@intutic/shared-types 2.9.1 → 3.0.1

package/dist/responses/rules.d.ts

@@ -24,11 +24,11 @@ export declare const WasmRuleResponse: z.ZodObject<{
     mode: string;
     ruleId: string;
     description: string;
+    version: number;
     priority: number;
     isActive: boolean;
     createdAt: string;
     updatedAt: string;
-    version: number;
     bundleSha256: string;
 }, {
     workspaceId: string;
@@ -36,11 +36,11 @@ export declare const WasmRuleResponse: z.ZodObject<{
     mode: string;
     ruleId: string;
     description: string;
+    version: number;
     priority: number;
     isActive: boolean;
     createdAt: string;
     updatedAt: string;
-    version: number;
     bundleSha256: string;
 }>;
 export type WasmRuleResponse = z.infer<typeof WasmRuleResponse>;
@@ -64,11 +64,11 @@ export declare const WasmRuleListResponse: z.ZodArray<z.ZodObject<{
     mode: string;
     ruleId: string;
     description: string;
+    version: number;
     priority: number;
     isActive: boolean;
     createdAt: string;
     updatedAt: string;
-    version: number;
     bundleSha256: string;
 }, {
     workspaceId: string;
@@ -76,11 +76,11 @@ export declare const WasmRuleListResponse: z.ZodArray<z.ZodObject<{
     mode: string;
     ruleId: string;
     description: string;
+    version: number;
     priority: number;
     isActive: boolean;
     createdAt: string;
     updatedAt: string;
-    version: number;
     bundleSha256: string;
 }>, "many">;
 export type WasmRuleListResponse = z.infer<typeof WasmRuleListResponse>;
@@ -179,13 +179,13 @@ export declare const SopResponse: z.ZodObject<{
 }, "strip", z.ZodTypeAny, {
     workspaceId: string;
     title: string;
+    version: string;
+    lifecycleState: "DRAFT" | "PENDING_REVIEW" | "GENERATED" | "HYPOTHESIZED" | "REFINED" | "VALIDATED" | "INVALIDATED";
     riskTier: "LOW" | "MEDIUM" | "HIGH" | "CRITICAL" | null;
     markdownContent: string;
     isActive: boolean;
     sopId: string;
-    version: string;
     complexityTier: "TIER_0" | "TIER_1" | "TIER_2" | null;
-    lifecycleState: "DRAFT" | "PENDING_REVIEW" | "GENERATED" | "HYPOTHESIZED" | "REFINED" | "VALIDATED" | "INVALIDATED";
     contentHash?: string | undefined;
     shadowEvaluations?: number | undefined;
     shadowWouldBlock?: number | undefined;
@@ -201,13 +201,13 @@ export declare const SopResponse: z.ZodObject<{
 }, {
     workspaceId: string;
     title: string;
+    version: string;
+    lifecycleState: "DRAFT" | "PENDING_REVIEW" | "GENERATED" | "HYPOTHESIZED" | "REFINED" | "VALIDATED" | "INVALIDATED";
     riskTier: "LOW" | "MEDIUM" | "HIGH" | "CRITICAL" | null;
     markdownContent: string;
     isActive: boolean;
     sopId: string;
-    version: string;
     complexityTier: "TIER_0" | "TIER_1" | "TIER_2" | null;
-    lifecycleState: "DRAFT" | "PENDING_REVIEW" | "GENERATED" | "HYPOTHESIZED" | "REFINED" | "VALIDATED" | "INVALIDATED";
     contentHash?: string | undefined;
     shadowEvaluations?: number | undefined;
     shadowWouldBlock?: number | undefined;
@@ -266,13 +266,13 @@ export declare const SopCreatedResponse: z.ZodObject<{
 }, "strip", z.ZodTypeAny, {
     workspaceId: string;
     title: string;
+    version: string;
+    lifecycleState: "DRAFT" | "PENDING_REVIEW" | "GENERATED" | "HYPOTHESIZED" | "REFINED" | "VALIDATED" | "INVALIDATED";
     riskTier: "LOW" | "MEDIUM" | "HIGH" | "CRITICAL";
     markdownContent: string;
     isActive: boolean;
     sopId: string;
-    version: string;
     complexityTier: "TIER_0" | "TIER_1" | "TIER_2";
-    lifecycleState: "DRAFT" | "PENDING_REVIEW" | "GENERATED" | "HYPOTHESIZED" | "REFINED" | "VALIDATED" | "INVALIDATED";
     contentHash?: string | undefined;
     shadowEvaluations?: number | undefined;
     shadowWouldBlock?: number | undefined;
@@ -288,13 +288,13 @@ export declare const SopCreatedResponse: z.ZodObject<{
 }, {
     workspaceId: string;
     title: string;
+    version: string;
+    lifecycleState: "DRAFT" | "PENDING_REVIEW" | "GENERATED" | "HYPOTHESIZED" | "REFINED" | "VALIDATED" | "INVALIDATED";
     riskTier: "LOW" | "MEDIUM" | "HIGH" | "CRITICAL";
     markdownContent: string;
     isActive: boolean;
     sopId: string;
-    version: string;
     complexityTier: "TIER_0" | "TIER_1" | "TIER_2";
-    lifecycleState: "DRAFT" | "PENDING_REVIEW" | "GENERATED" | "HYPOTHESIZED" | "REFINED" | "VALIDATED" | "INVALIDATED";
     contentHash?: string | undefined;
     shadowEvaluations?: number | undefined;
     shadowWouldBlock?: number | undefined;
@@ -357,13 +357,13 @@ export declare const SopListResponse: z.ZodObject<{
     }, "strip", z.ZodTypeAny, {
         workspaceId: string;
         title: string;
+        version: string;
+        lifecycleState: "DRAFT" | "PENDING_REVIEW" | "GENERATED" | "HYPOTHESIZED" | "REFINED" | "VALIDATED" | "INVALIDATED";
         riskTier: "LOW" | "MEDIUM" | "HIGH" | "CRITICAL" | null;
         markdownContent: string;
         isActive: boolean;
         sopId: string;
-        version: string;
         complexityTier: "TIER_0" | "TIER_1" | "TIER_2" | null;
-        lifecycleState: "DRAFT" | "PENDING_REVIEW" | "GENERATED" | "HYPOTHESIZED" | "REFINED" | "VALIDATED" | "INVALIDATED";
         contentHash?: string | undefined;
         shadowEvaluations?: number | undefined;
         shadowWouldBlock?: number | undefined;
@@ -379,13 +379,13 @@ export declare const SopListResponse: z.ZodObject<{
     }, {
         workspaceId: string;
         title: string;
+        version: string;
+        lifecycleState: "DRAFT" | "PENDING_REVIEW" | "GENERATED" | "HYPOTHESIZED" | "REFINED" | "VALIDATED" | "INVALIDATED";
         riskTier: "LOW" | "MEDIUM" | "HIGH" | "CRITICAL" | null;
         markdownContent: string;
         isActive: boolean;
         sopId: string;
-        version: string;
         complexityTier: "TIER_0" | "TIER_1" | "TIER_2" | null;
-        lifecycleState: "DRAFT" | "PENDING_REVIEW" | "GENERATED" | "HYPOTHESIZED" | "REFINED" | "VALIDATED" | "INVALIDATED";
         contentHash?: string | undefined;
         shadowEvaluations?: number | undefined;
         shadowWouldBlock?: number | undefined;
@@ -403,17 +403,18 @@ export declare const SopListResponse: z.ZodObject<{
     page: z.ZodNumber;
     limit: z.ZodNumber;
 }, "strip", z.ZodTypeAny, {
+    total: number;
     limit: number;
     items: {
         workspaceId: string;
         title: string;
+        version: string;
+        lifecycleState: "DRAFT" | "PENDING_REVIEW" | "GENERATED" | "HYPOTHESIZED" | "REFINED" | "VALIDATED" | "INVALIDATED";
         riskTier: "LOW" | "MEDIUM" | "HIGH" | "CRITICAL" | null;
         markdownContent: string;
         isActive: boolean;
         sopId: string;
-        version: string;
         complexityTier: "TIER_0" | "TIER_1" | "TIER_2" | null;
-        lifecycleState: "DRAFT" | "PENDING_REVIEW" | "GENERATED" | "HYPOTHESIZED" | "REFINED" | "VALIDATED" | "INVALIDATED";
         contentHash?: string | undefined;
         shadowEvaluations?: number | undefined;
         shadowWouldBlock?: number | undefined;
@@ -429,20 +430,20 @@ export declare const SopListResponse: z.ZodObject<{
     }[];
     listProperty: "items";
     rowCase: "camel";
-    total: number;
     page: number;
 }, {
+    total: number;
     limit: number;
     items: {
         workspaceId: string;
         title: string;
+        version: string;
+        lifecycleState: "DRAFT" | "PENDING_REVIEW" | "GENERATED" | "HYPOTHESIZED" | "REFINED" | "VALIDATED" | "INVALIDATED";
         riskTier: "LOW" | "MEDIUM" | "HIGH" | "CRITICAL" | null;
         markdownContent: string;
         isActive: boolean;
         sopId: string;
-        version: string;
         complexityTier: "TIER_0" | "TIER_1" | "TIER_2" | null;
-        lifecycleState: "DRAFT" | "PENDING_REVIEW" | "GENERATED" | "HYPOTHESIZED" | "REFINED" | "VALIDATED" | "INVALIDATED";
         contentHash?: string | undefined;
         shadowEvaluations?: number | undefined;
         shadowWouldBlock?: number | undefined;
@@ -458,7 +459,6 @@ export declare const SopListResponse: z.ZodObject<{
