@axonflow/sdk 5.5.0 → 6.0.0

package/dist/cjs/types/policies.d.ts

@@ -47,8 +47,14 @@ export type PolicySeverity = 'critical' | 'high' | 'medium' | 'low';
  * Static policy definition
  */
 export interface StaticPolicy {
-    /** Unique policy identifier */
+    /** Unique policy UUID */
     id: string;
+    /**
+     * Human-readable policy identifier (e.g. `sys_sqli_union_select`).
+     * Distinct from `id` which is the UUID; use this when referencing
+     * policies in code or audit logs.
+     */
+    policy_id?: string;
     /** Human-readable policy name */
     name: string;
     /** Policy description */
@@ -65,6 +71,8 @@ export interface StaticPolicy {
     enabled: boolean;
     /** Action to take when pattern matches */
     action: PolicyAction;
+    /** Evaluation order — lower values are evaluated first. */
+    priority?: number;
     /** Organization ID (for organization-tier policies) */
     organizationId?: string;
     /** Tenant ID (for tenant-tier policies) */
@@ -75,10 +83,21 @@ export interface StaticPolicy {
     updatedAt: string;
     /** Version number for tracking changes */
     version?: number;
-    /** Whether this policy has an active override */
-    hasOverride?: boolean;
-    /** Active override details */
+    /**
+     * Whether this policy has an active override (canonical wire-shape name).
+     */
+    has_override?: boolean;
+    /**
+     * Active override details
+     */
     override?: PolicyOverride;
+    /**
+     * @deprecated Use `has_override`. The `policyRequest` decoder is a
+     * JSON.parse passthrough — the wire field is `has_override`, so
+     * `hasOverride` has always read `undefined`. This alias is kept
+     * for type-compat and will be removed in v7.
+     */
+    hasOverride?: boolean;
 }
 /**
  * Options for listing static policies
@@ -125,6 +144,10 @@ export interface CreateStaticPolicyRequest {
     enabled?: boolean;
     /** Action to take when pattern matches */
     action?: PolicyAction;
+    /** Evaluation order — lower values are evaluated first. */
+    priority?: number;
+    /** Free-form tags for grouping and filtering. */
+    tags?: string[];
 }
 /**
  * Request to update an existing static policy
@@ -144,11 +167,17 @@ export interface UpdateStaticPolicyRequest {
     enabled?: boolean;
     /** Updated action */
     action?: PolicyAction;
+    /** Updated evaluation priority. */
+    priority?: number;
+    /** Updated tags. */
+    tags?: string[];
 }
 /**
  * Policy override configuration
  */
 export interface PolicyOverride {
+    /** Override identifier (required to revoke a specific override). */
+    id?: string;
     /** Policy ID this override applies to */
     policy_id: string;
     /** Override action */
@@ -161,8 +190,14 @@ export interface PolicyOverride {
     created_at: string;
     /** When the override expires (optional) */
     expires_at?: string;
-    /** Whether the override is currently active */
-    active: boolean;
+    /** Override enabled status (null = no override). Wire-shape canonical name. */
+    enabled_override?: boolean;
+    /**
+     * @deprecated Use `enabled_override`. The decoder is JSON.parse
+     * passthrough — the wire emits `enabled_override`, so `active` has
+     * always read `undefined`. Removed in v7.
+     */
+    active?: boolean;
 }
 /**
  * Request to create a policy override
@@ -341,6 +376,10 @@ export interface TestPatternMatch {
  * Policy version history entry
  */
 export interface PolicyVersion {
+    /** Snapshot identifier (UUID). */
+    id?: string;
+    /** Policy ID this snapshot belongs to. */
+    policy_id?: string;
     /** Version number */
     version: number;
     /** Who made the change */
@@ -349,11 +388,27 @@ export interface PolicyVersion {
     changedAt: string;
     /** Type of change */
     changeType: 'created' | 'updated' | 'enabled' | 'disabled' | 'deleted';
-    /** Description of changes */
+    /** Summary of changes (canonical wire field). */
+    change_summary?: string;
+    /** Complete policy state at this version (canonical wire field). */
+    snapshot?: Record<string, unknown>;
+    /**
+     * @deprecated The transformer reads `change_description` from the
+     * wire, but the server actually emits `change_summary`. So this
+     * field has always read `undefined`. Use `change_summary`. Removed
+     * in v7.
+     */
     changeDescription?: string;
-    /** Previous values (for updates) */
+    /**
+     * @deprecated The transformer reads `previous_values` from the wire,
+     * but the server actually emits the full `snapshot` object. So this
+     * field has always read `undefined`. Use `snapshot`. Removed in v7.
+     */
     previousValues?: Record<string, unknown>;
-    /** New values */
+    /**
+     * @deprecated Same as `previousValues` — the wire emits a single
+     * `snapshot`, not before/after diffs. Use `snapshot`. Removed in v7.
+     */
     newValues?: Record<string, unknown>;
 }
 /**
@@ -368,13 +423,36 @@ export interface EffectivePoliciesOptions {
     includeOverridden?: boolean;
 }
 /**
- * Response containing effective policies with tier inheritance applied
+ * Response containing effective policies with tier inheritance applied.
+ *
+ * The wire emits this as a tier-stratified response with separate
+ * `static` and `dynamic` arrays plus tenant/org scope and a computed-at
+ * timestamp. The legacy `policies` flat array and `inheritance` summary
+ * are SDK-side conveniences — the wire-canonical fields are exposed
+ * directly below.
  */
 export interface EffectivePoliciesResponse {
-    /** Effective policies after tier inheritance */
-    policies: StaticPolicy[] | DynamicPolicy[];
-    /** Inheritance chain information */
-    inheritance: {
+    /** Effective static policies after tier inheritance (wire-canonical). */
+    static?: StaticPolicy[];
+    /** Effective dynamic policies after tier inheritance (wire-canonical). */
+    dynamic?: DynamicPolicy[];
+    /** Tenant ID this set was computed for. */
+    tenant_id?: string;
+    /** Organization ID this set was computed for (Enterprise). */
+    organization_id?: string;
+    /** When this effective set was computed (ISO 8601). */
+    computed_at?: string;
+    /**
+     * Combined effective policies (legacy flat shape). Prefer `static`
+     * and `dynamic` for new code.
+     */
+    policies?: StaticPolicy[] | DynamicPolicy[];
+    /**
+     * Inheritance chain summary (legacy SDK-side computed view; not on
+     * the wire). Populated by the SDK when the legacy `policies` shape
+     * is decoded.
