pulseed 0.6.5 → 0.6.6

package/dist/runtime/control/autonomy-governor.d.ts

@@ -0,0 +1,1345 @@
+import { z } from "zod";
+export declare const AutonomyDecisionLevelSchema: z.ZodEnum<["advisory", "prepare_only", "user_directed_execute", "autonomous_low_risk", "approval_required", "prohibited"]>;
+export type AutonomyDecisionLevel = z.infer<typeof AutonomyDecisionLevelSchema>;
+export declare const AutonomyBlastRadiusSchema: z.ZodEnum<["local", "workspace", "project", "external", "high"]>;
+export type AutonomyBlastRadius = z.infer<typeof AutonomyBlastRadiusSchema>;
+export declare const AutonomyPrivacySensitivitySchema: z.ZodEnum<["none", "low", "medium", "high"]>;
+export type AutonomyPrivacySensitivity = z.infer<typeof AutonomyPrivacySensitivitySchema>;
+export declare const AutonomyOperationPlanSchema: z.ZodObject<{
+    operation_id: z.ZodString;
+    capability_id: z.ZodOptional<z.ZodString>;
+    operation_kind: z.ZodEnum<["read", "search", "hint", "prepare", "send", "write", "publish", "delete", "mutate", "run"]>;
+    provider_ref: z.ZodString;
+    payload_class: z.ZodString;
+    side_effect_profile: z.ZodEnum<["none", "read", "send", "write", "publish", "delete", "mutate"]>;
+    risk_class: z.ZodDefault<z.ZodEnum<["low", "medium", "high"]>>;
+    privacy_profile: z.ZodOptional<z.ZodEnum<["local_private", "workspace_private", "external_service", "user_visible"]>>;
+    reversibility: z.ZodDefault<z.ZodEnum<["reversible", "append_only", "draft_only", "irreversible", "unknown"]>>;
+    external_action_authority: z.ZodDefault<z.ZodBoolean>;
+    target_refs: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    advisory_only: z.ZodDefault<z.ZodBoolean>;
+    preparable_when_blocked: z.ZodDefault<z.ZodBoolean>;
+    setup_guidance_ref: z.ZodOptional<z.ZodString>;
+    local_only: z.ZodDefault<z.ZodBoolean>;
+    inspectable: z.ZodDefault<z.ZodBoolean>;
+    expected_user_visible_effect: z.ZodDefault<z.ZodBoolean>;
+}, "strict", z.ZodTypeAny, {
+    reversibility: "unknown" | "reversible" | "irreversible" | "append_only" | "draft_only";
+    operation_kind: "read" | "search" | "hint" | "prepare" | "send" | "write" | "publish" | "delete" | "mutate" | "run";
+    side_effect_profile: "none" | "read" | "send" | "write" | "publish" | "delete" | "mutate";
+    external_action_authority: boolean;
+    payload_class: string;
+    provider_ref: string;
+    operation_id: string;
+    risk_class: "low" | "high" | "medium";
+    inspectable: boolean;
+    local_only: boolean;
+    target_refs: string[];
+    expected_user_visible_effect: boolean;
+    advisory_only: boolean;
+    preparable_when_blocked: boolean;
+    capability_id?: string | undefined;
+    privacy_profile?: "local_private" | "workspace_private" | "external_service" | "user_visible" | undefined;
+    setup_guidance_ref?: string | undefined;
+}, {
+    operation_kind: "read" | "search" | "hint" | "prepare" | "send" | "write" | "publish" | "delete" | "mutate" | "run";
+    side_effect_profile: "none" | "read" | "send" | "write" | "publish" | "delete" | "mutate";
+    payload_class: string;
+    provider_ref: string;
+    operation_id: string;
+    reversibility?: "unknown" | "reversible" | "irreversible" | "append_only" | "draft_only" | undefined;
+    capability_id?: string | undefined;
+    privacy_profile?: "local_private" | "workspace_private" | "external_service" | "user_visible" | undefined;
+    external_action_authority?: boolean | undefined;
+    risk_class?: "low" | "high" | "medium" | undefined;
+    inspectable?: boolean | undefined;
+    local_only?: boolean | undefined;
+    target_refs?: string[] | undefined;
+    expected_user_visible_effect?: boolean | undefined;
+    advisory_only?: boolean | undefined;
+    preparable_when_blocked?: boolean | undefined;
+    setup_guidance_ref?: string | undefined;
+}>;
+export type AutonomyOperationPlan = z.infer<typeof AutonomyOperationPlanSchema>;
+export type AutonomyOperationPlanInput = z.input<typeof AutonomyOperationPlanSchema>;
+export declare const AutonomyPolicySignalResultSchema: z.ZodEnum<["allowed", "approval_required", "prepare_only", "prohibited", "suppressed", "downgraded"]>;
+export type AutonomyPolicySignalResult = z.infer<typeof AutonomyPolicySignalResultSchema>;
+export declare const AutonomyPolicySignalSchema: z.ZodObject<{
+    ref: z.ZodString;
+    result: z.ZodEnum<["allowed", "approval_required", "prepare_only", "prohibited", "suppressed", "downgraded"]>;
+    reason: z.ZodString;
+    epoch: z.ZodOptional<z.ZodString>;
+    expires_at: z.ZodOptional<z.ZodString>;
+}, "strict", z.ZodTypeAny, {
+    reason: string;
+    ref: string;
+    result: "approval_required" | "suppressed" | "allowed" | "prepare_only" | "prohibited" | "downgraded";
+    expires_at?: string | undefined;
+    epoch?: string | undefined;
+}, {
+    reason: string;
+    ref: string;
+    result: "approval_required" | "suppressed" | "allowed" | "prepare_only" | "prohibited" | "downgraded";
+    expires_at?: string | undefined;
+    epoch?: string | undefined;
+}>;
+export type AutonomyPolicySignal = z.infer<typeof AutonomyPolicySignalSchema>;
+export declare const AutonomyRuntimeControlStateSchema: z.ZodObject<{
+    ref: z.ZodString;
+    state: z.ZodEnum<["available", "approval_required", "suspended", "prohibited"]>;
+    reason: z.ZodOptional<z.ZodString>;
+    epoch: z.ZodOptional<z.ZodString>;
+    expires_at: z.ZodOptional<z.ZodString>;
+}, "strict", z.ZodTypeAny, {
+    state: "suspended" | "approval_required" | "available" | "prohibited";
+    ref: string;
+    reason?: string | undefined;
+    expires_at?: string | undefined;
+    epoch?: string | undefined;
+}, {
+    state: "suspended" | "approval_required" | "available" | "prohibited";
+    ref: string;
+    reason?: string | undefined;
+    expires_at?: string | undefined;
+    epoch?: string | undefined;
+}>;
+export type AutonomyRuntimeControlState = z.infer<typeof AutonomyRuntimeControlStateSchema>;
+export declare const AutonomyCompanionStateSchema: z.ZodObject<{
+    ref: z.ZodString;
+    mode: z.ZodEnum<["active", "quieted", "suspended", "holding_back"]>;
+    reason: z.ZodOptional<z.ZodString>;
+    epoch: z.ZodOptional<z.ZodString>;
+}, "strict", z.ZodTypeAny, {
+    mode: "active" | "suspended" | "quieted" | "holding_back";
+    ref: string;
+    reason?: string | undefined;
+    epoch?: string | undefined;
+}, {
+    mode: "active" | "suspended" | "quieted" | "holding_back";
+    ref: string;
+    reason?: string | undefined;
+    epoch?: string | undefined;
+}>;
+export type AutonomyCompanionState = z.infer<typeof AutonomyCompanionStateSchema>;
+export declare const AutonomyTrustProfileSchema: z.ZodObject<{
+    ref: z.ZodString;
+    provider_ref: z.ZodString;
+    trust_level: z.ZodDefault<z.ZodEnum<["unknown", "low", "medium", "high"]>>;
+    positive_feedback_refs: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    negative_feedback_refs: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    epoch: z.ZodOptional<z.ZodString>;
+}, "strict", z.ZodTypeAny, {
+    ref: string;
+    provider_ref: string;
+    trust_level: "unknown" | "low" | "high" | "medium";
+    positive_feedback_refs: string[];
+    negative_feedback_refs: string[];
+    epoch?: string | undefined;
+}, {
+    ref: string;
+    provider_ref: string;
+    epoch?: string | undefined;
+    trust_level?: "unknown" | "low" | "high" | "medium" | undefined;
+    positive_feedback_refs?: string[] | undefined;
+    negative_feedback_refs?: string[] | undefined;
+}>;
+export type AutonomyTrustProfile = z.infer<typeof AutonomyTrustProfileSchema>;
+export declare const AutonomyVerificationProfileSchema: z.ZodObject<{
+    ref: z.ZodString;
+    provider_ref: z.ZodString;
+    verification_refs: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    audit_refs: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    epoch: z.ZodOptional<z.ZodString>;
+}, "strict", z.ZodTypeAny, {
+    ref: string;
+    provider_ref: string;
+    verification_refs: string[];
+    audit_refs: string[];
+    epoch?: string | undefined;
+}, {
+    ref: string;
+    provider_ref: string;
+    verification_refs?: string[] | undefined;
+    audit_refs?: string[] | undefined;
+    epoch?: string | undefined;
+}>;
+export type AutonomyVerificationProfile = z.infer<typeof AutonomyVerificationProfileSchema>;
+export declare const AutonomyFeedbackSignalSchema: z.ZodObject<{
+    ref: z.ZodString;
+    outcome: z.ZodEnum<["accepted", "ignored", "dismissed", "corrected", "overreach"]>;
+    reason: z.ZodOptional<z.ZodString>;
+    overreach_indicators: z.ZodDefault<z.ZodArray<z.ZodEnum<["too_frequent", "wrong_context", "sensitive", "unwanted_timing"]>, "many">>;
+    follow_through_success: z.ZodDefault<z.ZodNullable<z.ZodBoolean>>;
+    recorded_at: z.ZodOptional<z.ZodString>;
+    policy_adjustment: z.ZodOptional<z.ZodEnum<["reduce_frequency", "require_confirmation", "narrow_scope", "avoid_sensitive_context"]>>;
+}, "strict", z.ZodTypeAny, {
+    outcome: "accepted" | "corrected" | "ignored" | "dismissed" | "overreach";
+    ref: string;
+    overreach_indicators: ("sensitive" | "too_frequent" | "wrong_context" | "unwanted_timing")[];
+    follow_through_success: boolean | null;
+    reason?: string | undefined;
+    recorded_at?: string | undefined;
+    policy_adjustment?: "narrow_scope" | "require_confirmation" | "reduce_frequency" | "avoid_sensitive_context" | undefined;
+}, {
+    outcome: "accepted" | "corrected" | "ignored" | "dismissed" | "overreach";
+    ref: string;
