@adhd/agent-core-policy 2.1.0

package/src/seed/policy-templates.js

@@ -0,0 +1,189 @@
+/**
+ * Seed data for the `policy_policy_templates` table.
+ *
+ * Every entry carries REAL `rules` JSON from SEED_DATA.md §9.  Placeholders
+ * defeat idempotency and the round-trip proof. [seed-and-roundtrip.2]
+ *
+ * Key invariants honoured here:
+ *  - `enforcement` is ALWAYS a JSON array — never a scalar string.
+ *    [inv:enforcement-is-array]
+ *  - `no-credentials` carries `enforcement: ["agent","ci"]` — the multi-value
+ *    case that round-trip tests must exercise.
+ *  - `sox-audit-trail` is seeded as `hook_type: "observational"` (Decision 2 —
+ *    its hook point is TOOL_CALL, not pre:model_request, so it must NOT be
+ *    registered via registerEnforcement).
+ *  - All entries are `is_system: true, version: 1`.
+ *  - `INSERT OR IGNORE` semantics in the seeder keep re-runs as no-ops.
+ *    [seed-and-roundtrip.1]
+ *
+ * Source: SEED_DATA.md §9 — Policy Templates.
+ */
+/**
+ * The system policy templates that ship with the agent registry.
+ *
+ * Includes:
+ *  - `reviewer-posture`  — safety, ["agent"]
+ *  - `no-credentials`    — safety, ["agent","ci"]  ← multi-value case
+ *  - `sox-audit-trail`   — audit,  ["hook"]         ← observational only (Decision 2)
+ *  - `max-rework-3`      — rate,   ["runtime"]
+ *  - `evidence-required` — quality, ["runtime"]
+ *  - `read-only`         — permission, ["settings"]
+ *  - `phase-gate-required` — compliance, ["runtime","ci"]
+ *  - `originality-check` — quality, ["ci"]
+ *  - `allowed-delegation` — permission, ["runtime"]
+ */
+export const POLICY_TEMPLATES = [
+    // ── safety ────────────────────────────────────────────────────────────────
+    {
+        slug: 'reviewer-posture',
+        type: 'safety',
+        description: 'Default skeptic posture: NEEDS-WORK unless evidence confirms each criterion',
+        rules: {
+            default_verdict: 'NEEDS_WORK',
+            requires_explicit_pass_justification: true,
+            minimum_evidence_per_criterion: 1,
+            components_to_inject: ['default-skeptic', 'reviewer-boundary'],
+        },
+        enforcement: ['agent'],
+        version: 1,
+        isSystem: true,
+    },
+    {
+        slug: 'no-credentials',
+        type: 'safety',
+        description: 'Prevent credential leakage in files, task output, and handoff text',
+        rules: {
+            forbidden_patterns: [
+                'sk-[a-zA-Z0-9]{32,}',
+                'AKIA[0-9A-Z]{16}',
+                '-----BEGIN (RSA|EC|OPENSSH) PRIVATE KEY-----',
+                'password\\s*=\\s*[\'"][^\'"]{4,}',
+            ],
+            ci_scan_targets: ['committed_files', 'task_output', 'handoff_text'],
+            components_to_inject: ['no-credentials'],
+        },
+        // The multi-value enforcement that the round-trip test must verify.
