@adhd/agent-core-policy 2.1.0

package/src/db/schema.js

@@ -0,0 +1,139 @@
+import { index, integer, primaryKey, sqliteTable, text, } from 'drizzle-orm/sqlite-core';
+// ──────────────────────────────────────────────
+// policy_policy_types  (lookup — never a SQL enum)
+// ──────────────────────────────────────────────
+// Controlled-vocab slug values are seeded as rows, not baked into the
+// column type.  New policy types are added by inserting a row, never by
+// a migration altering the column. [inv:lookup-not-enum]
+export const policyTypesTable = sqliteTable('policy_policy_types', {
+    slug: text('slug').primaryKey(),
+    description: text('description').notNull(),
+});
+// ──────────────────────────────────────────────
+// policy_policy_templates
+// ──────────────────────────────────────────────
+// Reusable rule definitions.  `rules` and `enforcement` are JSON columns:
+//   - rules:       structured JSON object (policy-specific rule parameters)
+//   - enforcement: JSON ARRAY of one or more mechanism strings
+//                  e.g. ["agent","ci"] — NEVER a single scalar column.
+//                  [inv:enforcement-is-array]
+//
+// `type` is an in-package FK to policy_policy_types.slug (real Drizzle FK).
+// Cross-package references (e.g. agent_slug → registry_agents) are plain
+// text columns — no cross-prefix FK. [decisions.md Decision 0]
+export const policyTemplatesTable = sqliteTable('policy_policy_templates', {
+    slug: text('slug').primaryKey(),
+    // In-package FK — policy_policy_types lives in the same drizzle schema.
+    type: text('type')
+        .notNull()
+        .references(() => policyTypesTable.slug),
+    description: text('description').notNull(),
+    // Structured rule parameters — deserialized to an object on read.
+    rules: text('rules', { mode: 'json' }).notNull(),
+    // One or more enforcement mechanism strings stored as a JSON array.
+    enforcement: text('enforcement', { mode: 'json' }).notNull(),
+    // Schema version; starts at 1, incremented on template update.
+    version: integer('version').notNull().default(1),
+    // SQLite boolean: 1 = system-owned template (cannot be deleted by users).
+    isSystem: integer('is_system', { mode: 'boolean' })
+        .notNull()
+        .default(false),
+}, (table) => [
+    // Querying templates by type is the dominant read pattern.
+    index('idx_policy_templates_type').on(table.type),
+]);
+// ──────────────────────────────────────────────
+// policy_category_policies  (category→policy attachment)
+// ──────────────────────────────────────────────
+// Stores the lazy category-level policy attachments.  When a policy is attached
+// to a taxonomy category, a single row lands here — NOT fan-outed to per-agent
+// rows.  `resolveForAgent` joins this table against `policy_agent_categories` at
+// query time to compute inherited policies. [Decision 1 — LAZY]
+//
+// `category_slug` is a LOGICAL reference to the taxonomy-category slug owned by
+// `agent-registry-schema` — plain text, no cross-prefix SQLite FK. [Decision 0]
+// `policy_slug` IS a real in-package FK → policy_policy_templates.slug.
+export const categoryPoliciesTable = sqliteTable('policy_category_policies', {
+    // Logical cross-package reference — plain text, no .references().
+    categorySlug: text('category_slug').notNull(),
+    // In-package FK → policy_policy_templates.slug (real Drizzle FK).
+    policySlug: text('policy_slug')
+        .notNull()
+        .references(() => policyTemplatesTable.slug),
+    // SQLite boolean: 1 = this policy is mandatory for every member agent.
+    isMandatory: integer('is_mandatory', { mode: 'boolean' })
+        .notNull()
+        .default(false),
+}, (table) => [
+    // Composite PK — one row per (category, policy) pair.
+    primaryKey({ columns: [table.categorySlug, table.policySlug] }),
+    // Look up all policies for a given category.
+    index('idx_category_policies_category_slug').on(table.categorySlug),
+]);
+// ──────────────────────────────────────────────
+// policy_agent_categories  (agent↔category membership)
+// ──────────────────────────────────────────────
+// Records which taxonomy categories an agent belongs to.  This is the minimal
+// local membership table for the lazy resolver; it does NOT redefine taxonomy
+// tables — `category_slug` and `agent_slug` are both logical (plain text) refs
+// to slugs owned by `agent-registry-schema`. [Decision 0, no cross-prefix FK]
+//
+// The resolver (resolveForAgent) joins this table against
+// `policy_category_policies` at query time to fan category-level policies into
+// per-agent resolved rows, each carrying `inherited_from = category_slug`.
+// A new agent added to a category AFTER the policy was attached inherits
+// automatically on the next `resolveForAgent` call — no re-fanout needed.
+export const agentCategoriesTable = sqliteTable('policy_agent_categories', {
+    // Logical cross-package reference — plain text, no .references().
+    agentSlug: text('agent_slug').notNull(),
+    // Logical cross-package reference — plain text, no .references().
+    categorySlug: text('category_slug').notNull(),
+}, (table) => [
+    // Composite PK — an agent may belong to a category only once.
+    primaryKey({ columns: [table.agentSlug, table.categorySlug] }),
+    // Dominant read: "which categories does this agent belong to?"
+    index('idx_agent_categories_agent_slug').on(table.agentSlug),
+]);
+// ──────────────────────────────────────────────
+// policy_agent_policies  (agent↔policy junction)
+// ──────────────────────────────────────────────
+// Attaches a policy template to an agent (directly or via category inheritance).
+//
+// CRITICAL: `agent_slug` is a LOGICAL reference to the agent-registry package's
+// `registry_agents.slug` column — it is plain text, NOT a SQLite FK.  No
+// cross-package foreign keys are allowed. [Decision 0, inv:no-cross-pkg-fk]
+//
+// `policy_slug` IS a real in-package FK → policy_policy_templates.slug.
+//
+// `inherited_from` is the taxonomy category slug a policy cascaded from, or NULL
+// when attached directly to the agent. It is a plain text column (logical ref to
+// agent-registry's taxonomy categories — no cross-prefix FK). [Decision 1]
+//
+// Composite PK uses a real `primaryKey({columns})`, never a non-unique index.
+// Exported as `agentPoliciesTable`; the underlying SQL table name is
+// `policy_agent_policies` (policy_ prefix per package convention).
+// @alias agentPolicy agentPolicies agent_policy_junction
+export const agentPoliciesTable = sqliteTable('policy_agent_policies', {
+    // Logical cross-package reference — plain text, no .references().
+    agentSlug: text('agent_slug').notNull(),
+    // In-package FK → policy_policy_templates.slug (real Drizzle FK).
+    policySlug: text('policy_slug')
+        .notNull()
+        .references(() => policyTemplatesTable.slug),
+    // Per-agent JSON customising the template's rules (shallow-merge semantics
+    // per Decision 3). NULL means "use the template unchanged."
+    overrideConfig: text('override_config', { mode: 'json' }),
+    // SQLite boolean: 1 = this policy is mandatory for the agent.
+    isMandatory: integer('is_mandatory', { mode: 'boolean' })
+        .notNull()
+        .default(false),
+    // NULL = attached directly; non-NULL = category slug it cascaded from.
+    // Plain text (logical cross-package ref) — no .references(). [Decision 1]
+    inheritedFrom: text('inherited_from'),
+}, (table) => [
+    // Composite PK — one row per (agent, policy) pair.
+    primaryKey({ columns: [table.agentSlug, table.policySlug] }),
+    // Look up all policies for a given agent (dominant query pattern).
+    index('idx_agent_policies_agent_slug').on(table.agentSlug),
+]);
+//# sourceMappingURL=schema.js.map

