shipsafe-agent-policy

Pure, dependency-free TypeScript for ShipSafe agent action policy:

• Risk tiers — ACTION_RISK_TIERS, recommendApprovalMode, labelApprovalMode, plus the ActionKind / ApprovalMode / ActionRiskTier types.
• Agent principals — the AgentPrincipal type, isAgentAllowedForMode, describeAgentPrincipal.
• Policy engine — evaluateAgentActionPolicy and its input/decision types.

No runtime dependencies. Import everything from the package root:

import {
  ACTION_RISK_TIERS,
  evaluateAgentActionPolicy,
  isAgentAllowedForMode,
  type AgentPrincipal,
} from 'shipsafe-agent-policy';

The app-side adapter that maps Drizzle rows and audit events onto these domain types (principal-management.ts) lives in the consuming app, not here, to keep this package free of database and persistence coupling.