@intelmesh/sdk 0.1.0

package/dist/index.d.ts

@@ -0,0 +1,1293 @@
+/** Severity levels for decisions. */
+type Severity = 'low' | 'medium' | 'high' | 'critical';
+/** Rule flow control. */
+type Flow = 'continue' | 'skip_phase' | 'halt';
+/** A decision produced by rule evaluation. */
+interface Decision {
+    readonly action: string;
+    readonly severity: Severity;
+    readonly metadata?: Readonly<Record<string, unknown>>;
+}
+/** Score mutation attached to rule actions. */
+interface ScoreOperation {
+    readonly add: number;
+}
+/** A side-effect mutation triggered by a rule (e.g. list add/remove). */
+interface ListMutation {
+    readonly type: string;
+    readonly target: string;
+    readonly value_path: string;
+}
+/** Actions triggered when a rule matches. */
+interface Actions {
+    readonly decision?: Decision;
+    readonly flow?: Flow;
+    readonly score?: ScoreOperation;
+    readonly mutations?: readonly ListMutation[];
+}
+/** A rule definition. */
+interface Rule {
+    readonly id: string;
+    readonly name: string;
+    readonly expression: string;
+    readonly applicable_when: string;
+    readonly phase_id: string;
+    readonly priority: number;
+    readonly enabled: boolean;
+    readonly dry_run: boolean;
+    readonly actions: Actions;
+    readonly current_version_id: string;
+    readonly created_at: string;
+    readonly updated_at: string;
+}
+/** A versioned snapshot of a rule. */
+interface RuleVersion {
+    readonly id: string;
+    readonly rule_id: string;
+    readonly version: number;
+    readonly name: string;
+    readonly expression: string;
+    readonly applicable_when: string;
+    readonly phase_id: string;
+    readonly priority: number;
+    readonly enabled: boolean;
+    readonly dry_run: boolean;
+    readonly actions: readonly number[];
+    readonly created_at: string;
+}
+/** Payload to create a rule. */
+interface CreateRuleRequest {
+    readonly name: string;
+    readonly expression: string;
+    readonly applicable_when: string;
+    readonly phase_id: string;
+    readonly priority: number;
+    readonly enabled: boolean;
+    readonly dry_run: boolean;
+    readonly actions: Actions;
+}
+/** Payload to update a rule. */
+interface UpdateRuleRequest {
+    readonly name?: string;
+    readonly expression?: string;
+    readonly applicable_when?: string;
+    readonly phase_id?: string;
+    readonly priority?: number;
+    readonly enabled?: boolean;
+    readonly dry_run?: boolean;
+    readonly actions?: Actions;
+}
+/** An evaluation phase in the pipeline. */
+interface Phase {
+    readonly id: string;
+    readonly name: string;
+    readonly position: number;
+    readonly applicable_when?: string;
+    readonly created_at: string;
+}
+/** Payload to create a phase. */
+interface CreatePhaseRequest {
+    readonly name: string;
+    readonly position: number;
+    readonly applicable_when?: string;
+}
+/** Payload to update a phase. */
+interface UpdatePhaseRequest {
+    readonly name?: string;
+    readonly position?: number;
+    readonly applicable_when?: string;
+}
+/** A scope definition for event field projection. */
+interface Scope {
+    readonly id: string;
+    readonly name: string;
+    readonly json_path: string;
+    readonly created_at: string;
+}
+/** Payload to create a scope. */
+interface CreateScopeRequest {
+    readonly name: string;
+    readonly json_path: string;
+}
+/** Payload to update a scope. */
+interface UpdateScopeRequest {
+    readonly name?: string;
+    readonly json_path?: string;
+}
+/** A named list (blocklist, allowlist, etc.). */
+interface List {
+    readonly id: string;
+    readonly name: string;
+    readonly description: string;
+    readonly created_at: string;
+    readonly updated_at: string;
+}
+/** Payload to create a list. */
+interface CreateListRequest {
+    readonly name: string;
+    readonly description: string;
+}
+/** Payload to update a list. */
+interface UpdateListRequest {
+    readonly name?: string;
+    readonly description?: string;
+}
+/** Payload to add items to a list. */
+interface AddItemsRequest {
+    readonly values: readonly string[];
+}
+/** Payload to bulk-import items into a list. */
+interface BulkImportRequest {
+    readonly values: readonly string[];
+}
+/** A score entry for a scope. */
+interface Score {
+    readonly scope_name: string;
+    readonly scope_value: string;
+    readonly score: number;
+}
+/** Payload to set a score. */
+interface SetScoreRequest {
+    readonly value: number;
+}
+/** An API key. */
+interface APIKey {
+    readonly id: string;
+    readonly name: string;
+    readonly enabled: boolean;
+    readonly permissions: readonly string[];
+    readonly created_at: string;
+    readonly last_used_at?: string;
+}
+/** Payload to create an API key. */
+interface CreateAPIKeyRequest {
+    readonly name: string;
+    readonly permissions: readonly string[];
+}
+/** Response after creating an API key (plain key shown once). */
+interface CreateAPIKeyResponse {
+    readonly id: string;
+    readonly name: string;
+    readonly key: string;
+    readonly enabled: boolean;
+    readonly permissions: readonly string[];
+}
+/** Payload to update an API key. */
+interface UpdateAPIKeyRequest {
+    readonly name?: string;
+    readonly enabled?: boolean;
+    readonly permissions?: readonly string[];
+}
