@barndoor-ai/sdk 1.2.0 → 2.0.0-dev.g37b8897

package/dist/esm/models/PolicyRevisionCompareSide.js

@@ -0,0 +1,62 @@
+/* tslint:disable */
+/* eslint-disable */
+/**
+ * Barndoor.ai Public API
+ * Unified public API specification for Barndoor.ai platform
+ *
+ * The version of the OpenAPI document: 2.0.0
+ *
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+import { parseDateTime, serializeDateTime } from '../runtime.js';
+/**
+ * Check if a given object implements the PolicyRevisionCompareSide interface.
+ */
+export function instanceOfPolicyRevisionCompareSide(value) {
+    if ((!('revisionId' in value) && !('revision_id' in value)) || (value['revisionId'] === undefined && value['revision_id'] === undefined))
+        return false;
+    if ((!('revisedAt' in value) && !('revised_at' in value)) || (value['revisedAt'] === undefined && value['revised_at'] === undefined))
+        return false;
+    if ((!('revisedBy' in value) && !('revised_by' in value)) || (value['revisedBy'] === undefined && value['revised_by'] === undefined))
+        return false;
+    if ((!('versionNumber' in value) && !('version_number' in value)) || (value['versionNumber'] === undefined && value['version_number'] === undefined))
+        return false;
+    return true;
+}
+export function PolicyRevisionCompareSideFromJSON(json) {
+    return PolicyRevisionCompareSideFromJSONTyped(json, false);
+}
+export function PolicyRevisionCompareSideFromJSONTyped(json, ignoreDiscriminator) {
+    if (json == null) {
+        return json;
+    }
+    return {
+        'revisionId': json['revision_id'],
+        'revisedAt': (json['revised_at'] == null ? json['revised_at'] : parseDateTime(json['revised_at'])),
+        'revisedBy': json['revised_by'],
+        'revisedByName': json['revised_by_name'] === undefined ? undefined : json['revised_by_name'] === null ? null : json['revised_by_name'],
+        'triggeredBy': json['triggered_by'] === undefined ? undefined : json['triggered_by'] === null ? null : json['triggered_by'],
+        'triggeredByName': json['triggered_by_name'] === undefined ? undefined : json['triggered_by_name'] === null ? null : json['triggered_by_name'],
+        'versionNumber': json['version_number'],
+    };
+}
+export function PolicyRevisionCompareSideToJSON(json) {
+    return PolicyRevisionCompareSideToJSONTyped(json, false);
+}
+export function PolicyRevisionCompareSideToJSONTyped(value, ignoreDiscriminator = false) {
+    if (value == null) {
+        return value;
+    }
+    return {
+        'revision_id': value['revisionId'],
+        'revised_at': value['revisedAt'] == null ? value['revisedAt'] : serializeDateTime(value['revisedAt']),
+        'revised_by': value['revisedBy'],
+        'revised_by_name': value['revisedByName'],
+        'triggered_by': value['triggeredBy'],
+        'triggered_by_name': value['triggeredByName'],
+        'version_number': value['versionNumber'],
+    };
+}

package/dist/esm/models/PolicyRevisionDetailResponse.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Barndoor.ai Public API
+ * Unified public API specification for Barndoor.ai platform
+ *
+ * The version of the OpenAPI document: 2.0.0
+ *
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+import type { PolicyRevisionSummary } from './PolicyRevisionSummary.js';
+/**
+ *
+ * @export
+ * @interface PolicyRevisionDetailResponse
+ */
+export interface PolicyRevisionDetailResponse {
+    /**
+     *
+     */
+    revision: PolicyRevisionSummary;
+    /**
+     *
+     */
+    ruleTitles?: {
+        [key: string]: string;
+    };
+}
+/**
+ * Check if a given object implements the PolicyRevisionDetailResponse interface.
+ */
+export declare function instanceOfPolicyRevisionDetailResponse(value: object): value is PolicyRevisionDetailResponse;
+export declare function PolicyRevisionDetailResponseFromJSON(json: any): PolicyRevisionDetailResponse;
+export declare function PolicyRevisionDetailResponseFromJSONTyped(json: any, ignoreDiscriminator: boolean): PolicyRevisionDetailResponse;
+export declare function PolicyRevisionDetailResponseToJSON(json: any): PolicyRevisionDetailResponse;
+export declare function PolicyRevisionDetailResponseToJSONTyped(value?: PolicyRevisionDetailResponse | null, ignoreDiscriminator?: boolean): any;

