@qmilab/lodestar-core 0.1.4 → 0.2.0

package/dist/schemas/policy.d.ts

@@ -0,0 +1,768 @@
+import { z } from "zod";
+/**
+ * Action policy — the wire format for what actions may touch the world.
+ *
+ * Design lock: `docs/architecture/policy-kernel.md`. The short version:
+ *
+ * - Policy is a *declarative document*, not a function. Today's enforcement
+ *   is an opaque `PolicyGate` closure (the `autoApprovePolicy` preset). The
+ *   Policy Kernel compiles a `Policy` document into that gate, so the verdict
+ *   becomes data — addressable, hashable, signable, and citable by
+ *   `Decision.policy_dependencies`.
+ * - Rules are evaluated *in order*; the first decisive rule wins, over a
+ *   *structural* deny default. There is deliberately no `default` field and
+ *   no expressible `default: allow` — the safe outcome is structural, not a
+ *   rule someone can forget to add ("no silent defaults for security-relevant
+ *   settings", root CLAUDE.md).
+ * - The *trust-ladder floor* (L5 deny, L4 always require_approval) is a
+ *   non-overridable pre-check applied *before* the rule list, in the engine —
+ *   it is NOT expressed as a rule, so no broad earlier `allow` can lift it.
+ *
+ * Not to be confused with `ContextPolicy` (`belief.ts`), which governs what
+ * beliefs may enter model context. This `Policy` governs what actions may
+ * touch the world — a different gate on a different chain link.
+ *
+ * Core owns the wire format only. The engine — `compile(policy) → PolicyGate`,
+ * the three-valued gate, signature verification, the arbitrate hook — lives in
+ * `@qmilab/lodestar-policy-kernel`.
+ */
+/**
+ * The declarative effect of a matched rule.
+ *
+ * `require_approval` is the *declarative* counterpart of the gate's runtime
+ * `hold` verdict: a matched `require_approval` rule causes the engine to park
+ * the action at `pending_approval` and open an `ApprovalRequest`. (The runtime
+ * three-valued verdict `allow | deny | hold` is an engine type and lives in
+ * `@qmilab/lodestar-policy-kernel`, not in the wire format.)
+ */
+export declare const PolicyEffectSchema: z.ZodEnum<["allow", "deny", "require_approval"]>;
+export type PolicyEffect = z.infer<typeof PolicyEffectSchema>;
+/**
+ * The match clause of a rule. All present fields must hold (AND); an absent
+ * field is a wildcard. A rule with an empty `match` matches every action.
+ *
+ * The fields constrain an `ActionContract` (`action.ts`):
+ * - `tool` is a glob over the tool registry key (e.g. `"git.*"`).
+ * - `max_blast_radius` matches contracts at or below this radius on the
+ *   ordering self < session < project < external (the comparison is engine
+ *   logic; the schema stores the ceiling).
+ * - `reversibility` is the set the contract's reversibility must be a member
+ *   of (e.g. `["reversible", "compensable"]` excludes `irreversible`).
+ * - `scope` constrains the contract's `ResourceScope`.
+ * - `data_sensitivity` matches the contract's 3-value action sensitivity.
+ * - `required_level_lte` matches contracts whose `required_level` is at or
+ *   below this trust level.
