@intutic/shared-types 2.5.1 → 2.6.0

package/dist/responses/rules.d.ts

@@ -1,457 +1,9 @@
 /**
- * Responses of the control plane routes in policies.ts, wasmRules.ts, sops.ts, decisions.ts, judge.ts and hookEvents.ts.
+ * Responses of the control plane routes in wasmRules.ts, sops.ts, decisions.ts, judge.ts and hookEvents.ts.
  *
  * @module
  */
 import { z } from 'zod';
-/** A `pcas_policies` row as the routes select it. */
-export declare const PolicyResponse: z.ZodObject<{
-    policyId: z.ZodString;
-    workspaceId: z.ZodString;
-    name: z.ZodString;
-    description: z.ZodNullable<z.ZodString>;
-    riskCategory: z.ZodNullable<z.ZodEnum<["NONE", "DESTRUCTIVE", "CREDENTIAL_ACCESS"]>>;
-    targetToolPattern: z.ZodString;
-    /** `OBSERVED` is never written by these routes, but a row may carry it. */
-    enforcementAction: z.ZodEnum<["BYPASS", "ENHANCE", "HIJACK", "REASK", "KILL", "OBSERVED"]>;
-    interventionMode: z.ZodNullable<z.ZodEnum<["TRANSPARENT", "OPAQUE", "SILENT_LOG"]>>;
-    priority: z.ZodNullable<z.ZodNumber>;
-    conditions: z.ZodUnknown;
-    isActive: z.ZodNullable<z.ZodBoolean>;
-    currentVersion: z.ZodNumber;
-    createdAt: z.ZodString;
-    updatedAt: z.ZodString;
-    deletedAt: z.ZodNullable<z.ZodString>;
-}, "strip", z.ZodTypeAny, {
-    workspaceId: string;
-    enforcementAction: "BYPASS" | "ENHANCE" | "HIJACK" | "REASK" | "KILL" | "OBSERVED";
-    policyId: string;
-    name: string;
-    description: string | null;
-    interventionMode: "TRANSPARENT" | "OPAQUE" | "SILENT_LOG" | null;
-    priority: number | null;
-    isActive: boolean | null;
-    createdAt: string;
-    updatedAt: string;
-    riskCategory: "NONE" | "DESTRUCTIVE" | "CREDENTIAL_ACCESS" | null;
-    targetToolPattern: string;
-    currentVersion: number;
-    deletedAt: string | null;
-    conditions?: unknown;
-}, {
-    workspaceId: string;
-    enforcementAction: "BYPASS" | "ENHANCE" | "HIJACK" | "REASK" | "KILL" | "OBSERVED";
-    policyId: string;
-    name: string;
-    description: string | null;
-    interventionMode: "TRANSPARENT" | "OPAQUE" | "SILENT_LOG" | null;
-    priority: number | null;
-    isActive: boolean | null;
-    createdAt: string;
-    updatedAt: string;
-    riskCategory: "NONE" | "DESTRUCTIVE" | "CREDENTIAL_ACCESS" | null;
-    targetToolPattern: string;
-    currentVersion: number;
-    deletedAt: string | null;
-    conditions?: unknown;
-}>;
-export type PolicyResponse = z.infer<typeof PolicyResponse>;
-/** `GET /api/v1/policies`: the live policies, newest first, and where the workspace's intervention mode comes from. */
-export declare const PolicyListResponse: z.ZodObject<{
-    ok: z.ZodLiteral<true>;
-    policies: z.ZodArray<z.ZodObject<{
-        policyId: z.ZodString;
-        workspaceId: z.ZodString;
-        name: z.ZodString;
-        description: z.ZodNullable<z.ZodString>;
-        riskCategory: z.ZodNullable<z.ZodEnum<["NONE", "DESTRUCTIVE", "CREDENTIAL_ACCESS"]>>;
-        targetToolPattern: z.ZodString;
-        /** `OBSERVED` is never written by these routes, but a row may carry it. */
-        enforcementAction: z.ZodEnum<["BYPASS", "ENHANCE", "HIJACK", "REASK", "KILL", "OBSERVED"]>;
-        interventionMode: z.ZodNullable<z.ZodEnum<["TRANSPARENT", "OPAQUE", "SILENT_LOG"]>>;
-        priority: z.ZodNullable<z.ZodNumber>;
-        conditions: z.ZodUnknown;
-        isActive: z.ZodNullable<z.ZodBoolean>;
-        currentVersion: z.ZodNumber;
-        createdAt: z.ZodString;
-        updatedAt: z.ZodString;
-        deletedAt: z.ZodNullable<z.ZodString>;
-    }, "strip", z.ZodTypeAny, {
-        workspaceId: string;
-        enforcementAction: "BYPASS" | "ENHANCE" | "HIJACK" | "REASK" | "KILL" | "OBSERVED";
-        policyId: string;
-        name: string;
-        description: string | null;
-        interventionMode: "TRANSPARENT" | "OPAQUE" | "SILENT_LOG" | null;
-        priority: number | null;
-        isActive: boolean | null;
-        createdAt: string;
-        updatedAt: string;
-        riskCategory: "NONE" | "DESTRUCTIVE" | "CREDENTIAL_ACCESS" | null;
-        targetToolPattern: string;
-        currentVersion: number;
-        deletedAt: string | null;
-        conditions?: unknown;
-    }, {
-        workspaceId: string;
-        enforcementAction: "BYPASS" | "ENHANCE" | "HIJACK" | "REASK" | "KILL" | "OBSERVED";
-        policyId: string;
-        name: string;
-        description: string | null;
-        interventionMode: "TRANSPARENT" | "OPAQUE" | "SILENT_LOG" | null;
-        priority: number | null;
-        isActive: boolean | null;
-        createdAt: string;
