@intutic/shared-types 2.5.0 → 2.5.1

package/dist/responses/rules.d.ts

@@ -0,0 +1,1948 @@
+/**
+ * Responses of the control plane routes in policies.ts, wasmRules.ts, sops.ts, decisions.ts, judge.ts and hookEvents.ts.
+ *
+ * @module
+ */
+import { z } from 'zod';
+/** A `pcas_policies` row as the routes select it. */
+export declare const PolicyResponse: z.ZodObject<{
+    policyId: z.ZodString;
+    workspaceId: z.ZodString;
+    name: z.ZodString;
+    description: z.ZodNullable<z.ZodString>;
+    riskCategory: z.ZodNullable<z.ZodEnum<["NONE", "DESTRUCTIVE", "CREDENTIAL_ACCESS"]>>;
+    targetToolPattern: z.ZodString;
+    /** `OBSERVED` is never written by these routes, but a row may carry it. */
+    enforcementAction: z.ZodEnum<["BYPASS", "ENHANCE", "HIJACK", "REASK", "KILL", "OBSERVED"]>;
+    interventionMode: z.ZodNullable<z.ZodEnum<["TRANSPARENT", "OPAQUE", "SILENT_LOG"]>>;
+    priority: z.ZodNullable<z.ZodNumber>;
+    conditions: z.ZodUnknown;
+    isActive: z.ZodNullable<z.ZodBoolean>;
+    currentVersion: z.ZodNumber;
+    createdAt: z.ZodString;
+    updatedAt: z.ZodString;
+    deletedAt: z.ZodNullable<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    workspaceId: string;
+    enforcementAction: "BYPASS" | "ENHANCE" | "HIJACK" | "REASK" | "KILL" | "OBSERVED";
+    policyId: string;
+    name: string;
+    description: string | null;
+    interventionMode: "TRANSPARENT" | "OPAQUE" | "SILENT_LOG" | null;
+    priority: number | null;
+    isActive: boolean | null;
+    createdAt: string;
+    updatedAt: string;
+    riskCategory: "NONE" | "DESTRUCTIVE" | "CREDENTIAL_ACCESS" | null;
+    targetToolPattern: string;
+    currentVersion: number;
+    deletedAt: string | null;
+    conditions?: unknown;
+}, {
+    workspaceId: string;
+    enforcementAction: "BYPASS" | "ENHANCE" | "HIJACK" | "REASK" | "KILL" | "OBSERVED";
+    policyId: string;
+    name: string;
+    description: string | null;
+    interventionMode: "TRANSPARENT" | "OPAQUE" | "SILENT_LOG" | null;
+    priority: number | null;
+    isActive: boolean | null;
+    createdAt: string;
+    updatedAt: string;
+    riskCategory: "NONE" | "DESTRUCTIVE" | "CREDENTIAL_ACCESS" | null;
+    targetToolPattern: string;
+    currentVersion: number;
+    deletedAt: string | null;
+    conditions?: unknown;
+}>;
+export type PolicyResponse = z.infer<typeof PolicyResponse>;
+/** `GET /api/v1/policies`: the live policies, newest first, and where the workspace's intervention mode comes from. */
+export declare const PolicyListResponse: z.ZodObject<{
+    ok: z.ZodLiteral<true>;
+    policies: z.ZodArray<z.ZodObject<{
+        policyId: z.ZodString;
+        workspaceId: z.ZodString;
+        name: z.ZodString;
+        description: z.ZodNullable<z.ZodString>;
+        riskCategory: z.ZodNullable<z.ZodEnum<["NONE", "DESTRUCTIVE", "CREDENTIAL_ACCESS"]>>;
+        targetToolPattern: z.ZodString;
+        /** `OBSERVED` is never written by these routes, but a row may carry it. */
+        enforcementAction: z.ZodEnum<["BYPASS", "ENHANCE", "HIJACK", "REASK", "KILL", "OBSERVED"]>;
+        interventionMode: z.ZodNullable<z.ZodEnum<["TRANSPARENT", "OPAQUE", "SILENT_LOG"]>>;
+        priority: z.ZodNullable<z.ZodNumber>;
+        conditions: z.ZodUnknown;
+        isActive: z.ZodNullable<z.ZodBoolean>;
+        currentVersion: z.ZodNumber;
+        createdAt: z.ZodString;
+        updatedAt: z.ZodString;
+        deletedAt: z.ZodNullable<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        workspaceId: string;
+        enforcementAction: "BYPASS" | "ENHANCE" | "HIJACK" | "REASK" | "KILL" | "OBSERVED";
+        policyId: string;
+        name: string;
+        description: string | null;
+        interventionMode: "TRANSPARENT" | "OPAQUE" | "SILENT_LOG" | null;
+        priority: number | null;
+        isActive: boolean | null;
+        createdAt: string;
+        updatedAt: string;
+        riskCategory: "NONE" | "DESTRUCTIVE" | "CREDENTIAL_ACCESS" | null;
+        targetToolPattern: string;
+        currentVersion: number;
+        deletedAt: string | null;
+        conditions?: unknown;
+    }, {
+        workspaceId: string;
+        enforcementAction: "BYPASS" | "ENHANCE" | "HIJACK" | "REASK" | "KILL" | "OBSERVED";
+        policyId: string;
+        name: string;
+        description: string | null;
+        interventionMode: "TRANSPARENT" | "OPAQUE" | "SILENT_LOG" | null;
+        priority: number | null;
+        isActive: boolean | null;
+        createdAt: string;
+        updatedAt: string;
+        riskCategory: "NONE" | "DESTRUCTIVE" | "CREDENTIAL_ACCESS" | null;
+        targetToolPattern: string;
+        currentVersion: number;
+        deletedAt: string | null;
+        conditions?: unknown;
+    }>, "many">;
+    interventionMode: z.ZodObject<{
+        mode: z.ZodEnum<["TRANSPARENT", "OPAQUE", "SILENT_LOG"]>;
+        source: z.ZodEnum<["setting", "policy", "default"]>;
+        policyId: z.ZodNullable<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        policyId: string | null;
+        mode: "TRANSPARENT" | "OPAQUE" | "SILENT_LOG";
+        source: "default" | "policy" | "setting";
+    }, {
+        policyId: string | null;
+        mode: "TRANSPARENT" | "OPAQUE" | "SILENT_LOG";
+        source: "default" | "policy" | "setting";
+    }>;
+}, "strip", z.ZodTypeAny, {
+    policies: {
+        workspaceId: string;
+        enforcementAction: "BYPASS" | "ENHANCE" | "HIJACK" | "REASK" | "KILL" | "OBSERVED";
+        policyId: string;
+        name: string;
+        description: string | null;
+        interventionMode: "TRANSPARENT" | "OPAQUE" | "SILENT_LOG" | null;
+        priority: number | null;
+        isActive: boolean | null;
+        createdAt: string;
+        updatedAt: string;
+        riskCategory: "NONE" | "DESTRUCTIVE" | "CREDENTIAL_ACCESS" | null;
+        targetToolPattern: string;
+        currentVersion: number;
+        deletedAt: string | null;
+        conditions?: unknown;
+    }[];
+    ok: true;
+    interventionMode: {
+        policyId: string | null;
+        mode: "TRANSPARENT" | "OPAQUE" | "SILENT_LOG";
+        source: "default" | "policy" | "setting";
+    };
+}, {
+    policies: {
+        workspaceId: string;
+        enforcementAction: "BYPASS" | "ENHANCE" | "HIJACK" | "REASK" | "KILL" | "OBSERVED";
+        policyId: string;
+        name: string;
+        description: string | null;
+        interventionMode: "TRANSPARENT" | "OPAQUE" | "SILENT_LOG" | null;
+        priority: number | null;
+        isActive: boolean | null;
+        createdAt: string;
+        updatedAt: string;
+        riskCategory: "NONE" | "DESTRUCTIVE" | "CREDENTIAL_ACCESS" | null;
+        targetToolPattern: string;
+        currentVersion: number;
+        deletedAt: string | null;
+        conditions?: unknown;
+    }[];
+    ok: true;
+    interventionMode: {
+        policyId: string | null;
+        mode: "TRANSPARENT" | "OPAQUE" | "SILENT_LOG";
+        source: "default" | "policy" | "setting";
+    };
+}>;
+export type PolicyListResponse = z.infer<typeof PolicyListResponse>;
+/** `POST /api/v1/policies`: the created policy. */
+export declare const PolicyCreatedResponse: z.ZodObject<{
+    ok: z.ZodLiteral<true>;
+    policy: z.ZodObject<{
+        policyId: z.ZodString;
+        workspaceId: z.ZodString;
+        name: z.ZodString;
+        description: z.ZodNullable<z.ZodString>;
+        riskCategory: z.ZodNullable<z.ZodEnum<["NONE", "DESTRUCTIVE", "CREDENTIAL_ACCESS"]>>;
+        targetToolPattern: z.ZodString;
+        /** `OBSERVED` is never written by these routes, but a row may carry it. */
+        enforcementAction: z.ZodEnum<["BYPASS", "ENHANCE", "HIJACK", "REASK", "KILL", "OBSERVED"]>;
+        interventionMode: z.ZodNullable<z.ZodEnum<["TRANSPARENT", "OPAQUE", "SILENT_LOG"]>>;