+ */
+export declare const PolicyMatchSchema: z.ZodObject<{
+    tool: z.ZodOptional<z.ZodString>;
+    max_blast_radius: z.ZodOptional<z.ZodEnum<["self", "session", "project", "external"]>>;
+    reversibility: z.ZodOptional<z.ZodArray<z.ZodEnum<["reversible", "compensable", "irreversible"]>, "many">>;
+    scope: z.ZodOptional<z.ZodObject<{
+        level: z.ZodEnum<["global", "organization", "user", "project", "repo", "session"]>;
+        identifier: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        level: "global" | "organization" | "user" | "project" | "repo" | "session";
+        identifier: string;
+    }, {
+        level: "global" | "organization" | "user" | "project" | "repo" | "session";
+        identifier: string;
+    }>>;
+    data_sensitivity: z.ZodOptional<z.ZodEnum<["public", "private", "secret"]>>;
+    required_level_lte: z.ZodOptional<z.ZodNumber>;
+}, "strip", z.ZodTypeAny, {
+    tool?: string | undefined;
+    scope?: {
+        level: "global" | "organization" | "user" | "project" | "repo" | "session";
+        identifier: string;
+    } | undefined;
+    reversibility?: ("reversible" | "compensable" | "irreversible")[] | undefined;
+    data_sensitivity?: "public" | "secret" | "private" | undefined;
+    max_blast_radius?: "project" | "session" | "external" | "self" | undefined;
+    required_level_lte?: number | undefined;
+}, {
+    tool?: string | undefined;
+    scope?: {
+        level: "global" | "organization" | "user" | "project" | "repo" | "session";
+        identifier: string;
+    } | undefined;
+    reversibility?: ("reversible" | "compensable" | "irreversible")[] | undefined;
+    data_sensitivity?: "public" | "secret" | "private" | undefined;
+    max_blast_radius?: "project" | "session" | "external" | "self" | undefined;
+    required_level_lte?: number | undefined;
+}>;
+export type PolicyMatch = z.infer<typeof PolicyMatchSchema>;
+/**
+ * Constraints an approver must satisfy to resolve a held action. *Data, not a
+ * callback* — it says *what* an approver must be, checked against the
+ * resolver's `Actor`. This is what lets a team approval surface route a
+ * request to the right person without the Policy Kernel knowing anything
+ * about people. All fields optional; an empty object means "any actor the
+ * host has configured as a resolver may approve".
+ *
+ * The clearance check spans two alphabets: an action's `data_sensitivity` is
+ * the 3-value `public | private | secret`, an `Actor.sensitivity_clearance`
+ * is the 4-value `Sensitivity`. `sensitivity_clearance` here is the *4-value*
+ * `Sensitivity` — the action's sensitivity *mapped* via the Action Kernel's
+ * `sensitivityForContract` (`public→public`, `private→internal`,
+ * `secret→secret`) — so the approver-side comparison happens in one alphabet.
+ */
+export declare const RequiredAuthoritySchema: z.ZodObject<{
+    min_trust_baseline: z.ZodOptional<z.ZodNumber>;
+    sensitivity_clearance: z.ZodOptional<z.ZodEnum<["public", "internal", "confidential", "secret"]>>;
+    scope: z.ZodOptional<z.ZodObject<{
+        level: z.ZodEnum<["global", "organization", "user", "project", "repo", "session"]>;
+        identifier: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        level: "global" | "organization" | "user" | "project" | "repo" | "session";
+        identifier: string;
+    }, {
+        level: "global" | "organization" | "user" | "project" | "repo" | "session";
+        identifier: string;
+    }>>;
+}, "strip", z.ZodTypeAny, {
+    sensitivity_clearance?: "public" | "internal" | "confidential" | "secret" | undefined;
+    scope?: {
+        level: "global" | "organization" | "user" | "project" | "repo" | "session";
+        identifier: string;
+    } | undefined;
+    min_trust_baseline?: number | undefined;
+}, {
+    sensitivity_clearance?: "public" | "internal" | "confidential" | "secret" | undefined;
+    scope?: {
+        level: "global" | "organization" | "user" | "project" | "repo" | "session";
+        identifier: string;
+    } | undefined;
+    min_trust_baseline?: number | undefined;
+}>;
+export type RequiredAuthority = z.infer<typeof RequiredAuthoritySchema>;
+/**
+ * The approval requirement carried by a `require_approval` rule. When the rule
+ * fires, its `required_authority` becomes the opened `ApprovalRequest`'s
+ * `required_authority`. Omitting `required_authority` (or the whole
+ * `approval` object) means any configured resolver may approve.
+ *
+ * A thin wrapper today; it is the seam where multi-approver / N-of-M
+ * constraints attach when the team approval surface is built (deferred —
+ * `policy-kernel.md`, "a separate team surface").