+/** Payload to ingest an event. */
+interface IngestRequest {
+    readonly event_type: string;
+    readonly payload: Readonly<Record<string, unknown>>;
+    readonly idempotency_key?: string;
+}
+/** Result of a synchronous event ingestion. */
+interface IngestResult {
+    readonly event_id: string;
+    readonly decision: Decision;
+    readonly transient_score: number;
+    readonly duration_ms: number;
+}
+/** Trace of a single rule evaluation. */
+interface RuleTrace {
+    readonly rule_id: string;
+    readonly rule_name: string;
+    readonly rule_version_id: string;
+    readonly matched: boolean;
+    readonly skipped: boolean;
+    readonly dry_run: boolean;
+    readonly decision?: Decision;
+    readonly flow: string;
+    readonly score_delta: number;
+    readonly duration_ms: number;
+}
+/** Trace of a phase evaluation. */
+interface PhaseTrace {
+    readonly name: string;
+    readonly duration_ms: number;
+    readonly rules: readonly RuleTrace[];
+}
+/** Full pipeline trace. */
+interface PipelineTrace {
+    readonly phases: readonly PhaseTrace[];
+}
+/** An evaluation log entry. */
+interface EvaluationLog {
+    readonly id: string;
+    readonly event_id: string;
+    readonly event_type: string;
+    readonly decision: Decision;
+    readonly duration_ms: number;
+    readonly pipeline_trace: PipelineTrace;
+    readonly created_at: string;
+}
+/** A paginated response envelope. */
+interface PaginatedResponse<T> {
+    readonly items: readonly T[];
+    readonly count: number;
+    readonly next_cursor?: string;
+}
+/** Common pagination parameters. */
+interface PaginationParams {
+    readonly cursor?: string;
+    readonly limit?: number;
+}
+/** Success response envelope. */
+interface SuccessResponse<T> {
+    readonly data: T;
+}
+/** Error body. */
+interface ErrorBody {
+    readonly code: string;
+    readonly message: string;
+}
+/** Error response envelope. */
+interface ErrorResponse {
+    readonly error: ErrorBody;
+}
+/** Configuration for the IntelMesh client. */
+interface ClientConfig {
+    /** Base URL of the IntelMesh API (e.g. "https://api.intelmesh.io"). */
+    readonly baseUrl: string;
+    /** API key for authentication. */
+    readonly apiKey: string;
+    /** Optional request timeout in milliseconds (default: 30000). */
+    readonly timeout?: number;
+    /** Optional custom fetch implementation. */
+    readonly fetch?: typeof globalThis.fetch;
+}
+/** Mutation result containing the updated resource. */
+interface Mutation<T> {
+    readonly data: T;
+}
+
+/** HTTP methods supported by the client. */
+type HttpMethod = 'GET' | 'POST' | 'PUT' | 'DELETE';
+/** Options for a single HTTP request. */
+interface RequestOptions {
+    readonly method: HttpMethod;
+    readonly path: string;
+    readonly body?: unknown;
+    readonly query?: Readonly<Record<string, string | number | undefined>>;
+    readonly signal?: AbortSignal;
+}
+/**
+ * Low-level HTTP client for the IntelMesh API.
+ * Handles authentication, serialization, and error mapping.
+ */
+declare class HttpClient {
+    private readonly baseUrl;
+    private readonly apiKey;
+    private readonly timeout;
+    private readonly fetchFn;
+    constructor(config: ClientConfig);
+    /**
+     * Executes a GET request and returns the parsed data.
+     * @param path - The API path.
+     * @param query - Optional query parameters.
+     * @returns The response data of type T.
+     */
+    get<T>(path: string, query?: RequestOptions['query']): Promise<T>;
+    /**
+     * Executes a POST request and returns the parsed data.
+     * @param path - The API path.
+     * @param body - The request body.
+     * @returns The response data of type T.
+     */
+    post<T>(path: string, body: unknown): Promise<T>;
+    /**
+     * Executes a PUT request and returns the parsed data.
+     * @param path - The API path.
+     * @param body - The request body.
+     * @returns The response data of type T.
+     */
+    put<T>(path: string, body: unknown): Promise<T>;
+    /**
+     * Executes a DELETE request and returns the parsed data.
+     * @param path - The API path.
+     * @returns The response data of type T.
+     */
+    delete<T>(path: string): Promise<T>;
+    /**
+     * Builds the full URL with query parameters.
+     * @param path - The API path.
+     * @param query - Optional query parameters.
+     * @returns The full URL string.
+     */
+    private buildUrl;
+    /**
+     * Executes an HTTP request with timeout, auth, and error handling.
+     * @param options - The request options.
+     * @returns The parsed response data.
+     */
+    private request;
+    /**
+     * Calls fetch with the configured headers and body.
+     * @param url - The full URL.
+     * @param options - The request options.
+     * @param signal - The abort signal.
+     * @returns The fetch Response.
+     */
+    private executeFetch;
+    /**
+     * Parses the response and throws typed errors for non-2xx status.
+     * @param response - The fetch Response.
+     * @returns The parsed data.
+     */
+    private handleResponse;
+    /**
+     * Parses and throws an API error from the response body.
+     * @param status - The HTTP status code.
+     * @param text - The raw response body.
+     */
+    private throwApiError;
+    /**
+     * Safely parses JSON with a typed parse error.