package/dist/esm/models/PolicyRevisionDetailResponse.js

@@ -0,0 +1,46 @@
+/* tslint:disable */
+/* eslint-disable */
+/**
+ * Barndoor.ai Public API
+ * Unified public API specification for Barndoor.ai platform
+ *
+ * The version of the OpenAPI document: 2.0.0
+ *
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+import { PolicyRevisionSummaryFromJSON, PolicyRevisionSummaryToJSON, } from './PolicyRevisionSummary.js';
+/**
+ * Check if a given object implements the PolicyRevisionDetailResponse interface.
+ */
+export function instanceOfPolicyRevisionDetailResponse(value) {
+    if (!('revision' in value) || value['revision'] === undefined)
+        return false;
+    return true;
+}
+export function PolicyRevisionDetailResponseFromJSON(json) {
+    return PolicyRevisionDetailResponseFromJSONTyped(json, false);
+}
+export function PolicyRevisionDetailResponseFromJSONTyped(json, ignoreDiscriminator) {
+    if (json == null) {
+        return json;
+    }
+    return {
+        'revision': PolicyRevisionSummaryFromJSON(json['revision']),
+        'ruleTitles': json['rule_titles'] == null ? undefined : json['rule_titles'],
+    };
+}
+export function PolicyRevisionDetailResponseToJSON(json) {
+    return PolicyRevisionDetailResponseToJSONTyped(json, false);
+}
+export function PolicyRevisionDetailResponseToJSONTyped(value, ignoreDiscriminator = false) {
+    if (value == null) {
+        return value;
+    }
+    return {
+        'revision': PolicyRevisionSummaryToJSON(value['revision']),
+        'rule_titles': value['ruleTitles'],
+    };
+}

package/dist/esm/models/PolicyRevisionSummary.d.ts

@@ -0,0 +1,79 @@
+/**
+ * Barndoor.ai Public API
+ * Unified public API specification for Barndoor.ai platform
+ *
+ * The version of the OpenAPI document: 2.0.0
+ *
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+import type { ResolvedRef } from './ResolvedRef.js';
+/**
+ * Summary of a policy revision.
+ * @export
+ * @interface PolicyRevisionSummary
+ */
+export interface PolicyRevisionSummary {
+    /**
+     *
+     */
+    id: string;
+    /**
+     *
+     */
+    policyId: string;
+    /**
+     * Changes made in this revision
+     */
+    changes: {
+        [key: string]: any;
+    };
+    /**
+     *
+     */
+    revisedAt: Date;
+    /**
+     *
+     */
+    revisedBy: string;
+    /**
+     * Display name for the revision author. For cascade rows (revised_by == CASCADE_SYSTEM_USER_ID), this carries the composed string e.g. 'System (on behalf of Alice)' when the upstream actor is known.
+     */
+    revisedByName?: string | null;
+    /**
+     * UUID of the upstream actor for cascade rows; NULL for direct edits.
+     */
+    triggeredBy?: string | null;
+    /**
+     * Resolved display name for triggered_by (NULL if unknown or N/A).
+     */
+    triggeredByName?: string | null;
+    /**
+     * Category chips classified at write time.
+     */
+    categories?: Array<string>;
+    /**
+     * Human-readable change descriptions.
+     */
+    changesSummary?: Array<string>;
+    /**
+     * {uuid: {name, type}} for whitelisted refs.
+     */
+    resolvedRefs?: {
+        [key: string]: ResolvedRef;
+    };
+    /**
+     * 1-indexed position in the policy's revision history.
+     */
+    versionNumber?: number;
+}
+/**
+ * Check if a given object implements the PolicyRevisionSummary interface.
+ */
+export declare function instanceOfPolicyRevisionSummary(value: object): value is PolicyRevisionSummary;
+export declare function PolicyRevisionSummaryFromJSON(json: any): PolicyRevisionSummary;
+export declare function PolicyRevisionSummaryFromJSONTyped(json: any, ignoreDiscriminator: boolean): PolicyRevisionSummary;
+export declare function PolicyRevisionSummaryToJSON(json: any): PolicyRevisionSummary;
+export declare function PolicyRevisionSummaryToJSONTyped(value?: PolicyRevisionSummary | null, ignoreDiscriminator?: boolean): any;

