist/automations/definition.js

@@ -0,0 +1,215 @@
+import { z } from 'zod';
+import { listDateBoundSchema, listSortSchema } from '../listQuery.js';
+import { booleanStringSchema, crossServerEnforcementRefinement, hasAtMostOneScope, paginationSchema, scopeAllowsCrossServerEnforcement, scopeRefinement, uuidSchema, violationSeveritySchema, } from '../schemas.js';
+import { ACTIONS, automationActionsSchema } from './actions.js';
+import { CONDITION_FIELDS, automationConditionsSchema } from './conditions.js';
+import { NOTIFICATION_ONLY_TRIGGERS, TRIGGERS, TRIGGER_GROUPS, contextOf, contextSupplies, triggerNodeSchema, variablesFor, } from './triggers.js';
+export const AUTOMATION_KINDS = ['policy', 'notification'];
+// 'error' belongs to a run that failed before its terminal write; a bookkeeping failure
+// after that write notes itself in steps rather than demoting the row.
+export const RUN_OUTCOMES = ['completed', 'stopped_by_condition', 'error'];
+/** Days a completed run survives when its automation names no retention of its own. */
+export const RETENTION_DEFAULTS = {
+    policy: 365,
+    notification: 30,
+};
+/** The automations column, and what a name has to fit into. */
+export const AUTOMATION_NAME_MAX = 100;
+/** The note beside the name, capped the same way the column is. */
+export const AUTOMATION_DESCRIPTION_MAX = 500;
+const automationFieldsSchema = z.strictObject({
+    name: z.string().trim().min(1).max(AUTOMATION_NAME_MAX),
+    description: z.string().max(AUTOMATION_DESCRIPTION_MAX).nullable().optional(),
+    kind: z.enum(AUTOMATION_KINDS),
+    severity: violationSeveritySchema.nullable(),
+    triggers: z.array(triggerNodeSchema),
+    conditions: automationConditionsSchema,
+    actions: automationActionsSchema,
+    serverId: uuidSchema.nullable().optional(),
+    serverUserId: uuidSchema.nullable().optional(),
+    userId: uuidSchema.nullable().optional(),
+    enforceAcrossServers: z.boolean().optional(),
+    cooldownMinutes: z.number().int().min(0).nullable().optional(),
+    retentionDays: z.number().int().min(1).max(3650).nullable().optional(),
+    isActive: z.boolean().optional(),
+});
+const VAR_RE = /\{\{\s*([a-zA-Z][\w.]*)\s*\}\}/g;
+function valueMatches(descriptor, operator, value) {
+    if (operator === 'in' || operator === 'not_in')
+        return Array.isArray(value);
+    switch (descriptor.valueType) {
+        case 'number':
+            return typeof value === 'number';
+        case 'boolean':
+            return typeof value === 'boolean';
+        // `in`/`not_in` returned above; what is left on a list field is one of its options.
+        case 'multiSelect':
+            return typeof value === 'string';
+        default:
+            return typeof value === 'string';
+    }
+}
+/**
+ * Everything a definition has to satisfy beyond the node schemas: what the triggers
+ * can supply is what the conditions, actions and message variables may name.
+ */
+function definitionRefinements(def, ctx) {
+    const { triggers } = def;
+    const enabled = triggers.filter((trigger) => trigger.enabled);
+    if (enabled.length === 0) {
+        ctx.addIssue({
+            code: 'custom',
+            path: ['triggers'],
+            message: 'At least one enabled trigger is required',
+        });
+    }
+    const context = contextOf(triggers);
+    if (def.kind === 'policy' &&
+        enabled.some((trigger) => !contextSupplies(TRIGGERS[trigger.type].context, 'account'))) {
+        ctx.addIssue({
+            code: 'custom',
+            path: ['triggers'],
+            message: 'A policy needs a stream or account trigger: violations are about a user',
+        });
+    }
+    // A session context supplies an account, so the rule above would let a policy sit on a new device.
+    if (def.kind === 'policy' &&
+        enabled.some((trigger) => NOTIFICATION_ONLY_TRIGGERS.includes(trigger.type))) {
+        ctx.addIssue({
+            code: 'custom',
+            path: ['triggers'],
+            message: 'New device and trust score changed can only send: neither is something a person did wrong',
+        });
+    }
+    // A trust action one hop from the writer that fired the trigger walks the score down on every run.