+    reason?: string | undefined;
+    recorded_at?: string | undefined;
+    overreach_indicators?: ("sensitive" | "too_frequent" | "wrong_context" | "unwanted_timing")[] | undefined;
+    follow_through_success?: boolean | null | undefined;
+    policy_adjustment?: "narrow_scope" | "require_confirmation" | "reduce_frequency" | "avoid_sensitive_context" | undefined;
+}>;
+export type AutonomyFeedbackSignal = z.infer<typeof AutonomyFeedbackSignalSchema>;
+export declare const AutonomyContextAuthorityEvidenceSchema: z.ZodObject<{
+    ref: z.ZodString;
+    kind: z.ZodEnum<["dream_hint", "memory", "route_config", "past_execution", "auth_session", "mcp_enabled", "notification_subscription"]>;
+    epoch: z.ZodOptional<z.ZodString>;
+}, "strict", z.ZodTypeAny, {
+    kind: "memory" | "dream_hint" | "route_config" | "past_execution" | "auth_session" | "mcp_enabled" | "notification_subscription";
+    ref: string;
+    epoch?: string | undefined;
+}, {
+    kind: "memory" | "dream_hint" | "route_config" | "past_execution" | "auth_session" | "mcp_enabled" | "notification_subscription";
+    ref: string;
+    epoch?: string | undefined;
+}>;
+export type AutonomyContextAuthorityEvidence = z.infer<typeof AutonomyContextAuthorityEvidenceSchema>;
+export declare const AutonomyCacheInvalidationEvidenceSchema: z.ZodObject<{
+    kind: z.ZodEnum<["revocation", "correction", "tombstone", "quieting", "suspend", "policy_downgrade"]>;
+    ref: z.ZodString;
+    reason: z.ZodString;
+    epoch: z.ZodOptional<z.ZodString>;
+}, "strict", z.ZodTypeAny, {
+    kind: "correction" | "tombstone" | "quieting" | "suspend" | "revocation" | "policy_downgrade";
+    reason: string;
+    ref: string;
+    epoch?: string | undefined;
+}, {
+    kind: "correction" | "tombstone" | "quieting" | "suspend" | "revocation" | "policy_downgrade";
+    reason: string;
+    ref: string;
+    epoch?: string | undefined;
+}>;
+export type AutonomyCacheInvalidationEvidence = z.infer<typeof AutonomyCacheInvalidationEvidenceSchema>;
+export declare const AutonomyInvalidationBindingSchema: z.ZodObject<{
+    kind: z.ZodEnum<["admission", "auth", "backpressure", "companion_state", "feedback", "guardrail", "invalidation_evidence", "policy", "provider", "readiness", "runtime_control", "target", "trust", "verification"]>;
+    ref: z.ZodString;
+    epoch: z.ZodOptional<z.ZodString>;
+    reason: z.ZodOptional<z.ZodString>;
+}, "strict", z.ZodTypeAny, {
+    kind: "verification" | "provider" | "auth" | "admission" | "policy" | "target" | "guardrail" | "backpressure" | "runtime_control" | "feedback" | "companion_state" | "readiness" | "invalidation_evidence" | "trust";
+    ref: string;
+    reason?: string | undefined;
+    epoch?: string | undefined;
+}, {
+    kind: "verification" | "provider" | "auth" | "admission" | "policy" | "target" | "guardrail" | "backpressure" | "runtime_control" | "feedback" | "companion_state" | "readiness" | "invalidation_evidence" | "trust";
+    ref: string;
+    reason?: string | undefined;
+    epoch?: string | undefined;
+}>;
+export type AutonomyInvalidationBinding = z.infer<typeof AutonomyInvalidationBindingSchema>;
+export declare const AutonomyDecisionInputSchema: z.ZodObject<{
+    operation_plan: z.ZodObject<{
+        operation_id: z.ZodString;
+        capability_id: z.ZodOptional<z.ZodString>;
+        operation_kind: z.ZodEnum<["read", "search", "hint", "prepare", "send", "write", "publish", "delete", "mutate", "run"]>;
+        provider_ref: z.ZodString;
+        payload_class: z.ZodString;
+        side_effect_profile: z.ZodEnum<["none", "read", "send", "write", "publish", "delete", "mutate"]>;
+        risk_class: z.ZodDefault<z.ZodEnum<["low", "medium", "high"]>>;
+        privacy_profile: z.ZodOptional<z.ZodEnum<["local_private", "workspace_private", "external_service", "user_visible"]>>;
+        reversibility: z.ZodDefault<z.ZodEnum<["reversible", "append_only", "draft_only", "irreversible", "unknown"]>>;
+        external_action_authority: z.ZodDefault<z.ZodBoolean>;
+        target_refs: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        advisory_only: z.ZodDefault<z.ZodBoolean>;
+        preparable_when_blocked: z.ZodDefault<z.ZodBoolean>;
+        setup_guidance_ref: z.ZodOptional<z.ZodString>;
+        local_only: z.ZodDefault<z.ZodBoolean>;
+        inspectable: z.ZodDefault<z.ZodBoolean>;
+        expected_user_visible_effect: z.ZodDefault<z.ZodBoolean>;
+    }, "strict", z.ZodTypeAny, {
+        reversibility: "unknown" | "reversible" | "irreversible" | "append_only" | "draft_only";
+        operation_kind: "read" | "search" | "hint" | "prepare" | "send" | "write" | "publish" | "delete" | "mutate" | "run";
+        side_effect_profile: "none" | "read" | "send" | "write" | "publish" | "delete" | "mutate";
+        external_action_authority: boolean;
+        payload_class: string;
+        provider_ref: string;
+        operation_id: string;
+        risk_class: "low" | "high" | "medium";
+        inspectable: boolean;
+        local_only: boolean;
+        target_refs: string[];
+        expected_user_visible_effect: boolean;
+        advisory_only: boolean;
+        preparable_when_blocked: boolean;
+        capability_id?: string | undefined;
+        privacy_profile?: "local_private" | "workspace_private" | "external_service" | "user_visible" | undefined;
+        setup_guidance_ref?: string | undefined;
+    }, {
+        operation_kind: "read" | "search" | "hint" | "prepare" | "send" | "write" | "publish" | "delete" | "mutate" | "run";
+        side_effect_profile: "none" | "read" | "send" | "write" | "publish" | "delete" | "mutate";
+        payload_class: string;
+        provider_ref: string;
+        operation_id: string;
+        reversibility?: "unknown" | "reversible" | "irreversible" | "append_only" | "draft_only" | undefined;
+        capability_id?: string | undefined;
+        privacy_profile?: "local_private" | "workspace_private" | "external_service" | "user_visible" | undefined;
+        external_action_authority?: boolean | undefined;
+        risk_class?: "low" | "high" | "medium" | undefined;
+        inspectable?: boolean | undefined;
+        local_only?: boolean | undefined;
+        target_refs?: string[] | undefined;
+        expected_user_visible_effect?: boolean | undefined;
+        advisory_only?: boolean | undefined;
+        preparable_when_blocked?: boolean | undefined;
+        setup_guidance_ref?: string | undefined;
+    }>;
+    readiness_snapshots: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        schema_version: z.ZodLiteral<"capability-readiness-snapshot/v1">;
+        snapshot_id: z.ZodString;
+        capability_id: z.ZodString;
+        provider_ref: z.ZodString;
+        asset_ref: z.ZodString;
+        operation_id: z.ZodString;
+        operation_kind: z.ZodEnum<["read", "search", "hint", "prepare", "send", "write", "publish", "delete", "mutate", "run"]>;
+        tool_name: z.ZodString;
+        payload_class: z.ZodString;
+        risk_class: z.ZodEnum<["low", "medium", "high"]>;
+        side_effect_profile: z.ZodEnum<["none", "read", "send", "write", "publish", "delete", "mutate"]>;
+        evaluated_at: z.ZodString;
+        state: z.ZodEnum<["stored", "discoverable", "loadable", "compatible", "configured", "authenticated", "executable_verified", "degraded", "blocked"]>;
+        passed_gates: z.ZodDefault<z.ZodArray<z.ZodEnum<["stored", "discoverable", "loadable", "compatible", "configured", "authenticated", "executable_verified", "degraded", "blocked"]>, "many">>;
+        failed_gates: z.ZodDefault<z.ZodArray<z.ZodEnum<["stored", "discoverable", "loadable", "compatible", "configured", "authenticated", "executable_verified", "degraded", "blocked"]>, "many">>;
+        degraded_gates: z.ZodDefault<z.ZodArray<z.ZodEnum<["stored", "discoverable", "loadable", "compatible", "configured", "authenticated", "executable_verified", "degraded", "blocked"]>, "many">>;
+        missing_config_refs: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        missing_auth_refs: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        verification_refs: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        evidence_refs: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        stale_refs: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        safe_user_visible_label: z.ZodEnum<["Recorded, not executable", "Setup required", "Auth required", "Configured, verification required", "Execution substrate verified", "Degraded", "Blocked"]>;
+        metadata: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    }, "strict", z.ZodTypeAny, {
+        evaluated_at: string;
+        tool_name: string;
+        schema_version: "capability-readiness-snapshot/v1";
+        evidence_refs: string[];
+        state: "blocked" | "stored" | "discoverable" | "loadable" | "compatible" | "configured" | "authenticated" | "executable_verified" | "degraded";
+        metadata: Record<string, unknown>;
+        capability_id: string;
+        operation_kind: "read" | "search" | "hint" | "prepare" | "send" | "write" | "publish" | "delete" | "mutate" | "run";
+        side_effect_profile: "none" | "read" | "send" | "write" | "publish" | "delete" | "mutate";
+        payload_class: string;
+        snapshot_id: string;
+        provider_ref: string;
+        asset_ref: string;
+        operation_id: string;
+        risk_class: "low" | "high" | "medium";