package/src/db/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../../../../../packages/agent/agent-core-policy/src/db/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,EACL,OAAO,EACP,UAAU,EACV,WAAW,EACX,IAAI,GACL,MAAM,yBAAyB,CAAC;AAEjC,iDAAiD;AACjD,mDAAmD;AACnD,iDAAiD;AACjD,sEAAsE;AACtE,wEAAwE;AACxE,yDAAyD;AACzD,MAAM,CAAC,MAAM,gBAAgB,GAAG,WAAW,CAAC,qBAAqB,EAAE;IACjE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,UAAU,EAAE;IAC/B,WAAW,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,EAAE;CAC3C,CAAC,CAAC;AAEH,iDAAiD;AACjD,0BAA0B;AAC1B,iDAAiD;AACjD,0EAA0E;AAC1E,4EAA4E;AAC5E,+DAA+D;AAC/D,uEAAuE;AACvE,8CAA8C;AAC9C,EAAE;AACF,4EAA4E;AAC5E,yEAAyE;AACzE,+DAA+D;AAC/D,MAAM,CAAC,MAAM,oBAAoB,GAAG,WAAW,CAC7C,yBAAyB,EACzB;IACE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,UAAU,EAAE;IAC/B,wEAAwE;IACxE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC;SACf,OAAO,EAAE;SACT,UAAU,CAAC,GAAG,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC;IAC1C,WAAW,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,EAAE;IAC1C,kEAAkE;IAClE,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE;IAChD,oEAAoE;IACpE,WAAW,EAAE,IAAI,CAAC,aAAa,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE;IAC5D,+DAA+D;IAC/D,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAChD,0EAA0E;IAC1E,QAAQ,EAAE,OAAO,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;SAChD,OAAO,EAAE;SACT,OAAO,CAAC,KAAK,CAAC;CAClB,EACD,CAAC,KAAK,EAAE,EAAE,CAAC;IACT,2DAA2D;IAC3D,KAAK,CAAC,2BAA2B,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;CAClD,CACF,CAAC;AAEF,iDAAiD;AACjD,yDAAyD;AACzD,iDAAiD;AACjD,gFAAgF;AAChF,+EAA+E;AAC/E,iFAAiF;AACjF,gEAAgE;AAChE,EAAE;AACF,gFAAgF;AAChF,gFAAgF;AAChF,wEAAwE;AACxE,MAAM,CAAC,MAAM,qBAAqB,GAAG,WAAW,CAC9C,0BAA0B,EAC1B;IACE,kEAAkE;IAClE,YAAY,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC,OAAO,EAAE;IAC7C,kEAAkE;IAClE,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC;SAC5B,OAAO,EAAE;SACT,UAAU,CAAC,GAAG,EAAE,CAAC,oBAAoB,CAAC,IAAI,CAAC;IAC9C,uEAAuE;IACvE,WAAW,EAAE,OAAO,CAAC,cAAc,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;SACtD,OAAO,EAAE;SACT,OAAO,CAAC,KAAK,CAAC;CAClB,EACD,CAAC,KAAK,EAAE,EAAE,CAAC;IACT,sDAAsD;IACtD,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;IAC/D,6CAA6C;IAC7C,KAAK,CAAC,qCAAqC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC;CACpE,CACF,CAAC;AAEF,iDAAiD;AACjD,uDAAuD;AACvD,iDAAiD;AACjD,8EAA8E;AAC9E,8EAA8E;AAC9E,+EAA+E;AAC/E,8EAA8E;AAC9E,EAAE;AACF,0DAA0D;AAC1D,+EAA+E;AAC/E,2EAA2E;AAC3E,yEAAyE;AACzE,0EAA0E;AAC1E,MAAM,CAAC,MAAM,oBAAoB,GAAG,WAAW,CAC7C,yBAAyB,EACzB;IACE,kEAAkE;IAClE,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;IACvC,kEAAkE;IAClE,YAAY,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC,OAAO,EAAE;CAC9C,EACD,CAAC,KAAK,EAAE,EAAE,CAAC;IACT,8DAA8D;IAC9D,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;IAC9D,+DAA+D;IAC/D,KAAK,CAAC,iCAAiC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;CAC7D,CACF,CAAC;AAEF,iDAAiD;AACjD,iDAAiD;AACjD,iDAAiD;AACjD,iFAAiF;AACjF,EAAE;AACF,gFAAgF;AAChF,yEAAyE;AACzE,4EAA4E;AAC5E,EAAE;AACF,wEAAwE;AACxE,EAAE;AACF,iFAAiF;AACjF,iFAAiF;AACjF,2EAA2E;AAC3E,EAAE;AACF,8EAA8E;AAC9E,qEAAqE;AACrE,mEAAmE;AACnE,yDAAyD;AACzD,MAAM,CAAC,MAAM,kBAAkB,GAAG,WAAW,CAC3C,uBAAuB,EACvB;IACE,kEAAkE;IAClE,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;IACvC,kEAAkE;IAClE,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC;SAC5B,OAAO,EAAE;SACT,UAAU,CAAC,GAAG,EAAE,CAAC,oBAAoB,CAAC,IAAI,CAAC;IAC9C,2EAA2E;IAC3E,4DAA4D;IAC5D,cAAc,EAAE,IAAI,CAAC,iBAAiB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACzD,8DAA8D;IAC9D,WAAW,EAAE,OAAO,CAAC,cAAc,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;SACtD,OAAO,EAAE;SACT,OAAO,CAAC,KAAK,CAAC;IACjB,uEAAuE;IACvE,0EAA0E;IAC1E,aAAa,EAAE,IAAI,CAAC,gBAAgB,CAAC;CACtC,EACD,CAAC,KAAK,EAAE,EAAE,CAAC;IACT,mDAAmD;IACnD,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;IAC5D,mEAAmE;IACnE,KAAK,CAAC,+BAA+B,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;CAC3D,CACF,CAAC"}