+    const watchesTrust = enabled.some((trigger) => trigger.type === 'account.trust_changed');
+    const checkGroups = (groups, path) => {
+        groups.forEach((group, groupIndex) => group.conditions.forEach((condition, conditionIndex) => {
+            const descriptor = CONDITION_FIELDS[condition.field];
+            const at = [...path, groupIndex, 'conditions', conditionIndex];
+            if (condition.enabled !== false &&
+                context !== null &&
+                !contextSupplies(context, descriptor.requires)) {
+                ctx.addIssue({
+                    code: 'custom',
+                    path: [...at, 'field'],
+                    message: `${condition.field} is not available for every enabled trigger`,
+                });
+            }
+            if (!descriptor.operators.includes(condition.operator)) {
+                ctx.addIssue({
+                    code: 'custom',
+                    path: [...at, 'operator'],
+                    message: `${condition.operator} is not valid for ${condition.field}`,
+                });
+            }
+            if (!valueMatches(descriptor, condition.operator, condition.value)) {
+                ctx.addIssue({
+                    code: 'custom',
+                    path: [...at, 'value'],
+                    message: `value does not fit ${condition.field}`,
+                });
+            }
+        }));
+    };
+    checkGroups(def.conditions.groups, ['conditions', 'groups']);
+    const vars = new Set(variablesFor(triggers));
+    const checkAction = (action, path) => {
+        if (action.enabled !== false) {
+            const need = ACTIONS[action.type].requires;
+            if (context !== null && !contextSupplies(context, need)) {
+                ctx.addIssue({
+                    code: 'custom',
+                    path: [...path, 'type'],
+                    message: `${action.type} needs a ${need} trigger`,
+                });
+            }
+            if (watchesTrust && action.type === 'trust') {
+                ctx.addIssue({
+                    code: 'custom',
+                    path: [...path, 'type'],
+                    message: 'An automation that watches trust cannot also change it',
+                });
+            }
+        }
+        if (action.type !== 'send')
+            return;
+        for (const field of ['title', 'body']) {
+            for (const match of (action[field] ?? '').matchAll(VAR_RE)) {
+                const name = match[1] ?? '';
+                if (!vars.has(name)) {
+                    ctx.addIssue({
+                        code: 'custom',
+                        path: [...path, field],
+                        message: `{{${name}}} is not available for every enabled trigger`,
+                    });
+                }
+            }
+        }
+    };
+    def.actions.actions.forEach((action, index) => {
+        const path = ['actions', 'actions', index];
+        checkAction(action, path);
+        if (action.type === 'if' && action.enabled !== false) {
+            checkGroups(action.conditions.groups, [...path, 'conditions', 'groups']);
+            action.then.forEach((leaf, leafIndex) => checkAction(leaf, [...path, 'then', leafIndex]));
+            action.else.forEach((leaf, leafIndex) => checkAction(leaf, [...path, 'else', leafIndex]));
+        }
+    });
+}
+export const automationDefinitionSchema = automationFieldsSchema.superRefine(definitionRefinements);
+export const createAutomationSchema = automationDefinitionSchema
+    .refine(hasAtMostOneScope, scopeRefinement)
+    .refine(scopeAllowsCrossServerEnforcement, crossServerEnforcementRefinement);
+export const updateAutomationSchema = automationFieldsSchema
+    .partial()
+    .refine(hasAtMostOneScope, scopeRefinement)
+    .refine(scopeAllowsCrossServerEnforcement, crossServerEnforcementRefinement);
+export const AUTOMATION_SORT_FIELDS = [
+    'name',
+    'createdAt',
+    'updatedAt',
+    'kind',
+    'isActive',
+];
+/** The three ways a template arrives; a row no template wrote is the fourth answer. */
+const TEMPLATE_SOURCES = ['builtin', 'import', 'local'];
+export const AUTOMATION_SOURCES = [...TEMPLATE_SOURCES, 'own'];
+export const automationListQuerySchema = paginationSchema
+    .extend({
+    kind: z.enum(AUTOMATION_KINDS).optional(),
+    enabled: booleanStringSchema.optional(),
+    search: z.string().trim().min(1).max(100).optional(),
+    source: z.enum(AUTOMATION_SOURCES).optional(),
+    serverId: uuidSchema.optional(),
+    trigger: z.enum(TRIGGER_GROUPS).optional(),
+    severity: violationSeveritySchema.optional(),
+})
+    .extend(listSortSchema(AUTOMATION_SORT_FIELDS).shape);
+export const RUN_SORT_FIELDS = ['startedAt', 'finishedAt', 'outcome'];
+/** What a page of runs and a count of them filter on, so neither can drift. */
+export const runCountsQuerySchema = z.object({
+    kind: z.enum(AUTOMATION_KINDS).optional(),
+    outcome: z.enum(RUN_OUTCOMES).optional(),
+    automationId: uuidSchema.optional(),
+    // Calendar days against the run's start, resolved to half-open UTC bounds.
