@intutic/shared-types 2.4.0 → 2.5.1

package/dist/responses/integrations.d.ts

@@ -0,0 +1,4118 @@
+/**
+ * Responses of the control plane routes in notifications.ts, siem.ts, mcpServers.ts, attenuate.ts, compliance.ts, githubWebhooks.ts,
+ * openaiAgentTraces.ts, gateLiveness.ts, intelligence.ts and routing.ts.
+ *
+ * @module
+ */
+import { z } from 'zod';
+/**
+ * A rule's channel config as `notificationHubService.ts` `redactChannelConfig`
+ * returns it: the webhook signing secret dropped, the PagerDuty routing key
+ * masked.
+ */
+export declare const NotificationChannelConfigResponse: z.ZodObject<{
+    slackChannelId: z.ZodOptional<z.ZodString>;
+    slackChannelName: z.ZodOptional<z.ZodString>;
+    emailRecipients: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    webhookUrl: z.ZodOptional<z.ZodString>;
+    pagerdutyRoutingKey: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    slackChannelId?: string | undefined;
+    slackChannelName?: string | undefined;
+    emailRecipients?: string[] | undefined;
+    webhookUrl?: string | undefined;
+    pagerdutyRoutingKey?: string | undefined;
+}, {
+    slackChannelId?: string | undefined;
+    slackChannelName?: string | undefined;
+    emailRecipients?: string[] | undefined;
+    webhookUrl?: string | undefined;
+    pagerdutyRoutingKey?: string | undefined;
+}>;
+export type NotificationChannelConfigResponse = z.infer<typeof NotificationChannelConfigResponse>;
+/** A notification rule, as `notificationHubService.ts` `mapRowToRule` returns it. */
+export declare const NotificationRuleResponse: z.ZodObject<{
+    ruleId: z.ZodString;
+    workspaceId: z.ZodString;
+    eventType: z.ZodEnum<["anomaly.detected", "anomaly.finding", "incident.created", "incident.escalated", "sop.status_changed", "session.ended", "decision.pending", "decision.approved", "decision.rejected", "trajectory.alert", "calibration.threshold_breach", "anomaly.drift.detected", "anomaly.capability_miss", "anomaly.trust.updated", "sop.stale.detected", "sop.cascade.alert", "sop.cascade.invalidated", "sop.integrity.drift", "sop.lifecycle.transitioned", "sop.upstream.changed", "guardrail.ready", "guardrail.stale", "mcp.server.candidate", "mcp.server.tool_change_risk", "mcp.server.decided", "mcp.server.tool_toggled", "mcp.budget.threshold", "mcp.budget.exceeded", "judge.review.queued", "finops.budget.exceeded", "finops.budget.threshold", "finops.tokens.classified", "trial.started", "trial.expired_downgraded", "trial.day7_report_sent", "trial.day13_report_sent", "plan.captured", "plan.approved", "plan.deviation.detected", "identity.offboarding.completed", "auth.login.failed", "scim.user.changed", "scim.group.changed", "webhook.secret.rotated", "evidence.exported", "credential.changed", "workspace.context.updated", "gateway.stale.detected", "gateway.cell.stuck_pending", "region.sync.stale", "org.cells.deprovision_scheduled", "org.cells.deprovision_canceled", "org.cells.deprovisioned", "device.enforcement.stale", "device.enforcement.disabled", "governance.gate.silent", "governance.gate.recovered", "governance.integrity.failed", "inventory.ungoverned.detected", "provider.outage.detected", "billing.subscription.past_due", "skill.malware.detected", "skill.semantic.flagged"]>;
+    channel: z.ZodEnum<["slack", "email", "webhook", "pagerduty"]>;
+    channelConfig: z.ZodObject<{
+        slackChannelId: z.ZodOptional<z.ZodString>;
+        slackChannelName: z.ZodOptional<z.ZodString>;
+        emailRecipients: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        webhookUrl: z.ZodOptional<z.ZodString>;
+        pagerdutyRoutingKey: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        slackChannelId?: string | undefined;
+        slackChannelName?: string | undefined;
+        emailRecipients?: string[] | undefined;
+        webhookUrl?: string | undefined;
+        pagerdutyRoutingKey?: string | undefined;
+    }, {
+        slackChannelId?: string | undefined;
+        slackChannelName?: string | undefined;
+        emailRecipients?: string[] | undefined;
+        webhookUrl?: string | undefined;
+        pagerdutyRoutingKey?: string | undefined;
+    }>;
+    filters: z.ZodObject<{
+        severity: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        harnessType: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        userId: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    }, "strip", z.ZodTypeAny, {
+        userId?: string[] | undefined;
+        harnessType?: string[] | undefined;
+        severity?: string[] | undefined;
+    }, {
+        userId?: string[] | undefined;
+        harnessType?: string[] | undefined;
+        severity?: string[] | undefined;
+    }>;
+    cooldownMinutes: z.ZodNumber;
+    enabled: z.ZodBoolean;
+    createdAt: z.ZodString;
+    updatedAt: z.ZodString;
+    signingSecret: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    workspaceId: string;
+    ruleId: string;
+    enabled: boolean;
+    createdAt: string;
+    updatedAt: string;
+    eventType: "anomaly.detected" | "anomaly.finding" | "incident.created" | "incident.escalated" | "sop.status_changed" | "session.ended" | "decision.pending" | "decision.approved" | "decision.rejected" | "trajectory.alert" | "calibration.threshold_breach" | "anomaly.drift.detected" | "anomaly.capability_miss" | "anomaly.trust.updated" | "sop.stale.detected" | "sop.cascade.alert" | "sop.cascade.invalidated" | "sop.integrity.drift" | "sop.lifecycle.transitioned" | "sop.upstream.changed" | "guardrail.ready" | "guardrail.stale" | "mcp.server.candidate" | "mcp.server.tool_change_risk" | "mcp.server.decided" | "mcp.server.tool_toggled" | "mcp.budget.threshold" | "mcp.budget.exceeded" | "judge.review.queued" | "finops.budget.exceeded" | "finops.budget.threshold" | "finops.tokens.classified" | "trial.started" | "trial.expired_downgraded" | "trial.day7_report_sent" | "trial.day13_report_sent" | "plan.captured" | "plan.approved" | "plan.deviation.detected" | "identity.offboarding.completed" | "auth.login.failed" | "scim.user.changed" | "scim.group.changed" | "webhook.secret.rotated" | "evidence.exported" | "credential.changed" | "workspace.context.updated" | "gateway.stale.detected" | "gateway.cell.stuck_pending" | "region.sync.stale" | "org.cells.deprovision_scheduled" | "org.cells.deprovision_canceled" | "org.cells.deprovisioned" | "device.enforcement.stale" | "device.enforcement.disabled" | "governance.gate.silent" | "governance.gate.recovered" | "governance.integrity.failed" | "inventory.ungoverned.detected" | "provider.outage.detected" | "billing.subscription.past_due" | "skill.malware.detected" | "skill.semantic.flagged";
+    channel: "email" | "webhook" | "slack" | "pagerduty";
+    channelConfig: {
+        slackChannelId?: string | undefined;
+        slackChannelName?: string | undefined;
+        emailRecipients?: string[] | undefined;
+        webhookUrl?: string | undefined;
+        pagerdutyRoutingKey?: string | undefined;
+    };
+    filters: {
+        userId?: string[] | undefined;
+        harnessType?: string[] | undefined;
+        severity?: string[] | undefined;
+    };
+    cooldownMinutes: number;
+    signingSecret?: string | undefined;
+}, {
+    workspaceId: string;
+    ruleId: string;
+    enabled: boolean;
+    createdAt: string;
+    updatedAt: string;
+    eventType: "anomaly.detected" | "anomaly.finding" | "incident.created" | "incident.escalated" | "sop.status_changed" | "session.ended" | "decision.pending" | "decision.approved" | "decision.rejected" | "trajectory.alert" | "calibration.threshold_breach" | "anomaly.drift.detected" | "anomaly.capability_miss" | "anomaly.trust.updated" | "sop.stale.detected" | "sop.cascade.alert" | "sop.cascade.invalidated" | "sop.integrity.drift" | "sop.lifecycle.transitioned" | "sop.upstream.changed" | "guardrail.ready" | "guardrail.stale" | "mcp.server.candidate" | "mcp.server.tool_change_risk" | "mcp.server.decided" | "mcp.server.tool_toggled" | "mcp.budget.threshold" | "mcp.budget.exceeded" | "judge.review.queued" | "finops.budget.exceeded" | "finops.budget.threshold" | "finops.tokens.classified" | "trial.started" | "trial.expired_downgraded" | "trial.day7_report_sent" | "trial.day13_report_sent" | "plan.captured" | "plan.approved" | "plan.deviation.detected" | "identity.offboarding.completed" | "auth.login.failed" | "scim.user.changed" | "scim.group.changed" | "webhook.secret.rotated" | "evidence.exported" | "credential.changed" | "workspace.context.updated" | "gateway.stale.detected" | "gateway.cell.stuck_pending" | "region.sync.stale" | "org.cells.deprovision_scheduled" | "org.cells.deprovision_canceled" | "org.cells.deprovisioned" | "device.enforcement.stale" | "device.enforcement.disabled" | "governance.gate.silent" | "governance.gate.recovered" | "governance.integrity.failed" | "inventory.ungoverned.detected" | "provider.outage.detected" | "billing.subscription.past_due" | "skill.malware.detected" | "skill.semantic.flagged";
+    channel: "email" | "webhook" | "slack" | "pagerduty";
+    channelConfig: {
+        slackChannelId?: string | undefined;
+        slackChannelName?: string | undefined;
+        emailRecipients?: string[] | undefined;
+        webhookUrl?: string | undefined;
+        pagerdutyRoutingKey?: string | undefined;
+    };
+    filters: {
+        userId?: string[] | undefined;
+        harnessType?: string[] | undefined;
+        severity?: string[] | undefined;
+    };
+    cooldownMinutes: number;
+    signingSecret?: string | undefined;
+}>;
+export type NotificationRuleResponse = z.infer<typeof NotificationRuleResponse>;
+/** `GET /api/v1/notifications/rules`: the workspace's rules, oldest first. */
+export declare const NotificationRuleListResponse: z.ZodObject<{
+    listProperty: z.ZodLiteral<"rules">;
+    rowCase: z.ZodLiteral<"camel">;
+} & {
+    rules: z.ZodArray<z.ZodObject<{
+        ruleId: z.ZodString;
+        workspaceId: z.ZodString;
+        eventType: z.ZodEnum<["anomaly.detected", "anomaly.finding", "incident.created", "incident.escalated", "sop.status_changed", "session.ended", "decision.pending", "decision.approved", "decision.rejected", "trajectory.alert", "calibration.threshold_breach", "anomaly.drift.detected", "anomaly.capability_miss", "anomaly.trust.updated", "sop.stale.detected", "sop.cascade.alert", "sop.cascade.invalidated", "sop.integrity.drift", "sop.lifecycle.transitioned", "sop.upstream.changed", "guardrail.ready", "guardrail.stale", "mcp.server.candidate", "mcp.server.tool_change_risk", "mcp.server.decided", "mcp.server.tool_toggled", "mcp.budget.threshold", "mcp.budget.exceeded", "judge.review.queued", "finops.budget.exceeded", "finops.budget.threshold", "finops.tokens.classified", "trial.started", "trial.expired_downgraded", "trial.day7_report_sent", "trial.day13_report_sent", "plan.captured", "plan.approved", "plan.deviation.detected", "identity.offboarding.completed", "auth.login.failed", "scim.user.changed", "scim.group.changed", "webhook.secret.rotated", "evidence.exported", "credential.changed", "workspace.context.updated", "gateway.stale.detected", "gateway.cell.stuck_pending", "region.sync.stale", "org.cells.deprovision_scheduled", "org.cells.deprovision_canceled", "org.cells.deprovisioned", "device.enforcement.stale", "device.enforcement.disabled", "governance.gate.silent", "governance.gate.recovered", "governance.integrity.failed", "inventory.ungoverned.detected", "provider.outage.detected", "billing.subscription.past_due", "skill.malware.detected", "skill.semantic.flagged"]>;
+        channel: z.ZodEnum<["slack", "email", "webhook", "pagerduty"]>;
+        channelConfig: z.ZodObject<{
+            slackChannelId: z.ZodOptional<z.ZodString>;
+            slackChannelName: z.ZodOptional<z.ZodString>;
+            emailRecipients: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+            webhookUrl: z.ZodOptional<z.ZodString>;
+            pagerdutyRoutingKey: z.ZodOptional<z.ZodString>;
+        }, "strip", z.ZodTypeAny, {
+            slackChannelId?: string | undefined;
+            slackChannelName?: string | undefined;
+            emailRecipients?: string[] | undefined;
+            webhookUrl?: string | undefined;
+            pagerdutyRoutingKey?: string | undefined;
+        }, {
+            slackChannelId?: string | undefined;
+            slackChannelName?: string | undefined;
+            emailRecipients?: string[] | undefined;
+            webhookUrl?: string | undefined;
+            pagerdutyRoutingKey?: string | undefined;
+        }>;
+        filters: z.ZodObject<{
+            severity: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+            harnessType: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+            userId: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        }, "strip", z.ZodTypeAny, {
+            userId?: string[] | undefined;
+            harnessType?: string[] | undefined;
+            severity?: string[] | undefined;
+        }, {
+            userId?: string[] | undefined;
+            harnessType?: string[] | undefined;
+            severity?: string[] | undefined;
+        }>;
+        cooldownMinutes: z.ZodNumber;
+        enabled: z.ZodBoolean;
+        createdAt: z.ZodString;
+        updatedAt: z.ZodString;
+        signingSecret: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        workspaceId: string;
+        ruleId: string;
+        enabled: boolean;
+        createdAt: string;
+        updatedAt: string;
+        eventType: "anomaly.detected" | "anomaly.finding" | "incident.created" | "incident.escalated" | "sop.status_changed" | "session.ended" | "decision.pending" | "decision.approved" | "decision.rejected" | "trajectory.alert" | "calibration.threshold_breach" | "anomaly.drift.detected" | "anomaly.capability_miss" | "anomaly.trust.updated" | "sop.stale.detected" | "sop.cascade.alert" | "sop.cascade.invalidated" | "sop.integrity.drift" | "sop.lifecycle.transitioned" | "sop.upstream.changed" | "guardrail.ready" | "guardrail.stale" | "mcp.server.candidate" | "mcp.server.tool_change_risk" | "mcp.server.decided" | "mcp.server.tool_toggled" | "mcp.budget.threshold" | "mcp.budget.exceeded" | "judge.review.queued" | "finops.budget.exceeded" | "finops.budget.threshold" | "finops.tokens.classified" | "trial.started" | "trial.expired_downgraded" | "trial.day7_report_sent" | "trial.day13_report_sent" | "plan.captured" | "plan.approved" | "plan.deviation.detected" | "identity.offboarding.completed" | "auth.login.failed" | "scim.user.changed" | "scim.group.changed" | "webhook.secret.rotated" | "evidence.exported" | "credential.changed" | "workspace.context.updated" | "gateway.stale.detected" | "gateway.cell.stuck_pending" | "region.sync.stale" | "org.cells.deprovision_scheduled" | "org.cells.deprovision_canceled" | "org.cells.deprovisioned" | "device.enforcement.stale" | "device.enforcement.disabled" | "governance.gate.silent" | "governance.gate.recovered" | "governance.integrity.failed" | "inventory.ungoverned.detected" | "provider.outage.detected" | "billing.subscription.past_due" | "skill.malware.detected" | "skill.semantic.flagged";
+        channel: "email" | "webhook" | "slack" | "pagerduty";
+        channelConfig: {
+            slackChannelId?: string | undefined;
+            slackChannelName?: string | undefined;
+            emailRecipients?: string[] | undefined;
+            webhookUrl?: string | undefined;
+            pagerdutyRoutingKey?: string | undefined;
+        };
+        filters: {
+            userId?: string[] | undefined;
+            harnessType?: string[] | undefined;
+            severity?: string[] | undefined;
+        };
+        cooldownMinutes: number;
+        signingSecret?: string | undefined;
+    }, {
+        workspaceId: string;
+        ruleId: string;
+        enabled: boolean;
+        createdAt: string;
+        updatedAt: string;
+        eventType: "anomaly.detected" | "anomaly.finding" | "incident.created" | "incident.escalated" | "sop.status_changed" | "session.ended" | "decision.pending" | "decision.approved" | "decision.rejected" | "trajectory.alert" | "calibration.threshold_breach" | "anomaly.drift.detected" | "anomaly.capability_miss" | "anomaly.trust.updated" | "sop.stale.detected" | "sop.cascade.alert" | "sop.cascade.invalidated" | "sop.integrity.drift" | "sop.lifecycle.transitioned" | "sop.upstream.changed" | "guardrail.ready" | "guardrail.stale" | "mcp.server.candidate" | "mcp.server.tool_change_risk" | "mcp.server.decided" | "mcp.server.tool_toggled" | "mcp.budget.threshold" | "mcp.budget.exceeded" | "judge.review.queued" | "finops.budget.exceeded" | "finops.budget.threshold" | "finops.tokens.classified" | "trial.started" | "trial.expired_downgraded" | "trial.day7_report_sent" | "trial.day13_report_sent" | "plan.captured" | "plan.approved" | "plan.deviation.detected" | "identity.offboarding.completed" | "auth.login.failed" | "scim.user.changed" | "scim.group.changed" | "webhook.secret.rotated" | "evidence.exported" | "credential.changed" | "workspace.context.updated" | "gateway.stale.detected" | "gateway.cell.stuck_pending" | "region.sync.stale" | "org.cells.deprovision_scheduled" | "org.cells.deprovision_canceled" | "org.cells.deprovisioned" | "device.enforcement.stale" | "device.enforcement.disabled" | "governance.gate.silent" | "governance.gate.recovered" | "governance.integrity.failed" | "inventory.ungoverned.detected" | "provider.outage.detected" | "billing.subscription.past_due" | "skill.malware.detected" | "skill.semantic.flagged";
+        channel: "email" | "webhook" | "slack" | "pagerduty";
+        channelConfig: {
+            slackChannelId?: string | undefined;
+            slackChannelName?: string | undefined;
+            emailRecipients?: string[] | undefined;
+            webhookUrl?: string | undefined;
+            pagerdutyRoutingKey?: string | undefined;
+        };
+        filters: {
+            userId?: string[] | undefined;
+            harnessType?: string[] | undefined;
+            severity?: string[] | undefined;
+        };
+        cooldownMinutes: number;
+        signingSecret?: string | undefined;
+    }>, "many">;
+}, "strip", z.ZodTypeAny, {
+    rules: {
+        workspaceId: string;
+        ruleId: string;
+        enabled: boolean;
+        createdAt: string;
+        updatedAt: string;
+        eventType: "anomaly.detected" | "anomaly.finding" | "incident.created" | "incident.escalated" | "sop.status_changed" | "session.ended" | "decision.pending" | "decision.approved" | "decision.rejected" | "trajectory.alert" | "calibration.threshold_breach" | "anomaly.drift.detected" | "anomaly.capability_miss" | "anomaly.trust.updated" | "sop.stale.detected" | "sop.cascade.alert" | "sop.cascade.invalidated" | "sop.integrity.drift" | "sop.lifecycle.transitioned" | "sop.upstream.changed" | "guardrail.ready" | "guardrail.stale" | "mcp.server.candidate" | "mcp.server.tool_change_risk" | "mcp.server.decided" | "mcp.server.tool_toggled" | "mcp.budget.threshold" | "mcp.budget.exceeded" | "judge.review.queued" | "finops.budget.exceeded" | "finops.budget.threshold" | "finops.tokens.classified" | "trial.started" | "trial.expired_downgraded" | "trial.day7_report_sent" | "trial.day13_report_sent" | "plan.captured" | "plan.approved" | "plan.deviation.detected" | "identity.offboarding.completed" | "auth.login.failed" | "scim.user.changed" | "scim.group.changed" | "webhook.secret.rotated" | "evidence.exported" | "credential.changed" | "workspace.context.updated" | "gateway.stale.detected" | "gateway.cell.stuck_pending" | "region.sync.stale" | "org.cells.deprovision_scheduled" | "org.cells.deprovision_canceled" | "org.cells.deprovisioned" | "device.enforcement.stale" | "device.enforcement.disabled" | "governance.gate.silent" | "governance.gate.recovered" | "governance.integrity.failed" | "inventory.ungoverned.detected" | "provider.outage.detected" | "billing.subscription.past_due" | "skill.malware.detected" | "skill.semantic.flagged";
+        channel: "email" | "webhook" | "slack" | "pagerduty";
+        channelConfig: {
+            slackChannelId?: string | undefined;
+            slackChannelName?: string | undefined;
+            emailRecipients?: string[] | undefined;
+            webhookUrl?: string | undefined;
+            pagerdutyRoutingKey?: string | undefined;
+        };
+        filters: {
+            userId?: string[] | undefined;
+            harnessType?: string[] | undefined;
+            severity?: string[] | undefined;
+        };
+        cooldownMinutes: number;
+        signingSecret?: string | undefined;
+    }[];
+    listProperty: "rules";
+    rowCase: "camel";
+}, {
+    rules: {
+        workspaceId: string;
+        ruleId: string;
+        enabled: boolean;
+        createdAt: string;
+        updatedAt: string;
+        eventType: "anomaly.detected" | "anomaly.finding" | "incident.created" | "incident.escalated" | "sop.status_changed" | "session.ended" | "decision.pending" | "decision.approved" | "decision.rejected" | "trajectory.alert" | "calibration.threshold_breach" | "anomaly.drift.detected" | "anomaly.capability_miss" | "anomaly.trust.updated" | "sop.stale.detected" | "sop.cascade.alert" | "sop.cascade.invalidated" | "sop.integrity.drift" | "sop.lifecycle.transitioned" | "sop.upstream.changed" | "guardrail.ready" | "guardrail.stale" | "mcp.server.candidate" | "mcp.server.tool_change_risk" | "mcp.server.decided" | "mcp.server.tool_toggled" | "mcp.budget.threshold" | "mcp.budget.exceeded" | "judge.review.queued" | "finops.budget.exceeded" | "finops.budget.threshold" | "finops.tokens.classified" | "trial.started" | "trial.expired_downgraded" | "trial.day7_report_sent" | "trial.day13_report_sent" | "plan.captured" | "plan.approved" | "plan.deviation.detected" | "identity.offboarding.completed" | "auth.login.failed" | "scim.user.changed" | "scim.group.changed" | "webhook.secret.rotated" | "evidence.exported" | "credential.changed" | "workspace.context.updated" | "gateway.stale.detected" | "gateway.cell.stuck_pending" | "region.sync.stale" | "org.cells.deprovision_scheduled" | "org.cells.deprovision_canceled" | "org.cells.deprovisioned" | "device.enforcement.stale" | "device.enforcement.disabled" | "governance.gate.silent" | "governance.gate.recovered" | "governance.integrity.failed" | "inventory.ungoverned.detected" | "provider.outage.detected" | "billing.subscription.past_due" | "skill.malware.detected" | "skill.semantic.flagged";