package/src/index.d.ts

@@ -0,0 +1,14 @@
+export { db, sqlite } from './db/client.js';
+export { runMigrations } from './db/migrate.js';
+export * from './db/schema.js';
+export { PolicyTemplateStore, PolicyError, } from './store/policy-template-store.js';
+export type { PolicyTemplate, PolicyTemplateCreateInput, PolicyErrorCode, } from './store/policy-template-store.js';
+export { AgentPolicyStore, AgentPolicyError, resolveEffectiveRules, } from './store/agent-policy-store.js';
+export type { AgentPolicyRow, AgentPolicyAttachInput, AgentPolicyErrorCode, CategoryPolicyAttachInput, CategoryPolicyRow, AgentCategoryInput, } from './store/agent-policy-store.js';
+export { seed, POLICY_TYPES, POLICY_TEMPLATES } from './seed/index.js';
+export { createPlugin, configSchema } from './plugin/index.js';
+export type { RatePolicyConfig } from './plugin/index.js';
+export { evaluateRatePolicy, makeRatePolicyError, } from './plugin/rate-policy.js';
+export type { RatePolicyRules } from './plugin/rate-policy.js';
+export { createPlugin as default } from './plugin/index.js';
+//# sourceMappingURL=index.d.ts.map

package/src/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../packages/agent/agent-core-policy/src/index.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,cAAc,gBAAgB,CAAC;AAG/B,OAAO,EACL,mBAAmB,EACnB,WAAW,GACZ,MAAM,kCAAkC,CAAC;AAC1C,YAAY,EACV,cAAc,EACd,yBAAyB,EACzB,eAAe,GAChB,MAAM,kCAAkC,CAAC;AAG1C,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,qBAAqB,GACtB,MAAM,+BAA+B,CAAC;AACvC,YAAY,EACV,cAAc,EACd,sBAAsB,EACtB,oBAAoB,EACpB,yBAAyB,EACzB,iBAAiB,EACjB,kBAAkB,GACnB,MAAM,+BAA+B,CAAC;AAGvC,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAKvE,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAC/D,YAAY,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAC1D,OAAO,EACL,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,yBAAyB,CAAC;AACjC,YAAY,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,EAAE,YAAY,IAAI,OAAO,EAAE,MAAM,mBAAmB,CAAC"}

