@barndoor-ai/sdk 2.25.0-dev.gc3cafd6 → 2.27.0-dev.ga753d9c

package/dist/apis/DlpApi.js

@@ -5,7 +5,7 @@
  * Barndoor.ai Public API
  * Unified public API specification for Barndoor.ai platform
  *
- * The version of the OpenAPI document: 2.25.0
+ * The version of the OpenAPI document: 2.27.0
  *
  *
  * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
@@ -55,6 +55,7 @@ const CreateAllowListEntryRequest_js_1 = require("../models/CreateAllowListEntry
 const CreateCustomDetectionTypeRequest_js_1 = require("../models/CreateCustomDetectionTypeRequest.js");
 const CreateDetectionEngineRequest_js_1 = require("../models/CreateDetectionEngineRequest.js");
 const CreateEnforcementPolicyRequest_js_1 = require("../models/CreateEnforcementPolicyRequest.js");
+const CreateMcpPolicyRequest_js_1 = require("../models/CreateMcpPolicyRequest.js");
 const CustomDetectionTypeResponse_js_1 = require("../models/CustomDetectionTypeResponse.js");
 const CustomDetectionTypesResponse_js_1 = require("../models/CustomDetectionTypesResponse.js");
 const DetectionEngineResponse_js_1 = require("../models/DetectionEngineResponse.js");
@@ -67,9 +68,13 @@ const FieldControlPoliciesResponse_js_1 = require("../models/FieldControlPolicie
 const FieldControlPolicyResponse_js_1 = require("../models/FieldControlPolicyResponse.js");
 const GoogleImpersonationConfigResponse_js_1 = require("../models/GoogleImpersonationConfigResponse.js");
 const GoogleImpersonationValidationResponse_js_1 = require("../models/GoogleImpersonationValidationResponse.js");
+const McpBaselinePolicyResponse_js_1 = require("../models/McpBaselinePolicyResponse.js");
+const McpPoliciesResponse_js_1 = require("../models/McpPoliciesResponse.js");
+const McpPolicyResponse_js_1 = require("../models/McpPolicyResponse.js");
 const OrgConfigResponse_js_1 = require("../models/OrgConfigResponse.js");
 const PaginatedResponseAllowListEntryResponse_js_1 = require("../models/PaginatedResponseAllowListEntryResponse.js");
 const ProviderConnectionResponse_js_1 = require("../models/ProviderConnectionResponse.js");
+const PutMcpBaselinePolicyRequest_js_1 = require("../models/PutMcpBaselinePolicyRequest.js");
 const ResolvedProtectionResponse_js_1 = require("../models/ResolvedProtectionResponse.js");
 const SetCatalogUnlistedTableActionRequest_js_1 = require("../models/SetCatalogUnlistedTableActionRequest.js");
 const TestProcessTextRequest_js_1 = require("../models/TestProcessTextRequest.js");
@@ -78,6 +83,7 @@ const UpdateCustomDetectionTypeRequest_js_1 = require("../models/UpdateCustomDet
 const UpdateDetectionEngineRequest_js_1 = require("../models/UpdateDetectionEngineRequest.js");
 const UpdateEnforcementPolicyRequest_js_1 = require("../models/UpdateEnforcementPolicyRequest.js");
 const UpdateFieldControlPolicyRequest_js_1 = require("../models/UpdateFieldControlPolicyRequest.js");
+const UpdateMcpPolicyRequest_js_1 = require("../models/UpdateMcpPolicyRequest.js");
 const UpdateOrgConfigRequest_js_1 = require("../models/UpdateOrgConfigRequest.js");
 const UpsertConnectionRequest_js_1 = require("../models/UpsertConnectionRequest.js");
 const UpsertFieldControlPolicyRequest_js_1 = require("../models/UpsertFieldControlPolicyRequest.js");
@@ -293,6 +299,7 @@ class DlpApi extends runtime.BaseAPI {
         };
     }
     /**
+     * Targets MCP servers, model providers, or both (`target`). Once an organization manages MCP traffic with `/mcp-policies` (see `GET /mcp-policies`\'s `policy_model`), MCP-targeted writes here are refused with 409 -- create or edit an MCP policy instead; model-provider policies are unaffected.
      * Create an enforcement policy
      */
     async createEnforcementPolicyRaw(requestParameters, initOverrides) {
@@ -301,12 +308,70 @@ class DlpApi extends runtime.BaseAPI {
         return new runtime.JSONApiResponse(response, (jsonValue) => (0, EnforcementPolicyResponse_js_1.EnforcementPolicyResponseFromJSON)(jsonValue));
     }
     /**
+     * Targets MCP servers, model providers, or both (`target`). Once an organization manages MCP traffic with `/mcp-policies` (see `GET /mcp-policies`\'s `policy_model`), MCP-targeted writes here are refused with 409 -- create or edit an MCP policy instead; model-provider policies are unaffected.
      * Create an enforcement policy
      */
     async createEnforcementPolicy(requestParameters, initOverrides) {
         const response = await this.createEnforcementPolicyRaw(requestParameters, initOverrides);
         return await response.value();
     }
+    /**
+     * Creates request options for createMcpPolicy without sending the request
+     */
+    async createMcpPolicyRequestOpts(requestParameters) {
