qati-sdk 1.0.0

package/dist/index.d.ts

@@ -0,0 +1,2147 @@
+import { z } from 'zod';
+import { AxiosInstance, Method } from 'axios';
+
+/**
+ * Maps logical API names (used by {@link HttpClient}) to resolved config fields.
+ *
+ * @example
+ * ```ts
+ * const url = baseUrlFor(config, 'query_api');
+ * ```
+ */
+declare const API_REGISTRY: Readonly<Record<string, keyof QatiConfigOutput>>;
+/**
+ * Validated SDK configuration shape (camelCase).
+ *
+ * **Constraints** (Zod): `tenantApiKey` non-empty string; `queryApiBaseUrl` and
+ * `ingestionApiBaseUrl` required URLs (no defaults); `timeout` ≥ 1 second;
+ * `ingestionBatchSize` integer ≥ 1; `ingestionFlushIntervalSeconds` &gt; 0;
+ * `maxRetries` integer 1–10; retry backoff fields non-negative integers.
+ *
+ * **Defaults** when optional fields are omitted: `timeout` `30`, `ingestionBatchSize` `100`,
+ * `ingestionFlushIntervalSeconds` `5`, `retryBackoffInitialSeconds` `1`,
+ * `retryBackoffMaxSeconds` `30`, `retryJitterFraction` `0.1`, `maxRetries` `3`.
+ */
+declare const QatiConfigBase: z.ZodObject<{
+    tenantApiKey: z.ZodString;
+    queryApiBaseUrl: z.ZodString;
+    ingestionApiBaseUrl: z.ZodString;
+    timeout: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+    ingestionBatchSize: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+    ingestionFlushIntervalSeconds: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+    retryBackoffInitialSeconds: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+    retryBackoffMaxSeconds: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+    retryJitterFraction: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+    maxRetries: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+}, "strip", z.ZodTypeAny, {
+    tenantApiKey: string;
+    queryApiBaseUrl: string;
+    ingestionApiBaseUrl: string;
+    timeout: number;
+    ingestionBatchSize: number;
+    ingestionFlushIntervalSeconds: number;
+    retryBackoffInitialSeconds: number;
+    retryBackoffMaxSeconds: number;
+    retryJitterFraction: number;
+    maxRetries: number;
+}, {
+    tenantApiKey: string;
+    queryApiBaseUrl: string;
+    ingestionApiBaseUrl: string;
+    timeout?: number | undefined;
+    ingestionBatchSize?: number | undefined;
+    ingestionFlushIntervalSeconds?: number | undefined;
+    retryBackoffInitialSeconds?: number | undefined;
+    retryBackoffMaxSeconds?: number | undefined;
+    retryJitterFraction?: number | undefined;
+    maxRetries?: number | undefined;
+}>;
+/** Input to {@link resolveQatiConfig} / {@link parseQatiConfig} before defaults and coercion (Zod input type). */
+type QatiConfigInput = z.input<typeof QatiConfigBase>;
+/** Fully resolved, validated configuration returned by {@link resolveQatiConfig} and {@link Session#config}. */
+type QatiConfigOutput = z.output<typeof QatiConfigBase>;
+/**
+ * Resolves SDK configuration: loads `.env` from the working directory, merges `QATI_*` env reads
+ * (into camelCase), then explicit `input` (explicit fields win). Validates with Zod and applies
+ * defaults for optional fields only (not base URLs).
+ *
+ * @param input - Optional partial overrides (camelCase). Omitted keys fall back to `process.env` then Zod defaults
+ *   for optional fields only (base URLs must come from env or this object).
+ * @returns Validated {@link QatiConfigOutput}.
+ * @throws {@link QatiConfigError} When validation fails.
+ * @example
+ * ```ts
+ * const config = resolveQatiConfig({
+ *   tenantApiKey: process.env.QATI_TENANT_API_KEY!,
+ *   queryApiBaseUrl: 'http://localhost:8001',
+ *   ingestionApiBaseUrl: 'http://localhost:8000',
+ * });
+ * ```
+ */
+declare const resolveQatiConfig: (input?: Partial<QatiConfigInput>) => QatiConfigOutput;
+/**
+ * Validates a config object only (no `.env` load, no process env merge). Use in unit tests or when
+ * configuration is already assembled in memory.
+ *
+ * @param input - Full or partial config; must include required fields (`tenantApiKey`, both base URLs) or
+ *   combine with Zod defaults only for optional numeric/batch fields.
+ * @returns Validated {@link QatiConfigOutput}.
+ * @throws {@link QatiConfigError} When validation fails.
+ */
+declare const parseQatiConfig: (input: z.input<typeof QatiConfigBase>) => QatiConfigOutput;
+/**
+ * Returns the normalized base URL (no trailing slash) for a logical API registered in {@link API_REGISTRY}.
+ *
+ * @param config - Resolved SDK configuration.
+ * @param apiName - Logical name: `query_api` or `ingestion_api`.
+ * @returns Absolute base URL string without a trailing `/`.
+ * @throws {@link QatiConfigError} If `apiName` is unknown or the mapped URL field is missing.
+ * @example
+ * ```ts
+ * const base = baseUrlFor(session.config, 'ingestion_api');
+ * ```
+ */
+declare const baseUrlFor: (config: QatiConfigOutput, apiName: string) => string;
+
+/**
+ * Structured error detail parsed from failed QATI HTTP responses (and synthetic transport failures).
+ */
+interface APIErrorDetail {
+    readonly status_code: number;
+    readonly message: string;
+    readonly request_id: string | null;
+}
+/**
+ * Base class for every error raised by this SDK (configuration, transport, and API errors).
+ *
+ * @param message - Human-readable description.
+ * @param options - Optional `cause` and other `Error` options.
+ */
+declare class QatiSDKError extends Error {
+    constructor(message: string, options?: ErrorOptions);
+}
+/**
+ * Generic API or transport failure with structured {@link APIErrorDetail}.
+ * Prefer catching specific subclasses when handling status codes.
+ *
+ * @param detail - Parsed status, message, and request id.
+ */
+declare class QatiAPIError extends QatiSDKError {
+    readonly detail: APIErrorDetail;
+    constructor(detail: APIErrorDetail);
+    /**
+     * @returns Same as `detail.status_code`.
+     */
+    get status_code(): number;
+    /**
+     * @returns Same as `detail.request_id`.
+     */
+    get request_id(): string | null;
+}
+/** Thrown for HTTP `401` / `403` — invalid, expired, or missing tenant API key. */
+declare class QatiAuthError extends QatiAPIError {
+    constructor(detail: APIErrorDetail);
+}
+/** Thrown for HTTP `404` — entity, explain payload, or route target does not exist. */
+declare class QatiNotFoundError extends QatiAPIError {
+    constructor(detail: APIErrorDetail);
+}
+/** Thrown for HTTP `429` — rate limited; safe to retry with backoff. */
+declare class QatiRateLimitError extends QatiAPIError {
+    constructor(detail: APIErrorDetail);
+}
+/** Thrown for HTTP `5xx` — server-side failure; retry may succeed after backoff. */
+declare class QatiServerError extends QatiAPIError {
+    constructor(detail: APIErrorDetail);
+}
+/**
+ * Raised when configuration or client setup is invalid (unknown API name, bad URL, Zod parse failure, …).
+ *
+ * @param message - Validation or resolution error text.
+ */
+declare class QatiConfigError extends QatiSDKError {
+    constructor(message: string, options?: ErrorOptions);
+}
+
+/**
+ * Called once after retries are exhausted for a retried request (`options.retry` was `true`).
+ * Use for logging, DLQ, or metrics; must not throw (errors are swallowed and logged).
+ *
+ * @param payload - The JSON/body that was sent (same as `options.json ?? options.data`).
+ * @param error - The SDK error instance thrown to the caller (typically `QatiAPIError`).
+ */
+type DeadLetterCallback = (payload: unknown, error: unknown) => void;
+
+type RegisteredApiName = keyof typeof API_REGISTRY;
+type AxiosInstances = Partial<Record<RegisteredApiName, AxiosInstance>>;
+type RequestOptions = {
+    api_name: RegisteredApiName;
+    deadLetterCallback?: DeadLetterCallback;
+    params?: Record<string, string | number | boolean | undefined | null>;
+    headers?: Record<string, string>;
+    extraHeaders?: Record<string, string>;
+    retry?: boolean;
+    /** JSON request body (serialized by axios). Separate from response type param {@link HttpClient.request}. */
+    data?: unknown;
+};
+/**
+ * Low-level HTTP layer: one `axios` instance per registered API, tenant header injection, and optional retries.
+ * Prefer the exported `Client` class for application code.
+ */
+declare class HttpClient {
+    private readonly _config;
+    private readonly _httpClients;
+    constructor(config: QatiConfigOutput, axiosInstances?: AxiosInstances);
+    private createClient;
+    /**
+     * @returns The same configuration used to build base URLs, timeouts, and default headers.
+     */
+    get config(): QatiConfigOutput;
+    /**
+     * Returns the underlying `axios` instance for a logical API.
+     *
+     * @param apiName - `query_api` or `ingestion_api`.
+     * @returns Configured `AxiosInstance` for that API.
+     * @throws {@link QatiConfigError} If the internal client map has no entry for `apiName`.
+     */
+    getClient(apiName: RegisteredApiName): AxiosInstance;
+    /**
+     * Performs one HTTP request and returns the **unwrapped** `data` field from the QATI `{ data: T }` envelope.
+     *
+     * @typeParam T - Response payload type inside the API envelope.
+     * @param method - HTTP verb (e.g. `GET`, `POST`).
+     * @param url - Path relative to the API base URL (may include query string; prefer `options.params` for queries).
+     * @param options - `api_name` selects which base URL and client to use. Set `retry: true` to retry transient failures.
+     * @returns Parsed `T` from `response.data.data` (not the full `ApiResponse` wrapper).
+     * @throws `QatiAPIError` or subclasses (`QatiAuthError`, `QatiNotFoundError`, …) on HTTP failures; on transport exhaustion when `retry` is `true`, after optional dead-letter callback.
+     *
+     * When `options.retry` is `true`, retries `429`, `5xx`, and transport errors up to `maxRetries` from config;
+     * other `4xx` are not retried. When `retry` is `false` or omitted, a single attempt is made.
+     */
+    request<T>(method: Method, url: string, options: RequestOptions): Promise<T>;
+    private retryRequest;
+}
+
+declare const ADVISORY_TYPES: readonly ["DRIFT_WARNING", "ANOMALY_CLUSTER", "CONFIDENCE_COLLAPSE", "MODEL_INSTABILITY", "RAPID_ESCALATION_NEW_DEVICE", "RAPID_ESCALATION_EXISTING_ENTITY", "SUSTAINED_DEGRADATION", "SINGLE_EVENT_SPIKE", "CAUSAL_INSTABILITY_PROPAGATION", "DOMINANT_UPSTREAM_DEPENDENCY", "IDENTITY_CONTEXT_MISMATCH", "RECOVERY_IN_PROGRESS"];
+/**
+ * Exhaustive set of advisory `type` values accepted by the Query API filters and payloads.
+ */
+type AdvisoryType = (typeof ADVISORY_TYPES)[number];
+
+declare const ADVISORY_SEVERITIES: readonly ["LOW", "ELEVATED", "HIGH", "CRITICAL"];
+/**
+ * Allowed persisted advisory severity tiers (aligned with Query API enums).
+ */
+type AdvisorySeverity = (typeof ADVISORY_SEVERITIES)[number];
+
+/**
+ * Structured proof payload attached to a persisted advisory (explainability / audit).
+ */
+type ExplanationTrace = {
+    /** Human-readable summary of why the advisory fired. */
+    message: string;
+    /** Event ids and reason codes ranked by contribution to the advisory (opaque ids, not necessarily UUIDs). */
+    top_contributing_events: string[];
+    /** Deterministic conditions and signal values that satisfied selection rules (arbitrary JSON shape). */
+    triggering_conditions: Record<string, unknown>;
+    /** Neighbour `entity_key` values implicated in graph / causal instability. */
+    dominant_neighbors: string[];
+    /** Numeric engine deltas (e.g. closure score, momentum) at evaluation time. */
+    state_deltas: Record<string, number>;
+};
+/**
+ * Suggested follow-up for operators or automation (non-blocking).