package/src/index.js

@@ -0,0 +1,20 @@
+// @adhd/agent-policy — public barrel
+// Policy engine with SQLite/Drizzle persistence.
+// Tables, stores, and the enforcement plugin are exported here as they are
+// added by subsequent plan states (policy-design, policy-store, etc.).
+export { db, sqlite } from './db/client.js';
+export { runMigrations } from './db/migrate.js';
+export * from './db/schema.js';
+// Policy template store + domain types
+export { PolicyTemplateStore, PolicyError, } from './store/policy-template-store.js';
+// Agent↔policy junction store + domain types (including category inheritance)
+export { AgentPolicyStore, AgentPolicyError, resolveEffectiveRules, } from './store/agent-policy-store.js';
+// Policy library seeder — idempotent population of policy_types + policy_templates.
+export { seed, POLICY_TYPES, POLICY_TEMPLATES } from './seed/index.js';
+// Rate-policy enforcement plugin — mirrors @adhd/agent-plugin-budget plugin shape.
+// Registers a throws-propagating handler on "pre:model_request" to enforce
+// rate (model-call count) limits from policy template rules + override_config.
+export { createPlugin, configSchema } from './plugin/index.js';
+export { evaluateRatePolicy, makeRatePolicyError, } from './plugin/rate-policy.js';
+export { createPlugin as default } from './plugin/index.js';
+//# sourceMappingURL=index.js.map

package/src/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../packages/agent/agent-core-policy/src/index.ts"],"names":[],"mappings":"AAAA,qCAAqC;AACrC,iDAAiD;AACjD,2EAA2E;AAC3E,uEAAuE;AAEvE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,cAAc,gBAAgB,CAAC;AAE/B,uCAAuC;AACvC,OAAO,EACL,mBAAmB,EACnB,WAAW,GACZ,MAAM,kCAAkC,CAAC;AAO1C,8EAA8E;AAC9E,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,qBAAqB,GACtB,MAAM,+BAA+B,CAAC;AAUvC,oFAAoF;AACpF,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAEvE,mFAAmF;AACnF,2EAA2E;AAC3E,+EAA+E;AAC/E,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAE/D,OAAO,EACL,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EAAE,YAAY,IAAI,OAAO,EAAE,MAAM,mBAAmB,CAAC"}

package/src/plugin/index.d.ts

@@ -0,0 +1,24 @@
+/**
+ * @adhd/agent-policy enforcement plugin.
+ *
+ * Mirrors @adhd/agent-plugin-budget exactly in plugin shape:
+ *   - exports configSchema (zod)
+ *   - exports createPlugin (named) + default createPlugin
+ *   - install() registers observational handlers (try/caught) AND one
+ *     hooks.registerEnforcement("pre:model_request", ...) with NO try/catch
+ *     so the throw propagates to the orchestrator.
+ *
+ * Enforcement scope: `rate`-type policies — enforces maxModelCalls per task.
+ * EnforcementEvent is "pre:model_request"-ONLY (decisions.md Decision 2).
+ */
+import { z } from 'zod';
+import type { PluginFactory } from '@adhd/agent-base-types';
+export declare const configSchema: z.ZodObject<{
+    maxModelCalls: z.ZodOptional<z.ZodNumber>;
+    maxToolCalls: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strip>;
+export type RatePolicyConfig = z.infer<typeof configSchema>;
+declare const createPlugin: PluginFactory;
+export default createPlugin;
+export { createPlugin };
+//# sourceMappingURL=index.d.ts.map

package/src/plugin/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../packages/agent/agent-core-policy/src/plugin/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAGH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAIV,aAAa,EAId,MAAM,wBAAwB,CAAC;AAMhC,eAAO,MAAM,YAAY;;;iBAavB,CAAC;AAEH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAyH5D,QAAA,MAAM,YAAY,EAAE,aAEnB,CAAC;AAEF,eAAe,YAAY,CAAC;AAC5B,OAAO,EAAE,YAAY,EAAE,CAAC"}

