@trycompai/mcp-server 0.3.3 → 0.3.7

package/src/models/ismsregisterscontrollerupdaterowv1op.ts

@@ -6,11 +6,68 @@
 import * as z from "zod";
 import { ClosedEnum } from "../types/enums.js";
 
+/**
+ * Which ISMS register the row belongs to.
+ */
+export const IsmsRegistersControllerUpdateRowV1Register = {
+  ContextIssues: "context-issues",
+  InterestedParties: "interested-parties",
+  Requirements: "requirements",
+  Objectives: "objectives",
+  Roles: "roles",
+  RoleAssignments: "role-assignments",
+  Metrics: "metrics",
+  Measurements: "measurements",
+  Audits: "audits",
+  AuditControls: "audit-controls",
+  AuditFindings: "audit-findings",
+  Reviews: "reviews",
+  ReviewInputs: "review-inputs",
+  ReviewActions: "review-actions",
+  Communications: "communications",
+  Obligations: "obligations",
+  KeyRecords: "key-records",
+  ApprovedSoftware: "approved-software",
+  Nonconformities: "nonconformities",
+} as const;
+/**
+ * Which ISMS register the row belongs to.
+ */
+export type IsmsRegistersControllerUpdateRowV1Register = ClosedEnum<
+  typeof IsmsRegistersControllerUpdateRowV1Register
+>;
+
+export const IsmsRegistersControllerUpdateRowV1Register$zodSchema = z.enum([
+  "context-issues",
+  "interested-parties",
+  "requirements",
+  "objectives",
+  "roles",
+  "role-assignments",
+  "metrics",
+  "measurements",
+  "audits",
+  "audit-controls",
+  "audit-findings",
+  "reviews",
+  "review-inputs",
+  "review-actions",
+  "communications",
+  "obligations",
+  "key-records",
+  "approved-software",
+  "nonconformities",
+]).describe("Which ISMS register the row belongs to.");
+
 export const IsmsRegistersControllerUpdateRowV1Kind = {
   Internal: "internal",
   External: "external",
   Recurring: "recurring",
   Milestone: "milestone",
+  Legal: "legal",
+  Regulatory: "regulatory",
+  Contractual: "contractual",
+  Standard: "standard",
 } as const;
 export type IsmsRegistersControllerUpdateRowV1Kind = ClosedEnum<
   typeof IsmsRegistersControllerUpdateRowV1Kind
@@ -21,6 +78,10 @@ export const IsmsRegistersControllerUpdateRowV1Kind$zodSchema = z.enum([
   "external",
   "recurring",
   "milestone",
+  "legal",
+  "regulatory",
+  "contractual",
+  "standard",
 ]);
 
 export const IsmsRegistersControllerUpdateRowV1Status = {
@@ -33,6 +94,8 @@ export const IsmsRegistersControllerUpdateRowV1Status = {
   Complete: "complete",
   Open: "open",
   Closed: "closed",
+  ActionComplete: "action_complete",
+  VerifiedAndClosed: "verified_and_closed",
 } as const;
 export type IsmsRegistersControllerUpdateRowV1Status = ClosedEnum<
   typeof IsmsRegistersControllerUpdateRowV1Status
@@ -48,6 +111,8 @@ export const IsmsRegistersControllerUpdateRowV1Status$zodSchema = z.enum([
   "complete",
   "open",
   "closed",
+  "action_complete",
+  "verified_and_closed",
 ]);
 