+ */
+type RecommendedAction = {
+    /** Template-rendered diagnostic message for the identified risk pattern. */
+    message: string;
+    /** Machine-readable tags (routing, ticketing, policy ids, …). */
+    machine_readable_tags: string[];
+};
+/**
+ * One persisted advisory row returned by the Query API.
+ */
+type AdvisoryResponse = {
+    /**
+     * Stable advisory identifier (opaque string; treat as unique per tenant).
+     * **Constraint:** format is server-defined; often a UUID but not guaranteed by this SDK.
+     */
+    advisory_id: string;
+    /**
+     * Scoped entity key (`TYPE:id`, uppercase type prefix).
+     */
+    entity_key: string;
+    /** Deterministic advisory classification (see {@link AdvisoryType}). */
+    type: AdvisoryType;
+    /** Severity tier, or `null` when the engine did not assign a tier. */
+    severity: AdvisorySeverity | null;
+    /** Evidence and graph/context payload for reviewers. */
+    explanation_trace: ExplanationTrace;
+    /** Ordered remediation hints, or `null` when none were persisted. */
+    recommended_actions: RecommendedAction[] | null;
+    /** Wall-clock time the advisory conditions were first met (parsed as `Date` by the client if applicable). */
+    triggered_at: Date;
+    /** Resolution time when inactive; `null` while the advisory is still active. */
+    resolved_at: Date | null;
+};
+/**
+ * Paginated list payload for `GET /v1/advisories` (Query API).
+ */
+type AdvisoryListResponse = {
+    /** Current page of advisories (may be shorter than `limit` on the last page). */
+    advisories: AdvisoryResponse[];
+    /** Total rows matching the query independent of pagination. */
+    total_count: number;
+    /** Echo of the requested page size (server may clamp). */
+    limit: number;
+    /** Echo of the requested offset. */
+    offset: number;
+};
+
+/**
+ * Optional filters and pagination for {@link AdvisoryResource#listAdvisories}.
+ *
+ * **Constraints:** `limit` is forwarded to the API and should not exceed 500 unless the server contract changes.
+ */
+type ListAdvisoriesOptions = {
+    /**
+     * Maximum rows to return (server may cap). Prefer ≤ 500.
+     * @default When omitted, the API default applies.
+     */
+    limit?: number;
+    /**
+     * Zero-based row offset for pagination.
+     * @default When omitted, the API default applies.
+     */
+    offset?: number;
+    /**
+     * Inclusive lower bound on `triggered_at` (ISO-8601 string or `Date`).
+     */
+    since?: Date | string;
+    /**
+     * Inclusive upper bound on `triggered_at` (ISO-8601 string or `Date`).
+     */
+    until?: Date | string;
+};
+/**
+ * Query API: list persisted advisories for a tenant-scoped entity.
+ */
+declare class AdvisoryResource {
+    private readonly _http;
+    private readonly apiName;
+    constructor(_http: HttpClient);
+    /**
+     * Lists persisted advisories for the tenant (`GET /v1/advisories`).
+     *
+     * @param entityKey - Scoped entity key: uppercase type, colon, opaque id (e.g. `USER:20`). Must match server expectations for entity keys.
+     * @param advisoryType - Filter by advisory `type` (see {@link AdvisoryType}).
+     * @param severity - Filter by `severity` tier (see {@link AdvisorySeverity}).
+     * @param options - Optional time range and pagination ({@link ListAdvisoriesOptions}).
+     * @returns: {@link AdvisoryListResponse} including `total_count`, `limit`, and `offset` echo from the API.
+     * ```
+     */
+    listAdvisories(entityKey: string, advisoryType: AdvisoryType, severity: AdvisorySeverity, options?: ListAdvisoriesOptions): Promise<AdvisoryListResponse>;
+}
+
+/**
+ * Zod schemas for v1 ingestion envelopes: strongly typed `BaseEvent` and wire-format `RawEventRequest`.
+ */
+
+/**
+ * Full typed signal envelope before wrapping as a `RawEventRequest` (`signal_version`, `signal_type`, `principal`, …).
+ *
+ * **Constraints:** `confidence_hint` in `[0, 1]` when set; `timestamp` ISO-8601 when provided.
+ */
+declare const BaseEventSchema: z.ZodObject<{
+    tenant_id: z.ZodString;
+    signal_version: z.ZodString;
+    signal_type: z.ZodEnum<["TRANSACTION", "AUTH", "BEHAVIOR", "SYSTEM_TELEMETRY", "MODEL_OUTPUT", "ANOMALY_FLAG", "NETWORK_EVENT"]>;
+    signal_payload: z.ZodRecord<z.ZodString, z.ZodAny>;
+    principal: z.ZodObject<{
+        user_id: z.ZodOptional<z.ZodString>;
+        account_id: z.ZodOptional<z.ZodString>;
+        device_id: z.ZodOptional<z.ZodString>;
+        session_id: z.ZodOptional<z.ZodString>;
+        model_id: z.ZodOptional<z.ZodString>;
+        service_id: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        user_id?: string | undefined;
+        account_id?: string | undefined;
+        device_id?: string | undefined;
+        session_id?: string | undefined;
+        model_id?: string | undefined;
+        service_id?: string | undefined;
+    }, {
+        user_id?: string | undefined;
+        account_id?: string | undefined;
+        device_id?: string | undefined;
+        session_id?: string | undefined;
+        model_id?: string | undefined;
+        service_id?: string | undefined;
+    }>;
+    timestamp: z.ZodOptional<z.ZodDefault<z.ZodString>>;
+    confidence_hint: z.ZodOptional<z.ZodNumber>;
+    provenance: z.ZodOptional<z.ZodObject<{
+        mode: z.ZodOptional<z.ZodEnum<["DETERMINISTIC", "EXTERNAL_RNG", "ATTESTED"]>>;
+        source_id: z.ZodOptional<z.ZodString>;
+        epoch_counter: z.ZodOptional<z.ZodNumber>;
+        health_summary: z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodRecord<z.ZodString, z.ZodUnknown>]>>;
+    }, "strip", z.ZodTypeAny, {
+        mode?: "DETERMINISTIC" | "EXTERNAL_RNG" | "ATTESTED" | undefined;
+        source_id?: string | undefined;
+        epoch_counter?: number | undefined;
+        health_summary?: string | Record<string, unknown> | undefined;
+    }, {
+        mode?: "DETERMINISTIC" | "EXTERNAL_RNG" | "ATTESTED" | undefined;
+        source_id?: string | undefined;
+        epoch_counter?: number | undefined;
+        health_summary?: string | Record<string, unknown> | undefined;
+    }>>;
+    integrity: z.ZodOptional<z.ZodObject<{
+        hash: z.ZodOptional<z.ZodString>;
+        signature: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        hash?: string | undefined;
+        signature?: string | undefined;
+    }, {
+        hash?: string | undefined;
+        signature?: string | undefined;
+    }>>;
+}, "strip", z.ZodTypeAny, {
+    tenant_id: string;
+    signal_version: string;
+    signal_type: "TRANSACTION" | "AUTH" | "BEHAVIOR" | "SYSTEM_TELEMETRY" | "MODEL_OUTPUT" | "ANOMALY_FLAG" | "NETWORK_EVENT";
+    signal_payload: Record<string, any>;
+    principal: {
+        user_id?: string | undefined;
+        account_id?: string | undefined;
+        device_id?: string | undefined;
+        session_id?: string | undefined;
+        model_id?: string | undefined;
+        service_id?: string | undefined;
+    };
+    integrity?: {
+        hash?: string | undefined;
+        signature?: string | undefined;
+    } | undefined;
+    timestamp?: string | undefined;
+    confidence_hint?: number | undefined;
+    provenance?: {
+        mode?: "DETERMINISTIC" | "EXTERNAL_RNG" | "ATTESTED" | undefined;
+        source_id?: string | undefined;
+        epoch_counter?: number | undefined;
+        health_summary?: string | Record<string, unknown> | undefined;
+    } | undefined;
+}, {
+    tenant_id: string;
+    signal_version: string;
+    signal_type: "TRANSACTION" | "AUTH" | "BEHAVIOR" | "SYSTEM_TELEMETRY" | "MODEL_OUTPUT" | "ANOMALY_FLAG" | "NETWORK_EVENT";
+    signal_payload: Record<string, any>;
+    principal: {
+        user_id?: string | undefined;
+        account_id?: string | undefined;
+        device_id?: string | undefined;
+        session_id?: string | undefined;
+        model_id?: string | undefined;
+        service_id?: string | undefined;
+    };
+    integrity?: {
+        hash?: string | undefined;
+        signature?: string | undefined;
+    } | undefined;
+    timestamp?: string | undefined;
+    confidence_hint?: number | undefined;
+    provenance?: {
+        mode?: "DETERMINISTIC" | "EXTERNAL_RNG" | "ATTESTED" | undefined;
+        source_id?: string | undefined;
+        epoch_counter?: number | undefined;
+        health_summary?: string | Record<string, unknown> | undefined;
+    } | undefined;
+}>;
+/**
+ * HTTP / SDK ingestion body: `tenant_id` + JSON `payload` (API assigns persisted raw-event id).
+ */
+declare const RawEventRequestSchema: z.ZodObject<{
+    tenant_id: z.ZodString;
+    payload: z.ZodRecord<z.ZodString, z.ZodAny>;
+}, "strip", z.ZodTypeAny, {
+    tenant_id: string;
+    payload: Record<string, any>;
+}, {
+    tenant_id: string;
+    payload: Record<string, any>;
+}>;
+/** Typed HTTP ingestion body. */
+type RawEventRequest = z.infer<typeof RawEventRequestSchema>;
+/** Typed v1 envelope inside `RawEventRequest.payload` when using signal builders. */
+type BaseEvent = z.infer<typeof BaseEventSchema>;
+
+type SDKQueueEventStatus = 'queued';
+
+/**
+ * Overrides for the in-memory ingestion buffer (defaults otherwise come from: {@link HttpClient}'s
+ * resolved config: `ingestionBatchSize`, `ingestionFlushIntervalSeconds`).
+ */
+type EventResourceOptions = {
+    /**
+     * Max events to hold before an automatic flush to `POST /v1/events:batch` (must be integer ≥ 1).
+     */
+    batchSize?: number;
+    /**
+     * Max seconds to wait after the first queued event before flushing a non-empty partial batch (must be ≥ 0 per buffer schema).
+     */
+    flushIntervalSeconds?: number;
+};
+/**
+ * **Append-only ingestion path**: queues {@link RawEventRequest} rows locally and ships them in batches to `POST /v1/events:batch`,
+ * keeping the hot path non-blocking in your service. The platform persists telemetry for downstream scoring;
+ * this client does **not** enforce policies or block traffic.
+ *
+ * Flushes happen when the buffer hits **N** events or **T** seconds pass since the first queued item (whichever comes first).
+ * Failed batches retry with backoff + jitter; after exhaustion an optional dead-letter callback can persist or alert without crashing the producer’s enqueue loop.
+ */
+declare class EventResource {
+    private readonly _http;
+    private readonly _buffer;
+    private readonly apiName;
+    private _deadLetterCallback?;
+    /**
+     * @param http - Shared HTTP client (supplies config defaults and axios instance for `ingestion_api`).
+     * @param options - Optional buffer sizing overrides ({@link EventResourceOptions}).
+     */
+    constructor(http: HttpClient, options?: EventResourceOptions);
+    /**
+     * Registers a hook invoked after retries are exhausted for a failed batch POST so you can land failures on a DLQ or metric pipeline. Must stay non-throwing — swallow errors inside your handler.
+     */
+    onIngestionFailure(callback: DeadLetterCallback): this;
+    /**
+     * Accepts one normalized event into the in-memory buffer and returns immediately with **`queued`** — HTTP happens on flush timers or explicit `flush`, not inline with `enqueue`.
+     */
+    enqueue(event: RawEventRequest): Promise<SDKQueueEventStatus>;
+    /**
+     * Sends whatever is buffered **now** as one ingestion batch (or resolves immediately with an empty-shaped result when nothing was pending).
+     */
+    flush(): Promise<BatchEventResponse>;
+    /**
+     * Best-effort final flush then tears down timers — typically reached via `Client.close()` during graceful shutdown so late telemetry is not dropped on SIGTERM.
+     */
+    shutdown(): Promise<void>;
+    /**
+     * Live count of rows waiting in the in-memory buffer (not yet acknowledged by the ingestion API).