+        channel: "email" | "webhook" | "slack" | "pagerduty";
+        channelConfig: {
+            slackChannelId?: string | undefined;
+            slackChannelName?: string | undefined;
+            emailRecipients?: string[] | undefined;
+            webhookUrl?: string | undefined;
+            pagerdutyRoutingKey?: string | undefined;
+        };
+        filters: {
+            userId?: string[] | undefined;
+            harnessType?: string[] | undefined;
+            severity?: string[] | undefined;
+        };
+        cooldownMinutes: number;
+        signingSecret?: string | undefined;
+    }[];
+    listProperty: "rules";
+    rowCase: "camel";
+}>;
+export type NotificationRuleListResponse = z.infer<typeof NotificationRuleListResponse>;
+/** `DELETE /api/v1/notifications/rules/:ruleId`. */
+export declare const NotificationRuleDeletedResponse: z.ZodObject<{
+    ok: z.ZodLiteral<true>;
+}, "strip", z.ZodTypeAny, {
+    ok: true;
+}, {
+    ok: true;
+}>;
+export type NotificationRuleDeletedResponse = z.infer<typeof NotificationRuleDeletedResponse>;
+/** `POST /api/v1/notifications/rules/:ruleId/signing-secret`: the new secret, returned once. */
+export declare const NotificationRuleSigningSecretResponse: z.ZodObject<{
+    ruleId: z.ZodString;
+    signingSecret: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    ruleId: string;
+    signingSecret: string;
+}, {
+    ruleId: string;
+    signingSecret: string;
+}>;
+export type NotificationRuleSigningSecretResponse = z.infer<typeof NotificationRuleSigningSecretResponse>;
+/** A destination as `GET /api/v1/siem/destinations` lists it: no config. */
+export declare const SiemDestinationSummaryResponse: z.ZodObject<{
+    lastHeartbeatAt: z.ZodNullable<z.ZodString>;
+    lastError: z.ZodNullable<z.ZodString>;
+    createdAt: z.ZodString;
+    updatedAt: z.ZodString;
+    destinationId: z.ZodString;
+    workspaceId: z.ZodString;
+    name: z.ZodString;
+    adapterType: z.ZodEnum<["syslog_cef", "webhook_https", "gcs", "s3", "splunk_hec", "datadog_logs"]>;
+    isActive: z.ZodBoolean;
+    sourceTables: z.ZodArray<z.ZodString, "many">;
+    batchSize: z.ZodNumber;
+    flushIntervalMs: z.ZodNumber;
+    pausedReason: z.ZodNullable<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    workspaceId: string;
+    name: string;
+    isActive: boolean;
+    createdAt: string;
+    updatedAt: string;
+    lastHeartbeatAt: string | null;
+    lastError: string | null;
+    destinationId: string;
+    adapterType: "gcs" | "s3" | "syslog_cef" | "webhook_https" | "splunk_hec" | "datadog_logs";
+    sourceTables: string[];
+    batchSize: number;
+    flushIntervalMs: number;
+    pausedReason: string | null;
+}, {
+    workspaceId: string;
+    name: string;
+    isActive: boolean;
+    createdAt: string;
+    updatedAt: string;
+    lastHeartbeatAt: string | null;
+    lastError: string | null;
+    destinationId: string;
+    adapterType: "gcs" | "s3" | "syslog_cef" | "webhook_https" | "splunk_hec" | "datadog_logs";
+    sourceTables: string[];
+    batchSize: number;
+    flushIntervalMs: number;
+    pausedReason: string | null;
+}>;
+export type SiemDestinationSummaryResponse = z.infer<typeof SiemDestinationSummaryResponse>;
+/** `GET /api/v1/siem/destinations`: the destinations and the source names one can filter on. */
+export declare const SiemDestinationListResponse: z.ZodObject<{
+    items: z.ZodArray<z.ZodObject<{
+        lastHeartbeatAt: z.ZodNullable<z.ZodString>;
+        lastError: z.ZodNullable<z.ZodString>;
+        createdAt: z.ZodString;
+        updatedAt: z.ZodString;
+        destinationId: z.ZodString;
+        workspaceId: z.ZodString;
+        name: z.ZodString;
+        adapterType: z.ZodEnum<["syslog_cef", "webhook_https", "gcs", "s3", "splunk_hec", "datadog_logs"]>;
+        isActive: z.ZodBoolean;
+        sourceTables: z.ZodArray<z.ZodString, "many">;
+        batchSize: z.ZodNumber;
+        flushIntervalMs: z.ZodNumber;
+        pausedReason: z.ZodNullable<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        workspaceId: string;
+        name: string;
+        isActive: boolean;
+        createdAt: string;
+        updatedAt: string;
+        lastHeartbeatAt: string | null;
+        lastError: string | null;
+        destinationId: string;
+        adapterType: "gcs" | "s3" | "syslog_cef" | "webhook_https" | "splunk_hec" | "datadog_logs";
+        sourceTables: string[];
+        batchSize: number;
+        flushIntervalMs: number;
+        pausedReason: string | null;
+    }, {
+        workspaceId: string;
+        name: string;
+        isActive: boolean;
+        createdAt: string;
+        updatedAt: string;
+        lastHeartbeatAt: string | null;
+        lastError: string | null;
+        destinationId: string;
+        adapterType: "gcs" | "s3" | "syslog_cef" | "webhook_https" | "splunk_hec" | "datadog_logs";
+        sourceTables: string[];
+        batchSize: number;
+        flushIntervalMs: number;
+        pausedReason: string | null;
+    }>, "many">;
+    sources: z.ZodObject<{
+        all: z.ZodArray<z.ZodString, "many">;
+        defaults: z.ZodArray<z.ZodString, "many">;
+    }, "strip", z.ZodTypeAny, {
+        all: string[];
+        defaults: string[];
+    }, {
+        all: string[];
+        defaults: string[];
+    }>;
+}, "strip", z.ZodTypeAny, {
+    items: {
+        workspaceId: string;
+        name: string;
+        isActive: boolean;
+        createdAt: string;
+        updatedAt: string;
+        lastHeartbeatAt: string | null;
+        lastError: string | null;
+        destinationId: string;
+        adapterType: "gcs" | "s3" | "syslog_cef" | "webhook_https" | "splunk_hec" | "datadog_logs";
+        sourceTables: string[];
+        batchSize: number;
+        flushIntervalMs: number;
+        pausedReason: string | null;
+    }[];
+    sources: {
+        all: string[];
+        defaults: string[];
+    };
+}, {
+    items: {
+        workspaceId: string;
+        name: string;
+        isActive: boolean;
+        createdAt: string;
+        updatedAt: string;
+        lastHeartbeatAt: string | null;
+        lastError: string | null;
+        destinationId: string;
+        adapterType: "gcs" | "s3" | "syslog_cef" | "webhook_https" | "splunk_hec" | "datadog_logs";
+        sourceTables: string[];
+        batchSize: number;
+        flushIntervalMs: number;
+        pausedReason: string | null;
+    }[];
+    sources: {
+        all: string[];
+        defaults: string[];
+    };
+}>;
+export type SiemDestinationListResponse = z.infer<typeof SiemDestinationListResponse>;
+/** `GET /api/v1/siem/destinations/:id`. */
+export declare const SiemDestinationResponse: z.ZodObject<{
+    config: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+    lastHeartbeatAt: z.ZodNullable<z.ZodString>;
+    lastError: z.ZodNullable<z.ZodString>;
+    createdAt: z.ZodString;
+    updatedAt: z.ZodString;
+    destinationId: z.ZodString;
+    workspaceId: z.ZodString;
+    name: z.ZodString;
+    adapterType: z.ZodEnum<["syslog_cef", "webhook_https", "gcs", "s3", "splunk_hec", "datadog_logs"]>;
+    isActive: z.ZodBoolean;
+    sourceTables: z.ZodArray<z.ZodString, "many">;
+    batchSize: z.ZodNumber;
+    flushIntervalMs: z.ZodNumber;
+    pausedReason: z.ZodNullable<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    workspaceId: string;
+    name: string;
+    isActive: boolean;
+    createdAt: string;
+    updatedAt: string;
+    lastHeartbeatAt: string | null;
+    config: Record<string, unknown>;
+    lastError: string | null;
+    destinationId: string;
+    adapterType: "gcs" | "s3" | "syslog_cef" | "webhook_https" | "splunk_hec" | "datadog_logs";
+    sourceTables: string[];
+    batchSize: number;
+    flushIntervalMs: number;
+    pausedReason: string | null;
+}, {
+    workspaceId: string;
+    name: string;
+    isActive: boolean;
+    createdAt: string;
+    updatedAt: string;
+    lastHeartbeatAt: string | null;
+    config: Record<string, unknown>;
+    lastError: string | null;
+    destinationId: string;
+    adapterType: "gcs" | "s3" | "syslog_cef" | "webhook_https" | "splunk_hec" | "datadog_logs";
+    sourceTables: string[];
+    batchSize: number;
+    flushIntervalMs: number;
+    pausedReason: string | null;
+}>;
+export type SiemDestinationResponse = z.infer<typeof SiemDestinationResponse>;
+/** `PUT /api/v1/siem/destinations/:id`: the destination after the edit. */
+export declare const SiemDestinationUpdatedResponse: z.ZodObject<{
+    config: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    lastHeartbeatAt: z.ZodNullable<z.ZodString>;
+    lastError: z.ZodNullable<z.ZodString>;
+    createdAt: z.ZodString;
+    updatedAt: z.ZodString;
+    destinationId: z.ZodString;
+    workspaceId: z.ZodString;
+    name: z.ZodString;
+    adapterType: z.ZodEnum<["syslog_cef", "webhook_https", "gcs", "s3", "splunk_hec", "datadog_logs"]>;
+    isActive: z.ZodBoolean;
+    sourceTables: z.ZodArray<z.ZodString, "many">;
+    batchSize: z.ZodNumber;
+    flushIntervalMs: z.ZodNumber;
+    pausedReason: z.ZodNullable<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    workspaceId: string;
+    name: string;
+    isActive: boolean;
+    createdAt: string;
+    updatedAt: string;
+    lastHeartbeatAt: string | null;
+    lastError: string | null;
+    destinationId: string;
+    adapterType: "gcs" | "s3" | "syslog_cef" | "webhook_https" | "splunk_hec" | "datadog_logs";
+    sourceTables: string[];
+    batchSize: number;
+    flushIntervalMs: number;
+    pausedReason: string | null;
+    config?: Record<string, unknown> | undefined;
+}, {
+    workspaceId: string;
+    name: string;
+    isActive: boolean;
+    createdAt: string;
+    updatedAt: string;
+    lastHeartbeatAt: string | null;
+    lastError: string | null;
+    destinationId: string;
+    adapterType: "gcs" | "s3" | "syslog_cef" | "webhook_https" | "splunk_hec" | "datadog_logs";
+    sourceTables: string[];
+    batchSize: number;
+    flushIntervalMs: number;
+    pausedReason: string | null;
+    config?: Record<string, unknown> | undefined;
+}>;
+export type SiemDestinationUpdatedResponse = z.infer<typeof SiemDestinationUpdatedResponse>;
+/** `POST /api/v1/siem/destinations`: the new destination. */
+export declare const SiemDestinationCreatedResponse: z.ZodObject<{
+    config: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+    signingSecret: z.ZodOptional<z.ZodString>;
+    destinationId: z.ZodString;
+    workspaceId: z.ZodString;
+    name: z.ZodString;
+    adapterType: z.ZodEnum<["syslog_cef", "webhook_https", "gcs", "s3", "splunk_hec", "datadog_logs"]>;
+    isActive: z.ZodBoolean;
+    sourceTables: z.ZodArray<z.ZodString, "many">;
+    batchSize: z.ZodNumber;
+    flushIntervalMs: z.ZodNumber;
+    pausedReason: z.ZodNullable<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    workspaceId: string;
+    name: string;
+    isActive: boolean;
+    config: Record<string, unknown>;
+    destinationId: string;
+    adapterType: "gcs" | "s3" | "syslog_cef" | "webhook_https" | "splunk_hec" | "datadog_logs";
+    sourceTables: string[];
+    batchSize: number;
+    flushIntervalMs: number;
+    pausedReason: string | null;
+    signingSecret?: string | undefined;
+}, {
+    workspaceId: string;
+    name: string;
+    isActive: boolean;
+    config: Record<string, unknown>;
+    destinationId: string;
+    adapterType: "gcs" | "s3" | "syslog_cef" | "webhook_https" | "splunk_hec" | "datadog_logs";
+    sourceTables: string[];
+    batchSize: number;
+    flushIntervalMs: number;
+    pausedReason: string | null;
+    signingSecret?: string | undefined;
+}>;
+export type SiemDestinationCreatedResponse = z.infer<typeof SiemDestinationCreatedResponse>;
+/** `DELETE /api/v1/siem/destinations/:id`: the destination is deactivated, not removed. */
+export declare const SiemDestinationDeactivatedResponse: z.ZodObject<{
+    success: z.ZodLiteral<true>;
+    destinationId: z.ZodString;
+    isActive: z.ZodLiteral<false>;
+}, "strip", z.ZodTypeAny, {
+    isActive: false;
+    success: true;
+    destinationId: string;
+}, {
+    isActive: false;
+    success: true;
+    destinationId: string;
+}>;
+export type SiemDestinationDeactivatedResponse = z.infer<typeof SiemDestinationDeactivatedResponse>;
+/** `POST /api/v1/siem/destinations/:id/signing-secret`: the new secret, returned once. */
+export declare const SiemSigningSecretResponse: z.ZodObject<{
+    destinationId: z.ZodString;
+    signingSecret: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    signingSecret: string;
+    destinationId: string;
+}, {
+    signingSecret: string;
+    destinationId: string;
+}>;
+export type SiemSigningSecretResponse = z.infer<typeof SiemSigningSecretResponse>;
+/** The latest scored change to a server's tool set (`mcpRegistryService.ts` `toToolChange`). */
+export declare const McpToolChangeResponse: z.ZodObject<{
+    changeId: z.ZodString;
+    createdAt: z.ZodString;
+    riskScore: z.ZodNumber;
+    riskLevel: z.ZodEnum<["none", "low", "medium", "high"]>;
+    reasons: z.ZodArray<z.ZodObject<{
+        rule: z.ZodString;
+        tool: z.ZodString;
+        points: z.ZodNumber;
+        detail: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        tool: string;
+        rule: string;
+        detail: string;
+        points: number;
+    }, {
+        tool: string;
+        rule: string;
+        detail: string;
+        points: number;
+    }>, "many">;
+    added: z.ZodArray<z.ZodString, "many">;
+    removed: z.ZodArray<z.ZodString, "many">;
+    changed: z.ZodArray<z.ZodString, "many">;
+}, "strip", z.ZodTypeAny, {
+    createdAt: string;
+    reasons: {
+        tool: string;
+        rule: string;
+        detail: string;
+        points: number;
+    }[];
+    changeId: string;
+    riskScore: number;
+    riskLevel: "high" | "medium" | "low" | "none";
+    added: string[];
+    removed: string[];
+    changed: string[];
+}, {
+    createdAt: string;
+    reasons: {
+        tool: string;
+        rule: string;
+        detail: string;
+        points: number;
+    }[];
+    changeId: string;
+    riskScore: number;
+    riskLevel: "high" | "medium" | "low" | "none";
+    added: string[];
+    removed: string[];
+    changed: string[];
+}>;
+export type McpToolChangeResponse = z.infer<typeof McpToolChangeResponse>;
+/** An MCP server the workspace's proxies have seen (`mcpRegistryService.ts` `toRow`). */
+export declare const McpServerResponse: z.ZodObject<{
+    serverId: z.ZodString;
+    serverName: z.ZodString;
+    status: z.ZodEnum<["candidate", "approved", "blocked"]>;
+    harness: z.ZodNullable<z.ZodString>;
+    transport: z.ZodNullable<z.ZodString>;
+    pinFingerprint: z.ZodNullable<z.ZodString>;
+    tools: z.ZodArray<z.ZodString, "many">;
+    disabledTools: z.ZodArray<z.ZodString, "many">;
+    firstSeenAt: z.ZodString;
+    lastSeenAt: z.ZodString;
+    decidedBy: z.ZodNullable<z.ZodString>;
+    decidedAt: z.ZodNullable<z.ZodString>;
+    ungovernedReason: z.ZodNullable<z.ZodString>;
+    heldForReview: z.ZodBoolean;
+    lastToolChange: z.ZodNullable<z.ZodObject<{
+        changeId: z.ZodString;
+        createdAt: z.ZodString;
+        riskScore: z.ZodNumber;
+        riskLevel: z.ZodEnum<["none", "low", "medium", "high"]>;
+        reasons: z.ZodArray<z.ZodObject<{
+            rule: z.ZodString;
+            tool: z.ZodString;
+            points: z.ZodNumber;
+            detail: z.ZodString;
+        }, "strip", z.ZodTypeAny, {
+            tool: string;
+            rule: string;
+            detail: string;
+            points: number;
+        }, {
+            tool: string;
+            rule: string;
+            detail: string;
+            points: number;
+        }>, "many">;
+        added: z.ZodArray<z.ZodString, "many">;
+        removed: z.ZodArray<z.ZodString, "many">;
+        changed: z.ZodArray<z.ZodString, "many">;
+    }, "strip", z.ZodTypeAny, {
+        createdAt: string;
+        reasons: {
+            tool: string;
+            rule: string;
+            detail: string;
+            points: number;
+        }[];
+        changeId: string;
+        riskScore: number;
+        riskLevel: "high" | "medium" | "low" | "none";
+        added: string[];
+        removed: string[];
+        changed: string[];
+    }, {
+        createdAt: string;
+        reasons: {
+            tool: string;
+            rule: string;
+            detail: string;
+            points: number;
+        }[];
+        changeId: string;
+        riskScore: number;
+        riskLevel: "high" | "medium" | "low" | "none";
+        added: string[];
+        removed: string[];
+        changed: string[];
+    }>>;
+}, "strip", z.ZodTypeAny, {
+    status: "approved" | "candidate" | "blocked";
+    harness: string | null;
+    tools: string[];
+    disabledTools: string[];
+    decidedBy: string | null;
+    decidedAt: string | null;
+    firstSeenAt: string;
+    lastSeenAt: string;
+    transport: string | null;
+    serverId: string;
+    serverName: string;
+    pinFingerprint: string | null;
+    ungovernedReason: string | null;
+    heldForReview: boolean;
+    lastToolChange: {
+        createdAt: string;
+        reasons: {
+            tool: string;
+            rule: string;
+            detail: string;
+            points: number;
+        }[];
+        changeId: string;
+        riskScore: number;
+        riskLevel: "high" | "medium" | "low" | "none";
+        added: string[];
+        removed: string[];
+        changed: string[];
+    } | null;
+}, {
+    status: "approved" | "candidate" | "blocked";
+    harness: string | null;
+    tools: string[];
+    disabledTools: string[];
+    decidedBy: string | null;
+    decidedAt: string | null;
+    firstSeenAt: string;
+    lastSeenAt: string;
+    transport: string | null;
+    serverId: string;
+    serverName: string;
+    pinFingerprint: string | null;
+    ungovernedReason: string | null;
+    heldForReview: boolean;
+    lastToolChange: {
+        createdAt: string;
+        reasons: {
+            tool: string;
+            rule: string;
+            detail: string;
+            points: number;
+        }[];
+        changeId: string;
+        riskScore: number;
+        riskLevel: "high" | "medium" | "low" | "none";
+        added: string[];
+        removed: string[];
+        changed: string[];
+    } | null;
+}>;
+export type McpServerResponse = z.infer<typeof McpServerResponse>;
+/** One MCP call budget, as the `mcpBudgets` workspace setting stores it. */
+export declare const McpBudgetResponse: z.ZodObject<{
+    id: z.ZodString;
+    scope: z.ZodEnum<["server", "tool", "member", "member_server"]>;
+    server: z.ZodOptional<z.ZodString>;
+    tool: z.ZodOptional<z.ZodString>;
+    memberId: z.ZodOptional<z.ZodString>;
+    period: z.ZodEnum<["hour", "day"]>;
+    limit: z.ZodNumber;
+}, "strip", z.ZodTypeAny, {
+    period: "day" | "hour";
+    id: string;
+    limit: number;
+    scope: "member" | "tool" | "server" | "member_server";
+    tool?: string | undefined;
+    server?: string | undefined;
+    memberId?: string | undefined;
+}, {
+    period: "day" | "hour";
+    id: string;
+    limit: number;
+    scope: "member" | "tool" | "server" | "member_server";
+    tool?: string | undefined;
+    server?: string | undefined;
+    memberId?: string | undefined;
+}>;
+export type McpBudgetResponse = z.infer<typeof McpBudgetResponse>;
+/** `GET /api/v1/mcp/servers`: the servers, most recently seen first, and the registry's workspace settings. */
+export declare const McpServerListResponse: z.ZodObject<{
+    listProperty: z.ZodLiteral<"servers">;
+    rowCase: z.ZodLiteral<"camel">;
+} & {
+    servers: z.ZodArray<z.ZodObject<{
+        serverId: z.ZodString;
+        serverName: z.ZodString;
+        status: z.ZodEnum<["candidate", "approved", "blocked"]>;
+        harness: z.ZodNullable<z.ZodString>;
+        transport: z.ZodNullable<z.ZodString>;
+        pinFingerprint: z.ZodNullable<z.ZodString>;
+        tools: z.ZodArray<z.ZodString, "many">;
+        disabledTools: z.ZodArray<z.ZodString, "many">;
+        firstSeenAt: z.ZodString;
+        lastSeenAt: z.ZodString;
+        decidedBy: z.ZodNullable<z.ZodString>;
+        decidedAt: z.ZodNullable<z.ZodString>;
+        ungovernedReason: z.ZodNullable<z.ZodString>;
+        heldForReview: z.ZodBoolean;
+        lastToolChange: z.ZodNullable<z.ZodObject<{
+            changeId: z.ZodString;
+            createdAt: z.ZodString;
+            riskScore: z.ZodNumber;
+            riskLevel: z.ZodEnum<["none", "low", "medium", "high"]>;
+            reasons: z.ZodArray<z.ZodObject<{
+                rule: z.ZodString;
+                tool: z.ZodString;
+                points: z.ZodNumber;
+                detail: z.ZodString;
+            }, "strip", z.ZodTypeAny, {
+                tool: string;
+                rule: string;
+                detail: string;
+                points: number;
+            }, {
+                tool: string;
+                rule: string;
+                detail: string;
+                points: number;
+            }>, "many">;
+            added: z.ZodArray<z.ZodString, "many">;
+            removed: z.ZodArray<z.ZodString, "many">;
+            changed: z.ZodArray<z.ZodString, "many">;
+        }, "strip", z.ZodTypeAny, {
+            createdAt: string;
+            reasons: {
+                tool: string;
+                rule: string;
+                detail: string;
+                points: number;
+            }[];
+            changeId: string;
+            riskScore: number;
+            riskLevel: "high" | "medium" | "low" | "none";
+            added: string[];
+            removed: string[];
+            changed: string[];
+        }, {
+            createdAt: string;
+            reasons: {
+                tool: string;
+                rule: string;
+                detail: string;
+                points: number;
+            }[];
+            changeId: string;
+            riskScore: number;
+            riskLevel: "high" | "medium" | "low" | "none";
+            added: string[];