package/dist/esm/models/PolicyRevisionSummary.js

@@ -0,0 +1,75 @@
+/* tslint:disable */
+/* eslint-disable */
+/**
+ * Barndoor.ai Public API
+ * Unified public API specification for Barndoor.ai platform
+ *
+ * The version of the OpenAPI document: 2.0.0
+ *
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+import { mapValues, parseDateTime, serializeDateTime } from '../runtime.js';
+import { ResolvedRefFromJSON, ResolvedRefToJSON, } from './ResolvedRef.js';
+/**
+ * Check if a given object implements the PolicyRevisionSummary interface.
+ */
+export function instanceOfPolicyRevisionSummary(value) {
+    if (!('id' in value) || value['id'] === undefined)
+        return false;
+    if ((!('policyId' in value) && !('policy_id' in value)) || (value['policyId'] === undefined && value['policy_id'] === undefined))
+        return false;
+    if (!('changes' in value) || value['changes'] === undefined)
+        return false;
+    if ((!('revisedAt' in value) && !('revised_at' in value)) || (value['revisedAt'] === undefined && value['revised_at'] === undefined))
+        return false;
+    if ((!('revisedBy' in value) && !('revised_by' in value)) || (value['revisedBy'] === undefined && value['revised_by'] === undefined))
+        return false;
+    return true;
+}
+export function PolicyRevisionSummaryFromJSON(json) {
+    return PolicyRevisionSummaryFromJSONTyped(json, false);
+}
+export function PolicyRevisionSummaryFromJSONTyped(json, ignoreDiscriminator) {
+    if (json == null) {
+        return json;
+    }
+    return {
+        'id': json['id'],
+        'policyId': json['policy_id'],
+        'changes': json['changes'],
+        'revisedAt': (json['revised_at'] == null ? json['revised_at'] : parseDateTime(json['revised_at'])),
+        'revisedBy': json['revised_by'],
+        'revisedByName': json['revised_by_name'] === undefined ? undefined : json['revised_by_name'] === null ? null : json['revised_by_name'],
+        'triggeredBy': json['triggered_by'] === undefined ? undefined : json['triggered_by'] === null ? null : json['triggered_by'],
+        'triggeredByName': json['triggered_by_name'] === undefined ? undefined : json['triggered_by_name'] === null ? null : json['triggered_by_name'],
+        'categories': json['categories'] == null ? undefined : json['categories'],
+        'changesSummary': json['changes_summary'] == null ? undefined : json['changes_summary'],
+        'resolvedRefs': json['resolved_refs'] == null ? undefined : (mapValues(json['resolved_refs'], ResolvedRefFromJSON)),
+        'versionNumber': json['version_number'] == null ? undefined : json['version_number'],
+    };
+}
+export function PolicyRevisionSummaryToJSON(json) {
+    return PolicyRevisionSummaryToJSONTyped(json, false);
+}
+export function PolicyRevisionSummaryToJSONTyped(value, ignoreDiscriminator = false) {
+    if (value == null) {
+        return value;
+    }
+    return {
+        'id': value['id'],
+        'policy_id': value['policyId'],
+        'changes': value['changes'],
+        'revised_at': value['revisedAt'] == null ? value['revisedAt'] : serializeDateTime(value['revisedAt']),
+        'revised_by': value['revisedBy'],
+        'revised_by_name': value['revisedByName'],
+        'triggered_by': value['triggeredBy'],
+        'triggered_by_name': value['triggeredByName'],
+        'categories': value['categories'],
+        'changes_summary': value['changesSummary'],
+        'resolved_refs': value['resolvedRefs'] == null ? undefined : (mapValues(value['resolvedRefs'], ResolvedRefToJSON)),
+        'version_number': value['versionNumber'],
+    };
+}

package/dist/esm/models/PolicyRuleConditionInput.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Barndoor.ai Public API
+ * Unified public API specification for Barndoor.ai platform
+ *
+ * The version of the OpenAPI document: 2.0.0
+ *
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+import type { Match } from './Match.js';
+/**
+ *
+ * @export
+ * @interface PolicyRuleConditionInput
+ */
+export interface PolicyRuleConditionInput {
+    /**
+     *
+     */
+    match: Match;
+}
+/**
+ * Check if a given object implements the PolicyRuleConditionInput interface.
+ */
+export declare function instanceOfPolicyRuleConditionInput(value: object): value is PolicyRuleConditionInput;
+export declare function PolicyRuleConditionInputFromJSON(json: any): PolicyRuleConditionInput;
+export declare function PolicyRuleConditionInputFromJSONTyped(json: any, ignoreDiscriminator: boolean): PolicyRuleConditionInput;
+export declare function PolicyRuleConditionInputToJSON(json: any): PolicyRuleConditionInput;
+export declare function PolicyRuleConditionInputToJSONTyped(value?: PolicyRuleConditionInput | null, ignoreDiscriminator?: boolean): any;

