@barndoor-ai/sdk 1.3.0 → 2.0.0-dev.g37b8897

package/dist/esm/apis/PolicyApi.js

@@ -0,0 +1,1176 @@
+/* tslint:disable */
+/* eslint-disable */
+/**
+ * Barndoor.ai Public API
+ * Unified public API specification for Barndoor.ai platform
+ *
+ * The version of the OpenAPI document: 2.0.0
+ *
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+import * as runtime from '../runtime.js';
+import { AffectedPoliciesResponseFromJSON, } from '../models/AffectedPoliciesResponse.js';
+import { AgentPolicyCountsFromJSON, } from '../models/AgentPolicyCounts.js';
+import { CreatePolicyToJSON, } from '../models/CreatePolicy.js';
+import { FilterCategoryFromJSON, } from '../models/FilterCategory.js';
+import { PaginationResponsePolicyImpactSummaryFromJSON, } from '../models/PaginationResponsePolicyImpactSummary.js';
+import { PaginationResponsePolicyRevisionSummaryFromJSON, } from '../models/PaginationResponsePolicyRevisionSummary.js';
+import { PaginationResponsePolicySummaryFromJSON, } from '../models/PaginationResponsePolicySummary.js';
+import { PolicyDetailResponseFromJSON, } from '../models/PolicyDetailResponse.js';
+import { PolicyImpactSeverityCountsFromJSON, } from '../models/PolicyImpactSeverityCounts.js';
+import { PolicyImpactSummaryFromJSON, } from '../models/PolicyImpactSummary.js';
+import { PolicyRevisionCompareResponseFromJSON, } from '../models/PolicyRevisionCompareResponse.js';
+import { PolicyRevisionDetailResponseFromJSON, } from '../models/PolicyRevisionDetailResponse.js';
+import { PolicyRuleInputToJSON, } from '../models/PolicyRuleInput.js';
+import { PolicySummaryResponseFromJSON, } from '../models/PolicySummaryResponse.js';
+import { UpdatePolicyToJSON, } from '../models/UpdatePolicy.js';
+import { ValidatePolicyRequestToJSON, } from '../models/ValidatePolicyRequest.js';
+import { ValidatePolicyResponseFromJSON, } from '../models/ValidatePolicyResponse.js';
+/**
+ *
+ */
+export class PolicyApi extends runtime.BaseAPI {
+    /**
+     * Creates request options for acknowledgePolicyImpact without sending the request
+     */
+    async acknowledgePolicyImpactRequestOpts(requestParameters) {
+        if (requestParameters['policyId'] == null) {
+            throw new runtime.RequiredError('policyId', 'Required parameter "policyId" was null or undefined when calling acknowledgePolicyImpact().');
+        }
+        if (requestParameters['impactId'] == null) {
+            throw new runtime.RequiredError('impactId', 'Required parameter "impactId" was null or undefined when calling acknowledgePolicyImpact().');
+        }
+        const queryParameters = {};
+        const headerParameters = {};
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("ApiKey", []);
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+        let urlPath = `/api/policy/v2/policies/{policy_id}/impacts/{impact_id}/acknowledge`;
+        urlPath = urlPath.replace('{policy_id}', encodeURIComponent(String(requestParameters['policyId'])));
+        urlPath = urlPath.replace('{impact_id}', encodeURIComponent(String(requestParameters['impactId'])));
+        return {
+            path: urlPath,
+            method: 'POST',
+            headers: headerParameters,
+            query: queryParameters,
+        };
+    }
+    /**
+     * ``open`` -> ``acknowledged``.  404 if the impact doesn\'t exist (or belongs to another org/policy); 409 if it isn\'t ``open``. **Both** ``policy_id`` and ``impact_id`` are typed as UUIDs, so a malformed id in the URL 422s here rather than reaching the query and raising an unhandled ``asyncpg.DataError`` (=> 500) against a UUID column. This is deliberately stricter than ``admin_v2``\'s plain-``str`` path-param convention.
+     * Acknowledge Policy Impact
+     */
+    async acknowledgePolicyImpactRaw(requestParameters, initOverrides) {
+        const requestOptions = await this.acknowledgePolicyImpactRequestOpts(requestParameters);
+        const response = await this.request(requestOptions, initOverrides);
+        return new runtime.JSONApiResponse(response, (jsonValue) => PolicyImpactSummaryFromJSON(jsonValue));
+    }
+    /**
+     * ``open`` -> ``acknowledged``.  404 if the impact doesn\'t exist (or belongs to another org/policy); 409 if it isn\'t ``open``. **Both** ``policy_id`` and ``impact_id`` are typed as UUIDs, so a malformed id in the URL 422s here rather than reaching the query and raising an unhandled ``asyncpg.DataError`` (=> 500) against a UUID column. This is deliberately stricter than ``admin_v2``\'s plain-``str`` path-param convention.