+     * @param text - The raw JSON text.
+     * @returns The parsed JSON object.
+     */
+    private parseJson;
+    /**
+     * Wraps unexpected errors into NetworkError.
+     * @param error - The caught error.
+     * @returns A NetworkError or the original error.
+     */
+    private wrapError;
+}
+
+/**
+ * Resource for API key management.
+ */
+declare class APIKeys {
+    private readonly http;
+    constructor(http: HttpClient);
+    /**
+     * Lists all API keys with cursor-based pagination.
+     * @param params - Optional pagination parameters.
+     * @returns A paginated list of API keys.
+     */
+    list(params?: PaginationParams): Promise<PaginatedResponse<APIKey>>;
+    /**
+     * Creates a new API key. The plain key is returned only at creation time.
+     * @param request - The API key creation payload.
+     * @returns The created API key with the plain key value.
+     */
+    create(request: CreateAPIKeyRequest): Promise<CreateAPIKeyResponse>;
+    /**
+     * Updates an existing API key by ID.
+     * @param id - The API key ID.
+     * @param request - The update payload.
+     * @returns The updated API key.
+     */
+    update(id: string, request: UpdateAPIKeyRequest): Promise<APIKey>;
+    /**
+     * Deletes an API key by ID.
+     * @param id - The API key ID.
+     */
+    delete(id: string): Promise<void>;
+}
+
+/**
+ * Resource for audit log access.
+ */
+declare class Audit {
+    private readonly http;
+    constructor(http: HttpClient);
+    /**
+     * Lists audit logs with cursor-based pagination.
+     * @param params - Optional pagination parameters.
+     * @returns A paginated list of audit entries.
+     */
+    list(params?: PaginationParams): Promise<PaginatedResponse<EvaluationLog>>;
+}
+
+/**
+ * Resource for evaluation log inspection.
+ */
+declare class Evaluations {
+    private readonly http;
+    constructor(http: HttpClient);
+    /**
+     * Lists evaluation logs with cursor-based pagination.
+     * @param params - Optional pagination parameters.
+     * @returns A paginated list of evaluation logs.
+     */
+    list(params?: PaginationParams): Promise<PaginatedResponse<EvaluationLog>>;
+    /**
+     * Retrieves a single evaluation log by ID.
+     * @param id - The evaluation log ID.
+     * @returns The evaluation log with full pipeline trace.
+     */
+    get(id: string): Promise<EvaluationLog>;
+}
+
+/**
+ * Resource for event ingestion operations.
+ */
+declare class Events {
+    private readonly http;
+    constructor(http: HttpClient);
+    /**
+     * Ingests an event synchronously and returns the decision.
+     * @param request - The ingest request payload.
+     * @returns The ingestion result with decision and score.
+     */
+    ingest(request: IngestRequest): Promise<IngestResult>;
+    /**
+     * Ingests an event asynchronously (fire-and-forget with acknowledgement).
+     * @param request - The ingest request payload.
+     * @returns The event ID assigned by the server.
+     */
+    ingestAsync(request: IngestRequest): Promise<string>;
+    /**
+     * Ingests an event for storage only, without evaluation.
+     * @param request - The ingest request payload.
+     * @returns The event ID assigned by the server.
+     */
+    ingestOnly(request: IngestRequest): Promise<string>;
+    /**
+     * Simulates event evaluation without persisting (dry-run).
+     * @param request - The ingest request payload.
+     * @returns The simulated result with decision and trace.
+     */
+    simulate(request: IngestRequest): Promise<IngestResult>;
+}
+
+/**
+ * Resource for named list management (blocklists, allowlists, etc.).
+ */
+declare class Lists {
+    private readonly http;
+    constructor(http: HttpClient);
+    /**
+     * Lists all named lists with cursor-based pagination.
+     * @param params - Optional pagination parameters.
+     * @returns A paginated list of named lists.
+     */
+    list(params?: PaginationParams): Promise<PaginatedResponse<List>>;
+    /**
+     * Retrieves a single list by ID.
+     * @param id - The list ID.
+     * @returns The list.
+     */
+    get(id: string): Promise<List>;
+    /**
+     * Creates a new named list.
+     * @param request - The list creation payload.
+     * @returns The created list.
+     */
+    create(request: CreateListRequest): Promise<List>;
+    /**
+     * Updates an existing list by ID.
+     * @param id - The list ID.
+     * @param request - The update payload.
+     * @returns The updated list.
+     */
+    update(id: string, request: UpdateListRequest): Promise<List>;
+    /**
+     * Deletes a list by ID.
+     * @param id - The list ID.
+     */
+    delete(id: string): Promise<void>;
+    /**
+     * Adds items to a list.
+     * @param listId - The list ID.
+     * @param request - The items to add.
+     */
+    addItems(listId: string, request: AddItemsRequest): Promise<void>;
+    /**
+     * Bulk-imports items into a list, replacing existing items.
+     * @param listId - The list ID.
+     * @param request - The items to import.
+     */
+    bulkImport(listId: string, request: BulkImportRequest): Promise<void>;
+}
+
+/**
+ * Resource for pipeline phase management.
+ */
+declare class Phases {
+    private readonly http;
+    constructor(http: HttpClient);
+    /**
+     * Lists all phases with cursor-based pagination.
+     * @param params - Optional pagination parameters.