+        passed_gates: ("blocked" | "stored" | "discoverable" | "loadable" | "compatible" | "configured" | "authenticated" | "executable_verified" | "degraded")[];
+        failed_gates: ("blocked" | "stored" | "discoverable" | "loadable" | "compatible" | "configured" | "authenticated" | "executable_verified" | "degraded")[];
+        degraded_gates: ("blocked" | "stored" | "discoverable" | "loadable" | "compatible" | "configured" | "authenticated" | "executable_verified" | "degraded")[];
+        missing_config_refs: string[];
+        missing_auth_refs: string[];
+        verification_refs: string[];
+        stale_refs: string[];
+        safe_user_visible_label: "Recorded, not executable" | "Setup required" | "Auth required" | "Configured, verification required" | "Execution substrate verified" | "Degraded" | "Blocked";
+    }, {
+        evaluated_at: string;
+        tool_name: string;
+        schema_version: "capability-readiness-snapshot/v1";
+        state: "blocked" | "stored" | "discoverable" | "loadable" | "compatible" | "configured" | "authenticated" | "executable_verified" | "degraded";
+        capability_id: string;
+        operation_kind: "read" | "search" | "hint" | "prepare" | "send" | "write" | "publish" | "delete" | "mutate" | "run";
+        side_effect_profile: "none" | "read" | "send" | "write" | "publish" | "delete" | "mutate";
+        payload_class: string;
+        snapshot_id: string;
+        provider_ref: string;
+        asset_ref: string;
+        operation_id: string;
+        risk_class: "low" | "high" | "medium";
+        safe_user_visible_label: "Recorded, not executable" | "Setup required" | "Auth required" | "Configured, verification required" | "Execution substrate verified" | "Degraded" | "Blocked";
+        evidence_refs?: string[] | undefined;
+        metadata?: Record<string, unknown> | undefined;
+        passed_gates?: ("blocked" | "stored" | "discoverable" | "loadable" | "compatible" | "configured" | "authenticated" | "executable_verified" | "degraded")[] | undefined;
+        failed_gates?: ("blocked" | "stored" | "discoverable" | "loadable" | "compatible" | "configured" | "authenticated" | "executable_verified" | "degraded")[] | undefined;
+        degraded_gates?: ("blocked" | "stored" | "discoverable" | "loadable" | "compatible" | "configured" | "authenticated" | "executable_verified" | "degraded")[] | undefined;
+        missing_config_refs?: string[] | undefined;
+        missing_auth_refs?: string[] | undefined;
+        verification_refs?: string[] | undefined;
+        stale_refs?: string[] | undefined;
+    }>, "many">>;
+    admission_evaluation: z.ZodObject<{
+        schema_version: z.ZodLiteral<"admission-policy-evaluation/v1">;
+        evaluation_id: z.ZodString;
+        operation_id: z.ZodString;
+        capability_id: z.ZodOptional<z.ZodString>;
+        evaluated_at: z.ZodString;
+        actor_ref: z.ZodString;
+        surface_ref: z.ZodString;
+        provider_ref: z.ZodString;
+        payload_class: z.ZodString;
+        target_refs: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        permission_grant_refs: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        rejected_permission_grant_refs: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        relationship_policy_refs: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        quieting_policy_refs: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        privacy_policy_refs: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        runtime_control_refs: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        notification_policy_refs: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        auth_state_ref: z.ZodOptional<z.ZodString>;
+        readiness_ref: z.ZodOptional<z.ZodString>;
+        result: z.ZodEnum<["allowed", "approval_required", "suppressed", "prohibited"]>;
+        rationale: z.ZodArray<z.ZodString, "many">;
+        expires_at: z.ZodString;
+        invalidation_bindings: z.ZodDefault<z.ZodArray<z.ZodObject<{
+            kind: z.ZodEnum<["target", "provider", "auth", "payload", "policy", "surface"]>;
+            ref: z.ZodString;
+            epoch: z.ZodOptional<z.ZodString>;
+        }, "strict", z.ZodTypeAny, {
+            kind: "provider" | "auth" | "policy" | "target" | "surface" | "payload";
+            ref: string;
+            epoch?: string | undefined;
+        }, {
+            kind: "provider" | "auth" | "policy" | "target" | "surface" | "payload";
+            ref: string;
+            epoch?: string | undefined;
+        }>, "many">>;
+        metadata: z.ZodObject<{
+            operation_kind: z.ZodEnum<["read", "search", "hint", "prepare", "send", "write", "publish", "delete", "mutate", "run"]>;
+            side_effect_profile: z.ZodEnum<["none", "read", "send", "write", "publish", "delete", "mutate"]>;
+            required_permission_capabilities: z.ZodDefault<z.ZodArray<z.ZodEnum<["read_workspace", "write_workspace", "run_tests", "run_safe_local_commands", "update_memory", "update_surface", "notify_user", "delegate_work", "inspect_runtime", "prepare_draft"]>, "many">>;
+            considered_permission_grant_refs: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        }, "strict", z.ZodTypeAny, {
+            operation_kind: "read" | "search" | "hint" | "prepare" | "send" | "write" | "publish" | "delete" | "mutate" | "run";
+            side_effect_profile: "none" | "read" | "send" | "write" | "publish" | "delete" | "mutate";
+            required_permission_capabilities: ("read_workspace" | "write_workspace" | "run_tests" | "run_safe_local_commands" | "update_memory" | "update_surface" | "notify_user" | "delegate_work" | "inspect_runtime" | "prepare_draft")[];
+            considered_permission_grant_refs: string[];
+        }, {
+            operation_kind: "read" | "search" | "hint" | "prepare" | "send" | "write" | "publish" | "delete" | "mutate" | "run";
+            side_effect_profile: "none" | "read" | "send" | "write" | "publish" | "delete" | "mutate";
+            required_permission_capabilities?: ("read_workspace" | "write_workspace" | "run_tests" | "run_safe_local_commands" | "update_memory" | "update_surface" | "notify_user" | "delegate_work" | "inspect_runtime" | "prepare_draft")[] | undefined;
+            considered_permission_grant_refs?: string[] | undefined;
+        }>;
+    }, "strict", z.ZodTypeAny, {
+        rationale: string[];
+        evaluated_at: string;
+        schema_version: "admission-policy-evaluation/v1";
+        metadata: {
+            operation_kind: "read" | "search" | "hint" | "prepare" | "send" | "write" | "publish" | "delete" | "mutate" | "run";
+            side_effect_profile: "none" | "read" | "send" | "write" | "publish" | "delete" | "mutate";
+            required_permission_capabilities: ("read_workspace" | "write_workspace" | "run_tests" | "run_safe_local_commands" | "update_memory" | "update_surface" | "notify_user" | "delegate_work" | "inspect_runtime" | "prepare_draft")[];
+            considered_permission_grant_refs: string[];
+        };
+        payload_class: string;
+        provider_ref: string;
+        operation_id: string;
+        surface_ref: string;
+        expires_at: string;
+        result: "approval_required" | "suppressed" | "allowed" | "prohibited";
+        target_refs: string[];
+        evaluation_id: string;
+        actor_ref: string;
+        permission_grant_refs: string[];
+        rejected_permission_grant_refs: string[];
+        relationship_policy_refs: string[];
+        quieting_policy_refs: string[];
+        privacy_policy_refs: string[];
+        runtime_control_refs: string[];
+        notification_policy_refs: string[];
+        invalidation_bindings: {
+            kind: "provider" | "auth" | "policy" | "target" | "surface" | "payload";
+            ref: string;
+            epoch?: string | undefined;
+        }[];
+        capability_id?: string | undefined;
+        auth_state_ref?: string | undefined;
+        readiness_ref?: string | undefined;
+    }, {
+        rationale: string[];
+        evaluated_at: string;
+        schema_version: "admission-policy-evaluation/v1";
+        metadata: {
+            operation_kind: "read" | "search" | "hint" | "prepare" | "send" | "write" | "publish" | "delete" | "mutate" | "run";
+            side_effect_profile: "none" | "read" | "send" | "write" | "publish" | "delete" | "mutate";
+            required_permission_capabilities?: ("read_workspace" | "write_workspace" | "run_tests" | "run_safe_local_commands" | "update_memory" | "update_surface" | "notify_user" | "delegate_work" | "inspect_runtime" | "prepare_draft")[] | undefined;
+            considered_permission_grant_refs?: string[] | undefined;
+        };
+        payload_class: string;
+        provider_ref: string;
+        operation_id: string;
+        surface_ref: string;
+        expires_at: string;
+        result: "approval_required" | "suppressed" | "allowed" | "prohibited";
+        evaluation_id: string;
+        actor_ref: string;
+        capability_id?: string | undefined;
+        target_refs?: string[] | undefined;
+        auth_state_ref?: string | undefined;
+        permission_grant_refs?: string[] | undefined;
+        rejected_permission_grant_refs?: string[] | undefined;
+        relationship_policy_refs?: string[] | undefined;
+        quieting_policy_refs?: string[] | undefined;
+        privacy_policy_refs?: string[] | undefined;
+        runtime_control_refs?: string[] | undefined;
+        notification_policy_refs?: string[] | undefined;