+     * Acknowledge Policy Impact
+     */
+    async acknowledgePolicyImpact(requestParameters, initOverrides) {
+        const response = await this.acknowledgePolicyImpactRaw(requestParameters, initOverrides);
+        return await response.value();
+    }
+    /**
+     * Creates request options for clonePolicy without sending the request
+     */
+    async clonePolicyRequestOpts(requestParameters) {
+        if (requestParameters['policyId'] == null) {
+            throw new runtime.RequiredError('policyId', 'Required parameter "policyId" was null or undefined when calling clonePolicy().');
+        }
+        const queryParameters = {};
+        const headerParameters = {};
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("ApiKey", []);
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+        let urlPath = `/api/policy/v2/policies/{policy_id}/clone`;
+        urlPath = urlPath.replace('{policy_id}', encodeURIComponent(String(requestParameters['policyId'])));
+        return {
+            path: urlPath,
+            method: 'POST',
+            headers: headerParameters,
+            query: queryParameters,
+        };
+    }
+    /**
+     * Clone an existing policy, creating a new policy with the same configuration but with a modified name (appending \" Copy\") and DRAFT status.
+     * Clone Policy
+     */
+    async clonePolicyRaw(requestParameters, initOverrides) {
+        const requestOptions = await this.clonePolicyRequestOpts(requestParameters);
+        const response = await this.request(requestOptions, initOverrides);
+        return new runtime.JSONApiResponse(response, (jsonValue) => PolicyDetailResponseFromJSON(jsonValue));
+    }
+    /**
+     * Clone an existing policy, creating a new policy with the same configuration but with a modified name (appending \" Copy\") and DRAFT status.
+     * Clone Policy
+     */
+    async clonePolicy(requestParameters, initOverrides) {
+        const response = await this.clonePolicyRaw(requestParameters, initOverrides);
+        return await response.value();
+    }
+    /**
+     * Creates request options for comparePolicyRevisions without sending the request
+     */
+    async comparePolicyRevisionsRequestOpts(requestParameters) {
+        if (requestParameters['policyId'] == null) {
+            throw new runtime.RequiredError('policyId', 'Required parameter "policyId" was null or undefined when calling comparePolicyRevisions().');
+        }
+        if (requestParameters['from'] == null) {
+            throw new runtime.RequiredError('from', 'Required parameter "from" was null or undefined when calling comparePolicyRevisions().');
+        }
+        if (requestParameters['to'] == null) {
+            throw new runtime.RequiredError('to', 'Required parameter "to" was null or undefined when calling comparePolicyRevisions().');
+        }
+        const queryParameters = {};
+        if (requestParameters['from'] != null) {
+            queryParameters['from'] = requestParameters['from'];
+        }
+        if (requestParameters['to'] != null) {
+            queryParameters['to'] = requestParameters['to'];
+        }
+        const headerParameters = {};
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("ApiKey", []);
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+        let urlPath = `/api/policy/v2/policies/{policy_id}/revisions/compare`;
+        urlPath = urlPath.replace('{policy_id}', encodeURIComponent(String(requestParameters['policyId'])));
+        return {
+            path: urlPath,
+            method: 'GET',
+            headers: headerParameters,
+            query: queryParameters,
+        };
+    }
+    /**
+     * Compare two revisions of a policy.  Returns the before/after state, a diff of changes, change categories, and the union of resolved_refs from both endpoint revisions. The before/after are always normalized so before is the older revision.
+     * Compare Policy Revisions
+     */
+    async comparePolicyRevisionsRaw(requestParameters, initOverrides) {
+        const requestOptions = await this.comparePolicyRevisionsRequestOpts(requestParameters);
+        const response = await this.request(requestOptions, initOverrides);
+        return new runtime.JSONApiResponse(response, (jsonValue) => PolicyRevisionCompareResponseFromJSON(jsonValue));
+    }
+    /**
+     * Compare two revisions of a policy.  Returns the before/after state, a diff of changes, change categories, and the union of resolved_refs from both endpoint revisions. The before/after are always normalized so before is the older revision.
+     * Compare Policy Revisions
+     */
+    async comparePolicyRevisions(requestParameters, initOverrides) {
+        const response = await this.comparePolicyRevisionsRaw(requestParameters, initOverrides);
+        return await response.value();
+    }
+    /**
+     * Creates request options for countPoliciesByAgent without sending the request
+     */
+    async countPoliciesByAgentRequestOpts() {
+        const queryParameters = {};
+        const headerParameters = {};
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("ApiKey", []);
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+        let urlPath = `/api/policy/v2/policies/counts-by-agent`;
+        return {
+            path: urlPath,
+            method: 'GET',
+            headers: headerParameters,
+            query: queryParameters,
+        };
+    }
+    /**
+     * Return the number of policies associated with each agent.  Unscoped policies (applying to all agents) are counted separately.
+     * Get Policy Counts By Agent
+     */
+    async countPoliciesByAgentRaw(initOverrides) {
+        const requestOptions = await this.countPoliciesByAgentRequestOpts();
+        const response = await this.request(requestOptions, initOverrides);
+        return new runtime.JSONApiResponse(response, (jsonValue) => AgentPolicyCountsFromJSON(jsonValue));
+    }
+    /**
+     * Return the number of policies associated with each agent.  Unscoped policies (applying to all agents) are counted separately.
