qati-sdk 1.0.6 → 1.1.0

package/dist/index.cjs

@@ -3,6 +3,7 @@
 var dotenv = require('dotenv');
 var zod = require('zod');
 var axios = require('axios');
+var crypto = require('crypto');
 
 function _interopDefault (e) { return e && e.__esModule ? e : { default: e }; }
 
@@ -205,36 +206,35 @@ var parseDetail = (response) => {
   const { headers, status, statusText, data } = response;
   const requestId = headers["x-request-id"] ?? headers["X-Request-Id"];
   let message = statusText ?? "";
-  try {
-    const body = data;
-    if (typeof body === "object") {
-      const msg = body.detail || body.message;
-      message = typeof msg === "string" ? msg : JSON.stringify(msg);
-    }
-  } catch {
-    message = statusText;
-  }
-  return {
+  const initialErrorDetail = {
     status_code: status,
     message,
     request_id: requestId
   };
+  if (!data || typeof data !== "object") return initialErrorDetail;
+  const body = data;
+  const errorContent = body.detail ?? body.message;
+  if (errorContent === void 0 || errorContent === null)
+    return initialErrorDetail;
+  try {
+    message = typeof errorContent === "string" ? errorContent : JSON.stringify(errorContent) ?? statusText;
+  } catch {
+    message = statusText;
+  }
+  return { ...initialErrorDetail, message };
 };
 var qatiApiErrorFromRequestFailure = (err) => {
-  if (axios__default.default.isAxiosError(err)) {
-    const ax = err;
-    if (ax.response) {
-      const resp = ax.response;
-      const ErrorCls = STATUS_ERROR_MAP[resp.status] ?? (resp.status >= 500 ? QatiServerError : QatiAPIError);
-      return new ErrorCls(parseDetail(resp));
-    }
+  if (!axios__default.default.isAxiosError(err))
+    throw new TypeError(`Expected Axios error, got ${typeof err}`);
+  if (!err.response)
     return new QatiAPIError({
       status_code: 0,
-      message: ax.message || String(ax.code ?? "Axios request error"),
+      message: err.message || String(err.code ?? "Axios request error"),
       request_id: null
     });
-  }
-  throw new TypeError(`Expected Axios error, got ${typeof err}`);
+  const { response } = err;
+  const ErrorCls = STATUS_ERROR_MAP[response.status] ?? (response.status >= 500 ? QatiServerError : QatiAPIError);
+  return new ErrorCls(parseDetail(response));
 };
 
 // src/http/http-client.ts
@@ -309,16 +309,21 @@ var HttpClient = class {
       headers: resolvedHeaders,
       data: options.data
     };
-    if (!options.retry) {
-      const { data } = await instance.request(req);
-      return data.data;
-    }
+    if (!options.retry) return this.requestRaw(req, instance);
     const response = await this.retryRequest(
       () => instance.request(req),
       options
     );
     return response.data.data;
   }
+  async requestRaw(req, instance) {
+    try {
+      const { data } = await instance.request(req);
+      return data.data;
+    } catch (err) {
+      throw qatiApiErrorFromRequestFailure(err);
+    }
+  }
   async retryRequest(requestFn, options) {
     for (let attempt = 0; attempt <= this._config.maxRetries; attempt++) {
       try {
@@ -602,6 +607,59 @@ var ExplainResource = class {
   }
 };
 
+// src/resources/mcc/mcc-evaluation-resource.ts
+var EVALUATION_ENDPOINT_BASE = "/v1/mcc/evaluations";
+var EVALUATE_ENDPOINT = "/v1/mcc/evaluate";
+var MccEvaluationResource = class {
+  constructor(_http) {
+    this._http = _http;
+  }
+  _http;
+  apiName = "query_api";
+  /**
+   * Lists MCC evaluation traces (`GET /v1/mcc/evaluations`).
+   *
+   * Uses keyset pagination via `after_id` / `next_cursor`; no offset pagination.
+   */
+  async list(options) {
+    return this._http.request(
+      "GET",
+      EVALUATION_ENDPOINT_BASE,
+      {
+        api_name: this.apiName,
+        params: {
+          entity_key: options?.entityKey,
+          since: options?.since ? dateToIso8601(options.since) : void 0,
+          until: options?.until ? dateToIso8601(options.until) : void 0,
+          limit: options?.limit,
+          after_id: options?.afterId
+        }
+      }
+    );
+  }
+  /**
+   * Returns one MCC evaluation trace (`GET /v1/mcc/evaluations/{evaluation_id}`).
+   */
+  async get(evaluationId) {
+    return this._http.request(
+      "GET",
+      `${EVALUATION_ENDPOINT_BASE}/${encodeURIComponent(evaluationId)}`,
+      { api_name: this.apiName }
+    );
+  }
+  /**
+   * Runs MCC-Lite against the entity's latest trust state (`POST /v1/mcc/evaluate`).
+   *
+   * @throws When the entity has no trust state record (404).