     }[];
     listProperty: "items";
     rowCase: "camel";
-    total: number;
     page: number;
 }>;
 export type SopListResponse = z.infer<typeof SopListResponse>;
@@ -507,13 +507,13 @@ export declare const SopUpdatedResponse: z.ZodObject<{
     }, "strip", z.ZodTypeAny, {
         workspaceId: string;
         title: string;
+        version: string;
+        lifecycleState: "DRAFT" | "PENDING_REVIEW" | "GENERATED" | "HYPOTHESIZED" | "REFINED" | "VALIDATED" | "INVALIDATED";
         riskTier: "LOW" | "MEDIUM" | "HIGH" | "CRITICAL" | null;
         markdownContent: string;
         isActive: boolean;
         sopId: string;
-        version: string;
         complexityTier: "TIER_0" | "TIER_1" | "TIER_2" | null;
-        lifecycleState: "DRAFT" | "PENDING_REVIEW" | "GENERATED" | "HYPOTHESIZED" | "REFINED" | "VALIDATED" | "INVALIDATED";
         contentHash?: string | undefined;
         shadowEvaluations?: number | undefined;
         shadowWouldBlock?: number | undefined;
@@ -529,13 +529,13 @@ export declare const SopUpdatedResponse: z.ZodObject<{
     }, {
         workspaceId: string;
         title: string;
+        version: string;
+        lifecycleState: "DRAFT" | "PENDING_REVIEW" | "GENERATED" | "HYPOTHESIZED" | "REFINED" | "VALIDATED" | "INVALIDATED";
         riskTier: "LOW" | "MEDIUM" | "HIGH" | "CRITICAL" | null;
         markdownContent: string;
         isActive: boolean;
         sopId: string;
-        version: string;
         complexityTier: "TIER_0" | "TIER_1" | "TIER_2" | null;
-        lifecycleState: "DRAFT" | "PENDING_REVIEW" | "GENERATED" | "HYPOTHESIZED" | "REFINED" | "VALIDATED" | "INVALIDATED";
         contentHash?: string | undefined;
         shadowEvaluations?: number | undefined;
         shadowWouldBlock?: number | undefined;
@@ -571,13 +571,13 @@ export declare const SopUpdatedResponse: z.ZodObject<{
     sop: {
         workspaceId: string;
         title: string;
+        version: string;
+        lifecycleState: "DRAFT" | "PENDING_REVIEW" | "GENERATED" | "HYPOTHESIZED" | "REFINED" | "VALIDATED" | "INVALIDATED";
         riskTier: "LOW" | "MEDIUM" | "HIGH" | "CRITICAL" | null;
         markdownContent: string;
         isActive: boolean;
         sopId: string;
-        version: string;
         complexityTier: "TIER_0" | "TIER_1" | "TIER_2" | null;
-        lifecycleState: "DRAFT" | "PENDING_REVIEW" | "GENERATED" | "HYPOTHESIZED" | "REFINED" | "VALIDATED" | "INVALIDATED";
         contentHash?: string | undefined;
         shadowEvaluations?: number | undefined;
         shadowWouldBlock?: number | undefined;
@@ -600,13 +600,13 @@ export declare const SopUpdatedResponse: z.ZodObject<{
     sop: {
         workspaceId: string;
         title: string;
+        version: string;
+        lifecycleState: "DRAFT" | "PENDING_REVIEW" | "GENERATED" | "HYPOTHESIZED" | "REFINED" | "VALIDATED" | "INVALIDATED";
         riskTier: "LOW" | "MEDIUM" | "HIGH" | "CRITICAL" | null;
         markdownContent: string;
         isActive: boolean;
         sopId: string;
-        version: string;
         complexityTier: "TIER_0" | "TIER_1" | "TIER_2" | null;
-        lifecycleState: "DRAFT" | "PENDING_REVIEW" | "GENERATED" | "HYPOTHESIZED" | "REFINED" | "VALIDATED" | "INVALIDATED";
         contentHash?: string | undefined;
         shadowEvaluations?: number | undefined;
         shadowWouldBlock?: number | undefined;
@@ -742,16 +742,16 @@ export declare const SopRulesResponse: z.ZodObject<{
         }, "strip", z.ZodTypeAny, {
             period: "day" | "hour";
             id: string;
-            limit: number;
             scope: "member" | "tool" | "server" | "member_server";
+            limit: number;
             tool?: string | undefined;
             server?: string | undefined;
             memberId?: string | undefined;
         }, {
             period: "day" | "hour";
             id: string;
-            limit: number;
             scope: "member" | "tool" | "server" | "member_server";
+            limit: number;
             tool?: string | undefined;
             server?: string | undefined;
             memberId?: string | undefined;
@@ -761,8 +761,8 @@ export declare const SopRulesResponse: z.ZodObject<{
         budgets: {
             period: "day" | "hour";
             id: string;
-            limit: number;
             scope: "member" | "tool" | "server" | "member_server";
+            limit: number;
             tool?: string | undefined;
             server?: string | undefined;
             memberId?: string | undefined;
@@ -772,8 +772,8 @@ export declare const SopRulesResponse: z.ZodObject<{
         budgets: {
             period: "day" | "hour";
             id: string;
-            limit: number;
             scope: "member" | "tool" | "server" | "member_server";
+            limit: number;
             tool?: string | undefined;
             server?: string | undefined;
             memberId?: string | undefined;
@@ -837,30 +837,30 @@ export declare const SopRulesResponse: z.ZodObject<{
     interventionMode: z.ZodEnum<["TRANSPARENT", "OPAQUE", "SILENT_LOG"]>;
 }, "strip", z.ZodTypeAny, {
     ok: true;
+    rules: {
+        action: "block" | "warn" | "require_approval";
+        reason: string;
+        id: string;
+        toolPattern: string;
+        roles?: string[] | undefined;
+        argPattern?: string | undefined;
+        origin?: "guardrail" | undefined;
+    }[];
     piiDetectors: Partial<Record<"pii.card" | "pii.iban" | "pii.ssn" | "pii.email" | "pii.phone", "redact" | "off" | "block">> | null;
     mcpInjectionPatterns: string[];
     mcpBudgets: {
         budgets: {
             period: "day" | "hour";
             id: string;
-            limit: number;
             scope: "member" | "tool" | "server" | "member_server";
+            limit: number;
             tool?: string | undefined;
             server?: string | undefined;
             memberId?: string | undefined;
         }[];
         warnAtPct: number;
     };
-    interventionMode: "TRANSPARENT" | "OPAQUE" | "SILENT_LOG";
-    rules: {
-        action: "block" | "warn" | "require_approval";
-        reason: string;
-        id: string;
-        toolPattern: string;
-        roles?: string[] | undefined;
-        argPattern?: string | undefined;
-        origin?: "guardrail" | undefined;
-    }[];
+    interventionMode: "OPAQUE" | "TRANSPARENT" | "SILENT_LOG";
     listProperty: "rules";
     rowCase: "camel";
     allowedTools: string[];
@@ -897,30 +897,30 @@ export declare const SopRulesResponse: z.ZodObject<{
     mcpAnomalyOverrides?: Record<string, "off" | "steer" | "reask" | "kill"> | undefined;
 }, {
     ok: true;
+    rules: {
+        action: "block" | "warn" | "require_approval";
+        reason: string;
+        id: string;
+        toolPattern: string;
+        roles?: string[] | undefined;
+        argPattern?: string | undefined;
+        origin?: "guardrail" | undefined;
+    }[];
     piiDetectors: Partial<Record<"pii.card" | "pii.iban" | "pii.ssn" | "pii.email" | "pii.phone", "redact" | "off" | "block">> | null;
     mcpInjectionPatterns: string[];
     mcpBudgets: {
         budgets: {
             period: "day" | "hour";
             id: string;
-            limit: number;
             scope: "member" | "tool" | "server" | "member_server";
+            limit: number;
             tool?: string | undefined;
             server?: string | undefined;
             memberId?: string | undefined;
         }[];
         warnAtPct: number;
     };
-    interventionMode: "TRANSPARENT" | "OPAQUE" | "SILENT_LOG";
-    rules: {
-        action: "block" | "warn" | "require_approval";
-        reason: string;
-        id: string;
-        toolPattern: string;
-        roles?: string[] | undefined;
-        argPattern?: string | undefined;
-        origin?: "guardrail" | undefined;
-    }[];
+    interventionMode: "OPAQUE" | "TRANSPARENT" | "SILENT_LOG";
     listProperty: "rules";
     rowCase: "camel";