+     */
+    get pendingCount(): number;
+    private postBatch;
+}
+
+/**
+ * Zod schemas and types for `GET /v1/explain/{entity_key}` (Query API composite explain).
+ */
+
+declare const ExplainResponseSchema: z.ZodObject<{
+    entity_key: z.ZodString;
+    timestamp: z.ZodDate;
+    closure_score: z.ZodNumber;
+    risk_tier: z.ZodEnum<["LOW", "ELEVATED", "HIGH", "CRITICAL"]>;
+    cc_delta: z.ZodNumber;
+    momentum: z.ZodNumber;
+    top_events: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        event_id: z.ZodString;
+        signal_type: z.ZodEnum<["TRANSACTION", "AUTH", "BEHAVIOR", "SYSTEM_TELEMETRY", "MODEL_OUTPUT", "ANOMALY_FLAG", "NETWORK_EVENT"]>;
+        contribution: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+        recency_weight: z.ZodNumber;
+        reason_code: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        signal_type: "TRANSACTION" | "AUTH" | "BEHAVIOR" | "SYSTEM_TELEMETRY" | "MODEL_OUTPUT" | "ANOMALY_FLAG" | "NETWORK_EVENT";
+        event_id: string;
+        recency_weight: number;
+        reason_code: string;
+        contribution?: number | null | undefined;
+    }, {
+        signal_type: "TRANSACTION" | "AUTH" | "BEHAVIOR" | "SYSTEM_TELEMETRY" | "MODEL_OUTPUT" | "ANOMALY_FLAG" | "NETWORK_EVENT";
+        event_id: string;
+        recency_weight: number;
+        reason_code: string;
+        contribution?: number | null | undefined;
+    }>, "many">>;
+    dominant_neighbors: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        entity_key: z.ZodString;
+        edge_weight: z.ZodNumber;
+        event_layer_fraction: z.ZodNumber;
+    }, "strip", z.ZodTypeAny, {
+        entity_key: string;
+        edge_weight: number;
+        event_layer_fraction: number;
+    }, {
+        entity_key: string;
+        edge_weight: number;
+        event_layer_fraction: number;
+    }>, "many">>;
+    active_advisories: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        type: z.ZodEnum<["DRIFT_WARNING", "ANOMALY_CLUSTER", "CONFIDENCE_COLLAPSE", "MODEL_INSTABILITY", "RAPID_ESCALATION_NEW_DEVICE", "RAPID_ESCALATION_EXISTING_ENTITY", "SUSTAINED_DEGRADATION", "SINGLE_EVENT_SPIKE", "CAUSAL_INSTABILITY_PROPAGATION", "DOMINANT_UPSTREAM_DEPENDENCY", "IDENTITY_CONTEXT_MISMATCH", "RECOVERY_IN_PROGRESS"]>;
+        entity_key: z.ZodString;
+        severity: z.ZodOptional<z.ZodNullable<z.ZodEnum<["LOW", "ELEVATED", "HIGH", "CRITICAL"]>>>;
+        triggering_condition: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+    }, "strip", z.ZodTypeAny, {
+        type: "DRIFT_WARNING" | "ANOMALY_CLUSTER" | "CONFIDENCE_COLLAPSE" | "MODEL_INSTABILITY" | "RAPID_ESCALATION_NEW_DEVICE" | "RAPID_ESCALATION_EXISTING_ENTITY" | "SUSTAINED_DEGRADATION" | "SINGLE_EVENT_SPIKE" | "CAUSAL_INSTABILITY_PROPAGATION" | "DOMINANT_UPSTREAM_DEPENDENCY" | "IDENTITY_CONTEXT_MISMATCH" | "RECOVERY_IN_PROGRESS";
+        entity_key: string;
+        triggering_condition: Record<string, unknown>;
+        severity?: "LOW" | "ELEVATED" | "HIGH" | "CRITICAL" | null | undefined;
+    }, {
+        type: "DRIFT_WARNING" | "ANOMALY_CLUSTER" | "CONFIDENCE_COLLAPSE" | "MODEL_INSTABILITY" | "RAPID_ESCALATION_NEW_DEVICE" | "RAPID_ESCALATION_EXISTING_ENTITY" | "SUSTAINED_DEGRADATION" | "SINGLE_EVENT_SPIKE" | "CAUSAL_INSTABILITY_PROPAGATION" | "DOMINANT_UPSTREAM_DEPENDENCY" | "IDENTITY_CONTEXT_MISMATCH" | "RECOVERY_IN_PROGRESS";
+        entity_key: string;
+        triggering_condition: Record<string, unknown>;
+        severity?: "LOW" | "ELEVATED" | "HIGH" | "CRITICAL" | null | undefined;
+    }>, "many">>;
+}, "strip", z.ZodTypeAny, {
+    entity_key: string;
+    timestamp: Date;
+    closure_score: number;
+    risk_tier: "LOW" | "ELEVATED" | "HIGH" | "CRITICAL";
+    cc_delta: number;
+    momentum: number;
+    top_events: {
+        signal_type: "TRANSACTION" | "AUTH" | "BEHAVIOR" | "SYSTEM_TELEMETRY" | "MODEL_OUTPUT" | "ANOMALY_FLAG" | "NETWORK_EVENT";
+        event_id: string;
+        recency_weight: number;
+        reason_code: string;
+        contribution?: number | null | undefined;
+    }[];
+    dominant_neighbors: {
+        entity_key: string;
+        edge_weight: number;
+        event_layer_fraction: number;
+    }[];
+    active_advisories: {
+        type: "DRIFT_WARNING" | "ANOMALY_CLUSTER" | "CONFIDENCE_COLLAPSE" | "MODEL_INSTABILITY" | "RAPID_ESCALATION_NEW_DEVICE" | "RAPID_ESCALATION_EXISTING_ENTITY" | "SUSTAINED_DEGRADATION" | "SINGLE_EVENT_SPIKE" | "CAUSAL_INSTABILITY_PROPAGATION" | "DOMINANT_UPSTREAM_DEPENDENCY" | "IDENTITY_CONTEXT_MISMATCH" | "RECOVERY_IN_PROGRESS";
+        entity_key: string;
+        triggering_condition: Record<string, unknown>;
+        severity?: "LOW" | "ELEVATED" | "HIGH" | "CRITICAL" | null | undefined;
+    }[];
+}, {
+    entity_key: string;
+    timestamp: Date;
+    closure_score: number;
+    risk_tier: "LOW" | "ELEVATED" | "HIGH" | "CRITICAL";
+    cc_delta: number;
+    momentum: number;
+    top_events?: {
+        signal_type: "TRANSACTION" | "AUTH" | "BEHAVIOR" | "SYSTEM_TELEMETRY" | "MODEL_OUTPUT" | "ANOMALY_FLAG" | "NETWORK_EVENT";
+        event_id: string;
+        recency_weight: number;
+        reason_code: string;
+        contribution?: number | null | undefined;
+    }[] | undefined;
+    dominant_neighbors?: {
+        entity_key: string;
+        edge_weight: number;
+        event_layer_fraction: number;
+    }[] | undefined;
+    active_advisories?: {
+        type: "DRIFT_WARNING" | "ANOMALY_CLUSTER" | "CONFIDENCE_COLLAPSE" | "MODEL_INSTABILITY" | "RAPID_ESCALATION_NEW_DEVICE" | "RAPID_ESCALATION_EXISTING_ENTITY" | "SUSTAINED_DEGRADATION" | "SINGLE_EVENT_SPIKE" | "CAUSAL_INSTABILITY_PROPAGATION" | "DOMINANT_UPSTREAM_DEPENDENCY" | "IDENTITY_CONTEXT_MISMATCH" | "RECOVERY_IN_PROGRESS";
+        entity_key: string;
+        triggering_condition: Record<string, unknown>;
+        severity?: "LOW" | "ELEVATED" | "HIGH" | "CRITICAL" | null | undefined;
+    }[] | undefined;
+}>;
+/**
+ * Parsed explain payload: closure score, risk tier, ranked events/neighbours, and active advisories.
+ *
+ * **Constraints (Zod):** `closure_score` in `[0, 1]`; `top_events[].recency_weight` in `[0, 1]`; `dominant_neighbors[].event_layer_fraction` in `[0, 1]`.
+ */
+type ExplainResponse = z.infer<typeof ExplainResponseSchema>;
+
+/**
+ * Query API: composite explain / attribution snapshot for one entity.
+ */
+declare class ExplainResource {
+    private readonly _http;
+    private readonly apiName;
+    constructor(_http: HttpClient);
+    /**
+     * Fetches composite explain for one entity (`GET /v1/explain/{entity_key}`).
+     *
+     * @param entityKey - URL-encoded path segment: uppercase entity type, colon, id (e.g. `USER:user-123`). Must not contain raw `/` (caller passes logical key; SDK encodes for HTTP).
+     * @param atTimestamp - Optional “as of” time (`Date` or ISO-8601 string). Omitted means server default (typically “now”).
+     * @param topDominantNeighbors - Optional cap on dominant neighbor rows returned.
+     * @param topEvents - Optional cap on top contributing events returned.
+     * @returns {@link ExplainResponse} (closure score, risk tier, top events, neighbours, active advisories).
+     * @example
+     * ```ts
+     * const x = await client.explain.get('USER:alice', new Date(), 5, 10);
+     * ```
+     */
+    get(entityKey: string, atTimestamp?: Date | string, topDominantNeighbors?: number, topEvents?: number): Promise<ExplainResponse>;
+}
+
+/**
+ * Response body for `GET /v1/tenants/verify-credentials` (Query API).
+ */
+type VerifyCredentialsResponse = {
+    /**
+     * Tenant partition identifier (opaque string; UUID in typical deployments).
+     * **Constraint:** treat as opaque; do not parse as a customer-facing id unless your control plane documents otherwise.
+     */
+    tenant_id: string;
+    /** `true` when the presented `x-tenant-api-key` is accepted for this tenant. */
+    is_valid: boolean;
+};
+
+/**
+ * Validates that the configured API key is valid.
+ * Use at process startup so misconfigured keys fail fast before trust-state or ingestion traffic.
+ */
+declare class TenantResource {
+    private readonly _http;
+    private readonly apiName;
+    constructor(_http: HttpClient);
+    /**
+     * Confirms whether the **`x-tenant-api-key`** presented by this client is accepted by the platform and returns the opaqu
+     * e **tenant partition id** bound to that key.
+     * Use at process startup so misconfigured keys fail fast before trust-state or explain traffic.
+     *
+     * @returns: {@link VerifyCredentialsResponse}
+     */
+    verifyCredentials(): Promise<VerifyCredentialsResponse>;
+}
+
+declare const ENTITY_TYPES: readonly ["USER", "DEVICE", "ACCOUNT", "MODEL", "SESSION", "SERVICE"];
+/**
+ * Canonical uppercase entity kinds used in `entity_key` prefixes and ingestion principals.
+ */
+type EntityType = (typeof ENTITY_TYPES)[number];
+type EntityTypeLowerCase = Lowercase<EntityType>;
+
+declare const RISK_TIERS: readonly ["LOW", "ELEVATED", "HIGH", "CRITICAL"];
+/**
+ * Discrete risk tiers used in trust state and explain responses.
+ */
+type RiskTier = (typeof RISK_TIERS)[number];
+
+/**
+ * One ranked contributor row inside `TrustState.top_contributors`.
+ */
+type TopContributor = {
+    /** Opaque ingestion event id (UUID v7 when produced by this SDK’s builders). */
+    event_id: string;
+    /** Engine reason code explaining why this event mattered. */
+    reason_code: string;
+};
+/**
+ * Latest trust snapshot for an entity from the Query API.
+ */
+type TrustState = {
+    /** Scoped key (`TYPE:id`) for the subject entity. */
+    entity_key: string;
+    /**
+     * Closure score in `[0, 1]` (higher usually means tighter / more confident closure).
+     * **Constraint:** exact semantics are engine-defined; compare across time for the same entity.
+     */
+    current_closure_score: number;
+    /** Directional change indicator for closure score (engine-defined units). */
+    momentum: number;
+    /** Discrete risk bucket (see {@link RiskTier}). */
+    risk_tier: RiskTier;
+    /**
+     * Model / engine confidence in `[0, 1]`.
+     * **Constraint:** not a calibrated probability unless your deployment says otherwise.