+        readiness_ref?: string | undefined;
+        invalidation_bindings?: {
+            kind: "provider" | "auth" | "policy" | "target" | "surface" | "payload";
+            ref: string;
+            epoch?: string | undefined;
+        }[] | undefined;
+    }>;
+    internal_autonomy_default: z.ZodOptional<z.ZodObject<{
+        ref: z.ZodString;
+        result: z.ZodEnum<["eligible", "ineligible", "unknown"]>;
+        reason: z.ZodString;
+        capability_family: z.ZodEnum<["soil", "knowledge", "dream", "audit", "readiness"]>;
+        operation_class: z.ZodEnum<["soil_retrieval", "soil_context_evaluation", "soil_projection", "soil_materialization", "knowledge_search", "knowledge_recall", "knowledge_consolidation", "knowledge_quarantine", "knowledge_learning_record", "knowledge_transfer_detection", "dream_hint_selection", "dream_reuse_tracking", "dream_demotion", "dream_confidence_update", "dream_candidate_capture", "audit_append", "readiness_observation", "protected_target_mutation", "external_publish", "external_open", "cross_scope_auto_apply", "deletion", "notification", "browser_or_desktop_operation", "side_effecting_mcp", "foreign_plugin_execution"]>;
+        operation_id: z.ZodString;
+        capability_id: z.ZodOptional<z.ZodString>;
+        operation_kind: z.ZodEnum<["read", "search", "hint", "prepare", "send", "write", "publish", "delete", "mutate", "run"]>;
+        provider_ref: z.ZodString;
+        payload_class: z.ZodString;
+        locality: z.ZodEnum<["local_only", "not_local"]>;
+        side_effect_profile: z.ZodEnum<["none", "read", "send", "write", "publish", "delete", "mutate"]>;
+        reversibility: z.ZodEnum<["reversible", "append_only", "draft_only", "irreversible", "unknown"]>;
+        scope: z.ZodString;
+        target_class: z.ZodEnum<["generated_cache", "generated_snapshot", "generated_review_area", "internal_quarantine", "internal_learning_store", "dream_playbook_metadata", "audit_log", "readiness_observation", "protected_public_docs", "protected_user_authored_memory", "protected_hand_maintained_file", "protected_published_artifact", "protected_user_authored_skill", "external_surface", "browser_or_desktop", "side_effecting_mcp", "foreign_plugin", "third_party_system"]>;
+        target_disposition: z.ZodEnum<["allowed_internal", "quarantine", "proposal", "review", "approval_required", "blocked"]>;
+        target_refs: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        protected_target_refs: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        external_effect_refs: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        guardrail_refs: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        epoch: z.ZodOptional<z.ZodString>;
+        expires_at: z.ZodOptional<z.ZodString>;
+    }, "strict", z.ZodTypeAny, {
+        reversibility: "unknown" | "reversible" | "irreversible" | "append_only" | "draft_only";
+        reason: string;
+        ref: string;
+        operation_kind: "read" | "search" | "hint" | "prepare" | "send" | "write" | "publish" | "delete" | "mutate" | "run";
+        side_effect_profile: "none" | "read" | "send" | "write" | "publish" | "delete" | "mutate";
+        payload_class: string;
+        provider_ref: string;
+        operation_id: string;
+        scope: string;
+        result: "unknown" | "eligible" | "ineligible";
+        guardrail_refs: string[];
+        target_refs: string[];
+        capability_family: "dream" | "soil" | "knowledge" | "audit" | "readiness";
+        operation_class: "notification" | "deletion" | "soil_retrieval" | "soil_context_evaluation" | "soil_projection" | "soil_materialization" | "knowledge_search" | "knowledge_recall" | "knowledge_consolidation" | "knowledge_quarantine" | "knowledge_learning_record" | "knowledge_transfer_detection" | "dream_hint_selection" | "dream_reuse_tracking" | "dream_demotion" | "dream_confidence_update" | "dream_candidate_capture" | "audit_append" | "readiness_observation" | "protected_target_mutation" | "external_publish" | "external_open" | "cross_scope_auto_apply" | "browser_or_desktop_operation" | "side_effecting_mcp" | "foreign_plugin_execution";
+        locality: "local_only" | "not_local";
+        target_class: "foreign_plugin" | "readiness_observation" | "side_effecting_mcp" | "generated_cache" | "generated_snapshot" | "generated_review_area" | "internal_quarantine" | "internal_learning_store" | "dream_playbook_metadata" | "audit_log" | "protected_public_docs" | "protected_user_authored_memory" | "protected_hand_maintained_file" | "protected_published_artifact" | "protected_user_authored_skill" | "external_surface" | "browser_or_desktop" | "third_party_system";
+        target_disposition: "blocked" | "approval_required" | "review" | "allowed_internal" | "quarantine" | "proposal";
+        protected_target_refs: string[];
+        external_effect_refs: string[];
+        capability_id?: string | undefined;
+        expires_at?: string | undefined;
+        epoch?: string | undefined;
+    }, {
+        reversibility: "unknown" | "reversible" | "irreversible" | "append_only" | "draft_only";
+        reason: string;
+        ref: string;
+        operation_kind: "read" | "search" | "hint" | "prepare" | "send" | "write" | "publish" | "delete" | "mutate" | "run";
+        side_effect_profile: "none" | "read" | "send" | "write" | "publish" | "delete" | "mutate";
+        payload_class: string;
+        provider_ref: string;
+        operation_id: string;
+        scope: string;
+        result: "unknown" | "eligible" | "ineligible";
+        capability_family: "dream" | "soil" | "knowledge" | "audit" | "readiness";
+        operation_class: "notification" | "deletion" | "soil_retrieval" | "soil_context_evaluation" | "soil_projection" | "soil_materialization" | "knowledge_search" | "knowledge_recall" | "knowledge_consolidation" | "knowledge_quarantine" | "knowledge_learning_record" | "knowledge_transfer_detection" | "dream_hint_selection" | "dream_reuse_tracking" | "dream_demotion" | "dream_confidence_update" | "dream_candidate_capture" | "audit_append" | "readiness_observation" | "protected_target_mutation" | "external_publish" | "external_open" | "cross_scope_auto_apply" | "browser_or_desktop_operation" | "side_effecting_mcp" | "foreign_plugin_execution";
+        locality: "local_only" | "not_local";
+        target_class: "foreign_plugin" | "readiness_observation" | "side_effecting_mcp" | "generated_cache" | "generated_snapshot" | "generated_review_area" | "internal_quarantine" | "internal_learning_store" | "dream_playbook_metadata" | "audit_log" | "protected_public_docs" | "protected_user_authored_memory" | "protected_hand_maintained_file" | "protected_published_artifact" | "protected_user_authored_skill" | "external_surface" | "browser_or_desktop" | "third_party_system";
+        target_disposition: "blocked" | "approval_required" | "review" | "allowed_internal" | "quarantine" | "proposal";
+        capability_id?: string | undefined;
+        expires_at?: string | undefined;
+        guardrail_refs?: string[] | undefined;
+        epoch?: string | undefined;
+        target_refs?: string[] | undefined;
+        protected_target_refs?: string[] | undefined;
+        external_effect_refs?: string[] | undefined;
+    }>>;
+    user_directed: z.ZodDefault<z.ZodBoolean>;
+    explicit_user_instruction_ref: z.ZodOptional<z.ZodString>;
+    active_surface_ref: z.ZodOptional<z.ZodString>;
+    relationship_permissions: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        ref: z.ZodString;
+        result: z.ZodEnum<["allowed", "approval_required", "prepare_only", "prohibited", "suppressed", "downgraded"]>;
+        reason: z.ZodString;
+        epoch: z.ZodOptional<z.ZodString>;
+        expires_at: z.ZodOptional<z.ZodString>;
+    }, "strict", z.ZodTypeAny, {
+        reason: string;
+        ref: string;
+        result: "approval_required" | "suppressed" | "allowed" | "prepare_only" | "prohibited" | "downgraded";
+        expires_at?: string | undefined;
+        epoch?: string | undefined;
+    }, {
+        reason: string;
+        ref: string;
+        result: "approval_required" | "suppressed" | "allowed" | "prepare_only" | "prohibited" | "downgraded";
+        expires_at?: string | undefined;
+        epoch?: string | undefined;
+    }>, "many">>;
+    quieting_policy: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        ref: z.ZodString;
+        result: z.ZodEnum<["allowed", "approval_required", "prepare_only", "prohibited", "suppressed", "downgraded"]>;
+        reason: z.ZodString;
+        epoch: z.ZodOptional<z.ZodString>;
+        expires_at: z.ZodOptional<z.ZodString>;
+    }, "strict", z.ZodTypeAny, {
+        reason: string;
+        ref: string;
+        result: "approval_required" | "suppressed" | "allowed" | "prepare_only" | "prohibited" | "downgraded";
+        expires_at?: string | undefined;
+        epoch?: string | undefined;
+    }, {
+        reason: string;
+        ref: string;
+        result: "approval_required" | "suppressed" | "allowed" | "prepare_only" | "prohibited" | "downgraded";
+        expires_at?: string | undefined;
+        epoch?: string | undefined;
+    }>, "many">>;
+    privacy_context: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        ref: z.ZodString;
+        result: z.ZodEnum<["allowed", "approval_required", "prepare_only", "prohibited", "suppressed", "downgraded"]>;
+        reason: z.ZodString;
+        epoch: z.ZodOptional<z.ZodString>;