+            removed: string[];
+            changed: string[];
+        }>>;
+    }, "strip", z.ZodTypeAny, {
+        status: "approved" | "candidate" | "blocked";
+        harness: string | null;
+        tools: string[];
+        disabledTools: string[];
+        decidedBy: string | null;
+        decidedAt: string | null;
+        firstSeenAt: string;
+        lastSeenAt: string;
+        transport: string | null;
+        serverId: string;
+        serverName: string;
+        pinFingerprint: string | null;
+        ungovernedReason: string | null;
+        heldForReview: boolean;
+        lastToolChange: {
+            createdAt: string;
+            reasons: {
+                tool: string;
+                rule: string;
+                detail: string;
+                points: number;
+            }[];
+            changeId: string;
+            riskScore: number;
+            riskLevel: "high" | "medium" | "low" | "none";
+            added: string[];
+            removed: string[];
+            changed: string[];
+        } | null;
+    }, {
+        status: "approved" | "candidate" | "blocked";
+        harness: string | null;
+        tools: string[];
+        disabledTools: string[];
+        decidedBy: string | null;
+        decidedAt: string | null;
+        firstSeenAt: string;
+        lastSeenAt: string;
+        transport: string | null;
+        serverId: string;
+        serverName: string;
+        pinFingerprint: string | null;
+        ungovernedReason: string | null;
+        heldForReview: boolean;
+        lastToolChange: {
+            createdAt: string;
+            reasons: {
+                tool: string;
+                rule: string;
+                detail: string;
+                points: number;
+            }[];
+            changeId: string;
+            riskScore: number;
+            riskLevel: "high" | "medium" | "low" | "none";
+            added: string[];
+            removed: string[];
+            changed: string[];
+        } | null;
+    }>, "many">;
+    defaultPolicy: z.ZodEnum<["allow", "deny"]>;
+    highRiskToolChange: z.ZodEnum<["notify", "hold"]>;
+    budgets: z.ZodObject<{
+        budgets: z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            scope: z.ZodEnum<["server", "tool", "member", "member_server"]>;
+            server: z.ZodOptional<z.ZodString>;
+            tool: z.ZodOptional<z.ZodString>;
+            memberId: z.ZodOptional<z.ZodString>;
+            period: z.ZodEnum<["hour", "day"]>;
+            limit: z.ZodNumber;
+        }, "strip", z.ZodTypeAny, {
+            period: "day" | "hour";
+            id: string;
+            limit: number;
+            scope: "member" | "tool" | "server" | "member_server";
+            tool?: string | undefined;
+            server?: string | undefined;
+            memberId?: string | undefined;
+        }, {
+            period: "day" | "hour";
+            id: string;
+            limit: number;
+            scope: "member" | "tool" | "server" | "member_server";
+            tool?: string | undefined;
+            server?: string | undefined;
+            memberId?: string | undefined;
+        }>, "many">;
+        warnAtPct: z.ZodOptional<z.ZodNumber>;
+    }, "strip", z.ZodTypeAny, {
+        budgets: {
+            period: "day" | "hour";
+            id: string;
+            limit: number;
+            scope: "member" | "tool" | "server" | "member_server";
+            tool?: string | undefined;
+            server?: string | undefined;
+            memberId?: string | undefined;
+        }[];
+        warnAtPct?: number | undefined;
+    }, {
+        budgets: {
+            period: "day" | "hour";
+            id: string;
+            limit: number;
+            scope: "member" | "tool" | "server" | "member_server";
+            tool?: string | undefined;
+            server?: string | undefined;
+            memberId?: string | undefined;
+        }[];
+        warnAtPct?: number | undefined;
+    }>;
+    pendingCount: z.ZodNumber;
+}, "strip", z.ZodTypeAny, {
+    budgets: {
+        budgets: {
+            period: "day" | "hour";
+            id: string;
+            limit: number;
+            scope: "member" | "tool" | "server" | "member_server";
+            tool?: string | undefined;
+            server?: string | undefined;
+            memberId?: string | undefined;
+        }[];
+        warnAtPct?: number | undefined;
+    };
+    defaultPolicy: "deny" | "allow";
+    servers: {
+        status: "approved" | "candidate" | "blocked";
+        harness: string | null;
+        tools: string[];
+        disabledTools: string[];
+        decidedBy: string | null;
+        decidedAt: string | null;
+        firstSeenAt: string;
+        lastSeenAt: string;
+        transport: string | null;
+        serverId: string;
+        serverName: string;
+        pinFingerprint: string | null;
+        ungovernedReason: string | null;
+        heldForReview: boolean;
+        lastToolChange: {
+            createdAt: string;
+            reasons: {
+                tool: string;
+                rule: string;
+                detail: string;
+                points: number;
+            }[];
+            changeId: string;
+            riskScore: number;
+            riskLevel: "high" | "medium" | "low" | "none";
+            added: string[];
+            removed: string[];
+            changed: string[];
+        } | null;
+    }[];
+    listProperty: "servers";
+    rowCase: "camel";
+    highRiskToolChange: "hold" | "notify";
+    pendingCount: number;
+}, {
+    budgets: {
+        budgets: {
+            period: "day" | "hour";
+            id: string;
+            limit: number;
+            scope: "member" | "tool" | "server" | "member_server";
+            tool?: string | undefined;
+            server?: string | undefined;
+            memberId?: string | undefined;
+        }[];
+        warnAtPct?: number | undefined;
+    };
+    defaultPolicy: "deny" | "allow";
+    servers: {
+        status: "approved" | "candidate" | "blocked";
+        harness: string | null;
+        tools: string[];
+        disabledTools: string[];
+        decidedBy: string | null;
+        decidedAt: string | null;
+        firstSeenAt: string;
+        lastSeenAt: string;
+        transport: string | null;
+        serverId: string;
+        serverName: string;
+        pinFingerprint: string | null;
+        ungovernedReason: string | null;
+        heldForReview: boolean;
+        lastToolChange: {
+            createdAt: string;
+            reasons: {
+                tool: string;
+                rule: string;
+                detail: string;
+                points: number;
+            }[];
+            changeId: string;
+            riskScore: number;
+            riskLevel: "high" | "medium" | "low" | "none";
+            added: string[];
+            removed: string[];
+            changed: string[];
+        } | null;
+    }[];
+    listProperty: "servers";
+    rowCase: "camel";
+    highRiskToolChange: "hold" | "notify";
+    pendingCount: number;
+}>;
+export type McpServerListResponse = z.infer<typeof McpServerListResponse>;
+/** `POST /api/v1/mcp/servers/:serverId/status` and `/tools`: the server after the decision. */
+export declare const McpServerDecisionResponse: z.ZodObject<{
+    ok: z.ZodLiteral<true>;
+    server: z.ZodObject<{
+        serverId: z.ZodString;
+        serverName: z.ZodString;
+        status: z.ZodEnum<["candidate", "approved", "blocked"]>;
+        harness: z.ZodNullable<z.ZodString>;
+        transport: z.ZodNullable<z.ZodString>;
+        pinFingerprint: z.ZodNullable<z.ZodString>;
+        tools: z.ZodArray<z.ZodString, "many">;
+        disabledTools: z.ZodArray<z.ZodString, "many">;
+        firstSeenAt: z.ZodString;
+        lastSeenAt: z.ZodString;
+        decidedBy: z.ZodNullable<z.ZodString>;
+        decidedAt: z.ZodNullable<z.ZodString>;
+        ungovernedReason: z.ZodNullable<z.ZodString>;
+        heldForReview: z.ZodBoolean;
+        lastToolChange: z.ZodNullable<z.ZodObject<{
+            changeId: z.ZodString;
+            createdAt: z.ZodString;
+            riskScore: z.ZodNumber;
+            riskLevel: z.ZodEnum<["none", "low", "medium", "high"]>;
+            reasons: z.ZodArray<z.ZodObject<{
+                rule: z.ZodString;
+                tool: z.ZodString;
+                points: z.ZodNumber;
+                detail: z.ZodString;
+            }, "strip", z.ZodTypeAny, {
+                tool: string;
+                rule: string;
+                detail: string;
+                points: number;
+            }, {
+                tool: string;
+                rule: string;
+                detail: string;
+                points: number;
+            }>, "many">;
+            added: z.ZodArray<z.ZodString, "many">;
+            removed: z.ZodArray<z.ZodString, "many">;
+            changed: z.ZodArray<z.ZodString, "many">;
+        }, "strip", z.ZodTypeAny, {
+            createdAt: string;
+            reasons: {
+                tool: string;
+                rule: string;
+                detail: string;
+                points: number;
+            }[];
+            changeId: string;
+            riskScore: number;
+            riskLevel: "high" | "medium" | "low" | "none";
+            added: string[];
+            removed: string[];
+            changed: string[];
+        }, {
+            createdAt: string;
+            reasons: {
+                tool: string;
+                rule: string;
+                detail: string;
+                points: number;
+            }[];
+            changeId: string;
+            riskScore: number;
+            riskLevel: "high" | "medium" | "low" | "none";
+            added: string[];
+            removed: string[];
+            changed: string[];
+        }>>;
+    }, "strip", z.ZodTypeAny, {
+        status: "approved" | "candidate" | "blocked";
+        harness: string | null;
+        tools: string[];
+        disabledTools: string[];
+        decidedBy: string | null;
+        decidedAt: string | null;
+        firstSeenAt: string;
+        lastSeenAt: string;
+        transport: string | null;
+        serverId: string;
+        serverName: string;
+        pinFingerprint: string | null;
+        ungovernedReason: string | null;
+        heldForReview: boolean;
+        lastToolChange: {
+            createdAt: string;
+            reasons: {
+                tool: string;
+                rule: string;
+                detail: string;
+                points: number;
+            }[];
+            changeId: string;
+            riskScore: number;
+            riskLevel: "high" | "medium" | "low" | "none";
+            added: string[];
+            removed: string[];
+            changed: string[];
+        } | null;
+    }, {
+        status: "approved" | "candidate" | "blocked";
+        harness: string | null;
+        tools: string[];
+        disabledTools: string[];
+        decidedBy: string | null;
+        decidedAt: string | null;
+        firstSeenAt: string;
+        lastSeenAt: string;
+        transport: string | null;
+        serverId: string;
+        serverName: string;
+        pinFingerprint: string | null;
+        ungovernedReason: string | null;
+        heldForReview: boolean;
+        lastToolChange: {
+            createdAt: string;
+            reasons: {
+                tool: string;
+                rule: string;
+                detail: string;
+                points: number;
+            }[];
+            changeId: string;
+            riskScore: number;
+            riskLevel: "high" | "medium" | "low" | "none";
+            added: string[];
+            removed: string[];
+            changed: string[];
+        } | null;
+    }>;
+}, "strip", z.ZodTypeAny, {
+    ok: true;
+    server: {
+        status: "approved" | "candidate" | "blocked";
+        harness: string | null;
+        tools: string[];
+        disabledTools: string[];
+        decidedBy: string | null;
+        decidedAt: string | null;
+        firstSeenAt: string;
+        lastSeenAt: string;
+        transport: string | null;
+        serverId: string;
+        serverName: string;
+        pinFingerprint: string | null;
+        ungovernedReason: string | null;
+        heldForReview: boolean;
+        lastToolChange: {
+            createdAt: string;
+            reasons: {
+                tool: string;
+                rule: string;
+                detail: string;
+                points: number;
+            }[];
+            changeId: string;
+            riskScore: number;
+            riskLevel: "high" | "medium" | "low" | "none";
+            added: string[];
+            removed: string[];
+            changed: string[];
+        } | null;
+    };
+}, {
+    ok: true;
+    server: {
+        status: "approved" | "candidate" | "blocked";
+        harness: string | null;
+        tools: string[];
+        disabledTools: string[];
+        decidedBy: string | null;
+        decidedAt: string | null;
+        firstSeenAt: string;
+        lastSeenAt: string;
+        transport: string | null;
+        serverId: string;
+        serverName: string;
+        pinFingerprint: string | null;
+        ungovernedReason: string | null;
+        heldForReview: boolean;
+        lastToolChange: {
+            createdAt: string;
+            reasons: {
+                tool: string;
+                rule: string;
+                detail: string;
+                points: number;
+            }[];
+            changeId: string;
+            riskScore: number;
+            riskLevel: "high" | "medium" | "low" | "none";
+            added: string[];
+            removed: string[];
+            changed: string[];
+        } | null;
+    };
+}>;
+export type McpServerDecisionResponse = z.infer<typeof McpServerDecisionResponse>;
+/** `POST /api/v1/attenuate`: the child key, returned once. */
+export declare const AttenuationResponse: z.ZodObject<{
+    childKey: z.ZodString;
+    childKeyId: z.ZodString;
+    attenuationChainId: z.ZodString;
+    grantedCaps: z.ZodArray<z.ZodString, "many">;
+    expiresAt: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    expiresAt: string;
+    childKey: string;
+    childKeyId: string;
+    attenuationChainId: string;
+    grantedCaps: string[];
+}, {
+    expiresAt: string;
+    childKey: string;
+    childKeyId: string;
+    attenuationChainId: string;
+    grantedCaps: string[];
+}>;
+export type AttenuationResponse = z.infer<typeof AttenuationResponse>;
+/** A link of a delegation chain. */
+export declare const AttenuationChainLinkResponse: z.ZodObject<{
+    chainId: z.ZodString;
+    parentKeyId: z.ZodString;
+    childKeyId: z.ZodString;
+    workspaceId: z.ZodString;
+    grantedCaps: z.ZodArray<z.ZodString, "many">;
+    expiresAt: z.ZodString;
+    createdAt: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    workspaceId: string;
+    parentKeyId: string;
+    createdAt: string;
+    expiresAt: string;
+    childKeyId: string;
+    grantedCaps: string[];
+    chainId: string;
+}, {
+    workspaceId: string;
+    parentKeyId: string;
+    createdAt: string;
+    expiresAt: string;
+    childKeyId: string;
+    grantedCaps: string[];
+    chainId: string;
+}>;
+export type AttenuationChainLinkResponse = z.infer<typeof AttenuationChainLinkResponse>;
+/** `GET /api/v1/attenuate/chain/:chainId`: the chain's lineage, parent to child. */
+export declare const AttenuationChainResponse: z.ZodObject<{
+    chain: z.ZodArray<z.ZodObject<{
+        chainId: z.ZodString;
+        parentKeyId: z.ZodString;
+        childKeyId: z.ZodString;
+        workspaceId: z.ZodString;
+        grantedCaps: z.ZodArray<z.ZodString, "many">;
+        expiresAt: z.ZodString;
+        createdAt: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        workspaceId: string;
+        parentKeyId: string;
+        createdAt: string;
+        expiresAt: string;
+        childKeyId: string;
+        grantedCaps: string[];
+        chainId: string;
+    }, {
+        workspaceId: string;
+        parentKeyId: string;
+        createdAt: string;
+        expiresAt: string;
+        childKeyId: string;
+        grantedCaps: string[];
+        chainId: string;
+    }>, "many">;
+}, "strip", z.ZodTypeAny, {
+    chain: {
+        workspaceId: string;
+        parentKeyId: string;
+        createdAt: string;
+        expiresAt: string;
+        childKeyId: string;
+        grantedCaps: string[];
+        chainId: string;
+    }[];
+}, {
+    chain: {
+        workspaceId: string;
+        parentKeyId: string;
+        createdAt: string;
+        expiresAt: string;
+        childKeyId: string;
+        grantedCaps: string[];
+        chainId: string;
+    }[];
+}>;
+export type AttenuationChainResponse = z.infer<typeof AttenuationChainResponse>;
+/** A compliance probe's result (`complianceProbesService.ts` `ProbeResult`). */
+export declare const ProbeResultResponse: z.ZodObject<{
+    probeId: z.ZodString;
+    probeType: z.ZodEnum<["policy_check", "mfa_enforcement", "data_residency", "audit_log_integrity", "token_rotation", "sop_coverage", "auto_apply_provenance", "sop_git_drift", "guard_liveness", "guardrail_authority", "provider_availability"]>;
+    status: z.ZodEnum<["pass", "fail", "warn", "error", "not_enforced"]>;
+    score: z.ZodNumber;
+    details: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+    remediation: z.ZodNullable<z.ZodString>;
+    probedAt: z.ZodString;
+    observedSince: z.ZodString;
+    observations: z.ZodNumber;
+}, "strip", z.ZodTypeAny, {
+    status: "error" | "warn" | "pass" | "fail" | "not_enforced";
+    score: number;
+    probeId: string;
+    probeType: "policy_check" | "mfa_enforcement" | "data_residency" | "audit_log_integrity" | "token_rotation" | "sop_coverage" | "auto_apply_provenance" | "sop_git_drift" | "guard_liveness" | "guardrail_authority" | "provider_availability";
+    details: Record<string, unknown>;
+    remediation: string | null;
+    probedAt: string;
+    observedSince: string;
+    observations: number;
+}, {
+    status: "error" | "warn" | "pass" | "fail" | "not_enforced";
+    score: number;
+    probeId: string;
+    probeType: "policy_check" | "mfa_enforcement" | "data_residency" | "audit_log_integrity" | "token_rotation" | "sop_coverage" | "auto_apply_provenance" | "sop_git_drift" | "guard_liveness" | "guardrail_authority" | "provider_availability";
+    details: Record<string, unknown>;
+    remediation: string | null;
+    probedAt: string;
+    observedSince: string;
+    observations: number;
+}>;
+export type ProbeResultResponse = z.infer<typeof ProbeResultResponse>;
+/** `GET /api/v1/compliance/frameworks/:frameworkId/coverage` (JSON): coverage of one framework from the latest probe results. */
+export declare const FrameworkCoverageResponse: z.ZodObject<{
+    frameworkId: z.ZodEnum<["eu_ai_act", "iso_42001", "nist_ai_rmf", "mitre_atlas"]>;
+    name: z.ZodString;
+    citation: z.ZodString;
+    scope: z.ZodString;
+    mappingVersion: z.ZodString;
+    generatedAt: z.ZodString;
+    summary: z.ZodObject<{
+        controls: z.ZodNumber;
+        mapped: z.ZodNumber;
+        full: z.ZodNumber;
+        partial: z.ZodNumber;
+        states: z.ZodObject<{
+            evidenced: z.ZodNumber;
+            warning: z.ZodNumber;
+            failing: z.ZodNumber;
+            not_evidenced: z.ZodNumber;
+            records_only: z.ZodNumber;
+        }, "strip", z.ZodTypeAny, {
+            evidenced: number;
+            warning: number;
+            failing: number;
+            not_evidenced: number;
+            records_only: number;
+        }, {
+            evidenced: number;
+            warning: number;
+            failing: number;
+            not_evidenced: number;
+            records_only: number;
+        }>;
+    }, "strip", z.ZodTypeAny, {
+        controls: number;
+        mapped: number;
+        full: number;
+        partial: number;
+        states: {
+            evidenced: number;
+            warning: number;
+            failing: number;
+            not_evidenced: number;
+            records_only: number;
+        };
+    }, {
+        controls: number;
+        mapped: number;
+        full: number;
+        partial: number;
+        states: {
+            evidenced: number;
+            warning: number;
+            failing: number;
+            not_evidenced: number;
+            records_only: number;
+        };
+    }>;
+    controls: z.ZodArray<z.ZodObject<{
+        controlId: z.ZodString;
+        title: z.ZodString;
+        coverage: z.ZodEnum<["full", "partial", "not_mapped"]>;
+        state: z.ZodNullable<z.ZodEnum<["evidenced", "warning", "failing", "not_evidenced", "records_only"]>>;
+        evidence: z.ZodArray<z.ZodObject<{
+            kind: z.ZodEnum<["probe", "artifact", "control"]>;
+            id: z.ZodString;
+            title: z.ZodString;
+            reference: z.ZodNullable<z.ZodString>;
+            satisfies: z.ZodString;
+            state: z.ZodEnum<["pass", "fail", "warn", "error", "not_enforced", "not_run", "available"]>;
+            probedAt: z.ZodNullable<z.ZodString>;
+        }, "strip", z.ZodTypeAny, {
+            id: string;
+            kind: "probe" | "artifact" | "control";
+            title: string;
+            state: "error" | "warn" | "pass" | "fail" | "not_enforced" | "not_run" | "available";
+            probedAt: string | null;
+            reference: string | null;
+            satisfies: string;
+        }, {
+            id: string;
+            kind: "probe" | "artifact" | "control";
+            title: string;
+            state: "error" | "warn" | "pass" | "fail" | "not_enforced" | "not_run" | "available";
+            probedAt: string | null;
+            reference: string | null;
+            satisfies: string;
+        }>, "many">;
+        gaps: z.ZodArray<z.ZodString, "many">;
+        mitigates: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            name: z.ZodString;
+        }, "strip", z.ZodTypeAny, {
+            name: string;
+            id: string;
+        }, {
+            name: string;
+            id: string;
+        }>, "many">>;
+    }, "strip", z.ZodTypeAny, {
+        title: string;