+        if (requestParameters['createMcpPolicyRequest'] == null) {
+            throw new runtime.RequiredError('createMcpPolicyRequest', 'Required parameter "createMcpPolicyRequest" was null or undefined when calling createMcpPolicy().');
+        }
+        const queryParameters = {};
+        const headerParameters = {};
+        headerParameters['Content-Type'] = 'application/json';
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("ApiKey", []);
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+        let urlPath = `/api/dlp/admin/v1/mcp-policies`;
+        return {
+            path: urlPath,
+            method: 'POST',
+            headers: headerParameters,
+            query: queryParameters,
+            body: (0, CreateMcpPolicyRequest_js_1.CreateMcpPolicyRequestToJSON)(requestParameters['createMcpPolicyRequest']),
+        };
+    }
+    /**
+     * Creates a policy covering the given MCP server ids; each server belongs to at most one policy (the Baseline policy covers every server left out). Each rule names a `runtime_boundary` (`TOOL_INPUT`, `TOOL_OUTPUT` or `BOTH`), an `action`, the detection engines that trigger it, and optional `agent_scope` / `principal_scope` restrictions (`mode: ALL` by default; `ONLY` or `EXCEPT` with explicit agent or group/role ids otherwise). Refused with 409 while the organization is still on `LEGACY`.
+     * Create an MCP policy for one or more servers
+     */
+    async createMcpPolicyRaw(requestParameters, initOverrides) {
+        const requestOptions = await this.createMcpPolicyRequestOpts(requestParameters);
+        const response = await this.request(requestOptions, initOverrides);
+        return new runtime.JSONApiResponse(response, (jsonValue) => (0, McpPolicyResponse_js_1.McpPolicyResponseFromJSON)(jsonValue));
+    }
+    /**
+     * Creates a policy covering the given MCP server ids; each server belongs to at most one policy (the Baseline policy covers every server left out). Each rule names a `runtime_boundary` (`TOOL_INPUT`, `TOOL_OUTPUT` or `BOTH`), an `action`, the detection engines that trigger it, and optional `agent_scope` / `principal_scope` restrictions (`mode: ALL` by default; `ONLY` or `EXCEPT` with explicit agent or group/role ids otherwise). Refused with 409 while the organization is still on `LEGACY`.
+     * Create an MCP policy for one or more servers
+     */
+    async createMcpPolicy(requestParameters, initOverrides) {
+        const response = await this.createMcpPolicyRaw(requestParameters, initOverrides);
+        return await response.value();
+    }
     /**
      * Creates request options for deleteAllowListEntry without sending the request
      */
@@ -506,6 +571,7 @@ class DlpApi extends runtime.BaseAPI {
         };
     }
     /**
+     * Once an organization manages MCP traffic with `/mcp-policies` (see `GET /mcp-policies`\'s `policy_model`), deleting an MCP-targeted policy is refused with 409 -- delete the corresponding MCP policy instead; model-provider policies are unaffected.
      * Delete an enforcement policy
      */
     async deleteEnforcementPolicyRaw(requestParameters, initOverrides) {
@@ -514,6 +580,7 @@ class DlpApi extends runtime.BaseAPI {
         return new runtime.VoidApiResponse(response);
     }
     /**
+     * Once an organization manages MCP traffic with `/mcp-policies` (see `GET /mcp-policies`\'s `policy_model`), deleting an MCP-targeted policy is refused with 409 -- delete the corresponding MCP policy instead; model-provider policies are unaffected.
      * Delete an enforcement policy
      */
     async deleteEnforcementPolicy(requestParameters, initOverrides) {
@@ -572,6 +639,61 @@ class DlpApi extends runtime.BaseAPI {
     async deleteFieldControlPolicy(requestParameters, initOverrides) {
         await this.deleteFieldControlPolicyRaw(requestParameters, initOverrides);
     }
+    /**
+     * Creates request options for deleteMcpPolicy without sending the request
+     */
+    async deleteMcpPolicyRequestOpts(requestParameters) {
+        if (requestParameters['id'] == null) {
+            throw new runtime.RequiredError('id', 'Required parameter "id" was null or undefined when calling deleteMcpPolicy().');
+        }
+        const queryParameters = {};
+        const headerParameters = {};
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("ApiKey", []);
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+        let urlPath = `/api/dlp/admin/v1/mcp-policies/{id}`;
+        urlPath = urlPath.replace('{id}', encodeURIComponent(String(requestParameters['id'])));
+        return {
+            path: urlPath,
