@akasecurity/ai-tc-claude-code 0.9.9 → 0.9.10

package/scripts/scan-worker.js

@@ -22116,6 +22116,26 @@ var AttachTokenResponse = external_exports.union([
   AttachTokenExpired,
   external_exports.object({ status: printable(64) })
 ]);
+var DeviceCommandKind = external_exports.enum(["shares_rescan"]);
+var DeviceCommand = external_exports.object({
+  id: printable(128).min(1),
+  kind: DeviceCommandKind,
+  issuedAt: printable(64).min(1),
+  expiresAt: printable(64).min(1)
+}).strict();
+var DeviceCommandPollResponse = external_exports.object({ command: DeviceCommand.nullable() });
+var DeviceCommandFailureReason = external_exports.enum(["scan_failed", "no_projects", "expired"]);
+var DeviceCommandAckBody = external_exports.discriminatedUnion("outcome", [
+  external_exports.object({
+    outcome: external_exports.literal("reported"),
+    projectsScanned: external_exports.number().int().nonnegative()
+  }).strict(),
+  external_exports.object({
+    outcome: external_exports.literal("failed"),
+    reason: DeviceCommandFailureReason,
+    projectsScanned: external_exports.number().int().nonnegative()
+  }).strict()
+]);
 
 // ../../packages/schema/src/zod/registry.ts
 var Namespace = external_exports.string().regex(/^[a-z][a-z0-9-]*$/);
@@ -22282,7 +22302,7 @@ var PackManifest = external_exports.object({
 }).meta({ id: "PackManifest" });
 
 // ../../packages/schema/src/zod/detection.ts
-var OriginEnum = external_exports.enum(["library"]).meta({ id: "OriginEnum" });
+var OriginEnum = external_exports.enum(["library", "custom"]).meta({ id: "OriginEnum" });
 var DetectionFilterEnum = external_exports.enum(["all", "library", "custom", "customized", "updates"]);
 var LibraryStateEnum = external_exports.enum(["new", "imported", "update"]).meta({ id: "LibraryStateEnum" });
 var DetectionCounts = external_exports.object({
@@ -22477,8 +22497,9 @@ var Event = external_exports.object({
   metadata: EventMetadata.optional()
 }).meta({ id: "Event" });
 var IngestEvent = Event.meta({ id: "IngestEvent" });
+var INGEST_BATCH_MAX = 100;
 var IngestBatch = external_exports.object({
-  events: external_exports.array(IngestEvent).min(1).max(100),
+  events: external_exports.array(IngestEvent).min(1).max(INGEST_BATCH_MAX),
   // Dedup policy for this batch. Id-dedup ALWAYS applies. 'content-hash'
   // additionally rejects any event whose contentHash the store has already
   // recorded — for re-runnable bulk ingest (worktree scan, transcript
@@ -22604,6 +22625,225 @@ var PatchInstalledPackRequest = external_exports.object({
   message: "At least one field must be provided"
 }).meta({ id: "PatchInstalledPackRequest" });
 
+// ../../packages/schema/src/zod/policy.ts
+var PolicyScope = external_exports.enum(["global", "repo", "user"]).meta({ id: "PolicyScope" });
+var PolicyTarget = external_exports.union([external_exports.object({ ruleId: external_exports.string() }), external_exports.object({ category: DetectionCategory })]).meta({ id: "PolicyTarget" });
+var PolicyKind = external_exports.enum(["builtin", "custom"]).meta({ id: "PolicyKind" });
+var PolicyProvenance = external_exports.enum(["builtin", "authored"]).meta({ id: "PolicyProvenance" });
+var Policy = external_exports.object({
+  id: external_exports.guid(),
+  scope: PolicyScope,
+  target: PolicyTarget,
+  action: ActionTaken,
+  enabled: external_exports.boolean().default(true),
+  customKeywords: external_exports.array(external_exports.string()).optional(),
+  // Display name — optional so older policy rows without name still parse.
+  // Added for the findings API (policy.name column migration).
+  name: external_exports.string().optional(),
+  // Whether an AUTHORED policy governs this row's target — not a claim about
+  // which row this is. A producer that collapses several rows onto one target
+  // must carry the marker onto whichever row survives, or the collapse decides
+  // the answer; a survivor may therefore be a built-in expansion still marked
+  // 'authored' because an authored sibling targeted the same thing.
