@a5c-ai/genty-platform 6.0.2 → 6.0.3-staging.032e07a1ffa0

package/dist/harness/index.d.ts

@@ -13,6 +13,8 @@ export type { OutputMode, ToolResultShape, } from "./internal/createRun/utils";
 export { BOLD, DIM, MAGENTA, RED, RESET, formatToolResult, writeVerboseBlock, writeVerboseLine, } from "./internal/createRun/utils";
 export { assessRun, discoverRuns } from "./internal/createRun/resumeState";
 export { normalizeBuiltInHarnessName } from "./builtInHarness";
+export { resolveRunPolicyGates, withPolicyGate, applyPolicyGateSync, __resetRunPolicyGatesCache, registerRunAuthorizationResolver, unregisterRunAuthorizationResolver, } from "./internal/createRun/orchestration/policy-enforcement-wiring";
+export type { RunPolicyGates, PolicyGatedSessionOptions, } from "./internal/createRun/orchestration/policy-enforcement-wiring";
 export { invokeViaAgentMux, type AdapterBridgeOptions, type AgentMuxBridgeResult, type AdapterEventCallback, type AgentMuxClient, type AgentMuxRunHandle, type AdapterAgentEvent, type AdapterInteractionChannel, } from "./adapters";
 export { HARNESS_TO_AGENT_MUX_ADAPTER, mapHarnessToAmuxAdapter, hasAmuxAdapter, } from "./adapters";
 export { CircuitBreaker, type CircuitState, type CircuitBreakerOptions, type CircuitBreakerSnapshot, } from "./circuitBreaker";

package/dist/harness/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/harness/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,cAAc,EACd,kBAAkB,EAClB,iBAAiB,EACjB,eAAe,EACf,sBAAsB,EACtB,mBAAmB,EACnB,oBAAoB,EACpB,mBAAmB,EACnB,qBAAqB,EACrB,oBAAoB,EACpB,uBAAuB,EACvB,qBAAqB,EACrB,qBAAqB,EACrB,uBAAuB,EACvB,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,SAAS,CAAC;AAEjB,OAAO,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AAG5C,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,iBAAiB,EACjB,eAAe,EACf,aAAa,EACb,gBAAgB,EAChB,sBAAsB,EACtB,UAAU,EACV,UAAU,EACV,YAAY,GACb,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,8BAA8B,EAC9B,+BAA+B,EAC/B,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,EACzB,kBAAkB,EAClB,aAAa,EACb,mBAAmB,EACnB,iBAAiB,EACjB,kBAAkB,GACnB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAC7E,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,sBAAsB,EAAE,KAAK,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AACzF,YAAY,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AACjE,OAAO,KAAK,QAAQ,MAAM,YAAY,CAAC;AACvC,OAAO,EACL,sBAAsB,EACtB,mBAAmB,EACnB,qBAAqB,EACrB,aAAa,GACd,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EACV,oBAAoB,EACpB,iBAAiB,GAClB,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EACV,UAAU,EACV,eAAe,GAChB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,IAAI,EACJ,GAAG,EACH,OAAO,EACP,GAAG,EACH,KAAK,EACL,gBAAgB,EAChB,iBAAiB,EACjB,gBAAgB,GACjB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAC3E,OAAO,EAAE,2BAA2B,EAAE,MAAM,kBAAkB,CAAC;AAC/D,OAAO,EACL,iBAAiB,EACjB,KAAK,oBAAoB,EACzB,KAAK,oBAAoB,EACzB,KAAK,oBAAoB,EACzB,KAAK,cAAc,EACnB,KAAK,iBAAiB,EACtB,KAAK,iBAAiB,EACtB,KAAK,yBAAyB,GAC/B,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,4BAA4B,EAC5B,uBAAuB,EACvB,cAAc,GACf,MAAM,YAAY,CAAC;AAGpB,OAAO,EACL,cAAc,EACd,KAAK,YAAY,EACjB,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,GAC5B,MAAM,kBAAkB,CAAC;AAG1B,OAAO,EACL,yBAAyB,EACzB,4BAA4B,EAC5B,KAAK,mBAAmB,EACxB,KAAK,iBAAiB,EACtB,KAAK,cAAc,EACnB,KAAK,WAAW,GACjB,MAAM,wBAAwB,CAAC;AAGhC,OAAO,EACL,YAAY,EACZ,iBAAiB,EACjB,KAAK,WAAW,EAChB,KAAK,aAAa,EAClB,KAAK,cAAc,GACpB,MAAM,iBAAiB,CAAC;AAGzB,OAAO,EACL,gBAAgB,EAChB,KAAK,sBAAsB,EAC3B,KAAK,SAAS,EACd,KAAK,aAAa,EAClB,KAAK,iBAAiB,EACtB,KAAK,aAAa,EAClB,KAAK,gBAAgB,GACtB,MAAM,oBAAoB,CAAC;AAG5B,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,YAAY,EACZ,KAAK,cAAc,EACnB,KAAK,aAAa,EAClB,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,KAAK,eAAe,GACrB,MAAM,mBAAmB,CAAC;AAG3B,OAAO,EACL,cAAc,EACd,cAAc,EACd,aAAa,EACb,gBAAgB,EAChB,oBAAoB,EACpB,KAAK,cAAc,EACnB,KAAK,YAAY,EACjB,KAAK,UAAU,GAChB,MAAM,qBAAqB,CAAC;AAG7B,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,KAAK,cAAc,GACpB,MAAM,wBAAwB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/harness/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,cAAc,EACd,kBAAkB,EAClB,iBAAiB,EACjB,eAAe,EACf,sBAAsB,EACtB,mBAAmB,EACnB,oBAAoB,EACpB,mBAAmB,EACnB,qBAAqB,EACrB,oBAAoB,EACpB,uBAAuB,EACvB,qBAAqB,EACrB,qBAAqB,EACrB,uBAAuB,EACvB,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,SAAS,CAAC;AAEjB,OAAO,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AAG5C,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,iBAAiB,EACjB,eAAe,EACf,aAAa,EACb,gBAAgB,EAChB,sBAAsB,EACtB,UAAU,EACV,UAAU,EACV,YAAY,GACb,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,8BAA8B,EAC9B,+BAA+B,EAC/B,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,EACzB,kBAAkB,EAClB,aAAa,EACb,mBAAmB,EACnB,iBAAiB,EACjB,kBAAkB,GACnB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAC7E,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,sBAAsB,EAAE,KAAK,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AACzF,YAAY,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AACjE,OAAO,KAAK,QAAQ,MAAM,YAAY,CAAC;AACvC,OAAO,EACL,sBAAsB,EACtB,mBAAmB,EACnB,qBAAqB,EACrB,aAAa,GACd,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EACV,oBAAoB,EACpB,iBAAiB,GAClB,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EACV,UAAU,EACV,eAAe,GAChB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,IAAI,EACJ,GAAG,EACH,OAAO,EACP,GAAG,EACH,KAAK,EACL,gBAAgB,EAChB,iBAAiB,EACjB,gBAAgB,GACjB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAC3E,OAAO,EAAE,2BAA2B,EAAE,MAAM,kBAAkB,CAAC;AAG/D,OAAO,EACL,qBAAqB,EACrB,cAAc,EACd,mBAAmB,EACnB,0BAA0B,EAG1B,gCAAgC,EAChC,kCAAkC,GACnC,MAAM,8DAA8D,CAAC;AACtE,YAAY,EACV,cAAc,EACd,yBAAyB,GAC1B,MAAM,8DAA8D,CAAC;AACtE,OAAO,EACL,iBAAiB,EACjB,KAAK,oBAAoB,EACzB,KAAK,oBAAoB,EACzB,KAAK,oBAAoB,EACzB,KAAK,cAAc,EACnB,KAAK,iBAAiB,EACtB,KAAK,iBAAiB,EACtB,KAAK,yBAAyB,GAC/B,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,4BAA4B,EAC5B,uBAAuB,EACvB,cAAc,GACf,MAAM,YAAY,CAAC;AAGpB,OAAO,EACL,cAAc,EACd,KAAK,YAAY,EACjB,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,GAC5B,MAAM,kBAAkB,CAAC;AAG1B,OAAO,EACL,yBAAyB,EACzB,4BAA4B,EAC5B,KAAK,mBAAmB,EACxB,KAAK,iBAAiB,EACtB,KAAK,cAAc,EACnB,KAAK,WAAW,GACjB,MAAM,wBAAwB,CAAC;AAGhC,OAAO,EACL,YAAY,EACZ,iBAAiB,EACjB,KAAK,WAAW,EAChB,KAAK,aAAa,EAClB,KAAK,cAAc,GACpB,MAAM,iBAAiB,CAAC;AAGzB,OAAO,EACL,gBAAgB,EAChB,KAAK,sBAAsB,EAC3B,KAAK,SAAS,EACd,KAAK,aAAa,EAClB,KAAK,iBAAiB,EACtB,KAAK,aAAa,EAClB,KAAK,gBAAgB,GACtB,MAAM,oBAAoB,CAAC;AAG5B,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,YAAY,EACZ,KAAK,cAAc,EACnB,KAAK,aAAa,EAClB,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,KAAK,eAAe,GACrB,MAAM,mBAAmB,CAAC;AAG3B,OAAO,EACL,cAAc,EACd,cAAc,EACd,aAAa,EACb,gBAAgB,EAChB,oBAAoB,EACpB,KAAK,cAAc,EACnB,KAAK,YAAY,EACjB,KAAK,UAAU,GAChB,MAAM,qBAAqB,CAAC;AAG7B,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,KAAK,cAAc,GACpB,MAAM,wBAAwB,CAAC"}

package/dist/harness/index.js

@@ -33,8 +33,8 @@ var __importStar = (this && this.__importStar) || (function () {
     };
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.readFilesParallel = exports.WebSocketSession = exports.evaluateCondition = exports.EffectRouter = exports.applyProfileToProcessOptions = exports.deriveOrchestrationConfig = exports.CircuitBreaker = exports.hasAmuxAdapter = exports.mapHarnessToAmuxAdapter = exports.HARNESS_TO_AGENT_MUX_ADAPTER = exports.invokeViaAgentMux = exports.normalizeBuiltInHarnessName = exports.discoverRuns = exports.assessRun = exports.writeVerboseLine = exports.writeVerboseBlock = exports.formatToolResult = exports.RESET = exports.RED = exports.MAGENTA = exports.DIM = exports.BOLD = exports.selectHarness = exports.runOrchestrationPhase = exports.handleSessionCreate = exports.handleHarnessCreateRun = exports.adapters = exports.createAgentCoreSession = exports.buildLaunchSpec = exports.HARNESS_CLI_MAP = exports.buildHarnessArgs = exports.invokeHarness = exports.parseSearchResults = exports.filterByRelevance = exports.extractTextFromHtml = exports.stripHtmlTags = exports.AGENTIC_TOOL_NAMES = exports.disposeAgentCoreToolDefinitions = exports.createAgentCoreToolDefinitions = exports.resetAdapter = exports.setAdapter = exports.getAdapter = exports.listSupportedHarnesses = exports.getAdapterByName = exports.detectAdapter = exports.KNOWN_HARNESSES = exports.checkCliAvailable = exports.detectCallerHarness = exports.discoverHarnesses = exports.HarnessCapability = void 0;
-exports.StreamFanout = exports.StreamMerger = exports.parsePorcelainOutput = exports.isInsideWorktree = exports.listWorktrees = exports.removeWorktree = exports.createWorktree = exports.globParallel = exports.writeFilesParallel = void 0;
+exports.CircuitBreaker = exports.hasAmuxAdapter = exports.mapHarnessToAmuxAdapter = exports.HARNESS_TO_AGENT_MUX_ADAPTER = exports.invokeViaAgentMux = exports.unregisterRunAuthorizationResolver = exports.registerRunAuthorizationResolver = exports.__resetRunPolicyGatesCache = exports.applyPolicyGateSync = exports.withPolicyGate = exports.resolveRunPolicyGates = exports.normalizeBuiltInHarnessName = exports.discoverRuns = exports.assessRun = exports.writeVerboseLine = exports.writeVerboseBlock = exports.formatToolResult = exports.RESET = exports.RED = exports.MAGENTA = exports.DIM = exports.BOLD = exports.selectHarness = exports.runOrchestrationPhase = exports.handleSessionCreate = exports.handleHarnessCreateRun = exports.adapters = exports.createAgentCoreSession = exports.buildLaunchSpec = exports.HARNESS_CLI_MAP = exports.buildHarnessArgs = exports.invokeHarness = exports.parseSearchResults = exports.filterByRelevance = exports.extractTextFromHtml = exports.stripHtmlTags = exports.AGENTIC_TOOL_NAMES = exports.disposeAgentCoreToolDefinitions = exports.createAgentCoreToolDefinitions = exports.resetAdapter = exports.setAdapter = exports.getAdapter = exports.listSupportedHarnesses = exports.getAdapterByName = exports.detectAdapter = exports.KNOWN_HARNESSES = exports.checkCliAvailable = exports.detectCallerHarness = exports.discoverHarnesses = exports.HarnessCapability = void 0;
+exports.StreamFanout = exports.StreamMerger = exports.parsePorcelainOutput = exports.isInsideWorktree = exports.listWorktrees = exports.removeWorktree = exports.createWorktree = exports.globParallel = exports.writeFilesParallel = exports.readFilesParallel = exports.WebSocketSession = exports.evaluateCondition = exports.EffectRouter = exports.applyProfileToProcessOptions = exports.deriveOrchestrationConfig = void 0;
 var types_1 = require("./types");
 Object.defineProperty(exports, "HarnessCapability", { enumerable: true, get: function () { return types_1.HarnessCapability; } });
 // SDK-owned: harness registry, discovery, and adapter resolution are SDK-native
@@ -86,6 +86,17 @@ Object.defineProperty(exports, "assessRun", { enumerable: true, get: function ()
 Object.defineProperty(exports, "discoverRuns", { enumerable: true, get: function () { return resumeState_1.discoverRuns; } });
 var builtInHarness_1 = require("./builtInHarness");
 Object.defineProperty(exports, "normalizeBuiltInHarnessName", { enumerable: true, get: function () { return builtInHarness_1.normalizeBuiltInHarnessName; } });
+// Milestone D (§9.4 / AC-49) — centralized session-gate wiring, exported so out-of-package
+// tool-executing session sites (e.g. genty-cli resume) route through the same gate.
+var policy_enforcement_wiring_1 = require("./internal/createRun/orchestration/policy-enforcement-wiring");
+Object.defineProperty(exports, "resolveRunPolicyGates", { enumerable: true, get: function () { return policy_enforcement_wiring_1.resolveRunPolicyGates; } });
+Object.defineProperty(exports, "withPolicyGate", { enumerable: true, get: function () { return policy_enforcement_wiring_1.withPolicyGate; } });
+Object.defineProperty(exports, "applyPolicyGateSync", { enumerable: true, get: function () { return policy_enforcement_wiring_1.applyPolicyGateSync; } });
+Object.defineProperty(exports, "__resetRunPolicyGatesCache", { enumerable: true, get: function () { return policy_enforcement_wiring_1.__resetRunPolicyGatesCache; } });
+// Milestone E (ALLOW path, §5 / AC-9 / AC-49) — register the run's authorization-store
+// resolver so the load-bearing gates can ALLOW a legitimately-authorized covered action.
+Object.defineProperty(exports, "registerRunAuthorizationResolver", { enumerable: true, get: function () { return policy_enforcement_wiring_1.registerRunAuthorizationResolver; } });
+Object.defineProperty(exports, "unregisterRunAuthorizationResolver", { enumerable: true, get: function () { return policy_enforcement_wiring_1.unregisterRunAuthorizationResolver; } });
 var adapters_1 = require("./adapters");
 Object.defineProperty(exports, "invokeViaAgentMux", { enumerable: true, get: function () { return adapters_1.invokeViaAgentMux; } });
 var adapters_2 = require("./adapters");