+   */
+  async evaluate(entityKey) {
+    return this._http.request("POST", EVALUATE_ENDPOINT, {
+      api_name: this.apiName,
+      data: { entity_key: entityKey }
+    });
+  }
+};
+
 // src/resources/quota-resource.ts
 var QuotaResource = class {
   constructor(_http) {
@@ -728,10 +786,14 @@ var WebhookResource = class {
   }
   async delete(tenantId, webhookId) {
     const instance = this._http.getClient(this.apiName);
-    await instance.request({
-      method: "DELETE",
-      url: `/v1/tenants/${encodeURIComponent(tenantId)}/webhooks/${encodeURIComponent(webhookId)}`
-    });
+    try {
+      await instance.request({
+        method: "DELETE",
+        url: `/v1/tenants/${encodeURIComponent(tenantId)}/webhooks/${encodeURIComponent(webhookId)}`
+      });
+    } catch (err) {
+      throw qatiApiErrorFromRequestFailure(err);
+    }
   }
   async test(tenantId, webhookId) {
     return this._http.request(
@@ -751,6 +813,7 @@ var Client = class extends HttpClient {
   _events;
   _webhooks;
   _quotas;
+  _mccEvaluation;
   /**
    * @param config - Resolved SDK configuration (typically `session.config`).
    * @param axiosInstances - Optional per-API `axios` instances; see {@link Session#createClient}.
@@ -765,6 +828,7 @@ var Client = class extends HttpClient {
     this._events = new EventResource(this);
     this._webhooks = new WebhookResource(this);
     this._quotas = new QuotaResource(this);
+    this._mccEvaluation = new MccEvaluationResource(this);
   }
   /**
    * Tenant API surface (credentials verification).
@@ -824,6 +888,14 @@ var Client = class extends HttpClient {
   get quotas() {
     return this._quotas;
   }
+  /**
+   * MCC evaluation trace queries.
+   *
+   * @returns {@link MccResource} for the Query API.
+   */
+  get mccEvaluation() {
+    return this._mccEvaluation;
+  }
   /**
    * Flushes the event ingestion buffer (best-effort), then shuts down the batch scheduler.
    * Call this on process shutdown so queued events are not lost.
@@ -864,6 +936,33 @@ var Session = class {
     return new Client(this._config, httpClients ?? {});
   }
 };
+
+// src/shared/types/webhook.ts
+var WebhookEvent = {
+  TRUST_STATE_TIER_ESCALATED: "trust_state.tier_escalated",
+  ADVISORY_CREATED: "advisory.created",
+  MCC_EVALUATION_COMPLETED: "mcc.evaluation.completed"
+};
+
+// src/shared/types/anomaly-type.ts
+var ANOMALY_TYPES = [
+  "DEVICE_UNVERIFIED",
+  "NEW_DEVICE",
+  "RAPID_PROMPTING",
+  "HIGH_VOLUME_SESSION",
+  "ABNORMAL_RETRY_PATTERN",
+  "SUSPICIOUS_CADENCE",
+  "POLICY_ABUSE_PATTERN"
+];
+
+// src/shared/types/device-trust-state.ts
+var DEVICE_TRUST_STATES = [
+  "TRUSTED",
+  "RECOGNIZED",
+  "NEW",
+  "UNVERIFIED",
+  "UNKNOWN"
+];
 var fraction01 = () => zod.z.number().min(0).max(1);
 var fraction01Nullable = () => fraction01().nullable().optional();
 var nonEmptyString = () => zod.z.string().min(1);
@@ -881,6 +980,7 @@ var SIGNAL_TYPES = [
   "PROMPT_INPUT",
   "CONTEXT_INTEGRITY",
   "TOOL_CALL",
+  "TOOL_CALL_PROPOSED",
   "RAG_RETRIEVAL",
   "POLICY_EVENT",
   "USER_FEEDBACK",
@@ -942,7 +1042,57 @@ var RawEventRequestSchema = zod.z.object({
 
 // src/v1/schemas/anomaly-flag.ts
 var AnomalyFlagSignalPayloadSchema = zod.z.object({
-  severity: fraction01()
+  severity: fraction01().describe(
+    "Normalized 0\u20131 anomaly severity. Sourcing: existing detector output or rule-derived severity."
+  ),
+  anomaly_type: zod.z.enum(ANOMALY_TYPES).describe(
+    "Semantic anomaly class (DEVICE_UNVERIFIED, NEW_DEVICE, RAPID_PROMPTING, HIGH_VOLUME_SESSION, ABNORMAL_RETRY_PATTERN, SUSPICIOUS_CADENCE, or POLICY_ABUSE_PATTERN). Sourcing: set by the detector or rule that fired."
+  ),
+  metric_name: zod.z.string().nullable().optional().describe(
+    "Name of the measured quantity that triggered the anomaly (e.g. prompt_rate_per_min, new_device_seen). Sourcing: detector/rule output."
+  ),
+  metric_value: zod.z.number().nullable().optional().describe(
+    "Observed value of the measured quantity. Sourcing: computed from session, device, or user events."
+  ),
+  threshold: zod.z.number().nullable().optional().describe(
+    "Configured threshold that the metric exceeded or violated. Sourcing: engine configuration value."
+  ),
+  window_seconds: zod.z.number().int().min(1).nullable().optional().describe(
+    "Time window over which the metric was measured. Sourcing: detector rolling-window configuration."
