@inhuman.tools/harness-contract 0.0.0-stage → 0.1.0

package/dist/schemas/authorization.d.ts

@@ -0,0 +1,1721 @@
+/**
+ * Wire shapes of the policy v2 engine: grants (a stored human "yes" to an ask), the extended
+ * `ask/answer`, `policy/explain`, the session overlay.
+ *
+ * The class ids are the closed taxonomy owned by `@inhuman.tools/policy` (classes.ts); a test in
+ * `@inhuman.tools/harness` pins that this list equals it. Tier names on the wire are "soft-deny" and
+ * "ask"; the engine names `deny` / `ask` appear only where a tier is a disposition.
+ */
+import { z } from "zod";
+export declare const CLASS_IDS: readonly ["destroy-catastrophic", "destroy-local", "vcs-history", "privilege", "credential", "control-plane", "attack-shape", "policy-fault", "package-install", "publish", "remote-write", "network-egress", "exec-unknown", "unmodelled", "envelope-read", "envelope-write", "protected-file", "workspace-write", "mcp-lookup", "mcp-action"];
+export declare const classIdSchema: z.ZodEnum<{
+    "destroy-catastrophic": "destroy-catastrophic";
+    "destroy-local": "destroy-local";
+    "vcs-history": "vcs-history";
+    privilege: "privilege";
+    credential: "credential";
+    "control-plane": "control-plane";
+    "attack-shape": "attack-shape";
+    "policy-fault": "policy-fault";
+    "package-install": "package-install";
+    publish: "publish";
+    "remote-write": "remote-write";
+    "network-egress": "network-egress";
+    "exec-unknown": "exec-unknown";
+    unmodelled: "unmodelled";
+    "envelope-read": "envelope-read";
+    "envelope-write": "envelope-write";
+    "protected-file": "protected-file";
+    "workspace-write": "workspace-write";
+    "mcp-lookup": "mcp-lookup";
+    "mcp-action": "mcp-action";
+}>;
+export declare const GRANT_SCOPES: readonly ["session", "project", "bot", "global"];
+export declare const grantScopeSchema: z.ZodEnum<{
+    session: "session";
+    project: "project";
+    bot: "bot";
+    global: "global";
+}>;
+/** What a grant covers. Commands are families: program + subcommand spine + `family_args`. */
+export declare const grantSubjectSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    kind: z.ZodLiteral<"command">;
+    argv0: z.ZodString;
+    spine: z.ZodArray<z.ZodString>;
+    args: z.ZodArray<z.ZodString>;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"path">;
+    cluster: z.ZodEnum<{
+        read: "read";
+        write: "write";
+    }>;
+    path: z.ZodString;
+    depth: z.ZodEnum<{
+        exact: "exact";
+        subtree: "subtree";
+    }>;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"mcp">;
+    server: z.ZodString;
+    account: z.ZodOptional<z.ZodString>;
+    tool: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"tool">;
+    name: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"class">;
+    class: z.ZodEnum<{
+        "destroy-catastrophic": "destroy-catastrophic";
+        "destroy-local": "destroy-local";
+        "vcs-history": "vcs-history";
+        privilege: "privilege";
+        credential: "credential";
+        "control-plane": "control-plane";
+        "attack-shape": "attack-shape";
+        "policy-fault": "policy-fault";
+        "package-install": "package-install";
+        publish: "publish";
+        "remote-write": "remote-write";
+        "network-egress": "network-egress";
+        "exec-unknown": "exec-unknown";
+        unmodelled: "unmodelled";
+        "envelope-read": "envelope-read";
+        "envelope-write": "envelope-write";
+        "protected-file": "protected-file";
+        "workspace-write": "workspace-write";
+        "mcp-lookup": "mcp-lookup";
+        "mcp-action": "mcp-action";
+    }>;
+}, z.core.$strict>], "kind">;
+export declare const grantRowSchema: z.ZodObject<{
+    id: z.ZodString;
+    kind: z.ZodOptional<z.ZodEnum<{
+        grant: "grant";
+        ack: "ack";
+    }>>;
+    scope: z.ZodEnum<{
+        session: "session";
+        project: "project";
+        bot: "bot";
+        global: "global";
+    }>;
+    scopeKey: z.ZodString;
+    subject: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"command">;
+        argv0: z.ZodString;
+        spine: z.ZodArray<z.ZodString>;
+        args: z.ZodArray<z.ZodString>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"path">;
+        cluster: z.ZodEnum<{
+            read: "read";
+            write: "write";
+        }>;
+        path: z.ZodString;
+        depth: z.ZodEnum<{
+            exact: "exact";
+            subtree: "subtree";
+        }>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"mcp">;
+        server: z.ZodString;
+        account: z.ZodOptional<z.ZodString>;
+        tool: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"tool">;
+        name: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"class">;
+        class: z.ZodEnum<{
+            "destroy-catastrophic": "destroy-catastrophic";
+            "destroy-local": "destroy-local";
+            "vcs-history": "vcs-history";
+            privilege: "privilege";
+            credential: "credential";
+            "control-plane": "control-plane";
+            "attack-shape": "attack-shape";
+            "policy-fault": "policy-fault";
+            "package-install": "package-install";
+            publish: "publish";
+            "remote-write": "remote-write";
+            "network-egress": "network-egress";
+            "exec-unknown": "exec-unknown";
+            unmodelled: "unmodelled";
+            "envelope-read": "envelope-read";
+            "envelope-write": "envelope-write";
+            "protected-file": "protected-file";
+            "workspace-write": "workspace-write";
+            "mcp-lookup": "mcp-lookup";
+            "mcp-action": "mcp-action";
+        }>;
+    }, z.core.$strict>], "kind">;
+    createdAtMs: z.ZodNumber;
+    expiresAtMs: z.ZodNullable<z.ZodNumber>;
+    source: z.ZodEnum<{
+        prompt: "prompt";
+        settings: "settings";
+    }>;
+    label: z.ZodString;
+}, z.core.$strict>;
+export declare const grantListInput: z.ZodObject<{
+    kind: z.ZodOptional<z.ZodEnum<{
+        grant: "grant";
+        ack: "ack";
+    }>>;
+    scope: z.ZodOptional<z.ZodEnum<{
+        session: "session";
+        project: "project";
+        bot: "bot";
+        global: "global";
+    }>>;
+    sessionId: z.ZodOptional<z.ZodString>;
+    projectPath: z.ZodOptional<z.ZodString>;
+    bot: z.ZodOptional<z.ZodString>;
+    includeExpired: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strict>;
+export declare const grantListOutput: z.ZodObject<{
+    rows: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        kind: z.ZodOptional<z.ZodEnum<{
+            grant: "grant";
+            ack: "ack";
+        }>>;
+        scope: z.ZodEnum<{
+            session: "session";
+            project: "project";
+            bot: "bot";
+            global: "global";
+        }>;
+        scopeKey: z.ZodString;
+        subject: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"command">;
+            argv0: z.ZodString;
+            spine: z.ZodArray<z.ZodString>;
+            args: z.ZodArray<z.ZodString>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"path">;
+            cluster: z.ZodEnum<{
+                read: "read";
+                write: "write";
+            }>;
+            path: z.ZodString;
+            depth: z.ZodEnum<{
+                exact: "exact";
+                subtree: "subtree";
+            }>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"mcp">;
+            server: z.ZodString;
+            account: z.ZodOptional<z.ZodString>;
+            tool: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"tool">;
+            name: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"class">;
+            class: z.ZodEnum<{
+                "destroy-catastrophic": "destroy-catastrophic";
+                "destroy-local": "destroy-local";
+                "vcs-history": "vcs-history";
+                privilege: "privilege";
+                credential: "credential";
+                "control-plane": "control-plane";
+                "attack-shape": "attack-shape";