+     * @returns A paginated list of phases.
+     */
+    list(params?: PaginationParams): Promise<PaginatedResponse<Phase>>;
+    /**
+     * Retrieves a single phase by ID.
+     * @param id - The phase ID.
+     * @returns The phase.
+     */
+    get(id: string): Promise<Phase>;
+    /**
+     * Creates a new phase.
+     * @param request - The phase creation payload.
+     * @returns The created phase.
+     */
+    create(request: CreatePhaseRequest): Promise<Phase>;
+    /**
+     * Updates an existing phase by ID.
+     * @param id - The phase ID.
+     * @param request - The update payload.
+     * @returns The updated phase.
+     */
+    update(id: string, request: UpdatePhaseRequest): Promise<Phase>;
+    /**
+     * Deletes a phase by ID.
+     * @param id - The phase ID.
+     */
+    delete(id: string): Promise<void>;
+}
+
+/**
+ * Resource for rule management operations.
+ */
+declare class Rules {
+    private readonly http;
+    constructor(http: HttpClient);
+    /**
+     * Lists all rules with cursor-based pagination.
+     * @param params - Optional pagination parameters.
+     * @returns A paginated list of rules.
+     */
+    list(params?: PaginationParams): Promise<PaginatedResponse<Rule>>;
+    /**
+     * Retrieves a single rule by ID.
+     * @param id - The rule ID.
+     * @returns The rule.
+     */
+    get(id: string): Promise<Rule>;
+    /**
+     * Creates a new rule.
+     * @param request - The rule creation payload.
+     * @returns The created rule.
+     */
+    create(request: CreateRuleRequest): Promise<Rule>;
+    /**
+     * Updates an existing rule by ID.
+     * @param id - The rule ID.
+     * @param request - The update payload.
+     * @returns The updated rule.
+     */
+    update(id: string, request: UpdateRuleRequest): Promise<Rule>;
+    /**
+     * Deletes a rule by ID.
+     * @param id - The rule ID.
+     */
+    delete(id: string): Promise<void>;
+    /**
+     * Lists all versions of a rule.
+     * @param ruleId - The rule ID.
+     * @param params - Optional pagination parameters.
+     * @returns A paginated list of rule versions.
+     */
+    listVersions(ruleId: string, params?: PaginationParams): Promise<PaginatedResponse<RuleVersion>>;
+    /**
+     * Retrieves a specific version of a rule.
+     * @param ruleId - The rule ID.
+     * @param versionId - The version ID.
+     * @returns The rule version.
+     */
+    getVersion(ruleId: string, versionId: string): Promise<RuleVersion>;
+}
+
+/**
+ * Resource for score management.
+ */
+declare class Scores {
+    private readonly http;
+    constructor(http: HttpClient);
+    /**
+     * Retrieves a score for a specific scope name and value.
+     * @param scopeName - The scope name (e.g. "customer_id").
+     * @param scopeValue - The scope value (e.g. "12345678900").
+     * @returns The score entry.
+     */
+    get(scopeName: string, scopeValue: string): Promise<Score>;
+    /**
+     * Lists scores for a scope name with cursor-based pagination.
+     * @param scopeName - The scope name.
+     * @param params - Optional pagination parameters.
+     * @returns A paginated list of scores.
+     */
+    list(scopeName: string, params?: PaginationParams): Promise<PaginatedResponse<Score>>;
+    /**
+     * Sets a score for a specific scope name and value.
+     * @param scopeName - The scope name.
+     * @param scopeValue - The scope value.
+     * @param request - The score value to set.
+     * @returns The updated score.
+     */
+    set(scopeName: string, scopeValue: string, request: SetScoreRequest): Promise<Score>;
+    /**
+     * Resets a score to zero for a specific scope name and value.
+     * @param scopeName - The scope name.
+     * @param scopeValue - The scope value.
+     */
+    reset(scopeName: string, scopeValue: string): Promise<void>;
+}
+
+/**
+ * Resource for scope management.
+ */
+declare class Scopes {
+    private readonly http;
+    constructor(http: HttpClient);
+    /**
+     * Lists all scopes with cursor-based pagination.
+     * @param params - Optional pagination parameters.
+     * @returns A paginated list of scopes.
+     */
+    list(params?: PaginationParams): Promise<PaginatedResponse<Scope>>;
+    /**
+     * Retrieves a single scope by ID.
+     * @param id - The scope ID.
+     * @returns The scope.
+     */
+    get(id: string): Promise<Scope>;
+    /**
+     * Creates a new scope.
+     * @param request - The scope creation payload.
+     * @returns The created scope.
+     */
+    create(request: CreateScopeRequest): Promise<Scope>;
+    /**
+     * Updates an existing scope by ID.
+     * @param id - The scope ID.
+     * @param request - The update payload.
+     * @returns The updated scope.
+     */
+    update(id: string, request: UpdateScopeRequest): Promise<Scope>;
+    /**
+     * Deletes a scope by ID.
+     * @param id - The scope ID.
+     */
+    delete(id: string): Promise<void>;
+}
+
+/**
+ * Main IntelMesh SDK client.
+ * Provides access to all API resources through typed sub-clients.
