@trycompai/mcp-server 0.3.8 → 0.4.0

package/src/models/evidenceformscontrollerupdateformsettingv1op.ts

@@ -4,15 +4,78 @@
  */
 
 import * as z from "zod";
+import { ClosedEnum } from "../types/enums.js";
+
+/**
+ * Slug of the evidence form. Call `GET /v1/evidence-forms` to see every form with its title.
+ */
+export const EvidenceFormsControllerUpdateFormSettingV1FormType = {
+  BoardMeeting: "board-meeting",
+  ItLeadershipMeeting: "it-leadership-meeting",
+  RiskCommitteeMeeting: "risk-committee-meeting",
+  Meeting: "meeting",
+  AccessRequest: "access-request",
+  WhistleblowerReport: "whistleblower-report",
+  PenetrationTest: "penetration-test",
+  RbacMatrix: "rbac-matrix",
+  InfrastructureInventory: "infrastructure-inventory",
+  EmployeePerformanceEvaluation: "employee-performance-evaluation",
+  NetworkDiagram: "network-diagram",
+  TabletopExercise: "tabletop-exercise",
+  AccountTypes: "account-types",
+} as const;
+/**
+ * Slug of the evidence form. Call `GET /v1/evidence-forms` to see every form with its title.
+ */
+export type EvidenceFormsControllerUpdateFormSettingV1FormType = ClosedEnum<
+  typeof EvidenceFormsControllerUpdateFormSettingV1FormType
+>;
+
+export const EvidenceFormsControllerUpdateFormSettingV1FormType$zodSchema = z
+  .enum([
+    "board-meeting",
+    "it-leadership-meeting",
+    "risk-committee-meeting",
+    "meeting",
+    "access-request",
+    "whistleblower-report",
+    "penetration-test",
+    "rbac-matrix",
+    "infrastructure-inventory",
+    "employee-performance-evaluation",
+    "network-diagram",
+    "tabletop-exercise",
+    "account-types",
+  ]).describe(
+    "Slug of the evidence form. Call `GET /v1/evidence-forms` to see every form with its title.",
+  );
+
+export type EvidenceFormsControllerUpdateFormSettingV1RequestBody = {
+  isNotRelevant: boolean;
+};
+
+export const EvidenceFormsControllerUpdateFormSettingV1RequestBody$zodSchema:
+  z.ZodType<EvidenceFormsControllerUpdateFormSettingV1RequestBody> = z.object({
+    isNotRelevant: z.boolean().describe(
+      "True marks the form as not applicable to this organization, so it stops counting as missing evidence.",
+    ),
+  });
 
 export type EvidenceFormsControllerUpdateFormSettingV1Request = {
   xOrganizationId?: string | undefined;
-  formType: string;
+  formType: EvidenceFormsControllerUpdateFormSettingV1FormType;
+  body: EvidenceFormsControllerUpdateFormSettingV1RequestBody;
 };
 
 export const EvidenceFormsControllerUpdateFormSettingV1Request$zodSchema:
   z.ZodType<EvidenceFormsControllerUpdateFormSettingV1Request> = z.object({
-    formType: z.string(),
+    body: z.lazy(() =>
+      EvidenceFormsControllerUpdateFormSettingV1RequestBody$zodSchema
+    ),
+    formType: EvidenceFormsControllerUpdateFormSettingV1FormType$zodSchema
+      .describe(
+        "Slug of the evidence form. Call `GET /v1/evidence-forms` to see every form with its title.",
+      ),
     xOrganizationId: z.string().describe(
       "Organization ID (required for session auth, optional for API key auth)",
     ).optional(),