+        expires_at: z.ZodOptional<z.ZodString>;
+    }, "strict", z.ZodTypeAny, {
+        reason: string;
+        ref: string;
+        result: "approval_required" | "suppressed" | "allowed" | "prepare_only" | "prohibited" | "downgraded";
+        expires_at?: string | undefined;
+        epoch?: string | undefined;
+    }, {
+        reason: string;
+        ref: string;
+        result: "approval_required" | "suppressed" | "allowed" | "prepare_only" | "prohibited" | "downgraded";
+        expires_at?: string | undefined;
+        epoch?: string | undefined;
+    }>, "many">>;
+    runtime_control_state: z.ZodOptional<z.ZodObject<{
+        ref: z.ZodString;
+        state: z.ZodEnum<["available", "approval_required", "suspended", "prohibited"]>;
+        reason: z.ZodOptional<z.ZodString>;
+        epoch: z.ZodOptional<z.ZodString>;
+        expires_at: z.ZodOptional<z.ZodString>;
+    }, "strict", z.ZodTypeAny, {
+        state: "suspended" | "approval_required" | "available" | "prohibited";
+        ref: string;
+        reason?: string | undefined;
+        expires_at?: string | undefined;
+        epoch?: string | undefined;
+    }, {
+        state: "suspended" | "approval_required" | "available" | "prohibited";
+        ref: string;
+        reason?: string | undefined;
+        expires_at?: string | undefined;
+        epoch?: string | undefined;
+    }>>;
+    companion_state: z.ZodOptional<z.ZodObject<{
+        ref: z.ZodString;
+        mode: z.ZodEnum<["active", "quieted", "suspended", "holding_back"]>;
+        reason: z.ZodOptional<z.ZodString>;
+        epoch: z.ZodOptional<z.ZodString>;
+    }, "strict", z.ZodTypeAny, {
+        mode: "active" | "suspended" | "quieted" | "holding_back";
+        ref: string;
+        reason?: string | undefined;
+        epoch?: string | undefined;
+    }, {
+        mode: "active" | "suspended" | "quieted" | "holding_back";
+        ref: string;
+        reason?: string | undefined;
+        epoch?: string | undefined;
+    }>>;
+    auth_state: z.ZodOptional<z.ZodObject<{
+        ref: z.ZodString;
+        status: z.ZodEnum<["valid", "missing", "expired", "stale", "revoked"]>;
+        epoch: z.ZodOptional<z.ZodString>;
+        expires_at: z.ZodOptional<z.ZodString>;
+    }, "strict", z.ZodTypeAny, {
+        status: "valid" | "stale" | "expired" | "missing" | "revoked";
+        ref: string;
+        expires_at?: string | undefined;
+        epoch?: string | undefined;
+    }, {
+        status: "valid" | "stale" | "expired" | "missing" | "revoked";
+        ref: string;
+        expires_at?: string | undefined;
+        epoch?: string | undefined;
+    }>>;
+    guardrail_state: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        ref: z.ZodString;
+        result: z.ZodEnum<["allowed", "approval_required", "prepare_only", "prohibited", "suppressed", "downgraded"]>;
+        reason: z.ZodString;
+        epoch: z.ZodOptional<z.ZodString>;
+        expires_at: z.ZodOptional<z.ZodString>;
+    }, "strict", z.ZodTypeAny, {
+        reason: string;
+        ref: string;
+        result: "approval_required" | "suppressed" | "allowed" | "prepare_only" | "prohibited" | "downgraded";
+        expires_at?: string | undefined;
+        epoch?: string | undefined;
+    }, {
+        reason: string;
+        ref: string;
+        result: "approval_required" | "suppressed" | "allowed" | "prepare_only" | "prohibited" | "downgraded";
+        expires_at?: string | undefined;
+        epoch?: string | undefined;
+    }>, "many">>;
+    backpressure_state: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        ref: z.ZodString;
+        result: z.ZodEnum<["allowed", "approval_required", "prepare_only", "prohibited", "suppressed", "downgraded"]>;
+        reason: z.ZodString;
+        epoch: z.ZodOptional<z.ZodString>;
+        expires_at: z.ZodOptional<z.ZodString>;
+    }, "strict", z.ZodTypeAny, {
+        reason: string;
+        ref: string;
+        result: "approval_required" | "suppressed" | "allowed" | "prepare_only" | "prohibited" | "downgraded";
+        expires_at?: string | undefined;
+        epoch?: string | undefined;
+    }, {
+        reason: string;
+        ref: string;
+        result: "approval_required" | "suppressed" | "allowed" | "prepare_only" | "prohibited" | "downgraded";
+        expires_at?: string | undefined;
+        epoch?: string | undefined;
+    }>, "many">>;
+    trust_profile: z.ZodOptional<z.ZodObject<{
+        ref: z.ZodString;
+        provider_ref: z.ZodString;
+        trust_level: z.ZodDefault<z.ZodEnum<["unknown", "low", "medium", "high"]>>;
+        positive_feedback_refs: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        negative_feedback_refs: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        epoch: z.ZodOptional<z.ZodString>;
+    }, "strict", z.ZodTypeAny, {
+        ref: string;
+        provider_ref: string;
+        trust_level: "unknown" | "low" | "high" | "medium";
+        positive_feedback_refs: string[];
+        negative_feedback_refs: string[];
+        epoch?: string | undefined;
+    }, {
+        ref: string;
+        provider_ref: string;
+        epoch?: string | undefined;
+        trust_level?: "unknown" | "low" | "high" | "medium" | undefined;
+        positive_feedback_refs?: string[] | undefined;
+        negative_feedback_refs?: string[] | undefined;
+    }>>;
+    verification_profile: z.ZodOptional<z.ZodObject<{
+        ref: z.ZodString;
+        provider_ref: z.ZodString;
+        verification_refs: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        audit_refs: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        epoch: z.ZodOptional<z.ZodString>;
+    }, "strict", z.ZodTypeAny, {
+        ref: string;
+        provider_ref: string;
+        verification_refs: string[];
+        audit_refs: string[];
+        epoch?: string | undefined;
+    }, {
+        ref: string;
+        provider_ref: string;
+        verification_refs?: string[] | undefined;
+        audit_refs?: string[] | undefined;
+        epoch?: string | undefined;
+    }>>;
+    recent_feedback: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        ref: z.ZodString;
+        outcome: z.ZodEnum<["accepted", "ignored", "dismissed", "corrected", "overreach"]>;
+        reason: z.ZodOptional<z.ZodString>;
+        overreach_indicators: z.ZodDefault<z.ZodArray<z.ZodEnum<["too_frequent", "wrong_context", "sensitive", "unwanted_timing"]>, "many">>;
+        follow_through_success: z.ZodDefault<z.ZodNullable<z.ZodBoolean>>;
+        recorded_at: z.ZodOptional<z.ZodString>;
+        policy_adjustment: z.ZodOptional<z.ZodEnum<["reduce_frequency", "require_confirmation", "narrow_scope", "avoid_sensitive_context"]>>;
+    }, "strict", z.ZodTypeAny, {
+        outcome: "accepted" | "corrected" | "ignored" | "dismissed" | "overreach";
+        ref: string;
+        overreach_indicators: ("sensitive" | "too_frequent" | "wrong_context" | "unwanted_timing")[];
+        follow_through_success: boolean | null;
+        reason?: string | undefined;
+        recorded_at?: string | undefined;
+        policy_adjustment?: "narrow_scope" | "require_confirmation" | "reduce_frequency" | "avoid_sensitive_context" | undefined;
+    }, {
+        outcome: "accepted" | "corrected" | "ignored" | "dismissed" | "overreach";
+        ref: string;
+        reason?: string | undefined;
+        recorded_at?: string | undefined;
+        overreach_indicators?: ("sensitive" | "too_frequent" | "wrong_context" | "unwanted_timing")[] | undefined;
+        follow_through_success?: boolean | null | undefined;
+        policy_adjustment?: "narrow_scope" | "require_confirmation" | "reduce_frequency" | "avoid_sensitive_context" | undefined;
+    }>, "many">>;
+    context_authority_evidence: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        ref: z.ZodString;
+        kind: z.ZodEnum<["dream_hint", "memory", "route_config", "past_execution", "auth_session", "mcp_enabled", "notification_subscription"]>;
+        epoch: z.ZodOptional<z.ZodString>;
+    }, "strict", z.ZodTypeAny, {
+        kind: "memory" | "dream_hint" | "route_config" | "past_execution" | "auth_session" | "mcp_enabled" | "notification_subscription";
+        ref: string;
+        epoch?: string | undefined;
+    }, {
+        kind: "memory" | "dream_hint" | "route_config" | "past_execution" | "auth_session" | "mcp_enabled" | "notification_subscription";
+        ref: string;
+        epoch?: string | undefined;
+    }>, "many">>;
+    invalidation_evidence: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        kind: z.ZodEnum<["revocation", "correction", "tombstone", "quieting", "suspend", "policy_downgrade"]>;
+        ref: z.ZodString;
+        reason: z.ZodString;
+        epoch: z.ZodOptional<z.ZodString>;
+    }, "strict", z.ZodTypeAny, {
+        kind: "correction" | "tombstone" | "quieting" | "suspend" | "revocation" | "policy_downgrade";
+        reason: string;
+        ref: string;
+        epoch?: string | undefined;
+    }, {
+        kind: "correction" | "tombstone" | "quieting" | "suspend" | "revocation" | "policy_downgrade";
+        reason: string;
+        ref: string;
+        epoch?: string | undefined;
+    }>, "many">>;
+    blast_radius: z.ZodDefault<z.ZodEnum<["local", "workspace", "project", "external", "high"]>>;
+    reversibility: z.ZodOptional<z.ZodEnum<["reversible", "append_only", "draft_only", "irreversible", "unknown"]>>;
+    external_side_effect: z.ZodOptional<z.ZodBoolean>;
