AI Policy Generation

{
  provider: string      // Required: LLM provider to use (e.g. "openai", "anthropic")
  model: string         // Required: Model to use (e.g. "gpt-4o", "claude-sonnet-4-20250514")
  messages: Array<{     // Required: Conversation messages describing the desired policy
    role: string
    content: string
  }>
  cedarSchema?: string  // Optional: Cedar schema text (defaults to current schema)
}

curl -X POST http://localhost:3100/api/ai-policy/generate \
  -H "Authorization: Bearer your-admin-token" \
  -H "Content-Type: application/json" \
  -d '{
    "provider": "openai",
    "model": "gpt-4o",
    "messages": [
      {
        "role": "user",
        "content": "Create a policy that allows the engineering tenant to use completion and embedding actions during business hours (9 AM to 6 PM)"
      }
    ]
  }'

{
  "policy": "@id(\"engineering-business-hours\")\npermit (\n  principal,\n  action in [Action::\"completion\", Action::\"embedding\"],\n  resource\n)\nwhen {\n  principal.tenant == \"engineering\" &&\n  context.hour >= 9 &&\n  context.hour < 18\n};",
  "usage": {
    "input_tokens": 1250,
    "output_tokens": 85
  }
}