+     */
+    confidence: number;
+    /** Recent events contributing most to the current trust posture (length ≤ requested contributor limit). */
+    top_contributors: TopContributor[];
+    /** Server-side freshness timestamp for this snapshot. */
+    last_updated: Date;
+};
+
+/**
+ * Optional tuning for top-contributor lists.
+ */
+type TrustStateOptions = {
+    /**
+     * How many contributor rows to return per entity. Default: 5.
+     */
+    topContributorsLimit?: number;
+    /**
+     * Rolling window length (minutes) used to rank contributors. Default: 1440 (24 hours).
+     */
+    topContributorsWindowMinutes?: number;
+};
+/**
+ * Reads **materialized trust snapshots** from the Query API:
+ * Closure Score, momentum, risk tier, and recent contributors for principals (users, devices, sessions, models, etc.).
+ * This is how applications poll “what does QATI believe about this entity **now**?”; observability only; no blocking or policy execution occurs here.
+ */
+declare class TrustStateResource {
+    private readonly _http;
+    private readonly apiName;
+    constructor(_http: HttpClient);
+    /**
+     * Fetches the latest trust state for one entity.
+     *
+     * @param entityType - Lowercase entity class: `user`, `device`, `account`, `model`, `session`, or `service` (see {@link EntityTypeLowerCase}).
+     * @param entityId - Id for the entity(Required)
+     * @param options - Optional contributor limits/window.
+     * @returns {@link TrustState} including `current_closure_score`, `risk_tier`, and `top_contributors`.
+     */
+    getTrustState(entityType: EntityTypeLowerCase, entityId: string, options?: TrustStateOptions): Promise<TrustState>;
+    /**
+     * Fetches trust states for many entities in one request.
+     *
+     * @param entityType - Lowercase entity class: `user`, `device`, `account`, `model`, `session`, or `service` (see {@link EntityTypeLowerCase}).
+     * @param entityIds - Distinct ids to query. Prefer length ≤ 100 or the server may reject the request.
+     * @param options - Optional contributor limits/window.
+     * @returns Array of {@link TrustState} in server-defined order; empty array when `entityIds` is empty.
+     */
+    getTrustStates(entityType: EntityTypeLowerCase, entityIds: readonly string[], options?: TrustStateOptions): Promise<TrustState[]>;
+}
+
+/**
+ * High-level QATI API client: namespaces for tenant, trust state, advisories, explain, and batched event ingestion.
+ *
+ * Construct via {@link Session#createClient}; do not call `new Client(...)` directly unless you already have {@link QatiConfigOutput}.
+ *
+ * @example
+ * ```typescript
+ * const session = new Session();
+ * const client = session.createClient();
+ * const explained = await client.explain.get('USER:user-123');
+ * console.log(explained.closure_score);
+ * ```
+ */
+declare class Client extends HttpClient {
+    private readonly _tenant;
+    private readonly _trustState;
+    private readonly _advisory;
+    private readonly _explain;
+    private readonly _events;
+    /**
+     * @param config - Resolved SDK configuration (typically `session.config`).
+     * @param axiosInstances - Optional per-API `axios` instances; see {@link Session#createClient}.
+     * @param eventResourceOptions - Optional overrides for buffered ingestion (`onDeadLetter`, batch sizing).
+     */
+    constructor(config: QatiConfigOutput, axiosInstances?: AxiosInstances);
+    /**
+     * Tenant API surface (credentials verification).
+     *
+     * @returns {@link TenantResource} bound to this client’s Query API base URL and tenant key.
+     */
+    get tenant(): TenantResource;
+    /**
+     * Trust scores and contributors for entities.
+     *
+     * @returns {@link TrustStateResource} for the Query API.
+     */
+    get trustState(): TrustStateResource;
+    /**
+     * List persisted advisories for an entity.
+     *
+     * @returns {@link AdvisoryResource} for the Query API.
+     */
+    get advisory(): AdvisoryResource;
+    /**
+     * Composite explain / attribution for an entity key.
+     *
+     * @returns {@link ExplainResource} for the Query API.
+     */
+    get explain(): ExplainResource;
+    /**
+     * Buffered ingestion of `RawEventRequest` payloads to the ingestion API (`POST /v1/events:batch`).
+     *
+     * @returns {@link EventResource} for the Query API.
+     */
+    get events(): EventResource;
+    /**
+     * Flushes the event ingestion buffer (best-effort), then shuts down the batch scheduler.
+     * Call this on process shutdown so queued events are not lost.
+     *
+     * @returns Resolves when {@link EventResource#shutdown} completes.
+     */
+    close(): Promise<void>;
+}
+
+/**
+ * Entry point for the SDK: holds resolved {@link QatiConfigOutput} and builds {@link Client} instances.
+ *
+ * If `config` is omitted, calls {@link resolveQatiConfig} (loads `.env`, merges `QATI_*` env vars into camelCase,
+ * applies Zod defaults for optional fields only). **Query and Ingestion base URLs are required** — set
+ * `QATI_QUERY_API_BASE_URL` and `QATI_INGESTION_API_BASE_URL` (or pass `queryApiBaseUrl` / `ingestionApiBaseUrl`).
+ * **Precedence** (highest first): constructor argument → environment → Zod defaults (not applied to base URLs).
+ *
+ * @example
+ * ```ts
+ * const session = new Session({
+ *   tenantApiKey: 'qati-...',
+ *   queryApiBaseUrl: 'http://localhost:8001',
+ *   ingestionApiBaseUrl: 'http://localhost:8000',
+ * });
+ * const client = session.createClient();
+ * await client.tenant.verifyCredentials();
+ * ```
+ */
+declare class Session {
+    private readonly _config;
+    constructor(config?: Partial<QatiConfigInput>);
+    /**
+     * Resolved, validated configuration.
+     */
+    get config(): QatiConfigOutput;
+    /**
+     * Creates an API {@link Client} using this session’s resolved config.
+     *
+     * @param httpClients - Optional injected `axios` instances keyed by `query_api` / `ingestion_api` (testing, proxies, interceptors).
+     * @returns A new {@link Client} (not a singleton).
+     * @example
+     * ```typescript
+     * const session = new Session();
+     * const client = session.createClient();
+     * const explained = await client.explain.get('USER:user-123');
+     * console.log(explained.closure_score);
+     * ```
+     */
+    createClient(httpClients?: AxiosInstances): Client;
+}
+
+/**
+ * Shapes returned by `POST /v1/events:batch` on the ingestion API (per-event acks and errors).
+ */
+/**
+ * Per-event outcome after batch ingestion (API) or after SDK buffering (local).
+ */
+type EventAcknowledgement = {
+    /** Persisted raw-event id assigned by the ingestion API. */
+    event_id: string;
+    /**
+     * API: `accepted` when stored; `rejected` when validation or policy blocked the row.
+     * SDK only: `queued` when the event was accepted into the client buffer (not yet sent or persisted by the API).
+     */
+    status: 'accepted' | 'rejected' | 'queued';
+};
+/**
+ * Error row for one failed event (or batch-level failure with optional `event_id`).
+ */
+type EventError = {
+    /** Present when the error is tied to a specific event; may be `null` for batch-level issues. */
+    event_id?: string | null;
+    /** Stable machine-readable reason (align with ingestion API docs). */
+    reason_code: string;
+    /** Optional human-readable detail from the server. */
+    message?: string | null;
+};
+type BatchEventResponse = {
+    acknowledgements: EventAcknowledgement[];
+    errors: EventError[];
+};
+
+/**
+ * Zod schemas extending `BaseEventSchema` with per-`signal_type` payloads for v1 ingestion.
+ *
+ * **Numeric constraints:** several fields use `[0, 1]` ranges, non-negative amounts, or integer counts as annotated on each schema.
+ */
+
+declare const TransactionSignalSchema: z.ZodObject<{
+    tenant_id: z.ZodString;
+    signal_version: z.ZodString;
+    signal_type: z.ZodEnum<["TRANSACTION", "AUTH", "BEHAVIOR", "SYSTEM_TELEMETRY", "MODEL_OUTPUT", "ANOMALY_FLAG", "NETWORK_EVENT"]>;
+    principal: z.ZodObject<{
+        user_id: z.ZodOptional<z.ZodString>;
+        account_id: z.ZodOptional<z.ZodString>;
+        device_id: z.ZodOptional<z.ZodString>;
+        session_id: z.ZodOptional<z.ZodString>;
+        model_id: z.ZodOptional<z.ZodString>;
+        service_id: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        user_id?: string | undefined;
+        account_id?: string | undefined;
+        device_id?: string | undefined;
+        session_id?: string | undefined;
+        model_id?: string | undefined;
+        service_id?: string | undefined;
+    }, {
+        user_id?: string | undefined;
+        account_id?: string | undefined;
+        device_id?: string | undefined;
+        session_id?: string | undefined;
+        model_id?: string | undefined;
+        service_id?: string | undefined;
+    }>;
+    timestamp: z.ZodOptional<z.ZodDefault<z.ZodString>>;
+    confidence_hint: z.ZodOptional<z.ZodNumber>;
+    provenance: z.ZodOptional<z.ZodObject<{
+        mode: z.ZodOptional<z.ZodEnum<["DETERMINISTIC", "EXTERNAL_RNG", "ATTESTED"]>>;
+        source_id: z.ZodOptional<z.ZodString>;
+        epoch_counter: z.ZodOptional<z.ZodNumber>;
+        health_summary: z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodRecord<z.ZodString, z.ZodUnknown>]>>;
+    }, "strip", z.ZodTypeAny, {
+        mode?: "DETERMINISTIC" | "EXTERNAL_RNG" | "ATTESTED" | undefined;
+        source_id?: string | undefined;
+        epoch_counter?: number | undefined;
+        health_summary?: string | Record<string, unknown> | undefined;
+    }, {
+        mode?: "DETERMINISTIC" | "EXTERNAL_RNG" | "ATTESTED" | undefined;
+        source_id?: string | undefined;
+        epoch_counter?: number | undefined;
+        health_summary?: string | Record<string, unknown> | undefined;
+    }>>;
+    integrity: z.ZodOptional<z.ZodObject<{
+        hash: z.ZodOptional<z.ZodString>;
+        signature: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        hash?: string | undefined;
+        signature?: string | undefined;
+    }, {
+        hash?: string | undefined;
+        signature?: string | undefined;
+    }>>;
+} & {
+    signal_payload: z.ZodObject<{
+        amount: z.ZodDefault<z.ZodNumber>;
+        amount_minor: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+        amount_usd: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+        currency: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        merchant_category: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        merchant_id: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        channel: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        country: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        velocity: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+        external_anomaly_score: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+        geo_distance: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+        geo_distance_km: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+        records_accessed: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+        baseline_records_accessed: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+        sensitivity_level: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        export_count: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+        bulk_export: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+        contains_phi: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+        control_command: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        authorized: z.ZodOptional<z.ZodNullable<z.ZodBoolean>>;
+        safety_critical: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    }, "strip", z.ZodTypeAny, {
+        amount: number;
+        bulk_export: boolean;
+        contains_phi: boolean;
+        safety_critical: boolean;
+        amount_minor?: number | null | undefined;
+        amount_usd?: number | null | undefined;
+        currency?: string | null | undefined;
+        merchant_category?: string | null | undefined;
+        merchant_id?: string | null | undefined;
+        channel?: string | null | undefined;
+        country?: string | null | undefined;
+        velocity?: number | null | undefined;
+        external_anomaly_score?: number | null | undefined;
+        geo_distance?: number | null | undefined;
