aira-sdk 3.5.3 → 3.7.0

package/dist/client.d.ts

@@ -1,4 +1,4 @@
-import { Authorization, ActionReceipt, ActionDetail, AgentDetail, AgentVersion, CosignResult, EvidencePackage, ComplianceSnapshot, EscrowAccount, EscrowTransaction, VerifyResult, PaginatedList, ComplianceReport, ComplianceReportListResponse, ComplianceReportVerification, ActionExplanation, ExplanationVerification, OutputPolicy, OutputPolicyUpdate, DoraIncident, IctThirdParty, DoraTest } from "./types";
+import { Authorization, ActionReceipt, ActionDetail, AgentDetail, AgentVersion, CosignResult, EvidencePackage, ComplianceSnapshot, EscrowAccount, EscrowTransaction, VerifyResult, PaginatedList, ComplianceReport, ComplianceReportListResponse, ComplianceReportVerification, ActionExplanation, ExplanationVerification, OutputPolicy, OutputPolicyUpdate, DoraIncident, IctThirdParty, DoraTest, Policy, PolicyEvaluation, SanitizeResult, DetokenizeResult, WebhookInfo, UsageSummary, UsageEventList, ModelInfo, ModelPreferences, DriftStatus, BehavioralBaseline, DriftAlert, PrViolation } from "./types";
 import { AiraSession } from "./session";
 export interface AiraOptions {
     apiKey: string;
@@ -32,60 +32,60 @@ export declare class Aira {
         }>;
         aiPrompt?: string;
         aiModels?: string[];
-        scanConfig?: Record<string, any>;
+        scanConfig?: Record<string, unknown>;
         description?: string;
-    }): Promise<Record<string, any>>;
+    }): Promise<Policy>;
     /** List all active policies. */
-    listPolicies(): Promise<Array<Record<string, any>>>;
+    listPolicies(): Promise<Policy[]>;
     /** Get a single policy by ID. */
-    getPolicy(policyId: string): Promise<Record<string, any>>;
+    getPolicy(policyId: string): Promise<Policy>;
     /** Update a policy. Pass only fields to change. */
-    updatePolicy(policyId: string, params: Record<string, any>): Promise<Record<string, any>>;
+    updatePolicy(policyId: string, params: Record<string, unknown>): Promise<Policy>;
     /** Delete a policy. */
-    deletePolicy(policyId: string): Promise<Record<string, any>>;
+    deletePolicy(policyId: string): Promise<Record<string, unknown>>;
     /** Activate a policy. */
-    activatePolicy(policyId: string): Promise<Record<string, any>>;
+    activatePolicy(policyId: string): Promise<Policy>;
     /** Deactivate a policy. */
-    deactivatePolicy(policyId: string): Promise<Record<string, any>>;
+    deactivatePolicy(policyId: string): Promise<Policy>;
     /** Test a policy against an action context without executing it. */
-    dryRunPolicy(policyId: string, actionContext: Record<string, any>): Promise<Record<string, any>>;
+    dryRunPolicy(policyId: string, actionContext: Record<string, unknown>): Promise<PolicyEvaluation>;
     /** Scan text for PII, PHI, secrets, and prompt injection. */
     sanitizeText(params: {
         content: string;
         policy?: string;
         mode?: string;
         aiModel?: string;
-    }): Promise<Record<string, any>>;
+    }): Promise<SanitizeResult>;
     /** Reverse tokenization — map tokens back to original values. */
     detokenize(params: {
         content: string;
         tokenMapping: Record<string, string>;
-    }): Promise<Record<string, any>>;
+    }): Promise<DetokenizeResult>;
     /** Create a webhook subscription. */
     createWebhook(params: {
         url: string;
         events?: string[];
         secret?: string;