+                "policy-fault": "policy-fault";
+                "package-install": "package-install";
+                publish: "publish";
+                "remote-write": "remote-write";
+                "network-egress": "network-egress";
+                "exec-unknown": "exec-unknown";
+                unmodelled: "unmodelled";
+                "envelope-read": "envelope-read";
+                "envelope-write": "envelope-write";
+                "protected-file": "protected-file";
+                "workspace-write": "workspace-write";
+                "mcp-lookup": "mcp-lookup";
+                "mcp-action": "mcp-action";
+            }>;
+        }, z.core.$strict>], "kind">;
+        createdAtMs: z.ZodNumber;
+        expiresAtMs: z.ZodNullable<z.ZodNumber>;
+        source: z.ZodEnum<{
+            prompt: "prompt";
+            settings: "settings";
+        }>;
+        label: z.ZodString;
+    }, z.core.$strict>>;
+}, z.core.$strip>;
+export declare const grantAddInput: z.ZodObject<{
+    kind: z.ZodOptional<z.ZodEnum<{
+        grant: "grant";
+        ack: "ack";
+    }>>;
+    scope: z.ZodEnum<{
+        session: "session";
+        project: "project";
+        bot: "bot";
+        global: "global";
+    }>;
+    scopeKey: z.ZodOptional<z.ZodString>;
+    subject: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"command">;
+        argv0: z.ZodString;
+        spine: z.ZodArray<z.ZodString>;
+        args: z.ZodArray<z.ZodString>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"path">;
+        cluster: z.ZodEnum<{
+            read: "read";
+            write: "write";
+        }>;
+        path: z.ZodString;
+        depth: z.ZodEnum<{
+            exact: "exact";
+            subtree: "subtree";
+        }>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"mcp">;
+        server: z.ZodString;
+        account: z.ZodOptional<z.ZodString>;
+        tool: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"tool">;
+        name: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"class">;
+        class: z.ZodEnum<{
+            "destroy-catastrophic": "destroy-catastrophic";
+            "destroy-local": "destroy-local";
+            "vcs-history": "vcs-history";
+            privilege: "privilege";
+            credential: "credential";
+            "control-plane": "control-plane";
+            "attack-shape": "attack-shape";
+            "policy-fault": "policy-fault";
+            "package-install": "package-install";
+            publish: "publish";
+            "remote-write": "remote-write";
+            "network-egress": "network-egress";
+            "exec-unknown": "exec-unknown";
+            unmodelled: "unmodelled";
+            "envelope-read": "envelope-read";
+            "envelope-write": "envelope-write";
+            "protected-file": "protected-file";
+            "workspace-write": "workspace-write";
+            "mcp-lookup": "mcp-lookup";
+            "mcp-action": "mcp-action";
+        }>;
+    }, z.core.$strict>], "kind">;
+    ttlMs: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strict>;
+export declare const grantAddOutput: z.ZodUnion<readonly [z.ZodObject<{
+    ok: z.ZodLiteral<true>;
+    row: z.ZodObject<{
+        id: z.ZodString;
+        kind: z.ZodOptional<z.ZodEnum<{
+            grant: "grant";
+            ack: "ack";
+        }>>;
+        scope: z.ZodEnum<{
+            session: "session";
+            project: "project";
+            bot: "bot";
+            global: "global";
+        }>;
+        scopeKey: z.ZodString;
+        subject: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"command">;
+            argv0: z.ZodString;
+            spine: z.ZodArray<z.ZodString>;
+            args: z.ZodArray<z.ZodString>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"path">;
+            cluster: z.ZodEnum<{
+                read: "read";
+                write: "write";
+            }>;
+            path: z.ZodString;
+            depth: z.ZodEnum<{
+                exact: "exact";
+                subtree: "subtree";
+            }>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"mcp">;
+            server: z.ZodString;
+            account: z.ZodOptional<z.ZodString>;
+            tool: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"tool">;
+            name: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"class">;
+            class: z.ZodEnum<{
+                "destroy-catastrophic": "destroy-catastrophic";
+                "destroy-local": "destroy-local";
+                "vcs-history": "vcs-history";
+                privilege: "privilege";
+                credential: "credential";
+                "control-plane": "control-plane";
+                "attack-shape": "attack-shape";
+                "policy-fault": "policy-fault";
+                "package-install": "package-install";
+                publish: "publish";
+                "remote-write": "remote-write";
+                "network-egress": "network-egress";
+                "exec-unknown": "exec-unknown";
+                unmodelled: "unmodelled";
+                "envelope-read": "envelope-read";
+                "envelope-write": "envelope-write";
+                "protected-file": "protected-file";
+                "workspace-write": "workspace-write";
+                "mcp-lookup": "mcp-lookup";
+                "mcp-action": "mcp-action";
+            }>;
+        }, z.core.$strict>], "kind">;
+        createdAtMs: z.ZodNumber;
+        expiresAtMs: z.ZodNullable<z.ZodNumber>;
+        source: z.ZodEnum<{
+            prompt: "prompt";
+            settings: "settings";
+        }>;
+        label: z.ZodString;
+    }, z.core.$strict>;
+}, z.core.$strip>, z.ZodObject<{
+    ok: z.ZodLiteral<false>;
+    reason: z.ZodEnum<{
+        "fenced-path": "fenced-path";
+        "invalid-scope": "invalid-scope";
+        "unknown-session": "unknown-session";
+        "subject-not-allowed": "subject-not-allowed";
+    }>;
+}, z.core.$strip>]>;
+export declare const grantRevokeInput: z.ZodObject<{
+    id: z.ZodString;
+    sessionId: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export declare const grantRevokeOutput: z.ZodObject<{
+    ok: z.ZodBoolean;
+}, z.core.$strip>;
+/** Remember a human "yes" to an ask. Never for a soft-deny, never for a block. */
+export declare const askStoreInput: z.ZodObject<{
+    scope: z.ZodEnum<{
+        session: "session";
+        project: "project";
+        bot: "bot";
+        global: "global";
+    }>;
+    subject: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"command">;
+        argv0: z.ZodString;
+        spine: z.ZodArray<z.ZodString>;
+        args: z.ZodArray<z.ZodString>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"path">;
+        cluster: z.ZodEnum<{
+            read: "read";
+            write: "write";
+        }>;
+        path: z.ZodString;
+        depth: z.ZodEnum<{
+            exact: "exact";
+            subtree: "subtree";
+        }>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"mcp">;
+        server: z.ZodString;
+        account: z.ZodOptional<z.ZodString>;
+        tool: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"tool">;
+        name: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"class">;
+        class: z.ZodEnum<{
+            "destroy-catastrophic": "destroy-catastrophic";
+            "destroy-local": "destroy-local";
+            "vcs-history": "vcs-history";
+            privilege: "privilege";
+            credential: "credential";
+            "control-plane": "control-plane";
+            "attack-shape": "attack-shape";
+            "policy-fault": "policy-fault";
+            "package-install": "package-install";
+            publish: "publish";
+            "remote-write": "remote-write";
+            "network-egress": "network-egress";
+            "exec-unknown": "exec-unknown";
+            unmodelled: "unmodelled";
+            "envelope-read": "envelope-read";
+            "envelope-write": "envelope-write";
+            "protected-file": "protected-file";
+            "workspace-write": "workspace-write";