+        geo_distance_km?: number | null | undefined;
+        records_accessed?: number | null | undefined;
+        baseline_records_accessed?: number | null | undefined;
+        sensitivity_level?: string | null | undefined;
+        export_count?: number | null | undefined;
+        control_command?: string | null | undefined;
+        authorized?: boolean | null | undefined;
+    }, {
+        amount?: number | undefined;
+        amount_minor?: number | null | undefined;
+        amount_usd?: number | null | undefined;
+        currency?: string | null | undefined;
+        merchant_category?: string | null | undefined;
+        merchant_id?: string | null | undefined;
+        channel?: string | null | undefined;
+        country?: string | null | undefined;
+        velocity?: number | null | undefined;
+        external_anomaly_score?: number | null | undefined;
+        geo_distance?: number | null | undefined;
+        geo_distance_km?: number | null | undefined;
+        records_accessed?: number | null | undefined;
+        baseline_records_accessed?: number | null | undefined;
+        sensitivity_level?: string | null | undefined;
+        export_count?: number | null | undefined;
+        bulk_export?: boolean | undefined;
+        contains_phi?: boolean | undefined;
+        control_command?: string | null | undefined;
+        authorized?: boolean | null | undefined;
+        safety_critical?: boolean | undefined;
+    }>;
+}, "strip", z.ZodTypeAny, {
+    tenant_id: string;
+    signal_version: string;
+    signal_type: "TRANSACTION" | "AUTH" | "BEHAVIOR" | "SYSTEM_TELEMETRY" | "MODEL_OUTPUT" | "ANOMALY_FLAG" | "NETWORK_EVENT";
+    signal_payload: {
+        amount: number;
+        bulk_export: boolean;
+        contains_phi: boolean;
+        safety_critical: boolean;
+        amount_minor?: number | null | undefined;
+        amount_usd?: number | null | undefined;
+        currency?: string | null | undefined;
+        merchant_category?: string | null | undefined;
+        merchant_id?: string | null | undefined;
+        channel?: string | null | undefined;
+        country?: string | null | undefined;
+        velocity?: number | null | undefined;
+        external_anomaly_score?: number | null | undefined;
+        geo_distance?: number | null | undefined;
+        geo_distance_km?: number | null | undefined;
+        records_accessed?: number | null | undefined;
+        baseline_records_accessed?: number | null | undefined;
+        sensitivity_level?: string | null | undefined;
+        export_count?: number | null | undefined;
+        control_command?: string | null | undefined;
+        authorized?: boolean | null | undefined;
+    };
+    principal: {
+        user_id?: string | undefined;
+        account_id?: string | undefined;
+        device_id?: string | undefined;
+        session_id?: string | undefined;
+        model_id?: string | undefined;
+        service_id?: string | undefined;
+    };
+    integrity?: {
+        hash?: string | undefined;
+        signature?: string | undefined;
+    } | undefined;
+    timestamp?: string | undefined;
+    confidence_hint?: number | undefined;
+    provenance?: {
+        mode?: "DETERMINISTIC" | "EXTERNAL_RNG" | "ATTESTED" | undefined;
+        source_id?: string | undefined;
+        epoch_counter?: number | undefined;
+        health_summary?: string | Record<string, unknown> | undefined;
+    } | undefined;
+}, {
+    tenant_id: string;
+    signal_version: string;
+    signal_type: "TRANSACTION" | "AUTH" | "BEHAVIOR" | "SYSTEM_TELEMETRY" | "MODEL_OUTPUT" | "ANOMALY_FLAG" | "NETWORK_EVENT";
+    signal_payload: {
+        amount?: number | undefined;
+        amount_minor?: number | null | undefined;
+        amount_usd?: number | null | undefined;
+        currency?: string | null | undefined;
+        merchant_category?: string | null | undefined;
+        merchant_id?: string | null | undefined;
+        channel?: string | null | undefined;
+        country?: string | null | undefined;
+        velocity?: number | null | undefined;
+        external_anomaly_score?: number | null | undefined;
+        geo_distance?: number | null | undefined;
+        geo_distance_km?: number | null | undefined;
+        records_accessed?: number | null | undefined;
+        baseline_records_accessed?: number | null | undefined;
+        sensitivity_level?: string | null | undefined;
+        export_count?: number | null | undefined;
+        bulk_export?: boolean | undefined;
+        contains_phi?: boolean | undefined;
+        control_command?: string | null | undefined;
+        authorized?: boolean | null | undefined;
+        safety_critical?: boolean | undefined;
+    };
+    principal: {
+        user_id?: string | undefined;
+        account_id?: string | undefined;
+        device_id?: string | undefined;
+        session_id?: string | undefined;
+        model_id?: string | undefined;
+        service_id?: string | undefined;
+    };
+    integrity?: {
+        hash?: string | undefined;
+        signature?: string | undefined;
+    } | undefined;
+    timestamp?: string | undefined;
+    confidence_hint?: number | undefined;
+    provenance?: {
+        mode?: "DETERMINISTIC" | "EXTERNAL_RNG" | "ATTESTED" | undefined;
+        source_id?: string | undefined;
+        epoch_counter?: number | undefined;
+        health_summary?: string | Record<string, unknown> | undefined;
+    } | undefined;
+}>;
+declare const AnomalyFlagSignalSchema: z.ZodObject<{
+    tenant_id: z.ZodString;
+    signal_version: z.ZodString;
+    signal_type: z.ZodEnum<["TRANSACTION", "AUTH", "BEHAVIOR", "SYSTEM_TELEMETRY", "MODEL_OUTPUT", "ANOMALY_FLAG", "NETWORK_EVENT"]>;
+    principal: z.ZodObject<{
+        user_id: z.ZodOptional<z.ZodString>;
+        account_id: z.ZodOptional<z.ZodString>;
+        device_id: z.ZodOptional<z.ZodString>;
+        session_id: z.ZodOptional<z.ZodString>;
+        model_id: z.ZodOptional<z.ZodString>;
+        service_id: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        user_id?: string | undefined;
+        account_id?: string | undefined;
+        device_id?: string | undefined;
+        session_id?: string | undefined;
+        model_id?: string | undefined;
+        service_id?: string | undefined;
+    }, {
+        user_id?: string | undefined;
+        account_id?: string | undefined;
+        device_id?: string | undefined;
+        session_id?: string | undefined;
+        model_id?: string | undefined;
+        service_id?: string | undefined;
+    }>;
+    timestamp: z.ZodOptional<z.ZodDefault<z.ZodString>>;
+    confidence_hint: z.ZodOptional<z.ZodNumber>;
+    provenance: z.ZodOptional<z.ZodObject<{
+        mode: z.ZodOptional<z.ZodEnum<["DETERMINISTIC", "EXTERNAL_RNG", "ATTESTED"]>>;
+        source_id: z.ZodOptional<z.ZodString>;
+        epoch_counter: z.ZodOptional<z.ZodNumber>;
+        health_summary: z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodRecord<z.ZodString, z.ZodUnknown>]>>;
+    }, "strip", z.ZodTypeAny, {
+        mode?: "DETERMINISTIC" | "EXTERNAL_RNG" | "ATTESTED" | undefined;
+        source_id?: string | undefined;
+        epoch_counter?: number | undefined;
+        health_summary?: string | Record<string, unknown> | undefined;
+    }, {
+        mode?: "DETERMINISTIC" | "EXTERNAL_RNG" | "ATTESTED" | undefined;
+        source_id?: string | undefined;
+        epoch_counter?: number | undefined;
+        health_summary?: string | Record<string, unknown> | undefined;
+    }>>;
+    integrity: z.ZodOptional<z.ZodObject<{
+        hash: z.ZodOptional<z.ZodString>;
+        signature: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        hash?: string | undefined;
+        signature?: string | undefined;
+    }, {
+        hash?: string | undefined;
+        signature?: string | undefined;
+    }>>;
+} & {
+    signal_payload: z.ZodObject<{
+        severity: z.ZodNumber;
+    }, "strip", z.ZodTypeAny, {
+        severity: number;
+    }, {
+        severity: number;
+    }>;
+}, "strip", z.ZodTypeAny, {
+    tenant_id: string;
+    signal_version: string;
+    signal_type: "TRANSACTION" | "AUTH" | "BEHAVIOR" | "SYSTEM_TELEMETRY" | "MODEL_OUTPUT" | "ANOMALY_FLAG" | "NETWORK_EVENT";
+    signal_payload: {
+        severity: number;
+    };
+    principal: {
+        user_id?: string | undefined;
+        account_id?: string | undefined;
+        device_id?: string | undefined;
+        session_id?: string | undefined;
+        model_id?: string | undefined;
+        service_id?: string | undefined;
+    };
+    integrity?: {
+        hash?: string | undefined;
+        signature?: string | undefined;
+    } | undefined;
+    timestamp?: string | undefined;
+    confidence_hint?: number | undefined;
+    provenance?: {
+        mode?: "DETERMINISTIC" | "EXTERNAL_RNG" | "ATTESTED" | undefined;
+        source_id?: string | undefined;
+        epoch_counter?: number | undefined;
+        health_summary?: string | Record<string, unknown> | undefined;
+    } | undefined;
+}, {
+    tenant_id: string;
+    signal_version: string;
+    signal_type: "TRANSACTION" | "AUTH" | "BEHAVIOR" | "SYSTEM_TELEMETRY" | "MODEL_OUTPUT" | "ANOMALY_FLAG" | "NETWORK_EVENT";
+    signal_payload: {
+        severity: number;
+    };
+    principal: {
+        user_id?: string | undefined;
+        account_id?: string | undefined;
+        device_id?: string | undefined;
+        session_id?: string | undefined;
+        model_id?: string | undefined;
+        service_id?: string | undefined;
+    };
+    integrity?: {
+        hash?: string | undefined;
+        signature?: string | undefined;
+    } | undefined;
+    timestamp?: string | undefined;
+    confidence_hint?: number | undefined;
+    provenance?: {
+        mode?: "DETERMINISTIC" | "EXTERNAL_RNG" | "ATTESTED" | undefined;
+        source_id?: string | undefined;
+        epoch_counter?: number | undefined;
+        health_summary?: string | Record<string, unknown> | undefined;
+    } | undefined;
+}>;
+declare const AuthSignalSchema: z.ZodObject<{
+    tenant_id: z.ZodString;
+    signal_version: z.ZodString;
+    signal_type: z.ZodEnum<["TRANSACTION", "AUTH", "BEHAVIOR", "SYSTEM_TELEMETRY", "MODEL_OUTPUT", "ANOMALY_FLAG", "NETWORK_EVENT"]>;
+    principal: z.ZodObject<{
+        user_id: z.ZodOptional<z.ZodString>;
+        account_id: z.ZodOptional<z.ZodString>;
+        device_id: z.ZodOptional<z.ZodString>;
+        session_id: z.ZodOptional<z.ZodString>;
+        model_id: z.ZodOptional<z.ZodString>;
+        service_id: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        user_id?: string | undefined;
+        account_id?: string | undefined;
+        device_id?: string | undefined;
+        session_id?: string | undefined;
+        model_id?: string | undefined;
+        service_id?: string | undefined;
+    }, {
+        user_id?: string | undefined;
+        account_id?: string | undefined;
+        device_id?: string | undefined;
+        session_id?: string | undefined;
+        model_id?: string | undefined;
+        service_id?: string | undefined;
+    }>;
+    timestamp: z.ZodOptional<z.ZodDefault<z.ZodString>>;
+    confidence_hint: z.ZodOptional<z.ZodNumber>;
+    provenance: z.ZodOptional<z.ZodObject<{
+        mode: z.ZodOptional<z.ZodEnum<["DETERMINISTIC", "EXTERNAL_RNG", "ATTESTED"]>>;
+        source_id: z.ZodOptional<z.ZodString>;
+        epoch_counter: z.ZodOptional<z.ZodNumber>;
+        health_summary: z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodRecord<z.ZodString, z.ZodUnknown>]>>;
+    }, "strip", z.ZodTypeAny, {
+        mode?: "DETERMINISTIC" | "EXTERNAL_RNG" | "ATTESTED" | undefined;
+        source_id?: string | undefined;
+        epoch_counter?: number | undefined;
+        health_summary?: string | Record<string, unknown> | undefined;
+    }, {
+        mode?: "DETERMINISTIC" | "EXTERNAL_RNG" | "ATTESTED" | undefined;
+        source_id?: string | undefined;
+        epoch_counter?: number | undefined;
+        health_summary?: string | Record<string, unknown> | undefined;
+    }>>;
+    integrity: z.ZodOptional<z.ZodObject<{
+        hash: z.ZodOptional<z.ZodString>;
+        signature: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        hash?: string | undefined;
+        signature?: string | undefined;
+    }, {
+        hash?: string | undefined;
+        signature?: string | undefined;