+ */
+declare class IntelMesh {
+    /** Event ingestion and simulation. */
+    readonly events: Events;
+    /** Rule management and versioning. */
+    readonly rules: Rules;
+    /** Pipeline phase management. */
+    readonly phases: Phases;
+    /** Scope management. */
+    readonly scopes: Scopes;
+    /** Named list management. */
+    readonly lists: Lists;
+    /** Score management. */
+    readonly scores: Scores;
+    /** API key management. */
+    readonly apiKeys: APIKeys;
+    /** Evaluation log inspection. */
+    readonly evaluations: Evaluations;
+    /** Audit log access. */
+    readonly audit: Audit;
+    /**
+     * Creates a new IntelMesh client instance.
+     * @param config - Client configuration with baseUrl and apiKey.
+     */
+    constructor(config: ClientConfig);
+}
+
+/** Base error for all IntelMesh SDK errors. */
+declare class IntelMeshError extends Error {
+    /** HTTP status code, if applicable. */
+    readonly status: number;
+    /** Machine-readable error code from the API. */
+    readonly code: string;
+    constructor(message: string, status: number, code: string);
+}
+/** 400 — The request was malformed or invalid. */
+declare class ValidationError extends IntelMeshError {
+    constructor(message: string, code?: string);
+}
+/** 404 — The requested resource was not found. */
+declare class NotFoundError extends IntelMeshError {
+    constructor(message: string, code?: string);
+}
+/** 401 — Authentication failed or missing. */
+declare class UnauthorizedError extends IntelMeshError {
+    constructor(message: string, code?: string);
+}
+/** 403 — Authenticated but insufficient permissions. */
+declare class ForbiddenError extends IntelMeshError {
+    constructor(message: string, code?: string);
+}
+/** 500 — Internal server error. */
+declare class InternalError extends IntelMeshError {
+    constructor(message: string, code?: string);
+}
+/** 503 — Service temporarily unavailable. */
+declare class UnavailableError extends IntelMeshError {
+    constructor(message: string, code?: string);
+}
+/** Network-level failure (no HTTP response received). */
+declare class NetworkError extends IntelMeshError {
+    constructor(message: string);
+}
+/** Failed to parse the API response body. */
+declare class ParseError extends IntelMeshError {
+    constructor(message: string);
+}
+/**
+ * Checks if an error is a NotFoundError.
+ * @param error - The error to check.
+ * @returns True if the error is a NotFoundError.
+ */
+declare function isNotFound(error: unknown): error is NotFoundError;
+/**
+ * Checks if an error is a ValidationError.
+ * @param error - The error to check.
+ * @returns True if the error is a ValidationError.
+ */
+declare function isValidation(error: unknown): error is ValidationError;
+/**
+ * Checks if an error is an UnauthorizedError.
+ * @param error - The error to check.
+ * @returns True if the error is an UnauthorizedError.
+ */
+declare function isUnauthorized(error: unknown): error is UnauthorizedError;
+/**
+ * Checks if an error is a ForbiddenError.
+ * @param error - The error to check.
+ * @returns True if the error is a ForbiddenError.
+ */
+declare function isForbidden(error: unknown): error is ForbiddenError;
+/**
+ * Checks if an error is a NetworkError.
+ * @param error - The error to check.
+ * @returns True if the error is a NetworkError.
+ */
+declare function isNetwork(error: unknown): error is NetworkError;
+/**
+ * Checks if an error is any IntelMeshError.
+ * @param error - The error to check.
+ * @returns True if the error is an IntelMeshError.
+ */
+declare function isIntelMeshError(error: unknown): error is IntelMeshError;
+/**
+ * Maps an HTTP status code and error body to a typed error.
+ * @param status - The HTTP status code.
+ * @param message - The error message from the API.
+ * @param code - The machine-readable error code from the API.
+ * @returns The appropriate typed error instance.
+ */
+declare function mapStatusToError(status: number, message: string, code: string): IntelMeshError;
+
+/** Function that fetches a single page of results. */
+type PageFetcher<T> = (params: PaginationParams) => Promise<PaginatedResponse<T>>;
+/**
+ * Creates an async iterator that automatically follows cursor pagination.
+ * @param fetcher - Function to fetch a single page.
+ * @param params - Initial pagination parameters.
+ * @yields {T} Individual items from paginated responses.
+ * @returns An async iterable of individual items.
+ */
+declare function paginate<T>(fetcher: PageFetcher<T>, params?: PaginationParams): AsyncGenerator<T, void, undefined>;
+/**
+ * Collects all items from an async iterator into an array.
+ * @param iter - The async iterable to collect from.
+ * @returns An array of all items.
+ */
+declare function collectAll<T>(iter: AsyncIterable<T>): Promise<T[]>;
+
+/**
+ * Fluent builder for constructing IngestRequest payloads.
+ */
+declare class EventBuilder {
+    private eventType;
+    private idempotencyKey;
+    private payload;
+    /**
+     * Sets the event type.
+     * @param type - The event type string (e.g. "transaction.pix").
+     * @returns This builder for chaining.
+     */
+    type(type: string): this;
+    /**
+     * Sets the idempotency key for deduplication.
+     * @param key - The idempotency key.
+     * @returns This builder for chaining.
+     */
+    idempotency(key: string): this;
+    /**
+     * Sets a single payload field.
+     * @param key - The field name.
+     * @param value - The field value.
+     * @returns This builder for chaining.
+     */
+    set(key: string, value: unknown): this;
+    /**
+     * Merges multiple fields into the payload.
+     * @param data - Record of fields to merge.
+     * @returns This builder for chaining.