+  // Optional so an older producer — and an older on-disk cache — still parses;
+  // absent reads as 'builtin', which is the behaviour that predates the field.
+  //
+  // Deliberately NOT `kind`/PolicyKind: that name and that enum answer which
+  // built-in archetype catalog entry a policy is, which every catalog surface
+  // reads and which a caller may state. This one is a statement the PRODUCER
+  // of a bundle makes about a row, and only the bundle builder ever stamps it
+  // — the CRUD routes neither accept nor set it.
+  //
+  // A device consumes this in exactly one direction: an 'authored' policy
+  // arriving from a control plane marks the rules it targets as not
+  // locally re-assignable. That can only ever ADD a refusal, never relax one,
+  // which is what makes it safe to honour from an unsigned cache — the same
+  // test `prohibitedModels` passes and `reversibleRuleIds` fails.
+  provenance: PolicyProvenance.optional()
+}).meta({ id: "Policy" });
+var PolicyBundle = external_exports.object({
+  version: external_exports.string(),
+  policies: external_exports.array(Policy),
+  // Rules from the installed marketplace packs (snapshotted by the
+  // control plane). The plugin registers these in addition to its bundled
+  // packs. Optional so older backends — and older on-disk caches — that omit
+  // the field still parse; consumers read `bundle.rules ?? []`.
+  rules: external_exports.array(Rule).optional(),
+  // When true, `rules` IS the complete effective ruleset and the runtime must
+  // NOT merge its compiled-in bundled packs — the standalone gateway sets this
+  // after reading the user's installed snapshot (installed_packs, enabled
+  // packs only), which is how detection updates stay manual: new bundled
+  // rules run only after the user applies the pack update. Absent/false keeps
+  // the historical composition (bundled packs + rules) — older caches.
+  rulesComplete: external_exports.boolean().optional(),
+  // Active detection exceptions, evaluation subset only (see
+  // ExceptionBundleEntry). Optional so older bundle producers — and older
+  // on-disk caches — that omit the field still parse; consumers read
+  // `bundle.exceptions ?? []`.
+  exceptions: external_exports.array(ExceptionBundleEntry).optional(),
+  // Rule ids whose pack is assigned a REVERSIBLE archetype (Redact & Vault).
+  // A second axis over the same `redact` action, carried beside the policies
+  // rather than on them: nothing writes ruleId-targeted policies to disk, so
+  // widening Policy itself would change a persisted shape to express something
+  // only the in-memory bundle needs. Optional so an older producer — or an
+  // older on-disk cache — still parses; consumers read `?? []` and get the
+  // pre-existing one-way behaviour, which is the safe direction to default.
+  reversibleRuleIds: external_exports.array(external_exports.string()).optional(),
+  // Installed pack version, keyed by ruleId, for rules in `rules` that came
+  // from a versioned installed pack. Optional so older backends — and older
+  // on-disk caches — that omit the field still parse; consumers fall back to
+  // the rule's own spec version. NOT the bundle version above — see
+  // installedRuleset's ruleVersions for the source of truth.
+  ruleVersions: external_exports.record(external_exports.string(), external_exports.string()).optional(),
+  // Model ids (the raw `model` string a harness reports, e.g.
+  // `claude-opus-4-1`) the tenant has PROHIBITED. The plugin refuses to switch
+  // a session onto one (PreModelSwitch) and refuses a turn that would run on
+  // one (UserPromptSubmit). Optional so an older backend — and an older
+  // on-disk cache — still parses; consumers read `?? []`, which is the
+  // unenforced behaviour that predates this field and the safe direction to
+  // default.
+  //
+  // Ids, not display names: the governance decision is keyed on the exact
+  // string the harness reports (`model_status_override.versionId` in the
+  // control plane), so no name resolution stands between the decision and the
+  // comparison.