+    }>>;
+} & {
+    signal_payload: z.ZodObject<{
+        result: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        auth_method: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        mfa_used: z.ZodOptional<z.ZodNullable<z.ZodBoolean>>;
+        mfa_bypassed: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+        failed_attempts: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+        ip: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        country: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        user_agent: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        unusual_location: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+        after_hours_login: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    }, "strip", z.ZodTypeAny, {
+        mfa_bypassed: boolean;
+        failed_attempts: number;
+        unusual_location: boolean;
+        after_hours_login: boolean;
+        country?: string | null | undefined;
+        result?: string | null | undefined;
+        auth_method?: string | null | undefined;
+        mfa_used?: boolean | null | undefined;
+        ip?: string | null | undefined;
+        user_agent?: string | null | undefined;
+    }, {
+        country?: string | null | undefined;
+        result?: string | null | undefined;
+        auth_method?: string | null | undefined;
+        mfa_used?: boolean | null | undefined;
+        mfa_bypassed?: boolean | undefined;
+        failed_attempts?: number | undefined;
+        ip?: string | null | undefined;
+        user_agent?: string | null | undefined;
+        unusual_location?: boolean | undefined;
+        after_hours_login?: boolean | undefined;
+    }>;
+}, "strip", z.ZodTypeAny, {
+    tenant_id: string;
+    signal_version: string;
+    signal_type: "TRANSACTION" | "AUTH" | "BEHAVIOR" | "SYSTEM_TELEMETRY" | "MODEL_OUTPUT" | "ANOMALY_FLAG" | "NETWORK_EVENT";
+    signal_payload: {
+        mfa_bypassed: boolean;
+        failed_attempts: number;
+        unusual_location: boolean;
+        after_hours_login: boolean;
+        country?: string | null | undefined;
+        result?: string | null | undefined;
+        auth_method?: string | null | undefined;
+        mfa_used?: boolean | null | undefined;
+        ip?: string | null | undefined;
+        user_agent?: string | null | undefined;
+    };
+    principal: {
+        user_id?: string | undefined;
+        account_id?: string | undefined;
+        device_id?: string | undefined;
+        session_id?: string | undefined;
+        model_id?: string | undefined;
+        service_id?: string | undefined;
+    };
+    integrity?: {
+        hash?: string | undefined;
+        signature?: string | undefined;
+    } | undefined;
+    timestamp?: string | undefined;
+    confidence_hint?: number | undefined;
+    provenance?: {
+        mode?: "DETERMINISTIC" | "EXTERNAL_RNG" | "ATTESTED" | undefined;
+        source_id?: string | undefined;
+        epoch_counter?: number | undefined;
+        health_summary?: string | Record<string, unknown> | undefined;
+    } | undefined;
+}, {
+    tenant_id: string;
+    signal_version: string;
+    signal_type: "TRANSACTION" | "AUTH" | "BEHAVIOR" | "SYSTEM_TELEMETRY" | "MODEL_OUTPUT" | "ANOMALY_FLAG" | "NETWORK_EVENT";
+    signal_payload: {
+        country?: string | null | undefined;
+        result?: string | null | undefined;
+        auth_method?: string | null | undefined;
+        mfa_used?: boolean | null | undefined;
+        mfa_bypassed?: boolean | undefined;
+        failed_attempts?: number | undefined;
+        ip?: string | null | undefined;
+        user_agent?: string | null | undefined;
+        unusual_location?: boolean | undefined;
+        after_hours_login?: boolean | undefined;
+    };
+    principal: {
+        user_id?: string | undefined;
+        account_id?: string | undefined;
+        device_id?: string | undefined;
+        session_id?: string | undefined;
+        model_id?: string | undefined;
+        service_id?: string | undefined;
+    };
+    integrity?: {
+        hash?: string | undefined;
+        signature?: string | undefined;
+    } | undefined;
+    timestamp?: string | undefined;
+    confidence_hint?: number | undefined;
+    provenance?: {
+        mode?: "DETERMINISTIC" | "EXTERNAL_RNG" | "ATTESTED" | undefined;
+        source_id?: string | undefined;
+        epoch_counter?: number | undefined;
+        health_summary?: string | Record<string, unknown> | undefined;
+    } | undefined;
+}>;
+declare const BehaviorSignalSchema: z.ZodObject<{
+    tenant_id: z.ZodString;
+    signal_version: z.ZodString;
+    signal_type: z.ZodEnum<["TRANSACTION", "AUTH", "BEHAVIOR", "SYSTEM_TELEMETRY", "MODEL_OUTPUT", "ANOMALY_FLAG", "NETWORK_EVENT"]>;
+    principal: z.ZodObject<{
+        user_id: z.ZodOptional<z.ZodString>;
+        account_id: z.ZodOptional<z.ZodString>;
+        device_id: z.ZodOptional<z.ZodString>;
+        session_id: z.ZodOptional<z.ZodString>;
+        model_id: z.ZodOptional<z.ZodString>;
+        service_id: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        user_id?: string | undefined;
+        account_id?: string | undefined;
+        device_id?: string | undefined;
+        session_id?: string | undefined;
+        model_id?: string | undefined;
+        service_id?: string | undefined;
+    }, {
+        user_id?: string | undefined;
+        account_id?: string | undefined;
+        device_id?: string | undefined;
+        session_id?: string | undefined;
+        model_id?: string | undefined;
+        service_id?: string | undefined;
+    }>;
+    timestamp: z.ZodOptional<z.ZodDefault<z.ZodString>>;
+    confidence_hint: z.ZodOptional<z.ZodNumber>;
+    provenance: z.ZodOptional<z.ZodObject<{
+        mode: z.ZodOptional<z.ZodEnum<["DETERMINISTIC", "EXTERNAL_RNG", "ATTESTED"]>>;
+        source_id: z.ZodOptional<z.ZodString>;
+        epoch_counter: z.ZodOptional<z.ZodNumber>;
+        health_summary: z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodRecord<z.ZodString, z.ZodUnknown>]>>;
+    }, "strip", z.ZodTypeAny, {
+        mode?: "DETERMINISTIC" | "EXTERNAL_RNG" | "ATTESTED" | undefined;
+        source_id?: string | undefined;
+        epoch_counter?: number | undefined;
+        health_summary?: string | Record<string, unknown> | undefined;
+    }, {
+        mode?: "DETERMINISTIC" | "EXTERNAL_RNG" | "ATTESTED" | undefined;
+        source_id?: string | undefined;
+        epoch_counter?: number | undefined;
+        health_summary?: string | Record<string, unknown> | undefined;
+    }>>;
+    integrity: z.ZodOptional<z.ZodObject<{
+        hash: z.ZodOptional<z.ZodString>;
+        signature: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        hash?: string | undefined;
+        signature?: string | undefined;
+    }, {
+        hash?: string | undefined;
+        signature?: string | undefined;
+    }>>;
+} & {
+    signal_payload: z.ZodObject<{
+        deviation_score: z.ZodNumber;
+    }, "strip", z.ZodTypeAny, {
+        deviation_score: number;
+    }, {
+        deviation_score: number;
+    }>;
+}, "strip", z.ZodTypeAny, {
+    tenant_id: string;
+    signal_version: string;
+    signal_type: "TRANSACTION" | "AUTH" | "BEHAVIOR" | "SYSTEM_TELEMETRY" | "MODEL_OUTPUT" | "ANOMALY_FLAG" | "NETWORK_EVENT";
+    signal_payload: {
+        deviation_score: number;
+    };
+    principal: {
+        user_id?: string | undefined;
+        account_id?: string | undefined;
+        device_id?: string | undefined;
+        session_id?: string | undefined;
+        model_id?: string | undefined;
+        service_id?: string | undefined;
+    };
+    integrity?: {
+        hash?: string | undefined;
+        signature?: string | undefined;
+    } | undefined;
+    timestamp?: string | undefined;
+    confidence_hint?: number | undefined;
+    provenance?: {
+        mode?: "DETERMINISTIC" | "EXTERNAL_RNG" | "ATTESTED" | undefined;
+        source_id?: string | undefined;
+        epoch_counter?: number | undefined;
+        health_summary?: string | Record<string, unknown> | undefined;
+    } | undefined;
+}, {
+    tenant_id: string;
+    signal_version: string;
+    signal_type: "TRANSACTION" | "AUTH" | "BEHAVIOR" | "SYSTEM_TELEMETRY" | "MODEL_OUTPUT" | "ANOMALY_FLAG" | "NETWORK_EVENT";
+    signal_payload: {
+        deviation_score: number;
+    };
+    principal: {
+        user_id?: string | undefined;
+        account_id?: string | undefined;
+        device_id?: string | undefined;
+        session_id?: string | undefined;
+        model_id?: string | undefined;
+        service_id?: string | undefined;
+    };
+    integrity?: {
+        hash?: string | undefined;
+        signature?: string | undefined;
+    } | undefined;
+    timestamp?: string | undefined;
+    confidence_hint?: number | undefined;
+    provenance?: {
+        mode?: "DETERMINISTIC" | "EXTERNAL_RNG" | "ATTESTED" | undefined;
+        source_id?: string | undefined;
+        epoch_counter?: number | undefined;
+        health_summary?: string | Record<string, unknown> | undefined;
+    } | undefined;
+}>;
+declare const NetworkSignalSchema: z.ZodObject<{
+    tenant_id: z.ZodString;
+    signal_version: z.ZodString;
+    signal_type: z.ZodEnum<["TRANSACTION", "AUTH", "BEHAVIOR", "SYSTEM_TELEMETRY", "MODEL_OUTPUT", "ANOMALY_FLAG", "NETWORK_EVENT"]>;
+    principal: z.ZodObject<{
+        user_id: z.ZodOptional<z.ZodString>;
+        account_id: z.ZodOptional<z.ZodString>;
+        device_id: z.ZodOptional<z.ZodString>;
+        session_id: z.ZodOptional<z.ZodString>;
+        model_id: z.ZodOptional<z.ZodString>;
+        service_id: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        user_id?: string | undefined;
+        account_id?: string | undefined;
+        device_id?: string | undefined;
+        session_id?: string | undefined;
+        model_id?: string | undefined;
+        service_id?: string | undefined;
+    }, {
+        user_id?: string | undefined;
+        account_id?: string | undefined;
+        device_id?: string | undefined;
+        session_id?: string | undefined;
+        model_id?: string | undefined;
+        service_id?: string | undefined;
+    }>;
+    timestamp: z.ZodOptional<z.ZodDefault<z.ZodString>>;
+    confidence_hint: z.ZodOptional<z.ZodNumber>;
+    provenance: z.ZodOptional<z.ZodObject<{
+        mode: z.ZodOptional<z.ZodEnum<["DETERMINISTIC", "EXTERNAL_RNG", "ATTESTED"]>>;
+        source_id: z.ZodOptional<z.ZodString>;
+        epoch_counter: z.ZodOptional<z.ZodNumber>;
+        health_summary: z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodRecord<z.ZodString, z.ZodUnknown>]>>;
+    }, "strip", z.ZodTypeAny, {
+        mode?: "DETERMINISTIC" | "EXTERNAL_RNG" | "ATTESTED" | undefined;
+        source_id?: string | undefined;
+        epoch_counter?: number | undefined;
+        health_summary?: string | Record<string, unknown> | undefined;
+    }, {
+        mode?: "DETERMINISTIC" | "EXTERNAL_RNG" | "ATTESTED" | undefined;
+        source_id?: string | undefined;
+        epoch_counter?: number | undefined;
+        health_summary?: string | Record<string, unknown> | undefined;
+    }>>;
+    integrity: z.ZodOptional<z.ZodObject<{
+        hash: z.ZodOptional<z.ZodString>;
+        signature: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        hash?: string | undefined;
+        signature?: string | undefined;
+    }, {
+        hash?: string | undefined;
+        signature?: string | undefined;
+    }>>;
+} & {
+    signal_payload: z.ZodObject<{
+        ip: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        asn: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        reputation_score: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+        threat_score: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+        is_datacenter: z.ZodOptional<z.ZodNullable<z.ZodBoolean>>;
+        is_untrusted_segment: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+        asn_reputation: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+    }, "strip", z.ZodTypeAny, {
+        is_untrusted_segment: boolean;
+        ip?: string | null | undefined;
+        asn?: string | null | undefined;
+        reputation_score?: number | null | undefined;
+        threat_score?: number | null | undefined;
+        is_datacenter?: boolean | null | undefined;
