qati-sdk 1.0.0 → 1.0.2

package/dist/index.js

@@ -634,7 +634,7 @@ var TrustStateResource = class {
   /**
    * Fetches the latest trust state for one entity.
    *
-   * @param entityType - Lowercase entity class: `user`, `device`, `account`, `model`, `session`, or `service` (see {@link EntityTypeLowerCase}).
+   * @param entityType - Lowercase entity class (see {@link EntityTypeLowerCase}).
    * @param entityId - Id for the entity(Required)
    * @param options - Optional contributor limits/window.
    * @returns {@link TrustState} including `current_closure_score`, `risk_tier`, and `top_contributors`.
@@ -655,7 +655,7 @@ var TrustStateResource = class {
   /**
    * Fetches trust states for many entities in one request.
    *
-   * @param entityType - Lowercase entity class: `user`, `device`, `account`, `model`, `session`, or `service` (see {@link EntityTypeLowerCase}).
+   * @param entityType - Lowercase entity class (see {@link EntityTypeLowerCase}).
    * @param entityIds - Distinct ids to query. Prefer length ≤ 100 or the server may reject the request.
    * @param options - Optional contributor limits/window.
    * @returns Array of {@link TrustState} in server-defined order; empty array when `entityIds` is empty.
@@ -774,6 +774,9 @@ var Session = class {
     return new Client(this._config, httpClients ?? {});
   }
 };
+var fraction01 = () => z.number().min(0).max(1);
+var fraction01Nullable = () => fraction01().nullable().optional();
+var nonEmptyString = () => z.string().min(1);
 
 // src/shared/types/signal-type.ts
 var SIGNAL_TYPES = [
@@ -783,7 +786,16 @@ var SIGNAL_TYPES = [
   "SYSTEM_TELEMETRY",
   "MODEL_OUTPUT",
   "ANOMALY_FLAG",
-  "NETWORK_EVENT"
+  "NETWORK_EVENT",
+  "SESSION",
+  "PROMPT_INPUT",
+  "CONTEXT_INTEGRITY",
+  "TOOL_CALL",
+  "RAG_RETRIEVAL",
+  "POLICY_EVENT",
+  "USER_FEEDBACK",
+  "WORKFLOW_ACTION",
+  "API_CALL"
 ];
 
 // src/shared/types/provenance-mode.ts
@@ -810,8 +822,13 @@ var EventPrincipalSchema = z.object({
   device_id: z.string().min(1).optional(),
   session_id: z.string().min(1).optional(),
   model_id: z.string().min(1).optional(),
-  service_id: z.string().min(1).optional()
-});
+  service_id: z.string().min(1).optional(),
+  conversation_id: z.string().min(1).optional(),
+  document_id: z.string().min(1).optional(),
+  tool_id: z.string().min(1).optional(),
+  workflow_id: z.string().min(1).optional(),
+  api_key_id: z.string().min(1).optional()
+}).strict();
 
 // src/v1/schemas/raw-event.ts
 var BaseEventSchema = z.object({
@@ -832,103 +849,15 @@ var RawEventRequestSchema = z.object({
   payload: z.record(z.any()).describe("JSON payload (stored as JSONB in DB).")