+            "mcp-lookup": "mcp-lookup";
+            "mcp-action": "mcp-action";
+        }>;
+    }, z.core.$strict>], "kind">;
+    ttlMs: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+}, z.core.$strict>;
+export declare const askAnswerInput: z.ZodObject<{
+    sessionId: z.ZodString;
+    jobId: z.ZodString;
+    allow: z.ZodBoolean;
+    comment: z.ZodOptional<z.ZodString>;
+    widen: z.ZodOptional<z.ZodString>;
+    store: z.ZodOptional<z.ZodObject<{
+        scope: z.ZodEnum<{
+            session: "session";
+            project: "project";
+            bot: "bot";
+            global: "global";
+        }>;
+        subject: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"command">;
+            argv0: z.ZodString;
+            spine: z.ZodArray<z.ZodString>;
+            args: z.ZodArray<z.ZodString>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"path">;
+            cluster: z.ZodEnum<{
+                read: "read";
+                write: "write";
+            }>;
+            path: z.ZodString;
+            depth: z.ZodEnum<{
+                exact: "exact";
+                subtree: "subtree";
+            }>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"mcp">;
+            server: z.ZodString;
+            account: z.ZodOptional<z.ZodString>;
+            tool: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"tool">;
+            name: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"class">;
+            class: z.ZodEnum<{
+                "destroy-catastrophic": "destroy-catastrophic";
+                "destroy-local": "destroy-local";
+                "vcs-history": "vcs-history";
+                privilege: "privilege";
+                credential: "credential";
+                "control-plane": "control-plane";
+                "attack-shape": "attack-shape";
+                "policy-fault": "policy-fault";
+                "package-install": "package-install";
+                publish: "publish";
+                "remote-write": "remote-write";
+                "network-egress": "network-egress";
+                "exec-unknown": "exec-unknown";
+                unmodelled: "unmodelled";
+                "envelope-read": "envelope-read";
+                "envelope-write": "envelope-write";
+                "protected-file": "protected-file";
+                "workspace-write": "workspace-write";
+                "mcp-lookup": "mcp-lookup";
+                "mcp-action": "mcp-action";
+            }>;
+        }, z.core.$strict>], "kind">;
+        ttlMs: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+    }, z.core.$strict>>;
+    ackStore: z.ZodOptional<z.ZodObject<{
+        scope: z.ZodEnum<{
+            session: "session";
+            project: "project";
+            bot: "bot";
+            global: "global";
+        }>;
+        subject: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"command">;
+            argv0: z.ZodString;
+            spine: z.ZodArray<z.ZodString>;
+            args: z.ZodArray<z.ZodString>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"path">;
+            cluster: z.ZodEnum<{
+                read: "read";
+                write: "write";
+            }>;
+            path: z.ZodString;
+            depth: z.ZodEnum<{
+                exact: "exact";
+                subtree: "subtree";
+            }>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"mcp">;
+            server: z.ZodString;
+            account: z.ZodOptional<z.ZodString>;
+            tool: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"tool">;
+            name: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"class">;
+            class: z.ZodEnum<{
+                "destroy-catastrophic": "destroy-catastrophic";
+                "destroy-local": "destroy-local";
+                "vcs-history": "vcs-history";
+                privilege: "privilege";
+                credential: "credential";
+                "control-plane": "control-plane";
+                "attack-shape": "attack-shape";
+                "policy-fault": "policy-fault";
+                "package-install": "package-install";
+                publish: "publish";
+                "remote-write": "remote-write";
+                "network-egress": "network-egress";
+                "exec-unknown": "exec-unknown";
+                unmodelled: "unmodelled";
+                "envelope-read": "envelope-read";
+                "envelope-write": "envelope-write";
+                "protected-file": "protected-file";
+                "workspace-write": "workspace-write";
+                "mcp-lookup": "mcp-lookup";
+                "mcp-action": "mcp-action";
+            }>;
+        }, z.core.$strict>], "kind">;
+        ttlMs: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+    }, z.core.$strict>>;
+    persist: z.ZodOptional<z.ZodEnum<{
+        session: "session";
+        always: "always";
+    }>>;
+}, z.core.$strip>;
+export declare const askAnswerOutput: z.ZodObject<{
+    ok: z.ZodBoolean;
+    reason: z.ZodOptional<z.ZodEnum<{
+        "not-pending": "not-pending";
+        block: "block";
+        "soft-deny-not-storable": "soft-deny-not-storable";
+        "subject-not-offered": "subject-not-offered";
+        "folder-not-allowed": "folder-not-allowed";
+        "scope-unavailable": "scope-unavailable";
+    }>>;
+    grant: z.ZodOptional<z.ZodObject<{
+        id: z.ZodString;
+        kind: z.ZodOptional<z.ZodEnum<{
+            grant: "grant";
+            ack: "ack";
+        }>>;
+        scope: z.ZodEnum<{
+            session: "session";
+            project: "project";
+            bot: "bot";
+            global: "global";
+        }>;
+        scopeKey: z.ZodString;
+        subject: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"command">;
+            argv0: z.ZodString;
+            spine: z.ZodArray<z.ZodString>;
+            args: z.ZodArray<z.ZodString>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"path">;
+            cluster: z.ZodEnum<{
+                read: "read";
+                write: "write";
+            }>;
+            path: z.ZodString;
+            depth: z.ZodEnum<{
+                exact: "exact";
+                subtree: "subtree";
+            }>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"mcp">;
+            server: z.ZodString;
+            account: z.ZodOptional<z.ZodString>;
+            tool: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"tool">;
+            name: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"class">;
+            class: z.ZodEnum<{
+                "destroy-catastrophic": "destroy-catastrophic";
+                "destroy-local": "destroy-local";
+                "vcs-history": "vcs-history";
+                privilege: "privilege";
+                credential: "credential";
+                "control-plane": "control-plane";
+                "attack-shape": "attack-shape";
+                "policy-fault": "policy-fault";
+                "package-install": "package-install";
+                publish: "publish";
+                "remote-write": "remote-write";
+                "network-egress": "network-egress";
+                "exec-unknown": "exec-unknown";
+                unmodelled: "unmodelled";
+                "envelope-read": "envelope-read";
+                "envelope-write": "envelope-write";
+                "protected-file": "protected-file";
+                "workspace-write": "workspace-write";
+                "mcp-lookup": "mcp-lookup";
+                "mcp-action": "mcp-action";
+            }>;
+        }, z.core.$strict>], "kind">;
+        createdAtMs: z.ZodNumber;
+        expiresAtMs: z.ZodNullable<z.ZodNumber>;
+        source: z.ZodEnum<{
+            prompt: "prompt";
+            settings: "settings";
+        }>;
+        label: z.ZodString;
+    }, z.core.$strict>>;
+}, z.core.$strip>;
+/**
+ * A call that is allowed but waits for the user's acknowledgement (a `needsAcknowledgement` flag). The
+ * daemon holds the ledger; it is never a job, a transcript entry or a model-visible field.
