Structured policies

Operators edit structured policy records stored per agent. Server code turns them into Cedar policy sets (server/utils/cedar-gen.ts); raw Cedar text is intentionally not the primary editing surface in product UX.

Policies can express service and tool constraints, time windows, session conditions (server/utils/session-conditions.ts), repository restrictions where enabled in schema/generation, and effect (allow/deny) semantics against the compiled Cedar schema (cedar/ assets).

HTTP: server/api/agents/[id]/policies/ — list, create, read, update, delete, toggle, versions, preview, simulate.