+    startDate: listDateBoundSchema,
+    endDate: listDateBoundSchema,
+});
+export const runListQuerySchema = paginationSchema
+    .extend(runCountsQuerySchema.shape)
+    .extend(listSortSchema(RUN_SORT_FIELDS).shape);
+export const NEAR_MISS_REASONS = [
+    'cooldown_active',
+    'edge_replayed',
+    'gate_blocked',
+    'trigger_filter_failed',
+];
+/** One entry of the capped ring: a trigger matched but the pipeline recorded no run. */
+export const nearMissEntrySchema = z.object({
+    reason: z.enum(NEAR_MISS_REASONS),
+    at: z.iso.datetime(),
+    subjectKey: z.string(),
+    trigger: z.string(),
+});
+//# sourceMappingURL=definition.js.map

package/dist/automations/definition.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"definition.js","sourceRoot":"","sources":["../../src/automations/definition.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACtE,OAAO,EACL,mBAAmB,EACnB,gCAAgC,EAChC,iBAAiB,EACjB,gBAAgB,EAChB,iCAAiC,EACjC,eAAe,EACf,UAAU,EACV,uBAAuB,GACxB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,OAAO,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC;AAChE,OAAO,EAAE,gBAAgB,EAAE,0BAA0B,EAAE,MAAM,iBAAiB,CAAC;AAC/E,OAAO,EACL,0BAA0B,EAC1B,QAAQ,EACR,cAAc,EACd,SAAS,EACT,eAAe,EACf,iBAAiB,EACjB,YAAY,GACb,MAAM,eAAe,CAAC;AAavB,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,QAAQ,EAAE,cAAc,CAAU,CAAC;AAGpE,wFAAwF;AACxF,uEAAuE;AACvE,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,WAAW,EAAE,sBAAsB,EAAE,OAAO,CAAU,CAAC;AAGpF,uFAAuF;AACvF,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,MAAM,EAAE,GAAG;IACX,YAAY,EAAE,EAAE;CACiC,CAAC;AAEpD,+DAA+D;AAC/D,MAAM,CAAC,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAEvC,mEAAmE;AACnE,MAAM,CAAC,MAAM,0BAA0B,GAAG,GAAG,CAAC;AAE9C,MAAM,sBAAsB,GAAG,CAAC,CAAC,YAAY,CAAC;IAC5C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,mBAAmB,CAAC;IACvD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC7E,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC;IAC9B,QAAQ,EAAE,uBAAuB,CAAC,QAAQ,EAAE;IAC5C,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC;IACpC,UAAU,EAAE,0BAA0B;IACtC,OAAO,EAAE,uBAAuB;IAChC,QAAQ,EAAE,UAAU,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC1C,YAAY,EAAE,UAAU,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC9C,MAAM,EAAE,UAAU,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACxC,oBAAoB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC5C,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC9D,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACtE,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAC;AAEH,MAAM,MAAM,GAAG,iCAAiC,CAAC;AAEjD,SAAS,YAAY,CACnB,UAAoC,EACpC,QAAkB,EAClB,KAAqB;IAErB,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC5E,QAAQ,UAAU,CAAC,SAAS,EAAE,CAAC;QAC7B,KAAK,QAAQ;YACX,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC;QACnC,KAAK,SAAS;YACZ,OAAO,OAAO,KAAK,KAAK,SAAS,CAAC;QACpC,oFAAoF;QACpF,KAAK,aAAa;YAChB,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC;QACnC;YACE,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC;IACrC,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,qBAAqB,CAC5B,GAKC,EACD,GAAoB;IAEpB,MAAM,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC;IACzB,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9D,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,UAAU,CAAC;YAClB,OAAO,EAAE,0CAA0C;SACpD,CAAC,CAAC;IACL,CAAC;IACD,MAAM,OAAO,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;IACpC,IACE,GAAG,CAAC,IAAI,KAAK,QAAQ;QACrB,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,eAAe,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,EACtF,CAAC;QACD,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,UAAU,CAAC;YAClB,OAAO,EAAE,yEAAyE;SACnF,CAAC,CAAC;IACL,CAAC;IACD,mGAAmG;IACnG,IACE,GAAG,CAAC,IAAI,KAAK,QAAQ;QACrB,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CACtB,0BAAgD,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CACzE,EACD,CAAC;QACD,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,UAAU,CAAC;YAClB,OAAO,EACL,2FAA2F;SAC9F,CAAC,CAAC;IACL,CAAC;IACD,mGAAmG;IACnG,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,uBAAuB,CAAC,CAAC;IACzF,MAAM,WAAW,GAAG,CAAC,MAAwB,EAAE,IAAyB,EAAE,EAAE;QAC1E,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE,CACnC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,cAAc,EAAE,EAAE;YACrD,MAAM,UAAU,GAAG,gBAAgB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YACrD,MAAM,EAAE,GAAG,CAAC,GAAG,IAAI,EAAE,UAAU,EAAE,YAAY,EAAE,cAAc,CAAC,CAAC;YAC/D,IACE,SAAS,CAAC,OAAO,KAAK,KAAK;gBAC3B,OAAO,KAAK,IAAI;gBAChB,CAAC,eAAe,CAAC,OAAO,EAAE,UAAU,CAAC,QAAQ,CAAC,EAC9C,CAAC;gBACD,GAAG,CAAC,QAAQ,CAAC;oBACX,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE,OAAO,CAAC;oBACtB,OAAO,EAAE,GAAG,SAAS,CAAC,KAAK,6CAA6C;iBACzE,CAAC,CAAC;YACL,CAAC;YACD,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACvD,GAAG,CAAC,QAAQ,CAAC;oBACX,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE,UAAU,CAAC;oBACzB,OAAO,EAAE,GAAG,SAAS,CAAC,QAAQ,qBAAqB,SAAS,CAAC,KAAK,EAAE;iBACrE,CAAC,CAAC;YACL,CAAC;YACD,IAAI,CAAC,YAAY,CAAC,UAAU,EAAE,SAAS,CAAC,QAAQ,EAAE,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;gBACnE,GAAG,CAAC,QAAQ,CAAC;oBACX,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE,OAAO,CAAC;oBACtB,OAAO,EAAE,sBAAsB,SAAS,CAAC,KAAK,EAAE;iBACjD,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC,CACH,CAAC;IACJ,CAAC,CAAC;IACF,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC7D,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC7C,MAAM,WAAW,GAAG,CAAC,MAAc,EAAE,IAAyB,EAAE,EAAE;QAChE,IAAI,MAAM,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;YAC7B,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC;YAC3C,IAAI,OAAO,KAAK,IAAI,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC;gBACxD,GAAG,CAAC,QAAQ,CAAC;oBACX,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC;oBACvB,OAAO,EAAE,GAAG,MAAM,CAAC,IAAI,YAAY,IAAI,UAAU;iBAClD,CAAC,CAAC;YACL,CAAC;YACD,IAAI,YAAY,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBAC5C,GAAG,CAAC,QAAQ,CAAC;oBACX,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC;oBACvB,OAAO,EAAE,wDAAwD;iBAClE,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM;YAAE,OAAO;QACnC,KAAK,MAAM,KAAK,IAAI,CAAC,OAAO,EAAE,MAAM,CAAU,EAAE,CAAC;YAC/C,KAAK,MAAM,KAAK,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC3D,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;gBAC5B,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;oBACpB,GAAG,CAAC,QAAQ,CAAC;wBACX,IAAI,EAAE,QAAQ;wBACd,IAAI,EAAE,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC;wBACtB,OAAO,EAAE,KAAK,IAAI,+CAA+C;qBAClE,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IACF,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE;QAC5C,MAAM,IAAI,GAAG,CAAC,SAAS,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;QAC3C,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC1B,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,IAAI,MAAM,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;YACrD,WAAW,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,GAAG,IAAI,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC,CAAC;YACzE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,GAAG,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;YAC1F,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,GAAG,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;QAC5F,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,MAAM,0BAA0B,GAAG,sBAAsB,CAAC,WAAW,CAAC,qBAAqB,CAAC,CAAC;AAEpG,MAAM,CAAC,MAAM,sBAAsB,GAAG,0BAA0B;KAC7D,MAAM,CAAC,iBAAiB,EAAE,eAAe,CAAC;KAC1C,MAAM,CAAC,iCAAiC,EAAE,gCAAgC,CAAC,CAAC;AAE/E,MAAM,CAAC,MAAM,sBAAsB,GAAG,sBAAsB;KACzD,OAAO,EAAE;KACT,MAAM,CAAC,iBAAiB,EAAE,eAAe,CAAC;KAC1C,MAAM,CAAC,iCAAiC,EAAE,gCAAgC,CAAC,CAAC;AAK/E,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,MAAM;IACN,WAAW;IACX,WAAW;IACX,MAAM;IACN,UAAU;CACF,CAAC;AAGX,uFAAuF;AACvF,MAAM,gBAAgB,GAAG,CAAC,SAAS,EAAE,QAAQ,EAAE,OAAO,CAAU,CAAC;AACjE,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,GAAG,gBAAgB,EAAE,KAAK,CAAU,CAAC;AAGxE,MAAM,CAAC,MAAM,yBAAyB,GAAG,gBAAgB;KACtD,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,QAAQ,EAAE;IACzC,OAAO,EAAE,mBAAmB,CAAC,QAAQ,EAAE;IACvC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACpD,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,QAAQ,EAAE;IAC7C,QAAQ,EAAE,UAAU,CAAC,QAAQ,EAAE;IAC/B,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,QAAQ,EAAE;IAC1C,QAAQ,EAAE,uBAAuB,CAAC,QAAQ,EAAE;CAC7C,CAAC;KACD,MAAM,CAAC,cAAc,CAAC,sBAAsB,CAAC,CAAC,KAAK,CAAC,CAAC;AAGxD,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,WAAW,EAAE,YAAY,EAAE,SAAS,CAAU,CAAC;AAG/E,+EAA+E;AAC/E,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,QAAQ,EAAE;IACzC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,QAAQ,EAAE;IACxC,YAAY,EAAE,UAAU,CAAC,QAAQ,EAAE;IACnC,2EAA2E;IAC3E,SAAS,EAAE,mBAAmB;IAC9B,OAAO,EAAE,mBAAmB;CAC7B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,kBAAkB,GAAG,gBAAgB;KAC/C,MAAM,CAAC,oBAAoB,CAAC,KAAK,CAAC;KAClC,MAAM,CAAC,cAAc,CAAC,eAAe,CAAC,CAAC,KAAK,CAAC,CAAC;AASjD,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,iBAAiB;IACjB,eAAe;IACf,cAAc;IACd,uBAAuB;CACf,CAAC;AAGX,wFAAwF;AACxF,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC;IACjC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE;IACpB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;CACpB,CAAC,CAAC"}

package/dist/automations/dryRun.d.ts

@@ -0,0 +1,413 @@
+import { z } from 'zod';
+import type { ConditionEvidence } from './definition.js';
+import type { TriggerType } from './triggers.js';
+export declare const dryRunRequestSchema: z.ZodObject<{
+    definition: z.ZodObject<{
+        name: z.ZodString;
+        description: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        kind: z.ZodEnum<{
+            policy: "policy";
+            notification: "notification";
+        }>;
+        severity: z.ZodNullable<z.ZodEnum<{
+            low: "low";
+            warning: "warning";