+ */
+export declare const ackStoreOptionSchema: z.ZodObject<{
+    scope: z.ZodEnum<{
+        session: "session";
+        project: "project";
+        bot: "bot";
+        global: "global";
+    }>;
+    subject: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"command">;
+        argv0: z.ZodString;
+        spine: z.ZodArray<z.ZodString>;
+        args: z.ZodArray<z.ZodString>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"path">;
+        cluster: z.ZodEnum<{
+            read: "read";
+            write: "write";
+        }>;
+        path: z.ZodString;
+        depth: z.ZodEnum<{
+            exact: "exact";
+            subtree: "subtree";
+        }>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"mcp">;
+        server: z.ZodString;
+        account: z.ZodOptional<z.ZodString>;
+        tool: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"tool">;
+        name: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"class">;
+        class: z.ZodEnum<{
+            "destroy-catastrophic": "destroy-catastrophic";
+            "destroy-local": "destroy-local";
+            "vcs-history": "vcs-history";
+            privilege: "privilege";
+            credential: "credential";
+            "control-plane": "control-plane";
+            "attack-shape": "attack-shape";
+            "policy-fault": "policy-fault";
+            "package-install": "package-install";
+            publish: "publish";
+            "remote-write": "remote-write";
+            "network-egress": "network-egress";
+            "exec-unknown": "exec-unknown";
+            unmodelled: "unmodelled";
+            "envelope-read": "envelope-read";
+            "envelope-write": "envelope-write";
+            "protected-file": "protected-file";
+            "workspace-write": "workspace-write";
+            "mcp-lookup": "mcp-lookup";
+            "mcp-action": "mcp-action";
+        }>;
+    }, z.core.$strict>], "kind">;
+    label: z.ZodString;
+    defaultTtlMs: z.ZodNullable<z.ZodNumber>;
+}, z.core.$strip>;
+export declare const ackRequestSchema: z.ZodObject<{
+    ackId: z.ZodString;
+    sessionId: z.ZodString;
+    jobId: z.ZodString;
+    tool: z.ZodString;
+    summary: z.ZodString;
+    detail: z.ZodString;
+    flags: z.ZodArray<z.ZodObject<{
+        label: z.ZodString;
+        why: z.ZodOptional<z.ZodString>;
+        layer: z.ZodEnum<{
+            session: "session";
+            project: "project";
+            dist: "dist";
+            managed: "managed";
+            user: "user";
+        }>;
+    }, z.core.$strip>>;
+    verdict: z.ZodObject<{
+        tier: z.ZodEnum<{
+            allow: "allow";
+            ask: "ask";
+            "soft-deny": "soft-deny";
+        }>;
+        classes: z.ZodArray<z.ZodEnum<{
+            "destroy-catastrophic": "destroy-catastrophic";
+            "destroy-local": "destroy-local";
+            "vcs-history": "vcs-history";
+            privilege: "privilege";
+            credential: "credential";
+            "control-plane": "control-plane";
+            "attack-shape": "attack-shape";
+            "policy-fault": "policy-fault";
+            "package-install": "package-install";
+            publish: "publish";
+            "remote-write": "remote-write";
+            "network-egress": "network-egress";
+            "exec-unknown": "exec-unknown";
+            unmodelled: "unmodelled";
+            "envelope-read": "envelope-read";
+            "envelope-write": "envelope-write";
+            "protected-file": "protected-file";
+            "workspace-write": "workspace-write";
+            "mcp-lookup": "mcp-lookup";
+            "mcp-action": "mcp-action";
+        }>>;
+        licensedBy: z.ZodEnum<{
+            grant: "grant";
+            floor: "floor";
+            judge: "judge";
+            resolver: "resolver";
+            pending: "pending";
+        }>;
+    }, z.core.$strip>;
+    storeOptions: z.ZodArray<z.ZodObject<{
+        scope: z.ZodEnum<{
+            session: "session";
+            project: "project";
+            bot: "bot";
+            global: "global";
+        }>;
+        subject: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"command">;
+            argv0: z.ZodString;
+            spine: z.ZodArray<z.ZodString>;
+            args: z.ZodArray<z.ZodString>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"path">;
+            cluster: z.ZodEnum<{
+                read: "read";
+                write: "write";
+            }>;
+            path: z.ZodString;
+            depth: z.ZodEnum<{
+                exact: "exact";
+                subtree: "subtree";
+            }>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"mcp">;
+            server: z.ZodString;
+            account: z.ZodOptional<z.ZodString>;
+            tool: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"tool">;
+            name: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"class">;
+            class: z.ZodEnum<{
+                "destroy-catastrophic": "destroy-catastrophic";
+                "destroy-local": "destroy-local";
+                "vcs-history": "vcs-history";
+                privilege: "privilege";
+                credential: "credential";
+                "control-plane": "control-plane";
+                "attack-shape": "attack-shape";
+                "policy-fault": "policy-fault";
+                "package-install": "package-install";
+                publish: "publish";
+                "remote-write": "remote-write";
+                "network-egress": "network-egress";
+                "exec-unknown": "exec-unknown";
+                unmodelled: "unmodelled";
+                "envelope-read": "envelope-read";
+                "envelope-write": "envelope-write";
+                "protected-file": "protected-file";
+                "workspace-write": "workspace-write";
+                "mcp-lookup": "mcp-lookup";
+                "mcp-action": "mcp-action";
+            }>;
+        }, z.core.$strict>], "kind">;
+        label: z.ZodString;
+        defaultTtlMs: z.ZodNullable<z.ZodNumber>;
+    }, z.core.$strip>>;
+    createdAtMs: z.ZodNumber;
+}, z.core.$strip>;
+export declare const ackPendingInput: z.ZodObject<{
+    sessionId: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export declare const ackPendingOutput: z.ZodObject<{
+    acks: z.ZodArray<z.ZodObject<{
+        ackId: z.ZodString;
+        sessionId: z.ZodString;
+        jobId: z.ZodString;
+        tool: z.ZodString;
+        summary: z.ZodString;
+        detail: z.ZodString;
+        flags: z.ZodArray<z.ZodObject<{
+            label: z.ZodString;
+            why: z.ZodOptional<z.ZodString>;
+            layer: z.ZodEnum<{
+                session: "session";
+                project: "project";
+                dist: "dist";
+                managed: "managed";
+                user: "user";
+            }>;
+        }, z.core.$strip>>;
+        verdict: z.ZodObject<{
+            tier: z.ZodEnum<{
+                allow: "allow";
+                ask: "ask";
+                "soft-deny": "soft-deny";
+            }>;
+            classes: z.ZodArray<z.ZodEnum<{
+                "destroy-catastrophic": "destroy-catastrophic";
+                "destroy-local": "destroy-local";
+                "vcs-history": "vcs-history";
+                privilege: "privilege";
+                credential: "credential";
+                "control-plane": "control-plane";
+                "attack-shape": "attack-shape";
+                "policy-fault": "policy-fault";