+        priority: z.ZodNullable<z.ZodNumber>;
+        conditions: z.ZodUnknown;
+        isActive: z.ZodNullable<z.ZodBoolean>;
+        currentVersion: z.ZodNumber;
+        createdAt: z.ZodString;
+        updatedAt: z.ZodString;
+        deletedAt: z.ZodNullable<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        workspaceId: string;
+        enforcementAction: "BYPASS" | "ENHANCE" | "HIJACK" | "REASK" | "KILL" | "OBSERVED";
+        policyId: string;
+        name: string;
+        description: string | null;
+        interventionMode: "TRANSPARENT" | "OPAQUE" | "SILENT_LOG" | null;
+        priority: number | null;
+        isActive: boolean | null;
+        createdAt: string;
+        updatedAt: string;
+        riskCategory: "NONE" | "DESTRUCTIVE" | "CREDENTIAL_ACCESS" | null;
+        targetToolPattern: string;
+        currentVersion: number;
+        deletedAt: string | null;
+        conditions?: unknown;
+    }, {
+        workspaceId: string;
+        enforcementAction: "BYPASS" | "ENHANCE" | "HIJACK" | "REASK" | "KILL" | "OBSERVED";
+        policyId: string;
+        name: string;
+        description: string | null;
+        interventionMode: "TRANSPARENT" | "OPAQUE" | "SILENT_LOG" | null;
+        priority: number | null;
+        isActive: boolean | null;
+        createdAt: string;
+        updatedAt: string;
+        riskCategory: "NONE" | "DESTRUCTIVE" | "CREDENTIAL_ACCESS" | null;
+        targetToolPattern: string;
+        currentVersion: number;
+        deletedAt: string | null;
+        conditions?: unknown;
+    }>;
+}, "strip", z.ZodTypeAny, {
+    ok: true;
+    policy: {
+        workspaceId: string;
+        enforcementAction: "BYPASS" | "ENHANCE" | "HIJACK" | "REASK" | "KILL" | "OBSERVED";
+        policyId: string;
+        name: string;
+        description: string | null;
+        interventionMode: "TRANSPARENT" | "OPAQUE" | "SILENT_LOG" | null;
+        priority: number | null;
+        isActive: boolean | null;
+        createdAt: string;
+        updatedAt: string;
+        riskCategory: "NONE" | "DESTRUCTIVE" | "CREDENTIAL_ACCESS" | null;
+        targetToolPattern: string;
+        currentVersion: number;
+        deletedAt: string | null;
+        conditions?: unknown;
+    };
+}, {
+    ok: true;
+    policy: {
+        workspaceId: string;
+        enforcementAction: "BYPASS" | "ENHANCE" | "HIJACK" | "REASK" | "KILL" | "OBSERVED";
+        policyId: string;
+        name: string;
+        description: string | null;
+        interventionMode: "TRANSPARENT" | "OPAQUE" | "SILENT_LOG" | null;
+        priority: number | null;
+        isActive: boolean | null;
+        createdAt: string;
+        updatedAt: string;
+        riskCategory: "NONE" | "DESTRUCTIVE" | "CREDENTIAL_ACCESS" | null;
+        targetToolPattern: string;
+        currentVersion: number;
+        deletedAt: string | null;
+        conditions?: unknown;
+    };
+}>;
+export type PolicyCreatedResponse = z.infer<typeof PolicyCreatedResponse>;
+/** `PUT /api/v1/policies/:policyId`: the policy as updated, and its new version. */
+export declare const PolicyUpdatedResponse: z.ZodObject<{
+    ok: z.ZodLiteral<true>;
+    policy: z.ZodObject<{
+        policyId: z.ZodString;
+        workspaceId: z.ZodString;
+        name: z.ZodString;
+        description: z.ZodNullable<z.ZodString>;
+        riskCategory: z.ZodNullable<z.ZodEnum<["NONE", "DESTRUCTIVE", "CREDENTIAL_ACCESS"]>>;
+        targetToolPattern: z.ZodString;
+        /** `OBSERVED` is never written by these routes, but a row may carry it. */
+        enforcementAction: z.ZodEnum<["BYPASS", "ENHANCE", "HIJACK", "REASK", "KILL", "OBSERVED"]>;
+        interventionMode: z.ZodNullable<z.ZodEnum<["TRANSPARENT", "OPAQUE", "SILENT_LOG"]>>;
+        priority: z.ZodNullable<z.ZodNumber>;
+        conditions: z.ZodUnknown;
+        isActive: z.ZodNullable<z.ZodBoolean>;
+        currentVersion: z.ZodNumber;
+        createdAt: z.ZodString;
+        updatedAt: z.ZodString;
+        deletedAt: z.ZodNullable<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        workspaceId: string;
+        enforcementAction: "BYPASS" | "ENHANCE" | "HIJACK" | "REASK" | "KILL" | "OBSERVED";
+        policyId: string;
+        name: string;
+        description: string | null;
+        interventionMode: "TRANSPARENT" | "OPAQUE" | "SILENT_LOG" | null;
+        priority: number | null;
+        isActive: boolean | null;
+        createdAt: string;
+        updatedAt: string;
+        riskCategory: "NONE" | "DESTRUCTIVE" | "CREDENTIAL_ACCESS" | null;
+        targetToolPattern: string;
+        currentVersion: number;
+        deletedAt: string | null;
+        conditions?: unknown;
+    }, {
+        workspaceId: string;
+        enforcementAction: "BYPASS" | "ENHANCE" | "HIJACK" | "REASK" | "KILL" | "OBSERVED";
+        policyId: string;
+        name: string;
+        description: string | null;
+        interventionMode: "TRANSPARENT" | "OPAQUE" | "SILENT_LOG" | null;
+        priority: number | null;
+        isActive: boolean | null;
+        createdAt: string;
+        updatedAt: string;
+        riskCategory: "NONE" | "DESTRUCTIVE" | "CREDENTIAL_ACCESS" | null;
+        targetToolPattern: string;
+        currentVersion: number;
+        deletedAt: string | null;
+        conditions?: unknown;
+    }>;
+    currentVersion: z.ZodNumber;
+}, "strip", z.ZodTypeAny, {
+    ok: true;
+    policy: {
+        workspaceId: string;
+        enforcementAction: "BYPASS" | "ENHANCE" | "HIJACK" | "REASK" | "KILL" | "OBSERVED";
+        policyId: string;
+        name: string;
+        description: string | null;
+        interventionMode: "TRANSPARENT" | "OPAQUE" | "SILENT_LOG" | null;
+        priority: number | null;
+        isActive: boolean | null;
+        createdAt: string;
+        updatedAt: string;
+        riskCategory: "NONE" | "DESTRUCTIVE" | "CREDENTIAL_ACCESS" | null;
+        targetToolPattern: string;
+        currentVersion: number;
+        deletedAt: string | null;
+        conditions?: unknown;
+    };
+    currentVersion: number;
+}, {
+    ok: true;
+    policy: {
+        workspaceId: string;
+        enforcementAction: "BYPASS" | "ENHANCE" | "HIJACK" | "REASK" | "KILL" | "OBSERVED";
+        policyId: string;
+        name: string;
+        description: string | null;
+        interventionMode: "TRANSPARENT" | "OPAQUE" | "SILENT_LOG" | null;
+        priority: number | null;
+        isActive: boolean | null;
+        createdAt: string;
+        updatedAt: string;
+        riskCategory: "NONE" | "DESTRUCTIVE" | "CREDENTIAL_ACCESS" | null;
+        targetToolPattern: string;
+        currentVersion: number;
+        deletedAt: string | null;
+        conditions?: unknown;
+    };
+    currentVersion: number;
+}>;
+export type PolicyUpdatedResponse = z.infer<typeof PolicyUpdatedResponse>;
+/** `DELETE /api/v1/policies/:policyId`: soft-deleted. */
+export declare const PolicyDeletedResponse: z.ZodObject<{
+    ok: z.ZodLiteral<true>;
+}, "strip", z.ZodTypeAny, {
+    ok: true;
+}, {
+    ok: true;
+}>;
+export type PolicyDeletedResponse = z.infer<typeof PolicyDeletedResponse>;
+/** Enable, disable or roll back a policy: the version the change recorded. */
+export declare const PolicyVersionResponse: z.ZodObject<{
+    ok: z.ZodLiteral<true>;
+    currentVersion: z.ZodNumber;
+}, "strip", z.ZodTypeAny, {
+    ok: true;
+    currentVersion: number;
+}, {
+    ok: true;
+    currentVersion: number;
+}>;
+export type PolicyVersionResponse = z.infer<typeof PolicyVersionResponse>;
+/**
+ * `POST /api/v1/policies/:policyId/convert-to-guardrail`: the guardrail made
+ * from the policy (201, or 200 when a concurrent conversion made it first),
+ * or the one an earlier conversion made (200, without `ir`).