+     */
+    inheritance?: {
         /** System policies count */
         systemPolicies: number;
         /** Organization policies count */

package/dist/cjs/types/policies.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"policies.d.ts","sourceRoot":"","sources":["../../../src/types/policies.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAMH;;GAEG;AACH,MAAM,MAAM,cAAc,GAEtB,eAAe,GACf,gBAAgB,GAEhB,YAAY,GACZ,QAAQ,GACR,QAAQ,GACR,WAAW,GACX,eAAe,GAEf,cAAc,GACd,aAAa,GACb,iBAAiB,GAEjB,gBAAgB,GAEhB,cAAc,GACd,oBAAoB,GACpB,kBAAkB,GAClB,cAAc,GACd,gBAAgB,GAEhB,cAAc,GACd,iBAAiB,GACjB,gBAAgB,GAChB,WAAW,CAAC;AAEhB;;GAEG;AACH,eAAO,MAAM,qBAAqB,iBAAiB,CAAC;AACpD,eAAO,MAAM,wBAAwB,oBAAoB,CAAC;AAC1D,eAAO,MAAM,uBAAuB,mBAAmB,CAAC;AACxD,eAAO,MAAM,kBAAkB,cAAc,CAAC;AAE9C;;;;;GAKG;AACH,MAAM,MAAM,UAAU,GAAG,QAAQ,GAAG,cAAc,GAAG,QAAQ,CAAC;AAE9D;;;;;;;GAOG;AACH,MAAM,MAAM,cAAc,GAAG,OAAO,GAAG,kBAAkB,GAAG,QAAQ,GAAG,MAAM,GAAG,KAAK,CAAC;AAEtF;;;;;;;;GAQG;AACH,MAAM,MAAM,YAAY,GAAG,OAAO,GAAG,kBAAkB,GAAG,QAAQ,GAAG,MAAM,GAAG,KAAK,GAAG,OAAO,CAAC;AAE9F;;GAEG;AACH,MAAM,MAAM,cAAc,GAAG,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;AAMpE;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,+BAA+B;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,iCAAiC;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,yBAAyB;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iDAAiD;IACjD,QAAQ,EAAE,cAAc,CAAC;IACzB,iDAAiD;IACjD,IAAI,EAAE,UAAU,CAAC;IACjB,2CAA2C;IAC3C,OAAO,EAAE,MAAM,CAAC;IAChB,mDAAmD;IACnD,QAAQ,EAAE,cAAc,CAAC;IACzB,oCAAoC;IACpC,OAAO,EAAE,OAAO,CAAC;IACjB,0CAA0C;IAC1C,MAAM,EAAE,YAAY,CAAC;IACrB,uDAAuD;IACvD,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,2CAA2C;IAC3C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,yBAAyB;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,4BAA4B;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,0CAA0C;IAC1C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,iDAAiD;IACjD,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,8BAA8B;IAC9B,QAAQ,CAAC,EAAE,cAAc,CAAC;CAC3B;AAED;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACxC,yBAAyB;IACzB,QAAQ,CAAC,EAAE,cAAc,CAAC;IAC1B,qBAAqB;IACrB,IAAI,CAAC,EAAE,UAAU,CAAC;IAClB,6CAA6C;IAC7C,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,+BAA+B;IAC/B,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,0CAA0C;IAC1C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,4BAA4B;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iBAAiB;IACjB,MAAM,CAAC,EAAE,MAAM,GAAG,UAAU,GAAG,UAAU,GAAG,WAAW,GAAG,WAAW,CAAC;IACtE,iBAAiB;IACjB,SAAS,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC;IAC3B,wCAAwC;IACxC,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACxC,iCAAiC;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,yBAAyB;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,sBAAsB;IACtB,QAAQ,EAAE,cAAc,CAAC;IACzB,6DAA6D;IAC7D,IAAI,CAAC,EAAE,UAAU,CAAC;IAClB,kEAAkE;IAClE,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,6BAA6B;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,mDAAmD;IACnD,QAAQ,CAAC,EAAE,cAAc,CAAC;IAC1B,oCAAoC;IACpC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,0CAA0C;IAC1C,MAAM,CAAC,EAAE,YAAY,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACxC,0BAA0B;IAC1B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,0BAA0B;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,uBAAuB;IACvB,QAAQ,CAAC,EAAE,cAAc,CAAC;IAC1B,sBAAsB;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,uBAAuB;IACvB,QAAQ,CAAC,EAAE,cAAc,CAAC;IAC1B,6BAA6B;IAC7B,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,qBAAqB;IACrB,MAAM,CAAC,EAAE,YAAY,CAAC;CACvB;AAMD;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,yCAAyC;IACzC,SAAS,EAAE,MAAM,CAAC;IAClB,sBAAsB;IACtB,eAAe,EAAE,cAAc,CAAC;IAChC,8BAA8B;IAC9B,eAAe,EAAE,MAAM,CAAC;IACxB,+BAA+B;IAC/B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,oCAAoC;IACpC,UAAU,EAAE,MAAM,CAAC;IACnB,2CAA2C;IAC3C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,+CAA+C;IAC/C,MAAM,EAAE,OAAO,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,2BAA2B;IAC1C,sBAAsB;IACtB,eAAe,EAAE,cAAc,CAAC;IAChC,8BAA8B;IAC9B,eAAe,EAAE,MAAM,CAAC;IACxB,iDAAiD;IACjD,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAMD;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,wBAAwB;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,0BAA0B;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,+BAA+B;IAC/B,KAAK,EAAE,OAAO,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,6EAA6E;IAC7E,IAAI,EAAE,MAAM,CAAC;IACb,2BAA2B;IAC3B,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,aAAa;IAC5B,+BAA+B;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,iCAAiC;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,yBAAyB;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,qDAAqD;IACrD,IAAI,EAAE,MAAM,CAAC;IACb,kBAAkB;IAClB,IAAI,CAAC,EAAE,UAAU,CAAC;IAClB,sBAAsB;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,uDAAuD;IACvD,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,uCAAuC;IACvC,UAAU,CAAC,EAAE,sBAAsB,EAAE,CAAC;IACtC,8CAA8C;IAC9C,OAAO,CAAC,EAAE,mBAAmB,EAAE,CAAC;IAChC,gEAAgE;IAChE,QAAQ,EAAE,MAAM,CAAC;IACjB,oCAAoC;IACpC,OAAO,EAAE,OAAO,CAAC;IACjB,yBAAyB;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,4BAA4B;IAC5B,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,0BAA0B;IACzC,+DAA+D;IAC/D,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,qBAAqB;IACrB,IAAI,CAAC,EAAE,UAAU,CAAC;IAClB,6CAA6C;IAC7C,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,+BAA+B;IAC/B,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,gCAAgC;IAChC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,4BAA4B;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iBAAiB;IACjB,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,UAAU,GAAG,YAAY,GAAG,YAAY,CAAC;IACpE,iBAAiB;IACjB,SAAS,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC;IAC3B,mBAAmB;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;GAIG;AACH,MAAM,WAAW,0BAA0B;IACzC,kBAAkB;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,yBAAyB;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,qDAAqD;IACrD,IAAI,EAAE,MAAM,CAAC;IACb,mDAAmD;IACnD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,8DAA8D;IAC9D,IAAI,CAAC,EAAE,UAAU,CAAC;IAClB,qDAAqD;IACrD,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,uCAAuC;IACvC,UAAU,CAAC,EAAE,sBAAsB,EAAE,CAAC;IACtC,8CAA8C;IAC9C,OAAO,CAAC,EAAE,mBAAmB,EAAE,CAAC;IAChC,qCAAqC;IACrC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,oCAAoC;IACpC,