+     * Get Policy Counts By Agent
+     */
+    async countPoliciesByAgent(initOverrides) {
+        const response = await this.countPoliciesByAgentRaw(initOverrides);
+        return await response.value();
+    }
+    /**
+     * Creates request options for createPolicy without sending the request
+     */
+    async createPolicyRequestOpts(requestParameters) {
+        if (requestParameters['createPolicy'] == null) {
+            throw new runtime.RequiredError('createPolicy', 'Required parameter "createPolicy" was null or undefined when calling createPolicy().');
+        }
+        const queryParameters = {};
+        const headerParameters = {};
+        headerParameters['Content-Type'] = 'application/json';
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("ApiKey", []);
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+        let urlPath = `/api/policy/v2/policies`;
+        return {
+            path: urlPath,
+            method: 'POST',
+            headers: headerParameters,
+            query: queryParameters,
+            body: CreatePolicyToJSON(requestParameters['createPolicy']),
+        };
+    }
+    /**
+     * Create a policy governing exactly one MCP server.  A rule grants its `actions` to its `roles_groups`. Access is denied by default, so a tool no rule grants is already blocked — `authorized: false` is only for carving an exception out of a broader allow.  Write ONE rule per `roles_groups` set — all of a principal\'s actions on one rule, with `:approve` carrying allow-vs-confirm. Example, reads free and writes confirmed:      {\"name\": \"Support tooling\", \"mcp_server_id\": \"3f7c…\", \"rules\": [       {\"name\": \"Support issue access\", \"authorized\": true, \"active\": true,        \"actions\": [\"tools/call:list_issues\", \"tools/call:create_issue:approve\"],        \"roles_groups\": [\"group:Support\"]}]}  One policy per (server, agent scope): a second ACTIVE policy over the same `mcp_server_id` and `application_ids` is refused with 409 naming the holder. Add rules to the existing policy instead, or scope the new one to specific `application_ids`. `validate_policy` reports this before you write.
+     * Create Policy
+     */
+    async createPolicyRaw(requestParameters, initOverrides) {
+        const requestOptions = await this.createPolicyRequestOpts(requestParameters);
+        const response = await this.request(requestOptions, initOverrides);
+        return new runtime.JSONApiResponse(response, (jsonValue) => PolicyDetailResponseFromJSON(jsonValue));
+    }
+    /**
+     * Create a policy governing exactly one MCP server.  A rule grants its `actions` to its `roles_groups`. Access is denied by default, so a tool no rule grants is already blocked — `authorized: false` is only for carving an exception out of a broader allow.  Write ONE rule per `roles_groups` set — all of a principal\'s actions on one rule, with `:approve` carrying allow-vs-confirm. Example, reads free and writes confirmed:      {\"name\": \"Support tooling\", \"mcp_server_id\": \"3f7c…\", \"rules\": [       {\"name\": \"Support issue access\", \"authorized\": true, \"active\": true,        \"actions\": [\"tools/call:list_issues\", \"tools/call:create_issue:approve\"],        \"roles_groups\": [\"group:Support\"]}]}  One policy per (server, agent scope): a second ACTIVE policy over the same `mcp_server_id` and `application_ids` is refused with 409 naming the holder. Add rules to the existing policy instead, or scope the new one to specific `application_ids`. `validate_policy` reports this before you write.
+     * Create Policy
+     */
+    async createPolicy(requestParameters, initOverrides) {
+        const response = await this.createPolicyRaw(requestParameters, initOverrides);
+        return await response.value();
+    }
+    /**
+     * Creates request options for getPolicy without sending the request
+     */
+    async getPolicyRequestOpts(requestParameters) {
+        if (requestParameters['policyId'] == null) {
+            throw new runtime.RequiredError('policyId', 'Required parameter "policyId" was null or undefined when calling getPolicy().');
+        }
+        const queryParameters = {};
+        const headerParameters = {};
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("ApiKey", []);
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+        let urlPath = `/api/policy/v2/policies/{policy_id}`;
+        urlPath = urlPath.replace('{policy_id}', encodeURIComponent(String(requestParameters['policyId'])));
+        return {
+            path: urlPath,
+            method: 'GET',
+            headers: headerParameters,
+            query: queryParameters,
+        };
+    }
+    /**
+     * Get Policy
+     */
+    async getPolicyRaw(requestParameters, initOverrides) {
+        const requestOptions = await this.getPolicyRequestOpts(requestParameters);
+        const response = await this.request(requestOptions, initOverrides);
+        return new runtime.JSONApiResponse(response, (jsonValue) => PolicyDetailResponseFromJSON(jsonValue));
+    }
+    /**
+     * Get Policy
+     */
+    async getPolicy(requestParameters, initOverrides) {
+        const response = await this.getPolicyRaw(requestParameters, initOverrides);
+        return await response.value();
+    }
+    /**
+     * Creates request options for getPolicyImpactsSummary without sending the request
+     */
+    async getPolicyImpactsSummaryRequestOpts() {
+        const queryParameters = {};
+        const headerParameters = {};
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("ApiKey", []);
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+        let urlPath = `/api/policy/v2/policy-impacts/summary`;
+        return {
+            path: urlPath,
+            method: 'GET',
+            headers: headerParameters,
+            query: queryParameters,
+        };
+    }
+    /**
+     * Badge counts: ``{policy_id: {breaking, review, info}}``, archived excluded.