+ */
+export declare const PolicyGuardrailConversionResponse: z.ZodUnion<[z.ZodObject<{
+    ok: z.ZodLiteral<true>;
+    created: z.ZodBoolean;
+    guardrailId: z.ZodString;
+    status: z.ZodLiteral<"SHADOW">;
+    ir: z.ZodObject<{
+        kind: z.ZodLiteral<"hook_rule">;
+        title: z.ZodString;
+        tools: z.ZodArray<z.ZodString, "many">;
+        argContains: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        argNotContains: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    }, "strip", z.ZodTypeAny, {
+        kind: "hook_rule";
+        title: string;
+        tools: string[];
+        argContains?: string[] | undefined;
+        argNotContains?: string[] | undefined;
+    }, {
+        kind: "hook_rule";
+        title: string;
+        tools: string[];
+        argContains?: string[] | undefined;
+        argNotContains?: string[] | undefined;
+    }>;
+}, "strip", z.ZodTypeAny, {
+    status: "SHADOW";
+    ok: true;
+    ir: {
+        kind: "hook_rule";
+        title: string;
+        tools: string[];
+        argContains?: string[] | undefined;
+        argNotContains?: string[] | undefined;
+    };
+    guardrailId: string;
+    created: boolean;
+}, {
+    status: "SHADOW";
+    ok: true;
+    ir: {
+        kind: "hook_rule";
+        title: string;
+        tools: string[];
+        argContains?: string[] | undefined;
+        argNotContains?: string[] | undefined;
+    };
+    guardrailId: string;
+    created: boolean;
+}>, z.ZodObject<{
+    ok: z.ZodLiteral<true>;
+    created: z.ZodLiteral<false>;
+    guardrailId: z.ZodString;
+    status: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    status: string;
+    ok: true;
+    guardrailId: string;
+    created: false;
+}, {
+    status: string;
+    ok: true;
+    guardrailId: string;
+    created: false;
+}>]>;
+export type PolicyGuardrailConversionResponse = z.infer<typeof PolicyGuardrailConversionResponse>;
+/** A `wasm_rule_bundles` row without its binary. */
+export declare const WasmRuleResponse: z.ZodObject<{
+    ruleId: z.ZodString;
+    workspaceId: z.ZodString;
+    name: z.ZodString;
+    description: z.ZodString;
+    bundleSha256: z.ZodString;
+    isActive: z.ZodBoolean;
+    /** Ascending; lower runs first. */
+    priority: z.ZodNumber;
+    mode: z.ZodString;
+    version: z.ZodNumber;
+    createdAt: z.ZodString;
+    updatedAt: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    workspaceId: string;
+    name: string;
+    mode: string;
+    ruleId: string;
+    description: string;
+    priority: number;
+    isActive: boolean;
+    createdAt: string;
+    updatedAt: string;
+    version: number;
+    bundleSha256: string;
+}, {
+    workspaceId: string;
+    name: string;
+    mode: string;
+    ruleId: string;
+    description: string;
+    priority: number;
+    isActive: boolean;
+    createdAt: string;
+    updatedAt: string;
+    version: number;
+    bundleSha256: string;
+}>;
+export type WasmRuleResponse = z.infer<typeof WasmRuleResponse>;
+/** `GET /api/v1/wasm-rules`: every rule of the workspace, as a bare array. */
+export declare const WasmRuleListResponse: z.ZodArray<z.ZodObject<{
+    ruleId: z.ZodString;
+    workspaceId: z.ZodString;
+    name: z.ZodString;
+    description: z.ZodString;
+    bundleSha256: z.ZodString;
+    isActive: z.ZodBoolean;
+    /** Ascending; lower runs first. */
+    priority: z.ZodNumber;
+    mode: z.ZodString;
+    version: z.ZodNumber;
+    createdAt: z.ZodString;
+    updatedAt: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    workspaceId: string;
+    name: string;
+    mode: string;
+    ruleId: string;
+    description: string;
+    priority: number;
+    isActive: boolean;
+    createdAt: string;
+    updatedAt: string;
+    version: number;
+    bundleSha256: string;
+}, {
+    workspaceId: string;
+    name: string;
+    mode: string;
+    ruleId: string;
+    description: string;
+    priority: number;
+    isActive: boolean;
+    createdAt: string;
+    updatedAt: string;
+    version: number;
+    bundleSha256: string;
+}>, "many">;
+export type WasmRuleListResponse = z.infer<typeof WasmRuleListResponse>;
+/** `PUT /api/v1/wasm-rules/:ruleId`. */
+export declare const WasmRuleUpdatedResponse: z.ZodObject<{
+    updated: z.ZodLiteral<true>;
+}, "strip", z.ZodTypeAny, {
+    updated: true;
+}, {
+    updated: true;
+}>;
+export type WasmRuleUpdatedResponse = z.infer<typeof WasmRuleUpdatedResponse>;
+/** `DELETE /api/v1/wasm-rules/:ruleId`. */
+export declare const WasmRuleDeletedResponse: z.ZodObject<{
+    deleted: z.ZodLiteral<true>;
+}, "strip", z.ZodTypeAny, {
+    deleted: true;
+}, {
+    deleted: true;
+}>;
+export type WasmRuleDeletedResponse = z.infer<typeof WasmRuleDeletedResponse>;
+/** `POST /api/v1/wasm-rules/:ruleId/replay`: the rule run over sampled request contexts (`summarizeReplay`). */
+export declare const WasmRuleReplayResponse: z.ZodObject<{
+    ruleId: z.ZodString;
+    since: z.ZodNullable<z.ZodString>;
+    contextCount: z.ZodNumber;
+    wouldActCount: z.ZodNumber;
+    wouldActRate: z.ZodNumber;
+    verdictCounts: z.ZodRecord<z.ZodString, z.ZodNumber>;
+    sampleMatches: z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>, "many">;
+    argumentsWithheld: z.ZodNumber;
+    argumentsNote: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    ruleId: string;
+    wouldActRate: number;
+    since: string | null;
+    contextCount: number;
+    wouldActCount: number;
+    verdictCounts: Record<string, number>;
+    sampleMatches: Record<string, unknown>[];
+    argumentsWithheld: number;
+    argumentsNote?: string | undefined;
+}, {
+    ruleId: string;
+    wouldActRate: number;
+    since: string | null;
+    contextCount: number;
+    wouldActCount: number;
+    verdictCounts: Record<string, number>;
+    sampleMatches: Record<string, unknown>[];
+    argumentsWithheld: number;
+    argumentsNote?: string | undefined;
+}>;
+export type WasmRuleReplayResponse = z.infer<typeof WasmRuleReplayResponse>;
+/** A SOP as `sopService.ts` returns it. Which optional fields are present depends on the route. */
+export declare const SopResponse: z.ZodObject<{
+    sopId: z.ZodString;
+    workspaceId: z.ZodString;
+    title: z.ZodString;
+    version: z.ZodString;
+    markdownContent: z.ZodString;
+    /** Null for a SOP written without one (the `sop_registry` view applies no column default; the SOP health cron writes none). */
+    riskTier: z.ZodNullable<z.ZodNativeEnum<{
+        readonly LOW: "LOW";
+        readonly MEDIUM: "MEDIUM";
+        readonly HIGH: "HIGH";
+        readonly CRITICAL: "CRITICAL";
+    }>>;
+    complexityTier: z.ZodNullable<z.ZodNativeEnum<{
+        readonly TIER_0: "TIER_0";
+        readonly TIER_1: "TIER_1";
+        readonly TIER_2: "TIER_2";
+    }>>;
+    isActive: z.ZodBoolean;
+    lifecycleState: z.ZodNativeEnum<{
+        readonly DRAFT: "DRAFT";
+        readonly PENDING_REVIEW: "PENDING_REVIEW";
+        readonly GENERATED: "GENERATED";
+        readonly HYPOTHESIZED: "HYPOTHESIZED";
+        readonly REFINED: "REFINED";
+        readonly VALIDATED: "VALIDATED";
+        readonly INVALIDATED: "INVALIDATED";
+    }>;
+    createdAt: z.ZodOptional<z.ZodString>;
+    updatedAt: z.ZodOptional<z.ZodString>;
+    contentHash: z.ZodOptional<z.ZodString>;
+    dependencies: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    createdBy: z.ZodOptional<z.ZodString>;
+    versionCounter: z.ZodOptional<z.ZodNumber>;
+    priorVersionId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    shadowEvaluations: z.ZodOptional<z.ZodNumber>;
+    shadowWouldBlock: z.ZodOptional<z.ZodNumber>;
+    gitDriftStatus: z.ZodOptional<z.ZodString>;
+    gitDriftCheckedAt: z.ZodOptional<z.ZodString>;
+    sslCompileState: z.ZodOptional<z.ZodEnum<["compiled", "stale", "uncompiled"]>>;
+}, "strip", z.ZodTypeAny, {
+    workspaceId: string;
+    title: string;
+    riskTier: "LOW" | "MEDIUM" | "HIGH" | "CRITICAL" | null;
+    markdownContent: string;
+    isActive: boolean;
+    sopId: string;
+    version: string;
+    complexityTier: "TIER_0" | "TIER_1" | "TIER_2" | null;
+    lifecycleState: "DRAFT" | "PENDING_REVIEW" | "GENERATED" | "HYPOTHESIZED" | "REFINED" | "VALIDATED" | "INVALIDATED";
+    contentHash?: string | undefined;
+    shadowEvaluations?: number | undefined;
+    shadowWouldBlock?: number | undefined;
+    createdAt?: string | undefined;
+    updatedAt?: string | undefined;
+    dependencies?: string[] | undefined;
+    createdBy?: string | undefined;
+    versionCounter?: number | undefined;
+    priorVersionId?: string | null | undefined;
+    gitDriftStatus?: string | undefined;
+    gitDriftCheckedAt?: string | undefined;
+    sslCompileState?: "compiled" | "stale" | "uncompiled" | undefined;
+}, {
+    workspaceId: string;
+    title: string;
+    riskTier: "LOW" | "MEDIUM" | "HIGH" | "CRITICAL" | null;
+    markdownContent: string;
+    isActive: boolean;
+    sopId: string;
+    version: string;
+    complexityTier: "TIER_0" | "TIER_1" | "TIER_2" | null;
+    lifecycleState: "DRAFT" | "PENDING_REVIEW" | "GENERATED" | "HYPOTHESIZED" | "REFINED" | "VALIDATED" | "INVALIDATED";
+    contentHash?: string | undefined;
+    shadowEvaluations?: number | undefined;
+    shadowWouldBlock?: number | undefined;
+    createdAt?: string | undefined;
+    updatedAt?: string | undefined;
+    dependencies?: string[] | undefined;
+    createdBy?: string | undefined;