+  prohibitedModels: external_exports.array(external_exports.string()).optional(),
+  customKeywords: external_exports.array(external_exports.string()),
+  fetchedAt: external_exports.iso.datetime()
+}).meta({ id: "PolicyBundle" });
+var POLICY_BUNDLE_SHAPE_ID = [
+  ...Object.keys(PolicyBundle.shape),
+  ...Object.keys(Policy.shape).map((key) => `policies.${key}`),
+  ...PolicyTarget.options.flatMap((member) => "shape" in member ? Object.keys(member.shape) : []).map((key) => `policies.target.${key}`),
+  ...Object.keys(ExceptionBundleEntry.shape).map((key) => `exceptions.${key}`)
+].sort().join(",");
+var OBSERVE_ONLY_CATEGORIES = ["config"];
+var ENFORCEABLE_CATEGORIES = DetectionCategory.options.filter((c) => !OBSERVE_ONLY_CATEGORIES.includes(c));
+var CATEGORY_PEAK_SEVERITY = {
+  secret: "critical",
+  financial: "critical",
+  // core-financial/credit-card
+  code_flaw: "critical",
+  pii: "high",
+  phi: "high",
+  custom: "high",
+  // user-defined; conservative
+  code_context: "low",
+  config: "low"
+  // observe-only; floors to monitor regardless
+};
+function severityFloorPolicy(category) {
+  if (OBSERVE_ONLY_CATEGORIES.includes(category)) return "monitor";
+  const peak = CATEGORY_PEAK_SEVERITY[category];
+  return peak === "critical" || peak === "high" ? "warn" : "monitor";
+}
+var KNOWN_BUILTIN_IDS = ["monitor", "warn", "redact", "vault", "block"];
+var BuiltinPolicyId = external_exports.enum(KNOWN_BUILTIN_IDS).meta({ id: "BuiltinPolicyId" });
+var RedactFallback = BuiltinPolicyId.extract(["monitor", "warn", "block"]).meta({
+  id: "RedactFallback"
+});
+var BUILTIN_POLICY_SPECS = {
+  monitor: {
+    name: "Monitor",
+    action: "log",
+    reversible: false,
+    description: "Log every match for audit. The request is allowed through untouched."
+  },
+  warn: {
+    name: "Warn",
+    action: "warn",
+    reversible: false,
+    description: "Allow the request, but warn the user inline before it is sent."
+  },
+  redact: {
+    name: "Redact",
+    action: "redact",
+    reversible: false,
+    description: "Strip the matched value from the request and destroy it, then continue. What was removed cannot be recovered."
+  },
+  vault: {
+    name: "Redact & Vault",
+    action: "redact",
+    reversible: true,
+    description: "Strip the matched value from the request and keep an encrypted, recoverable copy in the local vault, leaving a pointer in its place. Needs the vault consent granted under Settings; without it this behaves as Redact."
+  },
+  block: {
+    name: "Block",
+    action: "block",
+    reversible: false,
+    description: "Refuse the request entirely whenever any rule in this detection matches."
+  }
+};
+function builtinPolicyToAction(id) {
+  return BUILTIN_POLICY_SPECS[id].action;
+}
+var PALETTE_WEAKEST_FIRST = [
+  ...new Set(KNOWN_BUILTIN_IDS.map(builtinPolicyToAction))
+];
+var BELOW_PALETTE = ACTION_TAKEN_KEYS.filter(
+  (action) => !PALETTE_WEAKEST_FIRST.includes(action)
+);
+var ACTION_STRENGTH_ORDER = [
+  ...BELOW_PALETTE,
+  ...PALETTE_WEAKEST_FIRST
+];
+var PackPolicyFloor = external_exports.object({
+  /**
+   * The weakest archetype the device may assign. Stated as a BuiltinPolicyId
+   * rather than a raw ActionTaken because that is the vocabulary the user
+   * picks from — a floor a UI cannot name is one it cannot explain.
+   */
+  floor: BuiltinPolicyId,
+  /**
+   * True when the organization AUTHORED a policy governing this pack rather
+   * than stating a minimum: it gave the answer, so the pack is not
+   * re-assignable locally in either direction.