+    privacy_sensitivity: z.ZodDefault<z.ZodEnum<["none", "low", "medium", "high"]>>;
+    evaluated_at: z.ZodOptional<z.ZodString>;
+    expires_at: z.ZodOptional<z.ZodString>;
+    ttl_ms: z.ZodOptional<z.ZodNumber>;
+    decision_id: z.ZodOptional<z.ZodString>;
+}, "strict", z.ZodTypeAny, {
+    blast_radius: "high" | "external" | "project" | "workspace" | "local";
+    relationship_permissions: {
+        reason: string;
+        ref: string;
+        result: "approval_required" | "suppressed" | "allowed" | "prepare_only" | "prohibited" | "downgraded";
+        expires_at?: string | undefined;
+        epoch?: string | undefined;
+    }[];
+    guardrail_state: {
+        reason: string;
+        ref: string;
+        result: "approval_required" | "suppressed" | "allowed" | "prepare_only" | "prohibited" | "downgraded";
+        expires_at?: string | undefined;
+        epoch?: string | undefined;
+    }[];
+    backpressure_state: {
+        reason: string;
+        ref: string;
+        result: "approval_required" | "suppressed" | "allowed" | "prepare_only" | "prohibited" | "downgraded";
+        expires_at?: string | undefined;
+        epoch?: string | undefined;
+    }[];
+    invalidation_evidence: {
+        kind: "correction" | "tombstone" | "quieting" | "suspend" | "revocation" | "policy_downgrade";
+        reason: string;
+        ref: string;
+        epoch?: string | undefined;
+    }[];
+    operation_plan: {
+        reversibility: "unknown" | "reversible" | "irreversible" | "append_only" | "draft_only";
+        operation_kind: "read" | "search" | "hint" | "prepare" | "send" | "write" | "publish" | "delete" | "mutate" | "run";
+        side_effect_profile: "none" | "read" | "send" | "write" | "publish" | "delete" | "mutate";
+        external_action_authority: boolean;
+        payload_class: string;
+        provider_ref: string;
+        operation_id: string;
+        risk_class: "low" | "high" | "medium";
+        inspectable: boolean;
+        local_only: boolean;
+        target_refs: string[];
+        expected_user_visible_effect: boolean;
+        advisory_only: boolean;
+        preparable_when_blocked: boolean;
+        capability_id?: string | undefined;
+        privacy_profile?: "local_private" | "workspace_private" | "external_service" | "user_visible" | undefined;
+        setup_guidance_ref?: string | undefined;
+    };
+    readiness_snapshots: {
+        evaluated_at: string;
+        tool_name: string;
+        schema_version: "capability-readiness-snapshot/v1";
+        evidence_refs: string[];
+        state: "blocked" | "stored" | "discoverable" | "loadable" | "compatible" | "configured" | "authenticated" | "executable_verified" | "degraded";
+        metadata: Record<string, unknown>;
+        capability_id: string;
+        operation_kind: "read" | "search" | "hint" | "prepare" | "send" | "write" | "publish" | "delete" | "mutate" | "run";
+        side_effect_profile: "none" | "read" | "send" | "write" | "publish" | "delete" | "mutate";
+        payload_class: string;
+        snapshot_id: string;
+        provider_ref: string;
+        asset_ref: string;
+        operation_id: string;
+        risk_class: "low" | "high" | "medium";
+        passed_gates: ("blocked" | "stored" | "discoverable" | "loadable" | "compatible" | "configured" | "authenticated" | "executable_verified" | "degraded")[];
+        failed_gates: ("blocked" | "stored" | "discoverable" | "loadable" | "compatible" | "configured" | "authenticated" | "executable_verified" | "degraded")[];
+        degraded_gates: ("blocked" | "stored" | "discoverable" | "loadable" | "compatible" | "configured" | "authenticated" | "executable_verified" | "degraded")[];
+        missing_config_refs: string[];
+        missing_auth_refs: string[];
+        verification_refs: string[];
+        stale_refs: string[];
+        safe_user_visible_label: "Recorded, not executable" | "Setup required" | "Auth required" | "Configured, verification required" | "Execution substrate verified" | "Degraded" | "Blocked";
+    }[];
+    admission_evaluation: {
+        rationale: string[];
+        evaluated_at: string;
+        schema_version: "admission-policy-evaluation/v1";
+        metadata: {
+            operation_kind: "read" | "search" | "hint" | "prepare" | "send" | "write" | "publish" | "delete" | "mutate" | "run";
+            side_effect_profile: "none" | "read" | "send" | "write" | "publish" | "delete" | "mutate";
+            required_permission_capabilities: ("read_workspace" | "write_workspace" | "run_tests" | "run_safe_local_commands" | "update_memory" | "update_surface" | "notify_user" | "delegate_work" | "inspect_runtime" | "prepare_draft")[];
+            considered_permission_grant_refs: string[];
+        };
+        payload_class: string;
+        provider_ref: string;
+        operation_id: string;
+        surface_ref: string;
+        expires_at: string;
+        result: "approval_required" | "suppressed" | "allowed" | "prohibited";
+        target_refs: string[];
+        evaluation_id: string;
+        actor_ref: string;
+        permission_grant_refs: string[];
+        rejected_permission_grant_refs: string[];
+        relationship_policy_refs: string[];
+        quieting_policy_refs: string[];
+        privacy_policy_refs: string[];
+        runtime_control_refs: string[];
+        notification_policy_refs: string[];
+        invalidation_bindings: {
+            kind: "provider" | "auth" | "policy" | "target" | "surface" | "payload";
+            ref: string;
+            epoch?: string | undefined;
+        }[];
+        capability_id?: string | undefined;
+        auth_state_ref?: string | undefined;
+        readiness_ref?: string | undefined;
+    };
+    user_directed: boolean;
+    quieting_policy: {
+        reason: string;
+        ref: string;
+        result: "approval_required" | "suppressed" | "allowed" | "prepare_only" | "prohibited" | "downgraded";
+        expires_at?: string | undefined;
+        epoch?: string | undefined;
+    }[];
+    privacy_context: {
+        reason: string;
+        ref: string;
+        result: "approval_required" | "suppressed" | "allowed" | "prepare_only" | "prohibited" | "downgraded";
+        expires_at?: string | undefined;
+        epoch?: string | undefined;
+    }[];
+    recent_feedback: {
+        outcome: "accepted" | "corrected" | "ignored" | "dismissed" | "overreach";
+        ref: string;
+        overreach_indicators: ("sensitive" | "too_frequent" | "wrong_context" | "unwanted_timing")[];
+        follow_through_success: boolean | null;
+        reason?: string | undefined;
+        recorded_at?: string | undefined;
+        policy_adjustment?: "narrow_scope" | "require_confirmation" | "reduce_frequency" | "avoid_sensitive_context" | undefined;
+    }[];
+    context_authority_evidence: {
+        kind: "memory" | "dream_hint" | "route_config" | "past_execution" | "auth_session" | "mcp_enabled" | "notification_subscription";
+        ref: string;
+        epoch?: string | undefined;
+    }[];
+    privacy_sensitivity: "low" | "high" | "medium" | "none";
+    evaluated_at?: string | undefined;
+    reversibility?: "unknown" | "reversible" | "irreversible" | "append_only" | "draft_only" | undefined;
+    expires_at?: string | undefined;
+    active_surface_ref?: string | undefined;
+    ttl_ms?: number | undefined;
+    companion_state?: {
+        mode: "active" | "suspended" | "quieted" | "holding_back";
+        ref: string;
+        reason?: string | undefined;
+        epoch?: string | undefined;
+    } | undefined;
+    external_side_effect?: boolean | undefined;
+    decision_id?: string | undefined;
+    internal_autonomy_default?: {
+        reversibility: "unknown" | "reversible" | "irreversible" | "append_only" | "draft_only";
+        reason: string;
+        ref: string;
+        operation_kind: "read" | "search" | "hint" | "prepare" | "send" | "write" | "publish" | "delete" | "mutate" | "run";
+        side_effect_profile: "none" | "read" | "send" | "write" | "publish" | "delete" | "mutate";
+        payload_class: string;
+        provider_ref: string;
+        operation_id: string;
+        scope: string;
+        result: "unknown" | "eligible" | "ineligible";
+        guardrail_refs: string[];
+        target_refs: string[];
+        capability_family: "dream" | "soil" | "knowledge" | "audit" | "readiness";
+        operation_class: "notification" | "deletion" | "soil_retrieval" | "soil_context_evaluation" | "soil_projection" | "soil_materialization" | "knowledge_search" | "knowledge_recall" | "knowledge_consolidation" | "knowledge_quarantine" | "knowledge_learning_record" | "knowledge_transfer_detection" | "dream_hint_selection" | "dream_reuse_tracking" | "dream_demotion" | "dream_confidence_update" | "dream_candidate_capture" | "audit_append" | "readiness_observation" | "protected_target_mutation" | "external_publish" | "external_open" | "cross_scope_auto_apply" | "browser_or_desktop_operation" | "side_effecting_mcp" | "foreign_plugin_execution";
+        locality: "local_only" | "not_local";
+        target_class: "foreign_plugin" | "readiness_observation" | "side_effecting_mcp" | "generated_cache" | "generated_snapshot" | "generated_review_area" | "internal_quarantine" | "internal_learning_store" | "dream_playbook_metadata" | "audit_log" | "protected_public_docs" | "protected_user_authored_memory" | "protected_hand_maintained_file" | "protected_published_artifact" | "protected_user_authored_skill" | "external_surface" | "browser_or_desktop" | "third_party_system";