package/src/plugin/index.js

@@ -0,0 +1,140 @@
+/**
+ * @adhd/agent-policy enforcement plugin.
+ *
+ * Mirrors @adhd/agent-plugin-budget exactly in plugin shape:
+ *   - exports configSchema (zod)
+ *   - exports createPlugin (named) + default createPlugin
+ *   - install() registers observational handlers (try/caught) AND one
+ *     hooks.registerEnforcement("pre:model_request", ...) with NO try/catch
+ *     so the throw propagates to the orchestrator.
+ *
+ * Enforcement scope: `rate`-type policies — enforces maxModelCalls per task.
+ * EnforcementEvent is "pre:model_request"-ONLY (decisions.md Decision 2).
+ */
+import { z } from 'zod';
+import { evaluateRatePolicy } from './rate-policy.js';
+// ── Config schema ─────────────────────────────────────────────────────────────
+export const configSchema = z.object({
+    /**
+     * Max number of model (LLM) calls per task.
+     * Reads from the effective rules after shallow-merging template.rules +
+     * override_config (decisions.md Decision 3). Optional — no limit if absent.
+     */
+    maxModelCalls: z.number().int().positive().optional(),
+    /**
+     * Max number of tool calls per task.
+     * Mirrors maxModelCalls but for tool-call enforcement.
+     * Optional — no limit if absent.
+     */
+    maxToolCalls: z.number().int().positive().optional(),
+});
+// ── Plugin class ──────────────────────────────────────────────────────────────
+class RatePolicyPlugin {
+    db;
+    cfg;
+    name = 'agent-policy-rate';
+    accumulators = new Map();
+    constructor(db, cfg) {
+        this.db = db;
+        this.cfg = cfg;
+    }
+    install(hooks) {
+        // Observational: initialise the per-task counter on task:start.
+        hooks.register('task:start', (p) => {
+            try {
+                this.onTaskStart(p);
+            }
+            catch {
+                /* observational — never kill a task */
+            }
+        });
+        // Observational: increment model-call count after each completed model turn.
+        hooks.register('post:model_response', (p) => {
+            try {
+                this.onPostModelResponse(p);
+            }
+            catch {
+                /* observational */
+            }
+        });
+        // Observational: increment tool-call count after each completed tool call.
+        hooks.register('post:tool_call', (p) => {
+            try {
+                this.onPostToolCall(p);
+            }
+            catch {
+                /* observational */
+            }
+        });
+        // Observational: clean up accumulator on terminal events.
+        hooks.register('task:completed', (p) => {
+            try {
+                this.onTerminal(p.executionContext.taskId);
+            }
+            catch {
+                /* observational */
+            }
+        });
+        hooks.register('task:failed', (p) => {
+            try {
+                this.onTerminal(p.executionContext.taskId);
+            }
+            catch {
+                /* observational */
+            }
+        });
+        hooks.register('task:cancelled', (p) => {
+            try {
+                this.onTerminal(p.executionContext.taskId);
+            }
+            catch {
+                /* observational */
+            }
+        });
+        // Enforcement — throws propagate (NO try/catch wrapper).
+        hooks.registerEnforcement('pre:model_request', (p) => this.enforce(p));
+        hooks.registerEnforcement('pre:tool_call', (p) => this.enforce(p));
+    }
+    // ── Observational handlers ────────────────────────────────────────────────
+    onTaskStart(p) {
+        this.accumulators.set(p.executionContext.taskId, {
+            taskId: p.executionContext.taskId,
+            modelCalls: 0,
+            toolCalls: 0,
+        });
+    }
+    onPostModelResponse(p) {
+        const acc = this.accumulators.get(p.executionContext.taskId);
+        if (acc)
+            acc.modelCalls += 1;
+    }
+    onPostToolCall(p) {
+        const acc = this.accumulators.get(p.executionContext.taskId);
+        if (acc)
+            acc.toolCalls += 1;
+    }
+    onTerminal(taskId) {
+        this.accumulators.delete(taskId);
+    }
+    // ── Enforcement ───────────────────────────────────────────────────────────
+    enforce(p) {
+        const acc = this.accumulators.get(p.executionContext.taskId);
+        // No accumulator (task:start not seen) — be permissive, not crashy.
+        if (!acc)
+            return;
+        const rules = {
+            maxModelCalls: this.cfg.maxModelCalls,
+            maxToolCalls: this.cfg.maxToolCalls,
+        };
+        const violation = evaluateRatePolicy(rules, acc.modelCalls, acc.toolCalls);
+        if (violation !== null)
+            throw violation;
+    }
+}
+// ── Factory ───────────────────────────────────────────────────────────────────
+const createPlugin = ({ db, config }) => {
+    return new RatePolicyPlugin(db, config);
+};
+export default createPlugin;
+export { createPlugin };
+//# sourceMappingURL=index.js.map

package/src/plugin/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../packages/agent/agent-core-policy/src/plugin/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAGH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAUxB,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAGtD,iFAAiF;AAEjF,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC;;;;OAIG;IACH,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACrD;;;;OAIG;IACH,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACrD,CAAC,CAAC;AAYH,iFAAiF;AAEjF,MAAM,gBAAgB;IAMD;IACA;IANV,IAAI,GAAG,mBAAmB,CAAC;IAEnB,YAAY,GAAG,IAAI,GAAG,EAA2B,CAAC;IAEnE,YACmB,EAAW,EACX,GAAqB;QADrB,OAAE,GAAF,EAAE,CAAS;QACX,QAAG,GAAH,GAAG,CAAkB;IACrC,CAAC;IAEJ,OAAO,CAAC,KAAoB;QAC1B,gEAAgE;QAChE,KAAK,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC,CAAC,EAAE,EAAE;YACjC,IAAI,CAAC;gBACH,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;YACtB,CAAC;YAAC,MAAM,CAAC;gBACP,uCAAuC;YACzC,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,6EAA6E;QAC7E,KAAK,CAAC,QAAQ,CAAC,qBAAqB,EAAE,CAAC,CAAC,EAAE,EAAE;YAC1C,IAAI,CAAC;gBACH,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC;YAC9B,CAAC;YAAC,MAAM,CAAC;gBACP,mBAAmB;YACrB,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,2EAA2E;QAC3E,KAAK,CAAC,QAAQ,CAAC,gBAAgB,EAAE,CAAC,CAAC,EAAE,EAAE;YACrC,IAAI,CAAC;gBACH,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;YACzB,CAAC;YAAC,MAAM,CAAC;gBACP,mBAAmB;YACrB,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,0DAA0D;QAC1D,KAAK,CAAC,QAAQ,CAAC,gBAAgB,EAAE,CAAC,CAAC,EAAE,EAAE;YACrC,IAAI,CAAC;gBACH,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;YAC7C,CAAC;YAAC,MAAM,CAAC;gBACP,mBAAmB;YACrB,CAAC;QACH,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC,EAAE,EAAE;YAClC,IAAI,CAAC;gBACH,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;YAC7C,CAAC;YAAC,MAAM,CAAC;gBACP,mBAAmB;YACrB,CAAC;QACH,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,QAAQ,CAAC,gBAAgB,EAAE,CAAC,CAAC,EAAE,EAAE;YACrC,IAAI,CAAC;gBACH,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;YAC7C,CAAC;YAAC,MAAM,CAAC;gBACP,mBAAmB;YACrB,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,yDAAyD;QACzD,KAAK,CAAC,mBAAmB,CAAC,mBAAmB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;QACvE,KAAK,CAAC,mBAAmB,CAAC,eAAe,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IACrE,CAAC;IAED,6EAA6E;IAErE,WAAW,CAAC,CAAmB;QACrC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,gBAAgB,CAAC,MAAM,EAAE;YAC/C,MAAM,EAAE,CAAC,CAAC,gBAAgB,CAAC,MAAM;YACjC,UAAU,EAAE,CAAC;YACb,SAAS,EAAE,CAAC;SACb,CAAC,CAAC;IACL,CAAC;IAEO,mBAAmB,CAAC,CAA2B;QACrD,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAC7D,IAAI,GAAG;YAAE,GAAG,CAAC,UAAU,IAAI,CAAC,CAAC;IAC/B,CAAC;IAEO,cAAc,CAAC,CAAsB;QAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAC7D,IAAI,GAAG;YAAE,GAAG,CAAC,SAAS,IAAI,CAAC,CAAC;IAC9B,CAAC;IAEO,UAAU,CAAC,MAAc;QAC/B,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACnC,CAAC;IAED,6EAA6E;IAErE,OAAO,CAAC,CAAyC;QACvD,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAC7D,oEAAoE;QACpE,IAAI,CAAC,GAAG;YAAE,OAAO;QAEjB,MAAM,KAAK,GAAoB;YAC7B,aAAa,EAAE,IAAI,CAAC,GAAG,CAAC,aAAa;YACrC,YAAY,EAAE,IAAI,CAAC,GAAG,CAAC,YAAY;SACpC,CAAC;QAEF,MAAM,SAAS,GAAG,kBAAkB,CAAC,KAAK,EAAE,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;QAC3E,IAAI,SAAS,KAAK,IAAI;YAAE,MAAM,SAAS,CAAC;IAC1C,CAAC;CACF;AAED,iFAAiF;AAEjF,MAAM,YAAY,GAAkB,CAAC,EAAE,EAAE,EAAE,MAAM,EAAiB,EAAU,EAAE;IAC5E,OAAO,IAAI,gBAAgB,CAAC,EAAE,EAAE,MAA0B,CAAC,CAAC;AAC9D,CAAC,CAAC;AAEF,eAAe,YAAY,CAAC;AAC5B,OAAO,EAAE,YAAY,EAAE,CAAC"}