+     */
+    data(data: Record<string, unknown>): this;
+    /**
+     * Builds and returns the IngestRequest.
+     * @returns The constructed IngestRequest.
+     * @throws {Error} If event type is not set.
+     */
+    build(): IngestRequest;
+}
+
+/**
+ * Fluent builder for constructing CreateRuleRequest payloads.
+ */
+declare class RuleBuilder {
+    private ruleName;
+    private ruleExpression;
+    private ruleApplicableWhen;
+    private rulePhaseId;
+    private rulePriority;
+    private ruleEnabled;
+    private ruleDryRun;
+    private ruleActions;
+    /**
+     * Sets the rule name.
+     * @param n - The rule name.
+     * @returns This builder for chaining.
+     */
+    name(n: string): this;
+    /**
+     * Sets the CEL expression for the rule.
+     * @param expr - The CEL expression.
+     * @returns This builder for chaining.
+     */
+    expression(expr: string): this;
+    /**
+     * Sets the condition under which this rule applies.
+     * @param condition - The applicable-when CEL expression.
+     * @returns This builder for chaining.
+     */
+    applicableWhen(condition: string): this;
+    /**
+     * Sets the phase this rule belongs to.
+     * @param id - The phase ID.
+     * @returns This builder for chaining.
+     */
+    phase(id: string): this;
+    /**
+     * Sets the rule priority (lower number = higher priority).
+     * @param p - The priority value.
+     * @returns This builder for chaining.
+     */
+    priority(p: number): this;
+    /**
+     * Sets whether the rule is enabled.
+     * @param value - True to enable, false to disable.
+     * @returns This builder for chaining.
+     */
+    enabled(value: boolean): this;
+    /**
+     * Sets whether the rule runs in dry-run mode.
+     * @param value - True for dry-run.
+     * @returns This builder for chaining.
+     */
+    dryRun(value: boolean): this;
+    /**
+     * Sets the decision action when the rule matches.
+     * @param action - The action string.
+     * @param severity - The severity level.
+     * @returns This builder for chaining.
+     */
+    decide(action: string, severity: Severity): this;
+    /**
+     * Sets the flow control when the rule matches.
+     * @param flow - The flow control value.
+     * @returns This builder for chaining.
+     */
+    flow(flow: Flow): this;
+    /**
+     * Sets the score delta when the rule matches.
+     * @param delta - The score points to add.
+     * @returns This builder for chaining.
+     */
+    scoreDelta(delta: number): this;
+    /**
+     * Builds and returns the CreateRuleRequest.
+     * @returns The constructed CreateRuleRequest.
+     * @throws {Error} If required fields are missing.
+     */
+    build(): CreateRuleRequest;
+}
+
+/** Internal mutation specification. */
+interface MutationSpec {
+    readonly mutationType: string;
+    readonly listName: string;
+    readonly valuePath: string;
+}
+/**
+ * Fluent builder for constructing rules within a Provisioner.
+ * Returned by `Provisioner.rule()`, completed by calling `.done()`.
+ */
+declare class ProvisionRuleBuilder {
+    private readonly parent;
+    /** @internal */ readonly ruleName: string;
+    /** @internal */ phaseName: string;
+    /** @internal */ rulePriority: number;
+    /** @internal */ applicable: string;
+    /** @internal */ expression: string;
+    /** @internal */ ruleDecision: Decision | undefined;
+    /** @internal */ ruleScore: ScoreOperation | undefined;
+    /** @internal */ ruleFlow: Flow | undefined;
+    /** @internal */ ruleMutations: MutationSpec[];
+    /** @internal */ isDryRun: boolean;
+    /**
+     * Constructs a new ProvisionRuleBuilder.
+     * @param parent
+     * @param name
+     * @internal
+     */
+    constructor(parent: Provisioner, name: string);
+    /**
+     * Sets the phase for the rule (by provisioner name, not ID).
+     * @param name - The phase name as registered with the provisioner.
+     * @returns This builder for chaining.
+     */
+    inPhase(name: string): this;
+    /**
+     * Sets the rule priority (lower number = higher priority).
+     * @param p - The priority value.
+     * @returns This builder for chaining.
+     */
+    priority(p: number): this;
+    /**
+     * Sets the applicability expression.
+     * @param expr - The CEL expression for applicability.
+     * @returns This builder for chaining.
+     */
+    applicableWhen(expr: string): this;
+    /**
+     * Sets the matching expression.
+     * @param expr - The CEL expression for matching.
+     * @returns This builder for chaining.
+     */
+    when(expr: string): this;
+    /**
+     * Sets the decision action and severity.
+     * @param action - The action string (e.g. "block").
+     * @param severity - The severity level.
+     * @returns This builder for chaining.
+     */
+    decide(action: string, severity: Severity): this;
+    /**
+     * Adds a score delta for the rule.
+     * @param delta - The score points to add.
+     * @returns This builder for chaining.
+     */
+    addScore(delta: number): this;
+    /**
+     * Sets flow to halt.
+     * @returns This builder for chaining.
+     */
+    halt(): this;
+    /**
+     * Sets flow to continue.
+     * @returns This builder for chaining.
+     */
+    continue(): this;
+    /**
+     * Sets flow to skip_phase.
+     * @returns This builder for chaining.
+     */
+    skipPhase(): this;
+    /**
+     * Adds a list mutation to the rule.
