@barndoor-ai/sdk 2.25.0-dev.gc3cafd6 → 2.27.0-dev.ga753d9c

package/dist/apis/DlpApi.d.ts

@@ -2,7 +2,7 @@
  * Barndoor.ai Public API
  * Unified public API specification for Barndoor.ai platform
  *
- * The version of the OpenAPI document: 2.25.0
+ * The version of the OpenAPI document: 2.27.0
  *
  *
  * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
@@ -17,6 +17,7 @@ import { type CreateAllowListEntryRequest } from '../models/CreateAllowListEntry
 import { type CreateCustomDetectionTypeRequest } from '../models/CreateCustomDetectionTypeRequest.js';
 import { type CreateDetectionEngineRequest } from '../models/CreateDetectionEngineRequest.js';
 import { type CreateEnforcementPolicyRequest } from '../models/CreateEnforcementPolicyRequest.js';
+import { type CreateMcpPolicyRequest } from '../models/CreateMcpPolicyRequest.js';
 import { type CustomDetectionTypeResponse } from '../models/CustomDetectionTypeResponse.js';
 import { type CustomDetectionTypesResponse } from '../models/CustomDetectionTypesResponse.js';
 import { type DetectionEngineResponse } from '../models/DetectionEngineResponse.js';
@@ -29,9 +30,13 @@ import { type FieldControlPoliciesResponse } from '../models/FieldControlPolicie
 import { type FieldControlPolicyResponse } from '../models/FieldControlPolicyResponse.js';
 import { type GoogleImpersonationConfigResponse } from '../models/GoogleImpersonationConfigResponse.js';
 import { type GoogleImpersonationValidationResponse } from '../models/GoogleImpersonationValidationResponse.js';
+import { type McpBaselinePolicyResponse } from '../models/McpBaselinePolicyResponse.js';
+import { type McpPoliciesResponse } from '../models/McpPoliciesResponse.js';
+import { type McpPolicyResponse } from '../models/McpPolicyResponse.js';
 import { type OrgConfigResponse } from '../models/OrgConfigResponse.js';
 import { type PaginatedResponseAllowListEntryResponse } from '../models/PaginatedResponseAllowListEntryResponse.js';
 import { type ProviderConnectionResponse } from '../models/ProviderConnectionResponse.js';
+import { type PutMcpBaselinePolicyRequest } from '../models/PutMcpBaselinePolicyRequest.js';
 import { type ResolvedProtectionResponse } from '../models/ResolvedProtectionResponse.js';
 import { type SetCatalogUnlistedTableActionRequest } from '../models/SetCatalogUnlistedTableActionRequest.js';
 import { type TestProcessTextRequest } from '../models/TestProcessTextRequest.js';
@@ -40,6 +45,7 @@ import { type UpdateCustomDetectionTypeRequest } from '../models/UpdateCustomDet
 import { type UpdateDetectionEngineRequest } from '../models/UpdateDetectionEngineRequest.js';
 import { type UpdateEnforcementPolicyRequest } from '../models/UpdateEnforcementPolicyRequest.js';
 import { type UpdateFieldControlPolicyRequest } from '../models/UpdateFieldControlPolicyRequest.js';
+import { type UpdateMcpPolicyRequest } from '../models/UpdateMcpPolicyRequest.js';
 import { type UpdateOrgConfigRequest } from '../models/UpdateOrgConfigRequest.js';
 import { type UpsertConnectionRequest } from '../models/UpsertConnectionRequest.js';
 import { type UpsertFieldControlPolicyRequest } from '../models/UpsertFieldControlPolicyRequest.js';
@@ -69,6 +75,12 @@ export interface CreateEnforcementPolicyOperationRequest {
      */
     createEnforcementPolicyRequest: CreateEnforcementPolicyRequest;
 }
+export interface CreateMcpPolicyOperationRequest {
+    /**
+     *
+     */
+    createMcpPolicyRequest: CreateMcpPolicyRequest;
+}
 export interface DeleteAllowListEntryRequest {
     /**
      * Identifier, a UUID
@@ -99,6 +111,12 @@ export interface DeleteFieldControlPolicyRequest {
      */
     id: string;
 }
+export interface DeleteMcpPolicyRequest {
+    /**
+     * Identifier, a UUID
+     */
+    id: string;
+}
 export interface DeleteProviderConnectionRequest {
     /**
      * Provider name, e.g. `google_dlp`
@@ -129,6 +147,12 @@ export interface GetFieldControlPolicyRequest {
      */
     id: string;
 }
+export interface GetMcpPolicyRequest {
+    /**
+     * Identifier, a UUID
+     */
+    id: string;
+}
 export interface GetProviderConnectionRequest {
     /**
      * Provider name, e.g. `google_dlp`