package/src/plugin/rate-policy.d.ts

@@ -0,0 +1,34 @@
+/**
+ * rate-policy.ts — pure helper for evaluating rate-policy limits.
+ *
+ * Stateless: given an effective rules object and a current model-call count,
+ * decides whether the limit is crossed and returns the enforcement error payload.
+ * Unit-testable independent of hook wiring.
+ */
+import type { IEnforcementError } from '@adhd/agent-base-types';
+/**
+ * The effective rules for a `rate`-type policy after shallow-merging
+ * `template.rules` with `override_config` (Decision 3 in decisions.md).
+ *
+ * All limits are optional; a missing key means "no limit enforced."
+ */
+export interface RatePolicyRules {
+    /** Max number of model (LLM) calls per task. */
+    maxModelCalls?: number;
+    /** Max number of tool calls per task. */
+    maxToolCalls?: number;
+}
+/**
+ * Build an IEnforcementError for a rate-policy violation.
+ * Code is "POLICY_VIOLATION" (distinct from budget plugin's "BUDGET_EXCEEDED"
+ * so the orchestrator can distinguish enforcement source).
+ */
+export declare function makeRatePolicyError(limitName: string, limit: number, current: number): IEnforcementError;
+/**
+ * Evaluate whether the given `modelCalls` count violates the effective rules.
+ *
+ * Returns an IEnforcementError to throw, or `null` when within limits.
+ * Pure function: no side effects, deterministic.
+ */
+export declare function evaluateRatePolicy(rules: RatePolicyRules, modelCalls: number, toolCalls: number): IEnforcementError | null;
+//# sourceMappingURL=rate-policy.d.ts.map

package/src/plugin/rate-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-policy.d.ts","sourceRoot":"","sources":["../../../../../../packages/agent/agent-core-policy/src/plugin/rate-policy.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAIhE;;;;;GAKG;AACH,MAAM,WAAW,eAAe;IAC9B,gDAAgD;IAChD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,yCAAyC;IACzC,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAID;;;;GAIG;AACH,wBAAgB,mBAAmB,CACjC,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,GACd,iBAAiB,CAMnB;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,eAAe,EACtB,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,GAChB,iBAAiB,GAAG,IAAI,CAY1B"}