+        target_disposition: "blocked" | "approval_required" | "review" | "allowed_internal" | "quarantine" | "proposal";
+        protected_target_refs: string[];
+        external_effect_refs: string[];
+        capability_id?: string | undefined;
+        expires_at?: string | undefined;
+        epoch?: string | undefined;
+    } | undefined;
+    explicit_user_instruction_ref?: string | undefined;
+    runtime_control_state?: {
+        state: "suspended" | "approval_required" | "available" | "prohibited";
+        ref: string;
+        reason?: string | undefined;
+        expires_at?: string | undefined;
+        epoch?: string | undefined;
+    } | undefined;
+    auth_state?: {
+        status: "valid" | "stale" | "expired" | "missing" | "revoked";
+        ref: string;
+        expires_at?: string | undefined;
+        epoch?: string | undefined;
+    } | undefined;
+    trust_profile?: {
+        ref: string;
+        provider_ref: string;
+        trust_level: "unknown" | "low" | "high" | "medium";
+        positive_feedback_refs: string[];
+        negative_feedback_refs: string[];
+        epoch?: string | undefined;
+    } | undefined;
+    verification_profile?: {
+        ref: string;
+        provider_ref: string;
+        verification_refs: string[];
+        audit_refs: string[];
+        epoch?: string | undefined;
+    } | undefined;
+}, {
+    operation_plan: {
+        operation_kind: "read" | "search" | "hint" | "prepare" | "send" | "write" | "publish" | "delete" | "mutate" | "run";
+        side_effect_profile: "none" | "read" | "send" | "write" | "publish" | "delete" | "mutate";
+        payload_class: string;
+        provider_ref: string;
+        operation_id: string;
+        reversibility?: "unknown" | "reversible" | "irreversible" | "append_only" | "draft_only" | undefined;
+        capability_id?: string | undefined;
+        privacy_profile?: "local_private" | "workspace_private" | "external_service" | "user_visible" | undefined;
+        external_action_authority?: boolean | undefined;
+        risk_class?: "low" | "high" | "medium" | undefined;
+        inspectable?: boolean | undefined;
+        local_only?: boolean | undefined;
+        target_refs?: string[] | undefined;
+        expected_user_visible_effect?: boolean | undefined;
+        advisory_only?: boolean | undefined;
+        preparable_when_blocked?: boolean | undefined;
+        setup_guidance_ref?: string | undefined;
+    };
+    admission_evaluation: {
+        rationale: string[];
+        evaluated_at: string;
+        schema_version: "admission-policy-evaluation/v1";
+        metadata: {
+            operation_kind: "read" | "search" | "hint" | "prepare" | "send" | "write" | "publish" | "delete" | "mutate" | "run";
+            side_effect_profile: "none" | "read" | "send" | "write" | "publish" | "delete" | "mutate";
+            required_permission_capabilities?: ("read_workspace" | "write_workspace" | "run_tests" | "run_safe_local_commands" | "update_memory" | "update_surface" | "notify_user" | "delegate_work" | "inspect_runtime" | "prepare_draft")[] | undefined;
+            considered_permission_grant_refs?: string[] | undefined;
+        };
+        payload_class: string;
+        provider_ref: string;
+        operation_id: string;
+        surface_ref: string;
+        expires_at: string;
+        result: "approval_required" | "suppressed" | "allowed" | "prohibited";
+        evaluation_id: string;
+        actor_ref: string;
+        capability_id?: string | undefined;
+        target_refs?: string[] | undefined;
+        auth_state_ref?: string | undefined;
+        permission_grant_refs?: string[] | undefined;
+        rejected_permission_grant_refs?: string[] | undefined;
+        relationship_policy_refs?: string[] | undefined;
+        quieting_policy_refs?: string[] | undefined;
+        privacy_policy_refs?: string[] | undefined;
+        runtime_control_refs?: string[] | undefined;
+        notification_policy_refs?: string[] | undefined;
+        readiness_ref?: string | undefined;
+        invalidation_bindings?: {
+            kind: "provider" | "auth" | "policy" | "target" | "surface" | "payload";
+            ref: string;
+            epoch?: string | undefined;
+        }[] | undefined;
+    };
+    evaluated_at?: string | undefined;
+    blast_radius?: "high" | "external" | "project" | "workspace" | "local" | undefined;
+    reversibility?: "unknown" | "reversible" | "irreversible" | "append_only" | "draft_only" | undefined;
+    relationship_permissions?: {
+        reason: string;
+        ref: string;
+        result: "approval_required" | "suppressed" | "allowed" | "prepare_only" | "prohibited" | "downgraded";
+        expires_at?: string | undefined;
+        epoch?: string | undefined;
+    }[] | undefined;
+    expires_at?: string | undefined;
+    guardrail_state?: {
+        reason: string;
+        ref: string;
+        result: "approval_required" | "suppressed" | "allowed" | "prepare_only" | "prohibited" | "downgraded";
+        expires_at?: string | undefined;
+        epoch?: string | undefined;
+    }[] | undefined;
+    backpressure_state?: {
+        reason: string;
+        ref: string;
+        result: "approval_required" | "suppressed" | "allowed" | "prepare_only" | "prohibited" | "downgraded";
+        expires_at?: string | undefined;
+        epoch?: string | undefined;
+    }[] | undefined;
+    active_surface_ref?: string | undefined;
+    ttl_ms?: number | undefined;
+    companion_state?: {
+        mode: "active" | "suspended" | "quieted" | "holding_back";
+        ref: string;
+        reason?: string | undefined;
+        epoch?: string | undefined;
+    } | undefined;
+    external_side_effect?: boolean | undefined;
+    decision_id?: string | undefined;
+    invalidation_evidence?: {
+        kind: "correction" | "tombstone" | "quieting" | "suspend" | "revocation" | "policy_downgrade";
+        reason: string;
+        ref: string;
+        epoch?: string | undefined;
+    }[] | undefined;
+    readiness_snapshots?: {
+        evaluated_at: string;
+        tool_name: string;
+        schema_version: "capability-readiness-snapshot/v1";
+        state: "blocked" | "stored" | "discoverable" | "loadable" | "compatible" | "configured" | "authenticated" | "executable_verified" | "degraded";
+        capability_id: string;
+        operation_kind: "read" | "search" | "hint" | "prepare" | "send" | "write" | "publish" | "delete" | "mutate" | "run";
+        side_effect_profile: "none" | "read" | "send" | "write" | "publish" | "delete" | "mutate";
+        payload_class: string;
+        snapshot_id: string;
+        provider_ref: string;
+        asset_ref: string;
+        operation_id: string;
+        risk_class: "low" | "high" | "medium";
+        safe_user_visible_label: "Recorded, not executable" | "Setup required" | "Auth required" | "Configured, verification required" | "Execution substrate verified" | "Degraded" | "Blocked";
+        evidence_refs?: string[] | undefined;
+        metadata?: Record<string, unknown> | undefined;
+        passed_gates?: ("blocked" | "stored" | "discoverable" | "loadable" | "compatible" | "configured" | "authenticated" | "executable_verified" | "degraded")[] | undefined;
+        failed_gates?: ("blocked" | "stored" | "discoverable" | "loadable" | "compatible" | "configured" | "authenticated" | "executable_verified" | "degraded")[] | undefined;
+        degraded_gates?: ("blocked" | "stored" | "discoverable" | "loadable" | "compatible" | "configured" | "authenticated" | "executable_verified" | "degraded")[] | undefined;
+        missing_config_refs?: string[] | undefined;
+        missing_auth_refs?: string[] | undefined;
+        verification_refs?: string[] | undefined;
+        stale_refs?: string[] | undefined;
+    }[] | undefined;
+    internal_autonomy_default?: {
+        reversibility: "unknown" | "reversible" | "irreversible" | "append_only" | "draft_only";
+        reason: string;
+        ref: string;
+        operation_kind: "read" | "search" | "hint" | "prepare" | "send" | "write" | "publish" | "delete" | "mutate" | "run";
+        side_effect_profile: "none" | "read" | "send" | "write" | "publish" | "delete" | "mutate";
+        payload_class: string;
+        provider_ref: string;
+        operation_id: string;
+        scope: string;
+        result: "unknown" | "eligible" | "ineligible";
+        capability_family: "dream" | "soil" | "knowledge" | "audit" | "readiness";
+        operation_class: "notification" | "deletion" | "soil_retrieval" | "soil_context_evaluation" | "soil_projection" | "soil_materialization" | "knowledge_search" | "knowledge_recall" | "knowledge_consolidation" | "knowledge_quarantine" | "knowledge_learning_record" | "knowledge_transfer_detection" | "dream_hint_selection" | "dream_reuse_tracking" | "dream_demotion" | "dream_confidence_update" | "dream_candidate_capture" | "audit_append" | "readiness_observation" | "protected_target_mutation" | "external_publish" | "external_open" | "cross_scope_auto_apply" | "browser_or_desktop_operation" | "side_effecting_mcp" | "foreign_plugin_execution";
+        locality: "local_only" | "not_local";
+        target_class: "foreign_plugin" | "readiness_observation" | "side_effecting_mcp" | "generated_cache" | "generated_snapshot" | "generated_review_area" | "internal_quarantine" | "internal_learning_store" | "dream_playbook_metadata" | "audit_log" | "protected_public_docs" | "protected_user_authored_memory" | "protected_hand_maintained_file" | "protected_published_artifact" | "protected_user_authored_skill" | "external_surface" | "browser_or_desktop" | "third_party_system";