+        asn_reputation?: number | null | undefined;
+    }, {
+        ip?: string | null | undefined;
+        asn?: string | null | undefined;
+        reputation_score?: number | null | undefined;
+        threat_score?: number | null | undefined;
+        is_datacenter?: boolean | null | undefined;
+        is_untrusted_segment?: boolean | undefined;
+        asn_reputation?: number | null | undefined;
+    }>;
+}, "strip", z.ZodTypeAny, {
+    tenant_id: string;
+    signal_version: string;
+    signal_type: "TRANSACTION" | "AUTH" | "BEHAVIOR" | "SYSTEM_TELEMETRY" | "MODEL_OUTPUT" | "ANOMALY_FLAG" | "NETWORK_EVENT";
+    signal_payload: {
+        is_untrusted_segment: boolean;
+        ip?: string | null | undefined;
+        asn?: string | null | undefined;
+        reputation_score?: number | null | undefined;
+        threat_score?: number | null | undefined;
+        is_datacenter?: boolean | null | undefined;
+        asn_reputation?: number | null | undefined;
+    };
+    principal: {
+        user_id?: string | undefined;
+        account_id?: string | undefined;
+        device_id?: string | undefined;
+        session_id?: string | undefined;
+        model_id?: string | undefined;
+        service_id?: string | undefined;
+    };
+    integrity?: {
+        hash?: string | undefined;
+        signature?: string | undefined;
+    } | undefined;
+    timestamp?: string | undefined;
+    confidence_hint?: number | undefined;
+    provenance?: {
+        mode?: "DETERMINISTIC" | "EXTERNAL_RNG" | "ATTESTED" | undefined;
+        source_id?: string | undefined;
+        epoch_counter?: number | undefined;
+        health_summary?: string | Record<string, unknown> | undefined;
+    } | undefined;
+}, {
+    tenant_id: string;
+    signal_version: string;
+    signal_type: "TRANSACTION" | "AUTH" | "BEHAVIOR" | "SYSTEM_TELEMETRY" | "MODEL_OUTPUT" | "ANOMALY_FLAG" | "NETWORK_EVENT";
+    signal_payload: {
+        ip?: string | null | undefined;
+        asn?: string | null | undefined;
+        reputation_score?: number | null | undefined;
+        threat_score?: number | null | undefined;
+        is_datacenter?: boolean | null | undefined;
+        is_untrusted_segment?: boolean | undefined;
+        asn_reputation?: number | null | undefined;
+    };
+    principal: {
+        user_id?: string | undefined;
+        account_id?: string | undefined;
+        device_id?: string | undefined;
+        session_id?: string | undefined;
+        model_id?: string | undefined;
+        service_id?: string | undefined;
+    };
+    integrity?: {
+        hash?: string | undefined;
+        signature?: string | undefined;
+    } | undefined;
+    timestamp?: string | undefined;
+    confidence_hint?: number | undefined;
+    provenance?: {
+        mode?: "DETERMINISTIC" | "EXTERNAL_RNG" | "ATTESTED" | undefined;
+        source_id?: string | undefined;
+        epoch_counter?: number | undefined;
+        health_summary?: string | Record<string, unknown> | undefined;
+    } | undefined;
+}>;
+declare const ModelOutputSignalSchema: z.ZodObject<{
+    tenant_id: z.ZodString;
+    signal_version: z.ZodString;
+    signal_type: z.ZodEnum<["TRANSACTION", "AUTH", "BEHAVIOR", "SYSTEM_TELEMETRY", "MODEL_OUTPUT", "ANOMALY_FLAG", "NETWORK_EVENT"]>;
+    principal: z.ZodObject<{
+        user_id: z.ZodOptional<z.ZodString>;
+        account_id: z.ZodOptional<z.ZodString>;
+        device_id: z.ZodOptional<z.ZodString>;
+        session_id: z.ZodOptional<z.ZodString>;
+        model_id: z.ZodOptional<z.ZodString>;
+        service_id: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        user_id?: string | undefined;
+        account_id?: string | undefined;
+        device_id?: string | undefined;
+        session_id?: string | undefined;
+        model_id?: string | undefined;
+        service_id?: string | undefined;
+    }, {
+        user_id?: string | undefined;
+        account_id?: string | undefined;
+        device_id?: string | undefined;
+        session_id?: string | undefined;
+        model_id?: string | undefined;
+        service_id?: string | undefined;
+    }>;
+    timestamp: z.ZodOptional<z.ZodDefault<z.ZodString>>;
+    confidence_hint: z.ZodOptional<z.ZodNumber>;
+    provenance: z.ZodOptional<z.ZodObject<{
+        mode: z.ZodOptional<z.ZodEnum<["DETERMINISTIC", "EXTERNAL_RNG", "ATTESTED"]>>;
+        source_id: z.ZodOptional<z.ZodString>;
+        epoch_counter: z.ZodOptional<z.ZodNumber>;
+        health_summary: z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodRecord<z.ZodString, z.ZodUnknown>]>>;
+    }, "strip", z.ZodTypeAny, {
+        mode?: "DETERMINISTIC" | "EXTERNAL_RNG" | "ATTESTED" | undefined;
+        source_id?: string | undefined;
+        epoch_counter?: number | undefined;
+        health_summary?: string | Record<string, unknown> | undefined;
+    }, {
+        mode?: "DETERMINISTIC" | "EXTERNAL_RNG" | "ATTESTED" | undefined;
+        source_id?: string | undefined;
+        epoch_counter?: number | undefined;
+        health_summary?: string | Record<string, unknown> | undefined;
+    }>>;
+    integrity: z.ZodOptional<z.ZodObject<{
+        hash: z.ZodOptional<z.ZodString>;
+        signature: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        hash?: string | undefined;
+        signature?: string | undefined;
+    }, {
+        hash?: string | undefined;
+        signature?: string | undefined;
+    }>>;
+} & {
+    signal_payload: z.ZodObject<{
+        missing_citations_rate: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+        citation_rate: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+        expected_citation_rate: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+        policy_violations: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+        policy_violation_rate: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+        tool_call_inconsistency: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+        tool_inconsistency_rate: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+        tool_miss_rate: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+        eval_window_n: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+    }, "strip", z.ZodTypeAny, {
+        policy_violations: number;
+        tool_call_inconsistency: number;
+        missing_citations_rate?: number | null | undefined;
+        citation_rate?: number | null | undefined;
+        expected_citation_rate?: number | null | undefined;
+        policy_violation_rate?: number | null | undefined;
+        tool_inconsistency_rate?: number | null | undefined;
+        tool_miss_rate?: number | null | undefined;
+        eval_window_n?: number | null | undefined;
+    }, {
+        missing_citations_rate?: number | null | undefined;
+        citation_rate?: number | null | undefined;
+        expected_citation_rate?: number | null | undefined;
+        policy_violations?: number | undefined;
+        policy_violation_rate?: number | null | undefined;
+        tool_call_inconsistency?: number | undefined;
+        tool_inconsistency_rate?: number | null | undefined;
+        tool_miss_rate?: number | null | undefined;
+        eval_window_n?: number | null | undefined;
+    }>;
+}, "strip", z.ZodTypeAny, {
+    tenant_id: string;
+    signal_version: string;
+    signal_type: "TRANSACTION" | "AUTH" | "BEHAVIOR" | "SYSTEM_TELEMETRY" | "MODEL_OUTPUT" | "ANOMALY_FLAG" | "NETWORK_EVENT";
+    signal_payload: {
+        policy_violations: number;
+        tool_call_inconsistency: number;
+        missing_citations_rate?: number | null | undefined;
+        citation_rate?: number | null | undefined;
+        expected_citation_rate?: number | null | undefined;
+        policy_violation_rate?: number | null | undefined;
+        tool_inconsistency_rate?: number | null | undefined;
+        tool_miss_rate?: number | null | undefined;
+        eval_window_n?: number | null | undefined;
+    };
+    principal: {
+        user_id?: string | undefined;
+        account_id?: string | undefined;
+        device_id?: string | undefined;
+        session_id?: string | undefined;
+        model_id?: string | undefined;
+        service_id?: string | undefined;
+    };
+    integrity?: {
+        hash?: string | undefined;
+        signature?: string | undefined;
+    } | undefined;
+    timestamp?: string | undefined;
+    confidence_hint?: number | undefined;
+    provenance?: {
+        mode?: "DETERMINISTIC" | "EXTERNAL_RNG" | "ATTESTED" | undefined;
+        source_id?: string | undefined;
+        epoch_counter?: number | undefined;
+        health_summary?: string | Record<string, unknown> | undefined;
+    } | undefined;
+}, {
+    tenant_id: string;
+    signal_version: string;
+    signal_type: "TRANSACTION" | "AUTH" | "BEHAVIOR" | "SYSTEM_TELEMETRY" | "MODEL_OUTPUT" | "ANOMALY_FLAG" | "NETWORK_EVENT";
+    signal_payload: {
+        missing_citations_rate?: number | null | undefined;
+        citation_rate?: number | null | undefined;
+        expected_citation_rate?: number | null | undefined;
+        policy_violations?: number | undefined;
+        policy_violation_rate?: number | null | undefined;
+        tool_call_inconsistency?: number | undefined;
+        tool_inconsistency_rate?: number | null | undefined;
+        tool_miss_rate?: number | null | undefined;
+        eval_window_n?: number | null | undefined;
+    };
+    principal: {
+        user_id?: string | undefined;
+        account_id?: string | undefined;
+        device_id?: string | undefined;
+        session_id?: string | undefined;
+        model_id?: string | undefined;
+        service_id?: string | undefined;
+    };
+    integrity?: {
+        hash?: string | undefined;
+        signature?: string | undefined;
+    } | undefined;
+    timestamp?: string | undefined;
+    confidence_hint?: number | undefined;
+    provenance?: {
+        mode?: "DETERMINISTIC" | "EXTERNAL_RNG" | "ATTESTED" | undefined;
+        source_id?: string | undefined;
+        epoch_counter?: number | undefined;
+        health_summary?: string | Record<string, unknown> | undefined;
+    } | undefined;
+}>;
+declare const SystemTelemetrySignalSchema: z.ZodObject<{
+    tenant_id: z.ZodString;
+    signal_version: z.ZodString;
+    signal_type: z.ZodEnum<["TRANSACTION", "AUTH", "BEHAVIOR", "SYSTEM_TELEMETRY", "MODEL_OUTPUT", "ANOMALY_FLAG", "NETWORK_EVENT"]>;
+    principal: z.ZodObject<{
+        user_id: z.ZodOptional<z.ZodString>;
+        account_id: z.ZodOptional<z.ZodString>;
+        device_id: z.ZodOptional<z.ZodString>;
+        session_id: z.ZodOptional<z.ZodString>;
+        model_id: z.ZodOptional<z.ZodString>;
+        service_id: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        user_id?: string | undefined;
+        account_id?: string | undefined;
+        device_id?: string | undefined;
+        session_id?: string | undefined;
+        model_id?: string | undefined;
+        service_id?: string | undefined;
+    }, {
+        user_id?: string | undefined;
+        account_id?: string | undefined;
+        device_id?: string | undefined;
+        session_id?: string | undefined;
+        model_id?: string | undefined;
+        service_id?: string | undefined;
+    }>;
+    timestamp: z.ZodOptional<z.ZodDefault<z.ZodString>>;
+    confidence_hint: z.ZodOptional<z.ZodNumber>;
+    provenance: z.ZodOptional<z.ZodObject<{
+        mode: z.ZodOptional<z.ZodEnum<["DETERMINISTIC", "EXTERNAL_RNG", "ATTESTED"]>>;
+        source_id: z.ZodOptional<z.ZodString>;
+        epoch_counter: z.ZodOptional<z.ZodNumber>;
+        health_summary: z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodRecord<z.ZodString, z.ZodUnknown>]>>;
+    }, "strip", z.ZodTypeAny, {
+        mode?: "DETERMINISTIC" | "EXTERNAL_RNG" | "ATTESTED" | undefined;
+        source_id?: string | undefined;
+        epoch_counter?: number | undefined;
+        health_summary?: string | Record<string, unknown> | undefined;
+    }, {
+        mode?: "DETERMINISTIC" | "EXTERNAL_RNG" | "ATTESTED" | undefined;
+        source_id?: string | undefined;
+        epoch_counter?: number | undefined;
+        health_summary?: string | Record<string, unknown> | undefined;
+    }>>;
+    integrity: z.ZodOptional<z.ZodObject<{
+        hash: z.ZodOptional<z.ZodString>;
+        signature: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        hash?: string | undefined;