+     * Get Policy Impacts Summary
+     */
+    async getPolicyImpactsSummaryRaw(initOverrides) {
+        const requestOptions = await this.getPolicyImpactsSummaryRequestOpts();
+        const response = await this.request(requestOptions, initOverrides);
+        return new runtime.JSONApiResponse(response, (jsonValue) => runtime.mapValues(jsonValue, PolicyImpactSeverityCountsFromJSON));
+    }
+    /**
+     * Badge counts: ``{policy_id: {breaking, review, info}}``, archived excluded.
+     * Get Policy Impacts Summary
+     */
+    async getPolicyImpactsSummary(initOverrides) {
+        const response = await this.getPolicyImpactsSummaryRaw(initOverrides);
+        return await response.value();
+    }
+    /**
+     * Creates request options for getPolicyImpactsSummaryByKind without sending the request
+     */
+    async getPolicyImpactsSummaryByKindRequestOpts() {
+        const queryParameters = {};
+        const headerParameters = {};
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("ApiKey", []);
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+        let urlPath = `/api/policy/v2/policy-impacts/summary/by-kind`;
+        return {
+            path: urlPath,
+            method: 'GET',
+            headers: headerParameters,
+            query: queryParameters,
+        };
+    }
+    /**
+     * Rollup line counts: ``{policy_id: {change_kind: live_count}}``, archived excluded.  Sibling of ``/policy-impacts/summary`` grouped by ``change_kind`` instead of severity — kept as a separate route rather than a widened ``/summary`` response because ``PolicyImpactSeverityCounts`` uses ``extra=\"allow\"`` to surface unrecognised severities, and a structural ``kinds`` key there would be indistinguishable from one. ``change_kind`` is tool-router\'s open vocabulary, so kinds are not zero-filled: only kinds with live rows appear.
+     * Get Policy Impacts Summary By Kind
+     */
+    async getPolicyImpactsSummaryByKindRaw(initOverrides) {
+        const requestOptions = await this.getPolicyImpactsSummaryByKindRequestOpts();
+        const response = await this.request(requestOptions, initOverrides);
+        return new runtime.JSONApiResponse(response);
+    }
+    /**
+     * Rollup line counts: ``{policy_id: {change_kind: live_count}}``, archived excluded.  Sibling of ``/policy-impacts/summary`` grouped by ``change_kind`` instead of severity — kept as a separate route rather than a widened ``/summary`` response because ``PolicyImpactSeverityCounts`` uses ``extra=\"allow\"`` to surface unrecognised severities, and a structural ``kinds`` key there would be indistinguishable from one. ``change_kind`` is tool-router\'s open vocabulary, so kinds are not zero-filled: only kinds with live rows appear.
+     * Get Policy Impacts Summary By Kind
+     */
+    async getPolicyImpactsSummaryByKind(initOverrides) {
+        const response = await this.getPolicyImpactsSummaryByKindRaw(initOverrides);
+        return await response.value();
+    }
+    /**
+     * Creates request options for getPolicyRevision without sending the request
+     */
+    async getPolicyRevisionRequestOpts(requestParameters) {
+        if (requestParameters['policyId'] == null) {
+            throw new runtime.RequiredError('policyId', 'Required parameter "policyId" was null or undefined when calling getPolicyRevision().');
+        }
+        if (requestParameters['revisionId'] == null) {
+            throw new runtime.RequiredError('revisionId', 'Required parameter "revisionId" was null or undefined when calling getPolicyRevision().');
+        }
+        const queryParameters = {};
+        const headerParameters = {};
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("ApiKey", []);
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+        let urlPath = `/api/policy/v2/policies/{policy_id}/revisions/{revision_id}`;
+        urlPath = urlPath.replace('{policy_id}', encodeURIComponent(String(requestParameters['policyId'])));
+        urlPath = urlPath.replace('{revision_id}', encodeURIComponent(String(requestParameters['revisionId'])));
+        return {
+            path: urlPath,
+            method: 'GET',
+            headers: headerParameters,
+            query: queryParameters,
+        };
+    }
+    /**
+     * Return a single policy revision by ID, scoped to the given policy.
+     * Get Policy Revision
+     */
+    async getPolicyRevisionRaw(requestParameters, initOverrides) {
+        const requestOptions = await this.getPolicyRevisionRequestOpts(requestParameters);
+        const response = await this.request(requestOptions, initOverrides);
+        return new runtime.JSONApiResponse(response, (jsonValue) => PolicyRevisionDetailResponseFromJSON(jsonValue));
+    }
+    /**
+     * Return a single policy revision by ID, scoped to the given policy.
+     * Get Policy Revision
+     */
+    async getPolicyRevision(requestParameters, initOverrides) {
+        const response = await this.getPolicyRevisionRaw(requestParameters, initOverrides);
+        return await response.value();
+    }
+    /**
+     * Creates request options for getPolicySummary without sending the request
+     */
+    async getPolicySummaryRequestOpts() {
+        const queryParameters = {};
+        const headerParameters = {};
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("ApiKey", []);
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+        let urlPath = `/api/policy/v2/policies/summary`;
+        return {
+            path: urlPath,
+            method: 'GET',
+            headers: headerParameters,
+            query: queryParameters,
+        };
+    }
+    /**
+     * Return summary counts of policies by status.