+  ),
+  device_trust_state: zod.z.enum(DEVICE_TRUST_STATES).nullable().optional().describe(
+    "Device trust classification (TRUSTED, RECOGNIZED, NEW, UNVERIFIED, or UNKNOWN). Sourcing: device fingerprint or attestation service."
+  ),
+  device_verified: zod.z.boolean().nullable().optional().describe(
+    "Whether the device has been verified. Sourcing: device attestation or registration service."
+  ),
+  device_id: zod.z.string().nullable().optional().describe(
+    "Stable device identifier when available. Sourcing: client device registry or fingerprint service."
+  ),
+  device_fingerprint_hash: zod.z.string().nullable().optional().describe(
+    "Hash of device fingerprint attributes. Sourcing: stable_hash of normalized device fingerprint payload."
+  ),
+  cadence_deviation: zod.z.number().min(0).max(1).nullable().optional().describe(
+    "0\u20131 normalized faster-than-baseline deviation of message cadence. Sourcing: min(1, max(0, (baseline_interval_ms - current_interval_ms) / baseline_interval_ms)) when current < baseline, else 0."
+  ),
+  inter_message_interval_ms: zod.z.number().nonnegative().nullable().optional().describe(
+    "Milliseconds between the current user message and the previous user message in the same session. Sourcing: current_ts \u2212 previous_ts; omit if no prior user message."
+  ),
+  event_count: zod.z.number().int().nonnegative().nullable().optional().describe(
+    "Count of events that triggered the anomaly in the current window. Sourcing: rolling-window event counter."
+  ),
+  baseline_event_count: zod.z.number().int().nonnegative().nullable().optional().describe(
+    "Expected event count in the baseline window. Sourcing: historical baseline or policy-configured value."
+  ),
+  request_count: zod.z.number().int().nonnegative().nullable().optional().describe(
+    "Count of requests that triggered the anomaly in the current window. Sourcing: rolling-window request counter."
+  ),
+  baseline_request_count: zod.z.number().int().nonnegative().nullable().optional().describe(
+    "Expected request count in the baseline window. Sourcing: historical baseline or policy-configured value."
+  ),
+  volume_ratio: zod.z.number().nonnegative().nullable().optional().describe(
+    "Ratio of request count to baseline request count. Sourcing: request_count / max(baseline_request_count, 1) when not precomputed; omit if counts unavailable."
+  )
 });
 BaseEventSchema.extend({
   signal_payload: AnomalyFlagSignalPayloadSchema
@@ -996,9 +1146,7 @@ var ApiCallSignalPayloadSchema = zod.z.object({
   authorized: zod.z.boolean().nullable().describe(
     "Whether the call was authorized; null means authorization is unknown."
   ),
-  authentication_present: zod.z.boolean().nullable().optional().describe(
-    "Whether authentication credentials were present when known."
-  ),
+  authentication_present: zod.z.boolean().nullable().optional().describe("Whether authentication credentials were present when known."),
   rate_limited: zod.z.boolean().nullable().optional().describe("Whether the call was rate limited when known."),
   external_side_effect: zod.z.boolean().nullable().optional().describe(
     "Whether the call modifies state outside the caller context when known."
@@ -1040,8 +1188,40 @@ var createAuthEvent = (event) => {
   const signalPayload = AuthSignalPayloadSchema.parse(event.signal_payload);
   return buildRawEventRequest(event, signalPayload, "AUTH");
 };
+
+// src/shared/types/behavior-type.ts
+var BEHAVIOR_TYPES = [
+  "chat_cadence",
+  "repeated_retries",
+  "session_hopping",
+  "policy_challenge_pattern",
+  "recursive_loop",
+  "abnormal_usage_pattern"
+];
+
+// src/v1/schemas/behavior.ts
 var BehaviorSignalPayloadSchema = zod.z.object({
-  deviation_score: fraction01()
+  behavior_type: zod.z.enum(BEHAVIOR_TYPES).describe(
+    "Semantic behavior class (chat_cadence, repeated_retries, session_hopping, policy_challenge_pattern, recursive_loop, or abnormal_usage_pattern). Sourcing: behavioral pattern detector or rolling-window analyzer."
+  ),
+  deviation_score: fraction01().describe(
+    "0\u20131 normalized deviation from expected baseline behavior. Sourcing: computed as min(1, max(0, (current - baseline) / max(baseline, 1)))."
+  ),
+  current_value: zod.z.number().nullable().optional().describe(
+    "Observed behavioral metric in the current window. Sourcing: rolling-window counter or rate from session/user events."
+  ),
+  baseline_value: zod.z.number().nullable().optional().describe(
+    "Expected baseline behavioral metric. Sourcing: historical baseline or policy-configured expected value."
+  ),
+  unit: zod.z.string().nullable().optional().describe(
+    "Unit for current_value and baseline_value (e.g. messages_per_minute). Sourcing: detector metadata."
+  ),
+  baseline_window_seconds: zod.z.number().int().min(1).nullable().optional().describe(
+    "Duration in seconds of the baseline measurement window. Sourcing: baseline configuration."
+  ),
+  current_window_seconds: zod.z.number().int().min(1).nullable().optional().describe(
+    "Duration in seconds of the current measurement window. Sourcing: detector rolling-window configuration."