-        updatedAt: string;
-        riskCategory: "NONE" | "DESTRUCTIVE" | "CREDENTIAL_ACCESS" | null;
-        targetToolPattern: string;
-        currentVersion: number;
-        deletedAt: string | null;
-        conditions?: unknown;
-    }>, "many">;
-    interventionMode: z.ZodObject<{
-        mode: z.ZodEnum<["TRANSPARENT", "OPAQUE", "SILENT_LOG"]>;
-        source: z.ZodEnum<["setting", "policy", "default"]>;
-        policyId: z.ZodNullable<z.ZodString>;
-    }, "strip", z.ZodTypeAny, {
-        policyId: string | null;
-        mode: "TRANSPARENT" | "OPAQUE" | "SILENT_LOG";
-        source: "default" | "policy" | "setting";
-    }, {
-        policyId: string | null;
-        mode: "TRANSPARENT" | "OPAQUE" | "SILENT_LOG";
-        source: "default" | "policy" | "setting";
-    }>;
-}, "strip", z.ZodTypeAny, {
-    policies: {
-        workspaceId: string;
-        enforcementAction: "BYPASS" | "ENHANCE" | "HIJACK" | "REASK" | "KILL" | "OBSERVED";
-        policyId: string;
-        name: string;
-        description: string | null;
-        interventionMode: "TRANSPARENT" | "OPAQUE" | "SILENT_LOG" | null;
-        priority: number | null;
-        isActive: boolean | null;
-        createdAt: string;
-        updatedAt: string;
-        riskCategory: "NONE" | "DESTRUCTIVE" | "CREDENTIAL_ACCESS" | null;
-        targetToolPattern: string;
-        currentVersion: number;
-        deletedAt: string | null;
-        conditions?: unknown;
-    }[];
-    ok: true;
-    interventionMode: {
-        policyId: string | null;
-        mode: "TRANSPARENT" | "OPAQUE" | "SILENT_LOG";
-        source: "default" | "policy" | "setting";
-    };
-}, {
-    policies: {
-        workspaceId: string;
-        enforcementAction: "BYPASS" | "ENHANCE" | "HIJACK" | "REASK" | "KILL" | "OBSERVED";
-        policyId: string;
-        name: string;
-        description: string | null;
-        interventionMode: "TRANSPARENT" | "OPAQUE" | "SILENT_LOG" | null;
-        priority: number | null;
-        isActive: boolean | null;
-        createdAt: string;
-        updatedAt: string;
-        riskCategory: "NONE" | "DESTRUCTIVE" | "CREDENTIAL_ACCESS" | null;
-        targetToolPattern: string;
-        currentVersion: number;
-        deletedAt: string | null;
-        conditions?: unknown;
-    }[];
-    ok: true;
-    interventionMode: {
-        policyId: string | null;
-        mode: "TRANSPARENT" | "OPAQUE" | "SILENT_LOG";
-        source: "default" | "policy" | "setting";
-    };
-}>;
-export type PolicyListResponse = z.infer<typeof PolicyListResponse>;
-/** `POST /api/v1/policies`: the created policy. */
-export declare const PolicyCreatedResponse: z.ZodObject<{
-    ok: z.ZodLiteral<true>;
-    policy: z.ZodObject<{
-        policyId: z.ZodString;
-        workspaceId: z.ZodString;
-        name: z.ZodString;
-        description: z.ZodNullable<z.ZodString>;
-        riskCategory: z.ZodNullable<z.ZodEnum<["NONE", "DESTRUCTIVE", "CREDENTIAL_ACCESS"]>>;
-        targetToolPattern: z.ZodString;
-        /** `OBSERVED` is never written by these routes, but a row may carry it. */
-        enforcementAction: z.ZodEnum<["BYPASS", "ENHANCE", "HIJACK", "REASK", "KILL", "OBSERVED"]>;
-        interventionMode: z.ZodNullable<z.ZodEnum<["TRANSPARENT", "OPAQUE", "SILENT_LOG"]>>;
-        priority: z.ZodNullable<z.ZodNumber>;
-        conditions: z.ZodUnknown;
-        isActive: z.ZodNullable<z.ZodBoolean>;
-        currentVersion: z.ZodNumber;
-        createdAt: z.ZodString;
-        updatedAt: z.ZodString;
-        deletedAt: z.ZodNullable<z.ZodString>;
-    }, "strip", z.ZodTypeAny, {
-        workspaceId: string;
-        enforcementAction: "BYPASS" | "ENHANCE" | "HIJACK" | "REASK" | "KILL" | "OBSERVED";
-        policyId: string;
-        name: string;
-        description: string | null;
-        interventionMode: "TRANSPARENT" | "OPAQUE" | "SILENT_LOG" | null;
-        priority: number | null;
-        isActive: boolean | null;
-        createdAt: string;
-        updatedAt: string;
-        riskCategory: "NONE" | "DESTRUCTIVE" | "CREDENTIAL_ACCESS" | null;
-        targetToolPattern: string;
-        currentVersion: number;
-        deletedAt: string | null;
-        conditions?: unknown;
-    }, {
-        workspaceId: string;
-        enforcementAction: "BYPASS" | "ENHANCE" | "HIJACK" | "REASK" | "KILL" | "OBSERVED";
-        policyId: string;
-        name: string;
-        description: string | null;
-        interventionMode: "TRANSPARENT" | "OPAQUE" | "SILENT_LOG" | null;
-        priority: number | null;
-        isActive: boolean | null;