package/src/models/evidenceformscontrolleruploadfilev1op.ts

@@ -4,14 +4,91 @@
  */
 
 import * as z from "zod";
+import { ClosedEnum } from "../types/enums.js";
+
+/**
+ * Form the file belongs to.
+ */
+export const EvidenceFormsControllerUploadFileV1FormType = {
+  BoardMeeting: "board-meeting",
+  ItLeadershipMeeting: "it-leadership-meeting",
+  RiskCommitteeMeeting: "risk-committee-meeting",
+  Meeting: "meeting",
+  AccessRequest: "access-request",
+  WhistleblowerReport: "whistleblower-report",
+  PenetrationTest: "penetration-test",
+  RbacMatrix: "rbac-matrix",
+  InfrastructureInventory: "infrastructure-inventory",
+  EmployeePerformanceEvaluation: "employee-performance-evaluation",
+  NetworkDiagram: "network-diagram",
+  TabletopExercise: "tabletop-exercise",
+  AccountTypes: "account-types",
+} as const;
+/**
+ * Form the file belongs to.
+ */
+export type EvidenceFormsControllerUploadFileV1FormType = ClosedEnum<
+  typeof EvidenceFormsControllerUploadFileV1FormType
+>;
+
+export const EvidenceFormsControllerUploadFileV1FormType$zodSchema = z.enum([
+  "board-meeting",
+  "it-leadership-meeting",
+  "risk-committee-meeting",
+  "meeting",
+  "access-request",
+  "whistleblower-report",
+  "penetration-test",
+  "rbac-matrix",
+  "infrastructure-inventory",
+  "employee-performance-evaluation",
+  "network-diagram",
+  "tabletop-exercise",
+  "account-types",
+]).describe("Form the file belongs to.");
+
+/**
+ * A file for one `file` field of a form. Provide exactly one of `fileData` or `s3Key`. Returns the `{fileName, fileKey, downloadUrl}` object to put under that field key when submitting.
+ */
+export type EvidenceFormsControllerUploadFileV1RequestBody = {
+  formType: EvidenceFormsControllerUploadFileV1FormType;
+  fileName: string;
+  fileType: string;
+  fileData?: string | undefined;
+  s3Key?: string | undefined;
+};
+
+export const EvidenceFormsControllerUploadFileV1RequestBody$zodSchema:
+  z.ZodType<EvidenceFormsControllerUploadFileV1RequestBody> = z.object({
+    fileData: z.string().optional().describe(
+      "Base64-encoded file contents, for the web UI and direct callers. AI/MCP clients should upload via /v1/uploads/presign (purpose=evidence) and pass s3Key instead.",
+    ),
+    fileName: z.string().describe(
+      "Original file name, stored for display and download.",
+    ),
+    fileType: z.string().describe("MIME type of the file."),
+    formType: EvidenceFormsControllerUploadFileV1FormType$zodSchema.describe(
+      "Form the file belongs to.",
+    ),
+    s3Key: z.string().optional().describe(
+      "Key of a file already uploaded via /v1/uploads/presign (purpose=evidence). The server reads the bytes from storage, so no base64 travels through the client.",
+    ),
+  }).describe(
+    "A file for one `file` field of a form. Provide exactly one of `fileData` or `s3Key`. Returns the `{fileName, fileKey, downloadUrl}` object to put under that field key when submitting.",
+  );
 
 export type EvidenceFormsControllerUploadFileV1Request = {
   xOrganizationId?: string | undefined;
+  body: EvidenceFormsControllerUploadFileV1RequestBody;
 };
 
 export const EvidenceFormsControllerUploadFileV1Request$zodSchema: z.ZodType<
   EvidenceFormsControllerUploadFileV1Request
 > = z.object({
+  body: z.lazy(() => EvidenceFormsControllerUploadFileV1RequestBody$zodSchema)
+    .describe(
+      "A file for one `file` field of a form. Provide exactly one of `fileData` or `s3Key`. Returns the `{fileName, fileKey, downloadUrl}` object to put under that field key when submitting.",
+    ),
   xOrganizationId: z.string().describe(
     "Organization ID (required for session auth, optional for API key auth)",
   ).optional(),