package/dist/harness/internal/createRun/orchestration/effects.d.ts

@@ -62,6 +62,22 @@ interface McpRoutingOptions {
     stateDir?: string;
     autoConnect?: boolean;
     cacheTtlMs?: number;
+    /**
+     * GATE (§9.4 / AC-23b / AC-49) — Milestone D policy gate for the MCP dispatcher
+     * seam. When present, a COVERED dispatch WITHOUT a valid CommandAuthorization is
+     * denied BEFORE execution (this seam is a LOAD-BEARING, un-bypassable blocking
+     * gate). When absent, dispatch proceeds unchanged (no covered actions configured).
+     * The gate returns `{ allowed, reason? }`; a `false` short-circuits the tool call.
+     */
+    policyGate?: (context: {
+        toolName: string;
+        input: unknown;
+        runId?: string;
+        sessionId?: string;
+    }) => {
+        allowed: boolean;
+        reason?: string;
+    };
 }
 interface EffectResolverOptions {
     workspace?: string;

package/dist/harness/internal/createRun/orchestration/effects.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"effects.d.ts","sourceRoot":"","sources":["../../../../../src/harness/internal/createRun/orchestration/effects.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,QAAQ,MAAM,eAAe,CAAC;AAW1C,OAAO,EAAE,0BAA0B,EAAE,MAAM,kBAAkB,CAAC;AAO9D,OAAO,EACL,cAAc,IAAI,qBAAqB,EACvC,iBAAiB,IAAI,wBAAwB,EAC7C,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACtB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,gBAAgB,EAChB,KAAK,mBAAmB,EACzB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,eAAe,EAAE,MAAM,qCAAqC,CAAC;AACtE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,EACL,WAAW,IAAI,kBAAkB,EACjC,uBAAuB,IAAI,8BAA8B,EACzD,gBAAgB,IAAI,oBAAoB,EACxC,iBAAiB,IAAI,sBAAsB,EAC3C,KAAK,iBAAiB,EACvB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,WAAW,IAAI,kBAAkB,EACjC,mBAAmB,IAAI,0BAA0B,EAClD,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AAS7D,OAAO,EAIL,sBAAsB,EAatB,KAAK,iBAAiB,EACtB,KAAK,YAAY,EACjB,KAAK,iBAAiB,EACtB,KAAK,sBAAsB,EAC3B,KAAK,eAAe,EACpB,KAAK,mBAAmB,EAEzB,MAAM,UAAU,CAAC;AAmBlB,KAAK,eAAe,GAAG;IACrB,OAAO,CAAC,OAAO,EAAE,uBAAuB,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;CACnE,CAAC;AAEF,UAAU,iBAAiB;IACzB,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B,OAAO,CAAC,EAAE,gBAAgB,CAAC;IAC3B,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B,YAAY,CAAC,EAAE;QACb,cAAc,CAAC,MAAM,EAAE;YACrB,EAAE,EAAE,MAAM,CAAC;YACX,IAAI,EAAE,MAAM,CAAC;YACb,IAAI,EAAE,KAAK,CAAC;YACZ,KAAK,EAAE,KAAK,CAAC;gBACX,IAAI,EAAE,MAAM,CAAC;gBACb,WAAW,CAAC,EAAE,MAAM,CAAC;gBACrB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;gBACrC,MAAM,EAAE,KAAK,CAAC;gBACd,eAAe,CAAC,EAAE,MAAM,CAAC;gBACzB,MAAM,CAAC,EAAE,MAAM,CAAC;aACjB,CAAC,CAAC;SACJ,GAAG,IAAI,CAAC;KACV,CAAC;IACF,SAAS,CAAC,EAAE;QACV,cAAc,CACZ,MAAM,EAAE;YAAE,EAAE,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAC;YAAC,SAAS,EAAE,OAAO,CAAA;SAAE,EACxD,KAAK,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,WAAW,CAAC,EAAE,MAAM,CAAC;YAAC,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;SAAE,CAAC,GAC1F,IAAI,CAAC;KACT,CAAC;IACF,UAAU,CAAC,EAAE;QACX,QAAQ,CACN,OAAO,EAAE;YAAE,QAAQ,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,OAAO,CAAC;YAAC,MAAM,CAAC,EAAE,MAAM,CAAC;YAAC,KAAK,CAAC,EAAE,MAAM,CAAC;YAAC,SAAS,CAAC,EAAE,MAAM,CAAA;SAAE,EAClG,QAAQ,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,GAC/B,OAAO,CAAC;YAAE,MAAM,EAAE,OAAO,CAAC;YAAC,UAAU,EAAE,MAAM,CAAC;YAAC,KAAK,CAAC,EAAE,MAAM,GAAG;gBAAE,OAAO,CAAC,EAAE,MAAM,CAAA;aAAE,CAAA;SAAE,CAAC,CAAC;KAC5F,CAAC;IACF,gBAAgB,CAAC,EAAE,mBAAmB,CAAC;IACvC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,UAAU,qBAAqB;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,iBAAiB,CAAC,EAAE,iBAAiB,GAAG,IAAI,CAAC;IAC7C,SAAS,CAAC,EAAE,sBAAsB,CAAC;IACnC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,UAAU,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,iBAAiB,CAAC;IACxD,GAAG,CAAC,EAAE,iBAAiB,CAAC;IACxB,YAAY,CAAC,EAAE,OAAO,8BAA8B,EAAE,mBAAmB,CAAC;CAC3E;AAED,MAAM,WAAW,qBAAqB;IACpC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE;QACX,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,YAAY,CAAC,EAAE,MAAM,CAAC;KACvB,CAAC;IACF,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,gBAAgB,CAAC,EAAE,gBAAgB,GAAG,IAAI,CAAC;IAC3C,iBAAiB,CAAC,EAAE,OAAO,sBAAsB,CAAC;IAClD,WAAW,CAAC,EAAE,OAAO,kBAAkB,CAAC;IACxC,cAAc,CAAC,EAAE,OAAO,qBAAqB,CAAC;IAC9C,iBAAiB,CAAC,EAAE,OAAO,wBAAwB,CAAC;IACpD,uBAAuB,CAAC,EAAE,OAAO,8BAA8B,CAAC;IAChE,gBAAgB,CAAC,EAAE,OAAO,oBAAoB,CAAC;IAC/C,WAAW,CAAC,EAAE,OAAO,kBAAkB,CAAC;IACxC,mBAAmB,CAAC,EAAE,OAAO,0BAA0B,CAAC;IACxD,aAAa,CAAC,EAAE;QACd,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,EAAE,IAAI,GAAG,OAAO,CAAC;KACxB,CAAC;CACH;AAED,MAAM,WAAW,uBAAuB;IACtC,MAAM,CAAC,EAAE,iBAAiB,CAAC;IAC3B,iBAAiB,CAAC,EAAE;QAClB,MAAM,EAAE,OAAO,CAAC;QAChB,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC;IACF,UAAU,CAAC,EAAE;QACX,SAAS,EAAE,OAAO,CAAC;QACnB,OAAO,EAAE,gBAAgB,EAAE,CAAC;KAC7B,CAAC;CACH;AAED,wBAAgB,iCAAiC,CAC/C,IAAI,EAAE;IAAE,mBAAmB,EAAE,MAAM,CAAA;CAAE,EACrC,OAAO,EAAE,WAAW,CAAC,UAAU,CAAC,OAAO,gBAAgB,CAAC,CAAC,EACzD,oBAAoB,CAAC,EAAE,sBAAsB,GAAG,IAAI,GACnD,MAAM,GAAG,SAAS,CAYpB;AAED,wBAAsB,aAAa,CACjC,MAAM,EAAE,YAAY,EACpB,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,qBAAqB,EAC9B,SAAS,CAAC,EAAE,sBAAsB,GAAG,IAAI,EACzC,UAAU,CAAC,EAAE,sBAAsB,EAAE,EACrC,EAAE,CAAC,EAAE,QAAQ,CAAC,SAAS,GAAG,IAAI,EAC9B,IAAI,CAAC,EAAE,OAAO,EACd,sBAAsB,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,IAAI,GACtE,OAAO,CAAC,mBAAmB,CAAC,CA2L9B;AAsND,wBAAsB,oCAAoC,CACxD,IAAI,EAAE,qBAAqB,GAC1B,OAAO,CAAC,uBAAuB,CAAC,CA4ElC;AA2dD,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,YAAY,EACpB,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,qBAAqB,GAAG;IAC/B,WAAW,CAAC,EAAE,OAAO,CAAC,iBAAiB,CAAC,CAAC;CAC1C,EACD,SAAS,CAAC,EAAE,sBAAsB,GAAG,IAAI,EACzC,UAAU,CAAC,EAAE,sBAAsB,EAAE,EACrC,EAAE,CAAC,EAAE,QAAQ,CAAC,SAAS,GAAG,IAAI,EAC9B,IAAI,CAAC,EAAE,OAAO,EACd,gBAAgB,CAAC,EAAE,MAAM,sBAAsB,EAC/C,gBAAgB,CAAC,EAAE,CAAC,OAAO,EAAE,sBAAsB,KAAK,OAAO,CAAC,IAAI,CAAC,EACrE,sBAAsB,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,IAAI,GACtE,OAAO,CAAC,mBAAmB,CAAC,CAqF9B;AAED,wBAAsB,wCAAwC,CAAC,IAAI,EAAE;IACnE,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACzC,gBAAgB,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;CAC/E,GAAG,OAAO,CAAC,eAAe,CAAC,CA6C3B"}
+{"version":3,"file":"effects.d.ts","sourceRoot":"","sources":["../../../../../src/harness/internal/createRun/orchestration/effects.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,QAAQ,MAAM,eAAe,CAAC;AAW1C,OAAO,EAAE,0BAA0B,EAAE,MAAM,kBAAkB,CAAC;AAQ9D,OAAO,EACL,cAAc,IAAI,qBAAqB,EACvC,iBAAiB,IAAI,wBAAwB,EAC7C,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACtB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,gBAAgB,EAChB,KAAK,mBAAmB,EACzB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,eAAe,EAAE,MAAM,qCAAqC,CAAC;AACtE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,EACL,WAAW,IAAI,kBAAkB,EACjC,uBAAuB,IAAI,8BAA8B,EACzD,gBAAgB,IAAI,oBAAoB,EACxC,iBAAiB,IAAI,sBAAsB,EAC3C,KAAK,iBAAiB,EACvB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,WAAW,IAAI,kBAAkB,EACjC,mBAAmB,IAAI,0BAA0B,EAClD,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AAS7D,OAAO,EAIL,sBAAsB,EAatB,KAAK,iBAAiB,EACtB,KAAK,YAAY,EACjB,KAAK,iBAAiB,EACtB,KAAK,sBAAsB,EAC3B,KAAK,eAAe,EACpB,KAAK,mBAAmB,EAEzB,MAAM,UAAU,CAAC;AAmBlB,KAAK,eAAe,GAAG;IACrB,OAAO,CAAC,OAAO,EAAE,uBAAuB,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;CACnE,CAAC;AAEF,UAAU,iBAAiB;IACzB,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B,OAAO,CAAC,EAAE,gBAAgB,CAAC;IAC3B,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B,YAAY,CAAC,EAAE;QACb,cAAc,CAAC,MAAM,EAAE;YACrB,EAAE,EAAE,MAAM,CAAC;YACX,IAAI,EAAE,MAAM,CAAC;YACb,IAAI,EAAE,KAAK,CAAC;YACZ,KAAK,EAAE,KAAK,CAAC;gBACX,IAAI,EAAE,MAAM,CAAC;gBACb,WAAW,CAAC,EAAE,MAAM,CAAC;gBACrB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;gBACrC,MAAM,EAAE,KAAK,CAAC;gBACd,eAAe,CAAC,EAAE,MAAM,CAAC;gBACzB,MAAM,CAAC,EAAE,MAAM,CAAC;aACjB,CAAC,CAAC;SACJ,GAAG,IAAI,CAAC;KACV,CAAC;IACF,SAAS,CAAC,EAAE;QACV,cAAc,CACZ,MAAM,EAAE;YAAE,EAAE,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAC;YAAC,SAAS,EAAE,OAAO,CAAA;SAAE,EACxD,KAAK,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,WAAW,CAAC,EAAE,MAAM,CAAC;YAAC,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;SAAE,CAAC,GAC1F,IAAI,CAAC;KACT,CAAC;IACF,UAAU,CAAC,EAAE;QACX,QAAQ,CACN,OAAO,EAAE;YAAE,QAAQ,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,OAAO,CAAC;YAAC,MAAM,CAAC,EAAE,MAAM,CAAC;YAAC,KAAK,CAAC,EAAE,MAAM,CAAC;YAAC,SAAS,CAAC,EAAE,MAAM,CAAA;SAAE,EAClG,QAAQ,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,GAC/B,OAAO,CAAC;YAAE,MAAM,EAAE,OAAO,CAAC;YAAC,UAAU,EAAE,MAAM,CAAC;YAAC,KAAK,CAAC,EAAE,MAAM,GAAG;gBAAE,OAAO,CAAC,EAAE,MAAM,CAAA;aAAE,CAAA;SAAE,CAAC,CAAC;KAC5F,CAAC;IACF,gBAAgB,CAAC,EAAE,mBAAmB,CAAC;IACvC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;;;OAMG;IACH,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE;QACrB,QAAQ,EAAE,MAAM,CAAC;QACjB,KAAK,EAAE,OAAO,CAAC;QACf,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,KAAK;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAC7C;AAED,UAAU,qBAAqB;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,iBAAiB,CAAC,EAAE,iBAAiB,GAAG,IAAI,CAAC;IAC7C,SAAS,CAAC,EAAE,sBAAsB,CAAC;IACnC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,UAAU,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,iBAAiB,CAAC;IACxD,GAAG,CAAC,EAAE,iBAAiB,CAAC;IACxB,YAAY,CAAC,EAAE,OAAO,8BAA8B,EAAE,mBAAmB,CAAC;CAC3E;AAED,MAAM,WAAW,qBAAqB;IACpC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE;QACX,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,YAAY,CAAC,EAAE,MAAM,CAAC;KACvB,CAAC;IACF,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,gBAAgB,CAAC,EAAE,gBAAgB,GAAG,IAAI,CAAC;IAC3C,iBAAiB,CAAC,EAAE,OAAO,sBAAsB,CAAC;IAClD,WAAW,CAAC,EAAE,OAAO,kBAAkB,CAAC;IACxC,cAAc,CAAC,EAAE,OAAO,qBAAqB,CAAC;IAC9C,iBAAiB,CAAC,EAAE,OAAO,wBAAwB,CAAC;IACpD,uBAAuB,CAAC,EAAE,OAAO,8BAA8B,CAAC;IAChE,gBAAgB,CAAC,EAAE,OAAO,oBAAoB,CAAC;IAC/C,WAAW,CAAC,EAAE,OAAO,kBAAkB,CAAC;IACxC,mBAAmB,CAAC,EAAE,OAAO,0BAA0B,CAAC;IACxD,aAAa,CAAC,EAAE;QACd,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,EAAE,IAAI,GAAG,OAAO,CAAC;KACxB,CAAC;CACH;AAED,MAAM,WAAW,uBAAuB;IACtC,MAAM,CAAC,EAAE,iBAAiB,CAAC;IAC3B,iBAAiB,CAAC,EAAE;QAClB,MAAM,EAAE,OAAO,CAAC;QAChB,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC;IACF,UAAU,CAAC,EAAE;QACX,SAAS,EAAE,OAAO,CAAC;QACnB,OAAO,EAAE,gBAAgB,EAAE,CAAC;KAC7B,CAAC;CACH;AAED,wBAAgB,iCAAiC,CAC/C,IAAI,EAAE;IAAE,mBAAmB,EAAE,MAAM,CAAA;CAAE,EACrC,OAAO,EAAE,WAAW,CAAC,UAAU,CAAC,OAAO,gBAAgB,CAAC,CAAC,EACzD,oBAAoB,CAAC,EAAE,sBAAsB,GAAG,IAAI,GACnD,MAAM,GAAG,SAAS,CAYpB;AAED,wBAAsB,aAAa,CACjC,MAAM,EAAE,YAAY,EACpB,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,qBAAqB,EAC9B,SAAS,CAAC,EAAE,sBAAsB,GAAG,IAAI,EACzC,UAAU,CAAC,EAAE,sBAAsB,EAAE,EACrC,EAAE,CAAC,EAAE,QAAQ,CAAC,SAAS,GAAG,IAAI,EAC9B,IAAI,CAAC,EAAE,OAAO,EACd,sBAAsB,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,IAAI,GACtE,OAAO,CAAC,mBAAmB,CAAC,CA2L9B;AAyOD,wBAAsB,oCAAoC,CACxD,IAAI,EAAE,qBAAqB,GAC1B,OAAO,CAAC,uBAAuB,CAAC,CA4ElC;AAgeD,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,YAAY,EACpB,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,qBAAqB,GAAG;IAC/B,WAAW,CAAC,EAAE,OAAO,CAAC,iBAAiB,CAAC,CAAC;CAC1C,EACD,SAAS,CAAC,EAAE,sBAAsB,GAAG,IAAI,EACzC,UAAU,CAAC,EAAE,sBAAsB,EAAE,EACrC,EAAE,CAAC,EAAE,QAAQ,CAAC,SAAS,GAAG,IAAI,EAC9B,IAAI,CAAC,EAAE,OAAO,EACd,gBAAgB,CAAC,EAAE,MAAM,sBAAsB,EAC/C,gBAAgB,CAAC,EAAE,CAAC,OAAO,EAAE,sBAAsB,KAAK,OAAO,CAAC,IAAI,CAAC,EACrE,sBAAsB,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,IAAI,GACtE,OAAO,CAAC,mBAAmB,CAAC,CAqF9B;AAED,wBAAsB,wCAAwC,CAAC,IAAI,EAAE;IACnE,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACzC,gBAAgB,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;CAC/E,GAAG,OAAO,CAAC,eAAe,CAAC,CA6C3B"}