-        createdAt: string;
-        updatedAt: string;
-        riskCategory: "NONE" | "DESTRUCTIVE" | "CREDENTIAL_ACCESS" | null;
-        targetToolPattern: string;
-        currentVersion: number;
-        deletedAt: string | null;
-        conditions?: unknown;
-    }>;
-}, "strip", z.ZodTypeAny, {
-    ok: true;
-    policy: {
-        workspaceId: string;
-        enforcementAction: "BYPASS" | "ENHANCE" | "HIJACK" | "REASK" | "KILL" | "OBSERVED";
-        policyId: string;
-        name: string;
-        description: string | null;
-        interventionMode: "TRANSPARENT" | "OPAQUE" | "SILENT_LOG" | null;
-        priority: number | null;
-        isActive: boolean | null;
-        createdAt: string;
-        updatedAt: string;
-        riskCategory: "NONE" | "DESTRUCTIVE" | "CREDENTIAL_ACCESS" | null;
-        targetToolPattern: string;
-        currentVersion: number;
-        deletedAt: string | null;
-        conditions?: unknown;
-    };
-}, {
-    ok: true;
-    policy: {
-        workspaceId: string;
-        enforcementAction: "BYPASS" | "ENHANCE" | "HIJACK" | "REASK" | "KILL" | "OBSERVED";
-        policyId: string;
-        name: string;
-        description: string | null;
-        interventionMode: "TRANSPARENT" | "OPAQUE" | "SILENT_LOG" | null;
-        priority: number | null;
-        isActive: boolean | null;
-        createdAt: string;
-        updatedAt: string;
-        riskCategory: "NONE" | "DESTRUCTIVE" | "CREDENTIAL_ACCESS" | null;
-        targetToolPattern: string;
-        currentVersion: number;
-        deletedAt: string | null;
-        conditions?: unknown;
-    };
-}>;
-export type PolicyCreatedResponse = z.infer<typeof PolicyCreatedResponse>;
-/** `PUT /api/v1/policies/:policyId`: the policy as updated, and its new version. */
-export declare const PolicyUpdatedResponse: z.ZodObject<{
-    ok: z.ZodLiteral<true>;
-    policy: z.ZodObject<{
-        policyId: z.ZodString;
-        workspaceId: z.ZodString;
-        name: z.ZodString;
-        description: z.ZodNullable<z.ZodString>;
-        riskCategory: z.ZodNullable<z.ZodEnum<["NONE", "DESTRUCTIVE", "CREDENTIAL_ACCESS"]>>;
-        targetToolPattern: z.ZodString;
-        /** `OBSERVED` is never written by these routes, but a row may carry it. */
-        enforcementAction: z.ZodEnum<["BYPASS", "ENHANCE", "HIJACK", "REASK", "KILL", "OBSERVED"]>;
-        interventionMode: z.ZodNullable<z.ZodEnum<["TRANSPARENT", "OPAQUE", "SILENT_LOG"]>>;
-        priority: z.ZodNullable<z.ZodNumber>;
-        conditions: z.ZodUnknown;
-        isActive: z.ZodNullable<z.ZodBoolean>;
-        currentVersion: z.ZodNumber;
-        createdAt: z.ZodString;
-        updatedAt: z.ZodString;
-        deletedAt: z.ZodNullable<z.ZodString>;
-    }, "strip", z.ZodTypeAny, {
-        workspaceId: string;
-        enforcementAction: "BYPASS" | "ENHANCE" | "HIJACK" | "REASK" | "KILL" | "OBSERVED";
-        policyId: string;
-        name: string;
-        description: string | null;
-        interventionMode: "TRANSPARENT" | "OPAQUE" | "SILENT_LOG" | null;
-        priority: number | null;
-        isActive: boolean | null;
-        createdAt: string;
-        updatedAt: string;
-        riskCategory: "NONE" | "DESTRUCTIVE" | "CREDENTIAL_ACCESS" | null;
-        targetToolPattern: string;
-        currentVersion: number;
-        deletedAt: string | null;
-        conditions?: unknown;
-    }, {
-        workspaceId: string;
-        enforcementAction: "BYPASS" | "ENHANCE" | "HIJACK" | "REASK" | "KILL" | "OBSERVED";
-        policyId: string;
-        name: string;
-        description: string | null;
-        interventionMode: "TRANSPARENT" | "OPAQUE" | "SILENT_LOG" | null;
-        priority: number | null;
-        isActive: boolean | null;
-        createdAt: string;
-        updatedAt: string;
-        riskCategory: "NONE" | "DESTRUCTIVE" | "CREDENTIAL_ACCESS" | null;
-        targetToolPattern: string;
-        currentVersion: number;
-        deletedAt: string | null;
-        conditions?: unknown;
-    }>;
-    currentVersion: z.ZodNumber;
-}, "strip", z.ZodTypeAny, {
-    ok: true;
-    policy: {
-        workspaceId: string;
-        enforcementAction: "BYPASS" | "ENHANCE" | "HIJACK" | "REASK" | "KILL" | "OBSERVED";
-        policyId: string;
-        name: string;
-        description: string | null;
-        interventionMode: "TRANSPARENT" | "OPAQUE" | "SILENT_LOG" | null;
-        priority: number | null;
-        isActive: boolean | null;
-        createdAt: string;
-        updatedAt: string;
-        riskCategory: "NONE" | "DESTRUCTIVE" | "CREDENTIAL_ACCESS" | null;