+  )
 });
 BaseEventSchema.extend({
   signal_payload: BehaviorSignalPayloadSchema
@@ -1069,9 +1249,7 @@ var ContextIntegritySignalPayloadSchema = zod.z.object({
     "Origin of the evaluated context: CONVERSATION_HISTORY, RETRIEVED_DOCUMENT, TOOL_OUTPUT, SYSTEM, DEVELOPER, or USER."
   ),
   instruction_conflict_detected: zod.z.boolean().describe("Whether conflicting instructions were detected in context."),
-  untrusted_instruction_detected: zod.z.boolean().describe(
-    "Whether an untrusted source contains instruction-like text."
-  ),
+  untrusted_instruction_detected: zod.z.boolean().describe("Whether an untrusted source contains instruction-like text."),
   context_priority_violation: zod.z.boolean().describe(
     "Whether lower-priority context attempts to override higher-priority context."
   ),
@@ -1108,6 +1286,12 @@ var ContextIntegritySignalPayloadSchema = zod.z.object({
   contains_instruction_override: zod.z.boolean().optional().default(false).describe("Whether the context contains an instruction override."),
   context_injection_score: fraction01Nullable().describe(
     "0\u20131 context injection score when available; omit if unknown."
+  ),
+  retrieved_context_hash: zod.z.string().nullable().optional().describe(
+    "Hash of retrieved or assembled context when available. Sourcing: stable_hash of the canonicalized context bundle for audit/explainability."
+  ),
+  context_source_count: zod.z.number().int().nonnegative().nullable().optional().describe(
+    "Number of context sources evaluated in this context window. Sourcing: count of distinct sources in the assembled context."
   )
 });
 BaseEventSchema.extend({
@@ -1121,6 +1305,17 @@ var createContextIntegrityEvent = (event) => {
   );
   return buildRawEventRequest(event, signalPayload, "CONTEXT_INTEGRITY");
 };
+
+// src/shared/types/finish-reason.ts
+var FINISH_REASONS = [
+  "STOP",
+  "LENGTH",
+  "CONTENT_FILTER",
+  "TOOL_CALLS",
+  "ERROR"
+];
+
+// src/v1/schemas/model-output.ts
 var ModelOutputSignalPayloadSchema = zod.z.object({
   missing_citations_rate: fraction01Nullable(),
   citation_rate: fraction01Nullable(),
@@ -1146,6 +1341,9 @@ var ModelOutputSignalPayloadSchema = zod.z.object({
   ),
   contains_unsupported_claims: zod.z.boolean().optional().default(false).describe(
     "Whether the output contains unsupported claims; confirm with clients."
+  ),
+  finish_reason: zod.z.enum(FINISH_REASONS).nullable().optional().describe(
+    "Model API finish reason when available (stop, length, content_filter, tool_calls, or error). Sourcing: model API response finish_reason field."
   )
 });
 BaseEventSchema.extend({
@@ -1160,14 +1358,27 @@ var createModelOutputEvent = (event) => {
   return buildRawEventRequest(event, signalPayload, "MODEL_OUTPUT");
 };
 var NetworkSignalPayloadSchema = zod.z.object({
-  ip: zod.z.string().nullable().optional(),
-  asn: zod.z.string().nullable().optional(),
-  reputation_score: fraction01Nullable(),
-  threat_score: fraction01Nullable(),
-  is_datacenter: zod.z.boolean().nullable().optional(),
-  is_untrusted_segment: zod.z.boolean().optional().default(false).describe("Traffic originated from an untrusted network segment"),
+  ip: zod.z.string().nullable().optional().describe(
+    "Client IP address. Sourcing: request IP from API gateway or reverse proxy."
+  ),
+  asn: zod.z.number().int().nullable().optional().describe("Autonomous System Number. Sourcing: GeoIP/ASN lookup service."),
+  country: zod.z.string().nullable().optional().describe(
+    "ISO 3166-1 alpha-2 country code. Sourcing: GeoIP lookup; optional when location is unavailable."
+  ),
+  reputation_score: fraction01Nullable().describe(
+    "IP reputation score (0\u20131, higher is more trusted). Sourcing: IP reputation provider, internal risk service, or safe default 0.5."
+  ),
+  threat_score: fraction01Nullable().describe(
+    "Threat intelligence score (0\u20131). Sourcing: threat intel provider or internal risk model; safe default 0.0."
+  ),
+  is_datacenter: zod.z.boolean().nullable().optional().describe(
+    "Whether the origin IP is a datacenter/proxy/VPN. Sourcing: GeoIP/proxy provider; safe default False."
+  ),
+  is_untrusted_segment: zod.z.boolean().nullable().optional().describe(
+    "Whether traffic originated from an untrusted network segment. Sourcing: internal network segmentation policy; safe default False."
+  ),
   asn_reputation: fraction01Nullable().describe(
-    "Reputation score for the origin ASN (0\u20131, higher is more trusted)"
+    "Reputation score for the origin ASN (0\u20131, higher is more trusted). Sourcing: internal reputation map or external provider; safe default 0.5."
   )
 });
 BaseEventSchema.extend({
@@ -1241,7 +1452,22 @@ var PromptInputSignalPayloadSchema = zod.z.object({
   complexity_score: fraction01Nullable().describe(
     "0\u20131 prompt complexity or ambiguity score; omit or null to treat as 0.0."