+                "package-install": "package-install";
+                publish: "publish";
+                "remote-write": "remote-write";
+                "network-egress": "network-egress";
+                "exec-unknown": "exec-unknown";
+                unmodelled: "unmodelled";
+                "envelope-read": "envelope-read";
+                "envelope-write": "envelope-write";
+                "protected-file": "protected-file";
+                "workspace-write": "workspace-write";
+                "mcp-lookup": "mcp-lookup";
+                "mcp-action": "mcp-action";
+            }>>;
+            licensedBy: z.ZodEnum<{
+                grant: "grant";
+                floor: "floor";
+                judge: "judge";
+                resolver: "resolver";
+                pending: "pending";
+            }>;
+        }, z.core.$strip>;
+        storeOptions: z.ZodArray<z.ZodObject<{
+            scope: z.ZodEnum<{
+                session: "session";
+                project: "project";
+                bot: "bot";
+                global: "global";
+            }>;
+            subject: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                kind: z.ZodLiteral<"command">;
+                argv0: z.ZodString;
+                spine: z.ZodArray<z.ZodString>;
+                args: z.ZodArray<z.ZodString>;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"path">;
+                cluster: z.ZodEnum<{
+                    read: "read";
+                    write: "write";
+                }>;
+                path: z.ZodString;
+                depth: z.ZodEnum<{
+                    exact: "exact";
+                    subtree: "subtree";
+                }>;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"mcp">;
+                server: z.ZodString;
+                account: z.ZodOptional<z.ZodString>;
+                tool: z.ZodOptional<z.ZodString>;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"tool">;
+                name: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"class">;
+                class: z.ZodEnum<{
+                    "destroy-catastrophic": "destroy-catastrophic";
+                    "destroy-local": "destroy-local";
+                    "vcs-history": "vcs-history";
+                    privilege: "privilege";
+                    credential: "credential";
+                    "control-plane": "control-plane";
+                    "attack-shape": "attack-shape";
+                    "policy-fault": "policy-fault";
+                    "package-install": "package-install";
+                    publish: "publish";
+                    "remote-write": "remote-write";
+                    "network-egress": "network-egress";
+                    "exec-unknown": "exec-unknown";
+                    unmodelled: "unmodelled";
+                    "envelope-read": "envelope-read";
+                    "envelope-write": "envelope-write";
+                    "protected-file": "protected-file";
+                    "workspace-write": "workspace-write";
+                    "mcp-lookup": "mcp-lookup";
+                    "mcp-action": "mcp-action";
+                }>;
+            }, z.core.$strict>], "kind">;
+            label: z.ZodString;
+            defaultTtlMs: z.ZodNullable<z.ZodNumber>;
+        }, z.core.$strip>>;
+        createdAtMs: z.ZodNumber;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export declare const ackAnswerInput: z.ZodObject<{
+    sessionId: z.ZodString;
+    jobId: z.ZodString;
+    ackId: z.ZodString;
+    accept: z.ZodBoolean;
+    store: z.ZodOptional<z.ZodObject<{
+        scope: z.ZodEnum<{
+            session: "session";
+            project: "project";
+            bot: "bot";
+            global: "global";
+        }>;
+        subject: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"command">;
+            argv0: z.ZodString;
+            spine: z.ZodArray<z.ZodString>;
+            args: z.ZodArray<z.ZodString>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"path">;
+            cluster: z.ZodEnum<{
+                read: "read";
+                write: "write";
+            }>;
+            path: z.ZodString;
+            depth: z.ZodEnum<{
+                exact: "exact";
+                subtree: "subtree";
+            }>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"mcp">;
+            server: z.ZodString;
+            account: z.ZodOptional<z.ZodString>;
+            tool: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"tool">;
+            name: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"class">;
+            class: z.ZodEnum<{
+                "destroy-catastrophic": "destroy-catastrophic";
+                "destroy-local": "destroy-local";
+                "vcs-history": "vcs-history";
+                privilege: "privilege";
+                credential: "credential";
+                "control-plane": "control-plane";
+                "attack-shape": "attack-shape";
+                "policy-fault": "policy-fault";
+                "package-install": "package-install";
+                publish: "publish";
+                "remote-write": "remote-write";
+                "network-egress": "network-egress";
+                "exec-unknown": "exec-unknown";
+                unmodelled: "unmodelled";
+                "envelope-read": "envelope-read";
+                "envelope-write": "envelope-write";
+                "protected-file": "protected-file";
+                "workspace-write": "workspace-write";
+                "mcp-lookup": "mcp-lookup";
+                "mcp-action": "mcp-action";
+            }>;
+        }, z.core.$strict>], "kind">;
+        ttlMs: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+    }, z.core.$strict>>;
+    comment: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export declare const ackAnswerOutput: z.ZodObject<{
+    ok: z.ZodBoolean;
+    reason: z.ZodOptional<z.ZodEnum<{
+        "not-pending": "not-pending";
+        "subject-not-offered": "subject-not-offered";
+        "scope-unavailable": "scope-unavailable";
+    }>>;
+    ack: z.ZodOptional<z.ZodObject<{
+        id: z.ZodString;
+        kind: z.ZodOptional<z.ZodEnum<{
+            grant: "grant";
+            ack: "ack";
+        }>>;
+        scope: z.ZodEnum<{
+            session: "session";
+            project: "project";
+            bot: "bot";
+            global: "global";
+        }>;
+        scopeKey: z.ZodString;
+        subject: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"command">;
+            argv0: z.ZodString;
+            spine: z.ZodArray<z.ZodString>;
+            args: z.ZodArray<z.ZodString>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"path">;
+            cluster: z.ZodEnum<{
+                read: "read";
+                write: "write";
+            }>;
+            path: z.ZodString;
+            depth: z.ZodEnum<{
+                exact: "exact";
+                subtree: "subtree";
+            }>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"mcp">;
+            server: z.ZodString;
+            account: z.ZodOptional<z.ZodString>;
+            tool: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"tool">;
+            name: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"class">;
+            class: z.ZodEnum<{
+                "destroy-catastrophic": "destroy-catastrophic";
+                "destroy-local": "destroy-local";
+                "vcs-history": "vcs-history";
+                privilege: "privilege";
+                credential: "credential";