 export const IsmsRegistersControllerUpdateRowV1AuditRoute = {
@@ -183,6 +248,9 @@ export const IsmsRegistersControllerUpdateRowV1Type = {
   NcMinor: "nc_minor",
   Ofi: "ofi",
   Observation: "observation",
+  MinorNonconformity: "minor_nonconformity",
+  MajorNonconformity: "major_nonconformity",
+  ImprovementOpportunity: "improvement_opportunity",
 } as const;
 export type IsmsRegistersControllerUpdateRowV1Type = ClosedEnum<
   typeof IsmsRegistersControllerUpdateRowV1Type
@@ -193,8 +261,184 @@ export const IsmsRegistersControllerUpdateRowV1Type$zodSchema = z.enum([
   "nc_minor",
   "ofi",
   "observation",
+  "minor_nonconformity",
+  "major_nonconformity",
+  "improvement_opportunity",
+]);
+
+export const IsmsRegistersControllerUpdateRowV1Audience = {
+  Internal: "internal",
+  External: "external",
+} as const;
+export type IsmsRegistersControllerUpdateRowV1Audience = ClosedEnum<
+  typeof IsmsRegistersControllerUpdateRowV1Audience
+>;
+
+export const IsmsRegistersControllerUpdateRowV1Audience$zodSchema = z.enum([
+  "internal",
+  "external",
+]);
+
+export const IsmsRegistersControllerUpdateRowV1Frequency = {
+  OnJoining: "on_joining",
+  OnPublication: "on_publication",
+  AsItHappens: "as_it_happens",
+  Monthly: "monthly",
+  Quarterly: "quarterly",
+  Annually: "annually",
+  OnRequest: "on_request",
+  WithinStatutoryDeadline: "within_statutory_deadline",
+  IfNeeded: "if_needed",
+  OnJoiningAndAnnually: "on_joining_and_annually",
+  AfterEachAudit: "after_each_audit",
+  OnOnboardingAndAsNeeded: "on_onboarding_and_as_needed",
+  PerAuditCycle: "per_audit_cycle",
+} as const;
+export type IsmsRegistersControllerUpdateRowV1Frequency = ClosedEnum<
+  typeof IsmsRegistersControllerUpdateRowV1Frequency
+>;
+
+export const IsmsRegistersControllerUpdateRowV1Frequency$zodSchema = z.enum([
+  "on_joining",
+  "on_publication",
+  "as_it_happens",
+  "monthly",
+  "quarterly",
+  "annually",
+  "on_request",
+  "within_statutory_deadline",
+  "if_needed",
+  "on_joining_and_annually",
+  "after_each_audit",
+  "on_onboarding_and_as_needed",
+  "per_audit_cycle",
+]);
+
+export const IsmsRegistersControllerUpdateRowV1Channel = {
+  Email: "email",
+  SlackOrTeams: "slack_or_teams",
+  CompanyMeeting: "company_meeting",
+  TrustCentre: "trust_centre",
+  CompAiPortal: "comp_ai_portal",
+  TrainingPlatform: "training_platform",
+  WrittenNotice: "written_notice",
+} as const;
+export type IsmsRegistersControllerUpdateRowV1Channel = ClosedEnum<
+  typeof IsmsRegistersControllerUpdateRowV1Channel
+>;
+
+export const IsmsRegistersControllerUpdateRowV1Channel$zodSchema = z.enum([
+  "email",
+  "slack_or_teams",
+  "company_meeting",
+  "trust_centre",
+  "comp_ai_portal",
+  "training_platform",
+  "written_notice",
 ]);
 
+export const IsmsRegistersControllerUpdateRowV1Rotation = {
+  Automatic: "automatic",
+  Annually: "annually",
+  OnChange: "on_change",
+  OnChangeOrAnnually: "on_change_or_annually",
+  OnOffboarding: "on_offboarding",
+  NotRotated: "not_rotated",
+} as const;
+export type IsmsRegistersControllerUpdateRowV1Rotation = ClosedEnum<
+  typeof IsmsRegistersControllerUpdateRowV1Rotation
+>;
+
+export const IsmsRegistersControllerUpdateRowV1Rotation$zodSchema = z.enum([
+  "automatic",
+  "annually",
+  "on_change",
+  "on_change_or_annually",
+  "on_offboarding",
+  "not_rotated",
+]);
+
+export const IsmsRegistersControllerUpdateRowV1UsedWhere = {
+  EndUserDevices: "end_user_devices",
+  ProductionSystems: "production_systems",
+  Both: "both",
+  CloudService: "cloud_service",
+} as const;
+export type IsmsRegistersControllerUpdateRowV1UsedWhere = ClosedEnum<
+  typeof IsmsRegistersControllerUpdateRowV1UsedWhere
+>;
+
+export const IsmsRegistersControllerUpdateRowV1UsedWhere$zodSchema = z.enum([
+  "end_user_devices",
+  "production_systems",
+  "both",
+  "cloud_service",
+]);
+
+export const IsmsRegistersControllerUpdateRowV1Licence = {
+  Commercial: "commercial",
+  OpenSource: "open_source",
+  FreeTier: "free_tier",
+  Internal: "internal",
+} as const;
+export type IsmsRegistersControllerUpdateRowV1Licence = ClosedEnum<
+  typeof IsmsRegistersControllerUpdateRowV1Licence
+>;
+
+export const IsmsRegistersControllerUpdateRowV1Licence$zodSchema = z.enum([
+  "commercial",
+  "open_source",
+  "free_tier",
+  "internal",
+]);
+
+export const IsmsRegistersControllerUpdateRowV1Source = {
+  InternalAudit: "internal_audit",
+  ExternalAudit: "external_audit",
+  Incident: "incident",
+  ManagementReview: "management_review",
+  ControlOrTaskFailure: "control_or_task_failure",
+  CustomerOrVendorIssue: "customer_or_vendor_issue",
+  Other: "other",
+} as const;
+export type IsmsRegistersControllerUpdateRowV1Source = ClosedEnum<
+  typeof IsmsRegistersControllerUpdateRowV1Source
+>;
+
+export const IsmsRegistersControllerUpdateRowV1Source$zodSchema = z.enum([
+  "internal_audit",
+  "external_audit",
+  "incident",
+  "management_review",
+  "control_or_task_failure",
+  "customer_or_vendor_issue",
+  "other",
+]);
+
+export const IsmsRegistersControllerUpdateRowV1RootCauseCategory = {
+  ProcessNotDefined: "process_not_defined",
+  ProcessDefinedButNotFollowed: "process_defined_but_not_followed",
+  NoOwnerAssigned: "no_owner_assigned",
+  LackOfAwarenessOrTraining: "lack_of_awareness_or_training",
+  ToolingOrSystemGap: "tooling_or_system_gap",
+  ResourceConstraint: "resource_constraint",
+  OneOffHumanError: "one_off_human_error",
+} as const;
+export type IsmsRegistersControllerUpdateRowV1RootCauseCategory = ClosedEnum<
+  typeof IsmsRegistersControllerUpdateRowV1RootCauseCategory
+>;
+
+export const IsmsRegistersControllerUpdateRowV1RootCauseCategory$zodSchema = z
+  .enum([
+    "process_not_defined",
+    "process_defined_but_not_followed",
+    "no_owner_assigned",
+    "lack_of_awareness_or_training",
+    "tooling_or_system_gap",
+    "resource_constraint",
+    "one_off_human_error",
+  ]);
+
 export type IsmsRegistersControllerUpdateRowV1Attendee = {
   memberId: string;
   name: string;
@@ -305,18 +549,63 @@ export type IsmsRegistersControllerUpdateRowV1RequestBody = {
   whatItCovers?: string | undefined;
   discussionNotes?: string | null | undefined;
   discussed?: boolean | undefined;
+  what?: string | undefined;
+  audience?: IsmsRegistersControllerUpdateRowV1Audience | undefined;
+  recipients?: string | undefined;
+  ownerRoleKey?: string | null | undefined;
+  frequency?: IsmsRegistersControllerUpdateRowV1Frequency | undefined;
+  channel?: IsmsRegistersControllerUpdateRowV1Channel | undefined;
+  contactRef?: string | null | undefined;
+  evidenceRef?: string | undefined;
+  obligation?: string | undefined;
+  jurisdiction?: string | null | undefined;
+  howWeMeetIt?: string | null | undefined;
+  consequence?: string | null | undefined;
+  protects?: string | undefined;
+  managedIn?: string | undefined;
+  rotation?: IsmsRegistersControllerUpdateRowV1Rotation | undefined;
+  rotationNote?: string | null | undefined;
+  accessMemberId?: string | null | undefined;
+  accessRoleKey?: string | null | undefined;
+  accessText?: string | null | undefined;
+  purpose?: string | null | undefined;
+  vendorId?: string | null | undefined;
+  usedWhere?: IsmsRegistersControllerUpdateRowV1UsedWhere | null | undefined;
+  licence?: IsmsRegistersControllerUpdateRowV1Licence | null | undefined;
+  raisedAt?: string | undefined;
+  source?: IsmsRegistersControllerUpdateRowV1Source | undefined;
+  correction?: string | null | undefined;
+  rootCauseCategory?:
+    | IsmsRegistersControllerUpdateRowV1RootCauseCategory
+    | null
+    | undefined;
+  rootCause?: string | null | undefined;
+  correctiveAction?: string | null | undefined;
+  actionCompletedAt?: string | null | undefined;
+  verifiedByMemberId?: string | null | undefined;
+  verifiedAt?: string | null | undefined;
+  verificationCheck?: string | null | undefined;
   position?: number | undefined;
 };
 