-        targetToolPattern: string;
-        currentVersion: number;
-        deletedAt: string | null;
-        conditions?: unknown;
-    };
-    currentVersion: number;
-}, {
-    ok: true;
-    policy: {
-        workspaceId: string;
-        enforcementAction: "BYPASS" | "ENHANCE" | "HIJACK" | "REASK" | "KILL" | "OBSERVED";
-        policyId: string;
-        name: string;
-        description: string | null;
-        interventionMode: "TRANSPARENT" | "OPAQUE" | "SILENT_LOG" | null;
-        priority: number | null;
-        isActive: boolean | null;
-        createdAt: string;
-        updatedAt: string;
-        riskCategory: "NONE" | "DESTRUCTIVE" | "CREDENTIAL_ACCESS" | null;
-        targetToolPattern: string;
-        currentVersion: number;
-        deletedAt: string | null;
-        conditions?: unknown;
-    };
-    currentVersion: number;
-}>;
-export type PolicyUpdatedResponse = z.infer<typeof PolicyUpdatedResponse>;
-/** `DELETE /api/v1/policies/:policyId`: soft-deleted. */
-export declare const PolicyDeletedResponse: z.ZodObject<{
-    ok: z.ZodLiteral<true>;
-}, "strip", z.ZodTypeAny, {
-    ok: true;
-}, {
-    ok: true;
-}>;
-export type PolicyDeletedResponse = z.infer<typeof PolicyDeletedResponse>;
-/** Enable, disable or roll back a policy: the version the change recorded. */
-export declare const PolicyVersionResponse: z.ZodObject<{
-    ok: z.ZodLiteral<true>;
-    currentVersion: z.ZodNumber;
-}, "strip", z.ZodTypeAny, {
-    ok: true;
-    currentVersion: number;
-}, {
-    ok: true;
-    currentVersion: number;
-}>;
-export type PolicyVersionResponse = z.infer<typeof PolicyVersionResponse>;
-/**
- * `POST /api/v1/policies/:policyId/convert-to-guardrail`: the guardrail made
- * from the policy (201, or 200 when a concurrent conversion made it first),
- * or the one an earlier conversion made (200, without `ir`).
- */
-export declare const PolicyGuardrailConversionResponse: z.ZodUnion<[z.ZodObject<{
-    ok: z.ZodLiteral<true>;
-    created: z.ZodBoolean;
-    guardrailId: z.ZodString;
-    status: z.ZodLiteral<"SHADOW">;
-    ir: z.ZodObject<{
-        kind: z.ZodLiteral<"hook_rule">;
-        title: z.ZodString;
-        tools: z.ZodArray<z.ZodString, "many">;
-        argContains: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-        argNotContains: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-    }, "strip", z.ZodTypeAny, {
-        kind: "hook_rule";
-        title: string;
-        tools: string[];
-        argContains?: string[] | undefined;
-        argNotContains?: string[] | undefined;
-    }, {
-        kind: "hook_rule";
-        title: string;
-        tools: string[];
-        argContains?: string[] | undefined;
-        argNotContains?: string[] | undefined;
-    }>;
-}, "strip", z.ZodTypeAny, {
-    status: "SHADOW";
-    ok: true;
-    ir: {
-        kind: "hook_rule";
-        title: string;
-        tools: string[];
-        argContains?: string[] | undefined;
-        argNotContains?: string[] | undefined;
-    };
-    guardrailId: string;
-    created: boolean;
-}, {
-    status: "SHADOW";
-    ok: true;
-    ir: {
-        kind: "hook_rule";
-        title: string;
-        tools: string[];
-        argContains?: string[] | undefined;
-        argNotContains?: string[] | undefined;
-    };
-    guardrailId: string;
-    created: boolean;
-}>, z.ZodObject<{
-    ok: z.ZodLiteral<true>;
-    created: z.ZodLiteral<false>;
-    guardrailId: z.ZodString;
-    status: z.ZodString;
-}, "strip", z.ZodTypeAny, {
-    status: string;
-    ok: true;
-    guardrailId: string;
-    created: false;
-}, {
-    status: string;
-    ok: true;
-    guardrailId: string;
-    created: false;
-}>]>;
-export type PolicyGuardrailConversionResponse = z.infer<typeof PolicyGuardrailConversionResponse>;
 /** A `wasm_rule_bundles` row without its binary. */
 export declare const WasmRuleResponse: z.ZodObject<{
     ruleId: z.ZodString;
@@ -1154,6 +706,7 @@ export declare const SopRulesResponse: z.ZodObject<{
         argPattern?: string | undefined;
         origin?: "guardrail" | undefined;
     }>, "many">;
+} & {
     allowedTools: z.ZodArray<z.ZodString, "many">;
     toolDescriptionOverrides: z.ZodRecord<z.ZodString, z.ZodString>;
     allowedServers: z.ZodArray<z.ZodString, "many">;
@@ -1276,11 +829,12 @@ export declare const SopRulesResponse: z.ZodObject<{
         memberId: string;
         ssoGroups: string[];
     }>>;
-    interventionMode: z.ZodEnum<["TRANSPARENT", "OPAQUE", "SILENT_LOG"]>;
     mcpProxyFailBehavior: z.ZodOptional<z.ZodEnum<["open", "closed"]>>;
     mcpInjectionAction: z.ZodOptional<z.ZodEnum<["warn", "block"]>>;