+        coverage: "full" | "partial" | "not_mapped";
+        state: "evidenced" | "warning" | "failing" | "not_evidenced" | "records_only" | null;
+        controlId: string;
+        evidence: {
+            id: string;
+            kind: "probe" | "artifact" | "control";
+            title: string;
+            state: "error" | "warn" | "pass" | "fail" | "not_enforced" | "not_run" | "available";
+            probedAt: string | null;
+            reference: string | null;
+            satisfies: string;
+        }[];
+        gaps: string[];
+        mitigates?: {
+            name: string;
+            id: string;
+        }[] | undefined;
+    }, {
+        title: string;
+        coverage: "full" | "partial" | "not_mapped";
+        state: "evidenced" | "warning" | "failing" | "not_evidenced" | "records_only" | null;
+        controlId: string;
+        evidence: {
+            id: string;
+            kind: "probe" | "artifact" | "control";
+            title: string;
+            state: "error" | "warn" | "pass" | "fail" | "not_enforced" | "not_run" | "available";
+            probedAt: string | null;
+            reference: string | null;
+            satisfies: string;
+        }[];
+        gaps: string[];
+        mitigates?: {
+            name: string;
+            id: string;
+        }[] | undefined;
+    }>, "many">;
+}, "strip", z.ZodTypeAny, {
+    name: string;
+    scope: string;
+    summary: {
+        controls: number;
+        mapped: number;
+        full: number;
+        partial: number;
+        states: {
+            evidenced: number;
+            warning: number;
+            failing: number;
+            not_evidenced: number;
+            records_only: number;
+        };
+    };
+    frameworkId: "eu_ai_act" | "iso_42001" | "nist_ai_rmf" | "mitre_atlas";
+    citation: string;
+    mappingVersion: string;
+    generatedAt: string;
+    controls: {
+        title: string;
+        coverage: "full" | "partial" | "not_mapped";
+        state: "evidenced" | "warning" | "failing" | "not_evidenced" | "records_only" | null;
+        controlId: string;
+        evidence: {
+            id: string;
+            kind: "probe" | "artifact" | "control";
+            title: string;
+            state: "error" | "warn" | "pass" | "fail" | "not_enforced" | "not_run" | "available";
+            probedAt: string | null;
+            reference: string | null;
+            satisfies: string;
+        }[];
+        gaps: string[];
+        mitigates?: {
+            name: string;
+            id: string;
+        }[] | undefined;
+    }[];
+}, {
+    name: string;
+    scope: string;
+    summary: {
+        controls: number;
+        mapped: number;
+        full: number;
+        partial: number;
+        states: {
+            evidenced: number;
+            warning: number;
+            failing: number;
+            not_evidenced: number;
+            records_only: number;
+        };
+    };
+    frameworkId: "eu_ai_act" | "iso_42001" | "nist_ai_rmf" | "mitre_atlas";
+    citation: string;
+    mappingVersion: string;
+    generatedAt: string;
+    controls: {
+        title: string;
+        coverage: "full" | "partial" | "not_mapped";
+        state: "evidenced" | "warning" | "failing" | "not_evidenced" | "records_only" | null;
+        controlId: string;
+        evidence: {
+            id: string;
+            kind: "probe" | "artifact" | "control";
+            title: string;
+            state: "error" | "warn" | "pass" | "fail" | "not_enforced" | "not_run" | "available";
+            probedAt: string | null;
+            reference: string | null;
+            satisfies: string;
+        }[];
+        gaps: string[];
+        mitigates?: {
+            name: string;
+            id: string;
+        }[] | undefined;
+    }[];
+}>;
+export type FrameworkCoverageResponse = z.infer<typeof FrameworkCoverageResponse>;
+/** A SOC 2 evidence archive (`soc2EvidenceService.ts` `Soc2EvidenceArchive`). */
+export declare const Soc2EvidenceArchiveResponse: z.ZodObject<{
+    formatVersion: z.ZodUnion<[z.ZodLiteral<1>, z.ZodLiteral<2>, z.ZodLiteral<3>]>;
+    workspaceId: z.ZodString;
+    runId: z.ZodString;
+    periodStart: z.ZodString;
+    periodEnd: z.ZodString;
+    collectedAt: z.ZodString;
+    overallScore: z.ZodNullable<z.ZodNumber>;
+    categories: z.ZodArray<z.ZodObject<{
+        category: z.ZodEnum<["security", "availability", "processing_integrity", "confidentiality", "privacy"]>;
+        score: z.ZodNullable<z.ZodNumber>;
+        probes: z.ZodArray<z.ZodObject<{
+            probeId: z.ZodString;
+            probeType: z.ZodEnum<["policy_check", "mfa_enforcement", "data_residency", "audit_log_integrity", "token_rotation", "sop_coverage", "auto_apply_provenance", "sop_git_drift", "guard_liveness", "guardrail_authority", "provider_availability"]>;
+            status: z.ZodEnum<["pass", "fail", "warn", "error", "not_enforced"]>;
+            score: z.ZodNumber;
+            details: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+            remediation: z.ZodNullable<z.ZodString>;
+            probedAt: z.ZodString;
+            observedSince: z.ZodString;
+            observations: z.ZodNumber;
+        }, "strip", z.ZodTypeAny, {
+            status: "error" | "warn" | "pass" | "fail" | "not_enforced";
+            score: number;
+            probeId: string;
+            probeType: "policy_check" | "mfa_enforcement" | "data_residency" | "audit_log_integrity" | "token_rotation" | "sop_coverage" | "auto_apply_provenance" | "sop_git_drift" | "guard_liveness" | "guardrail_authority" | "provider_availability";
+            details: Record<string, unknown>;
+            remediation: string | null;
+            probedAt: string;
+            observedSince: string;
+            observations: number;
+        }, {
+            status: "error" | "warn" | "pass" | "fail" | "not_enforced";
+            score: number;
+            probeId: string;
+            probeType: "policy_check" | "mfa_enforcement" | "data_residency" | "audit_log_integrity" | "token_rotation" | "sop_coverage" | "auto_apply_provenance" | "sop_git_drift" | "guard_liveness" | "guardrail_authority" | "provider_availability";
+            details: Record<string, unknown>;
+            remediation: string | null;
+            probedAt: string;
+            observedSince: string;
+            observations: number;
+        }>, "many">;
+        counts: z.ZodRecord<z.ZodString, z.ZodNumber>;
+        sampleIds: z.ZodRecord<z.ZodString, z.ZodArray<z.ZodString, "many">>;
+        gaps: z.ZodArray<z.ZodString, "many">;
+    }, "strip", z.ZodTypeAny, {
+        probes: {
+            status: "error" | "warn" | "pass" | "fail" | "not_enforced";
+            score: number;
+            probeId: string;
+            probeType: "policy_check" | "mfa_enforcement" | "data_residency" | "audit_log_integrity" | "token_rotation" | "sop_coverage" | "auto_apply_provenance" | "sop_git_drift" | "guard_liveness" | "guardrail_authority" | "provider_availability";
+            details: Record<string, unknown>;
+            remediation: string | null;
+            probedAt: string;
+            observedSince: string;
+            observations: number;
+        }[];
+        score: number | null;
+        gaps: string[];
+        category: "security" | "availability" | "processing_integrity" | "confidentiality" | "privacy";
+        counts: Record<string, number>;
+        sampleIds: Record<string, string[]>;
+    }, {
+        probes: {
+            status: "error" | "warn" | "pass" | "fail" | "not_enforced";
+            score: number;
+            probeId: string;
+            probeType: "policy_check" | "mfa_enforcement" | "data_residency" | "audit_log_integrity" | "token_rotation" | "sop_coverage" | "auto_apply_provenance" | "sop_git_drift" | "guard_liveness" | "guardrail_authority" | "provider_availability";
+            details: Record<string, unknown>;
+            remediation: string | null;
+            probedAt: string;
+            observedSince: string;
+            observations: number;
+        }[];
+        score: number | null;
+        gaps: string[];
+        category: "security" | "availability" | "processing_integrity" | "confidentiality" | "privacy";
+        counts: Record<string, number>;
+        sampleIds: Record<string, string[]>;
+    }>, "many">;
+    probeHistoryDigest: z.ZodArray<z.ZodObject<{
+        probeType: z.ZodEnum<["policy_check", "mfa_enforcement", "data_residency", "audit_log_integrity", "token_rotation", "sop_coverage", "auto_apply_provenance", "sop_git_drift", "guard_liveness", "guardrail_authority", "provider_availability"]>;
+        rows: z.ZodNumber;
+        firstAt: z.ZodNullable<z.ZodString>;
+        lastAt: z.ZodNullable<z.ZodString>;
+        statusCounts: z.ZodRecord<z.ZodString, z.ZodNumber>;
+    }, "strip", z.ZodTypeAny, {
+        probeType: "policy_check" | "mfa_enforcement" | "data_residency" | "audit_log_integrity" | "token_rotation" | "sop_coverage" | "auto_apply_provenance" | "sop_git_drift" | "guard_liveness" | "guardrail_authority" | "provider_availability";
+        rows: number;
+        firstAt: string | null;
+        lastAt: string | null;
+        statusCounts: Record<string, number>;
+    }, {
+        probeType: "policy_check" | "mfa_enforcement" | "data_residency" | "audit_log_integrity" | "token_rotation" | "sop_coverage" | "auto_apply_provenance" | "sop_git_drift" | "guard_liveness" | "guardrail_authority" | "provider_availability";
+        rows: number;
+        firstAt: string | null;
+        lastAt: string | null;
+        statusCounts: Record<string, number>;
+    }>, "many">;
+    frameworks: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        coverage: z.ZodObject<{
+            frameworkId: z.ZodEnum<["eu_ai_act", "iso_42001", "nist_ai_rmf", "mitre_atlas"]>;
+            name: z.ZodString;
+            citation: z.ZodString;
+            scope: z.ZodString;
+            mappingVersion: z.ZodString;
+            generatedAt: z.ZodString;
+            summary: z.ZodObject<{
+                controls: z.ZodNumber;
+                mapped: z.ZodNumber;
+                full: z.ZodNumber;
+                partial: z.ZodNumber;
+                states: z.ZodObject<{
+                    evidenced: z.ZodNumber;
+                    warning: z.ZodNumber;
+                    failing: z.ZodNumber;
+                    not_evidenced: z.ZodNumber;
+                    records_only: z.ZodNumber;
+                }, "strip", z.ZodTypeAny, {
+                    evidenced: number;
+                    warning: number;
+                    failing: number;
+                    not_evidenced: number;
+                    records_only: number;
+                }, {
+                    evidenced: number;
+                    warning: number;
+                    failing: number;
+                    not_evidenced: number;
+                    records_only: number;
+                }>;
+            }, "strip", z.ZodTypeAny, {
+                controls: number;
+                mapped: number;
+                full: number;
+                partial: number;
+                states: {
+                    evidenced: number;
+                    warning: number;
+                    failing: number;
+                    not_evidenced: number;
+                    records_only: number;
+                };
+            }, {
+                controls: number;
+                mapped: number;
+                full: number;
+                partial: number;
+                states: {
+                    evidenced: number;
+                    warning: number;
+                    failing: number;
+                    not_evidenced: number;
+                    records_only: number;
+                };
+            }>;
+            controls: z.ZodArray<z.ZodObject<{
+                controlId: z.ZodString;
+                title: z.ZodString;
+                coverage: z.ZodEnum<["full", "partial", "not_mapped"]>;
+                state: z.ZodNullable<z.ZodEnum<["evidenced", "warning", "failing", "not_evidenced", "records_only"]>>;
+                evidence: z.ZodArray<z.ZodObject<{
+                    kind: z.ZodEnum<["probe", "artifact", "control"]>;
+                    id: z.ZodString;
+                    title: z.ZodString;
+                    reference: z.ZodNullable<z.ZodString>;
+                    satisfies: z.ZodString;
+                    state: z.ZodEnum<["pass", "fail", "warn", "error", "not_enforced", "not_run", "available"]>;
+                    probedAt: z.ZodNullable<z.ZodString>;
+                }, "strip", z.ZodTypeAny, {
+                    id: string;
+                    kind: "probe" | "artifact" | "control";
+                    title: string;
+                    state: "error" | "warn" | "pass" | "fail" | "not_enforced" | "not_run" | "available";
+                    probedAt: string | null;
+                    reference: string | null;
+                    satisfies: string;
+                }, {
+                    id: string;
+                    kind: "probe" | "artifact" | "control";
+                    title: string;
+                    state: "error" | "warn" | "pass" | "fail" | "not_enforced" | "not_run" | "available";
+                    probedAt: string | null;
+                    reference: string | null;
+                    satisfies: string;
+                }>, "many">;
+                gaps: z.ZodArray<z.ZodString, "many">;
+                mitigates: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                    id: z.ZodString;
+                    name: z.ZodString;
+                }, "strip", z.ZodTypeAny, {
+                    name: string;
+                    id: string;
+                }, {
+                    name: string;
+                    id: string;
+                }>, "many">>;
+            }, "strip", z.ZodTypeAny, {
+                title: string;
+                coverage: "full" | "partial" | "not_mapped";
+                state: "evidenced" | "warning" | "failing" | "not_evidenced" | "records_only" | null;
+                controlId: string;
+                evidence: {
+                    id: string;
+                    kind: "probe" | "artifact" | "control";
+                    title: string;
+                    state: "error" | "warn" | "pass" | "fail" | "not_enforced" | "not_run" | "available";
+                    probedAt: string | null;
+                    reference: string | null;
+                    satisfies: string;
+                }[];
+                gaps: string[];
+                mitigates?: {
+                    name: string;
+                    id: string;
+                }[] | undefined;
+            }, {
+                title: string;
+                coverage: "full" | "partial" | "not_mapped";
+                state: "evidenced" | "warning" | "failing" | "not_evidenced" | "records_only" | null;
+                controlId: string;
+                evidence: {
+                    id: string;
+                    kind: "probe" | "artifact" | "control";
+                    title: string;
+                    state: "error" | "warn" | "pass" | "fail" | "not_enforced" | "not_run" | "available";
+                    probedAt: string | null;
+                    reference: string | null;
+                    satisfies: string;
+                }[];
+                gaps: string[];
+                mitigates?: {
+                    name: string;
+                    id: string;
+                }[] | undefined;
+            }>, "many">;
+        }, "strip", z.ZodTypeAny, {
+            name: string;
+            scope: string;
+            summary: {
+                controls: number;
+                mapped: number;
+                full: number;
+                partial: number;
+                states: {
+                    evidenced: number;
+                    warning: number;
+                    failing: number;
+                    not_evidenced: number;
+                    records_only: number;
+                };
+            };
+            frameworkId: "eu_ai_act" | "iso_42001" | "nist_ai_rmf" | "mitre_atlas";
+            citation: string;
+            mappingVersion: string;
+            generatedAt: string;
+            controls: {
+                title: string;
+                coverage: "full" | "partial" | "not_mapped";
+                state: "evidenced" | "warning" | "failing" | "not_evidenced" | "records_only" | null;
+                controlId: string;
+                evidence: {
+                    id: string;
+                    kind: "probe" | "artifact" | "control";
+                    title: string;
+                    state: "error" | "warn" | "pass" | "fail" | "not_enforced" | "not_run" | "available";
+                    probedAt: string | null;
+                    reference: string | null;
+                    satisfies: string;
+                }[];
+                gaps: string[];
+                mitigates?: {
+                    name: string;
+                    id: string;
+                }[] | undefined;
+            }[];
+        }, {
+            name: string;
+            scope: string;
+            summary: {
+                controls: number;
+                mapped: number;
+                full: number;
+                partial: number;
+                states: {
+                    evidenced: number;
+                    warning: number;
+                    failing: number;
+                    not_evidenced: number;
+                    records_only: number;
+                };
+            };
+            frameworkId: "eu_ai_act" | "iso_42001" | "nist_ai_rmf" | "mitre_atlas";
+            citation: string;
+            mappingVersion: string;
+            generatedAt: string;
+            controls: {
+                title: string;
+                coverage: "full" | "partial" | "not_mapped";
+                state: "evidenced" | "warning" | "failing" | "not_evidenced" | "records_only" | null;
+                controlId: string;
+                evidence: {
+                    id: string;
+                    kind: "probe" | "artifact" | "control";
+                    title: string;
+                    state: "error" | "warn" | "pass" | "fail" | "not_enforced" | "not_run" | "available";
+                    probedAt: string | null;
+                    reference: string | null;
+                    satisfies: string;
+                }[];
+                gaps: string[];
+                mitigates?: {
+                    name: string;
+                    id: string;
+                }[] | undefined;
+            }[];
+        }>;
+        report: z.ZodString;
+        csv: z.ZodOptional<z.ZodString>;
+        pdf: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        coverage: {
+            name: string;
+            scope: string;
+            summary: {
+                controls: number;
+                mapped: number;
+                full: number;
+                partial: number;
+                states: {
+                    evidenced: number;
+                    warning: number;
+                    failing: number;
+                    not_evidenced: number;
+                    records_only: number;
+                };
+            };
+            frameworkId: "eu_ai_act" | "iso_42001" | "nist_ai_rmf" | "mitre_atlas";
+            citation: string;
+            mappingVersion: string;
+            generatedAt: string;
+            controls: {
+                title: string;
+                coverage: "full" | "partial" | "not_mapped";
+                state: "evidenced" | "warning" | "failing" | "not_evidenced" | "records_only" | null;
+                controlId: string;
+                evidence: {
+                    id: string;
+                    kind: "probe" | "artifact" | "control";
+                    title: string;
+                    state: "error" | "warn" | "pass" | "fail" | "not_enforced" | "not_run" | "available";
+                    probedAt: string | null;
+                    reference: string | null;
+                    satisfies: string;
+                }[];
+                gaps: string[];
+                mitigates?: {
+                    name: string;
+                    id: string;
+                }[] | undefined;
+            }[];
+        };
+        report: string;
+        csv?: string | undefined;
+        pdf?: string | undefined;
+    }, {
+        coverage: {
+            name: string;
+            scope: string;
+            summary: {
+                controls: number;
+                mapped: number;
+                full: number;
+                partial: number;
+                states: {
+                    evidenced: number;
+                    warning: number;
+                    failing: number;
+                    not_evidenced: number;
+                    records_only: number;
+                };
+            };
+            frameworkId: "eu_ai_act" | "iso_42001" | "nist_ai_rmf" | "mitre_atlas";
+            citation: string;
+            mappingVersion: string;
+            generatedAt: string;
+            controls: {
+                title: string;
+                coverage: "full" | "partial" | "not_mapped";
+                state: "evidenced" | "warning" | "failing" | "not_evidenced" | "records_only" | null;
+                controlId: string;
+                evidence: {
+                    id: string;
+                    kind: "probe" | "artifact" | "control";
+                    title: string;
+                    state: "error" | "warn" | "pass" | "fail" | "not_enforced" | "not_run" | "available";
+                    probedAt: string | null;
+                    reference: string | null;
+                    satisfies: string;
+                }[];
+                gaps: string[];
+                mitigates?: {
+                    name: string;
+                    id: string;
+                }[] | undefined;
+            }[];
+        };
+        report: string;
+        csv?: string | undefined;
+        pdf?: string | undefined;
+    }>, "many">>;
+    manifest: z.ZodObject<{
+        algorithm: z.ZodLiteral<"sha256">;