 export const IsmsRegistersControllerUpdateRowV1RequestBody$zodSchema: z.ZodType<
   IsmsRegistersControllerUpdateRowV1RequestBody
 > = z.object({
+  accessMemberId: z.string().nullable().optional(),
+  accessRoleKey: z.string().nullable().optional().describe(
+    "ISMS role that holds the key when no member is named (e.g. spo)",
+  ),
+  accessText: z.string().nullable().optional().describe(
+    "Free-text access holder, for answers no picker can express (e.g. \"Each individual\")",
+  ),
+  actionCompletedAt: z.string().nullable().optional(),
   analyzeMemberId: z.string().nullable().optional(),
   attendees: z.array(
     z.lazy(() => IsmsRegistersControllerUpdateRowV1Attendee$zodSchema),
   ).optional().describe(
     "Attendees frozen at selection (members picked from People)",
   ),
+  audience: IsmsRegistersControllerUpdateRowV1Audience$zodSchema.optional(),
   auditCourse: z.string().nullable().optional(),
   auditDueDate: z.string().nullable().optional(),
   auditEvidenceRef: z.string().nullable().optional(),
@@ -335,14 +624,25 @@ export const IsmsRegistersControllerUpdateRowV1RequestBody$zodSchema: z.ZodType<
   category: z.string().optional(),
   chairName: z.string().nullable().optional(),
   changesText: z.string().nullable().optional(),
+  channel: IsmsRegistersControllerUpdateRowV1Channel$zodSchema.optional(),
   clauseOrControl: z.string().nullable().optional(),
   closureEvidence: z.string().nullable().optional(),
   conclusionNotes: z.string().nullable().optional(),
   conclusionVerdict:
     IsmsRegistersControllerUpdateRowV1ConclusionVerdict$zodSchema.nullable()
       .optional(),
+  consequence: z.string().nullable().optional(),
+  contactRef: z.string().nullable().optional().describe(
+    "External rows only: the body name, reporting route and any reference number (A.5.5)",
+  ),
   controlId: z.string().nullable().optional(),
   controlRef: z.string().optional(),
+  correction: z.string().nullable().optional().describe(
+    "The immediate fix, as opposed to the corrective action",
+  ),
+  correctiveAction: z.string().nullable().optional().describe(
+    "What stops the nonconformity recurring",
+  ),
   criteria: z.string().optional(),
   decisionsText: z.string().nullable().optional(),
   description: z.string().optional(),
@@ -350,12 +650,19 @@ export const IsmsRegistersControllerUpdateRowV1RequestBody$zodSchema: z.ZodType<
   discussionNotes: z.string().nullable().optional(),
   dueDate: z.string().nullable().optional(),
   effect: z.string().optional(),
+  evidenceRef: z.string().optional(),
   evidenceRetained: z.string().nullable().optional(),
+  frequency: IsmsRegistersControllerUpdateRowV1Frequency$zodSchema.optional(),
   gap: z.string().nullable().optional(),
+  howWeMeetIt: z.string().nullable().optional(),
   inputRef: z.string().optional(),
   interestedPartyId: z.string().optional(),
   isActive: z.boolean().optional(),
+  jurisdiction: z.string().nullable().optional(),
   kind: IsmsRegistersControllerUpdateRowV1Kind$zodSchema.optional(),
+  licence: IsmsRegistersControllerUpdateRowV1Licence$zodSchema.nullable()
+    .optional(),
+  managedIn: z.string().optional(),
   measurementMethod: z.string().optional(),
   meetingDate: z.string().nullable().optional(),
   memberId: z.string().optional(),
@@ -372,7 +679,11 @@ export const IsmsRegistersControllerUpdateRowV1RequestBody$zodSchema: z.ZodType<
   objectiveId: z.string().nullable().optional().describe(