   ),
-  prompt_hash: promptHashSchema
+  prompt_hash: promptHashSchema,
+  inter_message_interval_ms: zod.z.number().nonnegative().nullable().optional().describe(
+    "Milliseconds between the current user message and the previous user message in the same session. Sourcing: current_ts \u2212 previous_ts; omit if no prior user message."
+  ),
+  cadence_deviation: zod.z.number().min(0).max(1).nullable().optional().describe(
+    "0\u20131 normalized faster-than-baseline deviation of message cadence. Sourcing: min(1, max(0, (baseline_interval_ms - current_interval_ms) / baseline_interval_ms)) when current < baseline, else 0."
+  ),
+  previous_prompt_delta_ms: zod.z.number().nonnegative().nullable().optional().describe(
+    "Milliseconds between the current prompt and the previous prompt. Sourcing: current_prompt_ts \u2212 previous_prompt_ts; omit if no prior prompt."
+  ),
+  prompt_sequence_index: zod.z.number().int().nonnegative().nullable().optional().describe(
+    "Index of the prompt in the session prompt sequence. Sourcing: monotonic session prompt counter starting at 0."
+  ),
+  rapid_repeat: zod.z.boolean().optional().default(false).describe(
+    "Whether the prompt is a rapid repeat of the previous prompt. Sourcing: compare current prompt hash/timestamp to previous prompt within configured repeat window."
+  )
 });
 BaseEventSchema.extend({
   signal_payload: PromptInputSignalPayloadSchema
@@ -1270,10 +1496,14 @@ var RagRetrievalSignalPayloadSchema = zod.z.object({
   ),
   untrusted_source_count: zod.z.number().int().nonnegative().optional().default(0).describe("Count of low-trust or untrusted retrieved sources."),
   retrieved_context_tokens: zod.z.number().int().nonnegative().optional().default(0).describe("Total retrieved context token count when available."),
-  context_injection_score: fraction01().optional().default(0).describe(
-    "0\u20131 context injection risk score; use 0.0 when unavailable."
+  context_injection_score: fraction01().optional().default(0).describe("0\u20131 context injection risk score; use 0.0 when unavailable."),
+  document_ids: zod.z.array(zod.z.string()).optional().default([]).describe("Identifiers for retrieved documents when available."),
+  contains_sensitive_data: zod.z.boolean().optional().default(false).describe(
+    "Whether retrieved context contains sensitive data. Sourcing: PII/sensitive data classifier on retrieved bundle."
   ),
-  document_ids: zod.z.array(zod.z.string()).optional().default([]).describe("Identifiers for retrieved documents when available.")
+  retrieval_hash: zod.z.string().nullable().optional().describe(
+    "Hash of the assembled retrieval context bundle when available. Sourcing: stable_hash of the canonicalized retrieval bundle."
+  )
 });
 BaseEventSchema.extend({
   signal_payload: RagRetrievalSignalPayloadSchema
@@ -1309,7 +1539,22 @@ var SessionSignalPayloadSchema = zod.z.object({
   session_timeout: zod.z.boolean().optional().default(false).describe("Whether the session ended due to a timeout."),
   abandoned: zod.z.boolean().optional().default(false).describe("Whether the session ended abruptly without a clean close."),
   conversation_id: zod.z.string().nullable().optional().describe("Related conversation identifier when available."),
-  user_id: zod.z.string().nullable().optional().describe("Related user identifier when available.")
+  user_id: zod.z.string().nullable().optional().describe("Related user identifier when available."),
+  inter_message_interval_ms: zod.z.number().nonnegative().nullable().optional().describe(
+    "Milliseconds between the current user message and the previous user message in the same session. Sourcing: current_ts \u2212 previous_ts; omit if no prior user message."
+  ),
+  cadence_deviation: zod.z.number().min(0).max(1).nullable().optional().describe(
+    "0\u20131 normalized faster-than-baseline deviation of message cadence. Sourcing: min(1, max(0, (baseline_interval_ms - current_interval_ms) / baseline_interval_ms)) when current < baseline, else 0."
+  ),
+  message_count: zod.z.number().int().nonnegative().nullable().optional().describe(
+    "Count of messages in the session. Sourcing: session message counter over the measurement window."
+  ),
+  window_seconds: zod.z.number().int().nonnegative().nullable().optional().describe(
+    "Time window over which message_count was measured. Sourcing: rolling-window configuration or session analytics window."
+  ),
+  session_duration_seconds: zod.z.number().nonnegative().nullable().optional().describe(
+    "Duration of the session in seconds. Sourcing: session start/end timestamps or session_age_seconds at event emission time."
+  )
 });
 BaseEventSchema.extend({
   signal_payload: SessionSignalPayloadSchema
@@ -1375,9 +1620,7 @@ var ToolCallSignalPayloadSchema = zod.z.object({
     "Whether policy allowed the tool call; null means authorization is unknown."
   ),
   safety_critical: zod.z.boolean().describe("Whether the call can create serious consequences."),
-  external_side_effect: zod.z.boolean().describe(
-    "Whether the action changes state outside the model context."