package/src/models/evidenceformscontrolleruploadsubmissionv1op.ts

@@ -4,15 +4,95 @@
  */
 
 import * as z from "zod";
+import { ClosedEnum } from "../types/enums.js";
+
+/**
+ * Slug of the evidence form. Call `GET /v1/evidence-forms` to see every form with its title.
+ */
+export const EvidenceFormsControllerUploadSubmissionV1FormType = {
+  BoardMeeting: "board-meeting",
+  ItLeadershipMeeting: "it-leadership-meeting",
+  RiskCommitteeMeeting: "risk-committee-meeting",
+  Meeting: "meeting",
+  AccessRequest: "access-request",
+  WhistleblowerReport: "whistleblower-report",
+  PenetrationTest: "penetration-test",
+  RbacMatrix: "rbac-matrix",
+  InfrastructureInventory: "infrastructure-inventory",
+  EmployeePerformanceEvaluation: "employee-performance-evaluation",
+  NetworkDiagram: "network-diagram",
+  TabletopExercise: "tabletop-exercise",
+  AccountTypes: "account-types",
+} as const;
+/**
+ * Slug of the evidence form. Call `GET /v1/evidence-forms` to see every form with its title.
+ */
+export type EvidenceFormsControllerUploadSubmissionV1FormType = ClosedEnum<
+  typeof EvidenceFormsControllerUploadSubmissionV1FormType
+>;
+
+export const EvidenceFormsControllerUploadSubmissionV1FormType$zodSchema = z
+  .enum([
+    "board-meeting",
+    "it-leadership-meeting",
+    "risk-committee-meeting",
+    "meeting",
+    "access-request",
+    "whistleblower-report",
+    "penetration-test",
+    "rbac-matrix",
+    "infrastructure-inventory",
+    "employee-performance-evaluation",
+    "network-diagram",
+    "tabletop-exercise",
+    "account-types",
+  ]).describe(
+    "Slug of the evidence form. Call `GET /v1/evidence-forms` to see every form with its title.",
+  );
+
+/**
+ * The file to store as the submission. Provide exactly one of `fileData` or `s3Key`.
+ */
+export type EvidenceFormsControllerUploadSubmissionV1RequestBody = {
+  fileName: string;
+  fileType: string;
+  fileData?: string | undefined;
+  s3Key?: string | undefined;
+};
+
+export const EvidenceFormsControllerUploadSubmissionV1RequestBody$zodSchema:
+  z.ZodType<EvidenceFormsControllerUploadSubmissionV1RequestBody> = z.object({
+    fileData: z.string().optional().describe(
+      "Base64-encoded file contents, for the web UI and direct callers. AI/MCP clients should upload via /v1/uploads/presign (purpose=evidence) and pass s3Key instead.",
+    ),
+    fileName: z.string().describe(
+      "Original file name, stored for display and download.",
+    ),
+    fileType: z.string().describe("MIME type of the file."),
+    s3Key: z.string().optional().describe(
+      "Key of a file already uploaded via /v1/uploads/presign (purpose=evidence). The server reads the bytes from storage, so no base64 travels through the client.",
+    ),
+  }).describe(
+    "The file to store as the submission. Provide exactly one of `fileData` or `s3Key`.",
+  );
 
 export type EvidenceFormsControllerUploadSubmissionV1Request = {
   xOrganizationId?: string | undefined;
-  formType: string;
+  formType: EvidenceFormsControllerUploadSubmissionV1FormType;
+  body: EvidenceFormsControllerUploadSubmissionV1RequestBody;
 };
 