+            high: "high";
+        }>>;
+        triggers: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            type: z.ZodEnum<{
+                "session.started": "session.started";
+                "session.stopped": "session.stopped";
+                "session.transcode_changed": "session.transcode_changed";
+                "session.paused": "session.paused";
+                "account.new_device": "account.new_device";
+                "account.trust_changed": "account.trust_changed";
+                "media.added": "media.added";
+                "media.upgraded": "media.upgraded";
+                "server.down": "server.down";
+                "server.up": "server.up";
+                "plugin.update_available": "plugin.update_available";
+                "server.update_available": "server.update_available";
+                "tracearr.update_available": "tracearr.update_available";
+            }>;
+            id: z.ZodUUID;
+            enabled: z.ZodBoolean;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"session.held_for">;
+            params: z.ZodObject<{
+                minutes: z.ZodNumber;
+                measure: z.ZodEnum<{
+                    current: "current";
+                    total: "total";
+                }>;
+            }, z.core.$strict>;
+            id: z.ZodUUID;
+            enabled: z.ZodBoolean;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"account.inactive_for">;
+            params: z.ZodObject<{
+                days: z.ZodNumber;
+            }, z.core.$strict>;
+            id: z.ZodUUID;
+            enabled: z.ZodBoolean;
+        }, z.core.$strict>], "type">>;
+        conditions: z.ZodObject<{
+            groups: z.ZodArray<z.ZodObject<{
+                match: z.ZodOptional<z.ZodEnum<{
+                    any: "any";
+                    all: "all";
+                }>>;
+                conditions: z.ZodArray<z.ZodObject<{
+                    field: z.ZodUnion<readonly [z.ZodEnum<{
+                        concurrent_streams: "concurrent_streams";
+                        active_session_distance_km: "active_session_distance_km";
+                        travel_speed_kmh: "travel_speed_kmh";
+                        unique_ips_in_window: "unique_ips_in_window";
+                        unique_devices_in_window: "unique_devices_in_window";
+                        inactive_days: "inactive_days";
+                        current_pause_minutes: "current_pause_minutes";
+                        total_pause_minutes: "total_pause_minutes";
+                    }>, z.ZodEnum<{
+                        source_resolution: "source_resolution";
+                        output_resolution: "output_resolution";
+                        is_transcoding: "is_transcoding";
+                        is_transcode_downgrade: "is_transcode_downgrade";
+                        source_bitrate_mbps: "source_bitrate_mbps";
+                    }>, z.ZodEnum<{
+                        user_id: "user_id";
+                        trust_score: "trust_score";
+                        account_age_days: "account_age_days";
+                    }>, z.ZodEnum<{
+                        device_type: "device_type";
+                        client_name: "client_name";
+                        platform: "platform";
+                    }>, z.ZodEnum<{
+                        is_local_network: "is_local_network";
+                        country: "country";
+                        ip_in_range: "ip_in_range";
+                    }>, z.ZodEnum<{
+                        server_id: "server_id";
+                        media_type: "media_type";
+                    }>, z.ZodEnum<{
+                        library_item_type: "library_item_type";
+                        library_name: "library_name";
+                        resolution_after: "resolution_after";
+                        dynamic_range_after: "dynamic_range_after";
+                        video_codec_after: "video_codec_after";
+                        audio_channels_after: "audio_channels_after";
+                        file_size_after: "file_size_after";
+                    }>]>;
+                    operator: z.ZodUnion<readonly [z.ZodEnum<{
+                        eq: "eq";
+                        neq: "neq";
+                        gt: "gt";
+                        gte: "gte";
+                        lt: "lt";
+                        lte: "lte";
+                    }>, z.ZodEnum<{
+                        in: "in";
+                        not_in: "not_in";
+                    }>, z.ZodEnum<{
+                        contains: "contains";
+                        not_contains: "not_contains";
+                    }>]>;
+                    value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodArray<z.ZodString>, z.ZodArray<z.ZodNumber>]>;
+                    params: z.ZodOptional<z.ZodObject<{