+   */
+  locked: external_exports.boolean()
+}).describe("PackPolicyFloor");
+var CATEGORY_EXPRESSIBLE_IDS = KNOWN_BUILTIN_IDS.filter(
+  (id) => !BUILTIN_POLICY_SPECS[id].reversible
+);
+var CATEGORY_INEXPRESSIBLE_IDS = KNOWN_BUILTIN_IDS.filter(
+  (id) => BUILTIN_POLICY_SPECS[id].reversible
+);
+var CategoryPolicyId = external_exports.enum(CATEGORY_EXPRESSIBLE_IDS).meta({ id: "CategoryPolicyId" });
+var DEFAULT_ACTIONS = Object.fromEntries(
+  DetectionCategory.options.map((c) => [c, builtinPolicyToAction(severityFloorPolicy(c))])
+);
+var BUILTIN_POLICIES = Object.fromEntries(
+  KNOWN_BUILTIN_IDS.map((id) => [id, { id, ...BUILTIN_POLICY_SPECS[id] }])
+);
+var UsedByItem = external_exports.object({
+  id: external_exports.string(),
+  name: external_exports.string(),
+  ruleCount: external_exports.number().int().nonnegative(),
+  enabled: external_exports.boolean()
+}).meta({ id: "UsedByItem" });
+var PolicyListItem = external_exports.object({
+  id: external_exports.string(),
+  kind: PolicyKind,
+  name: external_exports.string(),
+  enabled: external_exports.boolean(),
+  usedByCount: external_exports.number().int().nonnegative()
+}).meta({ id: "PolicyListItem" });
+var ListPoliciesResponse = external_exports.object({ items: external_exports.array(PolicyListItem) }).meta({ id: "ListPoliciesResponse" });
+var PolicyDetail = external_exports.object({
+  specVersion: external_exports.literal(1),
+  id: external_exports.string(),
+  kind: PolicyKind,
+  name: external_exports.string(),
+  enabled: external_exports.boolean(),
+  description: external_exports.string(),
+  usedBy: external_exports.array(UsedByItem)
+}).meta({ id: "PolicyDetail" });
+var PolicyStatsResponse = external_exports.object({
+  policies: external_exports.number().int().nonnegative(),
+  builtin: external_exports.number().int().nonnegative(),
+  custom: external_exports.number().int().nonnegative(),
+  detectionsGoverned: external_exports.number().int().nonnegative()
+}).meta({ id: "PolicyStatsResponse" });
+
 // ../../packages/schema/src/zod/vault.ts
 var CATEGORY_ALTERNATION = DetectionCategory.options.join("|");
 var POINTER_TOKEN_PATTERN = new RegExp(
@@ -22640,6 +22880,14 @@ var VaultEntry = external_exports.object({
   // How many times this value has been detected on this machine — the reuse
   // signal the vault dashboard reads. Distinct from VaultDeref.pointerCount.
   occurrenceCount: external_exports.number().int().nonnegative(),
+  // True when a PERSON asked for this value to be replaced — the surfaced-
+  // secrets strike — rather than a pack enforcing its assignment. One value is
+  // one row however many paths vault it, so this is what tells a policy sweep
+  // that the row carries somebody's own instruction and not just an assignment
+  // that has since been lowered. STICKY and MONOTONIC: a later automatic
+  // vaulting of the same value must never clear it — what the user said about
+  // the value does not expire.
+  userAuthorized: external_exports.boolean(),
   firstSeen: external_exports.string(),
   lastSeen: external_exports.string()
 });
@@ -22755,7 +23003,7 @@ var VaultConsent = external_exports.object({
 });
 
 // ../../packages/schema/src/zod/local.ts
-var WORKSPACE_SETTINGS_SPEC_VERSION = 6;
+var WORKSPACE_SETTINGS_SPEC_VERSION = 7;
 var RunMode = external_exports.enum(["standalone", "attached"]);
 var ControlPlaneConnection = external_exports.object({
   endpoint: external_exports.string().min(1),
@@ -22796,6 +23044,19 @@ var WorkspaceSettings = external_exports.object({
   vaultKeyCustody: VaultKeyCustody.default("file"),
   // How a pointer renders in assistant prose on screen (see VaultInlineReveal).
   vaultInlineReveal: VaultInlineReveal.default("masked"),
+  // What a `redact` policy degrades to on a FIELD the host cannot rewrite in
+  // place. Not a handling policy: the policy has already resolved to redact,
+  // and this only says what happens when the host offers no channel to carry it
+  // out — Antigravity's PreToolUse has no updatedInput at all, and Codex and
+  // Claude Code decline to mask a field that EXECUTES because masking would
+  // change what runs. Per FIELD rather than per host, so a host that can
+  // rewrite some inputs keeps true redaction on those.
