pub suberror PolicyError {
  PolicyError(String)
}

pub struct ArgCheck {
  arg : String
  globs : Array[String]
  prefixes : Array[String]
  negate : Bool
  normalize_path : Bool
}

pub struct Budget {
  max_calls : Int
  max_arg_bytes : Int
  max_single_bytes : Int
  max_reveals : Int
}

type Inflight

type PendingApproval

pub struct Policy {
  name : String
  digest : String
  default_decision : String
  rules : Array[Rule]
  sensitive : Array[SensitiveRule]
  reveal : Array[RevealRule]
  mask_secrets : Bool
  egress_tools : Array[String]
  on_taint : String
  rate : RateLimit
  budget : Budget
  approval_ttl_ms : Int
  min_secret_len : Int
  hide_denied : Bool
}

pub struct RateLimit {
  window_ms : Int
  max_calls : Int
}

pub struct RawToken {
  value : String
  fingerprint : String
  preview : String
}

pub struct RevealRule {
  id : String
  tool : String
  checks : Array[ArgCheck]
  reason : String
}

pub struct RpcMessage {
  raw : Json
  id : Json?
  has_id : Bool
  verb : String?
  params : Json?
  result : Json?
  error : Json?
}

pub struct Rule {
  id : String
  tool : String
  decision : String
  reason : String
  checks : Array[ArgCheck]
  approval_ttl_ms : Int
}

pub struct RuleHit {
  id : String
  decision : String
  reason : String
  ttl_ms : Int
}

type SecretEntry

pub struct SecretToken {
  fingerprint : String
  preview : String
}

pub struct SensitiveRule {
  id : String
  tool : String
  checks : Array[ArgCheck]
}

pub struct Session {
  id : String
  policy : Policy
  seq : Int
  prev_hash : String
  call_seq : Int
  inflight : Map[String, Inflight]
  lists : Map[String, Bool]
  pending : Map[String, PendingApproval]
  taint : Map[String, TaintSource]
  vault : Map[String, SecretEntry]
  attempts : Array[Int64]
  allowed : Int
  denied : Int
  approval_requests : Int
  forwarded : Int
  tainted_values : Int
  total_calls : Int
  arg_bytes : Int64
  reveal_count : Int
}

pub struct TaintHit {
  fingerprint : String
  preview : String
  source : TaintSource
}

pub struct TaintSource {
  call : String
  tool : String
  preview : String
}

fn advertise_tool(policy : Policy, tool : String) -> Bool

fn any_glob(patterns : Array[String], text : String) -> Bool

fn base64_encode(text : String) -> String

fn base64_urlsafe(text : String) -> String

fn bool_field(value : Json, key : String, fallback? : Bool) -> Bool

fn call_digest(tool : String, args : Json) -> String

fn capability_args(verb : String, params : Json?) -> Json

fn capability_name(verb : String) -> String

fn checks_match(checks : Array[ArgCheck], args : Json) -> Bool

fn client_line(session : Session, line : String, now : Int64) -> Array[Json]

fn close_session(session : Session, now : Int64) -> Json

fn collapse_separators(text : String) -> String

fn collect_strings(value : Json) -> Array[String]

fn error_response(id : Json?, code : Int, message : String, data : Json?) -> Json

fn expire_approvals(session : Session, now : Int64) -> Array[Json]

fn extract_raw(text : String, min_len : Int) -> Array[RawToken]

fn extract_tokens(text : String, min_len : Int) -> Array[SecretToken]

fn find_placeholders(text : String) -> Array[String]

fn find_taint(taint : Map[String, TaintSource], texts : Array[String], min_len : Int) -> Array[TaintHit]

fn fingerprint_of(text : String) -> String

fn glob_match(pattern : String, text : String) -> Bool

fn guard_decision(policy : Policy, tool : String, args : Json) -> Json

fn hex_uint(value : UInt, width? : Int) -> String

fn id_key(id : Json?) -> String

fn import_moonpod(source : String) -> Json raise PolicyError

fn int_field(value : Json, key : String) -> Int?

fn is_egress(policy : Policy, tool : String) -> Bool

fn is_passthrough_method(verb : String) -> Bool

fn is_sensitive(policy : Policy, tool : String, args : Json) -> Bool

fn json_arr(items : Array[Json]) -> Json

fn json_as_array(value : Json) -> Array[Json]?

fn json_as_bool(value : Json) -> Bool?

fn json_as_int(value : Json) -> Int?

fn json_as_object(value : Json) -> Map[String, Json]?

fn json_as_string(value : Json) -> String?

fn json_bool(value : Bool) -> Json

fn json_canonical(value : Json) -> String

fn json_depth(value : Json) -> Int

fn json_get(value : Json, key : String) -> Json?

fn json_i64(value : Int64) -> Json

fn json_int(value : Int) -> Json

fn json_null() -> Json

fn json_obj(pairs : Array[(String, Json)]) -> Json

fn json_parse_opt(text : String) -> Json?

fn json_render(value : Json) -> String

fn json_str(value : String) -> Json

fn json_strings(items : Array[String]) -> Json

fn map_json_strings(value : Json, transform : (String) -> String) -> Json

fn match_reveal(policy : Policy, tool : String, args : Json) -> RevealRule?

fn match_rule(policy : Policy, tool : String, args : Json) -> RuleHit?

fn new_session(id : String, policy : Policy) -> Session

fn normalize_path(input : String) -> String

fn open_session(session : Session, now : Int64) -> Json

fn parse_policy(text : String) -> Policy raise PolicyError

fn parse_rpc(value : Json) -> RpcMessage?

fn placeholder_for(fingerprint : String) -> String

fn placeholders_in(value : Json) -> Array[String]

fn report_ledger(lines : Array[String]) -> Json

fn resolve_approval(session : Session, call : String, approved : Bool, now : Int64) -> Array[Json]

fn result_response(id : Json?, result : Json) -> Json

fn reveal_placeholders(text : String, vault : Map[String, String]) -> (String, Int)

fn scan_fingerprints(texts : Array[String], min_len : Int) -> Array[SecretToken]

fn scan_raw(texts : Array[String], min_len : Int) -> Array[RawToken]

fn server_line(session : Session, line : String, now : Int64) -> Array[Json]

fn sha256_hex(text : String) -> String

fn sha256_hex_bytes(data : BytesView) -> String

fn string_array(value : Json) -> Array[String]

fn string_field(value : Json, key : String) -> String?

fn taint_source(call : String, tool : String, preview : String) -> TaintSource

fn tool_name_of(params : Json?) -> String?

fn variant_values(value : String) -> Array[String]

fn verify_ledger(lines : Array[String]) -> Json