+            method: 'DELETE',
+            headers: headerParameters,
+            query: queryParameters,
+        };
+    }
+    /**
+     * Deletes the policy; every server it covered is immediately governed by the Baseline policy instead. The Baseline policy itself can\'t be deleted through this route.
+     * Delete an MCP policy; its servers fall back to the Baseline policy
+     */
+    async deleteMcpPolicyRaw(requestParameters, initOverrides) {
+        const requestOptions = await this.deleteMcpPolicyRequestOpts(requestParameters);
+        const response = await this.request(requestOptions, initOverrides);
+        return new runtime.VoidApiResponse(response);
+    }
+    /**
+     * Deletes the policy; every server it covered is immediately governed by the Baseline policy instead. The Baseline policy itself can\'t be deleted through this route.
+     * Delete an MCP policy; its servers fall back to the Baseline policy
+     */
+    async deleteMcpPolicy(requestParameters, initOverrides) {
+        await this.deleteMcpPolicyRaw(requestParameters, initOverrides);
+    }
     /**
      * Creates request options for deleteProviderConnection without sending the request
      */
@@ -892,6 +1014,114 @@ class DlpApi extends runtime.BaseAPI {
         const response = await this.getFieldControlPolicyRaw(requestParameters, initOverrides);
         return await response.value();
     }
+    /**
+     * Creates request options for getMcpBaselinePolicy without sending the request
+     */
+    async getMcpBaselinePolicyRequestOpts() {
+        const queryParameters = {};
+        const headerParameters = {};
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("ApiKey", []);
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+        let urlPath = `/api/dlp/admin/v1/mcp-baseline-policy`;
+        return {
+            path: urlPath,
+            method: 'GET',
+            headers: headerParameters,
+            query: queryParameters,
+        };
+    }
+    /**
+     * Returns `policy: null` until the Baseline policy\'s first save -- until then no rule applies to servers that have no policy of their own.
+     * Fetch the Baseline policy, which covers every server without its own policy
+     */
+    async getMcpBaselinePolicyRaw(initOverrides) {
+        const requestOptions = await this.getMcpBaselinePolicyRequestOpts();
+        const response = await this.request(requestOptions, initOverrides);
+        return new runtime.JSONApiResponse(response, (jsonValue) => (0, McpBaselinePolicyResponse_js_1.McpBaselinePolicyResponseFromJSON)(jsonValue));
+    }
+    /**
+     * Returns `policy: null` until the Baseline policy\'s first save -- until then no rule applies to servers that have no policy of their own.
+     * Fetch the Baseline policy, which covers every server without its own policy
+     */
+    async getMcpBaselinePolicy(initOverrides) {
+        const response = await this.getMcpBaselinePolicyRaw(initOverrides);
+        return await response.value();
+    }
+    /**
+     * Creates request options for getMcpPolicy without sending the request
+     */
+    async getMcpPolicyRequestOpts(requestParameters) {
+        if (requestParameters['id'] == null) {
+            throw new runtime.RequiredError('id', 'Required parameter "id" was null or undefined when calling getMcpPolicy().');
+        }
+        const queryParameters = {};
+        const headerParameters = {};
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("ApiKey", []);
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+        let urlPath = `/api/dlp/admin/v1/mcp-policies/{id}`;
+        urlPath = urlPath.replace('{id}', encodeURIComponent(String(requestParameters['id'])));
+        return {
+            path: urlPath,
+            method: 'GET',
+            headers: headerParameters,
+            query: queryParameters,
+        };
+    }
+    /**
+     * Returns the policy\'s servers and rules. Each rule\'s `agent_scope` and `principal_scope` default to `mode: ALL` (every AI agent, or every user); `ONLY`/`EXCEPT` narrow it to the given registry agent ids, or IdP group/role ids.
+     * Fetch one MCP policy
+     */
+    async getMcpPolicyRaw(requestParameters, initOverrides) {
+        const requestOptions = await this.getMcpPolicyRequestOpts(requestParameters);
+        const response = await this.request(requestOptions, initOverrides);
+        return new runtime.JSONApiResponse(response, (jsonValue) => (0, McpPolicyResponse_js_1.McpPolicyResponseFromJSON)(jsonValue));
+    }
+    /**