+        sections: z.ZodRecord<z.ZodString, z.ZodString>;
+        archiveSha256: z.ZodString;
+        signed: z.ZodOptional<z.ZodBoolean>;
+        unsignedReason: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        algorithm: "sha256";
+        sections: Record<string, string>;
+        archiveSha256: string;
+        signed?: boolean | undefined;
+        unsignedReason?: string | undefined;
+    }, {
+        algorithm: "sha256";
+        sections: Record<string, string>;
+        archiveSha256: string;
+        signed?: boolean | undefined;
+        unsignedReason?: string | undefined;
+    }>;
+    signature: z.ZodNullable<z.ZodObject<{
+        algorithm: z.ZodLiteral<"Ed25519">;
+        keyId: z.ZodString;
+        preimageDomain: z.ZodString;
+        value: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        value: string;
+        keyId: string;
+        algorithm: "Ed25519";
+        preimageDomain: string;
+    }, {
+        value: string;
+        keyId: string;
+        algorithm: "Ed25519";
+        preimageDomain: string;
+    }>>;
+}, "strip", z.ZodTypeAny, {
+    workspaceId: string;
+    runId: string;
+    categories: {
+        probes: {
+            status: "error" | "warn" | "pass" | "fail" | "not_enforced";
+            score: number;
+            probeId: string;
+            probeType: "policy_check" | "mfa_enforcement" | "data_residency" | "audit_log_integrity" | "token_rotation" | "sop_coverage" | "auto_apply_provenance" | "sop_git_drift" | "guard_liveness" | "guardrail_authority" | "provider_availability";
+            details: Record<string, unknown>;
+            remediation: string | null;
+            probedAt: string;
+            observedSince: string;
+            observations: number;
+        }[];
+        score: number | null;
+        gaps: string[];
+        category: "security" | "availability" | "processing_integrity" | "confidentiality" | "privacy";
+        counts: Record<string, number>;
+        sampleIds: Record<string, string[]>;
+    }[];
+    signature: {
+        value: string;
+        keyId: string;
+        algorithm: "Ed25519";
+        preimageDomain: string;
+    } | null;
+    formatVersion: 1 | 2 | 3;
+    periodStart: string;
+    periodEnd: string;
+    collectedAt: string;
+    overallScore: number | null;
+    probeHistoryDigest: {
+        probeType: "policy_check" | "mfa_enforcement" | "data_residency" | "audit_log_integrity" | "token_rotation" | "sop_coverage" | "auto_apply_provenance" | "sop_git_drift" | "guard_liveness" | "guardrail_authority" | "provider_availability";
+        rows: number;
+        firstAt: string | null;
+        lastAt: string | null;
+        statusCounts: Record<string, number>;
+    }[];
+    manifest: {
+        algorithm: "sha256";
+        sections: Record<string, string>;
+        archiveSha256: string;
+        signed?: boolean | undefined;
+        unsignedReason?: string | undefined;
+    };
+    frameworks?: {
+        coverage: {
+            name: string;
+            scope: string;
+            summary: {
+                controls: number;
+                mapped: number;
+                full: number;
+                partial: number;
+                states: {
+                    evidenced: number;
+                    warning: number;
+                    failing: number;
+                    not_evidenced: number;
+                    records_only: number;
+                };
+            };
+            frameworkId: "eu_ai_act" | "iso_42001" | "nist_ai_rmf" | "mitre_atlas";
+            citation: string;
+            mappingVersion: string;
+            generatedAt: string;
+            controls: {
+                title: string;
+                coverage: "full" | "partial" | "not_mapped";
+                state: "evidenced" | "warning" | "failing" | "not_evidenced" | "records_only" | null;
+                controlId: string;
+                evidence: {
+                    id: string;
+                    kind: "probe" | "artifact" | "control";
+                    title: string;
+                    state: "error" | "warn" | "pass" | "fail" | "not_enforced" | "not_run" | "available";
+                    probedAt: string | null;
+                    reference: string | null;
+                    satisfies: string;
+                }[];
+                gaps: string[];
+                mitigates?: {
+                    name: string;
+                    id: string;
+                }[] | undefined;
+            }[];
+        };
+        report: string;
+        csv?: string | undefined;
+        pdf?: string | undefined;
+    }[] | undefined;
+}, {
+    workspaceId: string;
+    runId: string;
+    categories: {
+        probes: {
+            status: "error" | "warn" | "pass" | "fail" | "not_enforced";
+            score: number;
+            probeId: string;
+            probeType: "policy_check" | "mfa_enforcement" | "data_residency" | "audit_log_integrity" | "token_rotation" | "sop_coverage" | "auto_apply_provenance" | "sop_git_drift" | "guard_liveness" | "guardrail_authority" | "provider_availability";
+            details: Record<string, unknown>;
+            remediation: string | null;
+            probedAt: string;
+            observedSince: string;
+            observations: number;
+        }[];
+        score: number | null;
+        gaps: string[];
+        category: "security" | "availability" | "processing_integrity" | "confidentiality" | "privacy";
+        counts: Record<string, number>;
+        sampleIds: Record<string, string[]>;
+    }[];
+    signature: {
+        value: string;
+        keyId: string;
+        algorithm: "Ed25519";
+        preimageDomain: string;
+    } | null;
+    formatVersion: 1 | 2 | 3;
+    periodStart: string;
+    periodEnd: string;
+    collectedAt: string;
+    overallScore: number | null;
+    probeHistoryDigest: {
+        probeType: "policy_check" | "mfa_enforcement" | "data_residency" | "audit_log_integrity" | "token_rotation" | "sop_coverage" | "auto_apply_provenance" | "sop_git_drift" | "guard_liveness" | "guardrail_authority" | "provider_availability";
+        rows: number;
+        firstAt: string | null;
+        lastAt: string | null;
+        statusCounts: Record<string, number>;
+    }[];
+    manifest: {
+        algorithm: "sha256";
+        sections: Record<string, string>;
+        archiveSha256: string;
+        signed?: boolean | undefined;
+        unsignedReason?: string | undefined;
+    };
+    frameworks?: {
+        coverage: {
+            name: string;
+            scope: string;
+            summary: {
+                controls: number;
+                mapped: number;
+                full: number;
+                partial: number;
+                states: {
+                    evidenced: number;
+                    warning: number;
+                    failing: number;
+                    not_evidenced: number;
+                    records_only: number;
+                };
+            };
+            frameworkId: "eu_ai_act" | "iso_42001" | "nist_ai_rmf" | "mitre_atlas";
+            citation: string;
+            mappingVersion: string;
+            generatedAt: string;
+            controls: {
+                title: string;
+                coverage: "full" | "partial" | "not_mapped";
+                state: "evidenced" | "warning" | "failing" | "not_evidenced" | "records_only" | null;
+                controlId: string;
+                evidence: {
+                    id: string;
+                    kind: "probe" | "artifact" | "control";
+                    title: string;
+                    state: "error" | "warn" | "pass" | "fail" | "not_enforced" | "not_run" | "available";
+                    probedAt: string | null;
+                    reference: string | null;
+                    satisfies: string;
+                }[];
+                gaps: string[];
+                mitigates?: {
+                    name: string;
+                    id: string;
+                }[] | undefined;
+            }[];
+        };
+        report: string;
+        csv?: string | undefined;
+        pdf?: string | undefined;
+    }[] | undefined;
+}>;
+export type Soc2EvidenceArchiveResponse = z.infer<typeof Soc2EvidenceArchiveResponse>;
+/** `POST /api/v1/compliance/soc2-collect`: the sealed archive of a fresh collection, and whether it is signed. */
+export declare const Soc2CollectResponse: z.ZodUnion<[z.ZodObject<{
+    signed: z.ZodLiteral<true>;
+    signingKeyId: z.ZodString;
+    runId: z.ZodString;
+    archive: z.ZodObject<{
+        formatVersion: z.ZodUnion<[z.ZodLiteral<1>, z.ZodLiteral<2>, z.ZodLiteral<3>]>;
+        workspaceId: z.ZodString;
+        runId: z.ZodString;
+        periodStart: z.ZodString;
+        periodEnd: z.ZodString;
+        collectedAt: z.ZodString;
+        overallScore: z.ZodNullable<z.ZodNumber>;
+        categories: z.ZodArray<z.ZodObject<{
+            category: z.ZodEnum<["security", "availability", "processing_integrity", "confidentiality", "privacy"]>;
+            score: z.ZodNullable<z.ZodNumber>;
+            probes: z.ZodArray<z.ZodObject<{
+                probeId: z.ZodString;
+                probeType: z.ZodEnum<["policy_check", "mfa_enforcement", "data_residency", "audit_log_integrity", "token_rotation", "sop_coverage", "auto_apply_provenance", "sop_git_drift", "guard_liveness", "guardrail_authority", "provider_availability"]>;
+                status: z.ZodEnum<["pass", "fail", "warn", "error", "not_enforced"]>;
+                score: z.ZodNumber;
+                details: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+                remediation: z.ZodNullable<z.ZodString>;
+                probedAt: z.ZodString;
+                observedSince: z.ZodString;
+                observations: z.ZodNumber;
+            }, "strip", z.ZodTypeAny, {
+                status: "error" | "warn" | "pass" | "fail" | "not_enforced";
+                score: number;
+                probeId: string;
+                probeType: "policy_check" | "mfa_enforcement" | "data_residency" | "audit_log_integrity" | "token_rotation" | "sop_coverage" | "auto_apply_provenance" | "sop_git_drift" | "guard_liveness" | "guardrail_authority" | "provider_availability";
+                details: Record<string, unknown>;
+                remediation: string | null;
+                probedAt: string;
+                observedSince: string;
+                observations: number;
+            }, {
+                status: "error" | "warn" | "pass" | "fail" | "not_enforced";
+                score: number;
+                probeId: string;
+                probeType: "policy_check" | "mfa_enforcement" | "data_residency" | "audit_log_integrity" | "token_rotation" | "sop_coverage" | "auto_apply_provenance" | "sop_git_drift" | "guard_liveness" | "guardrail_authority" | "provider_availability";
+                details: Record<string, unknown>;
+                remediation: string | null;
+                probedAt: string;
+                observedSince: string;
+                observations: number;
+            }>, "many">;
+            counts: z.ZodRecord<z.ZodString, z.ZodNumber>;
+            sampleIds: z.ZodRecord<z.ZodString, z.ZodArray<z.ZodString, "many">>;
+            gaps: z.ZodArray<z.ZodString, "many">;
+        }, "strip", z.ZodTypeAny, {
+            probes: {
+                status: "error" | "warn" | "pass" | "fail" | "not_enforced";
+                score: number;
+                probeId: string;
+                probeType: "policy_check" | "mfa_enforcement" | "data_residency" | "audit_log_integrity" | "token_rotation" | "sop_coverage" | "auto_apply_provenance" | "sop_git_drift" | "guard_liveness" | "guardrail_authority" | "provider_availability";
+                details: Record<string, unknown>;
+                remediation: string | null;
+                probedAt: string;
+                observedSince: string;
+                observations: number;
+            }[];
+            score: number | null;
+            gaps: string[];
+            category: "security" | "availability" | "processing_integrity" | "confidentiality" | "privacy";
+            counts: Record<string, number>;
+            sampleIds: Record<string, string[]>;
+        }, {
+            probes: {
+                status: "error" | "warn" | "pass" | "fail" | "not_enforced";
+                score: number;
+                probeId: string;
+                probeType: "policy_check" | "mfa_enforcement" | "data_residency" | "audit_log_integrity" | "token_rotation" | "sop_coverage" | "auto_apply_provenance" | "sop_git_drift" | "guard_liveness" | "guardrail_authority" | "provider_availability";
+                details: Record<string, unknown>;
+                remediation: string | null;
+                probedAt: string;
+                observedSince: string;
+                observations: number;
+            }[];
+            score: number | null;
+            gaps: string[];
+            category: "security" | "availability" | "processing_integrity" | "confidentiality" | "privacy";
+            counts: Record<string, number>;
+            sampleIds: Record<string, string[]>;
+        }>, "many">;
+        probeHistoryDigest: z.ZodArray<z.ZodObject<{
+            probeType: z.ZodEnum<["policy_check", "mfa_enforcement", "data_residency", "audit_log_integrity", "token_rotation", "sop_coverage", "auto_apply_provenance", "sop_git_drift", "guard_liveness", "guardrail_authority", "provider_availability"]>;
+            rows: z.ZodNumber;
+            firstAt: z.ZodNullable<z.ZodString>;
+            lastAt: z.ZodNullable<z.ZodString>;
+            statusCounts: z.ZodRecord<z.ZodString, z.ZodNumber>;
+        }, "strip", z.ZodTypeAny, {
+            probeType: "policy_check" | "mfa_enforcement" | "data_residency" | "audit_log_integrity" | "token_rotation" | "sop_coverage" | "auto_apply_provenance" | "sop_git_drift" | "guard_liveness" | "guardrail_authority" | "provider_availability";
+            rows: number;
+            firstAt: string | null;
+            lastAt: string | null;
+            statusCounts: Record<string, number>;
+        }, {
+            probeType: "policy_check" | "mfa_enforcement" | "data_residency" | "audit_log_integrity" | "token_rotation" | "sop_coverage" | "auto_apply_provenance" | "sop_git_drift" | "guard_liveness" | "guardrail_authority" | "provider_availability";
+            rows: number;
+            firstAt: string | null;
+            lastAt: string | null;
+            statusCounts: Record<string, number>;
+        }>, "many">;
+        frameworks: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            coverage: z.ZodObject<{
+                frameworkId: z.ZodEnum<["eu_ai_act", "iso_42001", "nist_ai_rmf", "mitre_atlas"]>;
+                name: z.ZodString;
+                citation: z.ZodString;
+                scope: z.ZodString;
+                mappingVersion: z.ZodString;
+                generatedAt: z.ZodString;
+                summary: z.ZodObject<{
+                    controls: z.ZodNumber;
+                    mapped: z.ZodNumber;
+                    full: z.ZodNumber;
+                    partial: z.ZodNumber;
+                    states: z.ZodObject<{
+                        evidenced: z.ZodNumber;
+                        warning: z.ZodNumber;
+                        failing: z.ZodNumber;
+                        not_evidenced: z.ZodNumber;
+                        records_only: z.ZodNumber;
+                    }, "strip", z.ZodTypeAny, {
+                        evidenced: number;
+                        warning: number;
+                        failing: number;
+                        not_evidenced: number;
+                        records_only: number;
+                    }, {
+                        evidenced: number;
+                        warning: number;
+                        failing: number;
+                        not_evidenced: number;
+                        records_only: number;
+                    }>;
+                }, "strip", z.ZodTypeAny, {
+                    controls: number;
+                    mapped: number;
+                    full: number;
+                    partial: number;
+                    states: {
+                        evidenced: number;
+                        warning: number;
+                        failing: number;
+                        not_evidenced: number;
+                        records_only: number;
+                    };
+                }, {
+                    controls: number;
+                    mapped: number;
+                    full: number;
+                    partial: number;
+                    states: {
+                        evidenced: number;
+                        warning: number;
+                        failing: number;
+                        not_evidenced: number;
+                        records_only: number;
+                    };
+                }>;
+                controls: z.ZodArray<z.ZodObject<{
+                    controlId: z.ZodString;
+                    title: z.ZodString;
+                    coverage: z.ZodEnum<["full", "partial", "not_mapped"]>;
+                    state: z.ZodNullable<z.ZodEnum<["evidenced", "warning", "failing", "not_evidenced", "records_only"]>>;
+                    evidence: z.ZodArray<z.ZodObject<{
+                        kind: z.ZodEnum<["probe", "artifact", "control"]>;
+                        id: z.ZodString;
+                        title: z.ZodString;
+                        reference: z.ZodNullable<z.ZodString>;
+                        satisfies: z.ZodString;
+                        state: z.ZodEnum<["pass", "fail", "warn", "error", "not_enforced", "not_run", "available"]>;
+                        probedAt: z.ZodNullable<z.ZodString>;
+                    }, "strip", z.ZodTypeAny, {
+                        id: string;
+                        kind: "probe" | "artifact" | "control";
+                        title: string;
+                        state: "error" | "warn" | "pass" | "fail" | "not_enforced" | "not_run" | "available";
+                        probedAt: string | null;
+                        reference: string | null;
+                        satisfies: string;
+                    }, {
+                        id: string;
+                        kind: "probe" | "artifact" | "control";
+                        title: string;
+                        state: "error" | "warn" | "pass" | "fail" | "not_enforced" | "not_run" | "available";
+                        probedAt: string | null;
+                        reference: string | null;
+                        satisfies: string;
+                    }>, "many">;
+                    gaps: z.ZodArray<z.ZodString, "many">;
+                    mitigates: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                        id: z.ZodString;
+                        name: z.ZodString;
+                    }, "strip", z.ZodTypeAny, {
+                        name: string;
+                        id: string;
+                    }, {
+                        name: string;
+                        id: string;
+                    }>, "many">>;
+                }, "strip", z.ZodTypeAny, {
+                    title: string;
+                    coverage: "full" | "partial" | "not_mapped";
+                    state: "evidenced" | "warning" | "failing" | "not_evidenced" | "records_only" | null;
+                    controlId: string;
+                    evidence: {
+                        id: string;
+                        kind: "probe" | "artifact" | "control";
+                        title: string;
+                        state: "error" | "warn" | "pass" | "fail" | "not_enforced" | "not_run" | "available";
+                        probedAt: string | null;
+                        reference: string | null;
+                        satisfies: string;
+                    }[];
+                    gaps: string[];
+                    mitigates?: {
+                        name: string;
+                        id: string;
+                    }[] | undefined;
+                }, {
+                    title: string;
+                    coverage: "full" | "partial" | "not_mapped";
+                    state: "evidenced" | "warning" | "failing" | "not_evidenced" | "records_only" | null;
+                    controlId: string;
+                    evidence: {
+                        id: string;
+                        kind: "probe" | "artifact" | "control";
+                        title: string;
+                        state: "error" | "warn" | "pass" | "fail" | "not_enforced" | "not_run" | "available";
+                        probedAt: string | null;
+                        reference: string | null;
+                        satisfies: string;
+                    }[];
+                    gaps: string[];
+                    mitigates?: {
+                        name: string;
+                        id: string;
+                    }[] | undefined;
+                }>, "many">;
+            }, "strip", z.ZodTypeAny, {
+                name: string;
+                scope: string;
+                summary: {
+                    controls: number;
+                    mapped: number;
+                    full: number;
+                    partial: number;
+                    states: {
+                        evidenced: number;
+                        warning: number;
+                        failing: number;
+                        not_evidenced: number;
+                        records_only: number;
+                    };
+                };
+                frameworkId: "eu_ai_act" | "iso_42001" | "nist_ai_rmf" | "mitre_atlas";
+                citation: string;
+                mappingVersion: string;
+                generatedAt: string;
+                controls: {
+                    title: string;
+                    coverage: "full" | "partial" | "not_mapped";
+                    state: "evidenced" | "warning" | "failing" | "not_evidenced" | "records_only" | null;
+                    controlId: string;
+                    evidence: {
+                        id: string;
+                        kind: "probe" | "artifact" | "control";