 });
 
-// src/v1/schemas/signal-payload.ts
-var TransactionSignalPayloadSchema = z.object({
-  amount: z.number().nonnegative().default(0),
-  amount_minor: z.number().int().nonnegative().nullable().optional(),
-  amount_usd: z.number().nonnegative().nullable().optional(),
-  currency: z.string().nullable().optional(),
-  merchant_category: z.string().nullable().optional(),
-  merchant_id: z.string().nullable().optional(),
-  channel: z.string().nullable().optional(),
-  country: z.string().nullable().optional(),
-  velocity: z.number().nonnegative().nullable().optional(),
-  external_anomaly_score: z.number().nullable().optional(),
-  geo_distance: z.number().nonnegative().nullable().optional(),
-  geo_distance_km: z.number().nonnegative().nullable().optional(),
-  records_accessed: z.number().int().nonnegative().nullable().optional(),
-  baseline_records_accessed: z.number().int().nonnegative().nullable().optional(),
-  sensitivity_level: z.string().nullable().optional(),
-  export_count: z.number().int().nonnegative().nullable().optional(),
-  bulk_export: z.boolean().optional().default(false),
-  contains_phi: z.boolean().optional().default(false),
-  control_command: z.string().nullable().optional(),
-  authorized: z.boolean().nullable().optional(),
-  safety_critical: z.boolean().optional().default(false)
-});
-var AuthSignalPayloadSchema = z.object({
-  result: z.string().nullable().optional(),
-  auth_method: z.string().nullable().optional(),
-  mfa_used: z.boolean().nullable().optional(),
-  mfa_bypassed: z.boolean().optional().default(false),
-  failed_attempts: z.number().int().nonnegative().optional().default(0),
-  ip: z.string().nullable().optional(),
-  country: z.string().nullable().optional(),
-  user_agent: z.string().nullable().optional(),
-  unusual_location: z.boolean().optional().default(false),
-  after_hours_login: z.boolean().optional().default(false)
-});
-var ModelOutputSignalPayloadSchema = z.object({
-  missing_citations_rate: z.number().min(0).max(1).nullable().optional(),
-  citation_rate: z.number().min(0).max(1).nullable().optional(),
-  expected_citation_rate: z.number().min(0).max(1).nullable().optional(),
-  policy_violations: z.number().int().nonnegative().optional().default(0),
-  policy_violation_rate: z.number().min(0).max(1).nullable().optional(),
-  tool_call_inconsistency: z.number().min(0).max(1).optional().default(0),
-  tool_inconsistency_rate: z.number().min(0).max(1).nullable().optional(),
-  tool_miss_rate: z.number().min(0).max(1).nullable().optional(),
-  eval_window_n: z.number().int().min(1).nullable().optional()
-});
-var SystemTelemetrySignalPayloadSchema = z.object({
-  metric_name: z.string().nullable().optional(),
-  value: z.number().nullable().optional(),
-  baseline: z.number().nullable().optional(),
-  window_seconds: z.number().int().min(1).nullable().optional(),
-  error_rate: z.number().min(0).max(1).optional().default(0),
-  baseline_error_rate: z.number().min(0).max(1).nullable().optional(),
-  unusual_auth_rate: z.number().min(0).max(1).optional().default(0),
-  firmware_hash_changed: z.boolean().optional().default(false),
-  expected_hash_match: z.boolean().nullable().optional(),
-  sensor_deviation_score: z.number().min(0).max(1).nullable().optional()
-});
+// src/v1/schemas/anomaly-flag.ts
 var AnomalyFlagSignalPayloadSchema = z.object({
-  severity: z.number().min(0).max(1)
-});
-var BehaviorSignalPayloadSchema = z.object({
-  deviation_score: z.number().min(0).max(1)
-});
-var NetworkSignalPayloadSchema = z.object({
-  ip: z.string().nullable().optional(),
-  asn: z.string().nullable().optional(),
-  reputation_score: z.number().min(0).max(1).nullable().optional(),
-  threat_score: z.number().min(0).max(1).nullable().optional(),
-  is_datacenter: z.boolean().nullable().optional(),
-  is_untrusted_segment: z.boolean().optional().default(false),
-  asn_reputation: z.number().min(0).max(1).nullable().optional()
-});