@@ -173,6 +197,12 @@ export interface ProviderConnectionAwsTrustInfoRequest {
      */
     name: string;
 }
+export interface PutMcpBaselinePolicyOperationRequest {
+    /**
+     *
+     */
+    putMcpBaselinePolicyRequest: PutMcpBaselinePolicyRequest;
+}
 export interface SetFieldControlCatalogUnlistedTableActionRequest {
     /**
      * Identifier, a UUID
@@ -235,6 +265,16 @@ export interface UpdateFieldControlPolicyOperationRequest {
      */
     updateFieldControlPolicyRequest: UpdateFieldControlPolicyRequest;
 }
+export interface UpdateMcpPolicyOperationRequest {
+    /**
+     * Identifier, a UUID
+     */
+    id: string;
+    /**
+     *
+     */
+    updateMcpPolicyRequest: UpdateMcpPolicyRequest;
+}
 export interface UpsertConnectionOperationRequest {
     /**
      * Provider name, e.g. `google_dlp`
@@ -308,13 +348,29 @@ export declare class DlpApi extends runtime.BaseAPI {
      */
     createEnforcementPolicyRequestOpts(requestParameters: CreateEnforcementPolicyOperationRequest): Promise<runtime.RequestOpts>;
     /**
+     * Targets MCP servers, model providers, or both (`target`). Once an organization manages MCP traffic with `/mcp-policies` (see `GET /mcp-policies`\'s `policy_model`), MCP-targeted writes here are refused with 409 -- create or edit an MCP policy instead; model-provider policies are unaffected.
      * Create an enforcement policy
      */
     createEnforcementPolicyRaw(requestParameters: CreateEnforcementPolicyOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<EnforcementPolicyResponse>>;
     /**
+     * Targets MCP servers, model providers, or both (`target`). Once an organization manages MCP traffic with `/mcp-policies` (see `GET /mcp-policies`\'s `policy_model`), MCP-targeted writes here are refused with 409 -- create or edit an MCP policy instead; model-provider policies are unaffected.
      * Create an enforcement policy
      */
     createEnforcementPolicy(requestParameters: CreateEnforcementPolicyOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<EnforcementPolicyResponse>;
+    /**
+     * Creates request options for createMcpPolicy without sending the request
+     */
+    createMcpPolicyRequestOpts(requestParameters: CreateMcpPolicyOperationRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Creates a policy covering the given MCP server ids; each server belongs to at most one policy (the Baseline policy covers every server left out). Each rule names a `runtime_boundary` (`TOOL_INPUT`, `TOOL_OUTPUT` or `BOTH`), an `action`, the detection engines that trigger it, and optional `agent_scope` / `principal_scope` restrictions (`mode: ALL` by default; `ONLY` or `EXCEPT` with explicit agent or group/role ids otherwise). Refused with 409 while the organization is still on `LEGACY`.
+     * Create an MCP policy for one or more servers
+     */
+    createMcpPolicyRaw(requestParameters: CreateMcpPolicyOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<McpPolicyResponse>>;
+    /**
+     * Creates a policy covering the given MCP server ids; each server belongs to at most one policy (the Baseline policy covers every server left out). Each rule names a `runtime_boundary` (`TOOL_INPUT`, `TOOL_OUTPUT` or `BOTH`), an `action`, the detection engines that trigger it, and optional `agent_scope` / `principal_scope` restrictions (`mode: ALL` by default; `ONLY` or `EXCEPT` with explicit agent or group/role ids otherwise). Refused with 409 while the organization is still on `LEGACY`.
+     * Create an MCP policy for one or more servers
+     */
+    createMcpPolicy(requestParameters: CreateMcpPolicyOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<McpPolicyResponse>;
     /**
      * Creates request options for deleteAllowListEntry without sending the request
      */
@@ -356,10 +412,12 @@ export declare class DlpApi extends runtime.BaseAPI {
      */
     deleteEnforcementPolicyRequestOpts(requestParameters: DeleteEnforcementPolicyRequest): Promise<runtime.RequestOpts>;
     /**
+     * Once an organization manages MCP traffic with `/mcp-policies` (see `GET /mcp-policies`\'s `policy_model`), deleting an MCP-targeted policy is refused with 409 -- delete the corresponding MCP policy instead; model-provider policies are unaffected.