-  ),
+  external_side_effect: zod.z.boolean().describe("Whether the action changes state outside the model context."),
   tool_call_success: zod.z.boolean().nullable().optional().describe("Whether the tool call succeeded when known."),
   latency_ms: zod.z.number().nonnegative().nullable().optional().describe("Tool latency in milliseconds when available."),
   error_code: zod.z.string().nullable().optional().describe("Error code when the tool call failed."),
@@ -1391,12 +1634,8 @@ var ToolCallSignalPayloadSchema = zod.z.object({
     "Risk category for the attempted action (e.g. SECURITY, CODE, FINANCIAL, ADMIN) when available."
   ),
   method: zod.z.string().nullable().optional().describe("HTTP or RPC method for the tool call when applicable."),
-  sensitive_data_involved: zod.z.boolean().optional().default(false).describe(
-    "Whether sensitive data was involved in the request or result."
-  ),
-  contains_phi: zod.z.boolean().optional().default(false).describe(
-    "Whether protected health information was returned or touched."
-  ),
+  sensitive_data_involved: zod.z.boolean().optional().default(false).describe("Whether sensitive data was involved in the request or result."),
+  contains_phi: zod.z.boolean().optional().default(false).describe("Whether protected health information was returned or touched."),
   sensitive_domain: zod.z.boolean().optional().default(false).describe("Whether the tool call applies to a sensitive domain.")
 });
 BaseEventSchema.extend({
@@ -1408,6 +1647,139 @@ var createToolCallEvent = (event) => {
   const signalPayload = ToolCallSignalPayloadSchema.parse(event.signal_payload);
   return buildRawEventRequest(event, signalPayload, "TOOL_CALL");
 };
+
+// src/shared/types/action-scope.ts
+var ACTION_SCOPES = [
+  "LOCAL",
+  "ACCOUNT",
+  "ORGANIZATION",
+  "EXTERNAL"
+];
+
+// src/shared/types/approval-type.ts
+var APPROVAL_TYPES = [
+  "HUMAN",
+  "ADMIN",
+  "POLICY",
+  "DUAL_CONTROL",
+  "MANAGER",
+  "SECURITY_REVIEW"
+];
+
+// src/shared/types/data-scope.ts
+var DATA_SCOPES = [
+  "NONE",
+  "SELF",
+  "SINGLE_USER",
+  "MULTI_USER",
+  "ORGANIZATION",
+  "EXTERNAL"
+];
+
+// src/v1/schemas/tool-call-proposed.ts
+var ToolCallProposedSignalPayloadSchema = zod.z.object({
+  tool_name: nonEmptyString().describe(
+    "Name of the proposed tool. Sourcing: tool registry or agent planner."
+  ),
+  tool_category: zod.z.enum(TOOL_CATEGORIES).describe(
+    "Category of the proposed tool (e.g. DATABASE, FILE, EMAIL, API, PAYMENT, SUPPORT, SEARCH, OTHER). Sourcing: tool registry metadata."
+  ),
+  action: nonEmptyString().describe(
+    "Sanitized or normalized proposed action. Sourcing: agent planner or tool-call argument normalizer."
+  ),
+  action_hash: nonEmptyString().describe(
+    "Hash of the raw action when sensitive. Sourcing: stable_hash of the canonicalized action string."
+  ),
+  authorized: zod.z.boolean().describe(
+    "Whether the proposed action is authorized by policy. Sourcing: policy engine authorization check."
+  ),
+  authorization_token_present: zod.z.boolean().optional().default(false).describe(
+    "Whether an authorization token is present for the proposed action. Sourcing: request context or policy token validator."
+  ),
+  safety_critical: zod.z.boolean().optional().default(false).describe(
+    "Whether the proposed action is safety or security critical. Sourcing: tool registry risk classification."
+  ),
+  external_side_effect: zod.z.boolean().optional().default(false).describe(
+    "Whether the proposed action changes state outside the model context. Sourcing: tool registry side-effect metadata."
+  ),
+  execution_pending: zod.z.boolean().optional().default(true).describe(
+    "Whether execution is still pending (pre-execution gate). Sourcing: agent runtime state; True at proposal time."
+  ),
+  argument_risk_score: fraction01().optional().default(0).describe(
+    "0\u20131 risk score for proposed tool arguments. Sourcing: argument risk classifier or policy evaluator."
+  ),
+  argument_risk_reasons: zod.z.array(zod.z.string()).optional().default([]).describe(
+    "Human-readable reasons for argument risk. Sourcing: argument risk classifier output."
+  ),
+  requested_records: zod.z.number().int().nonnegative().nullable().optional().describe(
+    "Number of records requested by the proposed action. Sourcing: parsed tool-call arguments or query planner."
+  ),
+  baseline_records: zod.z.number().int().nonnegative().nullable().optional().describe(
+    "Policy or historical baseline record count for comparison. Sourcing: policy configuration or user/session baseline."
+  ),
+  contains_sensitive_data: zod.z.boolean().optional().default(false).describe(
+    "Whether the proposed action touches sensitive data. Sourcing: data sensitivity classifier or policy check."
+  ),
+  sensitive_domain: zod.z.boolean().optional().default(false).describe(
+    "Whether the proposed action applies to a sensitive domain. Sourcing: domain classifier or tool registry metadata."