     allowedTools: string[];
@@ -998,16 +998,16 @@ export declare const PolicyResolveResponse: z.ZodObject<{
         }, "strip", z.ZodTypeAny, {
             period: "day" | "hour";
             id: string;
-            limit: number;
             scope: "member" | "tool" | "server" | "member_server";
+            limit: number;
             tool?: string | undefined;
             server?: string | undefined;
             memberId?: string | undefined;
         }, {
             period: "day" | "hour";
             id: string;
-            limit: number;
             scope: "member" | "tool" | "server" | "member_server";
+            limit: number;
             tool?: string | undefined;
             server?: string | undefined;
             memberId?: string | undefined;
@@ -1017,8 +1017,8 @@ export declare const PolicyResolveResponse: z.ZodObject<{
         budgets: {
             period: "day" | "hour";
             id: string;
-            limit: number;
             scope: "member" | "tool" | "server" | "member_server";
+            limit: number;
             tool?: string | undefined;
             server?: string | undefined;
             memberId?: string | undefined;
@@ -1028,8 +1028,8 @@ export declare const PolicyResolveResponse: z.ZodObject<{
         budgets: {
             period: "day" | "hour";
             id: string;
-            limit: number;
             scope: "member" | "tool" | "server" | "member_server";
+            limit: number;
             tool?: string | undefined;
             server?: string | undefined;
             memberId?: string | undefined;
@@ -1118,6 +1118,108 @@ export declare const PolicyResolveResponse: z.ZodObject<{
     }>, "many">;
     interventionMode: z.ZodEnum<["TRANSPARENT", "OPAQUE", "SILENT_LOG"]>;
     sqlDropStrictBlock: z.ZodBoolean;
+    decideRules: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        sopId: z.ZodString;
+        sopTitle: z.ZodString;
+        ruleText: z.ZodString;
+        ir: z.ZodString;
+        rollout: z.ZodOptional<z.ZodLiteral<"shadow">>;
+        ruleHash: z.ZodOptional<z.ZodString>;
+        pins: z.ZodArray<z.ZodObject<{
+            modelDigest: z.ZodString;
+            temperature: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodNumber>>;
+            band: z.ZodOptional<z.ZodObject<{
+                yes_at: z.ZodNumber;
+                no_below: z.ZodNumber;
+            }, "strip", z.ZodTypeAny, {
+                yes_at: number;
+                no_below: number;
+            }, {
+                yes_at: number;
+                no_below: number;
+            }>>;
+            combiner: z.ZodOptional<z.ZodObject<{
+                bias: z.ZodNumber;
+                weights: z.ZodRecord<z.ZodString, z.ZodNumber>;
+            }, "strip", z.ZodTypeAny, {
+                bias: number;
+                weights: Record<string, number>;
+            }, {
+                bias: number;
+                weights: Record<string, number>;
+            }>>;
+            evalRunId: z.ZodString;
+            source: z.ZodEnum<["local", "server"]>;
+        }, "strip", z.ZodTypeAny, {
+            modelDigest: string;
+            evalRunId: string;
+            source: "local" | "server";
+            band?: {
+                yes_at: number;
+                no_below: number;
+            } | undefined;
+            temperature?: Record<string, number> | undefined;
+            combiner?: {
+                bias: number;
+                weights: Record<string, number>;
+            } | undefined;
+        }, {
+            modelDigest: string;
+            evalRunId: string;
+            source: "local" | "server";
+            band?: {
+                yes_at: number;
+                no_below: number;
+            } | undefined;
+            temperature?: Record<string, number> | undefined;
+            combiner?: {
+                bias: number;
+                weights: Record<string, number>;
+            } | undefined;
+        }>, "many">;
+    }, "strip", z.ZodTypeAny, {
+        ir: string;
+        pins: {
+            modelDigest: string;
+            evalRunId: string;
+            source: "local" | "server";
+            band?: {
+                yes_at: number;
+                no_below: number;
+            } | undefined;
+            temperature?: Record<string, number> | undefined;
+            combiner?: {
+                bias: number;
+                weights: Record<string, number>;
+            } | undefined;
+        }[];
+        ruleText: string;
+        sopTitle: string;
+        sopId: string;
+        rollout?: "shadow" | undefined;
+        ruleHash?: string | undefined;
+    }, {
+        ir: string;
+        pins: {
+            modelDigest: string;
+            evalRunId: string;
+            source: "local" | "server";
+            band?: {
+                yes_at: number;
+                no_below: number;
+            } | undefined;
+            temperature?: Record<string, number> | undefined;
+            combiner?: {
+                bias: number;
+                weights: Record<string, number>;
+            } | undefined;
+        }[];
+        ruleText: string;
+        sopTitle: string;
+        sopId: string;
+        rollout?: "shadow" | undefined;
+        ruleHash?: string | undefined;
+    }>, "many">>;
 }, "strip", z.ZodTypeAny, {
     workspaceId: string;
     piiDetectors: Partial<Record<"pii.card" | "pii.iban" | "pii.ssn" | "pii.email" | "pii.phone", "redact" | "off" | "block">> | null;
@@ -1126,15 +1228,15 @@ export declare const PolicyResolveResponse: z.ZodObject<{
         budgets: {
             period: "day" | "hour";
             id: string;
-            limit: number;
             scope: "member" | "tool" | "server" | "member_server";
+            limit: number;
             tool?: string | undefined;
             server?: string | undefined;
             memberId?: string | undefined;
         }[];
         warnAtPct: number;
     };
-    interventionMode: "TRANSPARENT" | "OPAQUE" | "SILENT_LOG";
+    interventionMode: "OPAQUE" | "TRANSPARENT" | "SILENT_LOG";
     allowedTools: string[];
     toolDescriptionOverrides: Record<string, string>;
     allowedServers: string[];
@@ -1177,6 +1279,28 @@ export declare const PolicyResolveResponse: z.ZodObject<{
     mcpInjectionAction?: "block" | "warn" | undefined;
     mcpAnomalyMode?: "enforce" | "off" | "warn" | undefined;
     mcpAnomalyOverrides?: Record<string, "off" | "steer" | "reask" | "kill"> | undefined;
+    decideRules?: {
+        ir: string;
+        pins: {
+            modelDigest: string;
+            evalRunId: string;
+            source: "local" | "server";
+            band?: {
+                yes_at: number;
+                no_below: number;
+            } | undefined;
+            temperature?: Record<string, number> | undefined;
+            combiner?: {
+                bias: number;
+                weights: Record<string, number>;
+            } | undefined;
+        }[];
+        ruleText: string;
+        sopTitle: string;
+        sopId: string;
+        rollout?: "shadow" | undefined;
+        ruleHash?: string | undefined;
+    }[] | undefined;
 }, {
     workspaceId: string;
     piiDetectors: Partial<Record<"pii.card" | "pii.iban" | "pii.ssn" | "pii.email" | "pii.phone", "redact" | "off" | "block">> | null;
@@ -1185,15 +1309,15 @@ export declare const PolicyResolveResponse: z.ZodObject<{
         budgets: {
             period: "day" | "hour";
             id: string;
-            limit: number;
             scope: "member" | "tool" | "server" | "member_server";
+            limit: number;
             tool?: string | undefined;
             server?: string | undefined;
             memberId?: string | undefined;
         }[];
         warnAtPct: number;
     };
-    interventionMode: "TRANSPARENT" | "OPAQUE" | "SILENT_LOG";
+    interventionMode: "OPAQUE" | "TRANSPARENT" | "SILENT_LOG";
     allowedTools: string[];
     toolDescriptionOverrides: Record<string, string>;