-BaseEventSchema.extend({
-  signal_payload: TransactionSignalPayloadSchema
+  severity: fraction01()
 });
 BaseEventSchema.extend({
   signal_payload: AnomalyFlagSignalPayloadSchema
 });
-BaseEventSchema.extend({
-  signal_payload: AuthSignalPayloadSchema
-});
-BaseEventSchema.extend({
-  signal_payload: BehaviorSignalPayloadSchema
-});
-BaseEventSchema.extend({
-  signal_payload: NetworkSignalPayloadSchema
-});
-BaseEventSchema.extend({
-  signal_payload: ModelOutputSignalPayloadSchema
-});
-BaseEventSchema.extend({
-  signal_payload: SystemTelemetrySignalPayloadSchema
-});
 
-// src/v1/builders/event-builder.ts
+// src/v1/builders/_common.ts
 var buildRawEventPayload = (event, signalPayload, signalType) => {
   const rawEventPayload = {
     timestamp: event.timestamp,
@@ -954,36 +883,296 @@ var buildRawEventRequest = (event, signalPayload, signalType) => {
     payload: rawEventPayload
   };
 };
-var createAuthEvent = (event) => {
-  const signalPayload = AuthSignalPayloadSchema.parse(event.signal_payload);
-  return buildRawEventRequest(event, signalPayload, "AUTH");
-};
-function createTransactionEvent(event) {
-  const signalPayload = TransactionSignalPayloadSchema.parse(
-    event.signal_payload
-  );
-  return buildRawEventRequest(event, signalPayload, "TRANSACTION");
-}
+
+// src/v1/builders/anomaly-flag-builder.ts
 var createAnomalyFlagEvent = (event) => {
   const signalPayload = AnomalyFlagSignalPayloadSchema.parse(
     event.signal_payload
   );
   return buildRawEventRequest(event, signalPayload, "ANOMALY_FLAG");
 };
+
+// src/shared/types/http-method.ts
+var HTTP_METHODS = ["GET", "POST", "PUT", "PATCH", "DELETE"];
+
+// src/v1/schemas/api-call.ts
+var ApiCallSignalPayloadSchema = z.object({
+  service_id: nonEmptyString(),
+  endpoint: nonEmptyString(),
+  method: z.enum(HTTP_METHODS),
+  status_code: z.number().int().min(100).max(599),
+  authorized: z.boolean().nullable(),
+  authentication_present: z.boolean().nullable().optional(),
+  rate_limited: z.boolean().nullable().optional(),
+  external_side_effect: z.boolean().nullable().optional(),
+  records_returned: z.number().int().nonnegative().nullable().optional(),
+  records_modified: z.number().int().nonnegative().nullable().optional(),
+  contains_sensitive_data: z.boolean().nullable().optional(),
+  latency_ms: z.number().nonnegative().nullable().optional(),
+  retry_count: z.number().int().nonnegative().nullable().optional(),
+  api_key_id: z.string().nullable().optional()
+});
+BaseEventSchema.extend({
+  signal_payload: ApiCallSignalPayloadSchema
+});
+
+// src/v1/builders/api-call-builder.ts
+var createApiCallEvent = (event) => {
+  const signalPayload = ApiCallSignalPayloadSchema.parse(event.signal_payload);
+  return buildRawEventRequest(event, signalPayload, "API_CALL");
+};
+var AuthSignalPayloadSchema = z.object({
+  result: z.string().nullable().optional(),
+  auth_method: z.string().nullable().optional(),
+  mfa_used: z.boolean().nullable().optional(),
+  mfa_bypassed: z.boolean().optional().default(false),
+  failed_attempts: z.number().int().nonnegative().optional().default(0),
+  ip: z.string().nullable().optional(),
+  country: z.string().nullable().optional(),
+  user_agent: z.string().nullable().optional(),
+  unusual_location: z.boolean().optional().default(false),
+  after_hours_login: z.boolean().optional().default(false)
+});
+BaseEventSchema.extend({
+  signal_payload: AuthSignalPayloadSchema
+});
+
+// src/v1/builders/auth-builder.ts
+var createAuthEvent = (event) => {
+  const signalPayload = AuthSignalPayloadSchema.parse(event.signal_payload);
+  return buildRawEventRequest(event, signalPayload, "AUTH");
+};
+var BehaviorSignalPayloadSchema = z.object({
+  deviation_score: fraction01()
+});
+BaseEventSchema.extend({
+  signal_payload: BehaviorSignalPayloadSchema
+});
+
+// src/v1/builders/behavior-builder.ts
 var createBehaviorEvent = (event) => {
   const signalPayload = BehaviorSignalPayloadSchema.parse(event.signal_payload);