     "Deprecated: objectives now take their numbers from a metric, not the reverse.",
   ),
+  obligation: z.string().optional(),
   ownerMemberId: z.string().optional(),
+  ownerRoleKey: z.string().nullable().optional().describe(
+    "ISMS role accountable when no member is assigned (e.g. spo, top_management, internal_auditor)",
+  ),
   partyName: z.string().optional(),
   periodStart: z.string().optional().describe(
     "First day of the covered period (YYYY-MM-DD), aligned to the metric cadence",
@@ -381,6 +692,12 @@ export const IsmsRegistersControllerUpdateRowV1RequestBody$zodSchema: z.ZodType<
   plannedEndDate: z.string().nullable().optional(),
   plannedStartDate: z.string().nullable().optional(),
   position: z.int().optional(),
+  protects: z.string().optional(),
+  purpose: z.string().nullable().optional(),
+  raisedAt: z.string().optional().describe(
+    "Date the entry was raised (YYYY-MM-DD); defaults to today",
+  ),
+  recipients: z.string().optional(),
   remediationAction: z.string().nullable().optional(),
   remediationDueDate: z.string().nullable().optional(),
   requiredCompetence: z.string().optional(),
@@ -390,6 +707,14 @@ export const IsmsRegistersControllerUpdateRowV1RequestBody$zodSchema: z.ZodType<
     .optional(),
   reviewId: z.string().optional(),
   roleId: z.string().optional(),
+  rootCause: z.string().nullable().optional(),
+  rootCauseCategory:
+    IsmsRegistersControllerUpdateRowV1RootCauseCategory$zodSchema.nullable()
+      .optional(),
+  rotation: IsmsRegistersControllerUpdateRowV1Rotation$zodSchema.optional(),
+  rotationNote: z.string().nullable().optional().describe(
+    "Only kept when rotation is not_rotated",
+  ),
   scope: z.string().optional(),
   signoffAuditorDate: z.string().nullable().optional(),
   signoffAuditorName: z.string().nullable().optional(),
@@ -399,6 +724,7 @@ export const IsmsRegistersControllerUpdateRowV1RequestBody$zodSchema: z.ZodType<
   signoffSpoName: z.string().nullable().optional(),
   signoffTopMgmtDate: z.string().nullable().optional(),
   signoffTopMgmtName: z.string().nullable().optional(),
+  source: IsmsRegistersControllerUpdateRowV1Source$zodSchema.optional(),
   status: IsmsRegistersControllerUpdateRowV1Status$zodSchema.optional(),
   target: z.string().optional(),
   targetDate: z.string().nullable().optional().describe(
@@ -414,7 +740,18 @@ export const IsmsRegistersControllerUpdateRowV1RequestBody$zodSchema: z.ZodType<
   treatment: z.string().optional(),
   type: IsmsRegistersControllerUpdateRowV1Type$zodSchema.optional(),
   unit: IsmsRegistersControllerUpdateRowV1Unit$zodSchema.nullable().optional(),
+  usedWhere: IsmsRegistersControllerUpdateRowV1UsedWhere$zodSchema.nullable()
+    .optional(),
   value: z.string().optional(),
+  vendorId: z.string().nullable().optional().describe(
+    "Links the row to a vendor; the name then renders live",
+  ),
+  verificationCheck: z.string().nullable().optional().describe(
+    "How effectiveness was confirmed",
+  ),
+  verifiedAt: z.string().nullable().optional(),
+  verifiedByMemberId: z.string().nullable().optional(),
+  what: z.string().optional(),
   whatIsMeasured: z.string().optional(),
   whatItCovers: z.string().optional(),
   whatWasTested: z.string().optional(),
@@ -422,7 +759,7 @@ export const IsmsRegistersControllerUpdateRowV1RequestBody$zodSchema: z.ZodType<
 }).describe("Register row fields (per-register; validated at runtime by zod)");
 