     allowedServers: string[];
@@ -1236,109 +1360,801 @@ export declare const PolicyResolveResponse: z.ZodObject<{
     mcpInjectionAction?: "block" | "warn" | undefined;
     mcpAnomalyMode?: "enforce" | "off" | "warn" | undefined;
     mcpAnomalyOverrides?: Record<string, "off" | "steer" | "reask" | "kill"> | undefined;
+    decideRules?: {
+        ir: string;
+        pins: {
+            modelDigest: string;
+            evalRunId: string;
+            source: "local" | "server";
+            band?: {
+                yes_at: number;
+                no_below: number;
+            } | undefined;
+            temperature?: Record<string, number> | undefined;
+            combiner?: {
+                bias: number;
+                weights: Record<string, number>;
+            } | undefined;
+        }[];
+        ruleText: string;
+        sopTitle: string;
+        sopId: string;
+        rollout?: "shadow" | undefined;
+        ruleHash?: string | undefined;
+    }[] | undefined;
 }>;
 export type PolicyResolveResponse = z.infer<typeof PolicyResolveResponse>;
-/** `POST /api/v1/decisions`: how many holds became queue entries. */
-export declare const DecisionIngestResponse: z.ZodObject<{
-    accepted: z.ZodNumber;
-    dropped: z.ZodNumber;
-    entryIds: z.ZodArray<z.ZodString, "many">;
+/** A hold rule policy resolve compiles, in the snapshot's rule shape. */
+export declare const ServedHoldRuleResponse: z.ZodObject<{
+    id: z.ZodString;
+    source: z.ZodString;
+    subject: z.ZodEnum<["phrase", "action"]>;
+    ignoreCase: z.ZodLiteral<true>;
+    severity: z.ZodEnum<["hold", "shadow"]>;
+    reason: z.ZodString;
+    rationale: z.ZodString;
 }, "strip", z.ZodTypeAny, {
-    dropped: number;
-    accepted: number;
-    entryIds: string[];
+    reason: string;
+    id: string;
+    source: string;
+    subject: "action" | "phrase";
+    ignoreCase: true;
+    rationale: string;
+    severity: "hold" | "shadow";
 }, {
-    dropped: number;
-    accepted: number;
-    entryIds: string[];
+    reason: string;
+    id: string;
+    source: string;
+    subject: "action" | "phrase";
+    ignoreCase: true;
+    rationale: string;
+    severity: "hold" | "shadow";
 }>;
-export type DecisionIngestResponse = z.infer<typeof DecisionIngestResponse>;
-/** One approved bypass as `maybeWriteReviewHoldBypass` writes it to Valkey. */
-export declare const ApprovedBypassResponse: z.ZodObject<{
-    workspaceId: z.ZodString;
-    sopRuleId: z.ZodString;
-    toolNameNormalized: z.ZodString;
-    targetHash: z.ZodString;
-    holdId: z.ZodString;
-    decidedBy: z.ZodString;
-    decidedAt: z.ZodString;
-    expiresAt: z.ZodString;
+export type ServedHoldRuleResponse = z.infer<typeof ServedHoldRuleResponse>;
+/** A `@rule` record a workspace SOP compiles to; the daemon encodes the line and its fallback. */
+export declare const ServedGateRecordResponse: z.ZodObject<{
+    sopId: z.ZodString;
+    kind: z.ZodEnum<["requires_outcome", "scope_paths", "plan_approval"]>;
+    rollout: z.ZodEnum<["shadow", "enforce"]>;
+    fallbackId: z.ZodNullable<z.ZodString>;
+    payload: z.ZodObject<{
+        v: z.ZodLiteral<1>;
+        ref: z.ZodString;
+        sopTitle: z.ZodString;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        v: z.ZodLiteral<1>;
+        ref: z.ZodString;
+        sopTitle: z.ZodString;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        v: z.ZodLiteral<1>;
+        ref: z.ZodString;
+        sopTitle: z.ZodString;
+    }, z.ZodTypeAny, "passthrough">>;
 }, "strip", z.ZodTypeAny, {
-    workspaceId: string;
-    expiresAt: string;
-    sopRuleId: string;
-    toolNameNormalized: string;
-    targetHash: string;
-    holdId: string;
-    decidedBy: string;
-    decidedAt: string;
+    payload: {
+        v: 1;
+        ref: string;
+        sopTitle: string;
+    } & {
+        [k: string]: unknown;
+    };
+    kind: "requires_outcome" | "scope_paths" | "plan_approval";
+    rollout: "shadow" | "enforce";
+    fallbackId: string | null;
+    sopId: string;
 }, {
-    workspaceId: string;
-    expiresAt: string;
-    sopRuleId: string;
-    toolNameNormalized: string;
-    targetHash: string;
-    holdId: string;
-    decidedBy: string;
-    decidedAt: string;
+    payload: {
+        v: 1;
+        ref: string;
+        sopTitle: string;
+    } & {
+        [k: string]: unknown;
+    };
+    kind: "requires_outcome" | "scope_paths" | "plan_approval";
+    rollout: "shadow" | "enforce";
+    fallbackId: string | null;
+    sopId: string;
 }>;
-export type ApprovedBypassResponse = z.infer<typeof ApprovedBypassResponse>;
-/** `GET /api/v1/decisions/approved-bypasses`. */
-export declare const ApprovedBypassListResponse: z.ZodObject<{
-    ok: z.ZodLiteral<true>;
-    bypasses: z.ZodArray<z.ZodObject<{
-        workspaceId: z.ZodString;
-        sopRuleId: z.ZodString;
-        toolNameNormalized: z.ZodString;
-        targetHash: z.ZodString;
-        holdId: z.ZodString;
-        decidedBy: z.ZodString;
-        decidedAt: z.ZodString;
-        expiresAt: z.ZodString;
+export type ServedGateRecordResponse = z.infer<typeof ServedGateRecordResponse>;
+/** `GET /api/v1/policy/resolve`, with the 3.0 fields. */
+export declare const PolicyResolveGatesResponse: z.ZodObject<{
+    allowedTools: z.ZodArray<z.ZodString, "many">;
+    toolDescriptionOverrides: z.ZodRecord<z.ZodString, z.ZodString>;
+    allowedServers: z.ZodArray<z.ZodString, "many">;
+    mcpInjectionPatterns: z.ZodArray<z.ZodString, "many">;
+    mcpRegistry: z.ZodObject<{
+        defaultPolicy: z.ZodEnum<["allow", "deny"]>;
+        approvedServers: z.ZodArray<z.ZodString, "many">;
+        blockedServers: z.ZodArray<z.ZodString, "many">;
+        heldServers: z.ZodArray<z.ZodString, "many">;
+        disabledTools: z.ZodRecord<z.ZodString, z.ZodArray<z.ZodString, "many">>;
     }, "strip", z.ZodTypeAny, {
-        workspaceId: string;
-        expiresAt: string;
-        sopRuleId: string;
-        toolNameNormalized: string;
-        targetHash: string;
-        holdId: string;
-        decidedBy: string;
-        decidedAt: string;
+        disabledTools: Record<string, string[]>;
+        defaultPolicy: "deny" | "allow";
+        approvedServers: string[];
+        blockedServers: string[];
+        heldServers: string[];
     }, {
-        workspaceId: string;
-        expiresAt: string;
-        sopRuleId: string;
-        toolNameNormalized: string;
-        targetHash: string;
-        holdId: string;
-        decidedBy: string;
-        decidedAt: string;
-    }>, "many">;
-}, "strip", z.ZodTypeAny, {
-    ok: true;
-    bypasses: {
-        workspaceId: string;
-        expiresAt: string;
-        sopRuleId: string;
-        toolNameNormalized: string;
-        targetHash: string;
-        holdId: string;
-        decidedBy: string;
-        decidedAt: string;
-    }[];
-}, {
-    ok: true;
-    bypasses: {
-        workspaceId: string;
-        expiresAt: string;
-        sopRuleId: string;
-        toolNameNormalized: string;
-        targetHash: string;
-        holdId: string;
-        decidedBy: string;
-        decidedAt: string;
-    }[];
-}>;
+        disabledTools: Record<string, string[]>;
+        defaultPolicy: "deny" | "allow";
+        approvedServers: string[];
+        blockedServers: string[];
+        heldServers: string[];
+    }>;
+    mcpBudgets: z.ZodObject<{
+        budgets: z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            scope: z.ZodEnum<["server", "tool", "member", "member_server"]>;
+            server: z.ZodOptional<z.ZodString>;
+            tool: z.ZodOptional<z.ZodString>;
+            memberId: z.ZodOptional<z.ZodString>;
+            period: z.ZodEnum<["hour", "day"]>;
+            limit: z.ZodNumber;
+        }, "strip", z.ZodTypeAny, {
+            period: "day" | "hour";
+            id: string;
+            scope: "member" | "tool" | "server" | "member_server";
+            limit: number;
+            tool?: string | undefined;