+  ),
+  approval_missing: zod.z.boolean().nullable().optional().describe(
+    "Whether required approval is missing. Sourcing: policy engine check when approval_required is true and no valid approval is present."
+  ),
+  approval_required: zod.z.boolean().nullable().optional().describe(
+    "Whether the proposed action requires approval under policy, workflow, role, or sensitivity rules. Sourcing: policy engine approval rules."
+  ),
+  approval_type: zod.z.enum(APPROVAL_TYPES).nullable().optional().describe(
+    "Type of approval required for the proposed action. Sourcing: policy engine approval type."
+  ),
+  approval_reason: zod.z.string().nullable().optional().describe(
+    "Reason approval is required for the proposed action. Sourcing: policy engine approval reason."
+  ),
+  approval_id: zod.z.string().nullable().optional().describe(
+    "Identifier of the approval record when present. Sourcing: approval workflow or policy engine."
+  ),
+  reversible: zod.z.boolean().nullable().optional().describe(
+    "Whether the proposed action is reversible. Sourcing: tool registry metadata or action definition."
+  ),
+  rollback_available: zod.z.boolean().optional().default(false).describe(
+    "Whether a rollback path exists for the proposed action. Sourcing: workflow engine metadata or action definition."
+  ),
+  rollback_plan_id: zod.z.string().nullable().optional().describe(
+    "Rollback plan identifier when available. Sourcing: workflow engine compensation/rollback configuration."
+  ),
+  financially_material: zod.z.boolean().optional().default(false).describe(
+    "Whether the proposed action is financially material. Sourcing: tool registry metadata or action definition."
+  ),
+  financial_amount: zod.z.number().nullable().optional().describe(
+    "Financial amount of the proposed action. Sourcing: parsed tool-call arguments or billing estimate."
+  ),
+  financial_currency: zod.z.string().nullable().optional().describe(
+    "Currency of the financial amount. Sourcing: ISO 4217 code from tool-call arguments or billing system."
+  ),
+  security_sensitive: zod.z.boolean().optional().default(false).describe(
+    "Whether the proposed action is security sensitive. Sourcing: tool registry risk classification or policy check."
+  ),
+  affects_user_data: zod.z.boolean().optional().default(false).describe(
+    "Whether the proposed action affects user data. Sourcing: data scope classifier or policy check."
+  ),
+  data_scope: zod.z.enum(DATA_SCOPES).nullable().optional().describe(
+    "Scope of data affected by the proposed action. Sourcing: data scope classifier or policy engine."
+  ),
+  action_scope: zod.z.enum(ACTION_SCOPES).nullable().optional().describe(
+    "Scope of the proposed action (LOCAL, ACCOUNT, ORGANIZATION, or EXTERNAL). Sourcing: tool registry metadata or policy engine."
+  )
+});
+BaseEventSchema.extend({
+  signal_payload: ToolCallProposedSignalPayloadSchema
+});
+
+// src/v1/builders/tool-call-proposed-builder.ts
+var createToolCallProposedEvent = (event) => {
+  const signalPayload = ToolCallProposedSignalPayloadSchema.parse(
+    event.signal_payload
+  );
+  return buildRawEventRequest(event, signalPayload, "TOOL_CALL_PROPOSED");
+};
 var TransactionSignalPayloadSchema = zod.z.object({
   amount: zod.z.number().nonnegative().default(0).describe("Transaction amount in base currency"),
   amount_minor: zod.z.number().int().nonnegative().nullable().optional().describe("Transaction amount in minor units (e.g. cents)"),
@@ -1476,7 +1848,10 @@ var UserFeedbackSignalPayloadSchema = zod.z.object({
     "0\u20131 user-reported severity when available."
   ),
   response_id: zod.z.string().nullable().optional().describe("Identifier of the response being evaluated."),
-  user_comment_hash: zod.z.string().nullable().optional().describe("Hash of optional user comment when available.")
+  user_comment_hash: zod.z.string().nullable().optional().describe("Hash of optional user comment when available."),
+  conversation_id: zod.z.string().nullable().optional().describe(
+    "Related conversation identifier when available. Sourcing: conversation or session ID from the feedback UI context."
+  )
 });
 BaseEventSchema.extend({
   signal_payload: UserFeedbackSignalPayloadSchema
@@ -1511,6 +1886,7 @@ var WORKFLOW_ACTOR_TYPES = ["USER", "AI_AGENT", "SYSTEM"];
 
 // src/v1/schemas/workflow-action.ts
 var WorkflowActionSignalPayloadSchema = zod.z.object({
+  workflow_name: nonEmptyString().describe("Workflow name."),
   workflow_id: nonEmptyString().describe("Workflow identifier."),
   workflow_type: nonEmptyString().describe("Type of workflow."),
   action_name: nonEmptyString().describe("Workflow action attempted."),
@@ -1532,7 +1908,52 @@ var WorkflowActionSignalPayloadSchema = zod.z.object({
   new_counterparty: zod.z.boolean().optional().default(false).describe("Whether a new vendor, customer, or recipient is involved."),
   is_new_vendor: zod.z.boolean().optional().default(false).describe("Whether the action involves a new vendor."),
   is_new_recipient: zod.z.boolean().optional().default(false).describe("Whether the action involves a new recipient."),
-  is_new_endpoint: zod.z.boolean().optional().default(false).describe("Whether the action targets a new endpoint.")