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED;;;;GAIG;AACH,MAAM,WAAW,0BAA0B;IACzC,mBAAmB;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,0BAA0B;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,mBAAmB;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,uBAAuB;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,mBAAmB;IACnB,IAAI,CAAC,EAAE,UAAU,CAAC;IAClB,8BAA8B;IAC9B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,yBAAyB;IACzB,UAAU,CAAC,EAAE,sBAAsB,EAAE,CAAC;IACtC,sBAAsB;IACtB,OAAO,CAAC,EAAE,mBAAmB,EAAE,CAAC;IAChC,uBAAuB;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,6BAA6B;IAC7B,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAMD;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,mCAAmC;IACnC,KAAK,EAAE,OAAO,CAAC;IACf,0CAA0C;IAC1C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,kCAAkC;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,kCAAkC;IAClC,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,mCAAmC;IACnC,OAAO,EAAE,gBAAgB,EAAE,CAAC;CAC7B;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,gCAAgC;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,kCAAkC;IAClC,OAAO,EAAE,OAAO,CAAC;IACjB,6BAA6B;IAC7B,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;CACnB;AAMD;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,qBAAqB;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,0BAA0B;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,+BAA+B;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,qBAAqB;IACrB,UAAU,EAAE,SAAS,GAAG,SAAS,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,CAAC;IACvE,6BAA6B;IAC7B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,oCAAoC;IACpC,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACzC,iBAAiB;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACrC;AAMD;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC,yBAAyB;IACzB,QAAQ,CAAC,EAAE,cAAc,CAAC;IAC1B,gCAAgC;IAChC,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,kCAAkC;IAClC,iBAAiB,CAAC,EAAE,OAAO,CAAC;CAC7B;AAED;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACxC,gDAAgD;IAChD,QAAQ,EAAE,YAAY,EAAE,GAAG,aAAa,EAAE,CAAC;IAC3C,oCAAoC;IACpC,WAAW,EAAE;QACX,4BAA4B;QAC5B,cAAc,EAAE,MAAM,CAAC;QACvB,kCAAkC;QAClC,oBAAoB,EAAE,MAAM,CAAC;QAC7B,4BAA4B;QAC5B,cAAc,EAAE,MAAM,CAAC;QACvB,wBAAwB;QACxB,gBAAgB,EAAE,MAAM,CAAC;KAC1B,CAAC;CACH;AAMD;;GAEG;AACH,MAAM,WAAW,iBAAiB,CAAC,CAAC;IAClC,qBAAqB;IACrB,KAAK,EAAE,CAAC,EAAE,CAAC;IACX,4BAA4B;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,yBAAyB;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,qBAAqB;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,mCAAmC;IACnC,OAAO,EAAE,OAAO,CAAC;CAClB"}
+{"version":3,"file":"policies.d.ts","sourceRoot":"","sources":["../../../src/types/policies.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAMH;;GAEG;AACH,MAAM,MAAM,cAAc,GAEtB,eAAe,GACf,gBAAgB,GAEhB,YAAY,GACZ,QAAQ,GACR,QAAQ,GACR,WAAW,GACX,eAAe,GAEf,cAAc,GACd,aAAa,GACb,iBAAiB,GAEjB,gBAAgB,GAEhB,cAAc,GACd,oBAAoB,GACpB,kBAAkB,GAClB,cAAc,GACd,gBAAgB,GAEhB,cAAc,GACd,iBAAiB,GACjB,gBAAgB,GAChB,WAAW,CAAC;AAEhB;;GAEG;AACH,eAAO,MAAM,qBAAqB,iBAAiB,CAAC;AACpD,eAAO,MAAM,wBAAwB,oBAAoB,CAAC;AAC1D,eAAO,MAAM,uBAAuB,mBAAmB,CAAC;AACxD,eAAO,MAAM,kBAAkB,cAAc,CAAC;AAE9C;;;;;GAKG;AACH,MAAM,MAAM,UAAU,GAAG,QAAQ,GAAG,cAAc,GAAG,QAAQ,CAAC;AAE9D;;;;;;;GAOG;AACH,MAAM,MAAM,cAAc,GAAG,OAAO,GAAG,kBAAkB,GAAG,QAAQ,GAAG,MAAM,GAAG,KAAK,CAAC;AAEtF;;;;;;;;GAQG;AACH,MAAM,MAAM,YAAY,GAAG,OAAO,GAAG,kBAAkB,GAAG,QAAQ,GAAG,MAAM,GAAG,KAAK,GAAG,OAAO,CAAC;AAE9F;;GAEG;AACH,MAAM,MAAM,cAAc,GAAG,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;AAMpE;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,yBAAyB;IACzB,EAAE,EAAE,MAAM,CAAC;IACX;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,iCAAiC;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,yBAAyB;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iDAAiD;IACjD,QAAQ,EAAE,cAAc,CAAC;IACzB,iDAAiD;IACjD,IAAI,EAAE,UAAU,CAAC;IACjB,2CAA2C;IAC3C,OAAO,EAAE,MAAM,CAAC;IAChB,mDAAmD;IACnD,QAAQ,EAAE,cAAc,CAAC;IACzB,oCAAoC;IACpC,OAAO,EAAE,OAAO,CAAC;IACjB,0CAA0C;IAC1C,MAAM,EAAE,YAAY,CAAC;IACrB,2DAA2D;IAC3D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,uDAAuD;IACvD,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,2CAA2C;IAC3C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,yBAAyB;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,4BAA4B;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,0CAA0C;IAC1C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;OAEG;IACH,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB;;OAEG;IACH,QAAQ,CAAC,EAAE,cAAc,CAAC;IAC1B;;;;;OAKG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACxC,yBAAyB;IACzB,QAAQ,CAAC,EAAE,cAAc,CAAC;IAC1B,qBAAqB;IACrB,IAAI,CAAC,EAAE,UAAU,CAAC;IAClB,6CAA6C;IAC7C,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,+BAA+B;IAC/B,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,0CAA0C;IAC1C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,4BAA4B;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iBAAiB;IACjB,MAAM,CAAC,EAAE,MAAM,GAAG,UAAU,GAAG,UAAU,GAAG,WAAW,GAAG,WAAW,CAAC;IACtE,iBAAiB;IACjB,SAAS,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC;IAC3B,wCAAwC;IACxC,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACxC,iCAAiC;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,yBAAyB;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,sBAAsB;IACtB,QAAQ,EAAE,cAAc,CAAC;IACzB,6DAA6D;IAC7D,IAAI,CAAC,EAAE,UAAU,CAAC;IAClB,kEAAkE;IAClE,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,6BAA6B;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,mDAAmD;IACnD,QAAQ,CAAC,EAAE,cAAc,CAAC;IAC1B,oCAAoC;IACpC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,0CAA0C;IAC1C,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB,2DAA2D;IAC3D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,iDAAiD;IACjD,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACxC,0BAA0B;IAC1B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,0BAA0B;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,uBAAuB;IACvB,QAAQ,CAAC,EAAE,cAAc,CAAC;IAC1B,sBAAsB;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,uBAAuB;IACvB,QAAQ,CAAC,EAAE,cAAc,CAAC;IAC1B,6BAA6B;IAC7B,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,qBAAqB;IACrB,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB,mCAAmC;IACnC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,oBAAoB;IACpB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;CACjB;AAMD;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