policy

type Decision struct {
	Allow bool
	// RequiresApproval is set when the policy gates the action on human
	// approval; it is meaningful for tool decisions.
	RequiresApproval bool
	DenyReasons      []string
}

type Engine struct {
	// contains filtered or unexported fields
}

type ModelContext struct {
	Name string `json:"name"`
}

type PeerContext struct {
	To string `json:"to"`
}

type TaskContext struct {
	Priority int `json:"priority"`
}

type TenantPolicies map[string]TenantPolicy

type TenantPolicy struct {
	MaxPriority int `json:"max_priority"`
	// AllowedTools lists the tool names this tenant may invoke. Empty means
	// every tool is denied (default deny).
	AllowedTools []string `json:"allowed_tools"`
	// AllowedModels lists the provider/model references this tenant may call.
	// Empty means every model is denied (default deny).
	AllowedModels []string `json:"allowed_models"`
	// ApprovalRequiredRisk is the tool risk level that requires human
	// approval, for example "high".
	ApprovalRequiredRisk string `json:"approval_required_risk"`
	// AllowedPeers lists the AgentVersion references this tenant's agents may
	// send IPC messages to. Matching is exact. Empty means every send is
	// denied (default deny), so a tenant that has not opted in cannot message
	// anyone even if its AgentVersions declare peer grants.
	AllowedPeers []string `json:"allowed_peers"`
}

type ToolContext struct {
	Name     string `json:"name"`
	Version  string `json:"version"`
	Action   string `json:"action"`
	Resource string `json:"resource"`
	Risk     string `json:"risk"`
}