+                "control-plane": "control-plane";
+                "attack-shape": "attack-shape";
+                "policy-fault": "policy-fault";
+                "package-install": "package-install";
+                publish: "publish";
+                "remote-write": "remote-write";
+                "network-egress": "network-egress";
+                "exec-unknown": "exec-unknown";
+                unmodelled: "unmodelled";
+                "envelope-read": "envelope-read";
+                "envelope-write": "envelope-write";
+                "protected-file": "protected-file";
+                "workspace-write": "workspace-write";
+                "mcp-lookup": "mcp-lookup";
+                "mcp-action": "mcp-action";
+            }>;
+        }, z.core.$strict>], "kind">;
+        createdAtMs: z.ZodNumber;
+        expiresAtMs: z.ZodNullable<z.ZodNumber>;
+        source: z.ZodEnum<{
+            prompt: "prompt";
+            settings: "settings";
+        }>;
+        label: z.ZodString;
+    }, z.core.$strict>>;
+}, z.core.$strip>;
+export declare const ackListInput: z.ZodObject<{
+    bot: z.ZodOptional<z.ZodString>;
+    scope: z.ZodOptional<z.ZodEnum<{
+        session: "session";
+        project: "project";
+        bot: "bot";
+        global: "global";
+    }>>;
+    sessionId: z.ZodOptional<z.ZodString>;
+    projectPath: z.ZodOptional<z.ZodString>;
+    includeExpired: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strict>;
+export declare const ackListOutput: z.ZodObject<{
+    rows: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        kind: z.ZodOptional<z.ZodEnum<{
+            grant: "grant";
+            ack: "ack";
+        }>>;
+        scope: z.ZodEnum<{
+            session: "session";
+            project: "project";
+            bot: "bot";
+            global: "global";
+        }>;
+        scopeKey: z.ZodString;
+        subject: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"command">;
+            argv0: z.ZodString;
+            spine: z.ZodArray<z.ZodString>;
+            args: z.ZodArray<z.ZodString>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"path">;
+            cluster: z.ZodEnum<{
+                read: "read";
+                write: "write";
+            }>;
+            path: z.ZodString;
+            depth: z.ZodEnum<{
+                exact: "exact";
+                subtree: "subtree";
+            }>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"mcp">;
+            server: z.ZodString;
+            account: z.ZodOptional<z.ZodString>;
+            tool: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"tool">;
+            name: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"class">;
+            class: z.ZodEnum<{
+                "destroy-catastrophic": "destroy-catastrophic";
+                "destroy-local": "destroy-local";
+                "vcs-history": "vcs-history";
+                privilege: "privilege";
+                credential: "credential";
+                "control-plane": "control-plane";
+                "attack-shape": "attack-shape";
+                "policy-fault": "policy-fault";
+                "package-install": "package-install";
+                publish: "publish";
+                "remote-write": "remote-write";
+                "network-egress": "network-egress";
+                "exec-unknown": "exec-unknown";
+                unmodelled: "unmodelled";
+                "envelope-read": "envelope-read";
+                "envelope-write": "envelope-write";
+                "protected-file": "protected-file";
+                "workspace-write": "workspace-write";
+                "mcp-lookup": "mcp-lookup";
+                "mcp-action": "mcp-action";
+            }>;
+        }, z.core.$strict>], "kind">;
+        createdAtMs: z.ZodNumber;
+        expiresAtMs: z.ZodNullable<z.ZodNumber>;
+        source: z.ZodEnum<{
+            prompt: "prompt";
+            settings: "settings";
+        }>;
+        label: z.ZodString;
+    }, z.core.$strict>>;
+}, z.core.$strip>;
+export declare const ackAddInput: z.ZodObject<{
+    scope: z.ZodEnum<{
+        session: "session";
+        project: "project";
+        bot: "bot";
+        global: "global";
+    }>;
+    subject: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"command">;
+        argv0: z.ZodString;
+        spine: z.ZodArray<z.ZodString>;
+        args: z.ZodArray<z.ZodString>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"path">;
+        cluster: z.ZodEnum<{
+            read: "read";
+            write: "write";
+        }>;
+        path: z.ZodString;
+        depth: z.ZodEnum<{
+            exact: "exact";
+            subtree: "subtree";
+        }>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"mcp">;
+        server: z.ZodString;
+        account: z.ZodOptional<z.ZodString>;
+        tool: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"tool">;
+        name: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"class">;
+        class: z.ZodEnum<{
+            "destroy-catastrophic": "destroy-catastrophic";
+            "destroy-local": "destroy-local";
+            "vcs-history": "vcs-history";
+            privilege: "privilege";
+            credential: "credential";
+            "control-plane": "control-plane";
+            "attack-shape": "attack-shape";
+            "policy-fault": "policy-fault";
+            "package-install": "package-install";
+            publish: "publish";
+            "remote-write": "remote-write";
+            "network-egress": "network-egress";
+            "exec-unknown": "exec-unknown";
+            unmodelled: "unmodelled";
+            "envelope-read": "envelope-read";
+            "envelope-write": "envelope-write";
+            "protected-file": "protected-file";
+            "workspace-write": "workspace-write";
+            "mcp-lookup": "mcp-lookup";
+            "mcp-action": "mcp-action";
+        }>;
+    }, z.core.$strict>], "kind">;
+    scopeKey: z.ZodOptional<z.ZodString>;
+    ttlMs: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strict>;
+export declare const ackAddOutput: z.ZodUnion<readonly [z.ZodObject<{
+    ok: z.ZodLiteral<true>;
+    row: z.ZodObject<{
+        id: z.ZodString;
+        kind: z.ZodOptional<z.ZodEnum<{
+            grant: "grant";
+            ack: "ack";
+        }>>;
+        scope: z.ZodEnum<{
+            session: "session";
+            project: "project";
+            bot: "bot";
+            global: "global";
+        }>;
+        scopeKey: z.ZodString;
+        subject: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"command">;
+            argv0: z.ZodString;
+            spine: z.ZodArray<z.ZodString>;
+            args: z.ZodArray<z.ZodString>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"path">;
+            cluster: z.ZodEnum<{
+                read: "read";
+                write: "write";
+            }>;
+            path: z.ZodString;
+            depth: z.ZodEnum<{
+                exact: "exact";
+                subtree: "subtree";
+            }>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"mcp">;
+            server: z.ZodString;
+            account: z.ZodOptional<z.ZodString>;
+            tool: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"tool">;
+            name: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"class">;
+            class: z.ZodEnum<{
+                "destroy-catastrophic": "destroy-catastrophic";
+                "destroy-local": "destroy-local";
+                "vcs-history": "vcs-history";