+        signature?: string | undefined;
+    }, {
+        hash?: string | undefined;
+        signature?: string | undefined;
+    }>>;
+} & {
+    signal_payload: z.ZodObject<{
+        metric_name: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        value: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+        baseline: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+        window_seconds: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+        error_rate: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+        baseline_error_rate: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+        unusual_auth_rate: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+        firmware_hash_changed: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+        expected_hash_match: z.ZodOptional<z.ZodNullable<z.ZodBoolean>>;
+        sensor_deviation_score: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+    }, "strip", z.ZodTypeAny, {
+        error_rate: number;
+        unusual_auth_rate: number;
+        firmware_hash_changed: boolean;
+        value?: number | null | undefined;
+        metric_name?: string | null | undefined;
+        baseline?: number | null | undefined;
+        window_seconds?: number | null | undefined;
+        baseline_error_rate?: number | null | undefined;
+        expected_hash_match?: boolean | null | undefined;
+        sensor_deviation_score?: number | null | undefined;
+    }, {
+        value?: number | null | undefined;
+        metric_name?: string | null | undefined;
+        baseline?: number | null | undefined;
+        window_seconds?: number | null | undefined;
+        error_rate?: number | undefined;
+        baseline_error_rate?: number | null | undefined;
+        unusual_auth_rate?: number | undefined;
+        firmware_hash_changed?: boolean | undefined;
+        expected_hash_match?: boolean | null | undefined;
+        sensor_deviation_score?: number | null | undefined;
+    }>;
+}, "strip", z.ZodTypeAny, {
+    tenant_id: string;
+    signal_version: string;
+    signal_type: "TRANSACTION" | "AUTH" | "BEHAVIOR" | "SYSTEM_TELEMETRY" | "MODEL_OUTPUT" | "ANOMALY_FLAG" | "NETWORK_EVENT";
+    signal_payload: {
+        error_rate: number;
+        unusual_auth_rate: number;
+        firmware_hash_changed: boolean;
+        value?: number | null | undefined;
+        metric_name?: string | null | undefined;
+        baseline?: number | null | undefined;
+        window_seconds?: number | null | undefined;
+        baseline_error_rate?: number | null | undefined;
+        expected_hash_match?: boolean | null | undefined;
+        sensor_deviation_score?: number | null | undefined;
+    };
+    principal: {
+        user_id?: string | undefined;
+        account_id?: string | undefined;
+        device_id?: string | undefined;
+        session_id?: string | undefined;
+        model_id?: string | undefined;
+        service_id?: string | undefined;
+    };
+    integrity?: {
+        hash?: string | undefined;
+        signature?: string | undefined;
+    } | undefined;
+    timestamp?: string | undefined;
+    confidence_hint?: number | undefined;
+    provenance?: {
+        mode?: "DETERMINISTIC" | "EXTERNAL_RNG" | "ATTESTED" | undefined;
+        source_id?: string | undefined;
+        epoch_counter?: number | undefined;
+        health_summary?: string | Record<string, unknown> | undefined;
+    } | undefined;
+}, {
+    tenant_id: string;
+    signal_version: string;
+    signal_type: "TRANSACTION" | "AUTH" | "BEHAVIOR" | "SYSTEM_TELEMETRY" | "MODEL_OUTPUT" | "ANOMALY_FLAG" | "NETWORK_EVENT";
+    signal_payload: {
+        value?: number | null | undefined;
+        metric_name?: string | null | undefined;
+        baseline?: number | null | undefined;
+        window_seconds?: number | null | undefined;
+        error_rate?: number | undefined;
+        baseline_error_rate?: number | null | undefined;
+        unusual_auth_rate?: number | undefined;
+        firmware_hash_changed?: boolean | undefined;
+        expected_hash_match?: boolean | null | undefined;
+        sensor_deviation_score?: number | null | undefined;
+    };
+    principal: {
+        user_id?: string | undefined;
+        account_id?: string | undefined;
+        device_id?: string | undefined;
+        session_id?: string | undefined;
+        model_id?: string | undefined;
+        service_id?: string | undefined;
+    };
+    integrity?: {
+        hash?: string | undefined;
+        signature?: string | undefined;
+    } | undefined;
+    timestamp?: string | undefined;
+    confidence_hint?: number | undefined;
+    provenance?: {
+        mode?: "DETERMINISTIC" | "EXTERNAL_RNG" | "ATTESTED" | undefined;
+        source_id?: string | undefined;
+        epoch_counter?: number | undefined;
+        health_summary?: string | Record<string, unknown> | undefined;
+    } | undefined;
+}>;
+/** `signal_type: 'TRANSACTION'` with typed `signal_payload`. */
+type TransactionSignalEvent = z.infer<typeof TransactionSignalSchema>;
+/** `signal_type: 'ANOMALY_FLAG'` — `severity` required in `[0, 1]`. */
+type AnomalyFlagSignalEvent = z.infer<typeof AnomalyFlagSignalSchema>;
+/** `signal_type: 'AUTH'` with authentication outcome metadata. */
+type AuthSignalEvent = z.infer<typeof AuthSignalSchema>;
+/** `signal_type: 'BEHAVIOR'` — `deviation_score` in `[0, 1]`. */
+type BehaviorSignalEvent = z.infer<typeof BehaviorSignalSchema>;
+/** `signal_type: 'NETWORK_EVENT'` with ASN/IP/reputation fields. */
+type NetworkSignalEvent = z.infer<typeof NetworkSignalSchema>;
+/** `signal_type: 'MODEL_OUTPUT'` with citation / tool-consistency metrics in `[0, 1]` where applicable. */
+type ModelOutputSignalEvent = z.infer<typeof ModelOutputSignalSchema>;
+/** `signal_type: 'SYSTEM_TELEMETRY'` with metric samples and optional error-rate fractions in `[0, 1]`. */
+type SystemTelemetrySignalEvent = z.infer<typeof SystemTelemetrySignalSchema>;
+
+/**
+ * Factory functions that build ingestion {@link RawEventRequest} values for signal schema **v1**.
+ *
+ * Each builder validates the typed envelope and `signal_payload` with Zod, writes `payload.signal_version` to `'v1'` and the correct `signal_type`. The ingestion API assigns the persisted event id (UUID v7); omitting `timestamp` on the envelope yields an RFC 3339 default from {@link BaseEventSchema}.
+ *
+ */
+
+/**
+ * Transforms an incoming AuthSignalEvent into a validated RawEventRequest labeled as 'AUTH'.
+ *
+ * @remarks
+ * This function validates the `event.signal_payload` against the {@link AuthSignalPayloadSchema}.
+ * If the payload is malformed, a ZodError will be thrown.
+ *
+ * @param event - The raw signal data received from the authentication provider.
+ * @returns A formatted RawEventRequest ready for ingestion (enqueue / batch POST).
+ * @throws {ZodError} If the signal_payload does not match the expected schema.
+ *
+ * @example
+ * const raw = createAuthEvent(incomingData);
+ */
+declare const createAuthEvent: (event: AuthSignalEvent) => RawEventRequest;
+/**
+ * Transforms an incoming TransactionSignalEvent into a validated RawEventRequest labeled as 'TRANSACTION'.
+ *
+ * @remarks
+ * This function validates the `event.signal_payload` against the {@link TransactionSignalPayloadSchema}.
+ * If the payload is malformed, a ZodError will be thrown.
+ *
+ * @param event - The raw signal data received from the transaction provider.
+ * @returns A formatted RawEventRequest ready for ingestion (enqueue / batch POST).
+ * @throws {ZodError} If the signal_payload does not match the expected schema.
+ *
+ * @example
+ * const raw = createTransactionEvent(incomingData);
+ */
+declare function createTransactionEvent(event: TransactionSignalEvent): RawEventRequest;
+/**
+ * Transforms an incoming AnomalyFlagSignalEvent into a validated RawEventRequest labeled as 'ANOMALY_FLAG'.
+ *
+ * @remarks
+ * This function validates the `event.signal_payload` against the {@link AnomalyFlagSignalPayloadSchema}.
+ * If the payload is malformed, a ZodError will be thrown.
+ *
+ * @param event - The raw signal data received from the anomaly flag provider.
+ * @returns A formatted RawEventRequest ready for ingestion (enqueue / batch POST).
+ * @throws {ZodError} If the signal_payload does not match the expected schema.
+ *
+ * @example
+ * const raw = createAnomalyFlagEvent(incomingData);
+ */
+declare const createAnomalyFlagEvent: (event: AnomalyFlagSignalEvent) => RawEventRequest;
+/**
+ * Transforms an incoming BehaviorSignalEvent into a validated RawEventRequest labeled as 'BEHAVIOR'.
+ *
+ * @remarks
+ * This function validates the `event.signal_payload` against the {@link BehaviorSignalPayloadSchema}.
+ * If the payload is malformed, a ZodError will be thrown.
+ *
+ * @param event - The raw signal data received from the behavior provider.
+ * @returns A formatted RawEventRequest ready for ingestion (enqueue / batch POST).
+ * @throws {ZodError} If the signal_payload does not match the expected schema.
+ *
+ * @example
+ * const raw = createBehaviorEvent(incomingData);
+ */
+declare const createBehaviorEvent: (event: BehaviorSignalEvent) => RawEventRequest;
+/**
+ * Transforms an incoming NetworkSignalEvent into a validated RawEventRequest labeled as 'NETWORK_EVENT'.
+ *
+ * @remarks
+ * This function validates the `event.signal_payload` against the {@link NetworkSignalPayloadSchema}.
+ * If the payload is malformed, a ZodError will be thrown.
+ *
+ * @param event - The raw signal data received from the network provider.
+ * @returns A formatted RawEventRequest ready for ingestion (enqueue / batch POST).
+ * @throws {ZodError} If the signal_payload does not match the expected schema.
+ *
+ * @example
+ * const raw = createNetworkEvent(incomingData);
+ */
+declare const createNetworkEvent: (event: NetworkSignalEvent) => RawEventRequest;
+/**
+ * Transforms an incoming ModelOutputSignalEvent into a validated RawEventRequest labeled as 'MODEL_OUTPUT'.
+ *
+ * @remarks
+ * This function validates the `event.signal_payload` against the {@link ModelOutputSignalPayloadSchema}.
+ * If the payload is malformed, a ZodError will be thrown.
+ *
+ * @param event - The raw signal data received from the model output provider.
+ * @returns A formatted RawEventRequest ready for ingestion (enqueue / batch POST).
+ * @throws {ZodError} If the signal_payload does not match the expected schema.
+ *
+ * @example
+ * const raw = createModelOutputEvent(incomingData);
+ */
+declare const createModelOutputEvent: (event: ModelOutputSignalEvent) => RawEventRequest;
+/**
+ * Transforms an incoming SystemTelemetrySignalEvent into a validated RawEventRequest labeled as 'SYSTEM_TELEMETRY'.
+ *
+ * @remarks
+ * This function validates the `event.signal_payload` against the {@link SystemTelemetrySignalPayloadSchema}.
+ * If the payload is malformed, a ZodError will be thrown.
+ *
+ * @param event - The raw signal data received from the system telemetry provider.
+ * @returns A formatted RawEventRequest ready for ingestion (enqueue / batch POST).
+ * @throws {ZodError} If the signal_payload does not match the expected schema.
+ *
+ * @example
+ * const raw = createSystemTelemetryEvent(incomingData);
+ */
+declare const createSystemTelemetryEvent: (event: SystemTelemetrySignalEvent) => RawEventRequest;
+
+export { type APIErrorDetail, API_REGISTRY, type AdvisoryListResponse, type AdvisoryResponse, type AdvisorySeverity, type AdvisoryType, type AnomalyFlagSignalEvent, type AuthSignalEvent, type BaseEvent, type BatchEventResponse, type BehaviorSignalEvent, type EntityType, type EntityTypeLowerCase, type EventAcknowledgement, type EventError, type EventResourceOptions, type ExplainResponse, type ExplanationTrace, type ListAdvisoriesOptions, type ModelOutputSignalEvent, type NetworkSignalEvent, QatiAPIError, QatiAuthError, QatiConfigError, type QatiConfigInput, type QatiConfigOutput, QatiNotFoundError, QatiRateLimitError, QatiSDKError, QatiServerError, type RawEventRequest, RawEventRequestSchema, type RecommendedAction, Session, type SystemTelemetrySignalEvent, type TopContributor, type TransactionSignalEvent, type TrustState, type TrustStateOptions, type VerifyCredentialsResponse, baseUrlFor, createAnomalyFlagEvent, createAuthEvent, createBehaviorEvent, createModelOutputEvent, createNetworkEvent, createSystemTelemetryEvent, createTransactionEvent, parseQatiConfig, resolveQatiConfig };