,oEAAoE;IACpE,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,yCAAyC;IACzC,SAAS,EAAE,MAAM,CAAC;IAClB,sBAAsB;IACtB,eAAe,EAAE,cAAc,CAAC;IAChC,8BAA8B;IAC9B,eAAe,EAAE,MAAM,CAAC;IACxB,+BAA+B;IAC/B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,oCAAoC;IACpC,UAAU,EAAE,MAAM,CAAC;IACnB,2CAA2C;IAC3C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,+EAA+E;IAC/E,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B;;;;OAIG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,2BAA2B;IAC1C,sBAAsB;IACtB,eAAe,EAAE,cAAc,CAAC;IAChC,8BAA8B;IAC9B,eAAe,EAAE,MAAM,CAAC;IACxB,iDAAiD;IACjD,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAMD;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,wBAAwB;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,0BAA0B;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,+BAA+B;IAC/B,KAAK,EAAE,OAAO,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,6EAA6E;IAC7E,IAAI,EAAE,MAAM,CAAC;IACb,2BAA2B;IAC3B,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,aAAa;IAC5B,+BAA+B;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,iCAAiC;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,yBAAyB;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,qDAAqD;IACrD,IAAI,EAAE,MAAM,CAAC;IACb,kBAAkB;IAClB,IAAI,CAAC,EAAE,UAAU,CAAC;IAClB,sBAAsB;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,uDAAuD;IACvD,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,uCAAuC;IACvC,UAAU,CAAC,EAAE,sBAAsB,EAAE,CAAC;IACtC,8CAA8C;IAC9C,OAAO,CAAC,EAAE,mBAAmB,EAAE,CAAC;IAChC,gEAAgE;IAChE,QAAQ,EAAE,MAAM,CAAC;IACjB,oCAAoC;IACpC,OAAO,EAAE,OAAO,CAAC;IACjB,yBAAyB;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,4BAA4B;IAC5B,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,0BAA0B;IACzC,+DAA+D;IAC/D,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,qBAAqB;IACrB,IAAI,CAAC,EAAE,UAAU,CAAC;IAClB,6CAA6C;IAC7C,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,+BAA+B;IAC/B,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,gCAAgC;IAChC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,4BAA4B;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iBAAiB;IACjB,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,UAAU,GAAG,YAAY,GAAG,YAAY,CAAC;IACpE,iBAAiB;IACjB,SAAS,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC;IAC3B,mBAAmB;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;GAIG;AACH,MAAM,WAAW,0BAA0B;IACzC,kBAAkB;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,yBAAyB;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,qDAAqD;IACrD,IAAI,EAAE,MAAM,CAAC;IACb,mDAAmD;IACnD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,8DAA8D;IAC9D,IAAI,CAAC,EAAE,UAAU,CAAC;IAClB,qDAAqD;IACrD,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,uCAAuC;IACvC,UAAU,CAAC,EAAE,sBAAsB,EAAE,CAAC;IACtC,8CAA8C;IAC9C,OAAO,CAAC,EAAE,mBAAmB,EAAE,CAAC;IAChC,qCAAqC;IACrC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,oCAAoC;IACpC,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED;;;;GAIG;AACH,MAAM,WAAW,0BAA0B;IACzC,mBAAmB;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,0BAA0B;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,mBAAmB;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,uBAAuB;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,mBAAmB;IACnB,IAAI,CAAC,EAAE,UAAU,CAAC;IAClB,8BAA8B;IAC9B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,yBAAyB;IACzB,UAAU,CAAC,EAAE,sBAAsB,EAAE,CAAC;IACtC,sBAAsB;IACtB,OAAO,CAAC,EAAE,mBAAmB,EAAE,CAAC;IAChC,uBAAuB;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,6BAA6B;IAC7B,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAMD;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,mCAAmC;IACnC,KAAK,EAAE,OAAO,CAAC;IACf,0CAA0C;IAC1C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,kCAAkC;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,kCAAkC;IAClC,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,mCAAmC;IACnC,OAAO,EAAE,gBAAgB,EAAE,CAAC;CAC7B;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,gCAAgC;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,kCAAkC;IAClC,OAAO,EAAE,OAAO,CAAC;IACjB,6BAA6B;IAC7B,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;CACnB;AAMD;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,kCAAkC;IAClC,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,0CAA0C;IAC1C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,qBAAqB;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,0BAA0B;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,+BAA+B;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,qBAAqB;IACrB,UAAU,EAAE,SAAS,GAAG,SAAS,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,CAAC;IACvE,iDAAiD;IACjD,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,oEAAoE;IACpE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC;;;;;OAKG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B;;;;OAIG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACzC;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACrC;AAMD;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC,yBAAyB;IACzB,QAAQ,CAAC,EAAE,cAAc,CAAC;IAC1B,gCAAgC;IAChC,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,kCAAkC;IAClC,iBAAiB,CAAC,EAAE,OAAO,CAAC;CAC7B;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,yBAAyB;IACxC,yEAAyE;IACzE,MAAM,CAAC,EAAE,YAAY,EAAE,CAAC;IACxB,0EAA0E;IAC1E,OAAO,CAAC,EAAE,aAAa,EAAE,CAAC;IAC1B,2CAA2C;IAC3C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,8DAA8D;IAC9D,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,uDAAuD;IACvD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;OAGG;IACH,QAAQ,CAAC,EAAE,YAAY,EAAE,GAAG,aAAa,EAAE,CAAC;IAC5C;;;;OAIG;IACH,WAAW,CAAC,EAAE;QACZ,4BAA4B;QAC5B,cAAc,EAAE,MAAM,CAAC;QACvB,kCAAkC;QAClC,oBAAoB,EAAE,MAAM,CAAC;QAC7B,4BAA4B;QAC5B,cAAc,EAAE,MAAM,CAAC;QACvB,wBAAwB;QACxB,gBAAgB,EAAE,MAAM,CAAC;KAC1B,CAAC;CACH;AAMD;;GAEG;AACH,MAAM,WAAW,iBAAiB,CAAC,CAAC;IAClC,qBAAqB;IACrB,KAAK,EAAE,CAAC,EAAE,CAAC;IACX,4BAA4B;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,yBAAyB;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,qBAAqB;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,mCAAmC;IACnC,OAAO,EAAE,OAAO,CAAC;CAClB"}

package/dist/cjs/types/policy.d.ts

@@ -1,31 +1,85 @@
 /**
- * Policy-related types
+ * Generic policy with full metadata. Mirrors the OpenAPI `Policy`
+ * schema; SDK consumers historically only saw the rules-shape, but
+ * the wire emits a richer object with category, tier, action,
+ * pattern, lifecycle timestamps, and ownership scoping.
  */
 export interface Policy {
     /**
-     * Policy ID
+     * Policy UUID
      */
     id: string;
+    /**
+     * Human-readable policy identifier (e.g. `sys_sqli_union_select`).
+     */
+    policy_id?: string;
     /**
      * Policy name
      */
     name: string;
+    /**
+     * Free-form description.
+     */
+    description?: string;
     /**
      * Policy type
      */
     type: 'static' | 'dynamic';
+    /**
+     * Policy category for grouping and filtering.
+     */
+    category?: string;
+    /**
+     * Policy tier in the hierarchy.
+     */
+    tier?: 'system' | 'organization' | 'tenant';
+    /**
+     * Regex pattern (for static policies).
+     */
+    pattern?: string;
+    /**
+     * Severity level.
+     */
+    severity?: 'critical' | 'high' | 'medium' | 'low';
+    /**
+     * Action to take when the policy fires.
+     */
+    action?: 'block' | 'require_approval' | 'redact' | 'warn' | 'log';
+    /**
+     * Multiple actions for fan-out policies.
+     */
+    actions?: string[];
+    /**
+     * Conditions for dynamic policies.
+     */
+    conditions?: Array<Record<string, unknown>>;
     /**
      * Is the policy enabled?
      */
     enabled: boolean;
     /**
-     * Policy rules
+     * Policy rules (legacy shape; static policies expose `pattern`
+     * directly on the wire instead).
      */
-    rules: PolicyRule[];
+    rules?: PolicyRule[];
     /**
      * Priority (lower numbers = higher priority)
      */
     priority: number;
+    /** Organization ID for organization-tier policies. */
+    organization_id?: string;
+    /** Tenant ID for tenant-tier policies. */
+    tenant_id?: string;
+    /** Creation timestamp. */
+    created_at?: string;
+    /** Last-update timestamp. */
+    updated_at?: string;
+    /** Author of the policy. */
+    created_by?: string;
+    /** Last editor. */
+    updated_by?: string;
+    /** Version counter for change tracking. */
+    version?: number;
 }
 export interface PolicyRule {
     /**

package/dist/cjs/types/policy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../../../src/types/policy.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,WAAW,MAAM;IACrB;;OAEG;IACH,EAAE,EAAE,MAAM,CAAC;IAEX;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC;IAEb;;OAEG;IACH,IAAI,EAAE,QAAQ,GAAG,SAAS,CAAC;IAE3B;;OAEG;IACH,OAAO,EAAE,OAAO,CAAC;IAEjB;;OAEG;IACH,KAAK,EAAE,UAAU,EAAE,CAAC;IAEpB;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,UAAU;IACzB;;OAEG;IACH,SAAS,EAAE;QACT,KAAK,EAAE,MAAM,CAAC;QACd,QAAQ,EAAE,QAAQ,GAAG,UAAU,GAAG,OAAO,GAAG,SAAS,GAAG,MAAM,CAAC;QAC/D,KAAK,EAAE,GAAG,CAAC;KACZ,CAAC;IAEF;;OAEG;IACH,MAAM,EAAE,OAAO,GAAG,MAAM,GAAG,QAAQ,GAAG,QAAQ,GAAG,KAAK,CAAC;IAEvD;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB"}
+{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../../../src/types/policy.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,WAAW,MAAM;IACrB;;OAEG;IACH,EAAE,EAAE,MAAM,CAAC;IAEX;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC;IAEb;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB;;OAEG;IACH,IAAI,EAAE,QAAQ,GAAG,SAAS,CAAC;IAE3B;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB;;OAEG;IACH,IAAI,CAAC,EAAE,QAAQ,GAAG,cAAc,GAAG,QAAQ,CAAC;IAE5C;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB;;OAEG;IACH,QAAQ,CAAC,EAAE,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;IAElD;;OAEG;IACH,MAAM,CAAC,EAAE,OAAO,GAAG,kBAAkB,GAAG,QAAQ,GAAG,MAAM,GAAG,KAAK,CAAC;IAElE;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IAEnB;;OAEG;IACH,UAAU,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAE5C;;OAEG;IACH,OAAO,EAAE,OAAO,CAAC;IAEjB;;;OAGG;IACH,KAAK,CAAC,EAAE,UAAU,EAAE,CAAC;IAErB;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC;IAEjB,sDAAsD;IACtD,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,0CAA0C;IAC1C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,0BAA0B;IAC1B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,6BAA6B;IAC7B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,4BAA4B;IAC5B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,mBAAmB;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,2CAA2C;IAC3C,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,UAAU;IACzB;;OAEG;IACH,SAAS,EAAE;QACT,KAAK,EAAE,MAAM,CAAC;QACd,QAAQ,EAAE,QAAQ,GAAG,UAAU,GAAG,OAAO,GAAG,SAAS,GAAG,MAAM,CAAC;QAC/D,KAAK,EAAE,GAAG,CAAC;KACZ,CAAC;IAEF;;OAEG;IACH,MAAM,EAAE,OAAO,GAAG,MAAM,GAAG,QAAQ,GAAG,QAAQ,GAAG,KAAK,CAAC;IAEvD;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB"}

package/dist/cjs/types/proxy.d.ts

@@ -50,9 +50,16 @@ export interface CodeArtifact {
     policies_checked?: string[];
 }
 /**
- * Policy evaluation information from the agent
+ * Proxy-mode policy evaluation summary returned by `/api/request`.