   return buildRawEventRequest(event, signalPayload, "BEHAVIOR");
 };
-var createNetworkEvent = (event) => {
-  const signalPayload = NetworkSignalPayloadSchema.parse(event.signal_payload);
-  return buildRawEventRequest(event, signalPayload, "NETWORK_EVENT");
+
+// src/shared/types/context-integrity.ts
+var CONTEXT_SOURCES = [
+  "CONVERSATION_HISTORY",
+  "RETRIEVED_DOCUMENT",
+  "TOOL_OUTPUT",
+  "SYSTEM",
+  "DEVELOPER",
+  "USER"
+];
+
+// src/v1/schemas/context-integrity.ts
+var ContextIntegritySignalPayloadSchema = z.object({
+  context_source: z.enum(CONTEXT_SOURCES),
+  instruction_conflict_detected: z.boolean(),
+  untrusted_instruction_detected: z.boolean(),
+  context_priority_violation: z.boolean(),
+  recursive_instruction_pattern: z.boolean().optional().default(false),
+  context_drift_score: fraction01Nullable(),
+  system_prompt_conflict_score: fraction01Nullable(),
+  developer_prompt_conflict_score: fraction01Nullable(),
+  retrieved_instruction_count: z.number().int().nonnegative().optional().default(0),
+  hidden_instruction_score: fraction01Nullable(),
+  source_document_id: z.string().nullable().optional(),
+  untrusted_source_count: z.number().int().nonnegative().optional().default(0),
+  source_trust_score: fraction01Nullable(),
+  lowest_source_trust_score: fraction01Nullable(),
+  recursive_pattern_score: fraction01Nullable(),
+  prompt_injection_score: fraction01Nullable(),
+  contains_instruction_override: z.boolean().optional().default(false),
+  context_injection_score: fraction01Nullable()
+});
+BaseEventSchema.extend({
+  signal_payload: ContextIntegritySignalPayloadSchema
+});
+
+// src/v1/builders/context-integrity-builder.ts
+var createContextIntegrityEvent = (event) => {
+  const signalPayload = ContextIntegritySignalPayloadSchema.parse(
+    event.signal_payload
+  );
+  return buildRawEventRequest(event, signalPayload, "CONTEXT_INTEGRITY");
 };
+var ModelOutputSignalPayloadSchema = z.object({
+  missing_citations_rate: fraction01Nullable(),
+  citation_rate: fraction01Nullable(),
+  expected_citation_rate: fraction01Nullable(),
+  policy_violations: z.number().int().nonnegative().optional().default(0),
+  policy_violation_rate: fraction01Nullable(),
+  tool_call_inconsistency: fraction01().optional().default(0),
+  tool_inconsistency_rate: fraction01Nullable(),
+  tool_miss_rate: fraction01Nullable(),
+  eval_window_n: z.number().int().min(1).nullable().optional(),
+  hallucination_risk_score: fraction01Nullable(),
+  self_contradiction_score: fraction01Nullable(),
+  grounding_score: fraction01Nullable(),
+  contains_unsupported_claims: z.boolean().optional().default(false)
+});
+BaseEventSchema.extend({
+  signal_payload: ModelOutputSignalPayloadSchema
+});
+
+// src/v1/builders/model-output-builder.ts
 var createModelOutputEvent = (event) => {
   const signalPayload = ModelOutputSignalPayloadSchema.parse(
     event.signal_payload
   );
   return buildRawEventRequest(event, signalPayload, "MODEL_OUTPUT");
 };
+var NetworkSignalPayloadSchema = z.object({
+  ip: z.string().nullable().optional(),
+  asn: z.string().nullable().optional(),
+  reputation_score: fraction01Nullable(),
+  threat_score: fraction01Nullable(),
+  is_datacenter: z.boolean().nullable().optional(),
+  is_untrusted_segment: z.boolean().optional().default(false),
+  asn_reputation: fraction01Nullable()
+});
+BaseEventSchema.extend({
+  signal_payload: NetworkSignalPayloadSchema
+});
+
+// src/v1/builders/network-builder.ts
+var createNetworkEvent = (event) => {
+  const signalPayload = NetworkSignalPayloadSchema.parse(event.signal_payload);
+  return buildRawEventRequest(event, signalPayload, "NETWORK_EVENT");
+};
+
+// src/shared/types/policy-event.ts
+var POLICY_CATEGORIES = [
+  "SAFETY",
+  "PRIVACY",
+  "SECURITY",
+  "COMPLIANCE",
+  "CONTENT",
+  "OTHER"
+];
+var POLICY_RESULTS = ["PASS", "WARN", "FAIL", "BLOCKED"];
+
+// src/v1/schemas/policy-event.ts