+     * Get Policies Summary
+     */
+    async getPolicySummaryRaw(initOverrides) {
+        const requestOptions = await this.getPolicySummaryRequestOpts();
+        const response = await this.request(requestOptions, initOverrides);
+        return new runtime.JSONApiResponse(response, (jsonValue) => PolicySummaryResponseFromJSON(jsonValue));
+    }
+    /**
+     * Return summary counts of policies by status.
+     * Get Policies Summary
+     */
+    async getPolicySummary(initOverrides) {
+        const response = await this.getPolicySummaryRaw(initOverrides);
+        return await response.value();
+    }
+    /**
+     * Creates request options for listAllPolicyImpacts without sending the request
+     */
+    async listAllPolicyImpactsRequestOpts(requestParameters) {
+        const queryParameters = {};
+        if (requestParameters['status'] != null) {
+            queryParameters['status'] = requestParameters['status'];
+        }
+        if (requestParameters['severity'] != null) {
+            queryParameters['severity'] = requestParameters['severity'];
+        }
+        if (requestParameters['policyId'] != null) {
+            queryParameters['policy_id'] = requestParameters['policyId'];
+        }
+        if (requestParameters['mcpServerId'] != null) {
+            queryParameters['mcp_server_id'] = requestParameters['mcpServerId'];
+        }
+        if (requestParameters['snapshotId'] != null) {
+            queryParameters['snapshot_id'] = requestParameters['snapshotId'];
+        }
+        if (requestParameters['page'] != null) {
+            queryParameters['page'] = requestParameters['page'];
+        }
+        if (requestParameters['limit'] != null) {
+            queryParameters['limit'] = requestParameters['limit'];
+        }
+        const headerParameters = {};
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("ApiKey", []);
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+        let urlPath = `/api/policy/v2/policy-impacts`;
+        return {
+            path: urlPath,
+            method: 'GET',
+            headers: headerParameters,
+            query: queryParameters,
+        };
+    }
+    /**
+     * Org-wide impact list.  Serves the ACC org view and the server/snapshot revisions page (hence the ``mcp_server_id`` / ``snapshot_id`` filters on what is otherwise an org-wide list). Archived policies are excluded by :class:`PolicyImpactService`\'s join on ``policy.status``.
+     * List Policy Impacts
+     */
+    async listAllPolicyImpactsRaw(requestParameters, initOverrides) {
+        const requestOptions = await this.listAllPolicyImpactsRequestOpts(requestParameters);
+        const response = await this.request(requestOptions, initOverrides);
+        return new runtime.JSONApiResponse(response, (jsonValue) => PaginationResponsePolicyImpactSummaryFromJSON(jsonValue));
+    }
+    /**
+     * Org-wide impact list.  Serves the ACC org view and the server/snapshot revisions page (hence the ``mcp_server_id`` / ``snapshot_id`` filters on what is otherwise an org-wide list). Archived policies are excluded by :class:`PolicyImpactService`\'s join on ``policy.status``.
+     * List Policy Impacts
+     */
+    async listAllPolicyImpacts(requestParameters = {}, initOverrides) {
+        const response = await this.listAllPolicyImpactsRaw(requestParameters, initOverrides);
+        return await response.value();
+    }
+    /**
+     * Creates request options for listPolicies without sending the request
+     */
+    async listPoliciesRequestOpts(requestParameters) {
+        const queryParameters = {};
+        if (requestParameters['search'] != null) {
+            queryParameters['search'] = requestParameters['search'];
+        }
+        if (requestParameters['status'] != null) {
+            queryParameters['status'] = requestParameters['status'];
+        }
+        if (requestParameters['mcpServerId'] != null) {
+            queryParameters['mcp_server_id'] = requestParameters['mcpServerId'];
+        }
+        if (requestParameters['agentId'] != null) {
+            queryParameters['agent_id'] = requestParameters['agentId'];
+        }
+        if (requestParameters['sortBy'] != null) {
+            queryParameters['sort_by'] = requestParameters['sortBy'];
+        }
+        if (requestParameters['sortOrder'] != null) {
+            queryParameters['sort_order'] = requestParameters['sortOrder'];
+        }
+        if (requestParameters['hasImpacts'] != null) {
+            queryParameters['has_impacts'] = requestParameters['hasImpacts'];
+        }
+        if (requestParameters['page'] != null) {
+            queryParameters['page'] = requestParameters['page'];
+        }
+        if (requestParameters['limit'] != null) {
+            queryParameters['limit'] = requestParameters['limit'];
+        }
+        const headerParameters = {};
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("ApiKey", []);
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+        let urlPath = `/api/policy/v2/policies`;
+        return {
+            path: urlPath,
+            method: 'GET',
+            headers: headerParameters,
+            query: queryParameters,
+        };
+    }
+    /**
+     * List Policies
+     */
+    async listPoliciesRaw(requestParameters, initOverrides) {
+        const requestOptions = await this.listPoliciesRequestOpts(requestParameters);
+        const response = await this.request(requestOptions, initOverrides);
+        return new runtime.JSONApiResponse(response, (jsonValue) => PaginationResponsePolicySummaryFromJSON(jsonValue));
+    }
+    /**
+     * List Policies
+     */
+    async listPolicies(requestParameters = {}, initOverrides) {
+        const response = await this.listPoliciesRaw(requestParameters, initOverrides);
+        return await response.value();
+    }
+    /**
+     * Creates request options for listPoliciesAffectedBy without sending the request
+     */
+    async listPoliciesAffectedByRequestOpts(requestParameters) {
+        const queryParameters = {};
+        if (requestParameters['agentId'] != null) {
+            queryParameters['agent_id'] = requestParameters['agentId'];
+        }
+        if (requestParameters['mcpServerId'] != null) {
+            queryParameters['mcp_server_id'] = requestParameters['mcpServerId'];
+        }
+        const headerParameters = {};
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("ApiKey", []);
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+        let urlPath = `/api/policy/v2/policies/affected-by`;
+        return {
+            path: urlPath,
+            method: 'GET',
+            headers: headerParameters,
+            query: queryParameters,
+        };
+    }
+    /**
+     * Preview policies that would be archived or revised by a cascade.  Backs the AI agent / MCP server delete-confirmation modal so the user sees what\'s about to change before they confirm (BCP-1686 spec § \"Policy-service endpoint\"). Exactly one of ``agent_id`` / ``mcp_server_id`` must be supplied.