+            server?: string | undefined;
+            memberId?: string | undefined;
+        }, {
+            period: "day" | "hour";
+            id: string;
+            scope: "member" | "tool" | "server" | "member_server";
+            limit: number;
+            tool?: string | undefined;
+            server?: string | undefined;
+            memberId?: string | undefined;
+        }>, "many">;
+        warnAtPct: z.ZodNumber;
+    }, "strip", z.ZodTypeAny, {
+        budgets: {
+            period: "day" | "hour";
+            id: string;
+            scope: "member" | "tool" | "server" | "member_server";
+            limit: number;
+            tool?: string | undefined;
+            server?: string | undefined;
+            memberId?: string | undefined;
+        }[];
+        warnAtPct: number;
+    }, {
+        budgets: {
+            period: "day" | "hour";
+            id: string;
+            scope: "member" | "tool" | "server" | "member_server";
+            limit: number;
+            tool?: string | undefined;
+            server?: string | undefined;
+            memberId?: string | undefined;
+        }[];
+        warnAtPct: number;
+    }>;
+    piiDetectors: z.ZodNullable<z.ZodRecord<z.ZodEnum<["pii.card", "pii.iban", "pii.ssn", "pii.email", "pii.phone"]>, z.ZodEnum<["off", "redact", "block"]>>>;
+    wasmRules: z.ZodArray<z.ZodObject<{
+        ruleId: z.ZodString;
+        name: z.ZodString;
+        sha256: z.ZodString;
+        priority: z.ZodNumber;
+        mode: z.ZodEnum<["ENFORCE", "SHADOW"]>;
+    }, "strip", z.ZodTypeAny, {
+        name: string;
+        mode: "SHADOW" | "ENFORCE";
+        ruleId: string;
+        sha256: string;
+        priority: number;
+    }, {
+        name: string;
+        mode: "SHADOW" | "ENFORCE";
+        ruleId: string;
+        sha256: string;
+        priority: number;
+    }>, "many">;
+    ssoGroupPolicy: z.ZodNullable<z.ZodObject<{
+        highRiskTools: z.ZodArray<z.ZodString, "many">;
+        requiredGroups: z.ZodArray<z.ZodString, "many">;
+        requireOboFor: z.ZodArray<z.ZodString, "many">;
+    }, "strip", z.ZodTypeAny, {
+        highRiskTools: string[];
+        requiredGroups: string[];
+        requireOboFor: string[];
+    }, {
+        highRiskTools: string[];
+        requiredGroups: string[];
+        requireOboFor: string[];
+    }>>;
+    principal: z.ZodNullable<z.ZodObject<{
+        memberId: z.ZodString;
+        email: z.ZodString;
+        role: z.ZodString;
+        ssoGroups: z.ZodArray<z.ZodString, "many">;
+    }, "strip", z.ZodTypeAny, {
+        email: string;
+        role: string;
+        memberId: string;
+        ssoGroups: string[];
+    }, {
+        email: string;
+        role: string;
+        memberId: string;
+        ssoGroups: string[];
+    }>>;
+    mcpProxyFailBehavior: z.ZodOptional<z.ZodEnum<["open", "closed"]>>;
+    mcpInjectionAction: z.ZodOptional<z.ZodEnum<["warn", "block"]>>;
+    mcpAnomalyMode: z.ZodOptional<z.ZodEnum<["enforce", "warn", "off"]>>;
+    mcpAnomalyOverrides: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<["steer", "reask", "kill", "off"]>>>;
+} & {
+    workspaceId: z.ZodString;
+    sopRules: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        toolPattern: z.ZodString;
+        argPattern: z.ZodOptional<z.ZodString>;
+        action: z.ZodEnum<["block", "warn", "require_approval"]>;
+        reason: z.ZodString;
+        origin: z.ZodOptional<z.ZodLiteral<"guardrail">>;
+        roles: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    }, "strip", z.ZodTypeAny, {
+        action: "block" | "warn" | "require_approval";
+        reason: string;
+        id: string;
+        toolPattern: string;
+        roles?: string[] | undefined;
+        argPattern?: string | undefined;
+        origin?: "guardrail" | undefined;
+    }, {
+        action: "block" | "warn" | "require_approval";
+        reason: string;
+        id: string;
+        toolPattern: string;
+        roles?: string[] | undefined;
+        argPattern?: string | undefined;
+        origin?: "guardrail" | undefined;
+    }>, "many">;
+    interventionMode: z.ZodEnum<["TRANSPARENT", "OPAQUE", "SILENT_LOG"]>;
+    sqlDropStrictBlock: z.ZodBoolean;
+    decideRules: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        sopId: z.ZodString;
+        sopTitle: z.ZodString;
+        ruleText: z.ZodString;
+        ir: z.ZodString;
+        rollout: z.ZodOptional<z.ZodLiteral<"shadow">>;
+        ruleHash: z.ZodOptional<z.ZodString>;
+        pins: z.ZodArray<z.ZodObject<{
+            modelDigest: z.ZodString;
+            temperature: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodNumber>>;
+            band: z.ZodOptional<z.ZodObject<{
+                yes_at: z.ZodNumber;
+                no_below: z.ZodNumber;
+            }, "strip", z.ZodTypeAny, {
+                yes_at: number;
+                no_below: number;
+            }, {
+                yes_at: number;
+                no_below: number;
+            }>>;
+            combiner: z.ZodOptional<z.ZodObject<{
+                bias: z.ZodNumber;
+                weights: z.ZodRecord<z.ZodString, z.ZodNumber>;
+            }, "strip", z.ZodTypeAny, {
+                bias: number;
+                weights: Record<string, number>;
+            }, {
+                bias: number;
+                weights: Record<string, number>;
+            }>>;
+            evalRunId: z.ZodString;
+            source: z.ZodEnum<["local", "server"]>;
+        }, "strip", z.ZodTypeAny, {
+            modelDigest: string;
+            evalRunId: string;
+            source: "local" | "server";
+            band?: {
+                yes_at: number;
+                no_below: number;
+            } | undefined;
+            temperature?: Record<string, number> | undefined;
+            combiner?: {
+                bias: number;
+                weights: Record<string, number>;
+            } | undefined;
+        }, {
+            modelDigest: string;
+            evalRunId: string;
+            source: "local" | "server";
+            band?: {
+                yes_at: number;
+                no_below: number;
+            } | undefined;
+            temperature?: Record<string, number> | undefined;
+            combiner?: {
+                bias: number;
+                weights: Record<string, number>;
+            } | undefined;
+        }>, "many">;
+    }, "strip", z.ZodTypeAny, {
+        ir: string;
+        pins: {
+            modelDigest: string;
+            evalRunId: string;
+            source: "local" | "server";
+            band?: {
+                yes_at: number;
+                no_below: number;
+            } | undefined;
+            temperature?: Record<string, number> | undefined;
+            combiner?: {
+                bias: number;
+                weights: Record<string, number>;
+            } | undefined;
+        }[];
+        ruleText: string;
+        sopTitle: string;
+        sopId: string;
+        rollout?: "shadow" | undefined;
+        ruleHash?: string | undefined;
+    }, {
+        ir: string;
+        pins: {
+            modelDigest: string;
+            evalRunId: string;
+            source: "local" | "server";
+            band?: {
+                yes_at: number;
+                no_below: number;
+            } | undefined;
+            temperature?: Record<string, number> | undefined;
+            combiner?: {
+                bias: number;
+                weights: Record<string, number>;
+            } | undefined;
+        }[];
+        ruleText: string;
+        sopTitle: string;
+        sopId: string;
+        rollout?: "shadow" | undefined;
+        ruleHash?: string | undefined;
+    }>, "many">>;
+} & {
+    gateRecords: z.ZodArray<z.ZodObject<{
+        sopId: z.ZodString;
+        kind: z.ZodEnum<["requires_outcome", "scope_paths", "plan_approval"]>;
+        rollout: z.ZodEnum<["shadow", "enforce"]>;
+        fallbackId: z.ZodNullable<z.ZodString>;