+ */
+export declare const ApprovalRequirementSchema: z.ZodObject<{
+    required_authority: z.ZodOptional<z.ZodObject<{
+        min_trust_baseline: z.ZodOptional<z.ZodNumber>;
+        sensitivity_clearance: z.ZodOptional<z.ZodEnum<["public", "internal", "confidential", "secret"]>>;
+        scope: z.ZodOptional<z.ZodObject<{
+            level: z.ZodEnum<["global", "organization", "user", "project", "repo", "session"]>;
+            identifier: z.ZodString;
+        }, "strip", z.ZodTypeAny, {
+            level: "global" | "organization" | "user" | "project" | "repo" | "session";
+            identifier: string;
+        }, {
+            level: "global" | "organization" | "user" | "project" | "repo" | "session";
+            identifier: string;
+        }>>;
+    }, "strip", z.ZodTypeAny, {
+        sensitivity_clearance?: "public" | "internal" | "confidential" | "secret" | undefined;
+        scope?: {
+            level: "global" | "organization" | "user" | "project" | "repo" | "session";
+            identifier: string;
+        } | undefined;
+        min_trust_baseline?: number | undefined;
+    }, {
+        sensitivity_clearance?: "public" | "internal" | "confidential" | "secret" | undefined;
+        scope?: {
+            level: "global" | "organization" | "user" | "project" | "repo" | "session";
+            identifier: string;
+        } | undefined;
+        min_trust_baseline?: number | undefined;
+    }>>;
+}, "strip", z.ZodTypeAny, {
+    required_authority?: {
+        sensitivity_clearance?: "public" | "internal" | "confidential" | "secret" | undefined;
+        scope?: {
+            level: "global" | "organization" | "user" | "project" | "repo" | "session";
+            identifier: string;
+        } | undefined;
+        min_trust_baseline?: number | undefined;
+    } | undefined;
+}, {
+    required_authority?: {
+        sensitivity_clearance?: "public" | "internal" | "confidential" | "secret" | undefined;
+        scope?: {
+            level: "global" | "organization" | "user" | "project" | "repo" | "session";
+            identifier: string;
+        } | undefined;
+        min_trust_baseline?: number | undefined;
+    } | undefined;
+}>;
+export type ApprovalRequirement = z.infer<typeof ApprovalRequirementSchema>;
+/**
+ * One match → effect rule. Evaluated in document order; the first rule whose
+ * `match` holds is decisive. `reason` is surfaced verbatim in the
+ * `PolicyDecision` (and, for a held action, in the `ApprovalRequest`).
+ *
+ * `approval` may be present only on a `require_approval` rule (enforced
+ * below). It is not *required* there — an absent `approval` means the hold has
+ * no authority constraints (any configured resolver may approve), which is a
+ * meaningful default, so it is left optional rather than forced to an empty
+ * object.
+ */
+export declare const PolicyRuleSchema: z.ZodEffects<z.ZodObject<{
+    match: z.ZodObject<{
+        tool: z.ZodOptional<z.ZodString>;
+        max_blast_radius: z.ZodOptional<z.ZodEnum<["self", "session", "project", "external"]>>;
+        reversibility: z.ZodOptional<z.ZodArray<z.ZodEnum<["reversible", "compensable", "irreversible"]>, "many">>;
+        scope: z.ZodOptional<z.ZodObject<{
+            level: z.ZodEnum<["global", "organization", "user", "project", "repo", "session"]>;
+            identifier: z.ZodString;
+        }, "strip", z.ZodTypeAny, {
+            level: "global" | "organization" | "user" | "project" | "repo" | "session";
+            identifier: string;
+        }, {
+            level: "global" | "organization" | "user" | "project" | "repo" | "session";
+            identifier: string;
+        }>>;
+        data_sensitivity: z.ZodOptional<z.ZodEnum<["public", "private", "secret"]>>;
+        required_level_lte: z.ZodOptional<z.ZodNumber>;
+    }, "strip", z.ZodTypeAny, {
+        tool?: string | undefined;
+        scope?: {
+            level: "global" | "organization" | "user" | "project" | "repo" | "session";
+            identifier: string;
+        } | undefined;
+        reversibility?: ("reversible" | "compensable" | "irreversible")[] | undefined;
+        data_sensitivity?: "public" | "secret" | "private" | undefined;