+  //
+  // Spelled in the built-in policy vocabulary rather than as a fresh enum, so
+  // an attached machine's merge is `strongerAction` over the one action ladder
+  // and no second rank order exists to drift from it. 'deny' is a host wire
+  // word and stays out of the stored value.
+  redactFallback: RedactFallback.default("warn"),
   // Absent until /aka:setup completes; its presence is what "onboarded" means.
   onboardedAt: external_exports.iso.datetime().optional(),
   // Records that the user consented to sending findings to the model API for
@@ -22803,10 +23064,12 @@ var WorkspaceSettings = external_exports.object({
   // Absent until granted; a stale payloadVersion means the consent no longer
   // covers the current payload and must be re-granted.
   modelJudgeConsent: ModelJudgeConsent.optional(),
-  // Records that the user consented to sending the activity already recorded on
-  // this machine to the deployment it is attached to, along with the payload
-  // shape and the endpoint they agreed to. Absent until granted, and a grant for
-  // a different endpoint or an older payload no longer counts.
+  // Records that the user consented to the DEFERRED send — the outbox — along
+  // with the payload shape and the endpoint they agreed to. Since payload v2
+  // that covers both the pre-attach backlog and undelivered captures (which
+  // carry prompt/reply text in `content`); the key name predates the widening.
+  // Absent until granted, and a grant for a different endpoint or an older
+  // payload no longer counts.
   historySyncConsent: HistorySyncConsent.optional()
 });
 
@@ -22819,7 +23082,8 @@ var ManagedSettingKey = external_exports.enum([
   "vaultKeyCustody",
   "vaultInlineReveal",
   "modelJudgeConsent",
-  "dataSharesInPlace"
+  "dataSharesInPlace",
+  "redactFallback"
 ]).meta({ id: "ManagedSettingKey" });
 var ManagedSettingsValues = external_exports.object({
   runMode: external_exports.enum(["standalone", "attached"]).optional(),
@@ -22832,7 +23096,8 @@ var ManagedSettingsValues = external_exports.object({
   vaultKeyCustody: external_exports.enum(["file", "keychain"]).optional(),
   vaultInlineReveal: external_exports.enum(["masked", "full", "off"]).optional(),
   modelJudgeConsent: external_exports.boolean().optional(),
-  dataSharesInPlace: external_exports.boolean().optional()
+  dataSharesInPlace: external_exports.boolean().optional(),
+  redactFallback: RedactFallback.optional()
 }).meta({ id: "ManagedSettingsValues" });
 var ManagedSettings = external_exports.object({
   specVersion: external_exports.number().int().positive().default(MANAGED_SETTINGS_SPEC_VERSION),
@@ -22847,171 +23112,6 @@ var ManagedSettings = external_exports.object({
   lockedFields: external_exports.array(ManagedSettingKey).default([])
 }).meta({ id: "ManagedSettings" });
 
-// ../../packages/schema/src/zod/policy.ts
-var PolicyScope = external_exports.enum(["global", "repo", "user"]).meta({ id: "PolicyScope" });
-var PolicyTarget = external_exports.union([external_exports.object({ ruleId: external_exports.string() }), external_exports.object({ category: DetectionCategory })]).meta({ id: "PolicyTarget" });
-var Policy = external_exports.object({
-  id: external_exports.guid(),
-  scope: PolicyScope,
-  target: PolicyTarget,
-  action: ActionTaken,
-  enabled: external_exports.boolean().default(true),
-  customKeywords: external_exports.array(external_exports.string()).optional(),
-  // Display name — optional so older policy rows without name still parse.
-  // Added for the findings API (policy.name column migration).
-  name: external_exports.string().optional()
-}).meta({ id: "Policy" });
-var PolicyBundle = external_exports.object({
-  version: external_exports.string(),
-  policies: external_exports.array(Policy),
-  // Rules from the installed marketplace packs (snapshotted by the
-  // control plane). The plugin registers these in addition to its bundled
-  // packs. Optional so older backends — and older on-disk caches — that omit
-  // the field still parse; consumers read `bundle.rules ?? []`.