package/dist/harness/internal/createRun/orchestration/effects.js

@@ -45,6 +45,7 @@ const hookDecisionEffects_1 = require("./hookDecisionEffects");
 var effectsHelpers_2 = require("./effectsHelpers");
 Object.defineProperty(exports, "readProcessFileFingerprint", { enumerable: true, get: function () { return effectsHelpers_2.readProcessFileFingerprint; } });
 const workerSessionEnhancer_1 = require("./workerSessionEnhancer");
+const policy_enforcement_wiring_1 = require("./policy-enforcement-wiring");
 const approvalChains_1 = require("../../../../breakpoints/approvalChains");
 const compaction_1 = require("../../../../compression/compaction");
 const executor_1 = require("../../../../mcp/client/executor");
@@ -376,6 +377,25 @@ async function resolveMcpEffect(action, options) {
     };
 }
 async function dispatchMcpTool(dispatcher, executor, request, options) {
+    // GATE (§9.4) — verify the policy authorization BEFORE dispatch. A covered action
+    // without a valid CommandAuthorization is denied before execution (AC-23b/AC-49).
+    const policyGate = options.mcp?.policyGate;
+    if (policyGate) {
+        const decision = policyGate({
+            toolName: request.toolName,
+            input: request.args,
+            ...(options.runId ? { runId: options.runId } : {}),
+            ...(options.sessionId ? { sessionId: options.sessionId } : {}),
+        });
+        if (!decision.allowed) {
+            return {
+                success: false,
+                content: [],
+                error: decision.reason ?? "policy authorization denied",
+                durationMs: 0,
+            };
+        }
+    }
     const dispatched = await dispatcher.dispatch({
         toolName: request.toolName,
         input: request.args,
@@ -744,7 +764,11 @@ async function invokeSubprocessEffect(action, harnessName, options, discovered,
                         const enhancedOpts = options.gentyContext
                             ? (0, workerSessionEnhancer_1.enhanceWorkerSessionOptions)(baseOpts, options.gentyContext)
                             : baseOpts;
-                        const createWorkerSession = () => (0, utils_1.createAgentCoreSession)(enhancedOpts);
+                        // §9.4 / AC-49 — the subagent worker session runs `definition.execute`, so it
+                        // MUST carry the load-bearing policy tool gate. Resolve once (memoized), apply
+                        // synchronously to every session the factory builds.
+                        const { policyToolGate: childWorkerGate } = await (0, policy_enforcement_wiring_1.resolveRunPolicyGates)(options.workspace);
+                        const createWorkerSession = () => (0, utils_1.createAgentCoreSession)((0, policy_enforcement_wiring_1.applyPolicyGateSync)(enhancedOpts, childWorkerGate));
                         workerSession = createWorkerSession();
                         workerSessionFactory = createWorkerSession;
                     }

package/dist/harness/internal/createRun/orchestration/externalPhase.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"externalPhase.d.ts","sourceRoot":"","sources":["../../../../../src/harness/internal/createRun/orchestration/externalPhase.ts"],"names":[],"mappings":"AA6CA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,SAAS,CAAC;AAGzD,wBAAsB,6BAA6B,CAAC,IAAI,EAAE,yBAAyB,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAmUhH"}
+{"version":3,"file":"externalPhase.d.ts","sourceRoot":"","sources":["../../../../../src/harness/internal/createRun/orchestration/externalPhase.ts"],"names":[],"mappings":"AA8CA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,SAAS,CAAC;AAGzD,wBAAsB,6BAA6B,CAAC,IAAI,EAAE,yBAAyB,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAmUhH"}