     mcpAnomalyMode: z.ZodOptional<z.ZodEnum<["enforce", "warn", "off"]>>;
     mcpAnomalyOverrides: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<["steer", "reask", "kill", "off"]>>>;
+} & {
+    interventionMode: z.ZodEnum<["TRANSPARENT", "OPAQUE", "SILENT_LOG"]>;
 }, "strip", z.ZodTypeAny, {
     ok: true;
     piiDetectors: Partial<Record<"pii.card" | "pii.iban" | "pii.ssn" | "pii.email" | "pii.phone", "redact" | "off" | "block">> | null;
@@ -1403,6 +957,287 @@ export declare const SopRulesResponse: z.ZodObject<{
     mcpAnomalyOverrides?: Record<string, "off" | "steer" | "reask" | "kill"> | undefined;
 }>;
 export type SopRulesResponse = z.infer<typeof SopRulesResponse>;
+/**
+ * `GET /api/v1/policy/resolve`: the same rules and curation as
+ * `GET /api/v1/sop/rules`, as the sync daemon and the daemon-mode MCP proxy
+ * cache them, plus the flags the daemon's policy snapshot carries.
+ */
+export declare const PolicyResolveResponse: z.ZodObject<{
+    allowedTools: z.ZodArray<z.ZodString, "many">;
+    toolDescriptionOverrides: z.ZodRecord<z.ZodString, z.ZodString>;
+    allowedServers: z.ZodArray<z.ZodString, "many">;
+    mcpInjectionPatterns: z.ZodArray<z.ZodString, "many">;
+    mcpRegistry: z.ZodObject<{
+        defaultPolicy: z.ZodEnum<["allow", "deny"]>;
+        approvedServers: z.ZodArray<z.ZodString, "many">;
+        blockedServers: z.ZodArray<z.ZodString, "many">;
+        heldServers: z.ZodArray<z.ZodString, "many">;
+        disabledTools: z.ZodRecord<z.ZodString, z.ZodArray<z.ZodString, "many">>;
+    }, "strip", z.ZodTypeAny, {
+        disabledTools: Record<string, string[]>;
+        defaultPolicy: "deny" | "allow";
+        approvedServers: string[];
+        blockedServers: string[];
+        heldServers: string[];
+    }, {
+        disabledTools: Record<string, string[]>;
+        defaultPolicy: "deny" | "allow";
+        approvedServers: string[];
+        blockedServers: string[];
+        heldServers: string[];
+    }>;
+    mcpBudgets: z.ZodObject<{
+        budgets: z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            scope: z.ZodEnum<["server", "tool", "member", "member_server"]>;
+            server: z.ZodOptional<z.ZodString>;
+            tool: z.ZodOptional<z.ZodString>;
+            memberId: z.ZodOptional<z.ZodString>;
+            period: z.ZodEnum<["hour", "day"]>;
+            limit: z.ZodNumber;
+        }, "strip", z.ZodTypeAny, {
+            period: "day" | "hour";
+            id: string;
+            limit: number;
+            scope: "member" | "tool" | "server" | "member_server";
+            tool?: string | undefined;
+            server?: string | undefined;
+            memberId?: string | undefined;
+        }, {
+            period: "day" | "hour";
+            id: string;
+            limit: number;
+            scope: "member" | "tool" | "server" | "member_server";
+            tool?: string | undefined;
+            server?: string | undefined;
+            memberId?: string | undefined;
+        }>, "many">;
+        warnAtPct: z.ZodNumber;
+    }, "strip", z.ZodTypeAny, {
+        budgets: {
+            period: "day" | "hour";
+            id: string;
+            limit: number;
+            scope: "member" | "tool" | "server" | "member_server";
+            tool?: string | undefined;
+            server?: string | undefined;
+            memberId?: string | undefined;
+        }[];
+        warnAtPct: number;
+    }, {
+        budgets: {
+            period: "day" | "hour";
+            id: string;
+            limit: number;
+            scope: "member" | "tool" | "server" | "member_server";
+            tool?: string | undefined;
+            server?: string | undefined;
+            memberId?: string | undefined;
+        }[];
+        warnAtPct: number;
+    }>;
+    piiDetectors: z.ZodNullable<z.ZodRecord<z.ZodEnum<["pii.card", "pii.iban", "pii.ssn", "pii.email", "pii.phone"]>, z.ZodEnum<["off", "redact", "block"]>>>;
+    wasmRules: z.ZodArray<z.ZodObject<{
+        ruleId: z.ZodString;
+        name: z.ZodString;
+        sha256: z.ZodString;
+        priority: z.ZodNumber;
+        mode: z.ZodEnum<["ENFORCE", "SHADOW"]>;
+    }, "strip", z.ZodTypeAny, {
+        name: string;
+        mode: "SHADOW" | "ENFORCE";
+        ruleId: string;
+        sha256: string;
+        priority: number;
+    }, {
+        name: string;
+        mode: "SHADOW" | "ENFORCE";
+        ruleId: string;
+        sha256: string;
+        priority: number;
+    }>, "many">;
+    ssoGroupPolicy: z.ZodNullable<z.ZodObject<{