+    versionCounter?: number | undefined;
+    priorVersionId?: string | null | undefined;
+    gitDriftStatus?: string | undefined;
+    gitDriftCheckedAt?: string | undefined;
+    sslCompileState?: "compiled" | "stale" | "uncompiled" | undefined;
+}>;
+export type SopResponse = z.infer<typeof SopResponse>;
+/** `POST /api/v1/sops`: the created SOP; its tiers are the ones the request named. */
+export declare const SopCreatedResponse: z.ZodObject<{
+    sopId: z.ZodString;
+    workspaceId: z.ZodString;
+    title: z.ZodString;
+    version: z.ZodString;
+    markdownContent: z.ZodString;
+    isActive: z.ZodBoolean;
+    lifecycleState: z.ZodNativeEnum<{
+        readonly DRAFT: "DRAFT";
+        readonly PENDING_REVIEW: "PENDING_REVIEW";
+        readonly GENERATED: "GENERATED";
+        readonly HYPOTHESIZED: "HYPOTHESIZED";
+        readonly REFINED: "REFINED";
+        readonly VALIDATED: "VALIDATED";
+        readonly INVALIDATED: "INVALIDATED";
+    }>;
+    createdAt: z.ZodOptional<z.ZodString>;
+    updatedAt: z.ZodOptional<z.ZodString>;
+    contentHash: z.ZodOptional<z.ZodString>;
+    dependencies: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    createdBy: z.ZodOptional<z.ZodString>;
+    versionCounter: z.ZodOptional<z.ZodNumber>;
+    priorVersionId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    shadowEvaluations: z.ZodOptional<z.ZodNumber>;
+    shadowWouldBlock: z.ZodOptional<z.ZodNumber>;
+    gitDriftStatus: z.ZodOptional<z.ZodString>;
+    gitDriftCheckedAt: z.ZodOptional<z.ZodString>;
+    sslCompileState: z.ZodOptional<z.ZodEnum<["compiled", "stale", "uncompiled"]>>;
+} & {
+    riskTier: z.ZodNativeEnum<{
+        readonly LOW: "LOW";
+        readonly MEDIUM: "MEDIUM";
+        readonly HIGH: "HIGH";
+        readonly CRITICAL: "CRITICAL";
+    }>;
+    complexityTier: z.ZodNativeEnum<{
+        readonly TIER_0: "TIER_0";
+        readonly TIER_1: "TIER_1";
+        readonly TIER_2: "TIER_2";
+    }>;
+}, "strip", z.ZodTypeAny, {
+    workspaceId: string;
+    title: string;
+    riskTier: "LOW" | "MEDIUM" | "HIGH" | "CRITICAL";
+    markdownContent: string;
+    isActive: boolean;
+    sopId: string;
+    version: string;
+    complexityTier: "TIER_0" | "TIER_1" | "TIER_2";
+    lifecycleState: "DRAFT" | "PENDING_REVIEW" | "GENERATED" | "HYPOTHESIZED" | "REFINED" | "VALIDATED" | "INVALIDATED";
+    contentHash?: string | undefined;
+    shadowEvaluations?: number | undefined;
+    shadowWouldBlock?: number | undefined;
+    createdAt?: string | undefined;
+    updatedAt?: string | undefined;
+    dependencies?: string[] | undefined;
+    createdBy?: string | undefined;
+    versionCounter?: number | undefined;
+    priorVersionId?: string | null | undefined;
+    gitDriftStatus?: string | undefined;
+    gitDriftCheckedAt?: string | undefined;
+    sslCompileState?: "compiled" | "stale" | "uncompiled" | undefined;
+}, {
+    workspaceId: string;
+    title: string;
+    riskTier: "LOW" | "MEDIUM" | "HIGH" | "CRITICAL";
+    markdownContent: string;
+    isActive: boolean;
+    sopId: string;
+    version: string;
+    complexityTier: "TIER_0" | "TIER_1" | "TIER_2";
+    lifecycleState: "DRAFT" | "PENDING_REVIEW" | "GENERATED" | "HYPOTHESIZED" | "REFINED" | "VALIDATED" | "INVALIDATED";
+    contentHash?: string | undefined;
+    shadowEvaluations?: number | undefined;
+    shadowWouldBlock?: number | undefined;
+    createdAt?: string | undefined;
+    updatedAt?: string | undefined;
+    dependencies?: string[] | undefined;
+    createdBy?: string | undefined;
+    versionCounter?: number | undefined;
+    priorVersionId?: string | null | undefined;
+    gitDriftStatus?: string | undefined;
+    gitDriftCheckedAt?: string | undefined;
+    sslCompileState?: "compiled" | "stale" | "uncompiled" | undefined;
+}>;
+export type SopCreatedResponse = z.infer<typeof SopCreatedResponse>;
+/** `GET /api/v1/sops`: one page of SOPs. */
+export declare const SopListResponse: z.ZodObject<{
+    listProperty: z.ZodLiteral<"items">;
+    rowCase: z.ZodLiteral<"camel">;
+} & {
+    items: z.ZodArray<z.ZodObject<{
+        sopId: z.ZodString;
+        workspaceId: z.ZodString;
+        title: z.ZodString;
+        version: z.ZodString;
+        markdownContent: z.ZodString;
+        /** Null for a SOP written without one (the `sop_registry` view applies no column default; the SOP health cron writes none). */
+        riskTier: z.ZodNullable<z.ZodNativeEnum<{
+            readonly LOW: "LOW";
+            readonly MEDIUM: "MEDIUM";
+            readonly HIGH: "HIGH";
+            readonly CRITICAL: "CRITICAL";
+        }>>;
+        complexityTier: z.ZodNullable<z.ZodNativeEnum<{
+            readonly TIER_0: "TIER_0";
+            readonly TIER_1: "TIER_1";
+            readonly TIER_2: "TIER_2";
+        }>>;
+        isActive: z.ZodBoolean;
+        lifecycleState: z.ZodNativeEnum<{
+            readonly DRAFT: "DRAFT";
+            readonly PENDING_REVIEW: "PENDING_REVIEW";
+            readonly GENERATED: "GENERATED";
+            readonly HYPOTHESIZED: "HYPOTHESIZED";
+            readonly REFINED: "REFINED";
+            readonly VALIDATED: "VALIDATED";
+            readonly INVALIDATED: "INVALIDATED";
+        }>;
+        createdAt: z.ZodOptional<z.ZodString>;
+        updatedAt: z.ZodOptional<z.ZodString>;
+        contentHash: z.ZodOptional<z.ZodString>;
+        dependencies: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        createdBy: z.ZodOptional<z.ZodString>;
+        versionCounter: z.ZodOptional<z.ZodNumber>;
+        priorVersionId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        shadowEvaluations: z.ZodOptional<z.ZodNumber>;
+        shadowWouldBlock: z.ZodOptional<z.ZodNumber>;
+        gitDriftStatus: z.ZodOptional<z.ZodString>;
+        gitDriftCheckedAt: z.ZodOptional<z.ZodString>;
+        sslCompileState: z.ZodOptional<z.ZodEnum<["compiled", "stale", "uncompiled"]>>;
+    }, "strip", z.ZodTypeAny, {
+        workspaceId: string;
+        title: string;
+        riskTier: "LOW" | "MEDIUM" | "HIGH" | "CRITICAL" | null;
+        markdownContent: string;
+        isActive: boolean;
+        sopId: string;
+        version: string;
+        complexityTier: "TIER_0" | "TIER_1" | "TIER_2" | null;
+        lifecycleState: "DRAFT" | "PENDING_REVIEW" | "GENERATED" | "HYPOTHESIZED" | "REFINED" | "VALIDATED" | "INVALIDATED";
+        contentHash?: string | undefined;
+        shadowEvaluations?: number | undefined;
+        shadowWouldBlock?: number | undefined;
+        createdAt?: string | undefined;
+        updatedAt?: string | undefined;
+        dependencies?: string[] | undefined;
+        createdBy?: string | undefined;
+        versionCounter?: number | undefined;
+        priorVersionId?: string | null | undefined;
+        gitDriftStatus?: string | undefined;
+        gitDriftCheckedAt?: string | undefined;
+        sslCompileState?: "compiled" | "stale" | "uncompiled" | undefined;
+    }, {
+        workspaceId: string;
+        title: string;
+        riskTier: "LOW" | "MEDIUM" | "HIGH" | "CRITICAL" | null;
+        markdownContent: string;
+        isActive: boolean;
+        sopId: string;
+        version: string;
+        complexityTier: "TIER_0" | "TIER_1" | "TIER_2" | null;
+        lifecycleState: "DRAFT" | "PENDING_REVIEW" | "GENERATED" | "HYPOTHESIZED" | "REFINED" | "VALIDATED" | "INVALIDATED";
+        contentHash?: string | undefined;
+        shadowEvaluations?: number | undefined;
+        shadowWouldBlock?: number | undefined;
+        createdAt?: string | undefined;
+        updatedAt?: string | undefined;
+        dependencies?: string[] | undefined;
+        createdBy?: string | undefined;
+        versionCounter?: number | undefined;
+        priorVersionId?: string | null | undefined;
+        gitDriftStatus?: string | undefined;
+        gitDriftCheckedAt?: string | undefined;
+        sslCompileState?: "compiled" | "stale" | "uncompiled" | undefined;
+    }>, "many">;
+    total: z.ZodNumber;
+    page: z.ZodNumber;
+    limit: z.ZodNumber;
+}, "strip", z.ZodTypeAny, {
+    limit: number;
+    items: {
+        workspaceId: string;
+        title: string;
+        riskTier: "LOW" | "MEDIUM" | "HIGH" | "CRITICAL" | null;
+        markdownContent: string;
+        isActive: boolean;
+        sopId: string;
+        version: string;
+        complexityTier: "TIER_0" | "TIER_1" | "TIER_2" | null;
+        lifecycleState: "DRAFT" | "PENDING_REVIEW" | "GENERATED" | "HYPOTHESIZED" | "REFINED" | "VALIDATED" | "INVALIDATED";
+        contentHash?: string | undefined;
+        shadowEvaluations?: number | undefined;
+        shadowWouldBlock?: number | undefined;
+        createdAt?: string | undefined;
+        updatedAt?: string | undefined;
+        dependencies?: string[] | undefined;
+        createdBy?: string | undefined;
+        versionCounter?: number | undefined;
+        priorVersionId?: string | null | undefined;
+        gitDriftStatus?: string | undefined;
+        gitDriftCheckedAt?: string | undefined;
+        sslCompileState?: "compiled" | "stale" | "uncompiled" | undefined;
+    }[];
+    listProperty: "items";
+    rowCase: "camel";
+    total: number;
+    page: number;
+}, {
+    limit: number;
+    items: {
+        workspaceId: string;
+        title: string;
+        riskTier: "LOW" | "MEDIUM" | "HIGH" | "CRITICAL" | null;
+        markdownContent: string;
+        isActive: boolean;