 export type IsmsRegistersControllerUpdateRowV1Request = {
-  register: string;
+  register: IsmsRegistersControllerUpdateRowV1Register;
   rowId: string;
   body: IsmsRegistersControllerUpdateRowV1RequestBody;
 };
@@ -434,6 +771,8 @@ export const IsmsRegistersControllerUpdateRowV1Request$zodSchema: z.ZodType<
     .describe(
       "Register row fields (per-register; validated at runtime by zod)",
     ),
-  register: z.string(),
+  register: IsmsRegistersControllerUpdateRowV1Register$zodSchema.describe(
+    "Which ISMS register the row belongs to.",
+  ),
   rowId: z.string(),
 });

package/src/models/peoplecontrollerdeletememberv1op.ts

@@ -27,14 +27,16 @@ export const PeopleControllerDeleteMemberV1AuthType$zodSchema = z.enum([
 
 export type PeopleControllerDeleteMemberV1Request = {
   id: string;
-  skipOffboarding: string;
+  skipOffboarding?: string | undefined;
 };
 
 export const PeopleControllerDeleteMemberV1Request$zodSchema: z.ZodType<
   PeopleControllerDeleteMemberV1Request
 > = z.object({
   id: z.string().describe("Member ID"),
-  skipOffboarding: z.string(),
+  skipOffboarding: z.string().describe(
+    "Pass true to delete without running the offboarding flow",
+  ).optional(),
 });
 
 /**

package/src/models/peoplecontrollergetallpeoplev1op.ts

@@ -30,21 +30,31 @@ export const PeopleControllerGetAllPeopleV1AuthType$zodSchema = z.enum([
 ]).describe("How the request was authenticated");
 
 export type PeopleControllerGetAllPeopleV1Request = {
-  includeDeactivated: string;
-  onboardAfter: string;
-  onboardBefore: string;
-  offboardAfter: string;
-  offboardBefore: string;
+  includeDeactivated?: string | undefined;
+  onboardAfter?: string | undefined;
+  onboardBefore?: string | undefined;
+  offboardAfter?: string | undefined;
+  offboardBefore?: string | undefined;
 };
 
 export const PeopleControllerGetAllPeopleV1Request$zodSchema: z.ZodType<
   PeopleControllerGetAllPeopleV1Request
 > = z.object({
-  includeDeactivated: z.string(),
-  offboardAfter: z.string(),
-  offboardBefore: z.string(),
-  onboardAfter: z.string(),
-  onboardBefore: z.string(),
+  includeDeactivated: z.string().describe(
+    "Pass true to include deactivated members",
+  ).optional(),
+  offboardAfter: z.string().describe(
+    "ISO date — only members offboarded on or after it",
+  ).optional(),
+  offboardBefore: z.string().describe(
+    "ISO date — only members offboarded on or before it",
+  ).optional(),
+  onboardAfter: z.string().describe(
+    "ISO date — only members onboarded on or after it",
+  ).optional(),
+  onboardBefore: z.string().describe(
+    "ISO date — only members onboarded on or before it",
+  ).optional(),
 });
 
 /**

package/src/models/policiescontrollerextractpolicydocumentv1op.ts

@@ -0,0 +1,25 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ * @generated-id: 4ddeee64390b
+ */
+
+import * as z from "zod";
+import {
+  RequestPolicyDocumentExtractionDto,
+  RequestPolicyDocumentExtractionDto$zodSchema,
+} from "./requestpolicydocumentextractiondto.js";
+
+export type PoliciesControllerExtractPolicyDocumentV1Request = {
+  xOrganizationId?: string | undefined;
+  id: string;
+  body?: RequestPolicyDocumentExtractionDto | undefined;
+};
+
+export const PoliciesControllerExtractPolicyDocumentV1Request$zodSchema:
+  z.ZodType<PoliciesControllerExtractPolicyDocumentV1Request> = z.object({
+    body: RequestPolicyDocumentExtractionDto$zodSchema.optional(),
+    id: z.string().describe("Policy ID"),
+    xOrganizationId: z.string().describe(
+      "Organization ID (required for session auth, optional for API key auth)",
+    ).optional(),
+  });