+     * @param mutType - The mutation type (e.g. "list.add").
+     * @param listName - The list name.
+     * @param valuePath - The value path expression.
+     * @returns This builder for chaining.
+     */
+    mutateList(mutType: string, listName: string, valuePath: string): this;
+    /**
+     * Enables dry-run mode for the rule.
+     * @returns This builder for chaining.
+     */
+    dryRun(): this;
+    /**
+     * Finishes building the rule and returns to the parent provisioner.
+     * @returns The parent Provisioner for chaining.
+     */
+    done(): Provisioner;
+    /**
+     * Constructs the SDK Actions from the builder state.
+     * @returns The Actions object for the API request.
+     * @internal
+     */
+    buildActions(): Actions;
+}
+
+/**
+ * Builds and executes a declarative resource plan against the IntelMesh API.
+ * Resources are created in dependency order (phases, scopes, lists, rules)
+ * and torn down in reverse.
+ */
+declare class Provisioner {
+    private readonly client;
+    private readonly steps;
+    private readonly phases;
+    private readonly scopes;
+    private readonly lists;
+    private readonly rules;
+    /**
+     * Creates a new Provisioner backed by the given SDK client.
+     * @param client - The IntelMesh client instance.
+     */
+    constructor(client: IntelMesh);
+    /**
+     * Registers a pipeline phase to be created.
+     * @param name - The phase name.
+     * @param position - The phase position (execution order).
+     * @returns This provisioner for chaining.
+     */
+    phase(name: string, position: number): this;
+    /**
+     * Registers a pipeline phase with an applicable_when CEL expression.
+     * @param name - The phase name.
+     * @param position - The phase position (execution order).
+     * @param applicableWhen - CEL expression controlling when this phase runs.
+     * @returns This provisioner for chaining.
+     */
+    phaseWithFilter(name: string, position: number, applicableWhen: string): this;
+    /**
+     * Registers a scope to be created.
+     * @param name - The scope name.
+     * @param jsonPath - The JSON path expression.
+     * @returns This provisioner for chaining.
+     */
+    scope(name: string, jsonPath: string): this;
+    /**
+     * Registers a named list to be created.
+     * @param name - The list name.
+     * @returns This provisioner for chaining.
+     */
+    list(name: string): this;
+    /**
+     * Starts building a rule and returns a ProvisionRuleBuilder.
+     * @param name - The rule name.
+     * @returns A rule builder for chaining.
+     */
+    rule(name: string): ProvisionRuleBuilder;
+    /**
+     * Adds a completed rule step from the rule builder.
+     * @param rb - The completed rule builder.
+     * @returns This provisioner for chaining.
+     * @internal
+     */
+    _addRuleStep(rb: ProvisionRuleBuilder): this;
+    /**
+     * Creates all registered resources via the API in registration order.
+     * Throws on the first failure.
+     */
+    apply(): Promise<void>;
+    /**
+     * Deletes all created resources in reverse dependency order:
+     * rules, lists, scopes, phases.
+     * Collects errors but continues deleting; throws the first error at the end.
+     */
+    teardown(): Promise<void>;
+    /**
+     * Returns the provisioned ID for the named phase.
+     * @param name - The phase name.
+     * @returns The phase ID, or empty string if not found.
+     */
+    phaseId(name: string): string;
+    /**
+     * Returns the provisioned ID for the named list.
+     * @param name - The list name.
+     * @returns The list ID, or empty string if not found.
+     */
+    listId(name: string): string;
+    /**
+     * Returns the provisioned ID for the named scope.
+     * @param name - The scope name.
+     * @returns The scope ID, or empty string if not found.
+     */
+    scopeId(name: string): string;
+    /**
+     * Returns the provisioned ID for the named rule.
+     * @param name - The rule name.
+     * @returns The rule ID, or empty string if not found.
+     */
+    ruleId(name: string): string;
+    /**
+     * Dispatches a single step to the appropriate creator.
+     * @param step
+     */
+    private applyStep;
+    /**
+     * Creates a phase and stores its ID.
+     * @param step
+     */
+    private createPhase;
+    /**
+     * Creates a scope and stores its ID.
+     * @param step
+     */
+    private createScope;
+    /**
+     * Creates a list and stores its ID.
+     * @param step
+     */
+    private createList;
+    /**
+     * Creates a rule after resolving its phase name to an ID.
+     * @param step
+     */
+    private createRule;
+    /**
+     * Deletes all resources in a map, recording errors.
+     * @param ids
+     * @param deleteFn
+     * @param record
+     */
+    private deleteAll;
+}
+
+/**
+ * Chains assertions on the result of an event send.
+ * Throws on assertion failure (suitable for test frameworks).
+ */
+declare class EventAssertion {
+    private readonly result;
+    constructor(result: IngestResult);
+    /**
+     * Asserts the result has a specific decision action and severity.
+     * @param action - The expected action string (e.g. "block").
+     * @param severity - The expected severity level.
+     * @returns This assertion for chaining.
+     * @throws {Error} If the decision does not match.
+     */
+    expectDecision(action: string, severity: string): this;
+    /**
+     * Asserts the result has no decision (action is empty or undefined).
+     * @returns This assertion for chaining.
+     * @throws {Error} If a decision is present.
+     */
+    expectNoDecision(): this;
+    /**
+     * Asserts the transient score equals the expected value.
+     * @param score - The expected score value.