+        highRiskTools: z.ZodArray<z.ZodString, "many">;
+        requiredGroups: z.ZodArray<z.ZodString, "many">;
+        requireOboFor: z.ZodArray<z.ZodString, "many">;
+    }, "strip", z.ZodTypeAny, {
+        highRiskTools: string[];
+        requiredGroups: string[];
+        requireOboFor: string[];
+    }, {
+        highRiskTools: string[];
+        requiredGroups: string[];
+        requireOboFor: string[];
+    }>>;
+    principal: z.ZodNullable<z.ZodObject<{
+        memberId: z.ZodString;
+        email: z.ZodString;
+        role: z.ZodString;
+        ssoGroups: z.ZodArray<z.ZodString, "many">;
+    }, "strip", z.ZodTypeAny, {
+        email: string;
+        role: string;
+        memberId: string;
+        ssoGroups: string[];
+    }, {
+        email: string;
+        role: string;
+        memberId: string;
+        ssoGroups: string[];
+    }>>;
+    mcpProxyFailBehavior: z.ZodOptional<z.ZodEnum<["open", "closed"]>>;
+    mcpInjectionAction: z.ZodOptional<z.ZodEnum<["warn", "block"]>>;
+    mcpAnomalyMode: z.ZodOptional<z.ZodEnum<["enforce", "warn", "off"]>>;
+    mcpAnomalyOverrides: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<["steer", "reask", "kill", "off"]>>>;
+} & {
+    workspaceId: z.ZodString;
+    sopRules: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        toolPattern: z.ZodString;
+        argPattern: z.ZodOptional<z.ZodString>;
+        action: z.ZodEnum<["block", "warn", "require_approval"]>;
+        reason: z.ZodString;
+        origin: z.ZodOptional<z.ZodLiteral<"guardrail">>;
+        roles: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    }, "strip", z.ZodTypeAny, {
+        action: "block" | "warn" | "require_approval";
+        reason: string;
+        id: string;
+        toolPattern: string;
+        roles?: string[] | undefined;
+        argPattern?: string | undefined;
+        origin?: "guardrail" | undefined;
+    }, {
+        action: "block" | "warn" | "require_approval";
+        reason: string;
+        id: string;
+        toolPattern: string;
+        roles?: string[] | undefined;
+        argPattern?: string | undefined;
+        origin?: "guardrail" | undefined;
+    }>, "many">;
+    interventionMode: z.ZodEnum<["TRANSPARENT", "OPAQUE", "SILENT_LOG"]>;
+    sqlDropStrictBlock: z.ZodBoolean;
+}, "strip", z.ZodTypeAny, {
+    workspaceId: string;
+    piiDetectors: Partial<Record<"pii.card" | "pii.iban" | "pii.ssn" | "pii.email" | "pii.phone", "redact" | "off" | "block">> | null;
+    mcpInjectionPatterns: string[];
+    mcpBudgets: {
+        budgets: {
+            period: "day" | "hour";
+            id: string;
+            limit: number;
+            scope: "member" | "tool" | "server" | "member_server";
+            tool?: string | undefined;
+            server?: string | undefined;
+            memberId?: string | undefined;
+        }[];
+        warnAtPct: number;
+    };
+    interventionMode: "TRANSPARENT" | "OPAQUE" | "SILENT_LOG";
+    allowedTools: string[];
+    toolDescriptionOverrides: Record<string, string>;
+    allowedServers: string[];
+    mcpRegistry: {
+        disabledTools: Record<string, string[]>;
+        defaultPolicy: "deny" | "allow";
+        approvedServers: string[];
+        blockedServers: string[];
+        heldServers: string[];
+    };
+    wasmRules: {
+        name: string;
+        mode: "SHADOW" | "ENFORCE";
+        ruleId: string;
+        sha256: string;
+        priority: number;
+    }[];
+    ssoGroupPolicy: {
+        highRiskTools: string[];
+        requiredGroups: string[];
+        requireOboFor: string[];
+    } | null;
+    principal: {
+        email: string;
+        role: string;
+        memberId: string;
+        ssoGroups: string[];
+    } | null;
+    sopRules: {
+        action: "block" | "warn" | "require_approval";
+        reason: string;
+        id: string;
+        toolPattern: string;
+        roles?: string[] | undefined;
+        argPattern?: string | undefined;
+        origin?: "guardrail" | undefined;
+    }[];
+    sqlDropStrictBlock: boolean;
+    mcpProxyFailBehavior?: "open" | "closed" | undefined;
+    mcpInjectionAction?: "block" | "warn" | undefined;
+    mcpAnomalyMode?: "enforce" | "off" | "warn" | undefined;
+    mcpAnomalyOverrides?: Record<string, "off" | "steer" | "reask" | "kill"> | undefined;
+}, {
+    workspaceId: string;
+    piiDetectors: Partial<Record<"pii.card" | "pii.iban" | "pii.ssn" | "pii.email" | "pii.phone", "redact" | "off" | "block">> | null;
+    mcpInjectionPatterns: string[];
+    mcpBudgets: {
+        budgets: {
+            period: "day" | "hour";
+            id: string;