+        // [inv:enforcement-is-array]
+        enforcement: ['agent', 'ci'],
+        version: 1,
+        isSystem: true,
+    },
+    // ── audit ─────────────────────────────────────────────────────────────────
+    {
+        slug: 'sox-audit-trail',
+        type: 'audit',
+        description: 'Log io and compute tool calls for SOX-compliant audit trail',
+        rules: {
+            hook_event: 'TOOL_CALL',
+            log_tool_types: ['io', 'compute'],
+            require_task_event_on: ['file_write', 'file_edit', 'shell_exec'],
+            // Decision 2: this hook is observational, not blocking.  It is NOT
+            // registered via registerEnforcement("pre:model_request") — only via
+            // the observational hooks.register() path. [decisions.md Decision 2]
+            hook_type: 'observational',
+        },
+        enforcement: ['hook'],
+        version: 1,
+        isSystem: true,
+    },
+    // ── rate ─────────────────────────────────────────────────────────────────
+    {
+        slug: 'max-rework-3',
+        type: 'rate',
+        description: 'Cap rework attempts at 3; escalate to janitor on breach',
+        rules: {
+            max_rework: 3,
+            check_at: 'cmd_gate_changes_requested',
+            escalation_target: 'janitor',
+            escalation_template_component: 'sox-escalation-report',
+            inject_attempt_framing: true,
+            attempt_framing_component: 'attempt-framing',
+        },
+        enforcement: ['runtime'],
+        version: 1,
+        isSystem: true,
+    },
+    // ── quality ───────────────────────────────────────────────────────────────
+    {
+        slug: 'evidence-required',
+        type: 'quality',
+        description: 'Block verdict if required evidence fields are absent or empty',
+        rules: {
+            validator_agent_slug: 'evidence-validator',
+            validator_default_verdict: 'EVIDENCE_INSUFFICIENT',
+            required_fields: [
+                'changed_files',
+                'acceptance_criteria_addressed',
+                'test_results',
+            ],
+            required_fields_except: {
+                test_results: ['SPIKE', 'CHORE'],
+            },
+            block_verdict_if_insufficient: true,
+        },
+        enforcement: ['runtime'],
+        version: 1,
+        isSystem: true,
+    },
+    {
+        slug: 'originality-check',
+        type: 'quality',
+        description: 'Block duplicate agent commits above 0.85 similarity threshold',
+        rules: {
+            check_on: 'new_agent_commit',
+            similarity_threshold: 0.85,
+            comparison_fields: [
+                'role_component_content',
+                'capability_component_content',
+            ],
+            action_on_duplicate: 'block_commit',
+            suggest_extend_existing: true,
+        },
+        enforcement: ['ci'],
+        version: 1,
+        isSystem: true,
+    },
+    // ── permission ────────────────────────────────────────────────────────────
+    {
+        slug: 'read-only',
+        type: 'permission',