+ *
+ * Renamed from `PolicyInfo` in v6.0.0 — the original name collided
+ * with the OpenAPI `PolicyInfo` schema served by the MCP path
+ * (`/api/v1/mcp/check-input` etc.), which the SDK exposes as
+ * `MCPPolicyInfo`. This type is the proxy-mode shape; the v6
+ * top-level `PolicyInfo` export now refers to the MCP shape (matching
+ * the OpenAPI spec).
  */
-export interface PolicyInfo {
+export interface ProxyPolicyInfo {
     /** List of policies that were evaluated */
     policiesEvaluated: string[];
     /** Static checks that were applied */
@@ -64,6 +71,17 @@ export interface PolicyInfo {
     /** Code artifact metadata if code was detected in the response */
     codeArtifact?: CodeArtifact;
 }
+/**
+ * @deprecated Renamed to `ProxyPolicyInfo` in v6.0.0 to resolve a
+ * name collision with the OpenAPI `PolicyInfo` schema (the MCP
+ * shape). For new code, use `ProxyPolicyInfo` from `@axonflow/sdk`
+ * for the proxy-mode shape, or `PolicyInfo` for the MCP shape (the
+ * latter is what was previously exported as `MCPPolicyInfo`).
+ *
+ * This alias keeps existing code compiling for one major version.
+ * Removed in v7.0.0.
+ */
+export type PolicyInfoLegacyProxyShape = ProxyPolicyInfo;
 /**
  * Budget enforcement status information (Issue #1082).
  *
@@ -109,8 +127,8 @@ export interface ExecuteQueryResponse {
     blocked: boolean;
     /** Reason for blocking (if blocked) */
     blockReason?: string;
-    /** Policy evaluation info */
-    policyInfo?: PolicyInfo;
+    /** Policy evaluation info (proxy-mode shape) */
+    policyInfo?: ProxyPolicyInfo;
     /** Budget status (Issue #1082) */
     budgetInfo?: BudgetInfo;
     /** Media analysis results (present when media was submitted) */

package/dist/cjs/types/proxy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"proxy.d.ts","sourceRoot":"","sources":["../../../src/types/proxy.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,qBAAqB,EAAE,MAAM,SAAS,CAAC;AAEnE;;GAEG;AACH,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,KAAK,GAAG,WAAW,GAAG,kBAAkB,GAAG,cAAc,CAAC;AAE7F;;;GAGG;AACH,MAAM,WAAW,mBAAmB;IAClC,wHAAwH;IACxH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,qCAAqC;IACrC,KAAK,EAAE,MAAM,CAAC;IACd,sBAAsB;IACtB,WAAW,EAAE,WAAW,CAAC;IACzB,8DAA8D;IAC9D,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,gEAAgE;IAChE,KAAK,CAAC,EAAE,YAAY,EAAE,CAAC;CACxB;AAED;;;;;GAKG;AACH,MAAM,WAAW,YAAY;IAC3B,yCAAyC;IACzC,cAAc,EAAE,OAAO,CAAC;IACxB,oCAAoC;IACpC,QAAQ,EAAE,MAAM,CAAC;IACjB,uEAAuE;IACvE,SAAS,EAAE,MAAM,CAAC;IAClB,qCAAqC;IACrC,UAAU,EAAE,MAAM,CAAC;IACnB,8BAA8B;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,uCAAuC;IACvC,gBAAgB,EAAE,MAAM,CAAC;IACzB,oCAAoC;IACpC,eAAe,EAAE,MAAM,CAAC;IACxB,yCAAyC;IACzC,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC7B;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,2CAA2C;IAC3C,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,sCAAsC;IACtC,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,4CAA4C;IAC5C,cAAc,EAAE,MAAM,CAAC;IACvB,4CAA4C;IAC5C,QAAQ,EAAE,MAAM,CAAC;IACjB,kEAAkE;IAClE,YAAY,CAAC,EAAE,YAAY,CAAC;CAC7B;AAED;;;;;GAKG;AACH,MAAM,WAAW,UAAU;IACzB,gBAAgB;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,kBAAkB;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,2BAA2B;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,0BAA0B;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,gCAAgC;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,iCAAiC;IACjC,QAAQ,EAAE,OAAO,CAAC;IAClB,+CAA+C;IAC/C,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;GAGG;AACH,MAAM,WAAW,oBAAoB;IACnC,yCAAyC;IACzC,OAAO,EAAE,OAAO,CAAC;IACjB,uCAAuC;IACvC,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,8CAA8C;IAC9C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,yCAAyC;IACzC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,8BAA8B;IAC9B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,0BAA0B;IAC1B,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,sCAAsC;IACtC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gDAAgD;IAChD,OAAO,EAAE,OAAO,CAAC;IACjB,uCAAuC;IACvC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,6BAA6B;IAC7B,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,kCAAkC;IAClC,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,gEAAgE;IAChE,aAAa,CAAC,EAAE,qBAAqB,CAAC;CACvC;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,sBAAsB;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,uDAAuD;IACvD,KAAK,EAAE,MAAM,CAAC;IACd,iCAAiC;IACjC,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,gGAAgG;IAChG,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtC,2CAA2C;IAC3C,qBAAqB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC/C;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,qDAAqD;IACrD,MAAM,EAAE,SAAS,GAAG,UAAU,GAAG,WAAW,CAAC;IAC7C,oBAAoB;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,sBAAsB;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,gCAAgC;IAChC,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAClE,4BAA4B;IAC5B,YAAY,CAAC,EAAE,kBAAkB,EAAE,CAAC;IACpC,oCAAoC;IACpC,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;CACrC"}
+{"version":3,"file":"proxy.d.ts","sourceRoot":"","sources":["../../../src/types/proxy.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,qBAAqB,EAAE,MAAM,SAAS,CAAC;AAEnE;;GAEG;AACH,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,KAAK,GAAG,WAAW,GAAG,kBAAkB,GAAG,cAAc,CAAC;AAE7F;;;GAGG;AACH,MAAM,WAAW,mBAAmB;IAClC,wHAAwH;IACxH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,qCAAqC;IACrC,KAAK,EAAE,MAAM,CAAC;IACd,sBAAsB;IACtB,WAAW,EAAE,WAAW,CAAC;IACzB,8DAA8D;IAC9D,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,gEAAgE;IAChE,KAAK,CAAC,EAAE,YAAY,EAAE,CAAC;CACxB;AAED;;;;;GAKG;AACH,MAAM,WAAW,YAAY;IAC3B,yCAAyC;IACzC,cAAc,EAAE,OAAO,CAAC;IACxB,oCAAoC;IACpC,QAAQ,EAAE,MAAM,CAAC;IACjB,uEAAuE;IACvE,SAAS,EAAE,MAAM,CAAC;IAClB,qCAAqC;IACrC,UAAU,EAAE,MAAM,CAAC;IACnB,8BAA8B;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,uCAAuC;IACvC,gBAAgB,EAAE,MAAM,CAAC;IACzB,oCAAoC;IACpC,eAAe,EAAE,MAAM,CAAC;IACxB,yCAAyC;IACzC,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC7B;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,eAAe;IAC9B,2CAA2C;IAC3C,