+var PolicyEventSignalPayloadSchema = z.object({
+  policy_check_name: nonEmptyString(),
+  policy_category: z.enum(POLICY_CATEGORIES),
+  policy_result: z.enum(POLICY_RESULTS),
+  severity: fraction01(),
+  blocked: z.boolean().optional().default(false),
+  violation_count: z.number().int().nonnegative().optional().default(0),
+  policy_confidence: fraction01Nullable(),
+  redaction_applied: z.boolean().optional().default(false)
+});
+BaseEventSchema.extend({
+  signal_payload: PolicyEventSignalPayloadSchema
+});
+
+// src/v1/builders/policy-event-builder.ts
+var createPolicyEvent = (event) => {
+  const signalPayload = PolicyEventSignalPayloadSchema.parse(
+    event.signal_payload
+  );
+  return buildRawEventRequest(event, signalPayload, "POLICY_EVENT");
+};
+var promptHashSchema = z.string().regex(/^[a-fA-F0-9]{64}$/).optional();
+var PromptInputSignalPayloadSchema = z.object({
+  prompt_length_chars: z.number().int().nonnegative(),
+  conversation_turn_index: z.number().int().nonnegative(),
+  contains_instruction_override: z.boolean(),
+  contains_tool_request: z.boolean().optional().default(false),
+  contains_secret_request: z.boolean().optional().default(false),
+  contains_policy_challenge: z.boolean().optional().default(false),
+  recursive_pattern_score: fraction01Nullable(),
+  prompt_injection_score: fraction01Nullable(),
+  sensitive_domain: z.boolean().optional().default(false),
+  complexity_score: fraction01Nullable(),
+  prompt_hash: promptHashSchema
+});
+BaseEventSchema.extend({
+  signal_payload: PromptInputSignalPayloadSchema
+});
+
+// src/v1/builders/prompt-input-builder.ts
+var createPromptInputEvent = (event) => {
+  const signalPayload = PromptInputSignalPayloadSchema.parse(
+    event.signal_payload
+  );
+  return buildRawEventRequest(event, signalPayload, "PROMPT_INPUT");
+};
+var RagRetrievalSignalPayloadSchema = z.object({
+  retriever_id: nonEmptyString(),
+  query_hash: z.string().nullable().optional(),
+  documents_retrieved: z.number().int().nonnegative(),
+  top_k: z.number().int().min(1),
+  average_relevance_score: fraction01(),
+  source_trust_score: fraction01(),
+  lowest_source_trust_score: fraction01Nullable(),
+  untrusted_source_count: z.number().int().nonnegative().optional().default(0),
+  retrieved_context_tokens: z.number().int().nonnegative().optional().default(0),
+  context_injection_score: fraction01().optional().default(0),
+  document_ids: z.array(z.string()).optional().default([])
+});
+BaseEventSchema.extend({
+  signal_payload: RagRetrievalSignalPayloadSchema
+});
+
+// src/v1/builders/rag-retrieval-builder.ts
+var createRagRetrievalEvent = (event) => {
+  const signalPayload = RagRetrievalSignalPayloadSchema.parse(
+    event.signal_payload
+  );
+  return buildRawEventRequest(event, signalPayload, "RAG_RETRIEVAL");
+};
+
+// src/shared/types/session.ts
+var SESSION_STATUSES = [
+  "STARTED",
+  "ACTIVE",
+  "ENDED",
+  "TIMEOUT",
+  "ABANDONED"
+];
+
+// src/v1/schemas/session.ts
+var SessionSignalPayloadSchema = z.object({
+  session_status: z.enum(SESSION_STATUSES),
+  session_age_seconds: z.number().nonnegative().optional().default(0),
+  turn_count: z.number().int().nonnegative().optional().default(0),
+  messages_last_minute: z.number().nonnegative().optional().default(0),
+  avg_seconds_between_turns: z.number().nonnegative().nullable().optional(),
+  restart_count_10m: z.number().int().nonnegative().optional().default(0),
+  session_timeout: z.boolean().optional().default(false),
+  abandoned: z.boolean().optional().default(false),
+  conversation_id: z.string().nullable().optional(),
+  user_id: z.string().nullable().optional()
+});
+BaseEventSchema.extend({
+  signal_payload: SessionSignalPayloadSchema
+});
+
+// src/v1/builders/session-builder.ts
+var createSessionEvent = (event) => {
+  const signalPayload = SessionSignalPayloadSchema.parse(event.signal_payload);
+  return buildRawEventRequest(event, signalPayload, "SESSION");