+        payload: z.ZodObject<{
+            v: z.ZodLiteral<1>;
+            ref: z.ZodString;
+            sopTitle: z.ZodString;
+        }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+            v: z.ZodLiteral<1>;
+            ref: z.ZodString;
+            sopTitle: z.ZodString;
+        }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+            v: z.ZodLiteral<1>;
+            ref: z.ZodString;
+            sopTitle: z.ZodString;
+        }, z.ZodTypeAny, "passthrough">>;
+    }, "strip", z.ZodTypeAny, {
+        payload: {
+            v: 1;
+            ref: string;
+            sopTitle: string;
+        } & {
+            [k: string]: unknown;
+        };
+        kind: "requires_outcome" | "scope_paths" | "plan_approval";
+        rollout: "shadow" | "enforce";
+        fallbackId: string | null;
+        sopId: string;
+    }, {
+        payload: {
+            v: 1;
+            ref: string;
+            sopTitle: string;
+        } & {
+            [k: string]: unknown;
+        };
+        kind: "requires_outcome" | "scope_paths" | "plan_approval";
+        rollout: "shadow" | "enforce";
+        fallbackId: string | null;
+        sopId: string;
+    }>, "many">;
+    holdRules: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        source: z.ZodString;
+        subject: z.ZodEnum<["phrase", "action"]>;
+        ignoreCase: z.ZodLiteral<true>;
+        severity: z.ZodEnum<["hold", "shadow"]>;
+        reason: z.ZodString;
+        rationale: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        reason: string;
+        id: string;
+        source: string;
+        subject: "action" | "phrase";
+        ignoreCase: true;
+        rationale: string;
+        severity: "hold" | "shadow";
+    }, {
+        reason: string;
+        id: string;
+        source: string;
+        subject: "action" | "phrase";
+        ignoreCase: true;
+        rationale: string;
+        severity: "hold" | "shadow";
+    }>, "many">;
+    revertHolds: z.ZodArray<z.ZodObject<{
+        subject: z.ZodString;
+        revertRate: z.ZodNullable<z.ZodNumber>;
+        rejectionRate: z.ZodNullable<z.ZodNumber>;
+    }, "strip", z.ZodTypeAny, {
+        revertRate: number | null;
+        subject: string;
+        rejectionRate: number | null;
+    }, {
+        revertRate: number | null;
+        subject: string;
+        rejectionRate: number | null;
+    }>, "many">;
+}, "strip", z.ZodTypeAny, {
+    workspaceId: string;
+    piiDetectors: Partial<Record<"pii.card" | "pii.iban" | "pii.ssn" | "pii.email" | "pii.phone", "redact" | "off" | "block">> | null;
+    mcpInjectionPatterns: string[];
+    mcpBudgets: {
+        budgets: {
+            period: "day" | "hour";
+            id: string;
+            scope: "member" | "tool" | "server" | "member_server";
+            limit: number;
+            tool?: string | undefined;
+            server?: string | undefined;
+            memberId?: string | undefined;
+        }[];
+        warnAtPct: number;
+    };
+    interventionMode: "OPAQUE" | "TRANSPARENT" | "SILENT_LOG";
+    allowedTools: string[];
+    toolDescriptionOverrides: Record<string, string>;
+    allowedServers: string[];
+    mcpRegistry: {
+        disabledTools: Record<string, string[]>;
+        defaultPolicy: "deny" | "allow";
+        approvedServers: string[];
+        blockedServers: string[];
+        heldServers: string[];
+    };
+    wasmRules: {
+        name: string;
+        mode: "SHADOW" | "ENFORCE";
+        ruleId: string;
+        sha256: string;
+        priority: number;
+    }[];
+    ssoGroupPolicy: {
+        highRiskTools: string[];
+        requiredGroups: string[];
+        requireOboFor: string[];
+    } | null;
+    principal: {
+        email: string;
+        role: string;
+        memberId: string;
+        ssoGroups: string[];
+    } | null;
+    sopRules: {
+        action: "block" | "warn" | "require_approval";
+        reason: string;
+        id: string;
+        toolPattern: string;
+        roles?: string[] | undefined;
+        argPattern?: string | undefined;
+        origin?: "guardrail" | undefined;
+    }[];
+    sqlDropStrictBlock: boolean;
+    gateRecords: {
+        payload: {
+            v: 1;
+            ref: string;
+            sopTitle: string;
+        } & {
+            [k: string]: unknown;
+        };
+        kind: "requires_outcome" | "scope_paths" | "plan_approval";
+        rollout: "shadow" | "enforce";
+        fallbackId: string | null;
+        sopId: string;
+    }[];
+    holdRules: {
+        reason: string;
+        id: string;
+        source: string;
+        subject: "action" | "phrase";
+        ignoreCase: true;
+        rationale: string;
+        severity: "hold" | "shadow";
+    }[];
+    revertHolds: {
+        revertRate: number | null;
+        subject: string;
+        rejectionRate: number | null;
+    }[];
+    mcpProxyFailBehavior?: "open" | "closed" | undefined;
+    mcpInjectionAction?: "block" | "warn" | undefined;
+    mcpAnomalyMode?: "enforce" | "off" | "warn" | undefined;
+    mcpAnomalyOverrides?: Record<string, "off" | "steer" | "reask" | "kill"> | undefined;
+    decideRules?: {
+        ir: string;
+        pins: {
+            modelDigest: string;
+            evalRunId: string;
+            source: "local" | "server";
+            band?: {
+                yes_at: number;
+                no_below: number;
+            } | undefined;
+            temperature?: Record<string, number> | undefined;
+            combiner?: {
+                bias: number;
+                weights: Record<string, number>;
+            } | undefined;
+        }[];
+        ruleText: string;
+        sopTitle: string;
+        sopId: string;
+        rollout?: "shadow" | undefined;
+        ruleHash?: string | undefined;
+    }[] | undefined;
+}, {
+    workspaceId: string;
+    piiDetectors: Partial<Record<"pii.card" | "pii.iban" | "pii.ssn" | "pii.email" | "pii.phone", "redact" | "off" | "block">> | null;
+    mcpInjectionPatterns: string[];
+    mcpBudgets: {
+        budgets: {
+            period: "day" | "hour";
+            id: string;
+            scope: "member" | "tool" | "server" | "member_server";
+            limit: number;
+            tool?: string | undefined;
+            server?: string | undefined;
+            memberId?: string | undefined;
+        }[];
+        warnAtPct: number;
+    };
+    interventionMode: "OPAQUE" | "TRANSPARENT" | "SILENT_LOG";
+    allowedTools: string[];
+    toolDescriptionOverrides: Record<string, string>;
+    allowedServers: string[];
+    mcpRegistry: {
+        disabledTools: Record<string, string[]>;
+        defaultPolicy: "deny" | "allow";
+        approvedServers: string[];
+        blockedServers: string[];
+        heldServers: string[];
+    };
+    wasmRules: {
+        name: string;
+        mode: "SHADOW" | "ENFORCE";
+        ruleId: string;
+        sha256: string;
+        priority: number;
+    }[];
+    ssoGroupPolicy: {
+        highRiskTools: string[];
+        requiredGroups: string[];
+        requireOboFor: string[];
+    } | null;
+    principal: {
+        email: string;
+        role: string;
+        memberId: string;
+        ssoGroups: string[];
+    } | null;
+    sopRules: {
+        action: "block" | "warn" | "require_approval";
+        reason: string;
+        id: string;
+        toolPattern: string;
+        roles?: string[] | undefined;
+        argPattern?: string | undefined;
+        origin?: "guardrail" | undefined;
+    }[];
+    sqlDropStrictBlock: boolean;
+    gateRecords: {
+        payload: {
+            v: 1;
+            ref: string;
+            sopTitle: string;
+        } & {
+            [k: string]: unknown;
+        };
+        kind: "requires_outcome" | "scope_paths" | "plan_approval";
+        rollout: "shadow" | "enforce";
+        fallbackId: string | null;
+        sopId: string;
+    }[];
+    holdRules: {
+        reason: string;
+        id: string;
+        source: string;