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,sCAAsC;IACtC,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,4CAA4C;IAC5C,cAAc,EAAE,MAAM,CAAC;IACvB,4CAA4C;IAC5C,QAAQ,EAAE,MAAM,CAAC;IACjB,kEAAkE;IAClE,YAAY,CAAC,EAAE,YAAY,CAAC;CAC7B;AAED;;;;;;;;;GASG;AACH,MAAM,MAAM,0BAA0B,GAAG,eAAe,CAAC;AAEzD;;;;;GAKG;AACH,MAAM,WAAW,UAAU;IACzB,gBAAgB;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,kBAAkB;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,2BAA2B;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,0BAA0B;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,gCAAgC;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,iCAAiC;IACjC,QAAQ,EAAE,OAAO,CAAC;IAClB,+CAA+C;IAC/C,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;GAGG;AACH,MAAM,WAAW,oBAAoB;IACnC,yCAAyC;IACzC,OAAO,EAAE,OAAO,CAAC;IACjB,uCAAuC;IACvC,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,8CAA8C;IAC9C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,yCAAyC;IACzC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,8BAA8B;IAC9B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,0BAA0B;IAC1B,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,sCAAsC;IACtC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gDAAgD;IAChD,OAAO,EAAE,OAAO,CAAC;IACjB,uCAAuC;IACvC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gDAAgD;IAChD,UAAU,CAAC,EAAE,eAAe,CAAC;IAC7B,kCAAkC;IAClC,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,gEAAgE;IAChE,aAAa,CAAC,EAAE,qBAAqB,CAAC;CACvC;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,sBAAsB;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,uDAAuD;IACvD,KAAK,EAAE,MAAM,CAAC;IACd,iCAAiC;IACjC,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,gGAAgG;IAChG,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtC,2CAA2C;IAC3C,qBAAqB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC/C;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,qDAAqD;IACrD,MAAM,EAAE,SAAS,GAAG,UAAU,GAAG,WAAW,CAAC;IAC7C,oBAAoB;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,sBAAsB;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,gCAAgC;IAChC,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAClE,4BAA4B;IAC5B,YAAY,CAAC,EAAE,kBAAkB,EAAE,CAAC;IACpC,oCAAoC;IACpC,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;CACrC"}

package/dist/cjs/types/workflows.d.ts

@@ -50,14 +50,25 @@ export interface CreateWorkflowResponse {
     workflow_id: string;
     /** Name of the workflow */
     workflow_name: string;
-    /** Source orchestrator */
-    source: WorkflowSource;
-    /** Current status (always 'in_progress' for new workflows) */
+    /** Status (always 'in_progress' for new workflows) */
     status: WorkflowStatus;
-    /** When the workflow was created */
-    created_at: string;
+    /** When the workflow started executing (canonical wire field). */
+    started_at?: string;
     /** Trace ID for correlating with external tracing systems */
     trace_id?: string;
+    /**
+     * @deprecated The wire emits `started_at`, not `created_at`. The
+     * orchestratorRequest decoder is JSON.parse passthrough, so this
+     * field has always read `undefined`. Use `started_at`. Removed in v7.
+     */
+    created_at?: string;
+    /**
+     * @deprecated Not emitted on the create response. The wire shape
+     * for `CreateWorkflowResponse` does not include `source`; this
+     * field has always read `undefined`. Read `source` from a
+     * subsequent `getWorkflow()` call instead. Removed in v7.
+     */
+    source?: WorkflowSource;
 }
 /** Tool-level context for per-tool governance within tool_call steps. */
 export interface ToolContext {
@@ -99,6 +110,12 @@ export interface StepGateRequest {
      * echoed on retry_context.idempotency_key in every subsequent gate response.
      */
     idempotency_key?: string;
+    /** Estimated input tokens for this step (used by budget policies at gate time). */
+    tokens_in?: number;
+    /** Estimated output tokens for this step (used by budget policies at gate time). */
+    tokens_out?: number;
+    /** Estimated cost in USD for this step (used by budget policies at gate time). */
+    cost_usd?: number;
 }
 /**
  * Prior completion status for a step: "none" on first gate call, "completed" after
@@ -168,9 +185,23 @@ export interface StepGateResponse {
     policy_ids?: string[];
     /** URL to the approval portal (if decision is require_approval) */
     approval_url?: string;
+    /** Unique decision identifier for auditing (links a gate response to its audit row). */
+    decision_id?: string;
     /** All policies that were evaluated during the gate check (Issue #1021) */
-    policiesEvaluated?: PolicyMatch[];
+    policies_evaluated?: PolicyMatch[];
     /** Policies that matched and influenced the decision (Issue #1021) */
+    policies_matched?: PolicyMatch[];
+    /**
+     * @deprecated Use `policies_evaluated` (matches the wire). The
+     * `stepGate` decoder is a JSON.parse passthrough — the wire field
+     * is `policies_evaluated`, so `policiesEvaluated` has always read
+     * `undefined`. Removed in v7.
+     */
+    policiesEvaluated?: PolicyMatch[];
+    /**
+     * @deprecated Use `policies_matched` (matches the wire). Same
+     * orphan-read situation as `policiesEvaluated`. Removed in v7.
+     */
     policiesMatched?: PolicyMatch[];
     /**
      * Whether this response was served from a prior decision rather than a fresh policy evaluation.
@@ -277,6 +308,8 @@ export interface WorkflowStatusResponse {
     completed_at?: string;
     /** Trace ID for correlating with external tracing systems */
     trace_id?: string;
+    /** Arbitrary workflow metadata, opaque to the platform. */
+    metadata?: Record<string, unknown>;
     /** List of steps in the workflow */
     steps?: WorkflowStepInfo[];
 }
@@ -303,6 +336,10 @@ export interface ListWorkflowsResponse {
     workflows: WorkflowStatusResponse[];
     /** Total count (for pagination) */
     total: number;
+    /** Echo of the limit query param (for pagination clients). */
+    limit?: number;
+    /** Echo of the offset query param (for pagination clients). */
+    offset?: number;
 }
 /**
  * Request to abort a workflow.