+        max_blast_radius?: "project" | "session" | "external" | "self" | undefined;
+        required_level_lte?: number | undefined;
+    }, {
+        tool?: string | undefined;
+        scope?: {
+            level: "global" | "organization" | "user" | "project" | "repo" | "session";
+            identifier: string;
+        } | undefined;
+        reversibility?: ("reversible" | "compensable" | "irreversible")[] | undefined;
+        data_sensitivity?: "public" | "secret" | "private" | undefined;
+        max_blast_radius?: "project" | "session" | "external" | "self" | undefined;
+        required_level_lte?: number | undefined;
+    }>;
+    effect: z.ZodEnum<["allow", "deny", "require_approval"]>;
+    approval: z.ZodOptional<z.ZodObject<{
+        required_authority: z.ZodOptional<z.ZodObject<{
+            min_trust_baseline: z.ZodOptional<z.ZodNumber>;
+            sensitivity_clearance: z.ZodOptional<z.ZodEnum<["public", "internal", "confidential", "secret"]>>;
+            scope: z.ZodOptional<z.ZodObject<{
+                level: z.ZodEnum<["global", "organization", "user", "project", "repo", "session"]>;
+                identifier: z.ZodString;
+            }, "strip", z.ZodTypeAny, {
+                level: "global" | "organization" | "user" | "project" | "repo" | "session";
+                identifier: string;
+            }, {
+                level: "global" | "organization" | "user" | "project" | "repo" | "session";
+                identifier: string;
+            }>>;
+        }, "strip", z.ZodTypeAny, {
+            sensitivity_clearance?: "public" | "internal" | "confidential" | "secret" | undefined;
+            scope?: {
+                level: "global" | "organization" | "user" | "project" | "repo" | "session";
+                identifier: string;
+            } | undefined;
+            min_trust_baseline?: number | undefined;
+        }, {
+            sensitivity_clearance?: "public" | "internal" | "confidential" | "secret" | undefined;
+            scope?: {
+                level: "global" | "organization" | "user" | "project" | "repo" | "session";
+                identifier: string;
+            } | undefined;
+            min_trust_baseline?: number | undefined;
+        }>>;
+    }, "strip", z.ZodTypeAny, {
+        required_authority?: {
+            sensitivity_clearance?: "public" | "internal" | "confidential" | "secret" | undefined;
+            scope?: {
+                level: "global" | "organization" | "user" | "project" | "repo" | "session";
+                identifier: string;
+            } | undefined;
+            min_trust_baseline?: number | undefined;
+        } | undefined;
+    }, {
+        required_authority?: {
+            sensitivity_clearance?: "public" | "internal" | "confidential" | "secret" | undefined;
+            scope?: {
+                level: "global" | "organization" | "user" | "project" | "repo" | "session";
+                identifier: string;
+            } | undefined;
+            min_trust_baseline?: number | undefined;
+        } | undefined;
+    }>>;
+    reason: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    reason: string;
+    match: {
+        tool?: string | undefined;
+        scope?: {
+            level: "global" | "organization" | "user" | "project" | "repo" | "session";
+            identifier: string;
+        } | undefined;
+        reversibility?: ("reversible" | "compensable" | "irreversible")[] | undefined;
+        data_sensitivity?: "public" | "secret" | "private" | undefined;
+        max_blast_radius?: "project" | "session" | "external" | "self" | undefined;
+        required_level_lte?: number | undefined;
+    };
+    effect: "allow" | "deny" | "require_approval";
+    approval?: {
+        required_authority?: {
+            sensitivity_clearance?: "public" | "internal" | "confidential" | "secret" | undefined;
+            scope?: {
+                level: "global" | "organization" | "user" | "project" | "repo" | "session";
+                identifier: string;
+            } | undefined;
+            min_trust_baseline?: number | undefined;
+        } | undefined;
+    } | undefined;
+}, {
+    reason: string;
