rules

const (
	// EventPreCommit fires before the Commit core tool finalises
	// a commit. Rules here gate message format, file scope, etc.
	EventPreCommit Event = "pre_commit"
	// EventPostEdit fires after Edit / Write succeed. Rules here
	// track "you edited X, now you must edit Y" pairings.
	EventPostEdit Event = "post_edit"
	// EventSessionEnd fires when the BIAM task / agent loop
	// terminates. Last-chance gate: "did you update the README?"
	EventSessionEnd Event = "session_end"
	// EventPreSend fires before SendMessage dispatches. Rules
	// here gate routing (e.g. "code-writing tasks never go to
	// opencode" — operator's memory feedback, codified).
	EventPreSend Event = "pre_send"
	// EventPreUnattended fires when --unattended is about to
	// activate. Rules here are the safety brake before the
	// agent loop runs without operator presence.
	EventPreUnattended Event = "pre_unattended"
	// EventPreToolUse fires before a tool dispatch (Bash, Read,
	// etc.) is handed to the underlying tool. Rules here gate
	// or rewrite tool invocations — e.g. the rtk token-filter
	// rule prepends `rtk ` to allowlisted Bash commands so the
	// proxy compresses output before it reaches the agent.
	EventPreToolUse Event = "pre_tool_use"
	// EventInterceptorPreToolUse is the upstream MCP RFC spelling
	// of EventPreToolUse — see SEP-1763 / modelcontextprotocol/
	// experimental-ext-interceptors. Accepted as a synonym at
	// load time; the loader normalizes occurrences to
	// "pre_tool_use" so Evaluate sees a single canonical event
	// name and predicates / dispatch keep one code path.
	EventInterceptorPreToolUse Event = "interceptor:pre_tool_use"
	// EventPrePush fires before `git push` (or the Commit tool's
	// Push=true path) sends commits upstream. Rules here gate
	// what's allowed to leave the local branch — the canonical
	// example is the `wip-on-protected-branch` rule that blocks
	// `wip!:` checkpoint commits from reaching main/master/
	// develop/release/* (operator's autosquash flow keeps `wip!:`
	// commits local until they're squashed into a real subject
	// via `git rebase -i --autosquash`).
	EventPrePush Event = "pre_push"
)

const (
	// SeverityOff — rule defined but disabled. Useful for
	// staging a new rule without flipping it on yet.
	SeverityOff Severity = "off"
	// SeverityWarn — surface the violation in the result
	// payload so the agent / operator sees it, but don't block.
	SeverityWarn Severity = "warn"
	// SeverityBlock — refuse the action. Callers MUST treat
	// a block result as a hard stop.
	SeverityBlock Severity = "block"
)