+        sopId: string;
+        version: string;
+        complexityTier: "TIER_0" | "TIER_1" | "TIER_2" | null;
+        lifecycleState: "DRAFT" | "PENDING_REVIEW" | "GENERATED" | "HYPOTHESIZED" | "REFINED" | "VALIDATED" | "INVALIDATED";
+        contentHash?: string | undefined;
+        shadowEvaluations?: number | undefined;
+        shadowWouldBlock?: number | undefined;
+        createdAt?: string | undefined;
+        updatedAt?: string | undefined;
+        dependencies?: string[] | undefined;
+        createdBy?: string | undefined;
+        versionCounter?: number | undefined;
+        priorVersionId?: string | null | undefined;
+        gitDriftStatus?: string | undefined;
+        gitDriftCheckedAt?: string | undefined;
+        sslCompileState?: "compiled" | "stale" | "uncompiled" | undefined;
+    }[];
+    listProperty: "items";
+    rowCase: "camel";
+    total: number;
+    page: number;
+}>;
+export type SopListResponse = z.infer<typeof SopListResponse>;
+/** `PUT /api/v1/sops/:sopId`: the updated SOP (a new DRAFT version when the SOP was not a DRAFT), and the anti-gaming analysis when the content changed. */
+export declare const SopUpdatedResponse: z.ZodObject<{
+    sop: z.ZodObject<{
+        sopId: z.ZodString;
+        workspaceId: z.ZodString;
+        title: z.ZodString;
+        version: z.ZodString;
+        markdownContent: z.ZodString;
+        /** Null for a SOP written without one (the `sop_registry` view applies no column default; the SOP health cron writes none). */
+        riskTier: z.ZodNullable<z.ZodNativeEnum<{
+            readonly LOW: "LOW";
+            readonly MEDIUM: "MEDIUM";
+            readonly HIGH: "HIGH";
+            readonly CRITICAL: "CRITICAL";
+        }>>;
+        complexityTier: z.ZodNullable<z.ZodNativeEnum<{
+            readonly TIER_0: "TIER_0";
+            readonly TIER_1: "TIER_1";
+            readonly TIER_2: "TIER_2";
+        }>>;
+        isActive: z.ZodBoolean;
+        lifecycleState: z.ZodNativeEnum<{
+            readonly DRAFT: "DRAFT";
+            readonly PENDING_REVIEW: "PENDING_REVIEW";
+            readonly GENERATED: "GENERATED";
+            readonly HYPOTHESIZED: "HYPOTHESIZED";
+            readonly REFINED: "REFINED";
+            readonly VALIDATED: "VALIDATED";
+            readonly INVALIDATED: "INVALIDATED";
+        }>;
+        createdAt: z.ZodOptional<z.ZodString>;
+        updatedAt: z.ZodOptional<z.ZodString>;
+        contentHash: z.ZodOptional<z.ZodString>;
+        dependencies: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        createdBy: z.ZodOptional<z.ZodString>;
+        versionCounter: z.ZodOptional<z.ZodNumber>;
+        priorVersionId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        shadowEvaluations: z.ZodOptional<z.ZodNumber>;
+        shadowWouldBlock: z.ZodOptional<z.ZodNumber>;
+        gitDriftStatus: z.ZodOptional<z.ZodString>;
+        gitDriftCheckedAt: z.ZodOptional<z.ZodString>;
+        sslCompileState: z.ZodOptional<z.ZodEnum<["compiled", "stale", "uncompiled"]>>;
+    }, "strip", z.ZodTypeAny, {
+        workspaceId: string;
+        title: string;
+        riskTier: "LOW" | "MEDIUM" | "HIGH" | "CRITICAL" | null;
+        markdownContent: string;
+        isActive: boolean;
+        sopId: string;
+        version: string;
+        complexityTier: "TIER_0" | "TIER_1" | "TIER_2" | null;
+        lifecycleState: "DRAFT" | "PENDING_REVIEW" | "GENERATED" | "HYPOTHESIZED" | "REFINED" | "VALIDATED" | "INVALIDATED";
+        contentHash?: string | undefined;
+        shadowEvaluations?: number | undefined;
+        shadowWouldBlock?: number | undefined;
+        createdAt?: string | undefined;
+        updatedAt?: string | undefined;
+        dependencies?: string[] | undefined;
+        createdBy?: string | undefined;
+        versionCounter?: number | undefined;
+        priorVersionId?: string | null | undefined;
+        gitDriftStatus?: string | undefined;
+        gitDriftCheckedAt?: string | undefined;
+        sslCompileState?: "compiled" | "stale" | "uncompiled" | undefined;
+    }, {
+        workspaceId: string;
+        title: string;
+        riskTier: "LOW" | "MEDIUM" | "HIGH" | "CRITICAL" | null;
+        markdownContent: string;
+        isActive: boolean;
+        sopId: string;
+        version: string;
+        complexityTier: "TIER_0" | "TIER_1" | "TIER_2" | null;
+        lifecycleState: "DRAFT" | "PENDING_REVIEW" | "GENERATED" | "HYPOTHESIZED" | "REFINED" | "VALIDATED" | "INVALIDATED";
+        contentHash?: string | undefined;
+        shadowEvaluations?: number | undefined;
+        shadowWouldBlock?: number | undefined;
+        createdAt?: string | undefined;
+        updatedAt?: string | undefined;
+        dependencies?: string[] | undefined;
+        createdBy?: string | undefined;
+        versionCounter?: number | undefined;
+        priorVersionId?: string | null | undefined;
+        gitDriftStatus?: string | undefined;
+        gitDriftCheckedAt?: string | undefined;
+        sslCompileState?: "compiled" | "stale" | "uncompiled" | undefined;
+    }>;
+    antiGaming: z.ZodOptional<z.ZodObject<{
+        changeClassification: z.ZodNativeEnum<{
+            readonly STRENGTHEN: "STRENGTHEN";
+            readonly CLARIFY: "CLARIFY";
+            readonly NARROW: "NARROW";
+            readonly WEAKEN: "WEAKEN";
+        }>;
+        requiresElevatedApproval: z.ZodBoolean;
+        impactSummary: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        changeClassification: "STRENGTHEN" | "CLARIFY" | "NARROW" | "WEAKEN";
+        requiresElevatedApproval: boolean;
+        impactSummary: string;
+    }, {
+        changeClassification: "STRENGTHEN" | "CLARIFY" | "NARROW" | "WEAKEN";
+        requiresElevatedApproval: boolean;
+        impactSummary: string;
+    }>>;
+}, "strip", z.ZodTypeAny, {
+    sop: {
+        workspaceId: string;
+        title: string;
+        riskTier: "LOW" | "MEDIUM" | "HIGH" | "CRITICAL" | null;
+        markdownContent: string;
+        isActive: boolean;
+        sopId: string;
+        version: string;
+        complexityTier: "TIER_0" | "TIER_1" | "TIER_2" | null;
+        lifecycleState: "DRAFT" | "PENDING_REVIEW" | "GENERATED" | "HYPOTHESIZED" | "REFINED" | "VALIDATED" | "INVALIDATED";
+        contentHash?: string | undefined;
+        shadowEvaluations?: number | undefined;
+        shadowWouldBlock?: number | undefined;
+        createdAt?: string | undefined;
+        updatedAt?: string | undefined;
+        dependencies?: string[] | undefined;
+        createdBy?: string | undefined;
+        versionCounter?: number | undefined;
+        priorVersionId?: string | null | undefined;
+        gitDriftStatus?: string | undefined;
+        gitDriftCheckedAt?: string | undefined;
+        sslCompileState?: "compiled" | "stale" | "uncompiled" | undefined;
+    };
+    antiGaming?: {
+        changeClassification: "STRENGTHEN" | "CLARIFY" | "NARROW" | "WEAKEN";
+        requiresElevatedApproval: boolean;
+        impactSummary: string;
+    } | undefined;
+}, {
+    sop: {
+        workspaceId: string;
+        title: string;
+        riskTier: "LOW" | "MEDIUM" | "HIGH" | "CRITICAL" | null;
+        markdownContent: string;
+        isActive: boolean;
+        sopId: string;
+        version: string;
+        complexityTier: "TIER_0" | "TIER_1" | "TIER_2" | null;
+        lifecycleState: "DRAFT" | "PENDING_REVIEW" | "GENERATED" | "HYPOTHESIZED" | "REFINED" | "VALIDATED" | "INVALIDATED";
+        contentHash?: string | undefined;
+        shadowEvaluations?: number | undefined;
+        shadowWouldBlock?: number | undefined;
+        createdAt?: string | undefined;
+        updatedAt?: string | undefined;
+        dependencies?: string[] | undefined;
+        createdBy?: string | undefined;
+        versionCounter?: number | undefined;
+        priorVersionId?: string | null | undefined;
+        gitDriftStatus?: string | undefined;
+        gitDriftCheckedAt?: string | undefined;
+        sslCompileState?: "compiled" | "stale" | "uncompiled" | undefined;
+    };
+    antiGaming?: {
+        changeClassification: "STRENGTHEN" | "CLARIFY" | "NARROW" | "WEAKEN";
+        requiresElevatedApproval: boolean;
+        impactSummary: string;
+    } | undefined;
+}>;
+export type SopUpdatedResponse = z.infer<typeof SopUpdatedResponse>;
+/** `DELETE /api/v1/sops/:sopId`: soft-deleted. */
+export declare const SopDeletedResponse: z.ZodObject<{
+    deleted: z.ZodLiteral<true>;
+}, "strip", z.ZodTypeAny, {
+    deleted: true;
+}, {
+    deleted: true;
+}>;
+export type SopDeletedResponse = z.infer<typeof SopDeletedResponse>;
+/** `POST /api/v1/sops/git-drift-report`. */
+export declare const SopGitDriftReportResponse: z.ZodObject<{
+    ok: z.ZodLiteral<true>;
+    recorded: z.ZodNumber;
+}, "strip", z.ZodTypeAny, {
+    ok: true;
+    recorded: number;
+}, {
+    ok: true;
+    recorded: number;
+}>;
+export type SopGitDriftReportResponse = z.infer<typeof SopGitDriftReportResponse>;
+/** A rule the MCP proxy and the hook gate enforce: from a SOP title, or projected from a hook-rule guardrail (`origin: 'guardrail'`). */
+export declare const SopRuleResponse: z.ZodObject<{
+    id: z.ZodString;
+    toolPattern: z.ZodString;
+    argPattern: z.ZodOptional<z.ZodString>;
+    action: z.ZodEnum<["block", "warn", "require_approval"]>;
+    reason: z.ZodString;
+    origin: z.ZodOptional<z.ZodLiteral<"guardrail">>;