+                        title: string;
+                        state: "error" | "warn" | "pass" | "fail" | "not_enforced" | "not_run" | "available";
+                        probedAt: string | null;
+                        reference: string | null;
+                        satisfies: string;
+                    }[];
+                    gaps: string[];
+                    mitigates?: {
+                        name: string;
+                        id: string;
+                    }[] | undefined;
+                }[];
+            }, {
+                name: string;
+                scope: string;
+                summary: {
+                    controls: number;
+                    mapped: number;
+                    full: number;
+                    partial: number;
+                    states: {
+                        evidenced: number;
+                        warning: number;
+                        failing: number;
+                        not_evidenced: number;
+                        records_only: number;
+                    };
+                };
+                frameworkId: "eu_ai_act" | "iso_42001" | "nist_ai_rmf" | "mitre_atlas";
+                citation: string;
+                mappingVersion: string;
+                generatedAt: string;
+                controls: {
+                    title: string;
+                    coverage: "full" | "partial" | "not_mapped";
+                    state: "evidenced" | "warning" | "failing" | "not_evidenced" | "records_only" | null;
+                    controlId: string;
+                    evidence: {
+                        id: string;
+                        kind: "probe" | "artifact" | "control";
+                        title: string;
+                        state: "error" | "warn" | "pass" | "fail" | "not_enforced" | "not_run" | "available";
+                        probedAt: string | null;
+                        reference: string | null;
+                        satisfies: string;
+                    }[];
+                    gaps: string[];
+                    mitigates?: {
+                        name: string;
+                        id: string;
+                    }[] | undefined;
+                }[];
+            }>;
+            report: z.ZodString;
+            csv: z.ZodOptional<z.ZodString>;
+            pdf: z.ZodOptional<z.ZodString>;
+        }, "strip", z.ZodTypeAny, {
+            coverage: {
+                name: string;
+                scope: string;
+                summary: {
+                    controls: number;
+                    mapped: number;
+                    full: number;
+                    partial: number;
+                    states: {
+                        evidenced: number;
+                        warning: number;
+                        failing: number;
+                        not_evidenced: number;
+                        records_only: number;
+                    };
+                };
+                frameworkId: "eu_ai_act" | "iso_42001" | "nist_ai_rmf" | "mitre_atlas";
+                citation: string;
+                mappingVersion: string;
+                generatedAt: string;
+                controls: {
+                    title: string;
+                    coverage: "full" | "partial" | "not_mapped";
+                    state: "evidenced" | "warning" | "failing" | "not_evidenced" | "records_only" | null;
+                    controlId: string;
+                    evidence: {
+                        id: string;
+                        kind: "probe" | "artifact" | "control";
+                        title: string;
+                        state: "error" | "warn" | "pass" | "fail" | "not_enforced" | "not_run" | "available";
+                        probedAt: string | null;
+                        reference: string | null;
+                        satisfies: string;
+                    }[];
+                    gaps: string[];
+                    mitigates?: {
+                        name: string;
+                        id: string;
+                    }[] | undefined;
+                }[];
+            };
+            report: string;
+            csv?: string | undefined;
+            pdf?: string | undefined;
+        }, {
+            coverage: {
+                name: string;
+                scope: string;
+                summary: {
+                    controls: number;
+                    mapped: number;
+                    full: number;
+                    partial: number;
+                    states: {
+                        evidenced: number;
+                        warning: number;
+                        failing: number;
+                        not_evidenced: number;
+                        records_only: number;
+                    };
+                };
+                frameworkId: "eu_ai_act" | "iso_42001" | "nist_ai_rmf" | "mitre_atlas";
+                citation: string;
+                mappingVersion: string;
+                generatedAt: string;
+                controls: {
+                    title: string;
+                    coverage: "full" | "partial" | "not_mapped";
+                    state: "evidenced" | "warning" | "failing" | "not_evidenced" | "records_only" | null;
+                    controlId: string;
+                    evidence: {
+                        id: string;
+                        kind: "probe" | "artifact" | "control";
+                        title: string;
+                        state: "error" | "warn" | "pass" | "fail" | "not_enforced" | "not_run" | "available";
+                        probedAt: string | null;
+                        reference: string | null;
+                        satisfies: string;
+                    }[];
+                    gaps: string[];
+                    mitigates?: {
+                        name: string;
+                        id: string;
+                    }[] | undefined;
+                }[];
+            };
+            report: string;
+            csv?: string | undefined;
+            pdf?: string | undefined;
+        }>, "many">>;
+        manifest: z.ZodObject<{
+            algorithm: z.ZodLiteral<"sha256">;
+            sections: z.ZodRecord<z.ZodString, z.ZodString>;
+            archiveSha256: z.ZodString;
+            signed: z.ZodOptional<z.ZodBoolean>;
+            unsignedReason: z.ZodOptional<z.ZodString>;
+        }, "strip", z.ZodTypeAny, {
+            algorithm: "sha256";
+            sections: Record<string, string>;
+            archiveSha256: string;
+            signed?: boolean | undefined;
+            unsignedReason?: string | undefined;
+        }, {
+            algorithm: "sha256";
+            sections: Record<string, string>;
+            archiveSha256: string;
+            signed?: boolean | undefined;
+            unsignedReason?: string | undefined;
+        }>;
+        signature: z.ZodNullable<z.ZodObject<{
+            algorithm: z.ZodLiteral<"Ed25519">;
+            keyId: z.ZodString;
+            preimageDomain: z.ZodString;
+            value: z.ZodString;
+        }, "strip", z.ZodTypeAny, {
+            value: string;
+            keyId: string;
+            algorithm: "Ed25519";
+            preimageDomain: string;
+        }, {
+            value: string;
+            keyId: string;
+            algorithm: "Ed25519";
+            preimageDomain: string;
+        }>>;
+    }, "strip", z.ZodTypeAny, {
+        workspaceId: string;
+        runId: string;
+        categories: {
+            probes: {
+                status: "error" | "warn" | "pass" | "fail" | "not_enforced";
+                score: number;
+                probeId: string;
+                probeType: "policy_check" | "mfa_enforcement" | "data_residency" | "audit_log_integrity" | "token_rotation" | "sop_coverage" | "auto_apply_provenance" | "sop_git_drift" | "guard_liveness" | "guardrail_authority" | "provider_availability";
+                details: Record<string, unknown>;
+                remediation: string | null;
+                probedAt: string;
+                observedSince: string;
+                observations: number;
+            }[];
+            score: number | null;
+            gaps: string[];
+            category: "security" | "availability" | "processing_integrity" | "confidentiality" | "privacy";
+            counts: Record<string, number>;
+            sampleIds: Record<string, string[]>;
+        }[];
+        signature: {
+            value: string;
+            keyId: string;
+            algorithm: "Ed25519";
+            preimageDomain: string;
+        } | null;
+        formatVersion: 1 | 2 | 3;
+        periodStart: string;
+        periodEnd: string;
+        collectedAt: string;
+        overallScore: number | null;
+        probeHistoryDigest: {
+            probeType: "policy_check" | "mfa_enforcement" | "data_residency" | "audit_log_integrity" | "token_rotation" | "sop_coverage" | "auto_apply_provenance" | "sop_git_drift" | "guard_liveness" | "guardrail_authority" | "provider_availability";
+            rows: number;
+            firstAt: string | null;
+            lastAt: string | null;
+            statusCounts: Record<string, number>;
+        }[];
+        manifest: {
+            algorithm: "sha256";
+            sections: Record<string, string>;
+            archiveSha256: string;
+            signed?: boolean | undefined;
+            unsignedReason?: string | undefined;
+        };
+        frameworks?: {
+            coverage: {
+                name: string;
+                scope: string;
+                summary: {
+                    controls: number;
+                    mapped: number;
+                    full: number;
+                    partial: number;
+                    states: {
+                        evidenced: number;
+                        warning: number;
+                        failing: number;
+                        not_evidenced: number;
+                        records_only: number;
+                    };
+                };
+                frameworkId: "eu_ai_act" | "iso_42001" | "nist_ai_rmf" | "mitre_atlas";
+                citation: string;
+                mappingVersion: string;
+                generatedAt: string;
+                controls: {
+                    title: string;
+                    coverage: "full" | "partial" | "not_mapped";
+                    state: "evidenced" | "warning" | "failing" | "not_evidenced" | "records_only" | null;
+                    controlId: string;
+                    evidence: {
+                        id: string;
+                        kind: "probe" | "artifact" | "control";
+                        title: string;
+                        state: "error" | "warn" | "pass" | "fail" | "not_enforced" | "not_run" | "available";
+                        probedAt: string | null;
+                        reference: string | null;
+                        satisfies: string;
+                    }[];
+                    gaps: string[];
+                    mitigates?: {
+                        name: string;
+                        id: string;
+                    }[] | undefined;
+                }[];
+            };
+            report: string;
+            csv?: string | undefined;
+            pdf?: string | undefined;
+        }[] | undefined;
+    }, {
+        workspaceId: string;
+        runId: string;
+        categories: {
+            probes: {
+                status: "error" | "warn" | "pass" | "fail" | "not_enforced";
+                score: number;
+                probeId: string;
+                probeType: "policy_check" | "mfa_enforcement" | "data_residency" | "audit_log_integrity" | "token_rotation" | "sop_coverage" | "auto_apply_provenance" | "sop_git_drift" | "guard_liveness" | "guardrail_authority" | "provider_availability";
+                details: Record<string, unknown>;
+                remediation: string | null;
+                probedAt: string;
+                observedSince: string;
+                observations: number;
+            }[];
+            score: number | null;
+            gaps: string[];
+            category: "security" | "availability" | "processing_integrity" | "confidentiality" | "privacy";
+            counts: Record<string, number>;
+            sampleIds: Record<string, string[]>;
+        }[];
+        signature: {
+            value: string;
+            keyId: string;
+            algorithm: "Ed25519";
+            preimageDomain: string;
+        } | null;
+        formatVersion: 1 | 2 | 3;
+        periodStart: string;
+        periodEnd: string;
+        collectedAt: string;
+        overallScore: number | null;
+        probeHistoryDigest: {
+            probeType: "policy_check" | "mfa_enforcement" | "data_residency" | "audit_log_integrity" | "token_rotation" | "sop_coverage" | "auto_apply_provenance" | "sop_git_drift" | "guard_liveness" | "guardrail_authority" | "provider_availability";
+            rows: number;
+            firstAt: string | null;
+            lastAt: string | null;
+            statusCounts: Record<string, number>;
+        }[];
+        manifest: {
+            algorithm: "sha256";
+            sections: Record<string, string>;
+            archiveSha256: string;
+            signed?: boolean | undefined;
+            unsignedReason?: string | undefined;
+        };
+        frameworks?: {
+            coverage: {
+                name: string;
+                scope: string;
+                summary: {
+                    controls: number;
+                    mapped: number;
+                    full: number;
+                    partial: number;
+                    states: {
+                        evidenced: number;
+                        warning: number;
+                        failing: number;
+                        not_evidenced: number;
+                        records_only: number;
+                    };
+                };
+                frameworkId: "eu_ai_act" | "iso_42001" | "nist_ai_rmf" | "mitre_atlas";
+                citation: string;
+                mappingVersion: string;
+                generatedAt: string;
+                controls: {
+                    title: string;
+                    coverage: "full" | "partial" | "not_mapped";
+                    state: "evidenced" | "warning" | "failing" | "not_evidenced" | "records_only" | null;
+                    controlId: string;
+                    evidence: {
+                        id: string;
+                        kind: "probe" | "artifact" | "control";
+                        title: string;
+                        state: "error" | "warn" | "pass" | "fail" | "not_enforced" | "not_run" | "available";
+                        probedAt: string | null;
+                        reference: string | null;
+                        satisfies: string;
+                    }[];
+                    gaps: string[];
+                    mitigates?: {
+                        name: string;
+                        id: string;
+                    }[] | undefined;
+                }[];
+            };
+            report: string;
+            csv?: string | undefined;
+            pdf?: string | undefined;
+        }[] | undefined;
+    }>;
+    artifactUrl: z.ZodNullable<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    runId: string;
+    signed: true;
+    signingKeyId: string;
+    archive: {
+        workspaceId: string;
+        runId: string;
+        categories: {
+            probes: {
+                status: "error" | "warn" | "pass" | "fail" | "not_enforced";
+                score: number;
+                probeId: string;
+                probeType: "policy_check" | "mfa_enforcement" | "data_residency" | "audit_log_integrity" | "token_rotation" | "sop_coverage" | "auto_apply_provenance" | "sop_git_drift" | "guard_liveness" | "guardrail_authority" | "provider_availability";
+                details: Record<string, unknown>;
+                remediation: string | null;
+                probedAt: string;
+                observedSince: string;
+                observations: number;
+            }[];
+            score: number | null;
+            gaps: string[];
+            category: "security" | "availability" | "processing_integrity" | "confidentiality" | "privacy";
+            counts: Record<string, number>;
+            sampleIds: Record<string, string[]>;
+        }[];
+        signature: {
+            value: string;
+            keyId: string;
+            algorithm: "Ed25519";
+            preimageDomain: string;
+        } | null;
+        formatVersion: 1 | 2 | 3;
+        periodStart: string;
+        periodEnd: string;
+        collectedAt: string;
+        overallScore: number | null;
+        probeHistoryDigest: {
+            probeType: "policy_check" | "mfa_enforcement" | "data_residency" | "audit_log_integrity" | "token_rotation" | "sop_coverage" | "auto_apply_provenance" | "sop_git_drift" | "guard_liveness" | "guardrail_authority" | "provider_availability";
+            rows: number;
+            firstAt: string | null;
+            lastAt: string | null;
+            statusCounts: Record<string, number>;
+        }[];
+        manifest: {
+            algorithm: "sha256";
+            sections: Record<string, string>;
+            archiveSha256: string;
+            signed?: boolean | undefined;
+            unsignedReason?: string | undefined;
+        };
+        frameworks?: {
+            coverage: {
+                name: string;
+                scope: string;
+                summary: {
+                    controls: number;
+                    mapped: number;
+                    full: number;
+                    partial: number;
+                    states: {
+                        evidenced: number;
+                        warning: number;
+                        failing: number;
+                        not_evidenced: number;
+                        records_only: number;
+                    };
+                };
+                frameworkId: "eu_ai_act" | "iso_42001" | "nist_ai_rmf" | "mitre_atlas";
+                citation: string;
+                mappingVersion: string;
+                generatedAt: string;
+                controls: {
+                    title: string;
+                    coverage: "full" | "partial" | "not_mapped";
+                    state: "evidenced" | "warning" | "failing" | "not_evidenced" | "records_only" | null;
+                    controlId: string;
+                    evidence: {
+                        id: string;
+                        kind: "probe" | "artifact" | "control";
+                        title: string;
+                        state: "error" | "warn" | "pass" | "fail" | "not_enforced" | "not_run" | "available";
+                        probedAt: string | null;
+                        reference: string | null;
+                        satisfies: string;
+                    }[];
+                    gaps: string[];
+                    mitigates?: {
+                        name: string;
+                        id: string;
+                    }[] | undefined;
+                }[];
+            };
+            report: string;
+            csv?: string | undefined;
+            pdf?: string | undefined;
+        }[] | undefined;
+    };
+    artifactUrl: string | null;
+}, {
+    runId: string;
+    signed: true;
+    signingKeyId: string;
+    archive: {
+        workspaceId: string;
+        runId: string;
+        categories: {
+            probes: {
+                status: "error" | "warn" | "pass" | "fail" | "not_enforced";
+                score: number;
+                probeId: string;
+                probeType: "policy_check" | "mfa_enforcement" | "data_residency" | "audit_log_integrity" | "token_rotation" | "sop_coverage" | "auto_apply_provenance" | "sop_git_drift" | "guard_liveness" | "guardrail_authority" | "provider_availability";
+                details: Record<string, unknown>;
+                remediation: string | null;
+                probedAt: string;
+                observedSince: string;
+                observations: number;
+            }[];
+            score: number | null;
+            gaps: string[];
+            category: "security" | "availability" | "processing_integrity" | "confidentiality" | "privacy";
+            counts: Record<string, number>;
+            sampleIds: Record<string, string[]>;
+        }[];
+        signature: {
+            value: string;
+            keyId: string;
+            algorithm: "Ed25519";
+            preimageDomain: string;
+        } | null;
+        formatVersion: 1 | 2 | 3;
+        periodStart: string;
+        periodEnd: string;
+        collectedAt: string;
+        overallScore: number | null;
+        probeHistoryDigest: {
+            probeType: "policy_check" | "mfa_enforcement" | "data_residency" | "audit_log_integrity" | "token_rotation" | "sop_coverage" | "auto_apply_provenance" | "sop_git_drift" | "guard_liveness" | "guardrail_authority" | "provider_availability";
+            rows: number;
+            firstAt: string | null;
+            lastAt: string | null;
+            statusCounts: Record<string, number>;
+        }[];
+        manifest: {
+            algorithm: "sha256";
+            sections: Record<string, string>;
+            archiveSha256: string;
+            signed?: boolean | undefined;
+            unsignedReason?: string | undefined;
+        };
+        frameworks?: {
+            coverage: {
+                name: string;
+                scope: string;
+                summary: {
+                    controls: number;
+                    mapped: number;
+                    full: number;
+                    partial: number;
+                    states: {
+                        evidenced: number;
+                        warning: number;
+                        failing: number;
+                        not_evidenced: number;
+                        records_only: number;
+                    };
+                };
+                frameworkId: "eu_ai_act" | "iso_42001" | "nist_ai_rmf" | "mitre_atlas";
+                citation: string;
+                mappingVersion: string;
+                generatedAt: string;
+                controls: {
+                    title: string;