package/dist/harness/internal/createRun/orchestration/externalPhase.js

@@ -52,6 +52,7 @@ const effects_1 = require("./effects");
 const dispatch_1 = require("./dispatch");
 const runState_1 = require("../planProcess/runState");
 const verbose_1 = require("./verbose");
+const policy_enforcement_wiring_1 = require("./policy-enforcement-wiring");
 const externalPhaseHelpers_1 = require("./externalPhaseHelpers");
 async function runExternalOrchestrationPhase(args) {
     if (!(0, utils_1.shouldUseExternalHarness)(args.selectedHarnessName)) {
@@ -323,6 +324,11 @@ async function resolveExternalAction(args) {
         effectHarness: taskHarness,
         iteration: args.state.iteration,
     }, args.args.json, args.args.verbose, args.args.outputMode);
+    // §9.4 / AC-49 — worker sessions run `definition.execute` (tool-executing), so they MUST
+    // carry the load-bearing policy tool gate. Resolve the run's gate ONCE (memoized) and
+    // apply it synchronously to every worker session (incl. the retry factory below), so no
+    // tool-executing worker omits the gate. Unpinned anchor → gate is undefined (unchanged).
+    const { policyToolGate: workerPolicyGate } = await (0, policy_enforcement_wiring_1.resolveRunPolicyGates)(args.args.workspace);
     let workerSession = null;
     let workerUnsub = null;
     if (args.action.kind === "shell" ||
@@ -334,7 +340,7 @@ async function resolveExternalAction(args) {
                 workspace: args.args.workspace,
                 model: args.args.model,
             });
-            workerSession = args.registerPiSession((0, utils_1.createAgentCoreSession)((0, workerSessionEnhancer_1.enhanceWorkerSessionOptions)(baseOpts, args.args.gentyContext)));
+            workerSession = args.registerPiSession((0, utils_1.createAgentCoreSession)((0, policy_enforcement_wiring_1.applyPolicyGateSync)((0, workerSessionEnhancer_1.enhanceWorkerSessionOptions)(baseOpts, args.args.gentyContext), workerPolicyGate)));
             workerUnsub = (0, verbose_1.subscribeVerbosePiEvents)(workerSession, `worker:${args.action.effectId.slice(-8) /* last 8 chars of ULID for human-readable label */}`, args.args);
         }
         else if (shouldUseHostPiWorker) {
@@ -343,7 +349,7 @@ async function resolveExternalAction(args) {
                 workspace: args.args.workspace,
                 model: args.args.model,
             });
-            workerSession = args.registerPiSession((0, utils_1.createAgentCoreSession)((0, workerSessionEnhancer_1.enhanceWorkerSessionOptions)(baseOpts, args.args.gentyContext)));
+            workerSession = args.registerPiSession((0, utils_1.createAgentCoreSession)((0, policy_enforcement_wiring_1.applyPolicyGateSync)((0, workerSessionEnhancer_1.enhanceWorkerSessionOptions)(baseOpts, args.args.gentyContext), workerPolicyGate)));
             workerUnsub = (0, verbose_1.subscribeVerbosePiEvents)(workerSession, `worker:${args.action.effectId.slice(-8) /* last 8 chars of ULID for human-readable label */}`, args.args);
         }
     }
@@ -354,7 +360,7 @@ async function resolveExternalAction(args) {
                 workspace: args.args.workspace,
                 model: args.args.model,
             });
-            const nextSession = args.registerPiSession((0, utils_1.createAgentCoreSession)((0, workerSessionEnhancer_1.enhanceWorkerSessionOptions)(baseOpts, args.args.gentyContext)));
+            const nextSession = args.registerPiSession((0, utils_1.createAgentCoreSession)((0, policy_enforcement_wiring_1.applyPolicyGateSync)((0, workerSessionEnhancer_1.enhanceWorkerSessionOptions)(baseOpts, args.args.gentyContext), workerPolicyGate)));
             workerUnsub?.();
             workerUnsub = (0, verbose_1.subscribeVerbosePiEvents)(nextSession, `worker:${args.action.effectId.slice(-8) /* last 8 chars of ULID for human-readable label */}`, args.args);
             return nextSession;
@@ -363,6 +369,10 @@ async function resolveExternalAction(args) {
     try {
         const effectStartTime = Date.now();
         const streamingCallbacks = (0, utils_1.createStreamingProgressCallbacks)((0, utils_1.resolveOutputMode)(args.args.json, args.args.outputMode), taskHarness);
+        // Milestone D (§9.4 / AC-49) — wire the LOAD-BEARING MCP dispatcher policy gate onto
+        // the effect resolver. When the config anchor is pinned, a covered MCP dispatch without
+        // a valid CommandAuthorization is denied before `dispatcher.dispatch`; unpinned → no gate.
+        const { mcpPolicyGate } = await (0, policy_enforcement_wiring_1.resolveRunPolicyGates)(args.args.workspace);
         const effectResult = await (0, effects_1.resolveEffectWithRetry)(args.action, args.args.selectedHarnessName, {
             workspace: args.args.workspace,
             model: args.args.model,
@@ -376,6 +386,7 @@ async function resolveExternalAction(args) {
             maxIterations: args.args.maxIterations,
             verbose: args.args.verbose,
             outputMode: args.args.outputMode,
+            ...(mcpPolicyGate ? { mcp: { policyGate: mcpPolicyGate } } : {}),
         }, workerSession, args.args.discovered, args.args.rl, args.args.json, piSessionFactory, args.shutdownPiSession);
         (0, utils_1.emitProgress)({
             phase: "2",

package/dist/harness/internal/createRun/orchestration/externalPhaseHelpers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"externalPhaseHelpers.d.ts","sourceRoot":"","sources":["../../../../../src/harness/internal/createRun/orchestration/externalPhaseHelpers.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAQH,OAAO,EAEL,sBAAsB,EAIvB,MAAM,UAAU,CAAC;AAGlB,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,SAAS,CAAC;AAEzD,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAM1D;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAIpE;AAED,wBAAsB,2BAA2B,CAAC,IAAI,EAAE;IACtD,IAAI,EAAE,yBAAyB,CAAC;IAChC,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,iBAAiB,EAAE,CAAC,OAAO,EAAE,UAAU,CAAC,OAAO,sBAAsB,CAAC,KAAK,UAAU,CAAC,OAAO,sBAAsB,CAAC,CAAC;IACrH,iBAAiB,EAAE,CAAC,OAAO,EAAE,UAAU,CAAC,OAAO,sBAAsB,CAAC,GAAG,IAAI,GAAG,SAAS,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7G,GAAG,OAAO,CAAC,IAAI,CAAC,CA8ChB"}
+{"version":3,"file":"externalPhaseHelpers.d.ts","sourceRoot":"","sources":["../../../../../src/harness/internal/createRun/orchestration/externalPhaseHelpers.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAQH,OAAO,EAEL,sBAAsB,EAIvB,MAAM,UAAU,CAAC;AAIlB,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,SAAS,CAAC;AAEzD,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAM1D;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAIpE;AAED,wBAAsB,2BAA2B,CAAC,IAAI,EAAE;IACtD,IAAI,EAAE,yBAAyB,CAAC;IAChC,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,iBAAiB,EAAE,CAAC,OAAO,EAAE,UAAU,CAAC,OAAO,sBAAsB,CAAC,KAAK,UAAU,CAAC,OAAO,sBAAsB,CAAC,CAAC;IACrH,iBAAiB,EAAE,CAAC,OAAO,EAAE,UAAU,CAAC,OAAO,sBAAsB,CAAC,GAAG,IAAI,GAAG,SAAS,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7G,GAAG,OAAO,CAAC,IAAI,CAAC,CAgDhB"}

package/dist/harness/internal/createRun/orchestration/externalPhaseHelpers.js

@@ -46,6 +46,7 @@ const babysitter_sdk_1 = require("@a5c-ai/babysitter-sdk");
 const utils_1 = require("../utils");
 const verbose_1 = require("./verbose");
 const workerSessionEnhancer_1 = require("./workerSessionEnhancer");
+const policy_enforcement_wiring_1 = require("./policy-enforcement-wiring");
 function extractErrorMessage(error) {
     return error instanceof Error
         ? error.message
@@ -69,7 +70,9 @@ async function recoverExternalProcessError(args) {
         workspace: args.args.workspace,
         model: args.args.model,
     });
-    const recoverySession = args.registerPiSession((0, utils_1.createAgentCoreSession)((0, workerSessionEnhancer_1.enhanceWorkerSessionOptions)(baseOpts, args.args.gentyContext)));
+    // §9.4 / AC-49 — the recovery worker edits the process file (tool-executing), so it MUST
+    // carry the load-bearing policy tool gate.
+    const recoverySession = args.registerPiSession((0, utils_1.createAgentCoreSession)(await (0, policy_enforcement_wiring_1.withPolicyGate)((0, workerSessionEnhancer_1.enhanceWorkerSessionOptions)(baseOpts, args.args.gentyContext), args.args.workspace)));
     const recoveryUnsub = (0, verbose_1.subscribeVerbosePiEvents)(recoverySession, "recovery", args.args);
     try {
         const guidelines = (0, babysitter_sdk_1.composeProcessCreatePrompt)((0, babysitter_sdk_1.createPromptContextFromCatalog)('pi', { interactive: false }));

package/dist/harness/internal/createRun/orchestration/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/harness/internal/createRun/orchestration/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EACL,oCAAoC,EACpC,sBAAsB,EACtB,wBAAwB,EACxB,4BAA4B,GAC7B,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,wCAAwC,EACxC,0BAA0B,EAC1B,aAAa,EACb,sBAAsB,EACtB,iCAAiC,GAClC,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,6BAA6B,EAAE,MAAM,iBAAiB,CAAC;AAChE,OAAO,EAAE,6BAA6B,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AACzF,OAAO,EAAE,wBAAwB,EAAE,MAAM,WAAW,CAAC;AAErD,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,SAAS,CAAC;AAmBzD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,MAAM,EACX,OAAO,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GAC5C,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAgBzB;AAkBD,wBAAsB,qBAAqB,CACzC,IAAI,EAAE,yBAAyB,GAC9B,OAAO,CAAC,MAAM,CAAC,CAOjB;AAED,wBAAsB,mBAAmB,CAAC,IAAI,EAAE,yBAAyB,GAAG,OAAO,CAAC,MAAM,CAAC,CAwK1F;AAED,wBAAsB,oBAAoB,CACxC,MAAM,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE;YAAE,MAAM,CAAC,EAAE,MAAM,GAAG;gBAAE,YAAY,CAAC,EAAE,MAAM,EAAE,CAAA;aAAE,CAAA;SAAE,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAAC,KAAK,CAAC,EAAE;YAAE,OAAO,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,EACrN,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,KAAK,CAAC,EAAE,MAAM,EACd,aAAa,SAAe,GAC3B,OAAO,CAAC,IAAI,CAAC,CAwGf"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/harness/internal/createRun/orchestration/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EACL,oCAAoC,EACpC,sBAAsB,EACtB,wBAAwB,EACxB,4BAA4B,GAC7B,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,wCAAwC,EACxC,0BAA0B,EAC1B,aAAa,EACb,sBAAsB,EACtB,iCAAiC,GAClC,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,6BAA6B,EAAE,MAAM,iBAAiB,CAAC;AAChE,OAAO,EAAE,6BAA6B,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AACzF,OAAO,EAAE,wBAAwB,EAAE,MAAM,WAAW,CAAC;AAErD,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,SAAS,CAAC;AAmBzD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,MAAM,EACX,OAAO,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GAC5C,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAgBzB;AAkBD,wBAAsB,qBAAqB,CACzC,IAAI,EAAE,yBAAyB,GAC9B,OAAO,CAAC,MAAM,CAAC,CAOjB;AAED,wBAAsB,mBAAmB,CAAC,IAAI,EAAE,yBAAyB,GAAG,OAAO,CAAC,MAAM,CAAC,CAwK1F;AAED,wBAAsB,oBAAoB,CACxC,MAAM,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE;YAAE,MAAM,CAAC,EAAE,MAAM,GAAG;gBAAE,YAAY,CAAC,EAAE,MAAM,EAAE,CAAA;aAAE,CAAA;SAAE,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAAC,KAAK,CAAC,EAAE;YAAE,OAAO,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,EACrN,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,KAAK,CAAC,EAAE,MAAM,EACd,aAAa,SAAe,GAC3B,OAAO,CAAC,IAAI,CAAC,CA2Gf"}

package/dist/harness/internal/createRun/orchestration/index.js

@@ -298,6 +298,7 @@ async function resolveAndPostEffect(action, runDir, workspace, model, babysitter
     }
     const { execFileSync, execSync } = await Promise.resolve().then(() => __importStar(require("node:child_process")));
     const { createAgentCoreSession } = await Promise.resolve().then(() => __importStar(require("../utils")));
+    const { withPolicyGate } = await Promise.resolve().then(() => __importStar(require("./policy-enforcement-wiring")));
     const babysitterParts = babysitterBin.split(" ");
     const bCmd = babysitterParts[0];
     const bPrefix = babysitterParts.slice(1);
@@ -321,11 +322,13 @@ async function resolveAndPostEffect(action, runDir, workspace, model, babysitter
             : agentPrompt?.instructions?.join("\n")
                 ?? action.taskDef?.title
                 ?? "Execute this task";
-        const session = createAgentCoreSession({
+        // §9.4 / AC-49 — the delegated agent/skill session executes tools via session.prompt,
+        // so it MUST carry the load-bearing policy tool gate.
+        const session = createAgentCoreSession(await withPolicyGate({
             workspace,
             model,
             ephemeral: true,
-        });
+        }, workspace));
         try {
             const result = await session.prompt(prompt);
             if (result.success === false) {