 export const EvidenceFormsControllerUploadSubmissionV1Request$zodSchema:
   z.ZodType<EvidenceFormsControllerUploadSubmissionV1Request> = z.object({
-    formType: z.string(),
+    body: z.lazy(() =>
+      EvidenceFormsControllerUploadSubmissionV1RequestBody$zodSchema
+    ).describe(
+      "The file to store as the submission. Provide exactly one of `fileData` or `s3Key`.",
+    ),
+    formType: EvidenceFormsControllerUploadSubmissionV1FormType$zodSchema
+      .describe(
+        "Slug of the evidence form. Call `GET /v1/evidence-forms` to see every form with its title.",
+      ),
     xOrganizationId: z.string().describe(
       "Organization ID (required for session auth, optional for API key auth)",
     ).optional(),

package/src/models/knowledgebasecontrollerdeletedocumentv1op.ts

@@ -5,11 +5,33 @@
 
 import * as z from "zod";
 
+/**
+ * No fields are required — the document comes from the path and the organization from your API key or session.
+ */
+export type KnowledgeBaseControllerDeleteDocumentV1RequestBody = {
+  organizationId?: string | undefined;
+};
+
+export const KnowledgeBaseControllerDeleteDocumentV1RequestBody$zodSchema:
+  z.ZodType<KnowledgeBaseControllerDeleteDocumentV1RequestBody> = z.object({
+    organizationId: z.string().optional().describe(
+      "Auto-resolved from your API key / session. You can omit this; the server ignores it and always uses the authenticated organization.",
+    ),
+  }).describe(
+    "No fields are required — the document comes from the path and the organization from your API key or session.",
+  );
+
 export type KnowledgeBaseControllerDeleteDocumentV1Request = {
   documentId: string;
+  body?: KnowledgeBaseControllerDeleteDocumentV1RequestBody | undefined;
 };
 
 export const KnowledgeBaseControllerDeleteDocumentV1Request$zodSchema:
   z.ZodType<KnowledgeBaseControllerDeleteDocumentV1Request> = z.object({
+    body: z.lazy(() =>
+      KnowledgeBaseControllerDeleteDocumentV1RequestBody$zodSchema
+    ).optional().describe(
+      "No fields are required — the document comes from the path and the organization from your API key or session.",
+    ),
     documentId: z.string(),
   });

package/src/models/knowledgebasecontrollergetdownloadurlv1op.ts

@@ -5,11 +5,33 @@
 
 import * as z from "zod";
 
+/**
+ * No fields are required — the document comes from the path and the organization from your API key or session.
+ */
+export type KnowledgeBaseControllerGetDownloadUrlV1RequestBody = {
+  organizationId?: string | undefined;
+};
+
+export const KnowledgeBaseControllerGetDownloadUrlV1RequestBody$zodSchema:
+  z.ZodType<KnowledgeBaseControllerGetDownloadUrlV1RequestBody> = z.object({
+    organizationId: z.string().optional().describe(
+      "Auto-resolved from your API key / session. You can omit this; the server ignores it and always uses the authenticated organization.",
+    ),
+  }).describe(
+    "No fields are required — the document comes from the path and the organization from your API key or session.",
+  );
+
 export type KnowledgeBaseControllerGetDownloadUrlV1Request = {
   documentId: string;
+  body?: KnowledgeBaseControllerGetDownloadUrlV1RequestBody | undefined;
 };
 
 export const KnowledgeBaseControllerGetDownloadUrlV1Request$zodSchema:
   z.ZodType<KnowledgeBaseControllerGetDownloadUrlV1Request> = z.object({
+    body: z.lazy(() =>
+      KnowledgeBaseControllerGetDownloadUrlV1RequestBody$zodSchema
+    ).optional().describe(
+      "No fields are required — the document comes from the path and the organization from your API key or session.",
+    ),
     documentId: z.string(),
   });

package/src/models/knowledgebasecontrollergetviewurlv1op.ts

@@ -5,10 +5,33 @@
 
 import * as z from "zod";
 
