1import {
2	OwnersEnum,
3	StabilityEnum,
4	TagsEnum,
5} from '@lssm-tech/lib.contracts-spec/ownership';
6import { definePolicy } from '@lssm-tech/lib.contracts-spec/policy';
7
8export const AssistantGatePolicy = definePolicy({
9	meta: {
10		key: 'locale-jurisdiction-gate.policy.gate',
11		version: '1.0.0',
12		title: 'Assistant Locale and Jurisdiction Gate',
13		description:
14			'Requires explicit locale, jurisdiction, knowledge snapshot, and allowed scope before assistant requests may proceed.',
15		domain: 'assistant',
16		scope: 'operation',
17		owners: [OwnersEnum.PlatformFinance],
18		tags: [TagsEnum.I18n, 'assistant', 'policy', 'jurisdiction'],
19		stability: StabilityEnum.Experimental,
20	},
21	rules: [
22		{
23			effect: 'deny',
24			actions: ['assistant.answer', 'assistant.explainConcept'],
25			resource: { type: 'assistant-call' },
26			conditions: [
27				{
28					expression:
29						'!context.locale || !context.jurisdiction || !context.kbSnapshotId || !context.allowedScope',
30				},
31			],
32			reason:
33				'Assistant requests fail closed until locale, jurisdiction, kbSnapshotId, and allowedScope are explicit.',
34		},
35		{
36			effect: 'deny',
37			actions: ['assistant.answer', 'assistant.explainConcept'],
38			resource: { type: 'assistant-call' },
39			conditions: [
40				{
41					expression:
42						"!['en-US', 'en-GB', 'fr-FR'].includes(context.locale ?? '')",
43				},
44			],
45			reason: 'Only the explicitly reviewed assistant locales are permitted.',
46		},
47		{
48			effect: 'allow',
49			actions: ['assistant.answer', 'assistant.explainConcept'],
50			resource: { type: 'assistant-call' },
51			conditions: [
52				{
53					expression:
54						"['en-US', 'en-GB', 'fr-FR'].includes(context.locale ?? '') && !!context.jurisdiction && !!context.kbSnapshotId && !!context.allowedScope",
55				},
56			],
57			reason:
58				'Explicit context is present, so the request may continue to citation and scope validation.',
59		},
60	],
61	pii: {
62		fields: ['kbSnapshotId'],
63		retentionDays: 30,
64	},
65});