package/src/plugin/rate-policy.js

@@ -0,0 +1,36 @@
+/**
+ * rate-policy.ts — pure helper for evaluating rate-policy limits.
+ *
+ * Stateless: given an effective rules object and a current model-call count,
+ * decides whether the limit is crossed and returns the enforcement error payload.
+ * Unit-testable independent of hook wiring.
+ */
+// ── Helpers ───────────────────────────────────────────────────────────────────
+/**
+ * Build an IEnforcementError for a rate-policy violation.
+ * Code is "POLICY_VIOLATION" (distinct from budget plugin's "BUDGET_EXCEEDED"
+ * so the orchestrator can distinguish enforcement source).
+ */
+export function makeRatePolicyError(limitName, limit, current) {
+    return {
+        isEnforcementError: true,
+        code: 'POLICY_VIOLATION',
+        message: `POLICY_VIOLATION: rate policy ${limitName} limit is ${limit}, current value is ${current}`,
+    };
+}
+/**
+ * Evaluate whether the given `modelCalls` count violates the effective rules.
+ *
+ * Returns an IEnforcementError to throw, or `null` when within limits.
+ * Pure function: no side effects, deterministic.
+ */
+export function evaluateRatePolicy(rules, modelCalls, toolCalls) {
+    if (rules.maxModelCalls !== undefined && modelCalls >= rules.maxModelCalls) {
+        return makeRatePolicyError('maxModelCalls', rules.maxModelCalls, modelCalls);
+    }
+    if (rules.maxToolCalls !== undefined && toolCalls >= rules.maxToolCalls) {
+        return makeRatePolicyError('maxToolCalls', rules.maxToolCalls, toolCalls);
+    }
+    return null;
+}
+//# sourceMappingURL=rate-policy.js.map

package/src/plugin/rate-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-policy.js","sourceRoot":"","sources":["../../../../../../packages/agent/agent-core-policy/src/plugin/rate-policy.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAmBH,iFAAiF;AAEjF;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CACjC,SAAiB,EACjB,KAAa,EACb,OAAe;IAEf,OAAO;QACL,kBAAkB,EAAE,IAAa;QACjC,IAAI,EAAE,kBAAkB;QACxB,OAAO,EAAE,iCAAiC,SAAS,aAAa,KAAK,sBAAsB,OAAO,EAAE;KACrG,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAChC,KAAsB,EACtB,UAAkB,EAClB,SAAiB;IAEjB,IAAI,KAAK,CAAC,aAAa,KAAK,SAAS,IAAI,UAAU,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;QAC3E,OAAO,mBAAmB,CACxB,eAAe,EACf,KAAK,CAAC,aAAa,EACnB,UAAU,CACX,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS,IAAI,SAAS,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;QACxE,OAAO,mBAAmB,CAAC,cAAc,EAAE,KAAK,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/src/seed/index.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Policy library seeder — populates `policy_policy_types` and
+ * `policy_policy_templates` idempotently.
+ *
+ * `seed(db)` is safe to call multiple times on the same database:
+ *  - Types use `INSERT OR IGNORE` (ON CONFLICT DO NOTHING).
+ *  - Templates use `INSERT OR IGNORE` (ON CONFLICT DO NOTHING).
+ *  - A second call is a genuine no-op — no version bump, no duplicate rows,
+ *    no error. [seed-and-roundtrip.1]
+ *
+ * The caller is responsible for running migrations BEFORE calling `seed()`.
+ *
+ * @example
+ * ```ts
+ * import Database from "better-sqlite3";
+ * import { drizzle } from "drizzle-orm/better-sqlite3";
+ * import { runMigrationsOn } from "@adhd/agent-policy/db/migrate-runner";
+ * import { seed } from "@adhd/agent-policy";
+ * import * as schema from "@adhd/agent-policy/db/schema";
+ *
+ * const sqlite = new Database("./data/agents.db");
+ * const db = drizzle(sqlite, { schema });
+ * runMigrationsOn(sqlite, db);
+ * seed(db);
+ * ```
+ */
+type AnyBetterSQLite3Database = import('drizzle-orm/better-sqlite3').BetterSQLite3Database<any>;
+/**
+ * Idempotently insert all canonical policy types and system templates.
+ *
+ * Uses `onConflictDoNothing()` (Drizzle's typed wrapper for `INSERT OR IGNORE`)
+ * so re-running is always safe: no duplicate rows, no errors, version unchanged.
+ *
+ * @param db — a Drizzle `BetterSQLite3Database` instance with migrations applied.
+ */
+export declare function seed(db: AnyBetterSQLite3Database): void;
+export { POLICY_TYPES } from './policy-types.js';
+export { POLICY_TEMPLATES } from './policy-templates.js';
+//# sourceMappingURL=index.d.ts.map

package/src/seed/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../packages/agent/agent-core-policy/src/seed/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAGH,KAAK,wBAAwB,GAAG,OAAO,4BAA4B,EAAE,qBAAqB,CAAC,GAAG,CAAC,CAAC;AAMhG;;;;;;;GAOG;AACH,wBAAgB,IAAI,CAAC,EAAE,EAAE,wBAAwB,GAAG,IAAI,CAsBvD;AAED,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC"}