+    match: {
+        tool?: string | undefined;
+        scope?: {
+            level: "global" | "organization" | "user" | "project" | "repo" | "session";
+            identifier: string;
+        } | undefined;
+        reversibility?: ("reversible" | "compensable" | "irreversible")[] | undefined;
+        data_sensitivity?: "public" | "secret" | "private" | undefined;
+        max_blast_radius?: "project" | "session" | "external" | "self" | undefined;
+        required_level_lte?: number | undefined;
+    };
+    effect: "allow" | "deny" | "require_approval";
+    approval?: {
+        required_authority?: {
+            sensitivity_clearance?: "public" | "internal" | "confidential" | "secret" | undefined;
+            scope?: {
+                level: "global" | "organization" | "user" | "project" | "repo" | "session";
+                identifier: string;
+            } | undefined;
+            min_trust_baseline?: number | undefined;
+        } | undefined;
+    } | undefined;
+}>, {
+    reason: string;
+    match: {
+        tool?: string | undefined;
+        scope?: {
+            level: "global" | "organization" | "user" | "project" | "repo" | "session";
+            identifier: string;
+        } | undefined;
+        reversibility?: ("reversible" | "compensable" | "irreversible")[] | undefined;
+        data_sensitivity?: "public" | "secret" | "private" | undefined;
+        max_blast_radius?: "project" | "session" | "external" | "self" | undefined;
+        required_level_lte?: number | undefined;
+    };
+    effect: "allow" | "deny" | "require_approval";
+    approval?: {
+        required_authority?: {
+            sensitivity_clearance?: "public" | "internal" | "confidential" | "secret" | undefined;
+            scope?: {
+                level: "global" | "organization" | "user" | "project" | "repo" | "session";
+                identifier: string;
+            } | undefined;
+            min_trust_baseline?: number | undefined;
+        } | undefined;
+    } | undefined;
+}, {
+    reason: string;
+    match: {
+        tool?: string | undefined;
+        scope?: {
+            level: "global" | "organization" | "user" | "project" | "repo" | "session";
+            identifier: string;
+        } | undefined;
+        reversibility?: ("reversible" | "compensable" | "irreversible")[] | undefined;
+        data_sensitivity?: "public" | "secret" | "private" | undefined;
+        max_blast_radius?: "project" | "session" | "external" | "self" | undefined;
+        required_level_lte?: number | undefined;
+    };
+    effect: "allow" | "deny" | "require_approval";
+    approval?: {
+        required_authority?: {
+            sensitivity_clearance?: "public" | "internal" | "confidential" | "secret" | undefined;
+            scope?: {
+                level: "global" | "organization" | "user" | "project" | "repo" | "session";
+                identifier: string;
+            } | undefined;
+            min_trust_baseline?: number | undefined;
+        } | undefined;
+    } | undefined;
+}>;
+export type PolicyRule = z.infer<typeof PolicyRuleSchema>;
+/**
+ * A signed, packageable action-policy document.
+ *
+ * `version` is the monotonic string that `Decision.policy_dependencies` cites,
+ * so an audit can resolve exactly which policy version arbitrated an action.
+ *
+ * `signature` / `signed_by` are *optional at the schema level* so that
+ * unsigned **drafts** parse, but `v02-delta.md` §5 lists policy versions among
+ * the artifacts that *require* Ed25519 signatures: the Policy Kernel rejects an
+ * unsigned (or invalid-signature) policy at the gate, except under an explicit,
+ * logged `allow_unsigned: true` development opt-in. The signer is
+ * `signature.signer_id`; `signed_by` is a top-level convenience that must
+ * equal it when a signature is present (enforced below) — never a second,
+ * divergeable source of truth.
+ *
+ * The signature is computed over the *canonical document without the
+ * signature* — `{ id, version, rules }` — since a document cannot sign over
+ * its own signature. That canonical hash is what `signature.payload_hash`
+ * carries and what `Decision.policy_dependencies` ultimately pins.