-export type KnowledgeBaseControllerGetViewUrlV1Request = { documentId: string };
+/**
+ * No fields are required — the document comes from the path and the organization from your API key or session.
+ */
+export type KnowledgeBaseControllerGetViewUrlV1RequestBody = {
+  organizationId?: string | undefined;
+};
+
+export const KnowledgeBaseControllerGetViewUrlV1RequestBody$zodSchema:
+  z.ZodType<KnowledgeBaseControllerGetViewUrlV1RequestBody> = z.object({
+    organizationId: z.string().optional().describe(
+      "Auto-resolved from your API key / session. You can omit this; the server ignores it and always uses the authenticated organization.",
+    ),
+  }).describe(
+    "No fields are required — the document comes from the path and the organization from your API key or session.",
+  );
+
+export type KnowledgeBaseControllerGetViewUrlV1Request = {
+  documentId: string;
+  body?: KnowledgeBaseControllerGetViewUrlV1RequestBody | undefined;
+};
 
 export const KnowledgeBaseControllerGetViewUrlV1Request$zodSchema: z.ZodType<
   KnowledgeBaseControllerGetViewUrlV1Request
 > = z.object({
+  body: z.lazy(() => KnowledgeBaseControllerGetViewUrlV1RequestBody$zodSchema)
+    .optional().describe(
+      "No fields are required — the document comes from the path and the organization from your API key or session.",
+    ),
   documentId: z.string(),
 });

package/src/models/offboardingchecklistcontrollerrevokevendoraccessv1op.ts

@@ -5,14 +5,47 @@
 
 import * as z from "zod";
 
+/**
+ * Optional notes and evidence for the revocation
+ */
+export type OffboardingChecklistControllerRevokeVendorAccessV1RequestBody = {
+  notes?: string | undefined;
+  fileName?: string | undefined;
+  fileType?: string | undefined;
+  fileData?: string | undefined;
+};
+
+export const OffboardingChecklistControllerRevokeVendorAccessV1RequestBody$zodSchema:
+  z.ZodType<OffboardingChecklistControllerRevokeVendorAccessV1RequestBody> = z
+    .object({
+      fileData: z.string().optional().describe(
+        "Base64-encoded evidence file contents.",
+      ),
+      fileName: z.string().optional().describe(
+        "Evidence file name. fileName, fileType and fileData must be sent together or all omitted.",
+      ),
+      fileType: z.string().optional().describe(
+        "MIME type of the evidence file.",
+      ),
+      notes: z.string().optional().describe(
+        "Free-text note stored with the revocation record.",
+      ),
+    }).describe("Optional notes and evidence for the revocation");
+
 export type OffboardingChecklistControllerRevokeVendorAccessV1Request = {
   memberId: string;
   vendorId: string;
+  body?:
+    | OffboardingChecklistControllerRevokeVendorAccessV1RequestBody
+    | undefined;
 };
 
 export const OffboardingChecklistControllerRevokeVendorAccessV1Request$zodSchema:
   z.ZodType<OffboardingChecklistControllerRevokeVendorAccessV1Request> = z
     .object({
+      body: z.lazy(() =>
+        OffboardingChecklistControllerRevokeVendorAccessV1RequestBody$zodSchema
+      ).optional().describe("Optional notes and evidence for the revocation"),
       memberId: z.string().describe("Member ID"),
       vendorId: z.string().describe("Vendor ID"),
     });