+     * Returns the policy\'s servers and rules. Each rule\'s `agent_scope` and `principal_scope` default to `mode: ALL` (every AI agent, or every user); `ONLY`/`EXCEPT` narrow it to the given registry agent ids, or IdP group/role ids.
+     * Fetch one MCP policy
+     */
+    async getMcpPolicy(requestParameters, initOverrides) {
+        const response = await this.getMcpPolicyRaw(requestParameters, initOverrides);
+        return await response.value();
+    }
     /**
      * Creates request options for getProviderConnection without sending the request
      */
@@ -1317,6 +1547,58 @@ class DlpApi extends runtime.BaseAPI {
         const response = await this.listFieldControlPoliciesRaw(initOverrides);
         return await response.value();
     }
+    /**
+     * Creates request options for listMcpPolicies without sending the request
+     */
+    async listMcpPoliciesRequestOpts() {
+        const queryParameters = {};
+        const headerParameters = {};
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("ApiKey", []);
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+        let urlPath = `/api/dlp/admin/v1/mcp-policies`;
+        return {
+            path: urlPath,
+            method: 'GET',
+            headers: headerParameters,
+            query: queryParameters,
+        };
+    }
+    /**
+     * Returns every MCP policy, the Baseline policy first and the rest by name, plus `policy_model`: `SERVER_POLICIES` once the organization manages MCP traffic as one policy per MCP server with a Baseline fallback, or `LEGACY` while it still manages MCP traffic through `/enforcement-policies`. These routes are read-only on `LEGACY` -- writes return 409 until the organization converts.
+     * List the organization\'s MCP policies
+     */
+    async listMcpPoliciesRaw(initOverrides) {
+        const requestOptions = await this.listMcpPoliciesRequestOpts();
+        const response = await this.request(requestOptions, initOverrides);
+        return new runtime.JSONApiResponse(response, (jsonValue) => (0, McpPoliciesResponse_js_1.McpPoliciesResponseFromJSON)(jsonValue));
+    }
+    /**
+     * Returns every MCP policy, the Baseline policy first and the rest by name, plus `policy_model`: `SERVER_POLICIES` once the organization manages MCP traffic as one policy per MCP server with a Baseline fallback, or `LEGACY` while it still manages MCP traffic through `/enforcement-policies`. These routes are read-only on `LEGACY` -- writes return 409 until the organization converts.
+     * List the organization\'s MCP policies
+     */
+    async listMcpPolicies(initOverrides) {
+        const response = await this.listMcpPoliciesRaw(initOverrides);
+        return await response.value();
+    }
     /**
      * Creates request options for listProviderConnections without sending the request
      */
@@ -1523,6 +1805,63 @@ class DlpApi extends runtime.BaseAPI {
         const response = await this.providerConnectionGoogleImpersonationConfigRaw(initOverrides);
         return await response.value();
     }
+    /**
+     * Creates request options for putMcpBaselinePolicy without sending the request
+     */
+    async putMcpBaselinePolicyRequestOpts(requestParameters) {
+        if (requestParameters['putMcpBaselinePolicyRequest'] == null) {
+            throw new runtime.RequiredError('putMcpBaselinePolicyRequest', 'Required parameter "putMcpBaselinePolicyRequest" was null or undefined when calling putMcpBaselinePolicy().');
+        }
+        const queryParameters = {};
+        const headerParameters = {};
+        headerParameters['Content-Type'] = 'application/json';
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("ApiKey", []);
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+        let urlPath = `/api/dlp/admin/v1/mcp-baseline-policy`;
+        return {
+            path: urlPath,
+            method: 'PUT',
+            headers: headerParameters,
+            query: queryParameters,
+            body: (0, PutMcpBaselinePolicyRequest_js_1.PutMcpBaselinePolicyRequestToJSON)(requestParameters['putMcpBaselinePolicyRequest']),
+        };
+    }
+    /**
+     * Replaces the Baseline policy\'s whole rule set (keep an existing rule by passing its `id` back); there is no partial update. The Baseline policy has no server list of its own -- it covers whatever servers no other policy claims.
+     * Replace the Baseline policy\'s rules, creating it on first save
+     */
+    async putMcpBaselinePolicyRaw(requestParameters, initOverrides) {
+        const requestOptions = await this.putMcpBaselinePolicyRequestOpts(requestParameters);
+        const response = await this.request(requestOptions, initOverrides);