-  rules: external_exports.array(Rule).optional(),
-  // When true, `rules` IS the complete effective ruleset and the runtime must
-  // NOT merge its compiled-in bundled packs — the standalone gateway sets this
-  // after reading the user's installed snapshot (installed_packs, enabled
-  // packs only), which is how detection updates stay manual: new bundled
-  // rules run only after the user applies the pack update. Absent/false keeps
-  // the historical composition (bundled packs + rules) — older caches.
-  rulesComplete: external_exports.boolean().optional(),
-  // Active detection exceptions, evaluation subset only (see
-  // ExceptionBundleEntry). Optional so older bundle producers — and older
-  // on-disk caches — that omit the field still parse; consumers read
-  // `bundle.exceptions ?? []`.
-  exceptions: external_exports.array(ExceptionBundleEntry).optional(),
-  // Rule ids whose pack is assigned a REVERSIBLE archetype (Redact & Vault).
-  // A second axis over the same `redact` action, carried beside the policies
-  // rather than on them: nothing writes ruleId-targeted policies to disk, so
-  // widening Policy itself would change a persisted shape to express something
-  // only the in-memory bundle needs. Optional so an older producer — or an
-  // older on-disk cache — still parses; consumers read `?? []` and get the
-  // pre-existing one-way behaviour, which is the safe direction to default.
-  reversibleRuleIds: external_exports.array(external_exports.string()).optional(),
-  // Installed pack version, keyed by ruleId, for rules in `rules` that came
-  // from a versioned installed pack. Optional so older backends — and older
-  // on-disk caches — that omit the field still parse; consumers fall back to
-  // the rule's own spec version. NOT the bundle version above — see
-  // installedRuleset's ruleVersions for the source of truth.
-  ruleVersions: external_exports.record(external_exports.string(), external_exports.string()).optional(),
-  // Model ids (the raw `model` string a harness reports, e.g.
-  // `claude-opus-4-1`) the tenant has PROHIBITED. The plugin refuses to switch
-  // a session onto one (PreModelSwitch) and refuses a turn that would run on
-  // one (UserPromptSubmit). Optional so an older backend — and an older
-  // on-disk cache — still parses; consumers read `?? []`, which is the
-  // unenforced behaviour that predates this field and the safe direction to
-  // default.
-  //
-  // Ids, not display names: the governance decision is keyed on the exact
-  // string the harness reports (`model_status_override.versionId` in the
-  // control plane), so no name resolution stands between the decision and the
-  // comparison.
-  prohibitedModels: external_exports.array(external_exports.string()).optional(),
-  customKeywords: external_exports.array(external_exports.string()),
-  fetchedAt: external_exports.iso.datetime()
-}).meta({ id: "PolicyBundle" });
-var OBSERVE_ONLY_CATEGORIES = ["config"];
-var ENFORCEABLE_CATEGORIES = DetectionCategory.options.filter((c) => !OBSERVE_ONLY_CATEGORIES.includes(c));
-var CATEGORY_PEAK_SEVERITY = {
-  secret: "critical",
-  financial: "critical",
-  // core-financial/credit-card
-  code_flaw: "critical",
-  pii: "high",
-  phi: "high",
-  custom: "high",
-  // user-defined; conservative
-  code_context: "low",
-  config: "low"
-  // observe-only; floors to monitor regardless
-};
-function severityFloorPolicy(category) {
-  if (OBSERVE_ONLY_CATEGORIES.includes(category)) return "monitor";
-  const peak = CATEGORY_PEAK_SEVERITY[category];
-  return peak === "critical" || peak === "high" ? "warn" : "monitor";
-}
-var PolicyKind = external_exports.enum(["builtin", "custom"]).meta({ id: "PolicyKind" });
-var KNOWN_BUILTIN_IDS = ["monitor", "warn", "redact", "vault", "block"];
-var BuiltinPolicyId = external_exports.enum(KNOWN_BUILTIN_IDS).meta({ id: "BuiltinPolicyId" });
-var BUILTIN_POLICY_SPECS = {
-  monitor: {
-    name: "Monitor",
-    action: "log",
-    reversible: false,
-    description: "Log every match for audit. The request is allowed through untouched."
-  },
-  warn: {
-    name: "Warn",
-    action: "warn",
-    reversible: false,
-    description: "Allow the request, but warn the user inline before it is sent."
