Static-class style namespace (matches the codebase's preference for
static utility classes — see StuffApi, MixinApi, etc.).
Some entries are bare singletons (Public, SystemRoot, SelfOnly,
ApiOnly), others are constructor functions (Custom, AllOf, AnyOf,
Not, FromTemplate, FromModule). The allows() shape is uniform so
they're interchangeable from the policy resolver's perspective.
Static-class style namespace (matches the codebase's preference for static utility classes — see StuffApi, MixinApi, etc.).
Some entries are bare singletons (Public, SystemRoot, SelfOnly, ApiOnly), others are constructor functions (Custom, AllOf, AnyOf, Not, FromTemplate, FromModule). The
allows()shape is uniform so they're interchangeable from the policy resolver's perspective.