+ */
+export declare const PolicySchema: z.ZodEffects<z.ZodObject<{
+    id: z.ZodString;
+    version: z.ZodString;
+    rules: z.ZodArray<z.ZodEffects<z.ZodObject<{
+        match: z.ZodObject<{
+            tool: z.ZodOptional<z.ZodString>;
+            max_blast_radius: z.ZodOptional<z.ZodEnum<["self", "session", "project", "external"]>>;
+            reversibility: z.ZodOptional<z.ZodArray<z.ZodEnum<["reversible", "compensable", "irreversible"]>, "many">>;
+            scope: z.ZodOptional<z.ZodObject<{
+                level: z.ZodEnum<["global", "organization", "user", "project", "repo", "session"]>;
+                identifier: z.ZodString;
+            }, "strip", z.ZodTypeAny, {
+                level: "global" | "organization" | "user" | "project" | "repo" | "session";
+                identifier: string;
+            }, {
+                level: "global" | "organization" | "user" | "project" | "repo" | "session";
+                identifier: string;
+            }>>;
+            data_sensitivity: z.ZodOptional<z.ZodEnum<["public", "private", "secret"]>>;
+            required_level_lte: z.ZodOptional<z.ZodNumber>;
+        }, "strip", z.ZodTypeAny, {
+            tool?: string | undefined;
+            scope?: {
+                level: "global" | "organization" | "user" | "project" | "repo" | "session";
+                identifier: string;
+            } | undefined;
+            reversibility?: ("reversible" | "compensable" | "irreversible")[] | undefined;
+            data_sensitivity?: "public" | "secret" | "private" | undefined;
+            max_blast_radius?: "project" | "session" | "external" | "self" | undefined;
+            required_level_lte?: number | undefined;
+        }, {
+            tool?: string | undefined;
+            scope?: {
+                level: "global" | "organization" | "user" | "project" | "repo" | "session";
+                identifier: string;
+            } | undefined;
+            reversibility?: ("reversible" | "compensable" | "irreversible")[] | undefined;
+            data_sensitivity?: "public" | "secret" | "private" | undefined;
+            max_blast_radius?: "project" | "session" | "external" | "self" | undefined;
+            required_level_lte?: number | undefined;
+        }>;
+        effect: z.ZodEnum<["allow", "deny", "require_approval"]>;
+        approval: z.ZodOptional<z.ZodObject<{
+            required_authority: z.ZodOptional<z.ZodObject<{
+                min_trust_baseline: z.ZodOptional<z.ZodNumber>;
+                sensitivity_clearance: z.ZodOptional<z.ZodEnum<["public", "internal", "confidential", "secret"]>>;
+                scope: z.ZodOptional<z.ZodObject<{
+                    level: z.ZodEnum<["global", "organization", "user", "project", "repo", "session"]>;
+                    identifier: z.ZodString;
+                }, "strip", z.ZodTypeAny, {
+                    level: "global" | "organization" | "user" | "project" | "repo" | "session";
+                    identifier: string;
+                }, {
+                    level: "global" | "organization" | "user" | "project" | "repo" | "session";
+                    identifier: string;
+                }>>;
+            }, "strip", z.ZodTypeAny, {
+                sensitivity_clearance?: "public" | "internal" | "confidential" | "secret" | undefined;
+                scope?: {
+                    level: "global" | "organization" | "user" | "project" | "repo" | "session";
+                    identifier: string;
+                } | undefined;
+                min_trust_baseline?: number | undefined;
+            }, {
+                sensitivity_clearance?: "public" | "internal" | "confidential" | "secret" | undefined;
+                scope?: {
+                    level: "global" | "organization" | "user" | "project" | "repo" | "session";
+                    identifier: string;
+                } | undefined;
+                min_trust_baseline?: number | undefined;
+            }>>;
+        }, "strip", z.ZodTypeAny, {
+            required_authority?: {
+                sensitivity_clearance?: "public" | "internal" | "confidential" | "secret" | undefined;
+                scope?: {
+                    level: "global" | "organization" | "user" | "project" | "repo" | "session";
+                    identifier: string;
+                } | undefined;
+                min_trust_baseline?: number | undefined;
+            } | undefined;
+        }, {
+            required_authority?: {
+                sensitivity_clearance?: "public" | "internal" | "confidential" | "secret" | undefined;
+                scope?: {
+                    level: "global" | "organization" | "user" | "project" | "repo" | "session";
+                    identifier: string;
+                } | undefined;
+                min_trust_baseline?: number | undefined;
+            } | undefined;
+        }>>;
+        reason: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        reason: string;
+        match: {
+            tool?: string | undefined;
+            scope?: {
+                level: "global" | "organization" | "user" | "project" | "repo" | "session";
+                identifier: string;
+            } | undefined;
