Action Classifier

function classifyAction(actionType: string): ActionClassification

function requiresConfirmation(actionType: string): boolean

function registerAction(
  actionType: string,
  classification: ActionClassification
): void

function lockRegistry(): void

function isRegistryLocked(): boolean

import {
  classifyAction,
  requiresConfirmation,
  registerAction,
  lockRegistry,
} from "@comis/core";

// Register custom plugin actions during bootstrap
registerAction("myplugin.export", "mutate");
registerAction("myplugin.purge", "destructive");

// Lock after bootstrap -- no more registrations allowed
lockRegistry();

// Classify actions at runtime
classifyAction("file.read");       // "read"
classifyAction("memory.delete");   // "destructive"
classifyAction("unknown.action");  // "destructive" (fail-closed)

// Check confirmation requirement
requiresConfirmation("file.read");     // false
requiresConfirmation("system.shutdown"); // true

security:
  actionConfirmation:
    requireForDestructive: true
    requireForSensitive: false
    autoApprove:
      - config.patch
      - session.new