+        target_disposition: "blocked" | "approval_required" | "review" | "allowed_internal" | "quarantine" | "proposal";
+        capability_id?: string | undefined;
+        expires_at?: string | undefined;
+        guardrail_refs?: string[] | undefined;
+        epoch?: string | undefined;
+        target_refs?: string[] | undefined;
+        protected_target_refs?: string[] | undefined;
+        external_effect_refs?: string[] | undefined;
+    } | undefined;
+    user_directed?: boolean | undefined;
+    explicit_user_instruction_ref?: string | undefined;
+    quieting_policy?: {
+        reason: string;
+        ref: string;
+        result: "approval_required" | "suppressed" | "allowed" | "prepare_only" | "prohibited" | "downgraded";
+        expires_at?: string | undefined;
+        epoch?: string | undefined;
+    }[] | undefined;
+    privacy_context?: {
+        reason: string;
+        ref: string;
+        result: "approval_required" | "suppressed" | "allowed" | "prepare_only" | "prohibited" | "downgraded";
+        expires_at?: string | undefined;
+        epoch?: string | undefined;
+    }[] | undefined;
+    runtime_control_state?: {
+        state: "suspended" | "approval_required" | "available" | "prohibited";
+        ref: string;
+        reason?: string | undefined;
+        expires_at?: string | undefined;
+        epoch?: string | undefined;
+    } | undefined;
+    auth_state?: {
+        status: "valid" | "stale" | "expired" | "missing" | "revoked";
+        ref: string;
+        expires_at?: string | undefined;
+        epoch?: string | undefined;
+    } | undefined;
+    trust_profile?: {
+        ref: string;
+        provider_ref: string;
+        epoch?: string | undefined;
+        trust_level?: "unknown" | "low" | "high" | "medium" | undefined;
+        positive_feedback_refs?: string[] | undefined;
+        negative_feedback_refs?: string[] | undefined;
+    } | undefined;
+    verification_profile?: {
+        ref: string;
+        provider_ref: string;
+        verification_refs?: string[] | undefined;
+        audit_refs?: string[] | undefined;
+        epoch?: string | undefined;
+    } | undefined;
+    recent_feedback?: {
+        outcome: "accepted" | "corrected" | "ignored" | "dismissed" | "overreach";
+        ref: string;
+        reason?: string | undefined;
+        recorded_at?: string | undefined;
+        overreach_indicators?: ("sensitive" | "too_frequent" | "wrong_context" | "unwanted_timing")[] | undefined;
+        follow_through_success?: boolean | null | undefined;
+        policy_adjustment?: "narrow_scope" | "require_confirmation" | "reduce_frequency" | "avoid_sensitive_context" | undefined;
+    }[] | undefined;
+    context_authority_evidence?: {
+        kind: "memory" | "dream_hint" | "route_config" | "past_execution" | "auth_session" | "mcp_enabled" | "notification_subscription";
+        ref: string;
+        epoch?: string | undefined;
+    }[] | undefined;
+    privacy_sensitivity?: "low" | "high" | "medium" | "none" | undefined;
+}>;
+export type AutonomyDecisionInput = z.input<typeof AutonomyDecisionInputSchema>;
+export declare const AutonomyDecisionSchema: z.ZodObject<{
+    schema_version: z.ZodLiteral<"autonomy-decision/v1">;
+    decision_id: z.ZodString;
+    operation_id: z.ZodString;
+    capability_id: z.ZodOptional<z.ZodString>;
+    evaluated_at: z.ZodString;
+    level: z.ZodEnum<["advisory", "prepare_only", "user_directed_execute", "autonomous_low_risk", "approval_required", "prohibited"]>;
+    rationale: z.ZodArray<z.ZodString, "many">;
+    allowed_steps: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    blocked_steps: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    required_user_approval: z.ZodBoolean;
+    required_confirmation_text: z.ZodOptional<z.ZodString>;
+    suppression_reason: z.ZodOptional<z.ZodString>;
+    audit_refs: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    expires_at: z.ZodString;
+    invalidation_bindings: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        kind: z.ZodEnum<["admission", "auth", "backpressure", "companion_state", "feedback", "guardrail", "invalidation_evidence", "policy", "provider", "readiness", "runtime_control", "target", "trust", "verification"]>;
+        ref: z.ZodString;
+        epoch: z.ZodOptional<z.ZodString>;
+        reason: z.ZodOptional<z.ZodString>;
+    }, "strict", z.ZodTypeAny, {
+        kind: "verification" | "provider" | "auth" | "admission" | "policy" | "target" | "guardrail" | "backpressure" | "runtime_control" | "feedback" | "companion_state" | "readiness" | "invalidation_evidence" | "trust";
+        ref: string;
+        reason?: string | undefined;
+        epoch?: string | undefined;
+    }, {
+        kind: "verification" | "provider" | "auth" | "admission" | "policy" | "target" | "guardrail" | "backpressure" | "runtime_control" | "feedback" | "companion_state" | "readiness" | "invalidation_evidence" | "trust";
+        ref: string;
+        reason?: string | undefined;
+        epoch?: string | undefined;
+    }>, "many">>;
+    cache_key: z.ZodString;
+    metadata: z.ZodObject<{
+        admission_evaluation_ref: z.ZodString;
+        readiness_refs: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        user_directed: z.ZodBoolean;
+        external_side_effect: z.ZodBoolean;
+        blast_radius: z.ZodEnum<["local", "workspace", "project", "external", "high"]>;
+        privacy_sensitivity: z.ZodEnum<["none", "low", "medium", "high"]>;
+        context_authority_evidence_refs: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    }, "strict", z.ZodTypeAny, {
+        blast_radius: "high" | "external" | "project" | "workspace" | "local";
+        external_side_effect: boolean;
+        user_directed: boolean;
+        privacy_sensitivity: "low" | "high" | "medium" | "none";
+        admission_evaluation_ref: string;
+        readiness_refs: string[];
+        context_authority_evidence_refs: string[];
+    }, {
+        blast_radius: "high" | "external" | "project" | "workspace" | "local";
+        external_side_effect: boolean;
+        user_directed: boolean;
+        privacy_sensitivity: "low" | "high" | "medium" | "none";
+        admission_evaluation_ref: string;
+        readiness_refs?: string[] | undefined;
+        context_authority_evidence_refs?: string[] | undefined;
+    }>;
+}, "strict", z.ZodTypeAny, {
+    rationale: string[];
+    evaluated_at: string;
+    schema_version: "autonomy-decision/v1";
+    metadata: {
+        blast_radius: "high" | "external" | "project" | "workspace" | "local";
+        external_side_effect: boolean;
+        user_directed: boolean;
+        privacy_sensitivity: "low" | "high" | "medium" | "none";
+        admission_evaluation_ref: string;
+        readiness_refs: string[];
+        context_authority_evidence_refs: string[];
+    };
+    operation_id: string;
+    audit_refs: string[];
+    expires_at: string;
+    level: "approval_required" | "advisory" | "prepare_only" | "user_directed_execute" | "autonomous_low_risk" | "prohibited";
+    decision_id: string;
+    invalidation_bindings: {
+        kind: "verification" | "provider" | "auth" | "admission" | "policy" | "target" | "guardrail" | "backpressure" | "runtime_control" | "feedback" | "companion_state" | "readiness" | "invalidation_evidence" | "trust";
+        ref: string;
+        reason?: string | undefined;
+        epoch?: string | undefined;
+    }[];
+    allowed_steps: string[];
+    blocked_steps: string[];
+    required_user_approval: boolean;
+    cache_key: string;
+    capability_id?: string | undefined;
+    suppression_reason?: string | undefined;
+    required_confirmation_text?: string | undefined;
+}, {
+    rationale: string[];
+    evaluated_at: string;
+    schema_version: "autonomy-decision/v1";
+    metadata: {
+        blast_radius: "high" | "external" | "project" | "workspace" | "local";
+        external_side_effect: boolean;
+        user_directed: boolean;
+        privacy_sensitivity: "low" | "high" | "medium" | "none";
+        admission_evaluation_ref: string;
+        readiness_refs?: string[] | undefined;
+        context_authority_evidence_refs?: string[] | undefined;
+    };
+    operation_id: string;
+    expires_at: string;
+    level: "approval_required" | "advisory" | "prepare_only" | "user_directed_execute" | "autonomous_low_risk" | "prohibited";
+    decision_id: string;
+    required_user_approval: boolean;
+    cache_key: string;
+    capability_id?: string | undefined;
+    audit_refs?: string[] | undefined;
+    suppression_reason?: string | undefined;
+    invalidation_bindings?: {
+        kind: "verification" | "provider" | "auth" | "admission" | "policy" | "target" | "guardrail" | "backpressure" | "runtime_control" | "feedback" | "companion_state" | "readiness" | "invalidation_evidence" | "trust";
+        ref: string;
+        reason?: string | undefined;
+        epoch?: string | undefined;
+    }[] | undefined;
+    allowed_steps?: string[] | undefined;
+    blocked_steps?: string[] | undefined;
+    required_confirmation_text?: string | undefined;
+}>;
+export type AutonomyDecision = z.infer<typeof AutonomyDecisionSchema>;
+export declare function evaluateAutonomyDecision(input: AutonomyDecisionInput): AutonomyDecision;
+//# sourceMappingURL=autonomy-governor.d.ts.map