-    }): Promise<Record<string, any>>;
+    }): Promise<WebhookInfo>;
     /** List all webhooks for the organization. */
-    listWebhooks(): Promise<Array<Record<string, any>>>;
+    listWebhooks(): Promise<WebhookInfo[]>;
     /** Delete a webhook. */
-    deleteWebhook(webhookId: string): Promise<Record<string, any>>;
+    deleteWebhook(webhookId: string): Promise<Record<string, unknown>>;
     /** Get usage summary for the current billing period. */
-    getUsage(): Promise<Record<string, any>>;
+    getUsage(): Promise<UsageSummary>;
     /** List individual usage events. */
     listUsageEvents(params?: {
         page?: number;
         perPage?: number;
-    }): Promise<Record<string, any>>;
+    }): Promise<UsageEventList>;
     /** List available models. */
-    listModels(includeDisabled?: boolean): Promise<Array<Record<string, any>>>;
+    listModels(includeDisabled?: boolean): Promise<ModelInfo[]>;
     /** Get model preferences (disabled models list). */
-    getModelPreferences(): Promise<Record<string, any>>;
+    getModelPreferences(): Promise<ModelPreferences>;
     /** Update which models are disabled. */
-    updateModelPreferences(disabledModels: string[]): Promise<Record<string, any>>;
+    updateModelPreferences(disabledModels: string[]): Promise<ModelPreferences>;
     /** Get Aira's policy violations for a GitHub PR. */
-    getPrViolations(owner: string, repo: string, pullNumber: number): Promise<Array<Record<string, any>>>;
+    getPrViolations(owner: string, repo: string, pullNumber: number): Promise<PrViolation[]>;
     /**
      * Step 1 — Authorize an action BEFORE it executes.
      *
@@ -310,25 +310,25 @@ export declare class Aira {
      * Score the agent's recent behavior against its active baseline.
      * Read-only — does NOT persist an alert. Use this for dashboards.
      */
-    getDriftStatus(agentId: string, lookbackHours?: number): Promise<Record<string, unknown>>;
+    getDriftStatus(agentId: string, lookbackHours?: number): Promise<DriftStatus>;
     /** Compute a behavioral baseline from production action history. */
     computeDriftBaseline(params: {
         agentId: string;
         windowStart: string;
         windowEnd: string;
         activate?: boolean;
-    }): Promise<Record<string, unknown>>;
+    }): Promise<BehavioralBaseline>;
     /** Seed a baseline from a config dict (for cold-start agents). */
     seedSyntheticBaseline(params: {
         agentId: string;
         expectedDistribution: Record<string, number>;
         expectedActionsPerDay: number;
         activate?: boolean;
-    }): Promise<Record<string, unknown>>;
+    }): Promise<BehavioralBaseline>;
     /** Score the current window and persist an alert if it exceeds the threshold. */
-    runDriftCheck(agentId: string, lookbackHours?: number): Promise<Record<string, unknown> | null>;
-    listDriftAlerts(agentId: string, page?: number, acknowledged?: boolean): Promise<PaginatedList<Record<string, unknown>>>;
-    acknowledgeDriftAlert(agentId: string, alertId: string): Promise<Record<string, unknown>>;
+    runDriftCheck(agentId: string, lookbackHours?: number): Promise<DriftAlert | null>;
+    listDriftAlerts(agentId: string, page?: number, acknowledged?: boolean): Promise<PaginatedList<DriftAlert>>;
+    acknowledgeDriftAlert(agentId: string, alertId: string): Promise<DriftAlert>;
     /**
      * Seal every unsettled receipt for the org into a new settlement.