package/dist/harness/internal/createRun/orchestration/internalPhase.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"internalPhase.d.ts","sourceRoot":"","sources":["../../../../../src/harness/internal/createRun/orchestration/internalPhase.ts"],"names":[],"mappings":"AAuCA,OAAO,KAAK,EAAiC,yBAAyB,EAAE,MAAM,SAAS,CAAC;AAQxF,wBAAsB,6BAA6B,CACjD,IAAI,EAAE,yBAAyB,GAC9B,OAAO,CAAC,MAAM,CAAC,CAyvBjB;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,uBAAuB,CACrC,eAAe,EAAE,MAAM,GAAG,SAAS,EACnC,SAAS,EAAE,MAAM,GAAG,SAAS,GAC5B,MAAM,CAgCR"}
+{"version":3,"file":"internalPhase.d.ts","sourceRoot":"","sources":["../../../../../src/harness/internal/createRun/orchestration/internalPhase.ts"],"names":[],"mappings":"AAuCA,OAAO,KAAK,EAAiC,yBAAyB,EAAE,MAAM,SAAS,CAAC;AASxF,wBAAsB,6BAA6B,CACjD,IAAI,EAAE,yBAAyB,GAC9B,OAAO,CAAC,MAAM,CAAC,CAgwBjB;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,uBAAuB,CACrC,eAAe,EAAE,MAAM,GAAG,SAAS,EACnC,SAAS,EAAE,MAAM,GAAG,SAAS,GAC5B,MAAM,CAgCR"}

package/dist/harness/internal/createRun/orchestration/internalPhase.js

@@ -47,6 +47,7 @@ const runState_1 = require("../planProcess/runState");
 const planProcess_1 = require("../planProcess");
 const resumeState_1 = require("../resumeState");
 const verbose_1 = require("./verbose");
+const policy_enforcement_wiring_1 = require("./policy-enforcement-wiring");
 const tasks_1 = require("../../../../tasks");
 const history_1 = require("../../../../session/history");
 const gentySessionContext_1 = require("../../../gentySessionContext");
@@ -377,6 +378,11 @@ async function runInternalOrchestrationPhase(args) {
             sessionCustomTools = [...mergedTools, ...extensionTools];
         }
     }
+    // Milestone D (§9.4 / AC-49 / AC-45) — wire the LOAD-BEARING policy tool gate onto the
+    // real orchestrator session. When the off-workspace config anchor is pinned this makes a
+    // covered action without a valid CommandAuthorization DENY before `definition.execute`
+    // runs; when not pinned it is undefined (back-compat, path unchanged).
+    const { policyToolGate } = await (0, policy_enforcement_wiring_1.resolveRunPolicyGates)(args.workspace);
     orchestrationSession = registerPiSession((0, utils_1.createAgentCoreSession)({
         workspace: args.workspace,
         model: gentyCtx?.modelSwitch.currentModel ?? args.model,
@@ -388,6 +394,7 @@ async function runInternalOrchestrationPhase(args) {
             : undefined,
         appendSystemPrompt,
         ephemeral: true,
+        ...(policyToolGate ? { policyToolGate } : {}),
         ...(gentyCtx?.instructions.systemPromptMode === 'replace' && gentyCtx.instructions.systemPrompt
             ? { systemPrompt: gentyCtx.instructions.systemPrompt }
             : {}),

package/dist/harness/internal/createRun/orchestration/policy-dispatch-gate.d.ts

@@ -0,0 +1,50 @@
+/**
+ * Milestone D — genty dispatcher / session enforcement seam (§9.4 / AC-23b / AC-49 /
+ * AC-34a).
+ *
+ * The genty MCP dispatcher seam (effects.ts `dispatcher.dispatch`) and the genty
+ * session tool-execution point (`session.ts` `definition.execute`) verify a
+ * CommandAuthorization BEFORE execution, using the in-process model attestation
+ * carried on `ToolExecutionContext`. This is a LOAD-BEARING, un-bypassable blocking
+ * gate for EVERY covered action: a covered action WITHOUT a valid authorization is
+ * denied before execution.
+ *
+ * The authorization is bound to the exact toolCallId (AC-34a) and the args about to
+ * run (argsHash recomputed here, AC-32). An MCP tool is not command-bearing, so its
+ * `commandHash` is the empty-argv sentinel supplied by the caller.
+ *
+ * OVERRIDING RULE: fail closed. Any verification / parse / binding error, or any
+ * thrown exception, is `{ allowed: false }`. No fallbacks.
+ */
+import { type CommandAuthorizationPayload, type TrustRoot } from '@a5c-ai/policy-adapter';
+import type { SignedEnvelope } from '@a5c-ai/genty-core/trust';
+export interface DispatchGateContext {
+    issuerRoots: TrustRoot[];
+    policyDocHash: string;
+    currentConfigEpoch: number;
+    minEpochFloor: number;
+    now: number;
+    toolName: string;
+    toolCallId: string;
+    /** Empty-argv sentinel for non-command-bearing MCP tools (AC-10 step 4). */
+    commandHash: string;
+    /** The exact args about to run — argsHash recomputed at this seam (TOCTOU, AC-32). */
+    args: unknown;
+    credentialScope: string;
+    /** Coverage predicate: is this dispatch policy-covered? */
+    isCovered: () => boolean;
+    /** Resolve the CommandAuthorization bound to this dispatch (or none). */
+    resolveAuthorization: () => SignedEnvelope<CommandAuthorizationPayload> | undefined;
+}
+export interface DispatchGateResult {
+    allowed: boolean;
+    reason?: string;
+}
+/**
+ * Verify authorization for a genty MCP dispatch / session tool-execution (AC-23b).
+ * An UNCOVERED dispatch is allowed (coverage/default-allow is decided upstream); a
+ * COVERED dispatch REQUIRES a valid CommandAuthorization bound to this exact
+ * toolCallId + argsHash + credentialScope, else it is denied before execution.
+ */
+export declare function verifyDispatchAuthorization(ctx: DispatchGateContext): DispatchGateResult;
+//# sourceMappingURL=policy-dispatch-gate.d.ts.map

package/dist/harness/internal/createRun/orchestration/policy-dispatch-gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-dispatch-gate.d.ts","sourceRoot":"","sources":["../../../../../src/harness/internal/createRun/orchestration/policy-dispatch-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EAGL,KAAK,2BAA2B,EAChC,KAAK,SAAS,EACf,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAE/D,MAAM,WAAW,mBAAmB;IAClC,WAAW,EAAE,SAAS,EAAE,CAAC;IACzB,aAAa,EAAE,MAAM,CAAC;IACtB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,aAAa,EAAE,MAAM,CAAC;IACtB,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,4EAA4E;IAC5E,WAAW,EAAE,MAAM,CAAC;IACpB,sFAAsF;IACtF,IAAI,EAAE,OAAO,CAAC;IACd,eAAe,EAAE,MAAM,CAAC;IACxB,2DAA2D;IAC3D,SAAS,EAAE,MAAM,OAAO,CAAC;IACzB,yEAAyE;IACzE,oBAAoB,EAAE,MAAM,cAAc,CAAC,2BAA2B,CAAC,GAAG,SAAS,CAAC;CACrF;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;;GAKG;AACH,wBAAgB,2BAA2B,CAAC,GAAG,EAAE,mBAAmB,GAAG,kBAAkB,CA8CxF"}

package/dist/harness/internal/createRun/orchestration/policy-dispatch-gate.js

@@ -0,0 +1,71 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.verifyDispatchAuthorization = verifyDispatchAuthorization;
+/**
+ * Milestone D — genty dispatcher / session enforcement seam (§9.4 / AC-23b / AC-49 /
+ * AC-34a).
+ *
+ * The genty MCP dispatcher seam (effects.ts `dispatcher.dispatch`) and the genty
+ * session tool-execution point (`session.ts` `definition.execute`) verify a
+ * CommandAuthorization BEFORE execution, using the in-process model attestation
+ * carried on `ToolExecutionContext`. This is a LOAD-BEARING, un-bypassable blocking
+ * gate for EVERY covered action: a covered action WITHOUT a valid authorization is
+ * denied before execution.
+ *
+ * The authorization is bound to the exact toolCallId (AC-34a) and the args about to
+ * run (argsHash recomputed here, AC-32). An MCP tool is not command-bearing, so its
+ * `commandHash` is the empty-argv sentinel supplied by the caller.
+ *
+ * OVERRIDING RULE: fail closed. Any verification / parse / binding error, or any
+ * thrown exception, is `{ allowed: false }`. No fallbacks.
+ */
+const policy_adapter_1 = require("@a5c-ai/policy-adapter");
+/**
+ * Verify authorization for a genty MCP dispatch / session tool-execution (AC-23b).
+ * An UNCOVERED dispatch is allowed (coverage/default-allow is decided upstream); a
+ * COVERED dispatch REQUIRES a valid CommandAuthorization bound to this exact
+ * toolCallId + argsHash + credentialScope, else it is denied before execution.
+ */
+function verifyDispatchAuthorization(ctx) {
+    try {
+        if (!ctx || typeof ctx !== 'object') {
+            return { allowed: false, reason: 'missing dispatch gate context' };
+        }
+        if (typeof ctx.isCovered !== 'function' || typeof ctx.resolveAuthorization !== 'function') {
+            return { allowed: false, reason: 'missing coverage/authorization resolvers' };
+        }
+        const covered = ctx.isCovered() === true;
+        if (!covered) {
+            // Uncovered dispatch: enforcement is decided by the upstream coverage/default
+            // logic; the seam itself does not block an uncovered action.
+            return { allowed: true };
+        }
+        const authorization = ctx.resolveAuthorization();
+        if (!authorization) {
+            return { allowed: false, reason: 'covered dispatch has no CommandAuthorization — deny' };
+        }
+        const argsHash = (0, policy_adapter_1.argsHash)(ctx.args);
+        const verification = (0, policy_adapter_1.verifyCommandAuthorization)(authorization, {
+            now: ctx.now,
+            toolName: ctx.toolName,
+            toolCallId: ctx.toolCallId,
+            commandHash: ctx.commandHash,
+            argsHash,
+            credentialScope: ctx.credentialScope,
+            policyDocHash: ctx.policyDocHash,
+            currentConfigEpoch: ctx.currentConfigEpoch,
+            minEpochFloor: ctx.minEpochFloor,
+            issuerRoots: ctx.issuerRoots,
+        });
+        if (!verification.valid) {
+            return { allowed: false, reason: `authorization verification failed: ${verification.reason}` };
+        }
+        return { allowed: true };
+    }
+    catch (err) {
+        return {
+            allowed: false,
+            reason: `exception during genty-seam verification: ${err?.message ?? String(err)}`,
+        };
+    }
+}

package/dist/harness/internal/createRun/orchestration/policy-enforcement-wiring.d.ts