+  is_new_endpoint: zod.z.boolean().optional().default(false).describe("Whether the action targets a new endpoint."),
+  step_id: zod.z.string().nullable().optional().describe(
+    "Workflow step identifier when available. Sourcing: workflow engine step ID."
+  ),
+  reversible: zod.z.boolean().nullable().optional().describe(
+    "Whether the action can be rolled back or compensated. Sourcing: workflow engine metadata or action definition."
+  ),
+  rollback_plan_id: zod.z.string().nullable().optional().describe(
+    "Rollback plan identifier when available. Sourcing: workflow engine compensation/rollback configuration."
+  ),
+  approval_required: zod.z.boolean().nullable().optional().describe(
+    "Whether the proposed action requires approval under policy, workflow, role, or sensitivity rules. Sourcing: policy engine approval rules."
+  ),
+  approval_missing: zod.z.boolean().nullable().optional().describe(
+    "Whether required approval is missing. Sourcing: policy engine check when approval_required is true and no valid approval is present."
+  ),
+  approval_type: zod.z.enum(APPROVAL_TYPES).nullable().optional().describe(
+    "Type of approval required for the proposed action. Sourcing: policy engine approval type."
+  ),
+  rollback_available: zod.z.boolean().optional().default(false).describe(
+    "Whether a rollback path exists for the proposed action. Sourcing: workflow engine metadata or action definition."
+  ),
+  financially_material: zod.z.boolean().optional().default(false).describe(
+    "Whether the proposed action is financially material. Sourcing: workflow action definition or billing estimate."
+  ),
+  financial_amount: zod.z.number().nullable().optional().describe(
+    "Financial amount of the proposed action. Sourcing: workflow action arguments or billing system."
+  ),
+  financial_currency: zod.z.string().nullable().optional().describe(
+    "Currency of the financial amount. Sourcing: ISO 4217 code from workflow action or billing system."
+  ),
+  security_sensitive: zod.z.boolean().optional().default(false).describe(
+    "Whether the proposed action is security sensitive. Sourcing: workflow action risk classification or policy check."
+  ),
+  contains_sensitive_data: zod.z.boolean().optional().default(false).describe(
+    "Whether the proposed action touches sensitive data. Sourcing: data sensitivity classifier or policy check."
+  ),
+  affects_user_data: zod.z.boolean().optional().default(false).describe(
+    "Whether the proposed action affects user data. Sourcing: data scope classifier or policy check."
+  ),
+  data_scope: zod.z.enum(DATA_SCOPES).nullable().optional().describe(
+    "Scope of data affected by the proposed action. Sourcing: data scope classifier or policy engine."
+  ),
+  action_scope: zod.z.enum(ACTION_SCOPES).nullable().optional().describe(
+    "Scope of the proposed action (LOCAL, ACCOUNT, ORGANIZATION, or EXTERNAL). Sourcing: workflow engine metadata or policy engine."
+  )
 });
 BaseEventSchema.extend({
   signal_payload: WorkflowActionSignalPayloadSchema
@@ -1545,8 +1966,15 @@ var createWorkflowActionEvent = (event) => {
   );
   return buildRawEventRequest(event, signalPayload, "WORKFLOW_ACTION");
 };
+var stableHash = (value) => {
+  if (!value || !value.trim()) return;
+  const normalized = value.normalize("NFC").trim().toLowerCase();
+  const hashed = crypto.createHash("sha256").update(normalized, "utf8").digest("hex");
+  return `sha256:${hashed}`;
+};
 
 exports.API_REGISTRY = API_REGISTRY;
+exports.MccEvaluationResource = MccEvaluationResource;
 exports.QatiAPIError = QatiAPIError;
 exports.QatiAuthError = QatiAuthError;
 exports.QatiConfigError = QatiConfigError;
@@ -1556,6 +1984,7 @@ exports.QatiSDKError = QatiSDKError;
 exports.QatiServerError = QatiServerError;
 exports.RawEventRequestSchema = RawEventRequestSchema;
 exports.Session = Session;
+exports.WebhookEvent = WebhookEvent;
 exports.baseUrlFor = baseUrlFor;
 exports.createAnomalyFlagEvent = createAnomalyFlagEvent;
 exports.createApiCallEvent = createApiCallEvent;
@@ -1570,10 +1999,12 @@ exports.createRagRetrievalEvent = createRagRetrievalEvent;
 exports.createSessionEvent = createSessionEvent;
 exports.createSystemTelemetryEvent = createSystemTelemetryEvent;
 exports.createToolCallEvent = createToolCallEvent;
+exports.createToolCallProposedEvent = createToolCallProposedEvent;
 exports.createTransactionEvent = createTransactionEvent;
 exports.createUserFeedbackEvent = createUserFeedbackEvent;
 exports.createWorkflowActionEvent = createWorkflowActionEvent;
 exports.parseQatiConfig = parseQatiConfig;
 exports.resolveQatiConfig = resolveQatiConfig;
+exports.stableHash = stableHash;
 //# sourceMappingURL=index.cjs.map
 //# sourceMappingURL=index.cjs.map