      * Delete an enforcement policy
      */
     deleteEnforcementPolicyRaw(requestParameters: DeleteEnforcementPolicyRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>>;
     /**
+     * Once an organization manages MCP traffic with `/mcp-policies` (see `GET /mcp-policies`\'s `policy_model`), deleting an MCP-targeted policy is refused with 409 -- delete the corresponding MCP policy instead; model-provider policies are unaffected.
      * Delete an enforcement policy
      */
     deleteEnforcementPolicy(requestParameters: DeleteEnforcementPolicyRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void>;
@@ -375,6 +433,20 @@ export declare class DlpApi extends runtime.BaseAPI {
      * Delete a field-control policy
      */
     deleteFieldControlPolicy(requestParameters: DeleteFieldControlPolicyRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void>;
+    /**
+     * Creates request options for deleteMcpPolicy without sending the request
+     */
+    deleteMcpPolicyRequestOpts(requestParameters: DeleteMcpPolicyRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Deletes the policy; every server it covered is immediately governed by the Baseline policy instead. The Baseline policy itself can\'t be deleted through this route.
+     * Delete an MCP policy; its servers fall back to the Baseline policy
+     */
+    deleteMcpPolicyRaw(requestParameters: DeleteMcpPolicyRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>>;
+    /**
+     * Deletes the policy; every server it covered is immediately governed by the Baseline policy instead. The Baseline policy itself can\'t be deleted through this route.
+     * Delete an MCP policy; its servers fall back to the Baseline policy
+     */
+    deleteMcpPolicy(requestParameters: DeleteMcpPolicyRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void>;
     /**
      * Creates request options for deleteProviderConnection without sending the request
      */
@@ -447,6 +519,34 @@ export declare class DlpApi extends runtime.BaseAPI {
      * Fetch one field-control policy
      */
     getFieldControlPolicy(requestParameters: GetFieldControlPolicyRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<FieldControlPolicyResponse>;
+    /**
+     * Creates request options for getMcpBaselinePolicy without sending the request
+     */
+    getMcpBaselinePolicyRequestOpts(): Promise<runtime.RequestOpts>;
+    /**
+     * Returns `policy: null` until the Baseline policy\'s first save -- until then no rule applies to servers that have no policy of their own.
+     * Fetch the Baseline policy, which covers every server without its own policy
+     */
+    getMcpBaselinePolicyRaw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<McpBaselinePolicyResponse>>;
+    /**
+     * Returns `policy: null` until the Baseline policy\'s first save -- until then no rule applies to servers that have no policy of their own.
+     * Fetch the Baseline policy, which covers every server without its own policy
+     */
+    getMcpBaselinePolicy(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<McpBaselinePolicyResponse>;
+    /**
+     * Creates request options for getMcpPolicy without sending the request
+     */
+    getMcpPolicyRequestOpts(requestParameters: GetMcpPolicyRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Returns the policy\'s servers and rules. Each rule\'s `agent_scope` and `principal_scope` default to `mode: ALL` (every AI agent, or every user); `ONLY`/`EXCEPT` narrow it to the given registry agent ids, or IdP group/role ids.
+     * Fetch one MCP policy
+     */
+    getMcpPolicyRaw(requestParameters: GetMcpPolicyRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<McpPolicyResponse>>;
+    /**
+     * Returns the policy\'s servers and rules. Each rule\'s `agent_scope` and `principal_scope` default to `mode: ALL` (every AI agent, or every user); `ONLY`/`EXCEPT` narrow it to the given registry agent ids, or IdP group/role ids.
+     * Fetch one MCP policy
+     */
+    getMcpPolicy(requestParameters: GetMcpPolicyRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<McpPolicyResponse>;
     /**
      * Creates request options for getProviderConnection without sending the request
      */
@@ -543,6 +643,20 @@ export declare class DlpApi extends runtime.BaseAPI {
      * List the organization\'s field-control policies
      */
     listFieldControlPolicies(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<FieldControlPoliciesResponse>;
+    /**
+     * Creates request options for listMcpPolicies without sending the request
+     */
+    listMcpPoliciesRequestOpts(): Promise<runtime.RequestOpts>;
+    /**
+     * Returns every MCP policy, the Baseline policy first and the rest by name, plus `policy_model`: `SERVER_POLICIES` once the organization manages MCP traffic as one policy per MCP server with a Baseline fallback, or `LEGACY` while it still manages MCP traffic through `/enforcement-policies`. These routes are read-only on `LEGACY` -- writes return 409 until the organization converts.