+        return new runtime.JSONApiResponse(response, (jsonValue) => (0, McpPolicyResponse_js_1.McpPolicyResponseFromJSON)(jsonValue));
+    }
+    /**
+     * Replaces the Baseline policy\'s whole rule set (keep an existing rule by passing its `id` back); there is no partial update. The Baseline policy has no server list of its own -- it covers whatever servers no other policy claims.
+     * Replace the Baseline policy\'s rules, creating it on first save
+     */
+    async putMcpBaselinePolicy(requestParameters, initOverrides) {
+        const response = await this.putMcpBaselinePolicyRaw(requestParameters, initOverrides);
+        return await response.value();
+    }
     /**
      * Creates request options for setFieldControlCatalogUnlistedTableAction without sending the request
      */
@@ -1857,6 +2196,7 @@ class DlpApi extends runtime.BaseAPI {
         };
     }
     /**
+     * Once an organization manages MCP traffic with `/mcp-policies` (see `GET /mcp-policies`\'s `policy_model`), updates to an MCP-targeted policy are refused with 409 -- edit the corresponding MCP policy instead; model-provider policies are unaffected.
      * Update an enforcement policy
      */
     async updateEnforcementPolicyRaw(requestParameters, initOverrides) {
@@ -1865,6 +2205,7 @@ class DlpApi extends runtime.BaseAPI {
         return new runtime.JSONApiResponse(response, (jsonValue) => (0, EnforcementPolicyResponse_js_1.EnforcementPolicyResponseFromJSON)(jsonValue));
     }
     /**
+     * Once an organization manages MCP traffic with `/mcp-policies` (see `GET /mcp-policies`\'s `policy_model`), updates to an MCP-targeted policy are refused with 409 -- edit the corresponding MCP policy instead; model-provider policies are unaffected.
      * Update an enforcement policy
      */
     async updateEnforcementPolicy(requestParameters, initOverrides) {
@@ -1930,6 +2271,67 @@ class DlpApi extends runtime.BaseAPI {
         const response = await this.updateFieldControlPolicyRaw(requestParameters, initOverrides);
         return await response.value();
     }
+    /**
+     * Creates request options for updateMcpPolicy without sending the request
+     */
+    async updateMcpPolicyRequestOpts(requestParameters) {
+        if (requestParameters['id'] == null) {
+            throw new runtime.RequiredError('id', 'Required parameter "id" was null or undefined when calling updateMcpPolicy().');
+        }
+        if (requestParameters['updateMcpPolicyRequest'] == null) {
+            throw new runtime.RequiredError('updateMcpPolicyRequest', 'Required parameter "updateMcpPolicyRequest" was null or undefined when calling updateMcpPolicy().');
+        }
+        const queryParameters = {};
+        const headerParameters = {};
+        headerParameters['Content-Type'] = 'application/json';
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("ApiKey", []);
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+        let urlPath = `/api/dlp/admin/v1/mcp-policies/{id}`;
+        urlPath = urlPath.replace('{id}', encodeURIComponent(String(requestParameters['id'])));
+        return {
+            path: urlPath,
+            method: 'PUT',
+            headers: headerParameters,
+            query: queryParameters,
+            body: (0, UpdateMcpPolicyRequest_js_1.UpdateMcpPolicyRequestToJSON)(requestParameters['updateMcpPolicyRequest']),
+        };
+    }
+    /**
+     * Partial update: omitted fields are left unchanged, and a `rules` list replaces the whole set (keep an existing rule by passing its `id` back). The Baseline policy can\'t be edited here -- use `/mcp-baseline-policy`.
+     * Update an MCP policy\'s name, servers or rules
+     */
+    async updateMcpPolicyRaw(requestParameters, initOverrides) {
+        const requestOptions = await this.updateMcpPolicyRequestOpts(requestParameters);
+        const response = await this.request(requestOptions, initOverrides);
+        return new runtime.JSONApiResponse(response, (jsonValue) => (0, McpPolicyResponse_js_1.McpPolicyResponseFromJSON)(jsonValue));
+    }
+    /**
+     * Partial update: omitted fields are left unchanged, and a `rules` list replaces the whole set (keep an existing rule by passing its `id` back). The Baseline policy can\'t be edited here -- use `/mcp-baseline-policy`.
+     * Update an MCP policy\'s name, servers or rules
+     */
+    async updateMcpPolicy(requestParameters, initOverrides) {
+        const response = await this.updateMcpPolicyRaw(requestParameters, initOverrides);
+        return await response.value();
+    }
     /**
      * Creates request options for upsertConnection without sending the request
      */