+                    coverage: "full" | "partial" | "not_mapped";
+                    state: "evidenced" | "warning" | "failing" | "not_evidenced" | "records_only" | null;
+                    controlId: string;
+                    evidence: {
+                        id: string;
+                        kind: "probe" | "artifact" | "control";
+                        title: string;
+                        state: "error" | "warn" | "pass" | "fail" | "not_enforced" | "not_run" | "available";
+                        probedAt: string | null;
+                        reference: string | null;
+                        satisfies: string;
+                    }[];
+                    gaps: string[];
+                    mitigates?: {
+                        name: string;
+                        id: string;
+                    }[] | undefined;
+                }[];
+            };
+            report: string;
+            csv?: string | undefined;
+            pdf?: string | undefined;
+        }[] | undefined;
+    };
+    artifactUrl: string | null;
+}>, z.ZodObject<{
+    signed: z.ZodLiteral<false>;
+    unsignedReason: z.ZodString;
+    runId: z.ZodString;
+    archive: z.ZodObject<{
+        formatVersion: z.ZodUnion<[z.ZodLiteral<1>, z.ZodLiteral<2>, z.ZodLiteral<3>]>;
+        workspaceId: z.ZodString;
+        runId: z.ZodString;
+        periodStart: z.ZodString;
+        periodEnd: z.ZodString;
+        collectedAt: z.ZodString;
+        overallScore: z.ZodNullable<z.ZodNumber>;
+        categories: z.ZodArray<z.ZodObject<{
+            category: z.ZodEnum<["security", "availability", "processing_integrity", "confidentiality", "privacy"]>;
+            score: z.ZodNullable<z.ZodNumber>;
+            probes: z.ZodArray<z.ZodObject<{
+                probeId: z.ZodString;
+                probeType: z.ZodEnum<["policy_check", "mfa_enforcement", "data_residency", "audit_log_integrity", "token_rotation", "sop_coverage", "auto_apply_provenance", "sop_git_drift", "guard_liveness", "guardrail_authority", "provider_availability"]>;
+                status: z.ZodEnum<["pass", "fail", "warn", "error", "not_enforced"]>;
+                score: z.ZodNumber;
+                details: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+                remediation: z.ZodNullable<z.ZodString>;
+                probedAt: z.ZodString;
+                observedSince: z.ZodString;
+                observations: z.ZodNumber;
+            }, "strip", z.ZodTypeAny, {
+                status: "error" | "warn" | "pass" | "fail" | "not_enforced";
+                score: number;
+                probeId: string;
+                probeType: "policy_check" | "mfa_enforcement" | "data_residency" | "audit_log_integrity" | "token_rotation" | "sop_coverage" | "auto_apply_provenance" | "sop_git_drift" | "guard_liveness" | "guardrail_authority" | "provider_availability";
+                details: Record<string, unknown>;
+                remediation: string | null;
+                probedAt: string;
+                observedSince: string;
+                observations: number;
+            }, {
+                status: "error" | "warn" | "pass" | "fail" | "not_enforced";
+                score: number;
+                probeId: string;
+                probeType: "policy_check" | "mfa_enforcement" | "data_residency" | "audit_log_integrity" | "token_rotation" | "sop_coverage" | "auto_apply_provenance" | "sop_git_drift" | "guard_liveness" | "guardrail_authority" | "provider_availability";
+                details: Record<string, unknown>;
+                remediation: string | null;
+                probedAt: string;
+                observedSince: string;
+                observations: number;
+            }>, "many">;
+            counts: z.ZodRecord<z.ZodString, z.ZodNumber>;
+            sampleIds: z.ZodRecord<z.ZodString, z.ZodArray<z.ZodString, "many">>;
+            gaps: z.ZodArray<z.ZodString, "many">;
+        }, "strip", z.ZodTypeAny, {
+            probes: {
+                status: "error" | "warn" | "pass" | "fail" | "not_enforced";
+                score: number;
+                probeId: string;
+                probeType: "policy_check" | "mfa_enforcement" | "data_residency" | "audit_log_integrity" | "token_rotation" | "sop_coverage" | "auto_apply_provenance" | "sop_git_drift" | "guard_liveness" | "guardrail_authority" | "provider_availability";
+                details: Record<string, unknown>;
+                remediation: string | null;
+                probedAt: string;
+                observedSince: string;
+                observations: number;
+            }[];
+            score: number | null;
+            gaps: string[];
+            category: "security" | "availability" | "processing_integrity" | "confidentiality" | "privacy";
+            counts: Record<string, number>;
+            sampleIds: Record<string, string[]>;
+        }, {
+            probes: {
+                status: "error" | "warn" | "pass" | "fail" | "not_enforced";
+                score: number;
+                probeId: string;
+                probeType: "policy_check" | "mfa_enforcement" | "data_residency" | "audit_log_integrity" | "token_rotation" | "sop_coverage" | "auto_apply_provenance" | "sop_git_drift" | "guard_liveness" | "guardrail_authority" | "provider_availability";
+                details: Record<string, unknown>;
+                remediation: string | null;
+                probedAt: string;
+                observedSince: string;
+                observations: number;
+            }[];
+            score: number | null;
+            gaps: string[];
+            category: "security" | "availability" | "processing_integrity" | "confidentiality" | "privacy";
+            counts: Record<string, number>;
+            sampleIds: Record<string, string[]>;
+        }>, "many">;
+        probeHistoryDigest: z.ZodArray<z.ZodObject<{
+            probeType: z.ZodEnum<["policy_check", "mfa_enforcement", "data_residency", "audit_log_integrity", "token_rotation", "sop_coverage", "auto_apply_provenance", "sop_git_drift", "guard_liveness", "guardrail_authority", "provider_availability"]>;
+            rows: z.ZodNumber;
+            firstAt: z.ZodNullable<z.ZodString>;
+            lastAt: z.ZodNullable<z.ZodString>;
+            statusCounts: z.ZodRecord<z.ZodString, z.ZodNumber>;
+        }, "strip", z.ZodTypeAny, {
+            probeType: "policy_check" | "mfa_enforcement" | "data_residency" | "audit_log_integrity" | "token_rotation" | "sop_coverage" | "auto_apply_provenance" | "sop_git_drift" | "guard_liveness" | "guardrail_authority" | "provider_availability";
+            rows: number;
+            firstAt: string | null;
+            lastAt: string | null;
+            statusCounts: Record<string, number>;
+        }, {
+            probeType: "policy_check" | "mfa_enforcement" | "data_residency" | "audit_log_integrity" | "token_rotation" | "sop_coverage" | "auto_apply_provenance" | "sop_git_drift" | "guard_liveness" | "guardrail_authority" | "provider_availability";
+            rows: number;
+            firstAt: string | null;
+            lastAt: string | null;
+            statusCounts: Record<string, number>;
+        }>, "many">;
+        frameworks: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            coverage: z.ZodObject<{
+                frameworkId: z.ZodEnum<["eu_ai_act", "iso_42001", "nist_ai_rmf", "mitre_atlas"]>;
+                name: z.ZodString;
+                citation: z.ZodString;
+                scope: z.ZodString;
+                mappingVersion: z.ZodString;
+                generatedAt: z.ZodString;
+                summary: z.ZodObject<{
+                    controls: z.ZodNumber;
+                    mapped: z.ZodNumber;
+                    full: z.ZodNumber;
+                    partial: z.ZodNumber;
+                    states: z.ZodObject<{
+                        evidenced: z.ZodNumber;
+                        warning: z.ZodNumber;
+                        failing: z.ZodNumber;
+                        not_evidenced: z.ZodNumber;
+                        records_only: z.ZodNumber;
+                    }, "strip", z.ZodTypeAny, {
+                        evidenced: number;
+                        warning: number;
+                        failing: number;
+                        not_evidenced: number;
+                        records_only: number;
+                    }, {
+                        evidenced: number;
+                        warning: number;
+                        failing: number;
+                        not_evidenced: number;
+                        records_only: number;
+                    }>;
+                }, "strip", z.ZodTypeAny, {
+                    controls: number;
+                    mapped: number;
+                    full: number;
+                    partial: number;
+                    states: {
+                        evidenced: number;
+                        warning: number;
+                        failing: number;
+                        not_evidenced: number;
+                        records_only: number;
+                    };
+                }, {
+                    controls: number;
+                    mapped: number;
+                    full: number;
+                    partial: number;
+                    states: {
+                        evidenced: number;
+                        warning: number;
+                        failing: number;
+                        not_evidenced: number;
+                        records_only: number;
+                    };
+                }>;
+                controls: z.ZodArray<z.ZodObject<{
+                    controlId: z.ZodString;
+                    title: z.ZodString;
+                    coverage: z.ZodEnum<["full", "partial", "not_mapped"]>;
+                    state: z.ZodNullable<z.ZodEnum<["evidenced", "warning", "failing", "not_evidenced", "records_only"]>>;
+                    evidence: z.ZodArray<z.ZodObject<{
+                        kind: z.ZodEnum<["probe", "artifact", "control"]>;
+                        id: z.ZodString;
+                        title: z.ZodString;
+                        reference: z.ZodNullable<z.ZodString>;
+                        satisfies: z.ZodString;
+                        state: z.ZodEnum<["pass", "fail", "warn", "error", "not_enforced", "not_run", "available"]>;
+                        probedAt: z.ZodNullable<z.ZodString>;
+                    }, "strip", z.ZodTypeAny, {
+                        id: string;
+                        kind: "probe" | "artifact" | "control";
+                        title: string;
+                        state: "error" | "warn" | "pass" | "fail" | "not_enforced" | "not_run" | "available";
+                        probedAt: string | null;
+                        reference: string | null;
+                        satisfies: string;
+                    }, {
+                        id: string;
+                        kind: "probe" | "artifact" | "control";
+                        title: string;
+                        state: "error" | "warn" | "pass" | "fail" | "not_enforced" | "not_run" | "available";
+                        probedAt: string | null;
+                        reference: string | null;
+                        satisfies: string;
+                    }>, "many">;
+                    gaps: z.ZodArray<z.ZodString, "many">;
+                    mitigates: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                        id: z.ZodString;
+                        name: z.ZodString;
+                    }, "strip", z.ZodTypeAny, {
+                        name: string;
+                        id: string;
+                    }, {
+                        name: string;
+                        id: string;
+                    }>, "many">>;
+                }, "strip", z.ZodTypeAny, {
+                    title: string;
+                    coverage: "full" | "partial" | "not_mapped";
+                    state: "evidenced" | "warning" | "failing" | "not_evidenced" | "records_only" | null;
+                    controlId: string;
+                    evidence: {
+                        id: string;
+                        kind: "probe" | "artifact" | "control";
+                        title: string;
+                        state: "error" | "warn" | "pass" | "fail" | "not_enforced" | "not_run" | "available";
+                        probedAt: string | null;
+                        reference: string | null;
+                        satisfies: string;
+                    }[];
+                    gaps: string[];
+                    mitigates?: {
+                        name: string;
+                        id: string;
+                    }[] | undefined;
+                }, {
+                    title: string;
+                    coverage: "full" | "partial" | "not_mapped";
+                    state: "evidenced" | "warning" | "failing" | "not_evidenced" | "records_only" | null;
+                    controlId: string;
+                    evidence: {
+                        id: string;
+                        kind: "probe" | "artifact" | "control";
+                        title: string;
+                        state: "error" | "warn" | "pass" | "fail" | "not_enforced" | "not_run" | "available";
+                        probedAt: string | null;
+                        reference: string | null;
+                        satisfies: string;
+                    }[];
+                    gaps: string[];
+                    mitigates?: {
+                        name: string;
+                        id: string;
+                    }[] | undefined;
+                }>, "many">;
+            }, "strip", z.ZodTypeAny, {
+                name: string;
+                scope: string;
+                summary: {
+                    controls: number;
+                    mapped: number;
+                    full: number;
+                    partial: number;
+                    states: {
+                        evidenced: number;
+                        warning: number;
+                        failing: number;
+                        not_evidenced: number;
+                        records_only: number;
+                    };
+                };
+                frameworkId: "eu_ai_act" | "iso_42001" | "nist_ai_rmf" | "mitre_atlas";
+                citation: string;
+                mappingVersion: string;
+                generatedAt: string;
+                controls: {
+                    title: string;
+                    coverage: "full" | "partial" | "not_mapped";
+                    state: "evidenced" | "warning" | "failing" | "not_evidenced" | "records_only" | null;
+                    controlId: string;
+                    evidence: {
+                        id: string;
+                        kind: "probe" | "artifact" | "control";
+                        title: string;
+                        state: "error" | "warn" | "pass" | "fail" | "not_enforced" | "not_run" | "available";
+                        probedAt: string | null;
+                        reference: string | null;
+                        satisfies: string;
+                    }[];
+                    gaps: string[];
+                    mitigates?: {
+                        name: string;
+                        id: string;
+                    }[] | undefined;
+                }[];
+            }, {
+                name: string;
+                scope: string;
+                summary: {
+                    controls: number;
+                    mapped: number;
+                    full: number;
+                    partial: number;
+                    states: {
+                        evidenced: number;
+                        warning: number;
+                        failing: number;
+                        not_evidenced: number;
+                        records_only: number;
+                    };
+                };
+                frameworkId: "eu_ai_act" | "iso_42001" | "nist_ai_rmf" | "mitre_atlas";
+                citation: string;
+                mappingVersion: string;
+                generatedAt: string;
+                controls: {
+                    title: string;
+                    coverage: "full" | "partial" | "not_mapped";
+                    state: "evidenced" | "warning" | "failing" | "not_evidenced" | "records_only" | null;
+                    controlId: string;
+                    evidence: {
+                        id: string;
+                        kind: "probe" | "artifact" | "control";
+                        title: string;
+                        state: "error" | "warn" | "pass" | "fail" | "not_enforced" | "not_run" | "available";
+                        probedAt: string | null;
+                        reference: string | null;
+                        satisfies: string;
+                    }[];
+                    gaps: string[];
+                    mitigates?: {
+                        name: string;
+                        id: string;
+                    }[] | undefined;
+                }[];
+            }>;
+            report: z.ZodString;
+            csv: z.ZodOptional<z.ZodString>;
+            pdf: z.ZodOptional<z.ZodString>;
+        }, "strip", z.ZodTypeAny, {
+            coverage: {
+                name: string;
+                scope: string;
+                summary: {
+                    controls: number;
+                    mapped: number;
+                    full: number;
+                    partial: number;
+                    states: {
+                        evidenced: number;
+                        warning: number;
+                        failing: number;
+                        not_evidenced: number;
+                        records_only: number;
+                    };
+                };
+                frameworkId: "eu_ai_act" | "iso_42001" | "nist_ai_rmf" | "mitre_atlas";
+                citation: string;
+                mappingVersion: string;
+                generatedAt: string;
+                controls: {
+                    title: string;
+                    coverage: "full" | "partial" | "not_mapped";
+                    state: "evidenced" | "warning" | "failing" | "not_evidenced" | "records_only" | null;
+                    controlId: string;
+                    evidence: {
+                        id: string;
+                        kind: "probe" | "artifact" | "control";
+                        title: string;
+                        state: "error" | "warn" | "pass" | "fail" | "not_enforced" | "not_run" | "available";
+                        probedAt: string | null;
+                        reference: string | null;
+                        satisfies: string;
+                    }[];
+                    gaps: string[];
+                    mitigates?: {
+                        name: string;
+                        id: string;
+                    }[] | undefined;
+                }[];
+            };
+            report: string;
+            csv?: string | undefined;
+            pdf?: string | undefined;
+        }, {
+            coverage: {
+                name: string;
+                scope: string;
+                summary: {
+                    controls: number;
+                    mapped: number;
+                    full: number;
+                    partial: number;
+                    states: {
+                        evidenced: number;
+                        warning: number;
+                        failing: number;
+                        not_evidenced: number;
+                        records_only: number;
+                    };
+                };
+                frameworkId: "eu_ai_act" | "iso_42001" | "nist_ai_rmf" | "mitre_atlas";
+                citation: string;
+                mappingVersion: string;
+                generatedAt: string;
+                controls: {
+                    title: string;
+                    coverage: "full" | "partial" | "not_mapped";
+                    state: "evidenced" | "warning" | "failing" | "not_evidenced" | "records_only" | null;
+                    controlId: string;
+                    evidence: {
+                        id: string;
+                        kind: "probe" | "artifact" | "control";
+                        title: string;
+                        state: "error" | "warn" | "pass" | "fail" | "not_enforced" | "not_run" | "available";
+                        probedAt: string | null;
+                        reference: string | null;
+                        satisfies: string;
+                    }[];
+                    gaps: string[];
+                    mitigates?: {
+                        name: string;
+                        id: string;
+                    }[] | undefined;
+                }[];
+            };
+            report: string;
+            csv?: string | undefined;
+            pdf?: string | undefined;
+        }>, "many">>;
+        manifest: z.ZodObject<{
+            algorithm: z.ZodLiteral<"sha256">;
+            sections: z.ZodRecord<z.ZodString, z.ZodString>;
+            archiveSha256: z.ZodString;
+            signed: z.ZodOptional<z.ZodBoolean>;
+            unsignedReason: z.ZodOptional<z.ZodString>;
+        }, "strip", z.ZodTypeAny, {
+            algorithm: "sha256";
+            sections: Record<string, string>;
+            archiveSha256: string;
+            signed?: boolean | undefined;
+            unsignedReason?: string | undefined;
+        }, {
+            algorithm: "sha256";
+            sections: Record<string, string>;
+            archiveSha256: string;
+            signed?: boolean | undefined;
+            unsignedReason?: string | undefined;
+        }>;
+        signature: z.ZodNullable<z.ZodObject<{
+            algorithm: z.ZodLiteral<"Ed25519">;
+            keyId: z.ZodString;
+            preimageDomain: z.ZodString;
+            value: z.ZodString;
+        }, "strip", z.ZodTypeAny, {
+            value: string;
+            keyId: string;
+            algorithm: "Ed25519";
+            preimageDomain: string;
+        }, {
+            value: string;
+            keyId: string;
+            algorithm: "Ed25519";