-  },
-  redact: {
-    name: "Redact",
-    action: "redact",
-    reversible: false,
-    description: "Strip the matched value from the request and destroy it, then continue. What was removed cannot be recovered."
-  },
-  vault: {
-    name: "Redact & Vault",
-    action: "redact",
-    reversible: true,
-    description: "Strip the matched value from the request and keep an encrypted, recoverable copy in the local vault, leaving a pointer in its place. Needs the vault consent granted under Settings; without it this behaves as Redact."
-  },
-  block: {
-    name: "Block",
-    action: "block",
-    reversible: false,
-    description: "Refuse the request entirely whenever any rule in this detection matches."
-  }
-};
-function builtinPolicyToAction(id) {
-  return BUILTIN_POLICY_SPECS[id].action;
-}
-var CATEGORY_EXPRESSIBLE_IDS = KNOWN_BUILTIN_IDS.filter(
-  (id) => !BUILTIN_POLICY_SPECS[id].reversible
-);
-var CATEGORY_INEXPRESSIBLE_IDS = KNOWN_BUILTIN_IDS.filter(
-  (id) => BUILTIN_POLICY_SPECS[id].reversible
-);
-var CategoryPolicyId = external_exports.enum(CATEGORY_EXPRESSIBLE_IDS).meta({ id: "CategoryPolicyId" });
-var DEFAULT_ACTIONS = Object.fromEntries(
-  DetectionCategory.options.map((c) => [c, builtinPolicyToAction(severityFloorPolicy(c))])
-);
-var BUILTIN_POLICIES = Object.fromEntries(
-  KNOWN_BUILTIN_IDS.map((id) => [id, { id, ...BUILTIN_POLICY_SPECS[id] }])
-);
-var UsedByItem = external_exports.object({
-  id: external_exports.string(),
-  name: external_exports.string(),
-  ruleCount: external_exports.number().int().nonnegative(),
-  enabled: external_exports.boolean()
-}).meta({ id: "UsedByItem" });
-var PolicyListItem = external_exports.object({
-  id: external_exports.string(),
-  kind: PolicyKind,
-  name: external_exports.string(),
-  enabled: external_exports.boolean(),
-  usedByCount: external_exports.number().int().nonnegative()
-}).meta({ id: "PolicyListItem" });
-var ListPoliciesResponse = external_exports.object({ items: external_exports.array(PolicyListItem) }).meta({ id: "ListPoliciesResponse" });
-var PolicyDetail = external_exports.object({
-  specVersion: external_exports.literal(1),
-  id: external_exports.string(),
-  kind: PolicyKind,
-  name: external_exports.string(),
-  enabled: external_exports.boolean(),
-  description: external_exports.string(),
-  usedBy: external_exports.array(UsedByItem)
-}).meta({ id: "PolicyDetail" });
-var PolicyStatsResponse = external_exports.object({
-  policies: external_exports.number().int().nonnegative(),
-  builtin: external_exports.number().int().nonnegative(),
-  custom: external_exports.number().int().nonnegative(),
-  detectionsGoverned: external_exports.number().int().nonnegative()
-}).meta({ id: "PolicyStatsResponse" });
-
 // ../../packages/schema/src/zod/project-files.ts
 var ProjectFileInput = external_exports.object({
   path: external_exports.string().min(1),
@@ -23251,10 +23351,12 @@ var DismissRecommendedActionResponse = external_exports.object({ id: external_ex
 var RecommendedActionIdParam = external_exports.object({ id: external_exports.string() });
 
 // ../../packages/schema/src/zod/settings-action.ts
+var HistorySyncConsentChoice = external_exports.enum(["granted", "revoked", "unchanged"]).meta({ id: "HistorySyncConsentChoice" });
+var ModelJudgeConsentChoice = external_exports.enum(["granted", "revoked", "unchanged"]).meta({ id: "ModelJudgeConsentChoice" });
 var SaveSettingsInput = external_exports.object({
   historicalAccess: external_exports.string(),
-  modelJudgeConsent: external_exports.boolean(),
-  historySyncConsent: external_exports.boolean(),
+  modelJudgeConsent: ModelJudgeConsentChoice,
+  historySyncConsent: HistorySyncConsentChoice,
   vaultConsent: external_exports.string(),
   vaultInlineReveal: external_exports.string()
 });