+        subject: "action" | "phrase";
+        ignoreCase: true;
+        rationale: string;
+        severity: "hold" | "shadow";
+    }[];
+    revertHolds: {
+        revertRate: number | null;
+        subject: string;
+        rejectionRate: number | null;
+    }[];
+    mcpProxyFailBehavior?: "open" | "closed" | undefined;
+    mcpInjectionAction?: "block" | "warn" | undefined;
+    mcpAnomalyMode?: "enforce" | "off" | "warn" | undefined;
+    mcpAnomalyOverrides?: Record<string, "off" | "steer" | "reask" | "kill"> | undefined;
+    decideRules?: {
+        ir: string;
+        pins: {
+            modelDigest: string;
+            evalRunId: string;
+            source: "local" | "server";
+            band?: {
+                yes_at: number;
+                no_below: number;
+            } | undefined;
+            temperature?: Record<string, number> | undefined;
+            combiner?: {
+                bias: number;
+                weights: Record<string, number>;
+            } | undefined;
+        }[];
+        ruleText: string;
+        sopTitle: string;
+        sopId: string;
+        rollout?: "shadow" | undefined;
+        ruleHash?: string | undefined;
+    }[] | undefined;
+}>;
+export type PolicyResolveGatesResponse = z.infer<typeof PolicyResolveGatesResponse>;
+/** `GET /api/v1/plans/approved`: the plans hook gates may treat as approved. */
+export declare const ApprovedPlansResponse: z.ZodObject<{
+    plans: z.ZodArray<z.ZodObject<{
+        sessionId: z.ZodString;
+        planId: z.ZodString;
+        state: z.ZodEnum<["APPROVED", "EXECUTING"]>;
+        tools: z.ZodArray<z.ZodString, "many">;
+        updatedAt: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        sessionId: string;
+        tools: string[];
+        state: "APPROVED" | "EXECUTING";
+        updatedAt: string;
+        planId: string;
+    }, {
+        sessionId: string;
+        tools: string[];
+        state: "APPROVED" | "EXECUTING";
+        updatedAt: string;
+        planId: string;
+    }>, "many">;
+}, "strip", z.ZodTypeAny, {
+    plans: {
+        sessionId: string;
+        tools: string[];
+        state: "APPROVED" | "EXECUTING";
+        updatedAt: string;
+        planId: string;
+    }[];
+}, {
+    plans: {
+        sessionId: string;
+        tools: string[];
+        state: "APPROVED" | "EXECUTING";
+        updatedAt: string;
+        planId: string;
+    }[];
+}>;
+export type ApprovedPlansResponse = z.infer<typeof ApprovedPlansResponse>;
+/** `POST /api/v1/decisions`: how many holds became queue entries. */
+export declare const DecisionIngestResponse: z.ZodObject<{
+    accepted: z.ZodNumber;
+    dropped: z.ZodNumber;
+    entryIds: z.ZodArray<z.ZodString, "many">;
+}, "strip", z.ZodTypeAny, {
+    dropped: number;
+    accepted: number;
+    entryIds: string[];
+}, {
+    dropped: number;
+    accepted: number;
+    entryIds: string[];
+}>;
+export type DecisionIngestResponse = z.infer<typeof DecisionIngestResponse>;
+/** One approved bypass as `maybeWriteReviewHoldBypass` writes it to Valkey. */
+export declare const ApprovedBypassResponse: z.ZodObject<{
+    workspaceId: z.ZodString;
+    sopRuleId: z.ZodString;
+    toolNameNormalized: z.ZodString;
+    targetHash: z.ZodString;
+    holdId: z.ZodString;
+    decidedBy: z.ZodString;
+    decidedAt: z.ZodString;
+    expiresAt: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    workspaceId: string;
+    expiresAt: string;
+    sopRuleId: string;
+    toolNameNormalized: string;
+    targetHash: string;
+    holdId: string;
+    decidedBy: string;
+    decidedAt: string;
+}, {
+    workspaceId: string;
+    expiresAt: string;
+    sopRuleId: string;
+    toolNameNormalized: string;
+    targetHash: string;
+    holdId: string;
+    decidedBy: string;
+    decidedAt: string;
+}>;
+export type ApprovedBypassResponse = z.infer<typeof ApprovedBypassResponse>;
+/** `GET /api/v1/decisions/approved-bypasses`. */
+export declare const ApprovedBypassListResponse: z.ZodObject<{
+    ok: z.ZodLiteral<true>;
+    bypasses: z.ZodArray<z.ZodObject<{
+        workspaceId: z.ZodString;
+        sopRuleId: z.ZodString;
+        toolNameNormalized: z.ZodString;
+        targetHash: z.ZodString;
+        holdId: z.ZodString;
+        decidedBy: z.ZodString;
+        decidedAt: z.ZodString;
+        expiresAt: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        workspaceId: string;
+        expiresAt: string;
+        sopRuleId: string;
+        toolNameNormalized: string;
+        targetHash: string;
+        holdId: string;
+        decidedBy: string;
+        decidedAt: string;
+    }, {
+        workspaceId: string;
+        expiresAt: string;
+        sopRuleId: string;
+        toolNameNormalized: string;
+        targetHash: string;
+        holdId: string;
+        decidedBy: string;
+        decidedAt: string;
+    }>, "many">;
+}, "strip", z.ZodTypeAny, {
+    ok: true;
+    bypasses: {
+        workspaceId: string;
+        expiresAt: string;
+        sopRuleId: string;
+        toolNameNormalized: string;
+        targetHash: string;
+        holdId: string;
+        decidedBy: string;
+        decidedAt: string;
+    }[];
+}, {
+    ok: true;
+    bypasses: {
+        workspaceId: string;
+        expiresAt: string;
+        sopRuleId: string;
+        toolNameNormalized: string;
+        targetHash: string;
+        holdId: string;
+        decidedBy: string;
+        decidedAt: string;
+    }[];
+}>;
 export type ApprovedBypassListResponse = z.infer<typeof ApprovedBypassListResponse>;
 /**
  * `GET /api/v1/decisions/:entryId`: one decision-queue entry, found by its
@@ -1358,23 +2174,23 @@ export declare const DecisionDetailResponse: z.ZodObject<{
     created_at: z.ZodNullable<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
     status: string | null;
+    outcome: string;
     rationale: string | null;
     workspace_id: string;
     session_id: string | null;
     created_at: string | null;
     entry_id: string;
-    outcome: string;
     trace_id: string | null;
     original_tool_call?: unknown;
     hijacked_tool_call?: unknown;
 }, {
     status: string | null;
+    outcome: string;
     rationale: string | null;
     workspace_id: string;
     session_id: string | null;
     created_at: string | null;
     entry_id: string;
-    outcome: string;
     trace_id: string | null;
     original_tool_call?: unknown;
     hijacked_tool_call?: unknown;
@@ -1427,12 +2243,12 @@ export declare const RuleCandidateBundleResponse: z.ZodUnion<[z.ZodObject<{
         detail: z.ZodString;
     }, "strip", z.ZodTypeAny, {
         gate: "predicate_valid" | "mocks_from_history" | "compiles_and_links" | "default_allow" | "discriminates" | "historical_replay";
-        detail: string;
         passed: boolean;
+        detail: string;
     }, {
         gate: "predicate_valid" | "mocks_from_history" | "compiles_and_links" | "default_allow" | "discriminates" | "historical_replay";
-        detail: string;
         passed: boolean;
+        detail: string;
     }>, "many">;
 }, "strip", z.ZodTypeAny, {
     mode: "SHADOW";
@@ -1440,8 +2256,8 @@ export declare const RuleCandidateBundleResponse: z.ZodUnion<[z.ZodObject<{
     accepted: true;
     gates: {
         gate: "predicate_valid" | "mocks_from_history" | "compiles_and_links" | "default_allow" | "discriminates" | "historical_replay";
-        detail: string;
         passed: boolean;
+        detail: string;
     }[];
 }, {
     mode: "SHADOW";
@@ -1449,8 +2265,8 @@ export declare const RuleCandidateBundleResponse: z.ZodUnion<[z.ZodObject<{
     accepted: true;
     gates: {
         gate: "predicate_valid" | "mocks_from_history" | "compiles_and_links" | "default_allow" | "discriminates" | "historical_replay";
-        detail: string;
         passed: boolean;
+        detail: string;
     }[];
 }>, z.ZodObject<{
     accepted: z.ZodLiteral<false>;
@@ -1460,26 +2276,26 @@ export declare const RuleCandidateBundleResponse: z.ZodUnion<[z.ZodObject<{