+                        window_hours: z.ZodOptional<z.ZodNumber>;
+                        exclude_same_device: z.ZodOptional<z.ZodBoolean>;
+                        exclude_same_ip: z.ZodOptional<z.ZodBoolean>;
+                        count_device_types: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                            unknown: "unknown";
+                            mobile: "mobile";
+                            tablet: "tablet";
+                            tv: "tv";
+                            desktop: "desktop";
+                            browser: "browser";
+                        }>>>;
+                    }, z.core.$strip>>;
+                    id: z.ZodOptional<z.ZodUUID>;
+                    enabled: z.ZodOptional<z.ZodBoolean>;
+                }, z.core.$strip>>;
+                id: z.ZodOptional<z.ZodUUID>;
+                enabled: z.ZodOptional<z.ZodBoolean>;
+            }, z.core.$strip>>;
+        }, z.core.$strip>;
+        actions: z.ZodObject<{
+            actions: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+                type: z.ZodLiteral<"send">;
+                to: z.ZodArray<z.ZodUUID>;
+                cooldown_minutes: z.ZodOptional<z.ZodNumber>;
+                title: z.ZodOptional<z.ZodString>;
+                body: z.ZodOptional<z.ZodString>;
+                id: z.ZodOptional<z.ZodUUID>;
+                enabled: z.ZodOptional<z.ZodBoolean>;
+            }, z.core.$strip>, z.ZodObject<{
+                type: z.ZodLiteral<"trust">;
+                mode: z.ZodEnum<{
+                    set: "set";
+                    adjust: "adjust";
+                    reset: "reset";
+                }>;
+                amount: z.ZodOptional<z.ZodNumber>;
+                value: z.ZodOptional<z.ZodNumber>;
+                cooldown_minutes: z.ZodOptional<z.ZodNumber>;
+                id: z.ZodOptional<z.ZodUUID>;
+                enabled: z.ZodOptional<z.ZodBoolean>;
+            }, z.core.$strip>, z.ZodObject<{
+                type: z.ZodLiteral<"kill_stream">;
+                delay_seconds: z.ZodOptional<z.ZodNumber>;
+                cooldown_minutes: z.ZodOptional<z.ZodNumber>;
+                message: z.ZodOptional<z.ZodString>;
+                target: z.ZodOptional<z.ZodEnum<{
+                    triggering: "triggering";
+                    oldest: "oldest";
+                    newest: "newest";
+                    all_except_one: "all_except_one";
+                    all_user: "all_user";
+                }>>;
+                id: z.ZodOptional<z.ZodUUID>;
+                enabled: z.ZodOptional<z.ZodBoolean>;
+            }, z.core.$strip>, z.ZodObject<{
+                type: z.ZodLiteral<"message_client">;
+                message: z.ZodString;
+                target: z.ZodOptional<z.ZodEnum<{
+                    triggering: "triggering";
+                    oldest: "oldest";
+                    newest: "newest";
+                    all_except_one: "all_except_one";
+                    all_user: "all_user";
+                }>>;
+                id: z.ZodOptional<z.ZodUUID>;
+                enabled: z.ZodOptional<z.ZodBoolean>;
+            }, z.core.$strip>, z.ZodObject<{
+                type: z.ZodLiteral<"if">;
+                conditions: z.ZodObject<{
+                    groups: z.ZodArray<z.ZodObject<{
+                        match: z.ZodOptional<z.ZodEnum<{
+                            any: "any";
+                            all: "all";
+                        }>>;
+                        conditions: z.ZodArray<z.ZodObject<{
+                            field: z.ZodUnion<readonly [z.ZodEnum<{
+                                concurrent_streams: "concurrent_streams";
+                                active_session_distance_km: "active_session_distance_km";
+                                travel_speed_kmh: "travel_speed_kmh";
+                                unique_ips_in_window: "unique_ips_in_window";
+                                unique_devices_in_window: "unique_devices_in_window";
+                                inactive_days: "inactive_days";
+                                current_pause_minutes: "current_pause_minutes";
+                                total_pause_minutes: "total_pause_minutes";
+                            }>, z.ZodEnum<{
+                                source_resolution: "source_resolution";
+                                output_resolution: "output_resolution";
+                                is_transcoding: "is_transcoding";
+                                is_transcode_downgrade: "is_transcode_downgrade";
+                                source_bitrate_mbps: "source_bitrate_mbps";
+                            }>, z.ZodEnum<{
+                                user_id: "user_id";
+                                trust_score: "trust_score";
+                                account_age_days: "account_age_days";
+                            }>, z.ZodEnum<{