package/src/models/organizationcontrollercreateapikeyv1op.ts

@@ -0,0 +1,49 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ * @generated-id: f59325ab9aae
+ */
+
+import * as z from "zod";
+import { ClosedEnum } from "../types/enums.js";
+
+/**
+ * Lifetime of the key. Defaults to never expiring.
+ */
+export const ExpiresAt = {
+  Never: "never",
+  Thirtydays: "30days",
+  Ninetydays: "90days",
+  Oneyear: "1year",
+} as const;
+/**
+ * Lifetime of the key. Defaults to never expiring.
+ */
+export type ExpiresAt = ClosedEnum<typeof ExpiresAt>;
+
+export const ExpiresAt$zodSchema = z.enum([
+  "never",
+  "30days",
+  "90days",
+  "1year",
+]).describe("Lifetime of the key. Defaults to never expiring.");
+
+/**
+ * API key to create. The secret is returned once, on creation.
+ */
+export type OrganizationControllerCreateApiKeyV1Request = {
+  name: string;
+  expiresAt?: ExpiresAt | undefined;
+  scopes: Array<string>;
+};
+
+export const OrganizationControllerCreateApiKeyV1Request$zodSchema: z.ZodType<
+  OrganizationControllerCreateApiKeyV1Request
+> = z.object({
+  expiresAt: ExpiresAt$zodSchema.optional().describe(
+    "Lifetime of the key. Defaults to never expiring.",
+  ),
+  name: z.string().describe("Human-readable label for the key."),
+  scopes: z.array(z.string()).describe(
+    "Permission scopes to grant, as `resource:action` strings. At least one is required, and every entry is checked against the allowlist.",
+  ),
+}).describe("API key to create. The secret is returned once, on creation.");

package/src/models/organizationcontrollerrevokeapikeyv1op.ts

@@ -0,0 +1,17 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ * @generated-id: 84ed0880909e
+ */
+
+import * as z from "zod";
+
+/**
+ * API key to revoke
+ */
+export type OrganizationControllerRevokeApiKeyV1Request = { id: string };
+
+export const OrganizationControllerRevokeApiKeyV1Request$zodSchema: z.ZodType<
+  OrganizationControllerRevokeApiKeyV1Request
+> = z.object({
+  id: z.string().describe("ID of the key to revoke, from the API keys list."),
+}).describe("API key to revoke");

package/src/models/organizationcontrolleruploadlogov1op.ts

@@ -0,0 +1,25 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ * @generated-id: 72d2439b829e
+ */
+
+import * as z from "zod";
+
+/**
+ * Logo image to store for the organization
+ */
+export type OrganizationControllerUploadLogoV1Request = {
+  fileName: string;
+  fileType: string;
+  fileData: string;
+};
+
+export const OrganizationControllerUploadLogoV1Request$zodSchema: z.ZodType<
+  OrganizationControllerUploadLogoV1Request
+> = z.object({
+  fileData: z.string().describe("Base64-encoded image contents."),
+  fileName: z.string().describe(
+    "Original file name, stored for display and download.",
+  ),
+  fileType: z.string().describe("MIME type of the image."),
+}).describe("Logo image to store for the organization");

package/src/models/orgchartcontrollerupsertorgchartv1op.ts

@@ -4,14 +4,20 @@
  */
 
 import * as z from "zod";
+import {
+  UpsertOrgChartDto,
+  UpsertOrgChartDto$zodSchema,
+} from "./upsertorgchartdto.js";
 
 export type OrgChartControllerUpsertOrgChartV1Request = {
   xOrganizationId?: string | undefined;
+  body: UpsertOrgChartDto;
 };
 
 export const OrgChartControllerUpsertOrgChartV1Request$zodSchema: z.ZodType<
   OrgChartControllerUpsertOrgChartV1Request
 > = z.object({
+  body: UpsertOrgChartDto$zodSchema,
   xOrganizationId: z.string().describe(
     "Organization ID (required for session auth, optional for API key auth)",
   ).optional(),

package/src/models/policiescontrolleracceptpolicychangesv1op.ts

@@ -5,13 +5,35 @@
 
 import * as z from "zod";
 