+        description: 'Restrict agent to read-only tool access; forbid compute tools',
+        rules: {
+            allowed_tool_permissions: ['read_only'],
+            disallow_tool_types: ['compute'],
+            disallow_tools: ['file_write', 'file_edit', 'shell_exec'],
+        },
+        enforcement: ['settings'],
+        version: 1,
+        isSystem: true,
+    },
+    {
+        slug: 'allowed-delegation',
+        type: 'permission',
+        description: 'Allowlist sub-agent delegation targets; empty = unrestricted',
+        rules: {
+            mode: 'allowlist',
+            allowlist: [],
+            note: 'Empty allowlist = unrestricted delegation. Populate per-agent via AGENT_POLICY.override_config.',
+        },
+        enforcement: ['runtime'],
+        version: 1,
+        isSystem: true,
+    },
+    // ── compliance ────────────────────────────────────────────────────────────
+    {
+        slug: 'phase-gate-required',
+        type: 'compliance',
+        description: 'Require passing phase gate before ticket creation for next phase',
+        rules: {
+            gate_command: 'sox gate phase',
+            block_ticket_creation_for_next_phase: true,
+            gate_criteria_source: 'PHASE.gate_id',
+            require_all_criteria_met: true,
+        },
+        enforcement: ['runtime', 'ci'],
+        version: 1,
+        isSystem: true,
+    },
+];
+//# sourceMappingURL=policy-templates.js.map

package/src/seed/policy-templates.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-templates.js","sourceRoot":"","sources":["../../../../../../packages/agent/agent-core-policy/src/seed/policy-templates.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAYH;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAqC;IAChE,6EAA6E;IAE7E;QACE,IAAI,EAAE,kBAAkB;QACxB,IAAI,EAAE,QAAQ;QACd,WAAW,EACT,6EAA6E;QAC/E,KAAK,EAAE;YACL,eAAe,EAAE,YAAY;YAC7B,oCAAoC,EAAE,IAAI;YAC1C,8BAA8B,EAAE,CAAC;YACjC,oBAAoB,EAAE,CAAC,iBAAiB,EAAE,mBAAmB,CAAC;SAC/D;QACD,WAAW,EAAE,CAAC,OAAO,CAAC;QACtB,OAAO,EAAE,CAAC;QACV,QAAQ,EAAE,IAAI;KACf;IAED;QACE,IAAI,EAAE,gBAAgB;QACtB,IAAI,EAAE,QAAQ;QACd,WAAW,EACT,oEAAoE;QACtE,KAAK,EAAE;YACL,kBAAkB,EAAE;gBAClB,qBAAqB;gBACrB,kBAAkB;gBAClB,8CAA8C;gBAC9C,kCAAkC;aACnC;YACD,eAAe,EAAE,CAAC,iBAAiB,EAAE,aAAa,EAAE,cAAc,CAAC;YACnE,oBAAoB,EAAE,CAAC,gBAAgB,CAAC;SACzC;QACD,oEAAoE;QACpE,6BAA6B;QAC7B,WAAW,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC;QAC5B,OAAO,EAAE,CAAC;QACV,QAAQ,EAAE,IAAI;KACf;IAED,6EAA6E;IAE7E;QACE,IAAI,EAAE,iBAAiB;QACvB,IAAI,EAAE,OAAO;QACb,WAAW,EAAE,6DAA6D;QAC1E,KAAK,EAAE;YACL,UAAU,EAAE,WAAW;YACvB,cAAc,EAAE,CAAC,IAAI,EAAE,SAAS,CAAC;YACjC,qBAAqB,EAAE,CAAC,YAAY,EAAE,WAAW,EAAE,YAAY,CAAC;YAChE,mEAAmE;YACnE,qEAAqE;YACrE,qEAAqE;YACrE,SAAS,EAAE,eAAe;SAC3B;QACD,WAAW,EAAE,CAAC,MAAM,CAAC;QACrB,OAAO,EAAE,CAAC;QACV,QAAQ,EAAE,IAAI;KACf;IAED,4EAA4E;IAE5E;QACE,IAAI,EAAE,cAAc;QACpB,IAAI,EAAE,MAAM;QACZ,WAAW,EAAE,yDAAyD;QACtE,KAAK,EAAE;YACL,UAAU,EAAE,CAAC;YACb,QAAQ,EAAE,4BAA4B;YACtC,iBAAiB,EAAE,SAAS;YAC5B,6BAA6B,EAAE,uBAAuB;YACtD,sBAAsB,EAAE,IAAI;YAC5B,yBAAyB,EAAE,iBAAiB;SAC7C;QACD,WAAW,EAAE,CAAC,SAAS,CAAC;QACxB,OAAO,EAAE,CAAC;QACV,QAAQ,EAAE,IAAI;KACf;IAED,6EAA6E;IAE7E;QACE,IAAI,EAAE,mBAAmB;QACzB,IAAI,EAAE,SAAS;QACf,WAAW,EACT,+DAA+D;QACjE,KAAK,EAAE;YACL,oBAAoB,EAAE,oBAAoB;YAC1C,yBAAyB,EAAE,uBAAuB;YAClD,eAAe,EAAE;gBACf,eAAe;gBACf,+BAA+B;gBAC/B,cAAc;aACf;YACD,sBAAsB,EAAE;gBACtB,YAAY,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC;aACjC;YACD,6BAA6B,EAAE,IAAI;SACpC;QACD,WAAW,EAAE,CAAC,SAAS,CAAC;QACxB,OAAO,EAAE,CAAC;QACV,QAAQ,EAAE,IAAI;KACf;IAED;QACE,IAAI,EAAE,mBAAmB;QACzB,IAAI,EAAE,SAAS;QACf,WAAW,EACT,+DAA+D;QACjE,KAAK,EAAE;YACL,QAAQ,EAAE,kBAAkB;YAC5B,oBAAoB,EAAE,IAAI;YAC1B,iBAAiB,EAAE;gBACjB,wBAAwB;gBACxB,8BAA8B;aAC/B;YACD,mBAAmB,EAAE,cAAc;YACnC,uBAAuB,EAAE,IAAI;SAC9B;QACD,WAAW,EAAE,CAAC,IAAI,CAAC;QACnB,OAAO,EAAE,CAAC;QACV,QAAQ,EAAE,IAAI;KACf;IAED,6EAA6E;IAE7E;QACE,IAAI,EAAE,WAAW;QACjB,IAAI,EAAE,YAAY;QAClB,WAAW,EACT,+DAA+D;QACjE,KAAK,EAAE;YACL,wBAAwB,EAAE,CAAC,WAAW,CAAC;YACvC,mBAAmB,EAAE,CAAC,SAAS,CAAC;YAChC,cAAc,EAAE,CAAC,YAAY,EAAE,WAAW,EAAE,YAAY,CAAC;SAC1D;QACD,WAAW,EAAE,CAAC,UAAU,CAAC;QACzB,OAAO,EAAE,CAAC;QACV,QAAQ,EAAE,IAAI;KACf;IAED;QACE,IAAI,EAAE,oBAAoB;QAC1B,IAAI,EAAE,YAAY;QAClB,WAAW,EAAE,8DAA8D;QAC3E,KAAK,EAAE;YACL,IAAI,EAAE,WAAW;YACjB,SAAS,EAAE,EAAE;YACb,IAAI,EAAE,iGAAiG;SACxG;QACD,WAAW,EAAE,CAAC,SAAS,CAAC;QACxB,OAAO,EAAE,CAAC;QACV,QAAQ,EAAE,IAAI;KACf;IAED,6EAA6E;IAE7E;QACE,IAAI,EAAE,qBAAqB;QAC3B,IAAI,EAAE,YAAY;QAClB,WAAW,EACT,kEAAkE;QACpE,KAAK,EAAE;YACL,YAAY,EAAE,gBAAgB;YAC9B,oCAAoC,EAAE,IAAI;YAC1C,oBAAoB,EAAE,eAAe;YACrC,wBAAwB,EAAE,IAAI;SAC/B;QACD,WAAW,EAAE,CAAC,SAAS,EAAE,IAAI,CAAC;QAC9B,OAAO,EAAE,CAAC;QACV,QAAQ,EAAE,IAAI;KACf;CACO,CAAC"}

package/src/seed/policy-types.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Seed data for the `policy_policy_types` lookup table.
+ *
+ * Each entry is a controlled-vocabulary slug with a description.
+ * New policy types are added by seeding a row — never by altering the column
+ * type or writing a migration. [inv:lookup-not-enum]
+ *
+ * Source: SEED_DATA.md §3 — Policy Types.
+ */
+export interface PolicyTypeSeedRow {
+    slug: string;
+    description: string;
+}
+/**
+ * The seven canonical policy types that ship with the agent registry.
+ * `INSERT OR IGNORE` semantics — running this list twice is a no-op.
+ */
+export declare const POLICY_TYPES: readonly PolicyTypeSeedRow[];
+//# sourceMappingURL=policy-types.d.ts.map

package/src/seed/policy-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-types.d.ts","sourceRoot":"","sources":["../../../../../../packages/agent/agent-core-policy/src/seed/policy-types.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;;GAGG;AACH,eAAO,MAAM,YAAY,EAAE,SAAS,iBAAiB,EA6B3C,CAAC"}

package/src/seed/policy-types.js

@@ -0,0 +1,44 @@
+/**
+ * Seed data for the `policy_policy_types` lookup table.
+ *
+ * Each entry is a controlled-vocabulary slug with a description.
+ * New policy types are added by seeding a row — never by altering the column
+ * type or writing a migration. [inv:lookup-not-enum]
+ *
+ * Source: SEED_DATA.md §3 — Policy Types.
+ */
+/**
+ * The seven canonical policy types that ship with the agent registry.
+ * `INSERT OR IGNORE` semantics — running this list twice is a no-op.