package/dist/esm/models/PolicyRuleConditionInput.js

@@ -0,0 +1,44 @@
+/* tslint:disable */
+/* eslint-disable */
+/**
+ * Barndoor.ai Public API
+ * Unified public API specification for Barndoor.ai platform
+ *
+ * The version of the OpenAPI document: 2.0.0
+ *
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+import { MatchFromJSON, MatchToJSON, } from './Match.js';
+/**
+ * Check if a given object implements the PolicyRuleConditionInput interface.
+ */
+export function instanceOfPolicyRuleConditionInput(value) {
+    if (!('match' in value) || value['match'] === undefined)
+        return false;
+    return true;
+}
+export function PolicyRuleConditionInputFromJSON(json) {
+    return PolicyRuleConditionInputFromJSONTyped(json, false);
+}
+export function PolicyRuleConditionInputFromJSONTyped(json, ignoreDiscriminator) {
+    if (json == null) {
+        return json;
+    }
+    return {
+        'match': MatchFromJSON(json['match']),
+    };
+}
+export function PolicyRuleConditionInputToJSON(json) {
+    return PolicyRuleConditionInputToJSONTyped(json, false);
+}
+export function PolicyRuleConditionInputToJSONTyped(value, ignoreDiscriminator = false) {
+    if (value == null) {
+        return value;
+    }
+    return {
+        'match': MatchToJSON(value['match']),
+    };
+}

package/dist/esm/models/PolicyRuleConditionOutput.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Barndoor.ai Public API
+ * Unified public API specification for Barndoor.ai platform
+ *
+ * The version of the OpenAPI document: 2.0.0
+ *
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+import type { Match1 } from './Match1.js';
+/**
+ *
+ * @export
+ * @interface PolicyRuleConditionOutput
+ */
+export interface PolicyRuleConditionOutput {
+    /**
+     *
+     */
+    match: Match1;
+}
+/**
+ * Check if a given object implements the PolicyRuleConditionOutput interface.
+ */
+export declare function instanceOfPolicyRuleConditionOutput(value: object): value is PolicyRuleConditionOutput;
+export declare function PolicyRuleConditionOutputFromJSON(json: any): PolicyRuleConditionOutput;
+export declare function PolicyRuleConditionOutputFromJSONTyped(json: any, ignoreDiscriminator: boolean): PolicyRuleConditionOutput;
+export declare function PolicyRuleConditionOutputToJSON(json: any): PolicyRuleConditionOutput;
+export declare function PolicyRuleConditionOutputToJSONTyped(value?: PolicyRuleConditionOutput | null, ignoreDiscriminator?: boolean): any;

package/dist/esm/models/PolicyRuleConditionOutput.js

@@ -0,0 +1,44 @@
+/* tslint:disable */
+/* eslint-disable */
+/**
+ * Barndoor.ai Public API
+ * Unified public API specification for Barndoor.ai platform
+ *
+ * The version of the OpenAPI document: 2.0.0
+ *
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+import { Match1FromJSON, Match1ToJSON, } from './Match1.js';
+/**
+ * Check if a given object implements the PolicyRuleConditionOutput interface.
+ */
+export function instanceOfPolicyRuleConditionOutput(value) {
+    if (!('match' in value) || value['match'] === undefined)
+        return false;
+    return true;
+}
+export function PolicyRuleConditionOutputFromJSON(json) {
+    return PolicyRuleConditionOutputFromJSONTyped(json, false);
+}
+export function PolicyRuleConditionOutputFromJSONTyped(json, ignoreDiscriminator) {
+    if (json == null) {
+        return json;
+    }
+    return {
+        'match': Match1FromJSON(json['match']),
+    };
+}
+export function PolicyRuleConditionOutputToJSON(json) {
+    return PolicyRuleConditionOutputToJSONTyped(json, false);
+}
+export function PolicyRuleConditionOutputToJSONTyped(value, ignoreDiscriminator = false) {
+    if (value == null) {
+        return value;
+    }
+    return {
+        'match': Match1ToJSON(value['match']),
+    };
+}