         detail: z.ZodString;
     }, "strip", z.ZodTypeAny, {
         gate: "predicate_valid" | "mocks_from_history" | "compiles_and_links" | "default_allow" | "discriminates" | "historical_replay";
-        detail: string;
         passed: boolean;
+        detail: string;
     }, {
         gate: "predicate_valid" | "mocks_from_history" | "compiles_and_links" | "default_allow" | "discriminates" | "historical_replay";
-        detail: string;
         passed: boolean;
+        detail: string;
     }>, "many">;
 }, "strip", z.ZodTypeAny, {
     accepted: false;
     gates: {
         gate: "predicate_valid" | "mocks_from_history" | "compiles_and_links" | "default_allow" | "discriminates" | "historical_replay";
-        detail: string;
         passed: boolean;
+        detail: string;
     }[];
 }, {
     accepted: false;
     gates: {
         gate: "predicate_valid" | "mocks_from_history" | "compiles_and_links" | "default_allow" | "discriminates" | "historical_replay";
-        detail: string;
         passed: boolean;
+        detail: string;
     }[];
 }>]>;
 export type RuleCandidateBundleResponse = z.infer<typeof RuleCandidateBundleResponse>;
@@ -1507,20 +2323,20 @@ export declare const JudgeChunkResponse: z.ZodObject<{
     }, "strip", z.ZodTypeAny, {
         model: string;
         decision: "review" | "clean" | "violation";
-        score: number | null;
         band: {
             lo: number;
             hi: number;
         };
+        score: number | null;
         reviewId?: string | undefined;
     }, {
         model: string;
         decision: "review" | "clean" | "violation";
-        score: number | null;
         band: {
             lo: number;
             hi: number;
         };
+        score: number | null;
         reviewId?: string | undefined;
     }>>;
     independent: z.ZodBoolean;
@@ -1537,11 +2353,11 @@ export declare const JudgeChunkResponse: z.ZodObject<{
     cascade?: {
         model: string;
         decision: "review" | "clean" | "violation";
-        score: number | null;
         band: {
             lo: number;
             hi: number;
         };
+        score: number | null;
         reviewId?: string | undefined;
     } | undefined;
 }, {
@@ -1555,11 +2371,11 @@ export declare const JudgeChunkResponse: z.ZodObject<{
     cascade?: {
         model: string;
         decision: "review" | "clean" | "violation";
-        score: number | null;
         band: {
             lo: number;
             hi: number;
         };
+        score: number | null;
         reviewId?: string | undefined;
     } | undefined;
 }>;
@@ -1582,16 +2398,16 @@ export declare const JudgeFinalizeResponse: z.ZodObject<{
         independent: z.ZodBoolean;
     }, "strip", z.ZodTypeAny, {
         model: string;
-        violation: boolean;
-        independent: boolean;
         pViolation: number;
         threshold: number;
-    }, {
-        model: string;
         violation: boolean;
         independent: boolean;
+    }, {
+        model: string;
         pViolation: number;
         threshold: number;
+        violation: boolean;
+        independent: boolean;
     }>>;
     cascade: z.ZodOptional<z.ZodObject<{
         decision: z.ZodEnum<["clean", "violation", "review"]>;
@@ -1611,20 +2427,20 @@ export declare const JudgeFinalizeResponse: z.ZodObject<{
     }, "strip", z.ZodTypeAny, {
         model: string;
         decision: "review" | "clean" | "violation";
-        score: number | null;
         band: {
             lo: number;
             hi: number;
         };
+        score: number | null;
         reviewId?: string | undefined;
     }, {
         model: string;
         decision: "review" | "clean" | "violation";
-        score: number | null;
         band: {
             lo: number;
             hi: number;
         };
+        score: number | null;
         reviewId?: string | undefined;
     }>>;
     personalCascade: z.ZodOptional<z.ZodObject<{
@@ -1637,6 +2453,19 @@ export declare const JudgeFinalizeResponse: z.ZodObject<{
         decision: "review" | "clean" | "violation";
         score: number;
     }>>;
+    deprecation: z.ZodOptional<z.ZodObject<{
+        code: z.ZodLiteral<"FREE_TEXT_VERDICT_DEPRECATED">;
+        removedIn: z.ZodLiteral<"4.0">;
+        message: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        code: "FREE_TEXT_VERDICT_DEPRECATED";
+        message: string;
+        removedIn: "4.0";
+    }, {
+        code: "FREE_TEXT_VERDICT_DEPRECATED";
+        message: string;
+        removedIn: "4.0";
+    }>>;
 }, "strip", z.ZodTypeAny, {
     verdict: "TRIGGERED" | "PASS" | "REVIEW";
     triggered: boolean;
@@ -1649,24 +2478,29 @@ export declare const JudgeFinalizeResponse: z.ZodObject<{
     cascade?: {
         model: string;
         decision: "review" | "clean" | "violation";
-        score: number | null;
         band: {
             lo: number;
             hi: number;
         };
+        score: number | null;
         reviewId?: string | undefined;
     } | undefined;
     typedAdvisory?: {
         model: string;
-        violation: boolean;
-        independent: boolean;
         pViolation: number;
         threshold: number;
+        violation: boolean;
+        independent: boolean;
     } | undefined;
     personalCascade?: {
         decision: "review" | "clean" | "violation";
         score: number;
     } | undefined;
+    deprecation?: {
+        code: "FREE_TEXT_VERDICT_DEPRECATED";
+        message: string;
+        removedIn: "4.0";
+    } | undefined;
 }, {
     verdict: "TRIGGERED" | "PASS" | "REVIEW";
     triggered: boolean;
@@ -1679,24 +2513,29 @@ export declare const JudgeFinalizeResponse: z.ZodObject<{
     cascade?: {
         model: string;
         decision: "review" | "clean" | "violation";
-        score: number | null;
         band: {
             lo: number;
             hi: number;
         };
+        score: number | null;
         reviewId?: string | undefined;
     } | undefined;
     typedAdvisory?: {
         model: string;
-        violation: boolean;
-        independent: boolean;
         pViolation: number;
         threshold: number;
+        violation: boolean;
+        independent: boolean;
     } | undefined;
     personalCascade?: {
         decision: "review" | "clean" | "violation";
         score: number;
     } | undefined;
+    deprecation?: {
+        code: "FREE_TEXT_VERDICT_DEPRECATED";
+        message: string;
+        removedIn: "4.0";
+    } | undefined;
 }>;
 export type JudgeFinalizeResponse = z.infer<typeof JudgeFinalizeResponse>;
 /** `POST /api/v1/hook-events`: what the batch became. */
@@ -1741,9 +2580,9 @@ export declare const HookEventsResponse: z.ZodObject<{
         replayed: z.ZodNumber;
         errors: z.ZodNumber;
     }, "strip", z.ZodTypeAny, {
-        rejected: number;
         errors: number;
         total: number;
+        rejected: number;
         incidents_created: number;
         tamper_alerts: number;
         bypass_alerts: number;
@@ -1765,9 +2604,9 @@ export declare const HookEventsResponse: z.ZodObject<{
         snapshot_issues: number;
         guards_disabled: number;
     }, {
-        rejected: number;
         errors: number;
         total: number;
+        rejected: number;
         incidents_created: number;
         tamper_alerts: number;
         bypass_alerts: number;
@@ -1792,9 +2631,9 @@ export declare const HookEventsResponse: z.ZodObject<{
 }, "strip", z.ZodTypeAny, {
     ok: true;
     summary: {
-        rejected: number;
         errors: number;
         total: number;
+        rejected: number;
         incidents_created: number;
         tamper_alerts: number;
         bypass_alerts: number;
@@ -1819,9 +2658,9 @@ export declare const HookEventsResponse: z.ZodObject<{
 }, {
     ok: true;
     summary: {
-        rejected: number;
         errors: number;
         total: number;
+        rejected: number;
         incidents_created: number;
         tamper_alerts: number;
         bypass_alerts: number;