@@ -340,51 +377,123 @@ export interface MarkStepCompletedRequest {
 }
 /**
  * Response from approving a workflow step.
+ *
+ * Starting with v5.6.0 the server returns the rich step-gate shape on approve:
+ * `decision` resolves to `"allow"` once approved, `retry_context` mirrors the
+ * gate response retry state, `approved_by` / `approved_at` carry the reviewer
+ * identity, `approval_id` is the deterministic HITL queue entry UUID, and
+ * `policies_matched` reconstructs the governance trail. Legacy fields
+ * (`workflow_id`, `step_id`, `status`) remain for back-compat.
+ *
+ * See ADR-046 (HITL response parity) — the same shape is returned by both the
+ * WCP endpoint and the MAP plan-scoped equivalent.
  */
 export interface ApproveStepResponse {
     /** Workflow ID */
     workflow_id: string;
+    /** MAP plan ID — present on responses from `/api/v1/plans/{id}/steps/{step_id}/approve`. */
+    plan_id?: string;
     /** Step ID that was approved */
     step_id: string;
-    /** Status after approval */
-    status: string;
+    /** Legacy status field — mirrors `approval_status`. Retained for v5.x back-compat. */
+    status?: string;
+    /** Post-approval decision: `allow` once approved; `require_approval` if still pending. */
+    decision?: GateDecision;
+    /** Decision reason text (prefixed with "Approved: " on the approve path). */
+    reason?: string;
+    /** Terminal approval status (pending / approved / rejected). */
+    approval_status?: ApprovalStatus;
+    /** HITL queue entry UUID (deterministic UUID v5 over `(workflow_id, step_id)`). */
+    approval_id?: string;
+    /** Identity (X-User-ID) that approved the step. */
+    approved_by?: string;
+    /** ISO 8601 timestamp when the approval was persisted. */
+    approved_at?: string;
+    /** Policies that triggered the original require_approval decision. */
+    policies_matched?: PolicyMatch[];
+    /** Retry / idempotency state — mirrors the gate response retry_context. */
+    retry_context: RetryContext;
+    /** Human-readable status summary. */
+    message?: string;
 }
 /**
- * Response from rejecting a workflow step.
+ * Response from rejecting a workflow step. Symmetric with ApproveStepResponse —
+ * `decision` resolves to `"block"`, `rejected_by` / `rejected_at` populate
+ * instead of approved_*. See ADR-046.
  */
 export interface RejectStepResponse {
     /** Workflow ID */
     workflow_id: string;
+    /** MAP plan ID — present on MAP plane responses. */
+    plan_id?: string;
     /** Step ID that was rejected */
     step_id: string;
-    /** Status after rejection */
-    status: string;
+    /** Legacy status field — mirrors `approval_status`. Retained for back-compat. */
+    status?: string;
+    /** Post-rejection decision: `block`. */
+    decision?: GateDecision;
+    /** Decision reason text (prefixed with "Rejected: " on the reject path). */
+    reason?: string;
+    /** Terminal approval status. */
+    approval_status?: ApprovalStatus;
+    /** HITL queue entry UUID. */
+    approval_id?: string;
+    /** Identity that rejected the step. */
+    rejected_by?: string;
+    /** ISO 8601 timestamp when the rejection was persisted. */
+    rejected_at?: string;
+    /** Policies that triggered the original require_approval decision. */
+    policies_matched?: PolicyMatch[];
+    /** Retry / idempotency state — mirrors the gate response retry_context. */
+    retry_context: RetryContext;
+    /** Human-readable status summary. */
+    message?: string;
 }
 /**
  * A pending approval for a workflow step.
+ *
+ * Populated by both `getPendingApprovals` (WCP plane) and
+ * `getPendingPlanApprovals` (MAP plane). `plan_id` is the intentional
+ * asymmetry between the two planes — populated on MAP-plane entries,
+ * omitted on WCP-plane entries. Mirrors ADR-046 parity rule.
  */
 export interface PendingApproval {
     /** Workflow ID */
     workflow_id: string;
     /** Workflow name */
     workflow_name: string;
+    /** MAP plan id — populated on MAP-plane entries, absent on WCP-plane entries. */
+    plan_id?: string;
     /** Step ID awaiting approval */
     step_id: string;
+    /** Zero-based step index within the workflow. */
+    step_index: number;
     /** Step name */
-    step_name: string;
+    step_name?: string;
     /** Step type */
-    step_type: string;
+    step_type?: string;
+    /** Gate decision that paused the step — always `require_approval` for listed entries. */
+    decision: string;
+    /** Reason the policy engine paused the step. */
+    decision_reason?: string;
+    /** Policies that triggered the approval requirement. */
+    policies_matched?: Array<Record<string, unknown>>;
+    /** Step input payload (may be redacted by PII rules). */
+    step_input?: Record<string, unknown>;
+    /** Current approval state — "pending" for listed entries. */
+    approval_status?: string;
     /** When the approval was created */
     created_at: string;
 }
 /**
- * Response from listing pending approvals.
+ * Response from listing pending approvals. Shape matches the server wire
+ * contract: `pending_approvals` array + `count`.
  */
 export interface PendingApprovalsResponse {
     /** List of pending approvals */
-    approvals: PendingApproval[];
-    /** Total count */
-    total: number;
+    pending_approvals: PendingApproval[];
+    /** Total count of pending approvals matching the request scope. */
+    count: number;
 }
 /**
  * Options for listing pending approvals.
@@ -392,6 +501,11 @@ export interface PendingApprovalsResponse {
 export interface PendingApprovalsOptions {
     /** Maximum number of results to return */
     limit?: number;
+    /**
+     * Scope the MAP-plane listing to a single plan_id (ignored by
+     * `getPendingApprovals`, honored by `getPendingPlanApprovals`).
+     */
+    plan_id?: string;
 }
 /**
  * Request to create a webhook subscription.
@@ -418,6 +532,17 @@ export interface WebhookSubscription {
     events: string[];
     /** Whether the webhook is active */
     active: boolean;
+    /** Tenant ID that owns this subscription. */
+    tenant_id?: string;
+    /** Organization ID that owns this subscription. */
+    org_id?: string;
+    /**
+     * HMAC-SHA256 signing key for webhook payload signature verification.
+     * Returned by `createWebhook`. Required to verify the `X-AxonFlow-Signature`
+     * header on incoming webhook deliveries; without it, callers cannot validate
+     * payload authenticity.
+     */
+    secret?: string;
     /** When the webhook was created */
     created_at: string;
     /** When the webhook was last updated */