+     * List the organization\'s MCP policies
+     */
+    listMcpPoliciesRaw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<McpPoliciesResponse>>;
+    /**
+     * Returns every MCP policy, the Baseline policy first and the rest by name, plus `policy_model`: `SERVER_POLICIES` once the organization manages MCP traffic as one policy per MCP server with a Baseline fallback, or `LEGACY` while it still manages MCP traffic through `/enforcement-policies`. These routes are read-only on `LEGACY` -- writes return 409 until the organization converts.
+     * List the organization\'s MCP policies
+     */
+    listMcpPolicies(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<McpPoliciesResponse>;
     /**
      * Creates request options for listProviderConnections without sending the request
      */
@@ -593,6 +707,20 @@ export declare class DlpApi extends runtime.BaseAPI {
      * Get this organization\'s Barndoor principal for Google impersonation
      */
     providerConnectionGoogleImpersonationConfig(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<GoogleImpersonationConfigResponse>;
+    /**
+     * Creates request options for putMcpBaselinePolicy without sending the request
+     */
+    putMcpBaselinePolicyRequestOpts(requestParameters: PutMcpBaselinePolicyOperationRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Replaces the Baseline policy\'s whole rule set (keep an existing rule by passing its `id` back); there is no partial update. The Baseline policy has no server list of its own -- it covers whatever servers no other policy claims.
+     * Replace the Baseline policy\'s rules, creating it on first save
+     */
+    putMcpBaselinePolicyRaw(requestParameters: PutMcpBaselinePolicyOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<McpPolicyResponse>>;
+    /**
+     * Replaces the Baseline policy\'s whole rule set (keep an existing rule by passing its `id` back); there is no partial update. The Baseline policy has no server list of its own -- it covers whatever servers no other policy claims.
+     * Replace the Baseline policy\'s rules, creating it on first save
+     */
+    putMcpBaselinePolicy(requestParameters: PutMcpBaselinePolicyOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<McpPolicyResponse>;
     /**
      * Creates request options for setFieldControlCatalogUnlistedTableAction without sending the request
      */
@@ -660,10 +788,12 @@ export declare class DlpApi extends runtime.BaseAPI {
      */
     updateEnforcementPolicyRequestOpts(requestParameters: UpdateEnforcementPolicyOperationRequest): Promise<runtime.RequestOpts>;
     /**
+     * Once an organization manages MCP traffic with `/mcp-policies` (see `GET /mcp-policies`\'s `policy_model`), updates to an MCP-targeted policy are refused with 409 -- edit the corresponding MCP policy instead; model-provider policies are unaffected.
      * Update an enforcement policy
      */
     updateEnforcementPolicyRaw(requestParameters: UpdateEnforcementPolicyOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<EnforcementPolicyResponse>>;
     /**
+     * Once an organization manages MCP traffic with `/mcp-policies` (see `GET /mcp-policies`\'s `policy_model`), updates to an MCP-targeted policy are refused with 409 -- edit the corresponding MCP policy instead; model-provider policies are unaffected.
      * Update an enforcement policy
      */
     updateEnforcementPolicy(requestParameters: UpdateEnforcementPolicyOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<EnforcementPolicyResponse>;
@@ -679,6 +809,20 @@ export declare class DlpApi extends runtime.BaseAPI {
      * Update a field-control policy
      */
     updateFieldControlPolicy(requestParameters: UpdateFieldControlPolicyOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<FieldControlPolicyResponse>;
+    /**
+     * Creates request options for updateMcpPolicy without sending the request
+     */
+    updateMcpPolicyRequestOpts(requestParameters: UpdateMcpPolicyOperationRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Partial update: omitted fields are left unchanged, and a `rules` list replaces the whole set (keep an existing rule by passing its `id` back). The Baseline policy can\'t be edited here -- use `/mcp-baseline-policy`.
+     * Update an MCP policy\'s name, servers or rules
+     */
+    updateMcpPolicyRaw(requestParameters: UpdateMcpPolicyOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<McpPolicyResponse>>;
+    /**
+     * Partial update: omitted fields are left unchanged, and a `rules` list replaces the whole set (keep an existing rule by passing its `id` back). The Baseline policy can\'t be edited here -- use `/mcp-baseline-policy`.
+     * Update an MCP policy\'s name, servers or rules
+     */
+    updateMcpPolicy(requestParameters: UpdateMcpPolicyOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<McpPolicyResponse>;
     /**
      * Creates request options for upsertConnection without sending the request
      */