+                privilege: "privilege";
+                credential: "credential";
+                "control-plane": "control-plane";
+                "attack-shape": "attack-shape";
+                "policy-fault": "policy-fault";
+                "package-install": "package-install";
+                publish: "publish";
+                "remote-write": "remote-write";
+                "network-egress": "network-egress";
+                "exec-unknown": "exec-unknown";
+                unmodelled: "unmodelled";
+                "envelope-read": "envelope-read";
+                "envelope-write": "envelope-write";
+                "protected-file": "protected-file";
+                "workspace-write": "workspace-write";
+                "mcp-lookup": "mcp-lookup";
+                "mcp-action": "mcp-action";
+            }>;
+        }, z.core.$strict>], "kind">;
+        createdAtMs: z.ZodNumber;
+        expiresAtMs: z.ZodNullable<z.ZodNumber>;
+        source: z.ZodEnum<{
+            prompt: "prompt";
+            settings: "settings";
+        }>;
+        label: z.ZodString;
+    }, z.core.$strict>;
+}, z.core.$strip>, z.ZodObject<{
+    ok: z.ZodLiteral<false>;
+    reason: z.ZodEnum<{
+        "fenced-path": "fenced-path";
+        "invalid-scope": "invalid-scope";
+        "unknown-session": "unknown-session";
+        "subject-not-allowed": "subject-not-allowed";
+    }>;
+}, z.core.$strip>]>;
+export declare const ackRevokeInput: z.ZodObject<{
+    id: z.ZodString;
+    sessionId: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export declare const ackRevokeOutput: z.ZodObject<{
+    ok: z.ZodBoolean;
+}, z.core.$strip>;
+/** What a call is, for `policy/explain`. */
+export declare const policyProbeSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    kind: z.ZodLiteral<"shell">;
+    command: z.ZodString;
+    cwd: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"path">;
+    cluster: z.ZodEnum<{
+        read: "read";
+        write: "write";
+    }>;
+    path: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"mcp">;
+    server: z.ZodString;
+    account: z.ZodOptional<z.ZodString>;
+    tool: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"tool">;
+    name: z.ZodString;
+    args: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+}, z.core.$strict>], "kind">;
+export declare const policyExplainInput: z.ZodObject<{
+    probe: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"shell">;
+        command: z.ZodString;
+        cwd: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"path">;
+        cluster: z.ZodEnum<{
+            read: "read";
+            write: "write";
+        }>;
+        path: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"mcp">;
+        server: z.ZodString;
+        account: z.ZodOptional<z.ZodString>;
+        tool: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"tool">;
+        name: z.ZodString;
+        args: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    }, z.core.$strict>], "kind">;
+    mode: z.ZodOptional<z.ZodEnum<{
+        manual: "manual";
+        auto: "auto";
+        yolo: "yolo";
+    }>>;
+    unattended: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strict>;
+export declare const explainResolverSchema: z.ZodObject<{
+    kind: z.ZodEnum<{
+        allow: "allow";
+        judge: "judge";
+        human: "human";
+        deny: "deny";
+    }>;
+    layer: z.ZodEnum<{
+        session: "session";
+        project: "project";
+        dist: "dist";
+        managed: "managed";
+        user: "user";
+    }>;
+    onDeny: z.ZodOptional<z.ZodEnum<{
+        human: "human";
+        deny: "deny";
+    }>>;
+    onFail: z.ZodOptional<z.ZodEnum<{
+        human: "human";
+        deny: "deny";
+    }>>;
+}, z.core.$strip>;
+export declare const policyExplainOutput: z.ZodObject<{
+    tier: z.ZodEnum<{
+        allow: "allow";
+        block: "block";
+        ask: "ask";
+        "soft-deny": "soft-deny";
+    }>;
+    classes: z.ZodArray<z.ZodObject<{
+        id: z.ZodEnum<{
+            "destroy-catastrophic": "destroy-catastrophic";
+            "destroy-local": "destroy-local";
+            "vcs-history": "vcs-history";
+            privilege: "privilege";
+            credential: "credential";
+            "control-plane": "control-plane";
+            "attack-shape": "attack-shape";
+            "policy-fault": "policy-fault";
+            "package-install": "package-install";
+            publish: "publish";
+            "remote-write": "remote-write";
+            "network-egress": "network-egress";
+            "exec-unknown": "exec-unknown";
+            unmodelled: "unmodelled";
+            "envelope-read": "envelope-read";
+            "envelope-write": "envelope-write";
+            "protected-file": "protected-file";
+            "workspace-write": "workspace-write";
+            "mcp-lookup": "mcp-lookup";
+            "mcp-action": "mcp-action";
+        }>;
+        label: z.ZodString;
+    }, z.core.$strip>>;
+    votes: z.ZodArray<z.ZodObject<{
+        tier: z.ZodEnum<{
+            allow: "allow";
+            block: "block";
+            ask: "ask";
+            "soft-deny": "soft-deny";
+        }>;
+        class: z.ZodEnum<{
+            "destroy-catastrophic": "destroy-catastrophic";
+            "destroy-local": "destroy-local";
+            "vcs-history": "vcs-history";
+            privilege: "privilege";
+            credential: "credential";
+            "control-plane": "control-plane";
+            "attack-shape": "attack-shape";
+            "policy-fault": "policy-fault";
+            "package-install": "package-install";
+            publish: "publish";
+            "remote-write": "remote-write";
+            "network-egress": "network-egress";
+            "exec-unknown": "exec-unknown";
+            unmodelled: "unmodelled";
+            "envelope-read": "envelope-read";
+            "envelope-write": "envelope-write";
+            "protected-file": "protected-file";
+            "workspace-write": "workspace-write";
+            "mcp-lookup": "mcp-lookup";
+            "mcp-action": "mcp-action";
+        }>;
+        ruleId: z.ZodString;
+        lift: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    resolver: z.ZodNullable<z.ZodObject<{
+        kind: z.ZodEnum<{
+            allow: "allow";
+            judge: "judge";
+            human: "human";
+            deny: "deny";
+        }>;
+        layer: z.ZodEnum<{
+            session: "session";
+            project: "project";
+            dist: "dist";
+            managed: "managed";
+            user: "user";
+        }>;
+        onDeny: z.ZodOptional<z.ZodEnum<{
+            human: "human";
+            deny: "deny";
+        }>>;
+        onFail: z.ZodOptional<z.ZodEnum<{
+            human: "human";
+            deny: "deny";
+        }>>;
+    }, z.core.$strip>>;
+    grant: z.ZodNullable<z.ZodObject<{
+        id: z.ZodString;
+        kind: z.ZodOptional<z.ZodEnum<{
+            grant: "grant";
+            ack: "ack";
+        }>>;
+        scope: z.ZodEnum<{
+            session: "session";
+            project: "project";
+            bot: "bot";
+            global: "global";
+        }>;
+        scopeKey: z.ZodString;
+        subject: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"command">;
+            argv0: z.ZodString;
+            spine: z.ZodArray<z.ZodString>;
+            args: z.ZodArray<z.ZodString>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"path">;
+            cluster: z.ZodEnum<{
+                read: "read";