package/src/models/policiescontrollergetpolicycontrolsv1op.ts

@@ -4,6 +4,26 @@
  */
 
 import * as z from "zod";
+import { ClosedEnum } from "../types/enums.js";
+
+/**
+ * How the request was authenticated
+ */
+export const PoliciesControllerGetPolicyControlsV1AuthType = {
+  ApiKey: "api-key",
+  Session: "session",
+} as const;
+/**
+ * How the request was authenticated
+ */
+export type PoliciesControllerGetPolicyControlsV1AuthType = ClosedEnum<
+  typeof PoliciesControllerGetPolicyControlsV1AuthType
+>;
+
+export const PoliciesControllerGetPolicyControlsV1AuthType$zodSchema = z.enum([
+  "api-key",
+  "session",
+]).describe("How the request was authenticated");
 
 export type PoliciesControllerGetPolicyControlsV1Request = {
   xOrganizationId?: string | undefined;
@@ -18,3 +38,97 @@ export const PoliciesControllerGetPolicyControlsV1Request$zodSchema: z.ZodType<
     "Organization ID (required for session auth, optional for API key auth)",
   ).optional(),
 });
+
+export type MappedControlFramework = { id: string; name: string };
+
+export const MappedControlFramework$zodSchema: z.ZodType<
+  MappedControlFramework
+> = z.object({
+  id: z.string(),
+  name: z.string(),
+});
+
+export type MappedControl = {
+  id: string;
+  name: string;
+  description: string | null;
+  frameworks: Array<MappedControlFramework>;
+};
+
+export const MappedControl$zodSchema: z.ZodType<MappedControl> = z.object({
+  description: z.string().nullable(),
+  frameworks: z.array(z.lazy(() => MappedControlFramework$zodSchema)).describe(
+    "Frameworks (built-in or custom) this control is mapped to in the organization",
+  ),
+  id: z.string(),
+  name: z.string(),
+});
+
+export type AllControlFramework = { id: string; name: string };
+
+export const AllControlFramework$zodSchema: z.ZodType<AllControlFramework> = z
+  .object({
+    id: z.string(),
+    name: z.string(),
+  });
+
+export type AllControl = {
+  id: string;
+  name: string;
+  description: string | null;
+  frameworks: Array<AllControlFramework>;
+};
+
+export const AllControl$zodSchema: z.ZodType<AllControl> = z.object({
+  description: z.string().nullable(),
+  frameworks: z.array(z.lazy(() => AllControlFramework$zodSchema)).describe(
+    "Frameworks (built-in or custom) this control is mapped to in the organization",
+  ),
+  id: z.string(),
+  name: z.string(),
+});
+
+/**
+ * Authenticated user information (only present for session auth)
+ */
+export type PoliciesControllerGetPolicyControlsV1AuthenticatedUser = {
+  id?: string | undefined;
+  email?: string | undefined;
+};
+
+export const PoliciesControllerGetPolicyControlsV1AuthenticatedUser$zodSchema:
+  z.ZodType<PoliciesControllerGetPolicyControlsV1AuthenticatedUser> = z.object({
+    email: z.string().optional(),
+    id: z.string().optional(),
+  }).describe("Authenticated user information (only present for session auth)");
+
+/**
+ * Controls retrieved successfully
+ */
+export type PoliciesControllerGetPolicyControlsV1Response = {
+  mappedControls: Array<MappedControl>;
+  allControls: Array<AllControl>;
+  authType: PoliciesControllerGetPolicyControlsV1AuthType;
+  authenticatedUser?:
+    | PoliciesControllerGetPolicyControlsV1AuthenticatedUser
+    | undefined;
+};
+
+export const PoliciesControllerGetPolicyControlsV1Response$zodSchema: z.ZodType<
+  PoliciesControllerGetPolicyControlsV1Response
+> = z.object({
+  allControls: z.array(z.lazy(() => AllControl$zodSchema)).describe(
+    "Every control in the organization, so a client can offer the full mapping choice. Not a subset of the policy's controls.",
+  ),
+  authType: PoliciesControllerGetPolicyControlsV1AuthType$zodSchema.describe(
+    "How the request was authenticated",
+  ),
+  authenticatedUser: z.lazy(() =>
+    PoliciesControllerGetPolicyControlsV1AuthenticatedUser$zodSchema
+  ).optional().describe(
+    "Authenticated user information (only present for session auth)",
+  ),
+  mappedControls: z.array(z.lazy(() => MappedControl$zodSchema)).describe(
+    "Controls currently mapped to this policy",
+  ),
+}).describe("Controls retrieved successfully");