+                                device_type: "device_type";
+                                client_name: "client_name";
+                                platform: "platform";
+                            }>, z.ZodEnum<{
+                                is_local_network: "is_local_network";
+                                country: "country";
+                                ip_in_range: "ip_in_range";
+                            }>, z.ZodEnum<{
+                                server_id: "server_id";
+                                media_type: "media_type";
+                            }>, z.ZodEnum<{
+                                library_item_type: "library_item_type";
+                                library_name: "library_name";
+                                resolution_after: "resolution_after";
+                                dynamic_range_after: "dynamic_range_after";
+                                video_codec_after: "video_codec_after";
+                                audio_channels_after: "audio_channels_after";
+                                file_size_after: "file_size_after";
+                            }>]>;
+                            operator: z.ZodUnion<readonly [z.ZodEnum<{
+                                eq: "eq";
+                                neq: "neq";
+                                gt: "gt";
+                                gte: "gte";
+                                lt: "lt";
+                                lte: "lte";
+                            }>, z.ZodEnum<{
+                                in: "in";
+                                not_in: "not_in";
+                            }>, z.ZodEnum<{
+                                contains: "contains";
+                                not_contains: "not_contains";
+                            }>]>;
+                            value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodArray<z.ZodString>, z.ZodArray<z.ZodNumber>]>;
+                            params: z.ZodOptional<z.ZodObject<{
+                                window_hours: z.ZodOptional<z.ZodNumber>;
+                                exclude_same_device: z.ZodOptional<z.ZodBoolean>;
+                                exclude_same_ip: z.ZodOptional<z.ZodBoolean>;
+                                count_device_types: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                                    unknown: "unknown";
+                                    mobile: "mobile";
+                                    tablet: "tablet";
+                                    tv: "tv";
+                                    desktop: "desktop";
+                                    browser: "browser";
+                                }>>>;
+                            }, z.core.$strip>>;
+                            id: z.ZodOptional<z.ZodUUID>;
+                            enabled: z.ZodOptional<z.ZodBoolean>;
+                        }, z.core.$strip>>;
+                        id: z.ZodOptional<z.ZodUUID>;
+                        enabled: z.ZodOptional<z.ZodBoolean>;
+                    }, z.core.$strip>>;
+                }, z.core.$strip>;
+                then: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+                    type: z.ZodLiteral<"send">;
+                    to: z.ZodArray<z.ZodUUID>;
+                    cooldown_minutes: z.ZodOptional<z.ZodNumber>;
+                    title: z.ZodOptional<z.ZodString>;
+                    body: z.ZodOptional<z.ZodString>;
+                    id: z.ZodOptional<z.ZodUUID>;
+                    enabled: z.ZodOptional<z.ZodBoolean>;
+                }, z.core.$strip>, z.ZodObject<{
+                    type: z.ZodLiteral<"trust">;
+                    mode: z.ZodEnum<{
+                        set: "set";
+                        adjust: "adjust";
+                        reset: "reset";
+                    }>;
+                    amount: z.ZodOptional<z.ZodNumber>;
+                    value: z.ZodOptional<z.ZodNumber>;
+                    cooldown_minutes: z.ZodOptional<z.ZodNumber>;
+                    id: z.ZodOptional<z.ZodUUID>;
+                    enabled: z.ZodOptional<z.ZodBoolean>;
+                }, z.core.$strip>, z.ZodObject<{
+                    type: z.ZodLiteral<"kill_stream">;
+                    delay_seconds: z.ZodOptional<z.ZodNumber>;
+                    cooldown_minutes: z.ZodOptional<z.ZodNumber>;
+                    message: z.ZodOptional<z.ZodString>;
+                    target: z.ZodOptional<z.ZodEnum<{
+                        triggering: "triggering";
+                        oldest: "oldest";
+                        newest: "newest";
+                        all_except_one: "all_except_one";
+                        all_user: "all_user";
+                    }>>;
+                    id: z.ZodOptional<z.ZodUUID>;
+                    enabled: z.ZodOptional<z.ZodBoolean>;