+     * Get Affected Policies
+     */
+    async listPoliciesAffectedByRaw(requestParameters, initOverrides) {
+        const requestOptions = await this.listPoliciesAffectedByRequestOpts(requestParameters);
+        const response = await this.request(requestOptions, initOverrides);
+        return new runtime.JSONApiResponse(response, (jsonValue) => AffectedPoliciesResponseFromJSON(jsonValue));
+    }
+    /**
+     * Preview policies that would be archived or revised by a cascade.  Backs the AI agent / MCP server delete-confirmation modal so the user sees what\'s about to change before they confirm (BCP-1686 spec § \"Policy-service endpoint\"). Exactly one of ``agent_id`` / ``mcp_server_id`` must be supplied.
+     * Get Affected Policies
+     */
+    async listPoliciesAffectedBy(requestParameters = {}, initOverrides) {
+        const response = await this.listPoliciesAffectedByRaw(requestParameters, initOverrides);
+        return await response.value();
+    }
+    /**
+     * Creates request options for listPolicyFilterOptions without sending the request
+     */
+    async listPolicyFilterOptionsRequestOpts() {
+        const queryParameters = {};
+        const headerParameters = {};
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("ApiKey", []);
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+        let urlPath = `/api/policy/v2/policies/filter-definitions`;
+        return {
+            path: urlPath,
+            method: 'GET',
+            headers: headerParameters,
+            query: queryParameters,
+        };
+    }
+    /**
+     * Return filter categories for the policies list UI.  Static filter options for status, plus dynamic filters for MCP servers and agents based on the organization\'s registry.
+     * Get Filter Definitions
+     */
+    async listPolicyFilterOptionsRaw(initOverrides) {
+        const requestOptions = await this.listPolicyFilterOptionsRequestOpts();
+        const response = await this.request(requestOptions, initOverrides);
+        return new runtime.JSONApiResponse(response, (jsonValue) => jsonValue.map(FilterCategoryFromJSON));
+    }
+    /**
+     * Return filter categories for the policies list UI.  Static filter options for status, plus dynamic filters for MCP servers and agents based on the organization\'s registry.
+     * Get Filter Definitions
+     */
+    async listPolicyFilterOptions(initOverrides) {
+        const response = await this.listPolicyFilterOptionsRaw(initOverrides);
+        return await response.value();
+    }
+    /**
+     * Creates request options for listPolicyImpacts without sending the request
+     */
+    async listPolicyImpactsRequestOpts(requestParameters) {
+        if (requestParameters['policyId'] == null) {
+            throw new runtime.RequiredError('policyId', 'Required parameter "policyId" was null or undefined when calling listPolicyImpacts().');
+        }
+        const queryParameters = {};
+        if (requestParameters['status'] != null) {
+            queryParameters['status'] = requestParameters['status'];
+        }
+        const headerParameters = {};
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("ApiKey", []);
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+        let urlPath = `/api/policy/v2/policies/{policy_id}/impacts`;
+        urlPath = urlPath.replace('{policy_id}', encodeURIComponent(String(requestParameters['policyId'])));
+        return {
+            path: urlPath,
+            method: 'GET',
+            headers: headerParameters,
+            query: queryParameters,
+        };
+    }
+    /**
+     * Every impact on one policy, newest first — the policy detail view\'s list.  Unlike the org-wide list, resolved rows are NOT excluded by default: this is the history view, with resolved rows collapsed client-side. Archived policies are still excluded (:class:`PolicyImpactService`\'s ``_base_query`` backs both this and the org-wide list identically) — an archived policy\'s detail page must not surface flags the org view is hiding.  **Capped, and the cap is not an error.** At most :data:`~policy_service.services.policy_impact.PER_POLICY_LIST_CAP` rows are returned, newest first. Resolved impacts are kept indefinitely as an audit trail and each carries a non-trivial ``detail`` blob, so an uncapped response would grow without limit. Truncation is therefore possible and is NOT signalled — this is a detail view where the newest rows are what matter. For full history, page the org-wide ``GET /policy-impacts?policy_id=`` instead.