package/dist/esm/models/PolicyRuleInput.d.ts

@@ -0,0 +1,55 @@
+/**
+ * Barndoor.ai Public API
+ * Unified public API specification for Barndoor.ai platform
+ *
+ * The version of the OpenAPI document: 2.0.0
+ *
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+import type { PolicyRuleConditionInput } from './PolicyRuleConditionInput.js';
+/**
+ * A single rule: which principals may take which tool actions, optionally conditioned.
+ * @export
+ * @interface PolicyRuleInput
+ */
+export interface PolicyRuleInput {
+    /**
+     * Optional display name for the rule. Letters, digits, spaces, hyphens and underscores only — a colon or other punctuation is rejected with a 422, which is easy to hit because rule names tend to read like `Security: view agents`. Names must also be unique within the policy once punctuation is normalized, so `My Rule` and `My-Rule` collide.
+     */
+    name?: string | null;
+    /**
+     * Optional human-readable description for the rule; has no effect on enforcement
+     */
+    description?: string | null;
+    /**
+     * Effect of the rule: True grants the listed `actions`, False denies them. Access is denied by default, so a tool that no rule grants is already blocked — an explicit False rule is only needed to carve an exception out of a broader allow. The effective model is tri-state rather than binary: Always Allow is True on the plain action, Needs Approval is True on the `:approve` twin (see `actions`), and Blocked is simply the absence of a grant.
+     */
+    authorized?: boolean | null;
+    /**
+     * Whether this rule is enforced. False keeps the rule on the policy but omits it from enforcement — use it to disable a rule without deleting it.
+     */
+    active?: boolean;
+    /**
+     * Tool actions this rule matches, in the wire format `tools/call:<tool_name>` — for example `tools/call:create_issue`. Use `*` to match every action on the server. Tool names are specific to the target MCP server: enumerate the server's real tools rather than guessing names. A trailing `:approve` selects the Needs-Approval variant of a tool (`tools/call:create_issue:approve`), which requires per-call human confirmation; the plain action is Always Allow. Do not grant both twins of the same tool in one rule.
+     */
+    actions: Array<string>;
+    /**
+     * Principals this rule applies to, as PREFIXED entries: `role:<role_name>` for an IdP/Keycloak role, `group:<group_name>` for a user group, or the literal `*` for all users (the default). A bare name with no `role:`/`group:` prefix matches NOTHING. Retrieve the organization's real role and group names from `GET /api/identity/public/v1/users/roles-groups`. A principal set should appear on at most ONE rule in a policy — collect all of its actions there instead of spreading them over several rules.
+     */
+    rolesGroups?: Array<string>;
+    /**
+     * Optional CEL condition; the rule applies only when it evaluates true. Shape is `{"match": <matcher>}`. Omit entirely for an unconditional rule.
+     */
+    condition?: PolicyRuleConditionInput | null;
+}
+/**
+ * Check if a given object implements the PolicyRuleInput interface.
+ */
+export declare function instanceOfPolicyRuleInput(value: object): value is PolicyRuleInput;
+export declare function PolicyRuleInputFromJSON(json: any): PolicyRuleInput;
+export declare function PolicyRuleInputFromJSONTyped(json: any, ignoreDiscriminator: boolean): PolicyRuleInput;
+export declare function PolicyRuleInputToJSON(json: any): PolicyRuleInput;
+export declare function PolicyRuleInputToJSONTyped(value?: PolicyRuleInput | null, ignoreDiscriminator?: boolean): any;

package/dist/esm/models/PolicyRuleInput.js

@@ -0,0 +1,56 @@
+/* tslint:disable */
+/* eslint-disable */
+/**
+ * Barndoor.ai Public API
+ * Unified public API specification for Barndoor.ai platform
+ *
+ * The version of the OpenAPI document: 2.0.0
+ *
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+import { PolicyRuleConditionInputFromJSON, PolicyRuleConditionInputToJSON, } from './PolicyRuleConditionInput.js';
+/**
+ * Check if a given object implements the PolicyRuleInput interface.
+ */
+export function instanceOfPolicyRuleInput(value) {
+    if (!('actions' in value) || value['actions'] === undefined)
+        return false;
+    return true;
+}
+export function PolicyRuleInputFromJSON(json) {
+    return PolicyRuleInputFromJSONTyped(json, false);
+}
+export function PolicyRuleInputFromJSONTyped(json, ignoreDiscriminator) {
+    if (json == null) {
+        return json;
+    }
+    return {
+        'name': json['name'] === undefined ? undefined : json['name'] === null ? null : json['name'],
+        'description': json['description'] === undefined ? undefined : json['description'] === null ? null : json['description'],
+        'authorized': json['authorized'] === undefined ? undefined : json['authorized'] === null ? null : json['authorized'],
+        'active': json['active'] == null ? undefined : json['active'],
+        'actions': json['actions'],
+        'rolesGroups': json['roles_groups'] == null ? undefined : json['roles_groups'],
+        'condition': json['condition'] === undefined ? undefined : json['condition'] === null ? null : PolicyRuleConditionInputFromJSON(json['condition']),
+    };
+}
+export function PolicyRuleInputToJSON(json) {
+    return PolicyRuleInputToJSONTyped(json, false);
+}
+export function PolicyRuleInputToJSONTyped(value, ignoreDiscriminator = false) {
+    if (value == null) {
+        return value;
+    }
+    return {
+        'name': value['name'],
+        'description': value['description'],
+        'authorized': value['authorized'],
+        'active': value['active'],
+        'actions': value['actions'],
+        'roles_groups': value['rolesGroups'],
+        'condition': PolicyRuleConditionInputToJSON(value['condition']),
+    };
+}