+ */
+export const POLICY_TYPES = [
+    {
+        slug: 'permission',
+        description: 'What tools or agent delegations are allowed',
+    },
+    {
+        slug: 'safety',
+        description: 'What content, actions, or outputs are forbidden',
+    },
+    {
+        slug: 'audit',
+        description: 'What must be logged, traced, or recorded',
+    },
+    {
+        slug: 'rate',
+        description: 'Token, call count, time, or rework limits',
+    },
+    {
+        slug: 'scope',
+        description: 'Accessible file paths, domains, or ticket types',
+    },
+    {
+        slug: 'compliance',
+        description: 'Regulatory or organizational requirements',
+    },
+    {
+        slug: 'quality',
+        description: 'Output quality invariants enforced at gate time',
+    },
+];
+//# sourceMappingURL=policy-types.js.map

package/src/seed/policy-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-types.js","sourceRoot":"","sources":["../../../../../../packages/agent/agent-core-policy/src/seed/policy-types.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAOH;;;GAGG;AACH,MAAM,CAAC,MAAM,YAAY,GAAiC;IACxD;QACE,IAAI,EAAE,YAAY;QAClB,WAAW,EAAE,6CAA6C;KAC3D;IACD;QACE,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,iDAAiD;KAC/D;IACD;QACE,IAAI,EAAE,OAAO;QACb,WAAW,EAAE,0CAA0C;KACxD;IACD;QACE,IAAI,EAAE,MAAM;QACZ,WAAW,EAAE,2CAA2C;KACzD;IACD;QACE,IAAI,EAAE,OAAO;QACb,WAAW,EAAE,iDAAiD;KAC/D;IACD;QACE,IAAI,EAAE,YAAY;QAClB,WAAW,EAAE,2CAA2C;KACzD;IACD;QACE,IAAI,EAAE,SAAS;QACf,WAAW,EAAE,iDAAiD;KAC/D;CACO,CAAC"}

package/src/store/agent-policy-store.d.ts

@@ -0,0 +1,172 @@
+type AnyBetterSQLite3Database = import('drizzle-orm/better-sqlite3').BetterSQLite3Database<any>;
+import { PolicyError } from './policy-template-store.js';
+export type AgentPolicyErrorCode = 'AGENT_POLICY_ALREADY_ATTACHED' | 'CATEGORY_POLICY_ALREADY_ATTACHED' | 'AGENT_CATEGORY_ALREADY_JOINED';
+/**
+ * Typed error thrown by {@link AgentPolicyStore} — mirrors the PolicyError
+ * pattern but for junction-specific error codes.
+ */
+export declare class AgentPolicyError extends Error {
+    readonly code: AgentPolicyErrorCode;
+    readonly data?: unknown;
+    constructor(code: AgentPolicyErrorCode, message: string, data?: unknown);
+}
+export { PolicyError };
+/**
+ * One resolved `policy_agent_policies` row as returned by
+ * {@link AgentPolicyStore.listForAgent}.
+ *
+ * `overrideConfig` is the per-agent JSON customisation of the template's rules
+ * (Decision 3: shallow-merge semantics). `null` means "use the template unchanged."
+ *
+ * `inheritedFrom` is the taxonomy category slug a policy cascaded from, or
+ * `null` when attached directly to the agent. [Decision 1]
+ */
+export interface AgentPolicyRow {
+    /** Logical reference to registry_agents.slug — no cross-package FK. */
+    agentSlug: string;
+    /** FK to policy_policy_templates.slug (in-package, real FK). */
+    policySlug: string;
+    /** Per-agent rule overrides (shallow-merge over template.rules). Null = no override. */
+    overrideConfig: Record<string, unknown> | null;
+    /** True when this policy must be enforced regardless of agent config. */
+    isMandatory: boolean;
+    /**
+     * Category slug this policy cascaded from, or null if attached directly.
+     * Direct-attach sets this to null. [Decision 1, inv:reopen-proves-persistence]
+     */
+    inheritedFrom: string | null;
+}
+/** Input for {@link AgentPolicyStore.attach} (direct-attach path). */
+export interface AgentPolicyAttachInput {
+    /** Slug of the agent to attach the policy to. */
+    agentSlug: string;
+    /** Slug of the policy template to attach. */
+    policySlug: string;
+    /** Optional per-agent override (shallow-merged over template.rules). */
+    overrideConfig?: Record<string, unknown>;
+    /** When true, this policy is mandatory. Defaults to false. */
+    isMandatory?: boolean;
+}
+/**
+ * Input for {@link AgentPolicyStore.attachToCategory}.
+ *
+ * Attaches a policy to a taxonomy category.  All agents that belong to the
+ * category (now or in the future) will inherit this policy via the lazy
+ * resolver — no fanout rows are written. [Decision 1]
+ */
+export interface CategoryPolicyAttachInput {
+    /** Logical taxonomy category slug (cross-package ref, no FK). */
+    categorySlug: string;
+    /** Slug of the policy template to attach to the category. */
+    policySlug: string;
+    /** When true, every inheriting agent carries this as mandatory. */
+    isMandatory?: boolean;
+}
+/**
+ * One row returned by {@link AgentPolicyStore.attachToCategory} confirming the
+ * category-level attachment was stored.