package/src/seed/index.js

@@ -0,0 +1,62 @@
+/**
+ * Policy library seeder — populates `policy_policy_types` and
+ * `policy_policy_templates` idempotently.
+ *
+ * `seed(db)` is safe to call multiple times on the same database:
+ *  - Types use `INSERT OR IGNORE` (ON CONFLICT DO NOTHING).
+ *  - Templates use `INSERT OR IGNORE` (ON CONFLICT DO NOTHING).
+ *  - A second call is a genuine no-op — no version bump, no duplicate rows,
+ *    no error. [seed-and-roundtrip.1]
+ *
+ * The caller is responsible for running migrations BEFORE calling `seed()`.
+ *
+ * @example
+ * ```ts
+ * import Database from "better-sqlite3";
+ * import { drizzle } from "drizzle-orm/better-sqlite3";
+ * import { runMigrationsOn } from "@adhd/agent-policy/db/migrate-runner";
+ * import { seed } from "@adhd/agent-policy";
+ * import * as schema from "@adhd/agent-policy/db/schema";
+ *
+ * const sqlite = new Database("./data/agents.db");
+ * const db = drizzle(sqlite, { schema });
+ * runMigrationsOn(sqlite, db);
+ * seed(db);
+ * ```
+ */
+import { policyTypesTable, policyTemplatesTable } from '../db/schema.js';
+import { POLICY_TYPES } from './policy-types.js';
+import { POLICY_TEMPLATES } from './policy-templates.js';
+/**
+ * Idempotently insert all canonical policy types and system templates.
+ *
+ * Uses `onConflictDoNothing()` (Drizzle's typed wrapper for `INSERT OR IGNORE`)
+ * so re-running is always safe: no duplicate rows, no errors, version unchanged.
+ *
+ * @param db — a Drizzle `BetterSQLite3Database` instance with migrations applied.
+ */
+export function seed(db) {
+    // 1. Policy types first (templates FK into this table).
+    for (const typeRow of POLICY_TYPES) {
+        db.insert(policyTypesTable).values(typeRow).onConflictDoNothing().run();
+    }
+    // 2. Policy templates — one upsert per template.
+    for (const tmpl of POLICY_TEMPLATES) {
+        db.insert(policyTemplatesTable)
+            .values({
+            slug: tmpl.slug,
+            type: tmpl.type,
+            description: tmpl.description,
+            // drizzle `text({ mode: "json" })` serialises automatically.
+            rules: tmpl.rules,
+            enforcement: tmpl.enforcement,
+            version: tmpl.version,
+            isSystem: tmpl.isSystem,
+        })
+            .onConflictDoNothing()
+            .run();
+    }
+}
+export { POLICY_TYPES } from './policy-types.js';
+export { POLICY_TEMPLATES } from './policy-templates.js';
+//# sourceMappingURL=index.js.map

package/src/seed/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../packages/agent/agent-core-policy/src/seed/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAKH,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AACzE,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAEzD;;;;;;;GAOG;AACH,MAAM,UAAU,IAAI,CAAC,EAA4B;IAC/C,wDAAwD;IACxD,KAAK,MAAM,OAAO,IAAI,YAAY,EAAE,CAAC;QACnC,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,mBAAmB,EAAE,CAAC,GAAG,EAAE,CAAC;IAC1E,CAAC;IAED,iDAAiD;IACjD,KAAK,MAAM,IAAI,IAAI,gBAAgB,EAAE,CAAC;QACpC,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC;aAC5B,MAAM,CAAC;YACN,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,6DAA6D;YAC7D,KAAK,EAAE,IAAI,CAAC,KAA0B;YACtC,WAAW,EAAE,IAAI,CAAC,WAAgC;YAClD,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;SACxB,CAAC;aACD,mBAAmB,EAAE;aACrB,GAAG,EAAE,CAAC;IACX,CAAC;AACH,CAAC;AAED,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC"}

package/src/seed/policy-templates.d.ts

@@ -0,0 +1,45 @@
+/**
+ * Seed data for the `policy_policy_templates` table.
+ *
+ * Every entry carries REAL `rules` JSON from SEED_DATA.md §9.  Placeholders
+ * defeat idempotency and the round-trip proof. [seed-and-roundtrip.2]
+ *
+ * Key invariants honoured here:
+ *  - `enforcement` is ALWAYS a JSON array — never a scalar string.
+ *    [inv:enforcement-is-array]
+ *  - `no-credentials` carries `enforcement: ["agent","ci"]` — the multi-value
+ *    case that round-trip tests must exercise.
+ *  - `sox-audit-trail` is seeded as `hook_type: "observational"` (Decision 2 —
+ *    its hook point is TOOL_CALL, not pre:model_request, so it must NOT be
+ *    registered via registerEnforcement).
+ *  - All entries are `is_system: true, version: 1`.
+ *  - `INSERT OR IGNORE` semantics in the seeder keep re-runs as no-ops.
+ *    [seed-and-roundtrip.1]
+ *
+ * Source: SEED_DATA.md §9 — Policy Templates.
+ */
+export interface PolicyTemplateSeedRow {
+    slug: string;
+    type: string;
+    description: string;
+    rules: Record<string, unknown>;
+    enforcement: string[];
+    version: number;
+    isSystem: boolean;
+}
+/**
+ * The system policy templates that ship with the agent registry.
+ *
+ * Includes:
+ *  - `reviewer-posture`  — safety, ["agent"]
+ *  - `no-credentials`    — safety, ["agent","ci"]  ← multi-value case
+ *  - `sox-audit-trail`   — audit,  ["hook"]         ← observational only (Decision 2)
+ *  - `max-rework-3`      — rate,   ["runtime"]
+ *  - `evidence-required` — quality, ["runtime"]
+ *  - `read-only`         — permission, ["settings"]
+ *  - `phase-gate-required` — compliance, ["runtime","ci"]
+ *  - `originality-check` — quality, ["ci"]
+ *  - `allowed-delegation` — permission, ["runtime"]
+ */
+export declare const POLICY_TEMPLATES: readonly PolicyTemplateSeedRow[];
+//# sourceMappingURL=policy-templates.d.ts.map

package/src/seed/policy-templates.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-templates.d.ts","sourceRoot":"","sources":["../../../../../../packages/agent/agent-core-policy/src/seed/policy-templates.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,gBAAgB,EAAE,SAAS,qBAAqB,EA6KnD,CAAC"}