+     * @returns This assertion for chaining.
+     * @throws {Error} If the score does not match.
+     */
+    expectScore(score: number): this;
+    /**
+     * Returns the underlying IngestResult for custom assertions.
+     * @returns The raw IngestResult.
+     */
+    raw(): IngestResult;
+}
+
+/** Configuration for the test harness. */
+interface HarnessConfig {
+    /** Base URL of the IntelMesh API (e.g. "http://localhost:8080"). */
+    readonly baseURL: string;
+    /** Admin API key with api_keys:manage permission. */
+    readonly adminKey: string;
+    /** Optional request timeout in milliseconds. */
+    readonly timeout?: number;
+}
+/**
+ * Manages test lifecycle: ephemeral API key, provisioning, and assertions.
+ * Since TypeScript does not have Go's testing.T with t.Cleanup, this uses
+ * explicit setup() and cleanup() methods.
+ */
+declare class Harness {
+    private readonly config;
+    private readonly adminClient;
+    private testClient;
+    private testKeyId;
+    private provisioner;
+    /**
+     * Creates a new test harness.
+     * @param config - The harness configuration.
+     */
+    constructor(config: HarnessConfig);
+    /**
+     * Creates an ephemeral API key with all permissions.
+     * Must be called before sending events or provisioning.
+     */
+    setup(): Promise<void>;
+    /**
+     * Returns the test-scoped SDK client.
+     * @returns The IntelMesh client using the ephemeral key.
+     * @throws {Error} If setup() has not been called.
+     */
+    client(): IntelMesh;
+    /**
+     * Applies a provisioner and registers it for teardown on cleanup.
+     * @param p - The provisioner to apply.
+     */
+    provision(p: Provisioner): Promise<void>;
+    /**
+     * Sends an event for synchronous evaluation.
+     * @param eventType - The event type (e.g. "transaction.pix").
+     * @param payload - The event payload.
+     * @returns An EventAssertion for chaining assertions.
+     */
+    send(eventType: string, payload: Record<string, unknown>): Promise<EventAssertion>;
+    /**
+     * Sends an event to the simulation endpoint.
+     * @param eventType - The event type.
+     * @param payload - The event payload.
+     * @returns An EventAssertion for chaining assertions.
+     */
+    sendSimulate(eventType: string, payload: Record<string, unknown>): Promise<EventAssertion>;
+    /**
+     * Pauses for async projectors to complete.
+     * @param ms - Optional wait time in milliseconds (default 500).
+     */
+    waitForProjectors(ms?: number): Promise<void>;
+    /**
+     * Verifies that a list contains a specific value.
+     * Requires a provisioner to have been applied to resolve list names.
+     * @param listName - The list name (as registered with the provisioner).
+     * @param value - The value to search for.
+     * @throws {Error} If the list does not contain the value.
+     */
+    verifyListContains(listName: string, value: string): Promise<void>;
+    /**
+     * Verifies that a list does NOT contain a specific value.
+     * Requires a provisioner to have been applied to resolve list names.
+     * @param listName - The list name (as registered with the provisioner).
+     * @param value - The value to search for.
+     * @throws {Error} If the list contains the value.
+     */
+    verifyListNotContains(listName: string, value: string): Promise<void>;
+    /**
+     * Deletes the ephemeral API key and tears down the provisioner.
+     * Should be called in afterAll or finally blocks.
+     */
+    cleanup(): Promise<void>;
+    /**
+     * Internal list verification.
+     * @param listName
+     * @param _value
+     * @param shouldContain
+     */
+    private verifyList;
+}
+/**
+ * Convenience wrapper that manages setup and cleanup automatically.
+ * The harness is set up before the callback and cleaned up after,
+ * even if the callback throws.
+ * @param config - The harness configuration.
+ * @param fn - The async test function receiving the harness.
+ */
+declare function withHarness(config: HarnessConfig, fn: (harness: Harness) => Promise<void>): Promise<void>;
+
+export { type APIKey, APIKeys, type Actions, type AddItemsRequest, Audit, type BulkImportRequest, type ClientConfig, type CreateAPIKeyRequest, type CreateAPIKeyResponse, type CreateListRequest, type CreatePhaseRequest, type CreateRuleRequest, type CreateScopeRequest, type Decision, type ErrorBody, type ErrorResponse, type EvaluationLog, Evaluations, EventAssertion, EventBuilder, Events, type Flow, ForbiddenError, Harness, type HarnessConfig, HttpClient, type IngestRequest, type IngestResult, IntelMesh, IntelMeshError, InternalError, type List, type ListMutation, Lists, type Mutation, NetworkError, NotFoundError, type PaginatedResponse, type PaginationParams, ParseError, type Phase, type PhaseTrace, Phases, type PipelineTrace, ProvisionRuleBuilder, Provisioner, type Rule, RuleBuilder, type RuleTrace, type RuleVersion, Rules, type Scope, Scopes, type Score, type ScoreOperation, Scores, type SetScoreRequest, type Severity, type SuccessResponse, UnauthorizedError, UnavailableError, type UpdateAPIKeyRequest, type UpdateListRequest, type UpdatePhaseRequest, type UpdateRuleRequest, type UpdateScopeRequest, ValidationError, collectAll, isForbidden, isIntelMeshError, isNetwork, isNotFound, isUnauthorized, isValidation, mapStatusToError, paginate, withHarness };