+    roles: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+}, "strip", z.ZodTypeAny, {
+    action: "block" | "warn" | "require_approval";
+    reason: string;
+    id: string;
+    toolPattern: string;
+    roles?: string[] | undefined;
+    argPattern?: string | undefined;
+    origin?: "guardrail" | undefined;
+}, {
+    action: "block" | "warn" | "require_approval";
+    reason: string;
+    id: string;
+    toolPattern: string;
+    roles?: string[] | undefined;
+    argPattern?: string | undefined;
+    origin?: "guardrail" | undefined;
+}>;
+export type SopRuleResponse = z.infer<typeof SopRuleResponse>;
+/** `GET /api/v1/sop/rules`: the rule set and MCP curation the MCP proxy polls. */
+export declare const SopRulesResponse: z.ZodObject<{
+    listProperty: z.ZodLiteral<"rules">;
+    rowCase: z.ZodLiteral<"camel">;
+} & {
+    ok: z.ZodLiteral<true>;
+    rules: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        toolPattern: z.ZodString;
+        argPattern: z.ZodOptional<z.ZodString>;
+        action: z.ZodEnum<["block", "warn", "require_approval"]>;
+        reason: z.ZodString;
+        origin: z.ZodOptional<z.ZodLiteral<"guardrail">>;
+        roles: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    }, "strip", z.ZodTypeAny, {
+        action: "block" | "warn" | "require_approval";
+        reason: string;
+        id: string;
+        toolPattern: string;
+        roles?: string[] | undefined;
+        argPattern?: string | undefined;
+        origin?: "guardrail" | undefined;
+    }, {
+        action: "block" | "warn" | "require_approval";
+        reason: string;
+        id: string;
+        toolPattern: string;
+        roles?: string[] | undefined;
+        argPattern?: string | undefined;
+        origin?: "guardrail" | undefined;
+    }>, "many">;
+    allowedTools: z.ZodArray<z.ZodString, "many">;
+    toolDescriptionOverrides: z.ZodRecord<z.ZodString, z.ZodString>;
+    allowedServers: z.ZodArray<z.ZodString, "many">;
+    mcpInjectionPatterns: z.ZodArray<z.ZodString, "many">;
+    mcpRegistry: z.ZodObject<{
+        defaultPolicy: z.ZodEnum<["allow", "deny"]>;
+        approvedServers: z.ZodArray<z.ZodString, "many">;
+        blockedServers: z.ZodArray<z.ZodString, "many">;
+        heldServers: z.ZodArray<z.ZodString, "many">;
+        disabledTools: z.ZodRecord<z.ZodString, z.ZodArray<z.ZodString, "many">>;
+    }, "strip", z.ZodTypeAny, {
+        disabledTools: Record<string, string[]>;
+        defaultPolicy: "deny" | "allow";
+        approvedServers: string[];
+        blockedServers: string[];
+        heldServers: string[];
+    }, {
+        disabledTools: Record<string, string[]>;
+        defaultPolicy: "deny" | "allow";
+        approvedServers: string[];
+        blockedServers: string[];
+        heldServers: string[];
+    }>;
+    mcpBudgets: z.ZodObject<{
+        budgets: z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            scope: z.ZodEnum<["server", "tool", "member", "member_server"]>;
+            server: z.ZodOptional<z.ZodString>;
+            tool: z.ZodOptional<z.ZodString>;
+            memberId: z.ZodOptional<z.ZodString>;
+            period: z.ZodEnum<["hour", "day"]>;
+            limit: z.ZodNumber;
+        }, "strip", z.ZodTypeAny, {
+            period: "day" | "hour";
+            id: string;
+            limit: number;
+            scope: "member" | "tool" | "server" | "member_server";
+            tool?: string | undefined;
+            server?: string | undefined;
+            memberId?: string | undefined;
+        }, {
+            period: "day" | "hour";
+            id: string;
+            limit: number;
+            scope: "member" | "tool" | "server" | "member_server";
+            tool?: string | undefined;
+            server?: string | undefined;
+            memberId?: string | undefined;
+        }>, "many">;
+        warnAtPct: z.ZodNumber;
+    }, "strip", z.ZodTypeAny, {
+        budgets: {
+            period: "day" | "hour";
+            id: string;
+            limit: number;
+            scope: "member" | "tool" | "server" | "member_server";
+            tool?: string | undefined;
+            server?: string | undefined;
+            memberId?: string | undefined;
+        }[];
+        warnAtPct: number;
+    }, {
+        budgets: {
+            period: "day" | "hour";
+            id: string;
+            limit: number;
+            scope: "member" | "tool" | "server" | "member_server";
+            tool?: string | undefined;
+            server?: string | undefined;
+            memberId?: string | undefined;
+        }[];
+        warnAtPct: number;
+    }>;
+    piiDetectors: z.ZodNullable<z.ZodRecord<z.ZodEnum<["pii.card", "pii.iban", "pii.ssn", "pii.email", "pii.phone"]>, z.ZodEnum<["off", "redact", "block"]>>>;
+    wasmRules: z.ZodArray<z.ZodObject<{
+        ruleId: z.ZodString;
+        name: z.ZodString;
+        sha256: z.ZodString;
+        priority: z.ZodNumber;
+        mode: z.ZodEnum<["ENFORCE", "SHADOW"]>;
+    }, "strip", z.ZodTypeAny, {
+        name: string;
+        mode: "SHADOW" | "ENFORCE";
+        ruleId: string;
+        sha256: string;
+        priority: number;
+    }, {
+        name: string;
+        mode: "SHADOW" | "ENFORCE";
+        ruleId: string;
+        sha256: string;
+        priority: number;
+    }>, "many">;
+    ssoGroupPolicy: z.ZodNullable<z.ZodObject<{
+        highRiskTools: z.ZodArray<z.ZodString, "many">;
+        requiredGroups: z.ZodArray<z.ZodString, "many">;
+        requireOboFor: z.ZodArray<z.ZodString, "many">;
+    }, "strip", z.ZodTypeAny, {
+        highRiskTools: string[];
+        requiredGroups: string[];
+        requireOboFor: string[];
+    }, {
+        highRiskTools: string[];
+        requiredGroups: string[];
+        requireOboFor: string[];
+    }>>;
+    principal: z.ZodNullable<z.ZodObject<{
+        memberId: z.ZodString;
+        email: z.ZodString;
+        role: z.ZodString;
+        ssoGroups: z.ZodArray<z.ZodString, "many">;
+    }, "strip", z.ZodTypeAny, {
+        email: string;
+        role: string;
+        memberId: string;
+        ssoGroups: string[];
+    }, {
+        email: string;
+        role: string;
+        memberId: string;
+        ssoGroups: string[];
+    }>>;
+    interventionMode: z.ZodEnum<["TRANSPARENT", "OPAQUE", "SILENT_LOG"]>;
+    mcpProxyFailBehavior: z.ZodOptional<z.ZodEnum<["open", "closed"]>>;
+    mcpInjectionAction: z.ZodOptional<z.ZodEnum<["warn", "block"]>>;
+    mcpAnomalyMode: z.ZodOptional<z.ZodEnum<["enforce", "warn", "off"]>>;
+    mcpAnomalyOverrides: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<["steer", "reask", "kill", "off"]>>>;
+}, "strip", z.ZodTypeAny, {
+    ok: true;
+    piiDetectors: Partial<Record<"pii.card" | "pii.iban" | "pii.ssn" | "pii.email" | "pii.phone", "redact" | "off" | "block">> | null;
+    mcpInjectionPatterns: string[];
+    mcpBudgets: {
+        budgets: {
+            period: "day" | "hour";
+            id: string;
+            limit: number;
+            scope: "member" | "tool" | "server" | "member_server";
+            tool?: string | undefined;
+            server?: string | undefined;
+            memberId?: string | undefined;
+        }[];
+        warnAtPct: number;
+    };
+    interventionMode: "TRANSPARENT" | "OPAQUE" | "SILENT_LOG";
+    rules: {
+        action: "block" | "warn" | "require_approval";
+        reason: string;
+        id: string;
+        toolPattern: string;
+        roles?: string[] | undefined;
+        argPattern?: string | undefined;
+        origin?: "guardrail" | undefined;
+    }[];
+    listProperty: "rules";
+    rowCase: "camel";
+    allowedTools: string[];
+    toolDescriptionOverrides: Record<string, string>;
+    allowedServers: string[];
+    mcpRegistry: {
+        disabledTools: Record<string, string[]>;
+        defaultPolicy: "deny" | "allow";
+        approvedServers: string[];
+        blockedServers: string[];
+        heldServers: string[];
+    };
+    wasmRules: {
+        name: string;
+        mode: "SHADOW" | "ENFORCE";
+        ruleId: string;
+        sha256: string;
+        priority: number;
+    }[];
+    ssoGroupPolicy: {
+        highRiskTools: string[];
+        requiredGroups: string[];
+        requireOboFor: string[];
+    } | null;
+    principal: {
+        email: string;
+        role: string;
+        memberId: string;
+        ssoGroups: string[];
+    } | null;
+    mcpProxyFailBehavior?: "open" | "closed" | undefined;
+    mcpInjectionAction?: "block" | "warn" | undefined;
+    mcpAnomalyMode?: "enforce" | "off" | "warn" | undefined;
+    mcpAnomalyOverrides?: Record<string, "off" | "steer" | "reask" | "kill"> | undefined;
+}, {
+    ok: true;
+    piiDetectors: Partial<Record<"pii.card" | "pii.iban" | "pii.ssn" | "pii.email" | "pii.phone", "redact" | "off" | "block">> | null;
+    mcpInjectionPatterns: string[];
+    mcpBudgets: {
+        budgets: {
+            period: "day" | "hour";
+            id: string;
+            limit: number;
+            scope: "member" | "tool" | "server" | "member_server";
+            tool?: string | undefined;
+            server?: string | undefined;
+            memberId?: string | undefined;
+        }[];
+        warnAtPct: number;
+    };
+    interventionMode: "TRANSPARENT" | "OPAQUE" | "SILENT_LOG";
+    rules: {
+        action: "block" | "warn" | "require_approval";
+        reason: string;