+};
+var SystemTelemetrySignalPayloadSchema = z.object({
+  metric_name: z.string().nullable().optional(),
+  value: z.number().nullable().optional(),
+  baseline: z.number().nullable().optional(),
+  window_seconds: z.number().int().min(1).nullable().optional(),
+  error_rate: fraction01().optional().default(0),
+  baseline_error_rate: fraction01Nullable(),
+  unusual_auth_rate: fraction01().optional().default(0),
+  firmware_hash_changed: z.boolean().optional().default(false),
+  expected_hash_match: z.boolean().nullable().optional(),
+  sensor_deviation_score: fraction01Nullable()
+});
+BaseEventSchema.extend({
+  signal_payload: SystemTelemetrySignalPayloadSchema
+});
+
+// src/v1/builders/system-telemetry-builder.ts
 var createSystemTelemetryEvent = (event) => {
   const signalPayload = SystemTelemetrySignalPayloadSchema.parse(
     event.signal_payload
@@ -991,6 +1180,172 @@ var createSystemTelemetryEvent = (event) => {
   return buildRawEventRequest(event, signalPayload, "SYSTEM_TELEMETRY");
 };
 
-export { API_REGISTRY, QatiAPIError, QatiAuthError, QatiConfigError, QatiNotFoundError, QatiRateLimitError, QatiSDKError, QatiServerError, RawEventRequestSchema, Session, baseUrlFor, createAnomalyFlagEvent, createAuthEvent, createBehaviorEvent, createModelOutputEvent, createNetworkEvent, createSystemTelemetryEvent, createTransactionEvent, parseQatiConfig, resolveQatiConfig };
+// src/shared/types/tool-call.ts
+var TOOL_CATEGORIES = [
+  "RETRIEVAL",
+  "DATABASE",
+  "PAYMENT",
+  "MESSAGING",
+  "CODE_EXECUTION",
+  "FILE",
+  "EXTERNAL_API",
+  "OTHER"
+];
+
+// src/v1/schemas/tool-call.ts
+var ToolCallSignalPayloadSchema = z.object({
+  tool_name: nonEmptyString(),
+  tool_category: z.enum(TOOL_CATEGORIES),
+  action: nonEmptyString(),
+  authorized: z.boolean().nullable(),
+  safety_critical: z.boolean(),
+  external_side_effect: z.boolean(),
+  tool_call_success: z.boolean().nullable().optional(),
+  latency_ms: z.number().nonnegative().nullable().optional(),
+  error_code: z.string().nullable().optional(),
+  argument_risk_score: fraction01Nullable(),
+  result_size_bytes: z.number().int().nonnegative().nullable().optional(),
+  records_accessed: z.number().int().nonnegative().optional().default(0),
+  contains_sensitive_data: z.boolean().optional().default(false),
+  action_category: z.string().nullable().optional(),
+  method: z.string().nullable().optional(),
+  sensitive_data_involved: z.boolean().optional().default(false),
+  contains_phi: z.boolean().optional().default(false),
+  sensitive_domain: z.boolean().optional().default(false)
+});
+BaseEventSchema.extend({
+  signal_payload: ToolCallSignalPayloadSchema
+});
+
+// src/v1/builders/tool-call-builder.ts
+var createToolCallEvent = (event) => {
+  const signalPayload = ToolCallSignalPayloadSchema.parse(event.signal_payload);
+  return buildRawEventRequest(event, signalPayload, "TOOL_CALL");
+};
+var TransactionSignalPayloadSchema = z.object({
+  amount: z.number().nonnegative().default(0),
+  amount_minor: z.number().int().nonnegative().nullable().optional(),
+  amount_usd: z.number().nonnegative().nullable().optional(),
+  currency: z.string().nullable().optional(),
+  merchant_category: z.string().nullable().optional(),
+  merchant_id: z.string().nullable().optional(),
+  channel: z.string().nullable().optional(),
+  country: z.string().nullable().optional(),
+  velocity: z.number().nonnegative().nullable().optional(),
+  external_anomaly_score: z.number().nullable().optional(),
+  geo_distance: z.number().nonnegative().nullable().optional(),
+  geo_distance_km: z.number().nonnegative().nullable().optional(),
+  records_accessed: z.number().int().nonnegative().nullable().optional(),
+  baseline_records_accessed: z.number().int().nonnegative().nullable().optional(),
+  sensitivity_level: z.string().nullable().optional(),
+  export_count: z.number().int().nonnegative().nullable().optional(),