@@ -0,0 +1,90 @@
+/**
+ * Milestone D — PRODUCTION wiring of the tool-layer gates into the genty run
+ * (§9.4 / AC-49 / AC-45).
+ *
+ * The genty session (`AgentCoreSessionOptions.policyToolGate`) and the genty MCP
+ * dispatcher (`McpRoutingOptions.policyGate`) are LOAD-BEARING blocking gates, but they
+ * were never populated in production — the `if (gate)` checks were dead. This helper
+ * builds the gate ONCE per workspace (via the policy-adapter's `loadPolicyEnforcementGate`,
+ * which verifies the pinned config manifest and constructs coverage + authorization
+ * resolution from the verified config) and hands the run its `policyToolGate` /
+ * `mcpPolicyGate` callbacks.
+ *
+ * POSTURE (mirrors Milestone C's loadTrustedBreakpointPolicy):
+ *   - anchor pinned (`POLICY_CONFIG_ROOT_FP` set) → enforcement ACTIVE by default; a
+ *     covered action without a valid CommandAuthorization is DENIED on the real path with
+ *     no extra caller wiring, and a config error denies every covered action (fail closed).
+ *   - anchor NOT pinned → `undefined` gate; the run paths are unchanged (back-compat).
+ *
+ * The gate is memoized per workspace so repeated session/effect construction within one
+ * run does not re-verify the manifest each time.
+ */
+import type { AuthorizationResolver } from '@a5c-ai/policy-adapter';
+import type { AgentCoreSessionOptions } from '@a5c-ai/genty-core';
+type SessionToolGate = (ctx: {
+    toolName: string;
+    toolCallId: string;
+    input: unknown;
+    modelId?: string;
+}) => {
+    allowed: boolean;
+    reason?: string;
+};
+type McpPolicyGate = (ctx: {
+    toolName: string;
+    input: unknown;
+    runId?: string;
+    sessionId?: string;
+}) => {
+    allowed: boolean;
+    reason?: string;
+};
+export interface RunPolicyGates {
+    /** The genty session tool-execution gate, or undefined when enforcement is inactive. */
+    policyToolGate?: SessionToolGate;
+    /** The genty MCP dispatcher gate, or undefined when enforcement is inactive. */
+    mcpPolicyGate?: McpPolicyGate;
+}
+/**
+ * Register the run's authorization-store resolver for a workspace so the load-bearing gates
+ * can ALLOW a legitimately-authorized covered action (AC-9 / AC-49). Clears the per-workspace
+ * gate memo so the next `resolveRunPolicyGates` rebuilds the gate WITH the resolver threaded.
+ */
+export declare function registerRunAuthorizationResolver(workspace: string | undefined, resolveAuthorization: AuthorizationResolver): void;
+/** Test-only / end-of-run: drop the registered resolver for a workspace. */
+export declare function unregisterRunAuthorizationResolver(workspace: string | undefined): void;
+/**
+ * Resolve the run's policy gates for a workspace. Memoized per workspace. The optional
+ * `resolveAuthorization` is the run's authorization store (the orchestrator issues a
+ * CommandAuthorization when evidence is present; with no store a covered action DENIES).
+ */
+export declare function resolveRunPolicyGates(workspace: string | undefined, resolveAuthorization?: AuthorizationResolver): Promise<RunPolicyGates>;
+/** Test-only: clear the per-workspace memo so a test can re-resolve with a fresh env. */
+export declare function __resetRunPolicyGatesCache(): void;
+/**
+ * The subset of `AgentCoreSessionOptions` the gate helpers touch. Kept as an alias of the
+ * real type so call sites get correct contextual typing (no literal widening) and every
+ * tool-executing `createAgentCoreSession` construction can route through one funnel.
+ */
+export type PolicyGatedSessionOptions = AgentCoreSessionOptions;
+/**
+ * CENTRALIZED session-gate attachment (§9.4 / AC-49). EVERY tool-executing
+ * `createAgentCoreSession` construction MUST route its options through this helper so no
+ * site can silently omit the load-bearing `policyToolGate`. It resolves the run's gate for
+ * the session's workspace (memoized) and attaches `policyToolGate` when enforcement is
+ * active; when the config anchor is not pinned the options are returned unchanged
+ * (back-compat). Idempotent — re-applying to already-gated options is a no-op.
+ *
+ * `workspaceOverride` lets a caller pin the run's workspace when the session options carry
+ * a different/absent `workspace` (e.g. worker sessions whose workspace is the run root).
+ */
+export declare function withPolicyGate(options: AgentCoreSessionOptions, workspaceOverride?: string, resolveAuthorization?: AuthorizationResolver): Promise<AgentCoreSessionOptions>;
+/**
+ * Synchronous applier for a PRE-RESOLVED gate. Sites that construct sessions inside a
+ * synchronous factory (e.g. the retry `piSessionFactory`) resolve the run's gate once
+ * (async) up front, then apply it synchronously to every session they build so no
+ * tool-executing session omits the gate. Idempotent.
+ */
+export declare function applyPolicyGateSync(options: AgentCoreSessionOptions, policyToolGate: SessionToolGate | undefined): AgentCoreSessionOptions;
+export {};
+//# sourceMappingURL=policy-enforcement-wiring.d.ts.map

package/dist/harness/internal/createRun/orchestration/policy-enforcement-wiring.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-enforcement-wiring.d.ts","sourceRoot":"","sources":["../../../../../src/harness/internal/createRun/orchestration/policy-enforcement-wiring.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,KAAK,EAEV,qBAAqB,EACtB,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAElE,KAAK,eAAe,GAAG,CAAC,GAAG,EAAE;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,OAAO,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,KAAK;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAE5C,KAAK,aAAa,GAAG,CAAC,GAAG,EAAE;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,KAAK;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAE5C,MAAM,WAAW,cAAc;IAC7B,wFAAwF;IACxF,cAAc,CAAC,EAAE,eAAe,CAAC;IACjC,gFAAgF;IAChF,aAAa,CAAC,EAAE,aAAa,CAAC;CAC/B;AAiBD;;;;GAIG;AACH,wBAAgB,gCAAgC,CAC9C,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,oBAAoB,EAAE,qBAAqB,GAC1C,IAAI,CAMN;AAED,4EAA4E;AAC5E,wBAAgB,kCAAkC,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAItF;AAcD;;;;GAIG;AACH,wBAAgB,qBAAqB,CACnC,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,oBAAoB,CAAC,EAAE,qBAAqB,GAC3C,OAAO,CAAC,cAAc,CAAC,CAkEzB;AAED,yFAAyF;AACzF,wBAAgB,0BAA0B,IAAI,IAAI,CAEjD;AAED;;;;GAIG;AACH,MAAM,MAAM,yBAAyB,GAAG,uBAAuB,CAAC;AAEhE;;;;;;;;;;GAUG;AACH,wBAAsB,cAAc,CAClC,OAAO,EAAE,uBAAuB,EAChC,iBAAiB,CAAC,EAAE,MAAM,EAC1B,oBAAoB,CAAC,EAAE,qBAAqB,GAC3C,OAAO,CAAC,uBAAuB,CAAC,CAMlC;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,uBAAuB,EAChC,cAAc,EAAE,eAAe,GAAG,SAAS,GAC1C,uBAAuB,CAIzB"}

package/dist/harness/internal/createRun/orchestration/policy-enforcement-wiring.js

@@ -0,0 +1,185 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerRunAuthorizationResolver = registerRunAuthorizationResolver;
+exports.unregisterRunAuthorizationResolver = unregisterRunAuthorizationResolver;
+exports.resolveRunPolicyGates = resolveRunPolicyGates;
+exports.__resetRunPolicyGatesCache = __resetRunPolicyGatesCache;
+exports.withPolicyGate = withPolicyGate;
+exports.applyPolicyGateSync = applyPolicyGateSync;
+const cache = new Map();
+/**
+ * Milestone E — the run's authorization store resolver, registered per workspace (the ALLOW
+ * path, §5 / AC-9 / AC-49). The orchestrator creates a run-level `AuthorizationStore` (from
+ * `@a5c-ai/policy-adapter`), populates it when a policy is satisfied from the run's trusted
+ * artifacts, and registers its `resolver` here keyed by workspace. `resolveRunPolicyGates`
+ * then threads that resolver into `loadPolicyEnforcementGate` so a legitimately-authorized
+ * covered action is ALLOWED — WITHOUT every session/spawn call site having to pass the
+ * resolver explicitly. With no store registered (or one that resolves none), a covered action
+ * DENIES (unchanged fail-closed Milestone-D posture). A resolver registered for a workspace
+ * MUST be re-applied to that workspace's cached gate, so registration clears the memo.
+ */
+const authResolverByWorkspace = new Map();
+/**
+ * Register the run's authorization-store resolver for a workspace so the load-bearing gates
+ * can ALLOW a legitimately-authorized covered action (AC-9 / AC-49). Clears the per-workspace
+ * gate memo so the next `resolveRunPolicyGates` rebuilds the gate WITH the resolver threaded.
+ */
+function registerRunAuthorizationResolver(workspace, resolveAuthorization) {
+    const key = workspace ?? '';
+    authResolverByWorkspace.set(key, resolveAuthorization);
+    // The gate is memoized per workspace; a newly-registered resolver must take effect, so drop
+    // the cached (resolver-less) gate for this workspace.
+    cache.delete(key);
+}
+/** Test-only / end-of-run: drop the registered resolver for a workspace. */
+function unregisterRunAuthorizationResolver(workspace) {
+    const key = workspace ?? '';
+    authResolverByWorkspace.delete(key);
+    cache.delete(key);
+}
+/**
+ * Build a DENY-ALL pair of gates. Used only when the config anchor is pinned (enforcement
+ * requested) but the policy adapter could not be loaded / reported inactive — a state that
+ * MUST fail closed rather than silently disable enforcement. Both gates deny every call so
+ * no covered action can slip through an unloadable adapter. Mirrors the adapter-side
+ * `makeConfigErrorEvaluator` posture (a config/adapter error denies).
+ */
+function denyAllGates(reason) {
+    const deny = () => ({ allowed: false, reason: `policy enforcement unavailable (fail closed): ${reason}` });
+    return { policyToolGate: deny, mcpPolicyGate: deny };
+}
+/**
+ * Resolve the run's policy gates for a workspace. Memoized per workspace. The optional
+ * `resolveAuthorization` is the run's authorization store (the orchestrator issues a
+ * CommandAuthorization when evidence is present; with no store a covered action DENIES).
+ */
+function resolveRunPolicyGates(workspace, resolveAuthorization) {
+    const key = workspace ?? '';
+    const existing = cache.get(key);
+    if (existing)
+        return existing;
+    // ALLOW path (AC-9 / AC-49): if the caller did not pass a resolver explicitly, fall back to
+    // the run's registered authorization-store resolver for this workspace (registered by the
+    // orchestrator). This threads the ALLOW path into EVERY session/spawn call site without each
+    // one passing the resolver. With no registered resolver, `undefined` ⇒ deny (fail closed).
+    const effectiveResolveAuthorization = resolveAuthorization ?? authResolverByWorkspace.get(key);
+    // Whether the off-workspace config anchor is pinned. When it IS pinned, enforcement is
+    // meant to be active and ANY failure to load the adapter is fail-closed (deny-all covered
+    // actions), NEVER a silent disable. When it is NOT pinned, we are in the documented
+    // back-compat posture and the absence of a gate leaves the run unchanged.
+    const anchorPinned = typeof process.env.POLICY_CONFIG_ROOT_FP === 'string'
+        && process.env.POLICY_CONFIG_ROOT_FP.length > 0;
+    // Fast path (back-compat): with NO anchor pinned, enforcement is inactive by design. Skip
+    // the dynamic policy-adapter import entirely — no gate is constructed and the run paths are
+    // unchanged. This keeps the un-enforced default free of any adapter load cost. (The adapter
+    // itself returns `enforcementActive: false` in this case; short-circuiting here is a pure
+    // optimization that does not change the fail-closed semantics — those apply only when the
+    // anchor IS pinned, handled below.)
+    if (!anchorPinned) {
+        const empty = Promise.resolve({});
+        cache.set(key, empty);
+        return empty;
+    }
+    const built = (async () => {
+        try {
+            // Dynamic import keeps the policy-adapter (ESM) out of any CJS build graph, matching
+            // the SDK's proven-verification.ts / trusted-breakpoint-policy.ts pattern.
+            const mod = await Promise.resolve().then(() => __importStar(require('@a5c-ai/policy-adapter')));
+            const result = await mod.loadPolicyEnforcementGate(workspace ?? process.cwd(), effectiveResolveAuthorization);
+            if (result.enforcementActive !== true) {
+                // Adapter reports inactive. If the anchor is pinned this is a contradiction (the
+                // adapter fails closed when pinned), so install a deny-all gate; otherwise no gate.
+                if (anchorPinned) {
+                    return denyAllGates('policy adapter reported enforcement inactive while anchor is pinned');
+                }
+                return {};
+            }
+            const gate = result;
+            return {
+                policyToolGate: gate.policyToolGate,
+                mcpPolicyGate: gate.mcpPolicyGate,
+            };
+        }
+        catch (err) {
+            // The policy-adapter failing to LOAD is NOT a silent pass when the anchor is pinned:
+            // enforcement was requested, so we cannot silently disable it. Install a deny-all gate
+            // for covered actions (fail closed). Only when the anchor is UNPINNED (back-compat) do
+            // we return no gate — enforcement was never requested.
+            if (anchorPinned) {
+                return denyAllGates(`policy adapter failed to load while anchor is pinned: ${err?.message ?? String(err)}`);
+            }
+            return {};
+        }
+    })();
+    cache.set(key, built);
+    return built;
+}
+/** Test-only: clear the per-workspace memo so a test can re-resolve with a fresh env. */
+function __resetRunPolicyGatesCache() {
+    cache.clear();
+}
+/**
+ * CENTRALIZED session-gate attachment (§9.4 / AC-49). EVERY tool-executing
+ * `createAgentCoreSession` construction MUST route its options through this helper so no
+ * site can silently omit the load-bearing `policyToolGate`. It resolves the run's gate for
+ * the session's workspace (memoized) and attaches `policyToolGate` when enforcement is
+ * active; when the config anchor is not pinned the options are returned unchanged
+ * (back-compat). Idempotent — re-applying to already-gated options is a no-op.
+ *
+ * `workspaceOverride` lets a caller pin the run's workspace when the session options carry
+ * a different/absent `workspace` (e.g. worker sessions whose workspace is the run root).
+ */
+async function withPolicyGate(options, workspaceOverride, resolveAuthorization) {
+    // Already gated (e.g. the orchestrator session set it explicitly) — do not re-resolve.
+    if (options.policyToolGate)
+        return options;
+    const workspace = workspaceOverride ?? options.workspace;
+    const { policyToolGate } = await resolveRunPolicyGates(workspace, resolveAuthorization);
+    return applyPolicyGateSync(options, policyToolGate);
+}
+/**
+ * Synchronous applier for a PRE-RESOLVED gate. Sites that construct sessions inside a
+ * synchronous factory (e.g. the retry `piSessionFactory`) resolve the run's gate once
+ * (async) up front, then apply it synchronously to every session they build so no
+ * tool-executing session omits the gate. Idempotent.
+ */
+function applyPolicyGateSync(options, policyToolGate) {
+    if (options.policyToolGate)
+        return options;
+    if (!policyToolGate)
+        return options;
+    return { ...options, policyToolGate };
+}