+            limit: number;
+            scope: "member" | "tool" | "server" | "member_server";
+            tool?: string | undefined;
+            server?: string | undefined;
+            memberId?: string | undefined;
+        }[];
+        warnAtPct: number;
+    };
+    interventionMode: "TRANSPARENT" | "OPAQUE" | "SILENT_LOG";
+    allowedTools: string[];
+    toolDescriptionOverrides: Record<string, string>;
+    allowedServers: string[];
+    mcpRegistry: {
+        disabledTools: Record<string, string[]>;
+        defaultPolicy: "deny" | "allow";
+        approvedServers: string[];
+        blockedServers: string[];
+        heldServers: string[];
+    };
+    wasmRules: {
+        name: string;
+        mode: "SHADOW" | "ENFORCE";
+        ruleId: string;
+        sha256: string;
+        priority: number;
+    }[];
+    ssoGroupPolicy: {
+        highRiskTools: string[];
+        requiredGroups: string[];
+        requireOboFor: string[];
+    } | null;
+    principal: {
+        email: string;
+        role: string;
+        memberId: string;
+        ssoGroups: string[];
+    } | null;
+    sopRules: {
+        action: "block" | "warn" | "require_approval";
+        reason: string;
+        id: string;
+        toolPattern: string;
+        roles?: string[] | undefined;
+        argPattern?: string | undefined;
+        origin?: "guardrail" | undefined;
+    }[];
+    sqlDropStrictBlock: boolean;
+    mcpProxyFailBehavior?: "open" | "closed" | undefined;
+    mcpInjectionAction?: "block" | "warn" | undefined;
+    mcpAnomalyMode?: "enforce" | "off" | "warn" | undefined;
+    mcpAnomalyOverrides?: Record<string, "off" | "steer" | "reask" | "kill"> | undefined;
+}>;
+export type PolicyResolveResponse = z.infer<typeof PolicyResolveResponse>;
 /** `POST /api/v1/decisions`: how many holds became queue entries. */
 export declare const DecisionIngestResponse: z.ZodObject<{
     accepted: z.ZodNumber;
@@ -1505,6 +1340,46 @@ export declare const ApprovedBypassListResponse: z.ZodObject<{
     }[];
 }>;
 export type ApprovedBypassListResponse = z.infer<typeof ApprovedBypassListResponse>;
+/**
+ * `GET /api/v1/decisions/:entryId`: one decision-queue entry, found by its
+ * entry id or by the hold id a gate gave the agent (`hold_…`). The MCP
+ * proxy's `intutic_hold_status` tool reads `status`.
+ */
+export declare const DecisionDetailResponse: z.ZodObject<{
+    entry_id: z.ZodString;
+    session_id: z.ZodNullable<z.ZodString>;
+    workspace_id: z.ZodString;
+    original_tool_call: z.ZodUnknown;
+    hijacked_tool_call: z.ZodUnknown;
+    outcome: z.ZodString;
+    trace_id: z.ZodNullable<z.ZodString>;
+    rationale: z.ZodNullable<z.ZodString>;
+    status: z.ZodNullable<z.ZodString>;
+    created_at: z.ZodNullable<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    status: string | null;
+    rationale: string | null;
+    workspace_id: string;
+    session_id: string | null;
+    created_at: string | null;
+    entry_id: string;
+    outcome: string;
+    trace_id: string | null;
+    original_tool_call?: unknown;
+    hijacked_tool_call?: unknown;
+}, {
+    status: string | null;
+    rationale: string | null;
+    workspace_id: string;
+    session_id: string | null;
+    created_at: string | null;
+    entry_id: string;
+    outcome: string;
+    trace_id: string | null;
+    original_tool_call?: unknown;
+    hijacked_tool_call?: unknown;
+}>;
+export type DecisionDetailResponse = z.infer<typeof DecisionDetailResponse>;
 /** `POST /api/v1/decisions/:entryId/review`. */
 export declare const DecisionReviewResponse: z.ZodObject<{
     ok: z.ZodLiteral<true>;
@@ -1608,6 +1483,87 @@ export declare const RuleCandidateBundleResponse: z.ZodUnion<[z.ZodObject<{
     }[];
 }>]>;
 export type RuleCandidateBundleResponse = z.infer<typeof RuleCandidateBundleResponse>;
+/** `POST /api/v1/judge/chunk`: the verdict on one streamed segment of a response. */
+export declare const JudgeChunkResponse: z.ZodObject<{
+    verdict: z.ZodEnum<["TRIGGERED", "PASS"]>;
+    triggered: z.ZodBoolean;
+    personalTriggered: z.ZodBoolean;
+    explanation: z.ZodString;
+    cascade: z.ZodOptional<z.ZodObject<{
+        decision: z.ZodEnum<["clean", "violation", "review"]>;
+        score: z.ZodNullable<z.ZodNumber>;
+        band: z.ZodObject<{
+            lo: z.ZodNumber;
+            hi: z.ZodNumber;
+        }, "strip", z.ZodTypeAny, {
+            lo: number;
+            hi: number;
+        }, {
+            lo: number;
+            hi: number;
+        }>;
+        model: z.ZodString;
+        reviewId: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        model: string;