+  bulk_export: z.boolean().optional().default(false),
+  contains_phi: z.boolean().optional().default(false),
+  control_command: z.string().nullable().optional(),
+  authorized: z.boolean().nullable().optional(),
+  safety_critical: z.boolean().optional().default(false)
+});
+BaseEventSchema.extend({
+  signal_payload: TransactionSignalPayloadSchema
+});
+
+// src/v1/builders/transaction-builder.ts
+var createTransactionEvent = (event) => {
+  const signalPayload = TransactionSignalPayloadSchema.parse(
+    event.signal_payload
+  );
+  return buildRawEventRequest(event, signalPayload, "TRANSACTION");
+};
+
+// src/shared/types/user-feedback.ts
+var FEEDBACK_TYPES = [
+  "THUMBS_UP",
+  "THUMBS_DOWN",
+  "REPORT",
+  "CORRECTION",
+  "RATING"
+];
+var FEEDBACK_ISSUE_TYPES = [
+  "HALLUCINATION",
+  "UNSAFE",
+  "IRRELEVANT",
+  "PRIVACY",
+  "OFFENSIVE",
+  "OTHER"
+];
+
+// src/v1/schemas/user-feedback.ts
+var UserFeedbackSignalPayloadSchema = z.object({
+  feedback_type: z.enum(FEEDBACK_TYPES),
+  rating: z.number().nullable().optional(),
+  reported_issue: z.boolean().optional().default(false),
+  issue_type: z.enum(FEEDBACK_ISSUE_TYPES).nullable().optional(),
+  severity: fraction01Nullable(),
+  response_id: z.string().nullable().optional(),
+  user_comment_hash: z.string().nullable().optional()
+});
+BaseEventSchema.extend({
+  signal_payload: UserFeedbackSignalPayloadSchema
+});
+
+// src/v1/builders/user-feedback-builder.ts
+var createUserFeedbackEvent = (event) => {
+  const signalPayload = UserFeedbackSignalPayloadSchema.parse(
+    event.signal_payload
+  );
+  return buildRawEventRequest(event, signalPayload, "USER_FEEDBACK");
+};
+
+// src/shared/types/workflow-action.ts
+var WORKFLOW_ACTION_CATEGORIES = [
+  "FINANCIAL",
+  "DATA_ACCESS",
+  "COMMUNICATION",
+  "ADMIN",
+  "SECURITY",
+  "CODE",
+  "OTHER"
+];
+var WORKFLOW_ACTION_STAGES = [
+  "PROPOSED",
+  "PRE_EXECUTION",
+  "EXECUTED",
+  "FAILED",
+  "ROLLED_BACK"
+];
+var WORKFLOW_ACTOR_TYPES = ["USER", "AI_AGENT", "SYSTEM"];
+
+// src/v1/schemas/workflow-action.ts
+var WorkflowActionSignalPayloadSchema = z.object({
+  workflow_id: nonEmptyString(),
+  workflow_type: nonEmptyString(),
+  action_name: nonEmptyString(),
+  action_category: z.enum(WORKFLOW_ACTION_CATEGORIES),
+  action_stage: z.enum(WORKFLOW_ACTION_STAGES),
+  actor_type: z.enum(WORKFLOW_ACTOR_TYPES),
+  requires_approval: z.boolean().optional().default(false),
+  approval_present: z.boolean().optional().default(false),
+  external_side_effect: z.boolean().nullable().optional(),
+  safety_critical: z.boolean().nullable().optional(),
+  amount_usd: z.number().nonnegative().nullable().optional(),
+  sensitive_data_involved: z.boolean().optional().default(false),
+  new_counterparty: z.boolean().optional().default(false),
+  is_new_vendor: z.boolean().optional().default(false),
+  is_new_recipient: z.boolean().optional().default(false),
+  is_new_endpoint: z.boolean().optional().default(false)
+});
+BaseEventSchema.extend({
+  signal_payload: WorkflowActionSignalPayloadSchema
+});
+
+// src/v1/builders/workflow-action-builder.ts
+var createWorkflowActionEvent = (event) => {
+  const signalPayload = WorkflowActionSignalPayloadSchema.parse(
+    event.signal_payload
+  );
+  return buildRawEventRequest(event, signalPayload, "WORKFLOW_ACTION");
+};
+
+export { API_REGISTRY, QatiAPIError, QatiAuthError, QatiConfigError, QatiNotFoundError, QatiRateLimitError, QatiSDKError, QatiServerError, RawEventRequestSchema, Session, baseUrlFor, createAnomalyFlagEvent, createApiCallEvent, createAuthEvent, createBehaviorEvent, createContextIntegrityEvent, createModelOutputEvent, createNetworkEvent, createPolicyEvent, createPromptInputEvent, createRagRetrievalEvent, createSessionEvent, createSystemTelemetryEvent, createToolCallEvent, createTransactionEvent, createUserFeedbackEvent, createWorkflowActionEvent, parseQatiConfig, resolveQatiConfig };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map