// Single source of truth for the built-in security scan surfaces; flip to `true` to restore the security-scan UI and execution.
export const SECURITY_SCANS_ENABLED = false;
/**
 * Stable error code used in BadRequestError messages when a deploy is rejected
 * due to unresolved policy gate findings. Both server and client reference this
 * constant so the contract doesn't rely on fragile string matching.
 */
export const POLICY_GATE_BLOCKED_ERROR = 'POLICY_GATE_BLOCKED';
/**
 * User-facing message returned when a deploy is rejected because a dev-server
 * policy gate has not yet run against the version being deployed and the
 * current live edit state no longer matches that version. The dev-server scan
 * evaluates the live edit working tree, so running it for the first time
 * against a divergent live edit would review the wrong code. Surfaced directly
 * to the user, and shared so server and client agree on the exact text.
 */
export const POLICY_GATE_STALE_LIVE_EDIT_ERROR = 'Policy gates can only run for the current app state. Deploy the current changes or restore to this commit and then deploy.';
//# sourceMappingURL=index.js.map