+     * List Impacts For Policy
+     */
+    async listPolicyImpactsRaw(requestParameters, initOverrides) {
+        const requestOptions = await this.listPolicyImpactsRequestOpts(requestParameters);
+        const response = await this.request(requestOptions, initOverrides);
+        return new runtime.JSONApiResponse(response, (jsonValue) => jsonValue.map(PolicyImpactSummaryFromJSON));
+    }
+    /**
+     * Every impact on one policy, newest first — the policy detail view\'s list.  Unlike the org-wide list, resolved rows are NOT excluded by default: this is the history view, with resolved rows collapsed client-side. Archived policies are still excluded (:class:`PolicyImpactService`\'s ``_base_query`` backs both this and the org-wide list identically) — an archived policy\'s detail page must not surface flags the org view is hiding.  **Capped, and the cap is not an error.** At most :data:`~policy_service.services.policy_impact.PER_POLICY_LIST_CAP` rows are returned, newest first. Resolved impacts are kept indefinitely as an audit trail and each carries a non-trivial ``detail`` blob, so an uncapped response would grow without limit. Truncation is therefore possible and is NOT signalled — this is a detail view where the newest rows are what matter. For full history, page the org-wide ``GET /policy-impacts?policy_id=`` instead.
+     * List Impacts For Policy
+     */
+    async listPolicyImpacts(requestParameters, initOverrides) {
+        const response = await this.listPolicyImpactsRaw(requestParameters, initOverrides);
+        return await response.value();
+    }
+    /**
+     * Creates request options for listPolicyRevisions without sending the request
+     */
+    async listPolicyRevisionsRequestOpts(requestParameters) {
+        if (requestParameters['policyId'] == null) {
+            throw new runtime.RequiredError('policyId', 'Required parameter "policyId" was null or undefined when calling listPolicyRevisions().');
+        }
+        const queryParameters = {};
+        if (requestParameters['q'] != null) {
+            queryParameters['q'] = requestParameters['q'];
+        }
+        if (requestParameters['category'] != null) {
+            queryParameters['category'] = requestParameters['category'];
+        }
+        if (requestParameters['page'] != null) {
+            queryParameters['page'] = requestParameters['page'];
+        }
+        if (requestParameters['limit'] != null) {
+            queryParameters['limit'] = requestParameters['limit'];
+        }
+        const headerParameters = {};
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("ApiKey", []);
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+        let urlPath = `/api/policy/v2/policies/{policy_id}/revisions`;
+        urlPath = urlPath.replace('{policy_id}', encodeURIComponent(String(requestParameters['policyId'])));
+        return {
+            path: urlPath,
+            method: 'GET',
+            headers: headerParameters,
+            query: queryParameters,
+        };
+    }
+    /**
+     * List all revisions for a given policy with pagination.
+     * List Policy Revisions
+     */
+    async listPolicyRevisionsRaw(requestParameters, initOverrides) {
+        const requestOptions = await this.listPolicyRevisionsRequestOpts(requestParameters);
+        const response = await this.request(requestOptions, initOverrides);
+        return new runtime.JSONApiResponse(response, (jsonValue) => PaginationResponsePolicyRevisionSummaryFromJSON(jsonValue));
+    }
+    /**
+     * List all revisions for a given policy with pagination.
+     * List Policy Revisions
+     */
+    async listPolicyRevisions(requestParameters, initOverrides) {
+        const response = await this.listPolicyRevisionsRaw(requestParameters, initOverrides);
+        return await response.value();
+    }
+    /**
+     * Creates request options for updatePolicy without sending the request
+     */
+    async updatePolicyRequestOpts(requestParameters) {
+        if (requestParameters['policyId'] == null) {
+            throw new runtime.RequiredError('policyId', 'Required parameter "policyId" was null or undefined when calling updatePolicy().');
+        }
+        if (requestParameters['updatePolicy'] == null) {
+            throw new runtime.RequiredError('updatePolicy', 'Required parameter "updatePolicy" was null or undefined when calling updatePolicy().');
+        }
+        const queryParameters = {};
+        const headerParameters = {};
+        headerParameters['Content-Type'] = 'application/json';
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("ApiKey", []);
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+        let urlPath = `/api/policy/v2/policies/{policy_id}`;
+        urlPath = urlPath.replace('{policy_id}', encodeURIComponent(String(requestParameters['policyId'])));
+        return {
+            path: urlPath,
+            method: 'PATCH',
+            headers: headerParameters,
+            query: queryParameters,
+            body: UpdatePolicyToJSON(requestParameters['updatePolicy']),
+        };
+    }
+    /**
+     * Update a policy. Sending `rules` REPLACES the entire rule list.  There is no \"add a rule\" operation. To add one, read the policy first and send every existing rule back alongside the new one — sending only the new rule deletes the others, and the call still returns 200 with a policy that looks perfectly healthy. Omit `rules` entirely to change only metadata.  Verify afterwards rather than assuming: `GET /v2/policies/{policy_id}/revisions` lists what each change actually did, and `compare_policy_revisions` diffs two of them. A revision summarising removals you did not intend is how you catch a partial send — and it is also how you recover, since the diff records what was taken out.  Other fields are a partial update: omitted ones are left alone. `mcp_server_id` is immutable — rules reference server-specific tool actions, so retargeting is a new policy, not an edit.