+        id: string;
+        toolPattern: string;
+        roles?: string[] | undefined;
+        argPattern?: string | undefined;
+        origin?: "guardrail" | undefined;
+    }[];
+    listProperty: "rules";
+    rowCase: "camel";
+    allowedTools: string[];
+    toolDescriptionOverrides: Record<string, string>;
+    allowedServers: string[];
+    mcpRegistry: {
+        disabledTools: Record<string, string[]>;
+        defaultPolicy: "deny" | "allow";
+        approvedServers: string[];
+        blockedServers: string[];
+        heldServers: string[];
+    };
+    wasmRules: {
+        name: string;
+        mode: "SHADOW" | "ENFORCE";
+        ruleId: string;
+        sha256: string;
+        priority: number;
+    }[];
+    ssoGroupPolicy: {
+        highRiskTools: string[];
+        requiredGroups: string[];
+        requireOboFor: string[];
+    } | null;
+    principal: {
+        email: string;
+        role: string;
+        memberId: string;
+        ssoGroups: string[];
+    } | null;
+    mcpProxyFailBehavior?: "open" | "closed" | undefined;
+    mcpInjectionAction?: "block" | "warn" | undefined;
+    mcpAnomalyMode?: "enforce" | "off" | "warn" | undefined;
+    mcpAnomalyOverrides?: Record<string, "off" | "steer" | "reask" | "kill"> | undefined;
+}>;
+export type SopRulesResponse = z.infer<typeof SopRulesResponse>;
+/** `POST /api/v1/decisions`: how many holds became queue entries. */
+export declare const DecisionIngestResponse: z.ZodObject<{
+    accepted: z.ZodNumber;
+    dropped: z.ZodNumber;
+    entryIds: z.ZodArray<z.ZodString, "many">;
+}, "strip", z.ZodTypeAny, {
+    dropped: number;
+    accepted: number;
+    entryIds: string[];
+}, {
+    dropped: number;
+    accepted: number;
+    entryIds: string[];
+}>;
+export type DecisionIngestResponse = z.infer<typeof DecisionIngestResponse>;
+/** One approved bypass as `maybeWriteReviewHoldBypass` writes it to Valkey. */
+export declare const ApprovedBypassResponse: z.ZodObject<{
+    workspaceId: z.ZodString;
+    sopRuleId: z.ZodString;
+    toolNameNormalized: z.ZodString;
+    targetHash: z.ZodString;
+    holdId: z.ZodString;
+    decidedBy: z.ZodString;
+    decidedAt: z.ZodString;
+    expiresAt: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    workspaceId: string;
+    expiresAt: string;
+    sopRuleId: string;
+    toolNameNormalized: string;
+    targetHash: string;
+    holdId: string;
+    decidedBy: string;
+    decidedAt: string;
+}, {
+    workspaceId: string;
+    expiresAt: string;
+    sopRuleId: string;
+    toolNameNormalized: string;
+    targetHash: string;
+    holdId: string;
+    decidedBy: string;
+    decidedAt: string;
+}>;
+export type ApprovedBypassResponse = z.infer<typeof ApprovedBypassResponse>;
+/** `GET /api/v1/decisions/approved-bypasses`. */
+export declare const ApprovedBypassListResponse: z.ZodObject<{
+    ok: z.ZodLiteral<true>;
+    bypasses: z.ZodArray<z.ZodObject<{
+        workspaceId: z.ZodString;
+        sopRuleId: z.ZodString;
+        toolNameNormalized: z.ZodString;
+        targetHash: z.ZodString;
+        holdId: z.ZodString;
+        decidedBy: z.ZodString;
+        decidedAt: z.ZodString;
+        expiresAt: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        workspaceId: string;
+        expiresAt: string;
+        sopRuleId: string;
+        toolNameNormalized: string;
+        targetHash: string;
+        holdId: string;
+        decidedBy: string;
+        decidedAt: string;
+    }, {
+        workspaceId: string;
+        expiresAt: string;
+        sopRuleId: string;
+        toolNameNormalized: string;
+        targetHash: string;
+        holdId: string;
+        decidedBy: string;
+        decidedAt: string;
+    }>, "many">;
+}, "strip", z.ZodTypeAny, {
+    ok: true;
+    bypasses: {
+        workspaceId: string;
+        expiresAt: string;
+        sopRuleId: string;
+        toolNameNormalized: string;
+        targetHash: string;
+        holdId: string;
+        decidedBy: string;
+        decidedAt: string;
+    }[];
+}, {
+    ok: true;
+    bypasses: {
+        workspaceId: string;
+        expiresAt: string;
+        sopRuleId: string;
+        toolNameNormalized: string;
+        targetHash: string;
+        holdId: string;
+        decidedBy: string;
+        decidedAt: string;
+    }[];
+}>;
+export type ApprovedBypassListResponse = z.infer<typeof ApprovedBypassListResponse>;
+/** `POST /api/v1/decisions/:entryId/review`. */
+export declare const DecisionReviewResponse: z.ZodObject<{
+    ok: z.ZodLiteral<true>;
+    status: z.ZodEnum<["APPROVED", "REJECTED"]>;
+    bypassWritten: z.ZodBoolean;
+}, "strip", z.ZodTypeAny, {
+    status: "APPROVED" | "REJECTED";
+    ok: true;
+    bypassWritten: boolean;
+}, {
+    status: "APPROVED" | "REJECTED";
+    ok: true;
+    bypassWritten: boolean;
+}>;
+export type DecisionReviewResponse = z.infer<typeof DecisionReviewResponse>;
+/** `GET /api/v1/rule-candidates/:candidateId/source`: the AssemblyScript a candidate renders to. */
+export declare const RuleCandidateSourceResponse: z.ZodObject<{
+    candidateId: z.ZodString;
+    guardrailId: z.ZodNullable<z.ZodString>;
+    status: z.ZodString;
+    source: z.ZodString;
+    sourceSha256: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    status: string;
+    source: string;
+    guardrailId: string | null;
+    candidateId: string;
+    sourceSha256: string;
+}, {
+    status: string;
+    source: string;
+    guardrailId: string | null;
+    candidateId: string;
+    sourceSha256: string;
+}>;
+export type RuleCandidateSourceResponse = z.infer<typeof RuleCandidateSourceResponse>;
+/** `POST /api/v1/rule-candidates/:candidateId/bundle`: 201 with the SHADOW rule when every gate passed, else 200 with the gates. */
+export declare const RuleCandidateBundleResponse: z.ZodUnion<[z.ZodObject<{
+    accepted: z.ZodLiteral<true>;
+    ruleId: z.ZodString;
+    mode: z.ZodLiteral<"SHADOW">;
+    gates: z.ZodArray<z.ZodObject<{
+        gate: z.ZodEnum<["predicate_valid", "mocks_from_history", "compiles_and_links", "default_allow", "discriminates", "historical_replay"]>;
+        passed: z.ZodBoolean;
+        detail: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        gate: "predicate_valid" | "mocks_from_history" | "compiles_and_links" | "default_allow" | "discriminates" | "historical_replay";
+        detail: string;
+        passed: boolean;
+    }, {
+        gate: "predicate_valid" | "mocks_from_history" | "compiles_and_links" | "default_allow" | "discriminates" | "historical_replay";
+        detail: string;
+        passed: boolean;
+    }>, "many">;
+}, "strip", z.ZodTypeAny, {
+    mode: "SHADOW";
+    ruleId: string;
+    accepted: true;
+    gates: {
+        gate: "predicate_valid" | "mocks_from_history" | "compiles_and_links" | "default_allow" | "discriminates" | "historical_replay";
+        detail: string;
+        passed: boolean;
+    }[];
+}, {
+    mode: "SHADOW";
+    ruleId: string;
+    accepted: true;
+    gates: {
+        gate: "predicate_valid" | "mocks_from_history" | "compiles_and_links" | "default_allow" | "discriminates" | "historical_replay";
+        detail: string;
+        passed: boolean;
+    }[];
+}>, z.ZodObject<{
+    accepted: z.ZodLiteral<false>;
+    gates: z.ZodArray<z.ZodObject<{
+        gate: z.ZodEnum<["predicate_valid", "mocks_from_history", "compiles_and_links", "default_allow", "discriminates", "historical_replay"]>;
+        passed: z.ZodBoolean;
+        detail: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        gate: "predicate_valid" | "mocks_from_history" | "compiles_and_links" | "default_allow" | "discriminates" | "historical_replay";
+        detail: string;
+        passed: boolean;
+    }, {
+        gate: "predicate_valid" | "mocks_from_history" | "compiles_and_links" | "default_allow" | "discriminates" | "historical_replay";
+        detail: string;
+        passed: boolean;
+    }>, "many">;
+}, "strip", z.ZodTypeAny, {
+    accepted: false;
+    gates: {
+        gate: "predicate_valid" | "mocks_from_history" | "compiles_and_links" | "default_allow" | "discriminates" | "historical_replay";
+        detail: string;
+        passed: boolean;
+    }[];
+}, {
+    accepted: false;
+    gates: {
+        gate: "predicate_valid" | "mocks_from_history" | "compiles_and_links" | "default_allow" | "discriminates" | "historical_replay";
+        detail: string;
+        passed: boolean;
+    }[];
+}>]>;
+export type RuleCandidateBundleResponse = z.infer<typeof RuleCandidateBundleResponse>;
+/** `POST /api/v1/judge/finalize`: the final verdict on a response. */
+export declare const JudgeFinalizeResponse: z.ZodObject<{
+    verdict: z.ZodEnum<["TRIGGERED", "REVIEW", "PASS"]>;
+    triggered: z.ZodBoolean;
+    personalTriggered: z.ZodBoolean;
+    explanation: z.ZodOptional<z.ZodString>;
+    correctionSummary: z.ZodString;
+    independent: z.ZodBoolean;
+    judgeSource: z.ZodLiteral<"platform">;
+    judgeModel: z.ZodString;
+    typedAdvisory: z.ZodOptional<z.ZodObject<{
+        violation: z.ZodBoolean;
+        pViolation: z.ZodNumber;
+        threshold: z.ZodNumber;
+        model: z.ZodString;
+        independent: z.ZodBoolean;
+    }, "strip", z.ZodTypeAny, {
+        model: string;
+        independent: boolean;
+        violation: boolean;
+        pViolation: number;
+        threshold: number;
+    }, {
+        model: string;
+        independent: boolean;