+                }, z.core.$strip>, z.ZodObject<{
+                    type: z.ZodLiteral<"message_client">;
+                    message: z.ZodString;
+                    target: z.ZodOptional<z.ZodEnum<{
+                        triggering: "triggering";
+                        oldest: "oldest";
+                        newest: "newest";
+                        all_except_one: "all_except_one";
+                        all_user: "all_user";
+                    }>>;
+                    id: z.ZodOptional<z.ZodUUID>;
+                    enabled: z.ZodOptional<z.ZodBoolean>;
+                }, z.core.$strip>], "type">>;
+                else: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+                    type: z.ZodLiteral<"send">;
+                    to: z.ZodArray<z.ZodUUID>;
+                    cooldown_minutes: z.ZodOptional<z.ZodNumber>;
+                    title: z.ZodOptional<z.ZodString>;
+                    body: z.ZodOptional<z.ZodString>;
+                    id: z.ZodOptional<z.ZodUUID>;
+                    enabled: z.ZodOptional<z.ZodBoolean>;
+                }, z.core.$strip>, z.ZodObject<{
+                    type: z.ZodLiteral<"trust">;
+                    mode: z.ZodEnum<{
+                        set: "set";
+                        adjust: "adjust";
+                        reset: "reset";
+                    }>;
+                    amount: z.ZodOptional<z.ZodNumber>;
+                    value: z.ZodOptional<z.ZodNumber>;
+                    cooldown_minutes: z.ZodOptional<z.ZodNumber>;
+                    id: z.ZodOptional<z.ZodUUID>;
+                    enabled: z.ZodOptional<z.ZodBoolean>;
+                }, z.core.$strip>, z.ZodObject<{
+                    type: z.ZodLiteral<"kill_stream">;
+                    delay_seconds: z.ZodOptional<z.ZodNumber>;
+                    cooldown_minutes: z.ZodOptional<z.ZodNumber>;
+                    message: z.ZodOptional<z.ZodString>;
+                    target: z.ZodOptional<z.ZodEnum<{
+                        triggering: "triggering";
+                        oldest: "oldest";
+                        newest: "newest";
+                        all_except_one: "all_except_one";
+                        all_user: "all_user";
+                    }>>;
+                    id: z.ZodOptional<z.ZodUUID>;
+                    enabled: z.ZodOptional<z.ZodBoolean>;
+                }, z.core.$strip>, z.ZodObject<{
+                    type: z.ZodLiteral<"message_client">;
+                    message: z.ZodString;
+                    target: z.ZodOptional<z.ZodEnum<{
+                        triggering: "triggering";
+                        oldest: "oldest";
+                        newest: "newest";
+                        all_except_one: "all_except_one";
+                        all_user: "all_user";
+                    }>>;
+                    id: z.ZodOptional<z.ZodUUID>;
+                    enabled: z.ZodOptional<z.ZodBoolean>;
+                }, z.core.$strip>], "type">>;
+                id: z.ZodOptional<z.ZodUUID>;
+                enabled: z.ZodOptional<z.ZodBoolean>;
+            }, z.core.$strict>], "type">>;
+        }, z.core.$strip>;
+        serverId: z.ZodOptional<z.ZodNullable<z.ZodUUID>>;
+        serverUserId: z.ZodOptional<z.ZodNullable<z.ZodUUID>>;
+        userId: z.ZodOptional<z.ZodNullable<z.ZodUUID>>;
+        enforceAcrossServers: z.ZodOptional<z.ZodBoolean>;
+        cooldownMinutes: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+        retentionDays: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+        isActive: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strict>;
+    sample: z.ZodOptional<z.ZodObject<{
+        sessionId: z.ZodUUID;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type DryRunRequest = z.infer<typeof dryRunRequestSchema>;
+/** The session a sample was evaluated against, named for display. */
+export interface DryRunSubject {
+    sessionId: string;
+    user: {
+        id: string;
+        name: string;
+    };
+    server: {
+        id: string;
+        name: string;
+    };
+}
+export interface DryRunCondition {
+    nodeId: string;
+    passed: boolean;
+    evidence: ConditionEvidence;
+}
+export interface DryRunAction {
+    nodeId: string;
+    wouldRun: boolean;
+    /** Why the node stays put: disabled, conditions unmet, or a branch not taken. */
+    reason?: string;
+    /** `if` nodes only: the branch its conditions pick against this subject. */
+    branch?: 'then' | 'else';
+}
+export interface DryRunSample {
+    subject: DryRunSubject;
+    /** The enabled session triggers that would reach this subject. */
+    triggers: TriggerType[];
+    conditions: DryRunCondition[];
+    actions: DryRunAction[];
+    wouldRun: boolean;
+    summary: string;
+}
+export interface DryRunResponse {
+    samples: DryRunSample[];
+}
+//# sourceMappingURL=dryRun.d.ts.map