+ */
+export interface CategoryPolicyRow {
+    categorySlug: string;
+    policySlug: string;
+    isMandatory: boolean;
+}
+/**
+ * Input for {@link AgentPolicyStore.addAgentToCategory}.
+ *
+ * Records that `agentSlug` is a member of `categorySlug`.  At the next
+ * `resolveForAgent` call the agent automatically inherits all policies
+ * attached to that category. [Decision 1 — lazy, no re-fanout needed]
+ */
+export interface AgentCategoryInput {
+    /** Logical agent slug (cross-package ref, no FK). */
+    agentSlug: string;
+    /** Logical taxonomy category slug (cross-package ref, no FK). */
+    categorySlug: string;
+}
+/**
+ * Thin Drizzle wrapper for the `policy_agent_policies` junction table.
+ *
+ * Mirrors the `PolicyTemplateStore` / `agent-mcp` AgentStore pattern:
+ *  - constructor takes a `BetterSQLite3Database` handle (caller owns lifecycle)
+ *  - methods are synchronous Drizzle queries
+ *  - errors throw {@link AgentPolicyError} with typed codes
+ *
+ * Direct-attach (`attach`) sets `inherited_from = NULL`.  Category inheritance
+ * resolution (`resolveForAgent`, added in the `policy-inheritance` state) reads
+ * the joined category membership at query time — lazy, per Decision 1.
+ */
+export declare class AgentPolicyStore {
+    private readonly db;
+    constructor(db: AnyBetterSQLite3Database);
+    /**
+     * Attach a policy template DIRECTLY to an agent (`inherited_from = null`).
+     *
+     * @throws {AgentPolicyError} AGENT_POLICY_ALREADY_ATTACHED when the
+     *   (agentSlug, policySlug) pair already exists.
+     */
+    attach(input: AgentPolicyAttachInput): AgentPolicyRow;
+    /**
+     * Return all direct `policy_agent_policies` rows for the given agent slug.
+     *
+     * Returns only rows stored directly against the agent (`inherited_from IS NULL`
+     * for direct-attach rows).  Use {@link resolveForAgent} to include inherited
+     * policies from category membership.
+     *
+     * @param agentSlug — the slug of the agent whose policies to retrieve.
+     */
+    listForAgent(agentSlug: string): AgentPolicyRow[];
+    /**
+     * Attach a policy template to a taxonomy CATEGORY (lazy inheritance).
+     *
+     * Stores a single `policy_category_policies` row — does NOT fan out rows to
+     * individual agents.  Any agent already in or later added to the category
+     * inherits this policy at the next `resolveForAgent` call. [Decision 1]
+     *
+     * @throws {AgentPolicyError} CATEGORY_POLICY_ALREADY_ATTACHED when the
+     *   (categorySlug, policySlug) pair already exists.
+     */
+    attachToCategory(input: CategoryPolicyAttachInput): CategoryPolicyRow;
+    /**
+     * Record that an agent is a member of a taxonomy category.
+     *
+     * At the next `resolveForAgent` call the agent automatically inherits all
+     * policies attached to the category — no re-fanout or migration needed.
+     * This is the "agent added AFTER the category-attach" case from Decision 1.
+     *
+     * @throws {AgentPolicyError} AGENT_CATEGORY_ALREADY_JOINED when the
+     *   (agentSlug, categorySlug) pair already exists.
+     */
+    addAgentToCategory(input: AgentCategoryInput): void;
+    /**
+     * Resolve the complete effective policy set for an agent at query time.
+     *
+     * Returns a union of:
+     *  1. Policies attached DIRECTLY to the agent (inheritedFrom = null).
+     *  2. Policies inherited from every category the agent belongs to,
+     *     synthesised as rows with inheritedFrom = categorySlug. [Decision 1]
+     *
+     * The join is performed at call time so newly added category policies or
+     * membership changes are always reflected — there is no stale materialised
+     * cache to invalidate.
+     *
+     * If an agent has a direct-attach for a policy AND inherits the same policy
+     * from a category, the direct-attach row takes precedence (override wins).