+        violation: boolean;
+        pViolation: number;
+        threshold: number;
+    }>>;
+    cascade: z.ZodOptional<z.ZodObject<{
+        decision: z.ZodEnum<["clean", "violation", "review"]>;
+        score: z.ZodNullable<z.ZodNumber>;
+        band: z.ZodObject<{
+            lo: z.ZodNumber;
+            hi: z.ZodNumber;
+        }, "strip", z.ZodTypeAny, {
+            lo: number;
+            hi: number;
+        }, {
+            lo: number;
+            hi: number;
+        }>;
+        model: z.ZodString;
+        reviewId: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        model: string;
+        decision: "review" | "clean" | "violation";
+        score: number | null;
+        band: {
+            lo: number;
+            hi: number;
+        };
+        reviewId?: string | undefined;
+    }, {
+        model: string;
+        decision: "review" | "clean" | "violation";
+        score: number | null;
+        band: {
+            lo: number;
+            hi: number;
+        };
+        reviewId?: string | undefined;
+    }>>;
+    personalCascade: z.ZodOptional<z.ZodObject<{
+        decision: z.ZodEnum<["clean", "violation", "review"]>;
+        score: z.ZodNumber;
+    }, "strip", z.ZodTypeAny, {
+        decision: "review" | "clean" | "violation";
+        score: number;
+    }, {
+        decision: "review" | "clean" | "violation";
+        score: number;
+    }>>;
+}, "strip", z.ZodTypeAny, {
+    verdict: "TRIGGERED" | "REVIEW" | "PASS";
+    triggered: boolean;
+    personalTriggered: boolean;
+    correctionSummary: string;
+    independent: boolean;
+    judgeSource: "platform";
+    judgeModel: string;
+    explanation?: string | undefined;
+    typedAdvisory?: {
+        model: string;
+        independent: boolean;
+        violation: boolean;
+        pViolation: number;
+        threshold: number;
+    } | undefined;
+    cascade?: {
+        model: string;
+        decision: "review" | "clean" | "violation";
+        score: number | null;
+        band: {
+            lo: number;
+            hi: number;
+        };
+        reviewId?: string | undefined;
+    } | undefined;
+    personalCascade?: {
+        decision: "review" | "clean" | "violation";
+        score: number;
+    } | undefined;
+}, {
+    verdict: "TRIGGERED" | "REVIEW" | "PASS";
+    triggered: boolean;
+    personalTriggered: boolean;
+    correctionSummary: string;
+    independent: boolean;
+    judgeSource: "platform";
+    judgeModel: string;
+    explanation?: string | undefined;
+    typedAdvisory?: {
+        model: string;
+        independent: boolean;
+        violation: boolean;
+        pViolation: number;
+        threshold: number;
+    } | undefined;
+    cascade?: {
+        model: string;
+        decision: "review" | "clean" | "violation";
+        score: number | null;
+        band: {
+            lo: number;
+            hi: number;
+        };
+        reviewId?: string | undefined;
+    } | undefined;
+    personalCascade?: {
+        decision: "review" | "clean" | "violation";
+        score: number;
+    } | undefined;
+}>;
+export type JudgeFinalizeResponse = z.infer<typeof JudgeFinalizeResponse>;
+/** `POST /api/v1/hook-events`: what the batch became. */
+export declare const HookEventsResponse: z.ZodObject<{
+    ok: z.ZodLiteral<true>;
+    summary: z.ZodObject<{
+        total: z.ZodNumber;
+        incidents_created: z.ZodNumber;
+        tamper_alerts: z.ZodNumber;
+        bypass_alerts: z.ZodNumber;
+        allowed: z.ZodNumber;
+        flagged: z.ZodNumber;
+        skill_flagged: z.ZodNumber;
+        would_block: z.ZodNumber;
+        wasm_shadow_evaluations: z.ZodNumber;
+        detector_findings: z.ZodNumber;
+        guardrail_evidence: z.ZodObject<{
+            replayed: z.ZodBoolean;
+            evaluations: z.ZodNumber;
+            evidenceRows: z.ZodNumber;
+            findings: z.ZodNumber;
+            guardrailsTouched: z.ZodNumber;
+            errors: z.ZodNumber;
+        }, "strip", z.ZodTypeAny, {
+            findings: number;
+            errors: number;
+            evaluations: number;
+            replayed: boolean;
+            evidenceRows: number;
+            guardrailsTouched: number;
+        }, {
+            findings: number;
+            errors: number;
+            evaluations: number;
+            replayed: boolean;
+            evidenceRows: number;
+            guardrailsTouched: number;
+        }>;
+        snapshot_issues: z.ZodNumber;
+        guards_disabled: z.ZodNumber;
+        rejected: z.ZodNumber;
+        replayed: z.ZodNumber;
+        errors: z.ZodNumber;
+    }, "strip", z.ZodTypeAny, {
+        rejected: number;
+        errors: number;
+        total: number;
+        incidents_created: number;
+        tamper_alerts: number;
+        bypass_alerts: number;
+        allowed: number;
+        flagged: number;
+        skill_flagged: number;
+        would_block: number;
+        wasm_shadow_evaluations: number;
+        detector_findings: number;
+        guardrail_evidence: {
+            findings: number;
+            errors: number;
+            evaluations: number;
+            replayed: boolean;
+            evidenceRows: number;
+            guardrailsTouched: number;
+        };
+        replayed: number;
+        snapshot_issues: number;
+        guards_disabled: number;
+    }, {
+        rejected: number;
+        errors: number;
+        total: number;
+        incidents_created: number;
+        tamper_alerts: number;
+        bypass_alerts: number;
+        allowed: number;
+        flagged: number;
+        skill_flagged: number;
+        would_block: number;
+        wasm_shadow_evaluations: number;
+        detector_findings: number;
+        guardrail_evidence: {
+            findings: number;
+            errors: number;
+            evaluations: number;
+            replayed: boolean;
+            evidenceRows: number;
+            guardrailsTouched: number;
+        };
+        replayed: number;
+        snapshot_issues: number;
+        guards_disabled: number;
+    }>;
+}, "strip", z.ZodTypeAny, {
+    ok: true;
+    summary: {
+        rejected: number;
+        errors: number;
+        total: number;
+        incidents_created: number;
+        tamper_alerts: number;
+        bypass_alerts: number;
+        allowed: number;
+        flagged: number;
+        skill_flagged: number;
+        would_block: number;
+        wasm_shadow_evaluations: number;
+        detector_findings: number;
+        guardrail_evidence: {
+            findings: number;
+            errors: number;
+            evaluations: number;
+            replayed: boolean;
+            evidenceRows: number;
+            guardrailsTouched: number;
+        };
+        replayed: number;
+        snapshot_issues: number;
+        guards_disabled: number;
+    };
+}, {
+    ok: true;
+    summary: {
+        rejected: number;
+        errors: number;
+        total: number;
+        incidents_created: number;
+        tamper_alerts: number;
+        bypass_alerts: number;
+        allowed: number;
+        flagged: number;
+        skill_flagged: number;
+        would_block: number;
+        wasm_shadow_evaluations: number;
+        detector_findings: number;
+        guardrail_evidence: {
+            findings: number;
+            errors: number;
+            evaluations: number;
+            replayed: boolean;
+            evidenceRows: number;
+            guardrailsTouched: number;
+        };
+        replayed: number;
+        snapshot_issues: number;
+        guards_disabled: number;
+    };
+}>;
+export type HookEventsResponse = z.infer<typeof HookEventsResponse>;
+/**
+ * `POST /api/v1/hook-gate`: a verdict on one tool call, each naming its
+ * `decisionId`: a refusal (`allowed: false`; in an OPAQUE workspace a generic
+ * `reason` and no `ruleId`), a degraded allow (a shadow workspace whose checks
+ * could not run), or an allow.
+ */
+export declare const HookGateResponse: z.ZodUnion<[z.ZodObject<{
+    allowed: z.ZodLiteral<false>;
+    reason: z.ZodString;
+    incidentId: z.ZodOptional<z.ZodString>;
+    code: z.ZodOptional<z.ZodString>;
+    ruleId: z.ZodOptional<z.ZodString>;
+    decisionId: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    reason: string;
+    allowed: false;
+    decisionId: string;
+    code?: string | undefined;
+    ruleId?: string | undefined;
+    incidentId?: string | undefined;
+}, {
+    reason: string;
+    allowed: false;
+    decisionId: string;
+    code?: string | undefined;
+    ruleId?: string | undefined;
+    incidentId?: string | undefined;
+}>, z.ZodObject<{
+    allowed: z.ZodLiteral<true>;
+    degraded: z.ZodLiteral<true>;
+    code: z.ZodLiteral<"GOVERNANCE_UNAVAILABLE">;
+    reason: z.ZodString;
+    decisionId: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    code: "GOVERNANCE_UNAVAILABLE";
+    reason: string;
+    degraded: true;
+    allowed: true;
+    decisionId: string;
+}, {
+    code: "GOVERNANCE_UNAVAILABLE";
+    reason: string;
+    degraded: true;
+    allowed: true;
+    decisionId: string;
+}>, z.ZodObject<{
+    allowed: z.ZodLiteral<true>;
+    decisionId: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    allowed: true;
+    decisionId: string;
+}, {
+    allowed: true;
+    decisionId: string;
+}>]>;
+export type HookGateResponse = z.infer<typeof HookGateResponse>;
+//# sourceMappingURL=rules.d.ts.map