package/dist/harness/internal/createRun/planProcess/delegation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"delegation.d.ts","sourceRoot":"","sources":["../../../../../src/harness/internal/createRun/planProcess/delegation.ts"],"names":[],"mappings":"AAGA,OAAO,EAA+B,KAAK,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAE5F,OAAO,EAIL,KAAK,uBAAuB,EAC7B,MAAM,UAAU,CAAC;AAgElB,wBAAsB,uBAAuB,CAAC,IAAI,EAAE;IAClD,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,uBAAuB,CAAC,WAAW,CAAC,CAAC;IACjD,aAAa,CAAC,EAAE,uBAAuB,CAAC,eAAe,CAAC,GAAG,MAAM,CAAC;IAClE,WAAW,CAAC,EAAE,uBAAuB,CAAC,aAAa,CAAC,CAAC;IACrD,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,WAAW,CAAC,EAAE,oBAAoB,EAAE,CAAC;IACrC;;;;;;;OAOG;IACH,YAAY,CAAC,EAAE,uBAAuB,CAAC,cAAc,CAAC,CAAC;CACxD,GAAG,OAAO,CAAC;IACV,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC,CAsFD;AAED,wBAAgB,eAAe,CAC7B,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EAAE,EACd,GAAG,CAAC,EAAE,MAAM,GACX,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC,CAyB/D"}
+{"version":3,"file":"delegation.d.ts","sourceRoot":"","sources":["../../../../../src/harness/internal/createRun/planProcess/delegation.ts"],"names":[],"mappings":"AAGA,OAAO,EAA+B,KAAK,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAE5F,OAAO,EAIL,KAAK,uBAAuB,EAC7B,MAAM,UAAU,CAAC;AAiElB,wBAAsB,uBAAuB,CAAC,IAAI,EAAE;IAClD,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,uBAAuB,CAAC,WAAW,CAAC,CAAC;IACjD,aAAa,CAAC,EAAE,uBAAuB,CAAC,eAAe,CAAC,GAAG,MAAM,CAAC;IAClE,WAAW,CAAC,EAAE,uBAAuB,CAAC,aAAa,CAAC,CAAC;IACrD,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,WAAW,CAAC,EAAE,oBAAoB,EAAE,CAAC;IACrC;;;;;;;OAOG;IACH,YAAY,CAAC,EAAE,uBAAuB,CAAC,cAAc,CAAC,CAAC;CACxD,GAAG,OAAO,CAAC;IACV,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC,CAwFD;AAED,wBAAgB,eAAe,CAC7B,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EAAE,EACd,GAAG,CAAC,EAAE,MAAM,GACX,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC,CAyB/D"}

package/dist/harness/internal/createRun/planProcess/delegation.js

@@ -42,6 +42,7 @@ const genty_core_1 = require("@a5c-ai/genty-core");
 const invoker_1 = require("../../../invoker");
 const utils_1 = require("../utils");
 const builtInHarness_1 = require("../../../builtInHarness");
+const policy_enforcement_wiring_1 = require("../orchestration/policy-enforcement-wiring");
 function resolveSkillFileCandidates(workspace, skillRef) {
     const trimmed = skillRef.trim();
     if (!trimmed) {
@@ -125,7 +126,9 @@ async function runDelegatedHarnessTask(args) {
                 ...(0, genty_core_1.createCodingToolDefinitions)({ workspace, interactive: false }, effectiveToolsMode === "readonly" ? "readonly" : "coding"),
                 ...(args.customTools ?? []),
             ];
-        const session = (0, utils_1.createAgentCoreSession)({
+        // §9.4 / AC-49 — the delegated worker executes coding tools, so it MUST carry the
+        // load-bearing policy tool gate (unpinned anchor → undefined, path unchanged).
+        const session = (0, utils_1.createAgentCoreSession)(await (0, policy_enforcement_wiring_1.withPolicyGate)({
             workspace,
             model: args.model,
             timeout: args.timeout,
@@ -148,7 +151,7 @@ async function runDelegatedHarnessTask(args) {
                 ? { thinkingLevel: args.thinkingLevel }
                 : {}),
             ...(skillInstructions.length > 0 ? { appendSystemPrompt: [skillInstructions.join("\n\n---\n\n")] } : {}),
-        });
+        }, workspace));
         try {
             await session.initialize();
             const result = await (0, utils_1.promptPiWithRetry)({

package/dist/harness/internal/createRun/planProcess/phase.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"phase.d.ts","sourceRoot":"","sources":["../../../../../src/harness/internal/createRun/planProcess/phase.ts"],"names":[],"mappings":"AAQA,OAAO,EAaL,KAAK,uBAAuB,EAG7B,MAAM,UAAU,CAAC;AAqBlB,YAAY,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC;AAE5D,wBAAsB,mBAAmB,CAAC,IAAI,EAAE,OAAO,cAAc,EAAE,uBAAuB,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAiZhI;AAED,kDAAkD;AAClD,eAAO,MAAM,yBAAyB,4BAAsB,CAAC"}
+{"version":3,"file":"phase.d.ts","sourceRoot":"","sources":["../../../../../src/harness/internal/createRun/planProcess/phase.ts"],"names":[],"mappings":"AAQA,OAAO,EAaL,KAAK,uBAAuB,EAG7B,MAAM,UAAU,CAAC;AAsBlB,YAAY,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC;AAE5D,wBAAsB,mBAAmB,CAAC,IAAI,EAAE,OAAO,cAAc,EAAE,uBAAuB,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAmZhI;AAED,kDAAkD;AAClD,eAAO,MAAM,yBAAyB,4BAAsB,CAAC"}

package/dist/harness/internal/createRun/planProcess/phase.js

@@ -46,6 +46,7 @@ const phaseHelpers_1 = require("./phaseHelpers");
 const runState_1 = require("./runState");
 const understandIntent_1 = require("./understandIntent");
 const validation_1 = require("./validation");
+const policy_enforcement_wiring_1 = require("../orchestration/policy-enforcement-wiring");
 async function runPlanProcessPhase(args) {
     const state = {};
     const phaseOutputs = [];
@@ -117,7 +118,9 @@ async function runPlanProcessPhase(args) {
     const planProcessToolsMode = workspaceAssessment.kind === "empty"
         ? "default"
         : "coding";
-    sessionRef.current = (0, utils_1.createAgentCoreSession)({
+    // §9.4 / AC-49 — the plan-process session executes file/bash tools, so it MUST carry the
+    // load-bearing policy tool gate (unpinned anchor → undefined, path unchanged).
+    sessionRef.current = (0, utils_1.createAgentCoreSession)(await (0, policy_enforcement_wiring_1.withPolicyGate)({
         workspace: args.workspace,
         model: args.model,
         backend: resolvedBackend,
@@ -128,7 +131,7 @@ async function runPlanProcessPhase(args) {
         systemPrompt: processDefinitionSystemPrompt,
         isolated: true,
         ephemeral: true,
-    });
+    }, args.workspace));
     try {
         await sessionRef.current.initialize();
         let unsubscribe = null;

package/dist/harness/types.d.ts

@@ -157,6 +157,22 @@ export interface AgentCoreSessionOptions {
     outputSchemaName?: string;
     /** Provider strictness flag for APIs that support schema strictness. */
     outputSchemaStrict?: boolean;
+    /**
+     * Milestone D (§9.4 / AC-49) — the LOAD-BEARING genty session tool-execution gate. When
+     * present it is consulted BEFORE `definition.execute` for each tool call; a covered action
+     * without a valid CommandAuthorization is denied before execution. Populated by the
+     * centralized `withPolicyGate` / `applyPolicyGateSync` wiring; undefined when the config
+     * anchor is not pinned (path unchanged).
+     */
+    policyToolGate?: (context: {
+        toolName: string;
+        toolCallId: string;
+        input: unknown;
+        modelId?: string;
+    }) => {
+        allowed: boolean;
+        reason?: string;
+    };
 }
 /**
  * Event emitted by an agent-core session during prompt execution.