+        decision: "review" | "clean" | "violation";
+        score: number | null;
+        band: {
+            lo: number;
+            hi: number;
+        };
+        reviewId?: string | undefined;
+    }, {
+        model: string;
+        decision: "review" | "clean" | "violation";
+        score: number | null;
+        band: {
+            lo: number;
+            hi: number;
+        };
+        reviewId?: string | undefined;
+    }>>;
+    independent: z.ZodBoolean;
+    judgeSource: z.ZodLiteral<"platform">;
+    judgeModel: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    verdict: "TRIGGERED" | "PASS";
+    triggered: boolean;
+    personalTriggered: boolean;
+    explanation: string;
+    independent: boolean;
+    judgeSource: "platform";
+    judgeModel: string;
+    cascade?: {
+        model: string;
+        decision: "review" | "clean" | "violation";
+        score: number | null;
+        band: {
+            lo: number;
+            hi: number;
+        };
+        reviewId?: string | undefined;
+    } | undefined;
+}, {
+    verdict: "TRIGGERED" | "PASS";
+    triggered: boolean;
+    personalTriggered: boolean;
+    explanation: string;
+    independent: boolean;
+    judgeSource: "platform";
+    judgeModel: string;
+    cascade?: {
+        model: string;
+        decision: "review" | "clean" | "violation";
+        score: number | null;
+        band: {
+            lo: number;
+            hi: number;
+        };
+        reviewId?: string | undefined;
+    } | undefined;
+}>;
+export type JudgeChunkResponse = z.infer<typeof JudgeChunkResponse>;
 /** `POST /api/v1/judge/finalize`: the final verdict on a response. */
 export declare const JudgeFinalizeResponse: z.ZodObject<{
     verdict: z.ZodEnum<["TRIGGERED", "REVIEW", "PASS"]>;
@@ -1626,14 +1582,14 @@ export declare const JudgeFinalizeResponse: z.ZodObject<{
         independent: z.ZodBoolean;
     }, "strip", z.ZodTypeAny, {
         model: string;
-        independent: boolean;
         violation: boolean;
+        independent: boolean;
         pViolation: number;
         threshold: number;
     }, {
         model: string;
-        independent: boolean;
         violation: boolean;
+        independent: boolean;
         pViolation: number;
         threshold: number;
     }>>;
@@ -1682,21 +1638,14 @@ export declare const JudgeFinalizeResponse: z.ZodObject<{
         score: number;
     }>>;
 }, "strip", z.ZodTypeAny, {
-    verdict: "TRIGGERED" | "REVIEW" | "PASS";
+    verdict: "TRIGGERED" | "PASS" | "REVIEW";
     triggered: boolean;
     personalTriggered: boolean;
-    correctionSummary: string;
     independent: boolean;
     judgeSource: "platform";
     judgeModel: string;
+    correctionSummary: string;
     explanation?: string | undefined;
-    typedAdvisory?: {
-        model: string;
-        independent: boolean;
-        violation: boolean;
-        pViolation: number;
-        threshold: number;
-    } | undefined;
     cascade?: {
         model: string;
         decision: "review" | "clean" | "violation";
@@ -1707,26 +1656,26 @@ export declare const JudgeFinalizeResponse: z.ZodObject<{
         };
         reviewId?: string | undefined;
     } | undefined;
+    typedAdvisory?: {
+        model: string;
+        violation: boolean;
+        independent: boolean;
+        pViolation: number;
+        threshold: number;
+    } | undefined;
     personalCascade?: {
         decision: "review" | "clean" | "violation";
         score: number;
     } | undefined;
 }, {
-    verdict: "TRIGGERED" | "REVIEW" | "PASS";
+    verdict: "TRIGGERED" | "PASS" | "REVIEW";
     triggered: boolean;
     personalTriggered: boolean;
-    correctionSummary: string;
     independent: boolean;
     judgeSource: "platform";
     judgeModel: string;
+    correctionSummary: string;
     explanation?: string | undefined;
-    typedAdvisory?: {
-        model: string;
-        independent: boolean;
-        violation: boolean;
-        pViolation: number;
-        threshold: number;
-    } | undefined;
     cascade?: {
         model: string;
         decision: "review" | "clean" | "violation";
@@ -1737,6 +1686,13 @@ export declare const JudgeFinalizeResponse: z.ZodObject<{
         };
         reviewId?: string | undefined;
     } | undefined;
+    typedAdvisory?: {
+        model: string;
+        violation: boolean;
+        independent: boolean;
+        pViolation: number;
+        threshold: number;
+    } | undefined;
     personalCascade?: {
         decision: "review" | "clean" | "violation";
         score: number;