+                write: "write";
+            }>;
+            path: z.ZodString;
+            depth: z.ZodEnum<{
+                exact: "exact";
+                subtree: "subtree";
+            }>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"mcp">;
+            server: z.ZodString;
+            account: z.ZodOptional<z.ZodString>;
+            tool: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"tool">;
+            name: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"class">;
+            class: z.ZodEnum<{
+                "destroy-catastrophic": "destroy-catastrophic";
+                "destroy-local": "destroy-local";
+                "vcs-history": "vcs-history";
+                privilege: "privilege";
+                credential: "credential";
+                "control-plane": "control-plane";
+                "attack-shape": "attack-shape";
+                "policy-fault": "policy-fault";
+                "package-install": "package-install";
+                publish: "publish";
+                "remote-write": "remote-write";
+                "network-egress": "network-egress";
+                "exec-unknown": "exec-unknown";
+                unmodelled: "unmodelled";
+                "envelope-read": "envelope-read";
+                "envelope-write": "envelope-write";
+                "protected-file": "protected-file";
+                "workspace-write": "workspace-write";
+                "mcp-lookup": "mcp-lookup";
+                "mcp-action": "mcp-action";
+            }>;
+        }, z.core.$strict>], "kind">;
+        createdAtMs: z.ZodNumber;
+        expiresAtMs: z.ZodNullable<z.ZodNumber>;
+        source: z.ZodEnum<{
+            prompt: "prompt";
+            settings: "settings";
+        }>;
+        label: z.ZodString;
+    }, z.core.$strict>>;
+    grantable: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"command">;
+        argv0: z.ZodString;
+        spine: z.ZodArray<z.ZodString>;
+        args: z.ZodArray<z.ZodString>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"path">;
+        cluster: z.ZodEnum<{
+            read: "read";
+            write: "write";
+        }>;
+        path: z.ZodString;
+        depth: z.ZodEnum<{
+            exact: "exact";
+            subtree: "subtree";
+        }>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"mcp">;
+        server: z.ZodString;
+        account: z.ZodOptional<z.ZodString>;
+        tool: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"tool">;
+        name: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"class">;
+        class: z.ZodEnum<{
+            "destroy-catastrophic": "destroy-catastrophic";
+            "destroy-local": "destroy-local";
+            "vcs-history": "vcs-history";
+            privilege: "privilege";
+            credential: "credential";
+            "control-plane": "control-plane";
+            "attack-shape": "attack-shape";
+            "policy-fault": "policy-fault";
+            "package-install": "package-install";
+            publish: "publish";
+            "remote-write": "remote-write";
+            "network-egress": "network-egress";
+            "exec-unknown": "exec-unknown";
+            unmodelled: "unmodelled";
+            "envelope-read": "envelope-read";
+            "envelope-write": "envelope-write";
+            "protected-file": "protected-file";
+            "workspace-write": "workspace-write";
+            "mcp-lookup": "mcp-lookup";
+            "mcp-action": "mcp-action";
+        }>;
+    }, z.core.$strict>], "kind">>;
+    outcome: z.ZodEnum<{
+        runs: "runs";
+        "judge-ask": "judge-ask";
+        "judge-soft-deny": "judge-soft-deny";
+        "prompts-you": "prompts-you";
+        denied: "denied";
+        blocked: "blocked";
+    }>;
+    ack: z.ZodNullable<z.ZodObject<{
+        flags: z.ZodArray<z.ZodObject<{
+            label: z.ZodString;
+            why: z.ZodOptional<z.ZodString>;
+            layer: z.ZodString;
+        }, z.core.$strip>>;
+        satisfiedBy: z.ZodNullable<z.ZodObject<{
+            id: z.ZodString;
+            kind: z.ZodOptional<z.ZodEnum<{
+                grant: "grant";
+                ack: "ack";
+            }>>;
+            scope: z.ZodEnum<{
+                session: "session";
+                project: "project";
+                bot: "bot";
+                global: "global";
+            }>;
+            scopeKey: z.ZodString;
+            subject: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                kind: z.ZodLiteral<"command">;
+                argv0: z.ZodString;
+                spine: z.ZodArray<z.ZodString>;
+                args: z.ZodArray<z.ZodString>;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"path">;
+                cluster: z.ZodEnum<{
+                    read: "read";
+                    write: "write";
+                }>;
+                path: z.ZodString;
+                depth: z.ZodEnum<{
+                    exact: "exact";
+                    subtree: "subtree";
+                }>;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"mcp">;
+                server: z.ZodString;
+                account: z.ZodOptional<z.ZodString>;
+                tool: z.ZodOptional<z.ZodString>;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"tool">;
+                name: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"class">;
+                class: z.ZodEnum<{
+                    "destroy-catastrophic": "destroy-catastrophic";
+                    "destroy-local": "destroy-local";
+                    "vcs-history": "vcs-history";
+                    privilege: "privilege";
+                    credential: "credential";
+                    "control-plane": "control-plane";
+                    "attack-shape": "attack-shape";
+                    "policy-fault": "policy-fault";
+                    "package-install": "package-install";
+                    publish: "publish";
+                    "remote-write": "remote-write";
+                    "network-egress": "network-egress";
+                    "exec-unknown": "exec-unknown";
+                    unmodelled: "unmodelled";
+                    "envelope-read": "envelope-read";
+                    "envelope-write": "envelope-write";
+                    "protected-file": "protected-file";
+                    "workspace-write": "workspace-write";
+                    "mcp-lookup": "mcp-lookup";
+                    "mcp-action": "mcp-action";
+                }>;
+            }, z.core.$strict>], "kind">;
+            createdAtMs: z.ZodNumber;
+            expiresAtMs: z.ZodNullable<z.ZodNumber>;
+            source: z.ZodEnum<{
+                prompt: "prompt";
+                settings: "settings";
+            }>;
+            label: z.ZodString;
+        }, z.core.$strict>>;
+    }, z.core.$strip>>;
+    reason: z.ZodString;
+}, z.core.$strip>;
+export declare const policyOverlayInput: z.ZodObject<{
+    overlay: z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+}, z.core.$strict>;
+export declare const policyOverlayOutput: z.ZodObject<{
+    ok: z.ZodBoolean;
+    errors: z.ZodArray<z.ZodString>;
+}, z.core.$strip>;
+export declare const policyConfigGetInput: z.ZodObject<{}, z.core.$strict>;
+export declare const policyConfigGetOutput: z.ZodObject<{
+    layers: z.ZodObject<{
+        user: z.ZodString;
+        project: z.ZodString;
+        session: z.ZodString;
+    }, z.core.$strip>;
+    warnings: z.ZodArray<z.ZodString>;
+}, z.core.$strip>;
+//# sourceMappingURL=authorization.d.ts.map