package/dist/harness/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/harness/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC/D,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAC/D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAM9C,uDAAuD;AACvD,oBAAY,iBAAiB;IAC3B,kEAAkE;IAClE,YAAY,iBAAiB;IAC7B,2DAA2D;IAC3D,cAAc,oBAAoB;IAClC,wDAAwD;IACxD,QAAQ,cAAc;IACtB,8DAA8D;IAC9D,GAAG,QAAQ;IACX,iEAAiE;IACjE,cAAc,oBAAoB;IAClC,kEAAkE;IAClE,iBAAiB,uBAAuB;IACxC,+DAA+D;IAC/D,iBAAiB,uBAAuB;IACxC,sEAAsE;IACtE,oBAAoB,2BAA2B;CAChD;AAMD;;;;;;;GAOG;AACH,MAAM,WAAW,sBAAsB;IACrC,wDAAwD;IACxD,IAAI,EAAE,MAAM,CAAC;IACb,sDAAsD;IACtD,SAAS,EAAE,OAAO,CAAC;IACnB,2DAA2D;IAC3D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,oDAAoD;IACpD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,4CAA4C;IAC5C,UAAU,EAAE,MAAM,CAAC;IACnB,gEAAgE;IAChE,WAAW,EAAE,OAAO,CAAC;IACrB,+CAA+C;IAC/C,YAAY,EAAE,iBAAiB,EAAE,CAAC;IAClC,6DAA6D;IAC7D,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,6EAA6E;AAC7E,MAAM,WAAW,mBAAmB;IAClC,wDAAwD;IACxD,IAAI,EAAE,MAAM,CAAC;IACb,iEAAiE;IACjE,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,8DAA8D;IAC9D,YAAY,EAAE,iBAAiB,EAAE,CAAC;CACnC;AAUD,kEAAkE;AAClE,MAAM,MAAM,uBAAuB,GAAG,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;AAE9D,sEAAsE;AACtE,MAAM,MAAM,qBAAqB,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,GAAG,QAAQ,KAAK,IAAI,CAAC;AAExF,+EAA+E;AAC/E,MAAM,WAAW,sBAAsB;IACrC,mDAAmD;IACnD,QAAQ,CAAC,EAAE,uBAAuB,CAAC;IACnC,mDAAmD;IACnD,QAAQ,CAAC,EAAE,uBAAuB,CAAC;IACnC,mFAAmF;IACnF,MAAM,CAAC,EAAE,qBAAqB,CAAC;CAChC;AAED,2DAA2D;AAC3D,MAAM,WAAW,oBAAoB;IACnC,yCAAyC;IACzC,MAAM,EAAE,MAAM,CAAC;IACf,4CAA4C;IAC5C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,yCAAyC;IACzC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,8CAA8C;IAC9C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,iDAAiD;IACjD,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,oEAAoE;IACpE,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,6DAA6D;IAC7D,SAAS,CAAC,EAAE,sBAAsB,CAAC;IACnC,uEAAuE;IACvE,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,yHAAyH;IACzH,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,gEAAgE;AAChE,MAAM,WAAW,mBAAmB;IAClC,sDAAsD;IACtD,OAAO,EAAE,OAAO,CAAC;IACjB,kDAAkD;IAClD,MAAM,EAAE,MAAM,CAAC;IACf,yBAAyB;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,6DAA6D;IAC7D,QAAQ,EAAE,MAAM,CAAC;IACjB,4CAA4C;IAC5C,OAAO,EAAE,MAAM,CAAC;IAChB,8DAA8D;IAC9D,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,wDAAwD;IACxD,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAMD,oEAAoE;AACpE,MAAM,WAAW,uBAAuB;IACtC,yCAAyC;IACzC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,wDAAwD;IACxD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,kEAAkE;IAClE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,oCAAoC;IACpC,aAAa,CAAC,EAAE,SAAS,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,OAAO,CAAC;IAChE,iDAAiD;IACjD,SAAS,CAAC,EAAE,SAAS,GAAG,QAAQ,GAAG,UAAU,CAAC;IAC9C,4DAA4D;IAC5D,WAAW,CAAC,EAAE,oBAAoB,EAAE,CAAC;IACrC,sFAAsF;IACtF,SAAS,CAAC,EAAE,wBAAwB,CAAC;IACrC,8DAA8D;IAC9D,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gDAAgD;IAChD,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC9B,gFAAgF;IAChF,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,4EAA4E;IAC5E,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,iJAAiJ;IACjJ,WAAW,CAAC,EAAE,MAAM,GAAG,QAAQ,GAAG,OAAO,CAAC;IAC1C,wEAAwE;IACxE,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,+DAA+D;IAC/D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,+EAA+E;IAC/E,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,GAAG,aAAa,GAAG,aAAa,CAAC;IACtD,yEAAyE;IACzE,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,oCAAoC;IACpC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,wEAAwE;IACxE,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,uDAAuD;AACvD,MAAM,WAAW,qBAAqB;IACpC,qDAAqD;IACrD,MAAM,EAAE,MAAM,CAAC;IACf,2CAA2C;IAC3C,QAAQ,EAAE,MAAM,CAAC;IACjB,kDAAkD;IAClD,OAAO,EAAE,OAAO,CAAC;IACjB,4CAA4C;IAC5C,QAAQ,EAAE,MAAM,CAAC;IACjB,qDAAqD;IACrD,KAAK,CAAC,EAAE;QACN,WAAW,EAAE,MAAM,CAAC;QACpB,YAAY,EAAE,MAAM,CAAC;QACrB,WAAW,EAAE,MAAM,CAAC;QACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,CAAC;CACH;AAMD,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,OAAO,CAAC;CACf;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,yEAAyE;IACzE,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAMD,MAAM,WAAW,eAAe;IAC9B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,OAAO,CAAC;IACd,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,qBAAqB;IACpC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,OAAO,CAAC;IACd,MAAM,EAAE,OAAO,CAAC;IAChB,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAMD,MAAM,WAAW,cAAc;IAC7B,8CAA8C;IAC9C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,iEAAiE;IACjE,QAAQ,IAAI,OAAO,CAAC;IAEpB,6DAA6D;IAC7D,gBAAgB,CAAC,MAAM,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,MAAM,GAAG,SAAS,CAAC;IAErE,8CAA8C;IAC9C,eAAe,CAAC,IAAI,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,MAAM,GAAG,SAAS,CAAC;IAEtF,0CAA0C;IAC1C,iBAAiB,CAAC,IAAI,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,MAAM,GAAG,SAAS,CAAC;IAErE;;;;OAIG;IACH,qBAAqB,CAAC,IAAI,OAAO,CAAC;IAElC,iFAAiF;IACjF,uBAAuB,CAAC,IAAI,MAAM,CAAC;IAEnC,4EAA4E;IAC5E,gBAAgB,CAAC,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;IAE7C,kFAAkF;IAClF,yBAAyB,CAAC,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC;IAErD,2DAA2D;IAC3D,WAAW,CAAC,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAElE,qDAAqD;IACrD,cAAc,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAEvD,kEAAkE;IAClE,sBAAsB,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAE/D,2DAA2D;IAC3D,sBAAsB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IAExD,uEAAuE;IACvE,cAAc,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IAEpC,kEAAkE;IAClE,UAAU,CAAC,IAAI,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAE7E,2DAA2D;IAC3D,eAAe,CAAC,IAAI,iBAAiB,EAAE,CAAC;IAExC,sCAAsC;IACtC,cAAc,CAAC,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAE/E,2FAA2F;IAC3F,aAAa,CAAC,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAE9E;;;OAGG;IACH,gBAAgB,CAAC,CAAC,IAAI,CAAC,EAAE;QAAE,WAAW,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;KAAE,GAAG,aAAa,CAAC;CAChF"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/harness/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC/D,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAC/D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAM9C,uDAAuD;AACvD,oBAAY,iBAAiB;IAC3B,kEAAkE;IAClE,YAAY,iBAAiB;IAC7B,2DAA2D;IAC3D,cAAc,oBAAoB;IAClC,wDAAwD;IACxD,QAAQ,cAAc;IACtB,8DAA8D;IAC9D,GAAG,QAAQ;IACX,iEAAiE;IACjE,cAAc,oBAAoB;IAClC,kEAAkE;IAClE,iBAAiB,uBAAuB;IACxC,+DAA+D;IAC/D,iBAAiB,uBAAuB;IACxC,sEAAsE;IACtE,oBAAoB,2BAA2B;CAChD;AAMD;;;;;;;GAOG;AACH,MAAM,WAAW,sBAAsB;IACrC,wDAAwD;IACxD,IAAI,EAAE,MAAM,CAAC;IACb,sDAAsD;IACtD,SAAS,EAAE,OAAO,CAAC;IACnB,2DAA2D;IAC3D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,oDAAoD;IACpD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,4CAA4C;IAC5C,UAAU,EAAE,MAAM,CAAC;IACnB,gEAAgE;IAChE,WAAW,EAAE,OAAO,CAAC;IACrB,+CAA+C;IAC/C,YAAY,EAAE,iBAAiB,EAAE,CAAC;IAClC,6DAA6D;IAC7D,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,6EAA6E;AAC7E,MAAM,WAAW,mBAAmB;IAClC,wDAAwD;IACxD,IAAI,EAAE,MAAM,CAAC;IACb,iEAAiE;IACjE,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,8DAA8D;IAC9D,YAAY,EAAE,iBAAiB,EAAE,CAAC;CACnC;AAUD,kEAAkE;AAClE,MAAM,MAAM,uBAAuB,GAAG,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;AAE9D,sEAAsE;AACtE,MAAM,MAAM,qBAAqB,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,GAAG,QAAQ,KAAK,IAAI,CAAC;AAExF,+EAA+E;AAC/E,MAAM,WAAW,sBAAsB;IACrC,mDAAmD;IACnD,QAAQ,CAAC,EAAE,uBAAuB,CAAC;IACnC,mDAAmD;IACnD,QAAQ,CAAC,EAAE,uBAAuB,CAAC;IACnC,mFAAmF;IACnF,MAAM,CAAC,EAAE,qBAAqB,CAAC;CAChC;AAED,2DAA2D;AAC3D,MAAM,WAAW,oBAAoB;IACnC,yCAAyC;IACzC,MAAM,EAAE,MAAM,CAAC;IACf,4CAA4C;IAC5C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,yCAAyC;IACzC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,8CAA8C;IAC9C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,iDAAiD;IACjD,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,oEAAoE;IACpE,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,6DAA6D;IAC7D,SAAS,CAAC,EAAE,sBAAsB,CAAC;IACnC,uEAAuE;IACvE,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,yHAAyH;IACzH,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,gEAAgE;AAChE,MAAM,WAAW,mBAAmB;IAClC,sDAAsD;IACtD,OAAO,EAAE,OAAO,CAAC;IACjB,kDAAkD;IAClD,MAAM,EAAE,MAAM,CAAC;IACf,yBAAyB;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,6DAA6D;IAC7D,QAAQ,EAAE,MAAM,CAAC;IACjB,4CAA4C;IAC5C,OAAO,EAAE,MAAM,CAAC;IAChB,8DAA8D;IAC9D,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,wDAAwD;IACxD,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAMD,oEAAoE;AACpE,MAAM,WAAW,uBAAuB;IACtC,yCAAyC;IACzC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,wDAAwD;IACxD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,kEAAkE;IAClE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,oCAAoC;IACpC,aAAa,CAAC,EAAE,SAAS,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,OAAO,CAAC;IAChE,iDAAiD;IACjD,SAAS,CAAC,EAAE,SAAS,GAAG,QAAQ,GAAG,UAAU,CAAC;IAC9C,4DAA4D;IAC5D,WAAW,CAAC,EAAE,oBAAoB,EAAE,CAAC;IACrC,sFAAsF;IACtF,SAAS,CAAC,EAAE,wBAAwB,CAAC;IACrC,8DAA8D;IAC9D,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gDAAgD;IAChD,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC9B,gFAAgF;IAChF,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,4EAA4E;IAC5E,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,iJAAiJ;IACjJ,WAAW,CAAC,EAAE,MAAM,GAAG,QAAQ,GAAG,OAAO,CAAC;IAC1C,wEAAwE;IACxE,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,+DAA+D;IAC/D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,+EAA+E;IAC/E,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,GAAG,aAAa,GAAG,aAAa,CAAC;IACtD,yEAAyE;IACzE,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,oCAAoC;IACpC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,wEAAwE;IACxE,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B;;;;;;OAMG;IACH,cAAc,CAAC,EAAE,CAAC,OAAO,EAAE;QACzB,QAAQ,EAAE,MAAM,CAAC;QACjB,UAAU,EAAE,MAAM,CAAC;QACnB,KAAK,EAAE,OAAO,CAAC;QACf,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,KAAK;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAC7C;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,uDAAuD;AACvD,MAAM,WAAW,qBAAqB;IACpC,qDAAqD;IACrD,MAAM,EAAE,MAAM,CAAC;IACf,2CAA2C;IAC3C,QAAQ,EAAE,MAAM,CAAC;IACjB,kDAAkD;IAClD,OAAO,EAAE,OAAO,CAAC;IACjB,4CAA4C;IAC5C,QAAQ,EAAE,MAAM,CAAC;IACjB,qDAAqD;IACrD,KAAK,CAAC,EAAE;QACN,WAAW,EAAE,MAAM,CAAC;QACpB,YAAY,EAAE,MAAM,CAAC;QACrB,WAAW,EAAE,MAAM,CAAC;QACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,CAAC;CACH;AAMD,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,OAAO,CAAC;CACf;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,yEAAyE;IACzE,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAMD,MAAM,WAAW,eAAe;IAC9B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,OAAO,CAAC;IACd,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,qBAAqB;IACpC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,OAAO,CAAC;IACd,MAAM,EAAE,OAAO,CAAC;IAChB,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAMD,MAAM,WAAW,cAAc;IAC7B,8CAA8C;IAC9C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,iEAAiE;IACjE,QAAQ,IAAI,OAAO,CAAC;IAEpB,6DAA6D;IAC7D,gBAAgB,CAAC,MAAM,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,MAAM,GAAG,SAAS,CAAC;IAErE,8CAA8C;IAC9C,eAAe,CAAC,IAAI,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,MAAM,GAAG,SAAS,CAAC;IAEtF,0CAA0C;IAC1C,iBAAiB,CAAC,IAAI,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,MAAM,GAAG,SAAS,CAAC;IAErE;;;;OAIG;IACH,qBAAqB,CAAC,IAAI,OAAO,CAAC;IAElC,iFAAiF;IACjF,uBAAuB,CAAC,IAAI,MAAM,CAAC;IAEnC,4EAA4E;IAC5E,gBAAgB,CAAC,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;IAE7C,kFAAkF;IAClF,yBAAyB,CAAC,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC;IAErD,2DAA2D;IAC3D,WAAW,CAAC,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAElE,qDAAqD;IACrD,cAAc,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAEvD,kEAAkE;IAClE,sBAAsB,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAE/D,2DAA2D;IAC3D,sBAAsB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IAExD,uEAAuE;IACvE,cAAc,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IAEpC,kEAAkE;IAClE,UAAU,CAAC,IAAI,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAE7E,2DAA2D;IAC3D,eAAe,CAAC,IAAI,iBAAiB,EAAE,CAAC;IAExC,sCAAsC;IACtC,cAAc,CAAC,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAE/E,2FAA2F;IAC3F,aAAa,CAAC,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAE9E;;;OAGG;IACH,gBAAgB,CAAC,CAAC,IAAI,CAAC,EAAE;QAAE,WAAW,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;KAAE,GAAG,aAAa,CAAC;CAChF"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@a5c-ai/genty-platform",
-  "version": "6.0.2",
+  "version": "6.0.3-staging.032e07a1ffa0",
   "description": "Agent Platform layer — harness integration, governance, interaction, storage",
   "license": "MIT",
   "type": "commonjs",
@@ -124,13 +124,14 @@
     "test:seams": "vitest run --config vitest.config.ts src/seams/contract.test.ts"
   },
   "dependencies": {
-    "@a5c-ai/adapters": "6.0.2",
-    "@a5c-ai/babysitter-sdk": "6.0.2",
-    "@a5c-ai/comm-adapter": "6.0.2",
-    "@a5c-ai/genty-core": "6.0.2",
-    "@a5c-ai/genty-runtime": "6.0.2",
-    "@a5c-ai/tasks-adapter": "6.0.2",
-    "@a5c-ai/tools-adapter": "6.0.2",
+    "@a5c-ai/adapters": "6.0.3-staging.032e07a1ffa0",
+    "@a5c-ai/babysitter-sdk": "6.0.3-staging.032e07a1ffa0",
+    "@a5c-ai/comm-adapter": "6.0.3-staging.032e07a1ffa0",
+    "@a5c-ai/genty-core": "6.0.3-staging.032e07a1ffa0",
+    "@a5c-ai/genty-runtime": "6.0.3-staging.032e07a1ffa0",
+    "@a5c-ai/policy-adapter": "6.0.3-staging.032e07a1ffa0",
+    "@a5c-ai/tasks-adapter": "6.0.3-staging.032e07a1ffa0",
+    "@a5c-ai/tools-adapter": "6.0.3-staging.032e07a1ffa0",
     "@agentsh/secure-sandbox": "^0.1.7",
     "@modelcontextprotocol/sdk": "^1.12.1",
     "@sinclair/typebox": "^0.34.48",