@type t() :: %ASM.Execution.Environment{
  allowed_tools: [String.t()],
  approval_posture: :manual | :auto | :none | nil,
  permission_mode: ASM.Permission.normalized_mode() | nil,
  workspace_root: String.t() | nil
}

@type validation_error() ::
  {:unknown_execution_environment_fields, [term()]}
  | {:invalid_workspace_root, term()}
  | {:invalid_allowed_tools, term()}
  | {:invalid_approval_posture, term()}
  | {:invalid_permission_mode, term()}
  | {:invalid_execution_environment, term()}