package/dist/apis/IdentityApi.d.ts

@@ -2,7 +2,7 @@
  * Barndoor.ai Public API
  * Unified public API specification for Barndoor.ai platform
  *
- * The version of the OpenAPI document: 2.25.0
+ * The version of the OpenAPI document: 2.27.0
  *
  *
  * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).

package/dist/apis/IdentityApi.js

@@ -5,7 +5,7 @@
  * Barndoor.ai Public API
  * Unified public API specification for Barndoor.ai platform
  *
- * The version of the OpenAPI document: 2.25.0
+ * The version of the OpenAPI document: 2.27.0
  *
  *
  * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).

package/dist/apis/LlmGatewayApi.d.ts

@@ -2,7 +2,7 @@
  * Barndoor.ai Public API
  * Unified public API specification for Barndoor.ai platform
  *
- * The version of the OpenAPI document: 2.25.0
+ * The version of the OpenAPI document: 2.27.0
  *
  *
  * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).

package/dist/apis/LlmGatewayApi.js

@@ -5,7 +5,7 @@
  * Barndoor.ai Public API
  * Unified public API specification for Barndoor.ai platform
  *
- * The version of the OpenAPI document: 2.25.0
+ * The version of the OpenAPI document: 2.27.0
  *
  *
  * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).

package/dist/apis/NotificationApi.d.ts

@@ -2,7 +2,7 @@
  * Barndoor.ai Public API
  * Unified public API specification for Barndoor.ai platform
  *
- * The version of the OpenAPI document: 2.25.0
+ * The version of the OpenAPI document: 2.27.0
  *
  *
  * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).

package/dist/apis/NotificationApi.js

@@ -5,7 +5,7 @@
  * Barndoor.ai Public API
  * Unified public API specification for Barndoor.ai platform
  *
- * The version of the OpenAPI document: 2.25.0
+ * The version of the OpenAPI document: 2.27.0
  *
  *
  * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).

package/dist/apis/PolicyApi.d.ts

@@ -2,7 +2,7 @@
  * Barndoor.ai Public API
  * Unified public API specification for Barndoor.ai platform
  *
- * The version of the OpenAPI document: 2.25.0
+ * The version of the OpenAPI document: 2.27.0
  *
  *
  * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).

package/dist/apis/PolicyApi.js

@@ -5,7 +5,7 @@
  * Barndoor.ai Public API
  * Unified public API specification for Barndoor.ai platform
  *
- * The version of the OpenAPI document: 2.25.0
+ * The version of the OpenAPI document: 2.27.0
  *
  *
  * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).

package/dist/apis/RegistryApi.d.ts

@@ -2,7 +2,7 @@
  * Barndoor.ai Public API
  * Unified public API specification for Barndoor.ai platform
  *
- * The version of the OpenAPI document: 2.25.0
+ * The version of the OpenAPI document: 2.27.0
  *
  *
  * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).

package/dist/apis/RegistryApi.js

@@ -5,7 +5,7 @@
  * Barndoor.ai Public API
  * Unified public API specification for Barndoor.ai platform
  *
- * The version of the OpenAPI document: 2.25.0
+ * The version of the OpenAPI document: 2.27.0
  *
  *
  * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).

package/dist/apis/SystemManagementApi.d.ts

@@ -2,7 +2,7 @@
  * Barndoor.ai Public API
  * Unified public API specification for Barndoor.ai platform
  *
- * The version of the OpenAPI document: 2.25.0
+ * The version of the OpenAPI document: 2.27.0
  *
  *
  * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).

package/dist/apis/SystemManagementApi.js

@@ -5,7 +5,7 @@
  * Barndoor.ai Public API
  * Unified public API specification for Barndoor.ai platform
  *
- * The version of the OpenAPI document: 2.25.0
+ * The version of the OpenAPI document: 2.27.0
  *
  *
  * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).