+     *
+     * @param agentSlug — the slug of the agent to resolve policies for.
+     */
+    resolveForAgent(agentSlug: string): AgentPolicyRow[];
+    private _toRow;
+}
+/**
+ * Compute effective rules by shallow-merging `overrideConfig` on top of
+ * `templateRules`. Override keys replace template keys (arrays and nested
+ * objects are replaced wholesale). An absent or empty override leaves the
+ * template unchanged. [Decision 3]
+ *
+ * @param templateRules — the base rules object from `policy_policy_templates`.
+ * @param overrideConfig — the per-agent override (may be null/undefined).
+ * @returns the effective merged rules object.
+ */
+export declare function resolveEffectiveRules(templateRules: Record<string, unknown>, overrideConfig: Record<string, unknown> | null | undefined): Record<string, unknown>;
+//# sourceMappingURL=agent-policy-store.d.ts.map

package/src/store/agent-policy-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-policy-store.d.ts","sourceRoot":"","sources":["../../../../../../packages/agent/agent-core-policy/src/store/agent-policy-store.ts"],"names":[],"mappings":"AAGA,KAAK,wBAAwB,GAAG,OAAO,4BAA4B,EAAE,qBAAqB,CAAC,GAAG,CAAC,CAAC;AAOhG,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAMzD,MAAM,MAAM,oBAAoB,GAC5B,+BAA+B,GAC/B,kCAAkC,GAClC,+BAA+B,CAAC;AAEpC;;;GAGG;AACH,qBAAa,gBAAiB,SAAQ,KAAK;IACzC,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC;IACpC,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;gBAEZ,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO;CAMxE;AAGD,OAAO,EAAE,WAAW,EAAE,CAAC;AAMvB;;;;;;;;;GASG;AACH,MAAM,WAAW,cAAc;IAC7B,uEAAuE;IACvE,SAAS,EAAE,MAAM,CAAC;IAClB,gEAAgE;IAChE,UAAU,EAAE,MAAM,CAAC;IACnB,wFAAwF;IACxF,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC/C,yEAAyE;IACzE,WAAW,EAAE,OAAO,CAAC;IACrB;;;OAGG;IACH,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED,sEAAsE;AACtE,MAAM,WAAW,sBAAsB;IACrC,iDAAiD;IACjD,SAAS,EAAE,MAAM,CAAC;IAClB,6CAA6C;IAC7C,UAAU,EAAE,MAAM,CAAC;IACnB,wEAAwE;IACxE,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACzC,8DAA8D;IAC9D,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,yBAAyB;IACxC,iEAAiE;IACjE,YAAY,EAAE,MAAM,CAAC;IACrB,6DAA6D;IAC7D,UAAU,EAAE,MAAM,CAAC;IACnB,mEAAmE;IACnE,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,OAAO,CAAC;CACtB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,kBAAkB;IACjC,qDAAqD;IACrD,SAAS,EAAE,MAAM,CAAC;IAClB,iEAAiE;IACjE,YAAY,EAAE,MAAM,CAAC;CACtB;AAMD;;;;;;;;;;;GAWG;AACH,qBAAa,gBAAgB;IAIzB,OAAO,CAAC,QAAQ,CAAC,EAAE;gBAAF,EAAE,EAAE,wBAAwB;IAG/C;;;;;OAKG;IACH,MAAM,CAAC,KAAK,EAAE,sBAAsB,GAAG,cAAc;IA+CrD;;;;;;;;OAQG;IACH,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,cAAc,EAAE;IAYjD;;;;;;;;;OASG;IACH,gBAAgB,CAAC,KAAK,EAAE,yBAAyB,GAAG,iBAAiB;IA8BrE;;;;;;;;;OASG;IACH,kBAAkB,CAAC,KAAK,EAAE,kBAAkB,GAAG,IAAI;IAuBnD;;;;;;;;;;;;;;;;OAgBG;IACH,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,cAAc,EAAE;IAmDpD,OAAO,CAAC,MAAM;CAWf;AAED;;;;;;;;;GASG;AACH,wBAAgB,qBAAqB,CACnC,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACtC,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,GAAG,SAAS,GACzD,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAKzB"}