+            reversibility?: ("reversible" | "compensable" | "irreversible")[] | undefined;
+            data_sensitivity?: "public" | "secret" | "private" | undefined;
+            max_blast_radius?: "project" | "session" | "external" | "self" | undefined;
+            required_level_lte?: number | undefined;
+        };
+        effect: "allow" | "deny" | "require_approval";
+        approval?: {
+            required_authority?: {
+                sensitivity_clearance?: "public" | "internal" | "confidential" | "secret" | undefined;
+                scope?: {
+                    level: "global" | "organization" | "user" | "project" | "repo" | "session";
+                    identifier: string;
+                } | undefined;
+                min_trust_baseline?: number | undefined;
+            } | undefined;
+        } | undefined;
+    }, {
+        reason: string;
+        match: {
+            tool?: string | undefined;
+            scope?: {
+                level: "global" | "organization" | "user" | "project" | "repo" | "session";
+                identifier: string;
+            } | undefined;
+            reversibility?: ("reversible" | "compensable" | "irreversible")[] | undefined;
+            data_sensitivity?: "public" | "secret" | "private" | undefined;
+            max_blast_radius?: "project" | "session" | "external" | "self" | undefined;
+            required_level_lte?: number | undefined;
+        };
+        effect: "allow" | "deny" | "require_approval";
+        approval?: {
+            required_authority?: {
+                sensitivity_clearance?: "public" | "internal" | "confidential" | "secret" | undefined;
+                scope?: {
+                    level: "global" | "organization" | "user" | "project" | "repo" | "session";
+                    identifier: string;
+                } | undefined;
+                min_trust_baseline?: number | undefined;
+            } | undefined;
+        } | undefined;
+    }>, {
+        reason: string;
+        match: {
+            tool?: string | undefined;
+            scope?: {
+                level: "global" | "organization" | "user" | "project" | "repo" | "session";
+                identifier: string;
+            } | undefined;
+            reversibility?: ("reversible" | "compensable" | "irreversible")[] | undefined;
+            data_sensitivity?: "public" | "secret" | "private" | undefined;
+            max_blast_radius?: "project" | "session" | "external" | "self" | undefined;
+            required_level_lte?: number | undefined;
+        };
+        effect: "allow" | "deny" | "require_approval";
+        approval?: {
+            required_authority?: {
+                sensitivity_clearance?: "public" | "internal" | "confidential" | "secret" | undefined;
+                scope?: {
+                    level: "global" | "organization" | "user" | "project" | "repo" | "session";
+                    identifier: string;
+                } | undefined;
+                min_trust_baseline?: number | undefined;
+            } | undefined;
+        } | undefined;
+    }, {
+        reason: string;
+        match: {
+            tool?: string | undefined;
+            scope?: {
+                level: "global" | "organization" | "user" | "project" | "repo" | "session";
+                identifier: string;
+            } | undefined;
+            reversibility?: ("reversible" | "compensable" | "irreversible")[] | undefined;
+            data_sensitivity?: "public" | "secret" | "private" | undefined;
+            max_blast_radius?: "project" | "session" | "external" | "self" | undefined;
+            required_level_lte?: number | undefined;
+        };
+        effect: "allow" | "deny" | "require_approval";
+        approval?: {
+            required_authority?: {
+                sensitivity_clearance?: "public" | "internal" | "confidential" | "secret" | undefined;
+                scope?: {
+                    level: "global" | "organization" | "user" | "project" | "repo" | "session";
+                    identifier: string;
+                } | undefined;
+                min_trust_baseline?: number | undefined;
+            } | undefined;
+        } | undefined;
+    }>, "many">;
+    signature: z.ZodOptional<z.ZodObject<{
+        signer_id: z.ZodString;
+        payload_hash: z.ZodString;
+        algorithm: z.ZodLiteral<"ed25519">;
+        signature: z.ZodString;
+        at: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        at: string;
+        signer_id: string;
+        payload_hash: string;
+        algorithm: "ed25519";
+        signature: string;
+    }, {
+        at: string;
+        signer_id: string;
+        payload_hash: string;
+        algorithm: "ed25519";
+        signature: string;
+    }>>;
+    signed_by: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    id: string;
+    version: string;
+    rules: {
+        reason: string;
+        match: {
+            tool?: string | undefined;
+            scope?: {
+                level: "global" | "organization" | "user" | "project" | "repo" | "session";
+                identifier: string;
+            } | undefined;
+            reversibility?: ("reversible" | "compensable" | "irreversible")[] | undefined;