      * Admin-only. Returns the new settlement, or null if there were no

package/dist/index.d.ts

@@ -4,4 +4,4 @@ export { AiraSession } from "./session";
 export { OfflineQueue } from "./offline";
 export type { QueuedRequest } from "./offline";
 export { gatewayOpenAIConfig, gatewayAnthropicConfig } from "./gateway";
-export { AiraError, FRAMEWORK_ANNEX_IV, FRAMEWORK_ART12, FRAMEWORK_ART9, FRAMEWORK_ART6, type Authorization, type ActionReceipt, type ActionDetail, type AgentDetail, type AgentVersion, type CosignResult, type EvidencePackage, type ComplianceSnapshot, type EscrowAccount, type EscrowTransaction, type VerifyResult, type PaginatedList, type ComplianceReport, type ComplianceReportListResponse, type ComplianceReportVerification, type ActionExplanation, type ExplanationEnvelope, type ExplanationVerification, type OutputPolicy, type OutputPolicyUpdate, type OutputScanFlags, type OutputScanHit, type DoraIncident, type IctThirdParty, type DoraTest, } from "./types";
+export { AiraError, FRAMEWORK_ANNEX_IV, FRAMEWORK_ART12, FRAMEWORK_ART9, FRAMEWORK_ART6, type Authorization, type ActionReceipt, type ActionDetail, type AgentDetail, type AgentVersion, type CosignResult, type EvidencePackage, type ComplianceSnapshot, type EscrowAccount, type EscrowTransaction, type VerifyResult, type PaginatedList, type ComplianceReport, type ComplianceReportListResponse, type ComplianceReportVerification, type ActionExplanation, type ExplanationEnvelope, type ExplanationVerification, type OutputPolicy, type OutputPolicyUpdate, type OutputScanFlags, type OutputScanHit, type DoraIncident, type IctThirdParty, type DoraTest, type Policy, type PolicyEvaluation, type SanitizeFinding, type SanitizeResult, type DetokenizeResult, type WebhookInfo, type WebhookDeliveryInfo, type UsageBreakdown, type UsageSummary, type UsageEvent, type UsageEventList, type ModelInfo, type ModelPreferences, type BehavioralBaseline, type DriftCurrentWindow, type DriftStatus, type DriftAlert, type PrViolation, type ContentScanResult, } from "./types";

package/dist/types.d.ts

@@ -388,3 +388,205 @@ export interface ExplanationVerification {
     signing_key_id?: string | null;
     request_id: string;
 }
+/** Governance policy. */
+export interface Policy {
+    id: string;
+    org_uuid: string;
+    name: string;
+    description: string | null;
+    mode: string;
+    priority: number;
+    conditions: Array<{
+        field: string;
+        op: string;
+        value?: unknown;
+        values?: string[];
+    }> | null;
+    ai_prompt: string | null;
+    ai_models: string[] | null;
+    scan_config: Record<string, unknown> | null;
+    decision: string;
+    approvers: string[] | null;
+    active: boolean;
+    created_at: string;
+    updated_at: string | null;
+    request_id: string;
+}
+/** Result of a policy dry-run evaluation. */
+export interface PolicyEvaluation {
+    decision: string;
+    confidence: number | null;
+    reasoning: string | null;
+    model_votes: Record<string, unknown> | null;
+    request_id: string;
+}
+/** Individual finding from a sanitize scan. */
+export interface SanitizeFinding {
+    entity_type: string;
+    severity: string;
+    action_taken: string;
+    library: string;
+    description: string;
+    count: number;
+}
+/** Result of scanning text for PII, PHI, secrets, and prompt injection. */
+export interface SanitizeResult {
+    clean: string;
+    blocked: boolean;
+    mode: string;
+    policy: string;
+    input_hash: string;
+    output_hash: string;
+    findings: SanitizeFinding[];
+    token_mapping: Record<string, string> | null;
+    receipt_id: string | null;
+    request_id: string;
+}
+/** Result of reversing tokenization. */
+export interface DetokenizeResult {
+    content: string;
+    request_id: string;
+}
+/** Webhook subscription. */
+export interface WebhookInfo {
+    id: string;
+    url: string;
+    secret: string | null;
+    events: string[];
+    status: string;
+    created_at: string;