package/dist/esm/models/PolicyRuleOutput.d.ts

@@ -0,0 +1,55 @@
+/**
+ * Barndoor.ai Public API
+ * Unified public API specification for Barndoor.ai platform
+ *
+ * The version of the OpenAPI document: 2.0.0
+ *
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+import type { PolicyRuleConditionOutput } from './PolicyRuleConditionOutput.js';
+/**
+ * A single rule: which principals may take which tool actions, optionally conditioned.
+ * @export
+ * @interface PolicyRuleOutput
+ */
+export interface PolicyRuleOutput {
+    /**
+     * Optional display name for the rule. Letters, digits, spaces, hyphens and underscores only — a colon or other punctuation is rejected with a 422, which is easy to hit because rule names tend to read like `Security: view agents`. Names must also be unique within the policy once punctuation is normalized, so `My Rule` and `My-Rule` collide.
+     */
+    name?: string | null;
+    /**
+     * Optional human-readable description for the rule; has no effect on enforcement
+     */
+    description?: string | null;
+    /**
+     * Effect of the rule: True grants the listed `actions`, False denies them. Access is denied by default, so a tool that no rule grants is already blocked — an explicit False rule is only needed to carve an exception out of a broader allow. The effective model is tri-state rather than binary: Always Allow is True on the plain action, Needs Approval is True on the `:approve` twin (see `actions`), and Blocked is simply the absence of a grant.
+     */
+    authorized?: boolean | null;
+    /**
+     * Whether this rule is enforced. False keeps the rule on the policy but omits it from enforcement — use it to disable a rule without deleting it.
+     */
+    active?: boolean;
+    /**
+     * Tool actions this rule matches, in the wire format `tools/call:<tool_name>` — for example `tools/call:create_issue`. Use `*` to match every action on the server. Tool names are specific to the target MCP server: enumerate the server's real tools rather than guessing names. A trailing `:approve` selects the Needs-Approval variant of a tool (`tools/call:create_issue:approve`), which requires per-call human confirmation; the plain action is Always Allow. Do not grant both twins of the same tool in one rule.
+     */
+    actions: Array<string>;
+    /**
+     * Principals this rule applies to, as PREFIXED entries: `role:<role_name>` for an IdP/Keycloak role, `group:<group_name>` for a user group, or the literal `*` for all users (the default). A bare name with no `role:`/`group:` prefix matches NOTHING. Retrieve the organization's real role and group names from `GET /api/identity/public/v1/users/roles-groups`. A principal set should appear on at most ONE rule in a policy — collect all of its actions there instead of spreading them over several rules.
+     */
+    rolesGroups?: Array<string>;
+    /**
+     * Optional CEL condition; the rule applies only when it evaluates true. Shape is `{"match": <matcher>}`. Omit entirely for an unconditional rule.
+     */
+    condition?: PolicyRuleConditionOutput | null;
+}
+/**
+ * Check if a given object implements the PolicyRuleOutput interface.
+ */
+export declare function instanceOfPolicyRuleOutput(value: object): value is PolicyRuleOutput;
+export declare function PolicyRuleOutputFromJSON(json: any): PolicyRuleOutput;
+export declare function PolicyRuleOutputFromJSONTyped(json: any, ignoreDiscriminator: boolean): PolicyRuleOutput;
+export declare function PolicyRuleOutputToJSON(json: any): PolicyRuleOutput;
+export declare function PolicyRuleOutputToJSONTyped(value?: PolicyRuleOutput | null, ignoreDiscriminator?: boolean): any;