+/**
+ * Approver accepting the pending changes
+ */
+export type PoliciesControllerAcceptPolicyChangesV1RequestBody = {
+  approverId: string;
+  comment?: string | undefined;
+};
+
+export const PoliciesControllerAcceptPolicyChangesV1RequestBody$zodSchema:
+  z.ZodType<PoliciesControllerAcceptPolicyChangesV1RequestBody> = z.object({
+    approverId: z.string().describe(
+      "Member ID of the approver recording the decision.",
+    ),
+    comment: z.string().optional().describe(
+      "Optional note stored with the approval.",
+    ),
+  }).describe("Approver accepting the pending changes");
+
 export type PoliciesControllerAcceptPolicyChangesV1Request = {
   xOrganizationId?: string | undefined;
   id: string;
+  body: PoliciesControllerAcceptPolicyChangesV1RequestBody;
 };
 
 export const PoliciesControllerAcceptPolicyChangesV1Request$zodSchema:
   z.ZodType<PoliciesControllerAcceptPolicyChangesV1Request> = z.object({
+    body: z.lazy(() =>
+      PoliciesControllerAcceptPolicyChangesV1RequestBody$zodSchema
+    ).describe("Approver accepting the pending changes"),
     id: z.string().describe("Policy ID"),
     xOrganizationId: z.string().describe(
       "Organization ID (required for session auth, optional for API key auth)",

package/src/models/policiescontrolleraddpolicycontrolsv1op.ts

@@ -5,14 +5,31 @@
 
 import * as z from "zod";
 
+/**
+ * Controls to map to the policy
+ */
+export type PoliciesControllerAddPolicyControlsV1RequestBody = {
+  controlIds: Array<string>;
+};
+
+export const PoliciesControllerAddPolicyControlsV1RequestBody$zodSchema:
+  z.ZodType<PoliciesControllerAddPolicyControlsV1RequestBody> = z.object({
+    controlIds: z.array(z.string()).describe(
+      "Control IDs to connect to this policy. Existing mappings are kept.",
+    ),
+  }).describe("Controls to map to the policy");
+
 export type PoliciesControllerAddPolicyControlsV1Request = {
   xOrganizationId?: string | undefined;
   id: string;
+  body: PoliciesControllerAddPolicyControlsV1RequestBody;
 };
 
 export const PoliciesControllerAddPolicyControlsV1Request$zodSchema: z.ZodType<
   PoliciesControllerAddPolicyControlsV1Request
 > = z.object({
+  body: z.lazy(() => PoliciesControllerAddPolicyControlsV1RequestBody$zodSchema)
+    .describe("Controls to map to the policy"),
   id: z.string().describe("Policy ID"),
   xOrganizationId: z.string().describe(
     "Organization ID (required for session auth, optional for API key auth)",

package/src/models/policiescontrollerdenypolicychangesv1op.ts

@@ -5,14 +5,35 @@
 
 import * as z from "zod";
 
+/**
+ * Approver rejecting the pending changes
+ */
+export type PoliciesControllerDenyPolicyChangesV1RequestBody = {
+  approverId: string;
+  comment?: string | undefined;
+};
+
+export const PoliciesControllerDenyPolicyChangesV1RequestBody$zodSchema:
+  z.ZodType<PoliciesControllerDenyPolicyChangesV1RequestBody> = z.object({
+    approverId: z.string().describe(
+      "Member ID of the approver recording the decision.",
+    ),
+    comment: z.string().optional().describe(
+      "Optional note explaining the rejection.",
+    ),
+  }).describe("Approver rejecting the pending changes");
+
 export type PoliciesControllerDenyPolicyChangesV1Request = {
   xOrganizationId?: string | undefined;
   id: string;
+  body: PoliciesControllerDenyPolicyChangesV1RequestBody;
 };
 
 export const PoliciesControllerDenyPolicyChangesV1Request$zodSchema: z.ZodType<
   PoliciesControllerDenyPolicyChangesV1Request
 > = z.object({
+  body: z.lazy(() => PoliciesControllerDenyPolicyChangesV1RequestBody$zodSchema)
+    .describe("Approver rejecting the pending changes"),
   id: z.string().describe("Policy ID"),
   xOrganizationId: z.string().describe(
     "Organization ID (required for session auth, optional for API key auth)",