+     * Update Policy
+     */
+    async updatePolicyRaw(requestParameters, initOverrides) {
+        const requestOptions = await this.updatePolicyRequestOpts(requestParameters);
+        const response = await this.request(requestOptions, initOverrides);
+        return new runtime.JSONApiResponse(response, (jsonValue) => PolicyDetailResponseFromJSON(jsonValue));
+    }
+    /**
+     * Update a policy. Sending `rules` REPLACES the entire rule list.  There is no \"add a rule\" operation. To add one, read the policy first and send every existing rule back alongside the new one — sending only the new rule deletes the others, and the call still returns 200 with a policy that looks perfectly healthy. Omit `rules` entirely to change only metadata.  Verify afterwards rather than assuming: `GET /v2/policies/{policy_id}/revisions` lists what each change actually did, and `compare_policy_revisions` diffs two of them. A revision summarising removals you did not intend is how you catch a partial send — and it is also how you recover, since the diff records what was taken out.  Other fields are a partial update: omitted ones are left alone. `mcp_server_id` is immutable — rules reference server-specific tool actions, so retargeting is a new policy, not an edit.
+     * Update Policy
+     */
+    async updatePolicy(requestParameters, initOverrides) {
+        const response = await this.updatePolicyRaw(requestParameters, initOverrides);
+        return await response.value();
+    }
+    /**
+     * Creates request options for validatePolicy without sending the request
+     */
+    async validatePolicyRequestOpts(requestParameters) {
+        if (requestParameters['validatePolicyRequest'] == null) {
+            throw new runtime.RequiredError('validatePolicyRequest', 'Required parameter "validatePolicyRequest" was null or undefined when calling validatePolicy().');
+        }
+        const queryParameters = {};
+        const headerParameters = {};
+        headerParameters['Content-Type'] = 'application/json';
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("ApiKey", []);
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+        let urlPath = `/api/policy/v2/policies/validate`;
+        return {
+            path: urlPath,
+            method: 'POST',
+            headers: headerParameters,
+            query: queryParameters,
+            body: ValidatePolicyRequestToJSON(requestParameters['validatePolicyRequest']),
+        };
+    }
+    /**
+     * Validate a policy before creation or update. Checks for duplicate names and overlapping MCP server/agent combinations. When exclude_policy_id is provided (edit mode), that policy is excluded from validation.
+     * Validate Policy
+     */
+    async validatePolicyRaw(requestParameters, initOverrides) {
+        const requestOptions = await this.validatePolicyRequestOpts(requestParameters);
+        const response = await this.request(requestOptions, initOverrides);
+        return new runtime.JSONApiResponse(response, (jsonValue) => ValidatePolicyResponseFromJSON(jsonValue));
+    }
+    /**
+     * Validate a policy before creation or update. Checks for duplicate names and overlapping MCP server/agent combinations. When exclude_policy_id is provided (edit mode), that policy is excluded from validation.
+     * Validate Policy
+     */
+    async validatePolicy(requestParameters, initOverrides) {
+        const response = await this.validatePolicyRaw(requestParameters, initOverrides);
+        return await response.value();
+    }
+    /**
+     * Creates request options for validatePolicyRule without sending the request
+     */
+    async validatePolicyRuleRequestOpts(requestParameters) {
+        if (requestParameters['policyRuleInput'] == null) {
+            throw new runtime.RequiredError('policyRuleInput', 'Required parameter "policyRuleInput" was null or undefined when calling validatePolicyRule().');
+        }
+        const queryParameters = {};
+        const headerParameters = {};
+        headerParameters['Content-Type'] = 'application/json';
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("ApiKey", []);
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+        let urlPath = `/api/policy/v2/policies/rule/validate`;
+        return {
+            path: urlPath,
+            method: 'POST',
+            headers: headerParameters,
+            query: queryParameters,
+            body: PolicyRuleInputToJSON(requestParameters['policyRuleInput']),
+        };
+    }
+    /**
+     * Validate a single policy rule for correctness.  Validates CEL expression syntax, undefined variables, action format, and role/group format. Returns 204 No Content if valid, or 422 with Pydantic validation errors if invalid.
+     * Validate Rule
+     */
+    async validatePolicyRuleRaw(requestParameters, initOverrides) {
+        const requestOptions = await this.validatePolicyRuleRequestOpts(requestParameters);
+        const response = await this.request(requestOptions, initOverrides);
+        return new runtime.VoidApiResponse(response);
+    }
+    /**
+     * Validate a single policy rule for correctness.  Validates CEL expression syntax, undefined variables, action format, and role/group format. Returns 204 No Content if valid, or 422 with Pydantic validation errors if invalid.
+     * Validate Rule
+     */
+    async validatePolicyRule(requestParameters, initOverrides) {
+        await this.validatePolicyRuleRaw(requestParameters, initOverrides);
+    }
+}
+/**
+ * @export
+ */
+export const ListPoliciesSortByEnum = {
+    Name: 'name',
+    McpServerName: 'mcp_server_name',
+    Status: 'status',
+    UpdatedAt: 'updated_at',
+};
+/**
+ * @export
+ */
+export const ListPoliciesSortOrderEnum = {
+    Asc: 'asc',
+    Desc: 'desc',
+};