+            data_sensitivity?: "public" | "secret" | "private" | undefined;
+            max_blast_radius?: "project" | "session" | "external" | "self" | undefined;
+            required_level_lte?: number | undefined;
+        };
+        effect: "allow" | "deny" | "require_approval";
+        approval?: {
+            required_authority?: {
+                sensitivity_clearance?: "public" | "internal" | "confidential" | "secret" | undefined;
+                scope?: {
+                    level: "global" | "organization" | "user" | "project" | "repo" | "session";
+                    identifier: string;
+                } | undefined;
+                min_trust_baseline?: number | undefined;
+            } | undefined;
+        } | undefined;
+    }[];
+    signature?: {
+        at: string;
+        signer_id: string;
+        payload_hash: string;
+        algorithm: "ed25519";
+        signature: string;
+    } | undefined;
+    signed_by?: string | undefined;
+}, {
+    id: string;
+    version: string;
+    rules: {
+        reason: string;
+        match: {
+            tool?: string | undefined;
+            scope?: {
+                level: "global" | "organization" | "user" | "project" | "repo" | "session";
+                identifier: string;
+            } | undefined;
+            reversibility?: ("reversible" | "compensable" | "irreversible")[] | undefined;
+            data_sensitivity?: "public" | "secret" | "private" | undefined;
+            max_blast_radius?: "project" | "session" | "external" | "self" | undefined;
+            required_level_lte?: number | undefined;
+        };
+        effect: "allow" | "deny" | "require_approval";
+        approval?: {
+            required_authority?: {
+                sensitivity_clearance?: "public" | "internal" | "confidential" | "secret" | undefined;
+                scope?: {
+                    level: "global" | "organization" | "user" | "project" | "repo" | "session";
+                    identifier: string;
+                } | undefined;
+                min_trust_baseline?: number | undefined;
+            } | undefined;
+        } | undefined;
+    }[];
+    signature?: {
+        at: string;
+        signer_id: string;
+        payload_hash: string;
+        algorithm: "ed25519";
+        signature: string;
+    } | undefined;
+    signed_by?: string | undefined;
+}>, {
+    id: string;
+    version: string;
+    rules: {
+        reason: string;
+        match: {
+            tool?: string | undefined;
+            scope?: {
+                level: "global" | "organization" | "user" | "project" | "repo" | "session";
+                identifier: string;
+            } | undefined;
+            reversibility?: ("reversible" | "compensable" | "irreversible")[] | undefined;
+            data_sensitivity?: "public" | "secret" | "private" | undefined;
+            max_blast_radius?: "project" | "session" | "external" | "self" | undefined;
+            required_level_lte?: number | undefined;
+        };
+        effect: "allow" | "deny" | "require_approval";
+        approval?: {
+            required_authority?: {
+                sensitivity_clearance?: "public" | "internal" | "confidential" | "secret" | undefined;
+                scope?: {
+                    level: "global" | "organization" | "user" | "project" | "repo" | "session";
+                    identifier: string;
+                } | undefined;
+                min_trust_baseline?: number | undefined;
+            } | undefined;
+        } | undefined;
+    }[];
+    signature?: {
+        at: string;
+        signer_id: string;
+        payload_hash: string;
+        algorithm: "ed25519";
+        signature: string;
+    } | undefined;
+    signed_by?: string | undefined;
+}, {
+    id: string;
+    version: string;
+    rules: {
+        reason: string;
+        match: {
+            tool?: string | undefined;
+            scope?: {
+                level: "global" | "organization" | "user" | "project" | "repo" | "session";
+                identifier: string;
+            } | undefined;
+            reversibility?: ("reversible" | "compensable" | "irreversible")[] | undefined;
+            data_sensitivity?: "public" | "secret" | "private" | undefined;
+            max_blast_radius?: "project" | "session" | "external" | "self" | undefined;
+            required_level_lte?: number | undefined;
+        };
+        effect: "allow" | "deny" | "require_approval";
+        approval?: {
+            required_authority?: {
+                sensitivity_clearance?: "public" | "internal" | "confidential" | "secret" | undefined;
+                scope?: {
+                    level: "global" | "organization" | "user" | "project" | "repo" | "session";
+                    identifier: string;
+                } | undefined;
+                min_trust_baseline?: number | undefined;
+            } | undefined;
+        } | undefined;
+    }[];
+    signature?: {
+        at: string;
+        signer_id: string;
+        payload_hash: string;
+        algorithm: "ed25519";
+        signature: string;
+    } | undefined;
+    signed_by?: string | undefined;
+}>;
+export type Policy = z.infer<typeof PolicySchema>;
+//# sourceMappingURL=policy.d.ts.map