+    request_id: string;
+}
+/** A single webhook delivery attempt. */
+export interface WebhookDeliveryInfo {
+    id: string;
+    event: string;
+    payload: Record<string, unknown>;
+    status_code: number | null;
+    attempt: number;
+    status: string;
+    delivered_at: string | null;
+    created_at: string;
+}
+/** Breakdown of usage by operation type. */
+export interface UsageBreakdown {
+    case_runs: number;
+    action_authorizations: number;
+    chat_messages: number;
+    compliance_bundles: number;
+    settlements: number;
+    drift_checks: number;
+}
+/** Usage summary for the current billing period. */
+export interface UsageSummary {
+    usage: number;
+    limit: number;
+    remaining: number;
+    plan: string;
+    overage_ops?: number;
+    overage_cost?: string;
+    overage_enabled?: boolean;
+    breakdown?: UsageBreakdown;
+    request_id: string;
+}
+/** Individual usage event. */
+export interface UsageEvent {
+    id: string;
+    event: string;
+    units: number;
+    run_uuid: string | null;
+    metadata: Record<string, unknown> | null;
+    created_at: string;
+}
+/** Paginated list of usage events. */
+export interface UsageEventList {
+    data: UsageEvent[];
+    total: number;
+    page: number;
+    per_page: number;
+    has_more: boolean;
+    request_id: string;
+}
+/** Available model info. */
+export interface ModelInfo {
+    model_id: string;
+    provider: string;
+    display_name: string;
+    available: boolean;
+    max_tokens?: number;
+    disabled?: boolean;
+}
+/** Model preferences (disabled models). */
+export interface ModelPreferences {
+    disabled_models: string[];
+    request_id: string;
+}
+/** Behavioral baseline for an agent. */
+export interface BehavioralBaseline {
+    id: string;
+    agent_id: string;
+    baseline_type: string;
+    is_active: boolean;
+    window_start: string;
+    window_end: string;
+    action_type_dist: Record<string, number>;
+    total_actions: number;
+    avg_actions_per_day: number;
+    source_agent_ids: string[] | null;
+    request_id?: string | null;
+}
+/** Current-window stats for drift scoring. */
+export interface DriftCurrentWindow {
+    agent_id: string;
+    window_start: string;
+    window_end: string;
+    action_type_dist: Record<string, number>;
+    total_actions: number;
+    avg_actions_per_day: number;
+}
+/** Drift status for an agent against its active baseline. */
+export interface DriftStatus {
+    agent_id: string;
+    has_baseline: boolean;
+    baseline: BehavioralBaseline | null;
+    current_window: DriftCurrentWindow | null;
+    kl_divergence: number | null;
+    volume_ratio: number | null;
+    severity: "info" | "warning" | "critical" | null;
+    new_action_types: string[] | null;
+    is_drifting: boolean;
+    request_id: string;
+}
+/** Persisted drift alert. */
+export interface DriftAlert {
+    id: string;
+    agent_id: string;
+    baseline_uuid: string;
+    window_start: string;
+    window_end: string;
+    kl_divergence: number;
+    volume_ratio: number;
+    severity: "info" | "warning" | "critical";
+    new_action_types: string[] | null;
+    detected_at: string;
+    acknowledged_at: string | null;
+    acknowledged_by: string | null;
+}
+/** A policy violation found in a GitHub PR. */
+export interface PrViolation {
+    file: string;
+    line: number;
+    finding: string;
+    body: string;
+    suggestion: string | null;
+    created_at: string;
+}
+/** Result of a content scan against text. */
+export interface ContentScanResult {
+    decision: "allow" | "require_approval" | "deny";
+    worst_severity: "info" | "warning" | "critical" | null;
+    hits: OutputScanHit[];
+    mode: string;
+    libraries: string[];
+    request_id: string;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "aira-sdk",
-  "version": "3.5.3",
+  "version": "3.7.0",
   "description": "The authorization and audit layer for AI agents",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",