+            preimageDomain: string;
+        }>>;
+    }, "strip", z.ZodTypeAny, {
+        workspaceId: string;
+        runId: string;
+        categories: {
+            probes: {
+                status: "error" | "warn" | "pass" | "fail" | "not_enforced";
+                score: number;
+                probeId: string;
+                probeType: "policy_check" | "mfa_enforcement" | "data_residency" | "audit_log_integrity" | "token_rotation" | "sop_coverage" | "auto_apply_provenance" | "sop_git_drift" | "guard_liveness" | "guardrail_authority" | "provider_availability";
+                details: Record<string, unknown>;
+                remediation: string | null;
+                probedAt: string;
+                observedSince: string;
+                observations: number;
+            }[];
+            score: number | null;
+            gaps: string[];
+            category: "security" | "availability" | "processing_integrity" | "confidentiality" | "privacy";
+            counts: Record<string, number>;
+            sampleIds: Record<string, string[]>;
+        }[];
+        signature: {
+            value: string;
+            keyId: string;
+            algorithm: "Ed25519";
+            preimageDomain: string;
+        } | null;
+        formatVersion: 1 | 2 | 3;
+        periodStart: string;
+        periodEnd: string;
+        collectedAt: string;
+        overallScore: number | null;
+        probeHistoryDigest: {
+            probeType: "policy_check" | "mfa_enforcement" | "data_residency" | "audit_log_integrity" | "token_rotation" | "sop_coverage" | "auto_apply_provenance" | "sop_git_drift" | "guard_liveness" | "guardrail_authority" | "provider_availability";
+            rows: number;
+            firstAt: string | null;
+            lastAt: string | null;
+            statusCounts: Record<string, number>;
+        }[];
+        manifest: {
+            algorithm: "sha256";
+            sections: Record<string, string>;
+            archiveSha256: string;
+            signed?: boolean | undefined;
+            unsignedReason?: string | undefined;
+        };
+        frameworks?: {
+            coverage: {
+                name: string;
+                scope: string;
+                summary: {
+                    controls: number;
+                    mapped: number;
+                    full: number;
+                    partial: number;
+                    states: {
+                        evidenced: number;
+                        warning: number;
+                        failing: number;
+                        not_evidenced: number;
+                        records_only: number;
+                    };
+                };
+                frameworkId: "eu_ai_act" | "iso_42001" | "nist_ai_rmf" | "mitre_atlas";
+                citation: string;
+                mappingVersion: string;
+                generatedAt: string;
+                controls: {
+                    title: string;
+                    coverage: "full" | "partial" | "not_mapped";
+                    state: "evidenced" | "warning" | "failing" | "not_evidenced" | "records_only" | null;
+                    controlId: string;
+                    evidence: {
+                        id: string;
+                        kind: "probe" | "artifact" | "control";
+                        title: string;
+                        state: "error" | "warn" | "pass" | "fail" | "not_enforced" | "not_run" | "available";
+                        probedAt: string | null;
+                        reference: string | null;
+                        satisfies: string;
+                    }[];
+                    gaps: string[];
+                    mitigates?: {
+                        name: string;
+                        id: string;
+                    }[] | undefined;
+                }[];
+            };
+            report: string;
+            csv?: string | undefined;
+            pdf?: string | undefined;
+        }[] | undefined;
+    }, {
+        workspaceId: string;
+        runId: string;
+        categories: {
+            probes: {
+                status: "error" | "warn" | "pass" | "fail" | "not_enforced";
+                score: number;
+                probeId: string;
+                probeType: "policy_check" | "mfa_enforcement" | "data_residency" | "audit_log_integrity" | "token_rotation" | "sop_coverage" | "auto_apply_provenance" | "sop_git_drift" | "guard_liveness" | "guardrail_authority" | "provider_availability";
+                details: Record<string, unknown>;
+                remediation: string | null;
+                probedAt: string;
+                observedSince: string;
+                observations: number;
+            }[];
+            score: number | null;
+            gaps: string[];
+            category: "security" | "availability" | "processing_integrity" | "confidentiality" | "privacy";
+            counts: Record<string, number>;
+            sampleIds: Record<string, string[]>;
+        }[];
+        signature: {
+            value: string;
+            keyId: string;
+            algorithm: "Ed25519";
+            preimageDomain: string;
+        } | null;
+        formatVersion: 1 | 2 | 3;
+        periodStart: string;
+        periodEnd: string;
+        collectedAt: string;
+        overallScore: number | null;
+        probeHistoryDigest: {
+            probeType: "policy_check" | "mfa_enforcement" | "data_residency" | "audit_log_integrity" | "token_rotation" | "sop_coverage" | "auto_apply_provenance" | "sop_git_drift" | "guard_liveness" | "guardrail_authority" | "provider_availability";
+            rows: number;
+            firstAt: string | null;
+            lastAt: string | null;
+            statusCounts: Record<string, number>;
+        }[];
+        manifest: {
+            algorithm: "sha256";
+            sections: Record<string, string>;
+            archiveSha256: string;
+            signed?: boolean | undefined;
+            unsignedReason?: string | undefined;
+        };
+        frameworks?: {
+            coverage: {
+                name: string;
+                scope: string;
+                summary: {
+                    controls: number;
+                    mapped: number;
+                    full: number;
+                    partial: number;
+                    states: {
+                        evidenced: number;
+                        warning: number;
+                        failing: number;
+                        not_evidenced: number;
+                        records_only: number;
+                    };
+                };
+                frameworkId: "eu_ai_act" | "iso_42001" | "nist_ai_rmf" | "mitre_atlas";
+                citation: string;
+                mappingVersion: string;
+                generatedAt: string;
+                controls: {
+                    title: string;
+                    coverage: "full" | "partial" | "not_mapped";
+                    state: "evidenced" | "warning" | "failing" | "not_evidenced" | "records_only" | null;
+                    controlId: string;
+                    evidence: {
+                        id: string;
+                        kind: "probe" | "artifact" | "control";
+                        title: string;
+                        state: "error" | "warn" | "pass" | "fail" | "not_enforced" | "not_run" | "available";
+                        probedAt: string | null;
+                        reference: string | null;
+                        satisfies: string;
+                    }[];
+                    gaps: string[];
+                    mitigates?: {
+                        name: string;
+                        id: string;
+                    }[] | undefined;
+                }[];
+            };
+            report: string;
+            csv?: string | undefined;
+            pdf?: string | undefined;
+        }[] | undefined;
+    }>;
+    artifactUrl: z.ZodNullable<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    runId: string;
+    signed: false;
+    unsignedReason: string;
+    archive: {
+        workspaceId: string;
+        runId: string;
+        categories: {
+            probes: {
+                status: "error" | "warn" | "pass" | "fail" | "not_enforced";
+                score: number;
+                probeId: string;
+                probeType: "policy_check" | "mfa_enforcement" | "data_residency" | "audit_log_integrity" | "token_rotation" | "sop_coverage" | "auto_apply_provenance" | "sop_git_drift" | "guard_liveness" | "guardrail_authority" | "provider_availability";
+                details: Record<string, unknown>;
+                remediation: string | null;
+                probedAt: string;
+                observedSince: string;
+                observations: number;
+            }[];
+            score: number | null;
+            gaps: string[];
+            category: "security" | "availability" | "processing_integrity" | "confidentiality" | "privacy";
+            counts: Record<string, number>;
+            sampleIds: Record<string, string[]>;
+        }[];
+        signature: {
+            value: string;
+            keyId: string;
+            algorithm: "Ed25519";
+            preimageDomain: string;
+        } | null;
+        formatVersion: 1 | 2 | 3;
+        periodStart: string;
+        periodEnd: string;
+        collectedAt: string;
+        overallScore: number | null;
+        probeHistoryDigest: {
+            probeType: "policy_check" | "mfa_enforcement" | "data_residency" | "audit_log_integrity" | "token_rotation" | "sop_coverage" | "auto_apply_provenance" | "sop_git_drift" | "guard_liveness" | "guardrail_authority" | "provider_availability";
+            rows: number;
+            firstAt: string | null;
+            lastAt: string | null;
+            statusCounts: Record<string, number>;
+        }[];
+        manifest: {
+            algorithm: "sha256";
+            sections: Record<string, string>;
+            archiveSha256: string;
+            signed?: boolean | undefined;
+            unsignedReason?: string | undefined;
+        };
+        frameworks?: {
+            coverage: {
+                name: string;
+                scope: string;
+                summary: {
+                    controls: number;
+                    mapped: number;
+                    full: number;
+                    partial: number;
+                    states: {
+                        evidenced: number;
+                        warning: number;
+                        failing: number;
+                        not_evidenced: number;
+                        records_only: number;
+                    };
+                };
+                frameworkId: "eu_ai_act" | "iso_42001" | "nist_ai_rmf" | "mitre_atlas";
+                citation: string;
+                mappingVersion: string;
+                generatedAt: string;
+                controls: {
+                    title: string;
+                    coverage: "full" | "partial" | "not_mapped";
+                    state: "evidenced" | "warning" | "failing" | "not_evidenced" | "records_only" | null;
+                    controlId: string;
+                    evidence: {
+                        id: string;
+                        kind: "probe" | "artifact" | "control";
+                        title: string;
+                        state: "error" | "warn" | "pass" | "fail" | "not_enforced" | "not_run" | "available";
+                        probedAt: string | null;
+                        reference: string | null;
+                        satisfies: string;
+                    }[];
+                    gaps: string[];
+                    mitigates?: {
+                        name: string;
+                        id: string;
+                    }[] | undefined;
+                }[];
+            };
+            report: string;
+            csv?: string | undefined;
+            pdf?: string | undefined;
+        }[] | undefined;
+    };
+    artifactUrl: string | null;
+}, {
+    runId: string;
+    signed: false;
+    unsignedReason: string;
+    archive: {
+        workspaceId: string;
+        runId: string;
+        categories: {
+            probes: {
+                status: "error" | "warn" | "pass" | "fail" | "not_enforced";
+                score: number;
+                probeId: string;
+                probeType: "policy_check" | "mfa_enforcement" | "data_residency" | "audit_log_integrity" | "token_rotation" | "sop_coverage" | "auto_apply_provenance" | "sop_git_drift" | "guard_liveness" | "guardrail_authority" | "provider_availability";
+                details: Record<string, unknown>;
+                remediation: string | null;
+                probedAt: string;
+                observedSince: string;
+                observations: number;
+            }[];
+            score: number | null;
+            gaps: string[];
+            category: "security" | "availability" | "processing_integrity" | "confidentiality" | "privacy";
+            counts: Record<string, number>;
+            sampleIds: Record<string, string[]>;
+        }[];
+        signature: {
+            value: string;
+            keyId: string;
+            algorithm: "Ed25519";
+            preimageDomain: string;
+        } | null;
+        formatVersion: 1 | 2 | 3;
+        periodStart: string;
+        periodEnd: string;
+        collectedAt: string;
+        overallScore: number | null;
+        probeHistoryDigest: {
+            probeType: "policy_check" | "mfa_enforcement" | "data_residency" | "audit_log_integrity" | "token_rotation" | "sop_coverage" | "auto_apply_provenance" | "sop_git_drift" | "guard_liveness" | "guardrail_authority" | "provider_availability";
+            rows: number;
+            firstAt: string | null;
+            lastAt: string | null;
+            statusCounts: Record<string, number>;
+        }[];
+        manifest: {
+            algorithm: "sha256";
+            sections: Record<string, string>;
+            archiveSha256: string;
+            signed?: boolean | undefined;
+            unsignedReason?: string | undefined;
+        };
+        frameworks?: {
+            coverage: {
+                name: string;
+                scope: string;
+                summary: {
+                    controls: number;
+                    mapped: number;
+                    full: number;
+                    partial: number;
+                    states: {
+                        evidenced: number;
+                        warning: number;
+                        failing: number;
+                        not_evidenced: number;
+                        records_only: number;
+                    };
+                };
+                frameworkId: "eu_ai_act" | "iso_42001" | "nist_ai_rmf" | "mitre_atlas";
+                citation: string;
+                mappingVersion: string;
+                generatedAt: string;
+                controls: {
+                    title: string;
+                    coverage: "full" | "partial" | "not_mapped";
+                    state: "evidenced" | "warning" | "failing" | "not_evidenced" | "records_only" | null;
+                    controlId: string;
+                    evidence: {
+                        id: string;
+                        kind: "probe" | "artifact" | "control";
+                        title: string;
+                        state: "error" | "warn" | "pass" | "fail" | "not_enforced" | "not_run" | "available";
+                        probedAt: string | null;
+                        reference: string | null;
+                        satisfies: string;
+                    }[];
+                    gaps: string[];
+                    mitigates?: {
+                        name: string;
+                        id: string;
+                    }[] | undefined;
+                }[];
+            };
+            report: string;
+            csv?: string | undefined;
+            pdf?: string | undefined;
+        }[] | undefined;
+    };
+    artifactUrl: string | null;
+}>]>;
+export type Soc2CollectResponse = z.infer<typeof Soc2CollectResponse>;
+/** `GET /api/v1/integrations/github/webhook`. The secret is never returned here. */
+export declare const GitHubWebhookResponse: z.ZodObject<{
+    configured: z.ZodBoolean;
+    url: z.ZodNullable<z.ZodString>;
+    createdAt: z.ZodNullable<z.ZodString>;
+    secretRotatedAt: z.ZodNullable<z.ZodString>;
+    lastDeliveryAt: z.ZodNullable<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    url: string | null;
+    createdAt: string | null;
+    configured: boolean;
+    secretRotatedAt: string | null;
+    lastDeliveryAt: string | null;
+}, {
+    url: string | null;
+    createdAt: string | null;
+    configured: boolean;
+    secretRotatedAt: string | null;
+    lastDeliveryAt: string | null;
+}>;
+export type GitHubWebhookResponse = z.infer<typeof GitHubWebhookResponse>;
+/** `POST /api/v1/integrations/github/webhook/secret`: the payload URL and the new secret, returned once. */
+export declare const GitHubWebhookSecretResponse: z.ZodObject<{
+    url: z.ZodString;
+    secret: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    url: string;
+    secret: string;
+}, {
+    url: string;
+    secret: string;
+}>;
+export type GitHubWebhookSecretResponse = z.infer<typeof GitHubWebhookSecretResponse>;
+/** `POST /api/v1/integrations/openai-agents/traces/ingest`: what the batch added. */
+export declare const OpenAiAgentTracesIngestResponse: z.ZodObject<{
+    ingested: z.ZodNumber;
+    skipped: z.ZodNumber;
+    duplicates: z.ZodNumber;
+    redactions: z.ZodNumber;
+}, "strip", z.ZodTypeAny, {
+    skipped: number;
+    duplicates: number;
+    ingested: number;
+    redactions: number;
+}, {
+    skipped: number;
+    duplicates: number;
+    ingested: number;
+    redactions: number;
+}>;
+export type OpenAiAgentTracesIngestResponse = z.infer<typeof OpenAiAgentTracesIngestResponse>;
+/** `GET /api/v1/governance/gate-liveness`: per-harness gate status. */
+export declare const GateLivenessResponse: z.ZodObject<{
+    windowHours: z.ZodNumber;
+    gates: z.ZodArray<z.ZodObject<{
+        harnessType: z.ZodString;
+        kind: z.ZodEnum<["hook", "sdk"]>;
+        status: z.ZodEnum<["reporting", "silent", "new"]>;
+        lastSeen: z.ZodNullable<z.ZodString>;
+        agentLastSeen: z.ZodNullable<z.ZodString>;
+        alertOpen: z.ZodBoolean;
+    }, "strip", z.ZodTypeAny, {
+        harnessType: string;
+        status: "reporting" | "silent" | "new";
+        kind: "hook" | "sdk";
+        lastSeen: string | null;
+        agentLastSeen: string | null;
+        alertOpen: boolean;
+    }, {
+        harnessType: string;
+        status: "reporting" | "silent" | "new";
+        kind: "hook" | "sdk";
+        lastSeen: string | null;
+        agentLastSeen: string | null;
+        alertOpen: boolean;
+    }>, "many">;
+}, "strip", z.ZodTypeAny, {
+    gates: {
+        harnessType: string;
+        status: "reporting" | "silent" | "new";
+        kind: "hook" | "sdk";
+        lastSeen: string | null;
+        agentLastSeen: string | null;
+        alertOpen: boolean;
+    }[];
+    windowHours: number;
+}, {
+    gates: {
+        harnessType: string;
+        status: "reporting" | "silent" | "new";
+        kind: "hook" | "sdk";
+        lastSeen: string | null;
+        agentLastSeen: string | null;
+        alertOpen: boolean;
+    }[];
+    windowHours: number;
+}>;
+export type GateLivenessResponse = z.infer<typeof GateLivenessResponse>;
+/** `POST /api/v1/predict-cost` (`tokenIntelligenceService.ts` `predictCost`). */
+export declare const CostPredictionResponse: z.ZodObject<{
+    inputTokens: z.ZodNumber;
+    estimatedOutputTokens: z.ZodNumber;
+    estimatedReasoningTokens: z.ZodNullable<z.ZodNumber>;
+    estimatedCostUsd: z.ZodNumber;
+    confidence: z.ZodEnum<["high", "medium", "low"]>;
+    basedOnSamples: z.ZodNumber;
+}, "strip", z.ZodTypeAny, {
+    confidence: "high" | "medium" | "low";
+    inputTokens: number;
+    estimatedOutputTokens: number;
+    estimatedReasoningTokens: number | null;
+    estimatedCostUsd: number;
+    basedOnSamples: number;
+}, {
+    confidence: "high" | "medium" | "low";
+    inputTokens: number;
+    estimatedOutputTokens: number;
+    estimatedReasoningTokens: number | null;
+    estimatedCostUsd: number;
+    basedOnSamples: number;
+}>;
+export type CostPredictionResponse = z.infer<typeof CostPredictionResponse>;
+/** `GET /api/v1/routing/mirror-adoption-report`: the report, or why there is not enough data for one. */
+export declare const MirrorAdoptionReportResponse: z.ZodUnion<[z.ZodObject<{
+    candidateModel: z.ZodString;
+    sufficientData: z.ZodLiteral<true>;
+    sampleCount: z.ZodNumber;
+    candidateBetter: z.ZodNumber;
+    originalBetter: z.ZodNumber;
+    tie: z.ZodNumber;
+    unjudged: z.ZodNumber;
+    faultRateDelta: z.ZodNullable<z.ZodNumber>;
+    averageCostDeltaUsd: z.ZodNullable<z.ZodNumber>;
+    averageLatencyDeltaMs: z.ZodNullable<z.ZodNumber>;
+}, "strip", z.ZodTypeAny, {
+    unjudged: number;
+    candidateModel: string;
+    sufficientData: true;
+    sampleCount: number;
+    candidateBetter: number;
+    originalBetter: number;
+    tie: number;
+    faultRateDelta: number | null;
+    averageCostDeltaUsd: number | null;
+    averageLatencyDeltaMs: number | null;
+}, {
+    unjudged: number;
+    candidateModel: string;
+    sufficientData: true;
+    sampleCount: number;
+    candidateBetter: number;
+    originalBetter: number;
+    tie: number;
+    faultRateDelta: number | null;
+    averageCostDeltaUsd: number | null;
+    averageLatencyDeltaMs: number | null;
+}>, z.ZodObject<{
+    candidateModel: z.ZodString;
+    sufficientData: z.ZodLiteral<false>;
+    sampleCount: z.ZodNumber;
+    minimumRequired: z.ZodNumber;
+    reason: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    reason: string;
+    candidateModel: string;
+    sufficientData: false;
+    sampleCount: number;
+    minimumRequired: number;
+}, {
+    reason: string;
+    candidateModel: string;
+    sufficientData: false;
+    sampleCount: number;
+    minimumRequired: number;
+}>]>;
+export type MirrorAdoptionReportResponse = z.infer<typeof MirrorAdoptionReportResponse>;
+//# sourceMappingURL=integrations.d.ts.map