@cats-inc/cats-platform 0.1.0

package/build/server/platform/supervision/policyEngine.js

@@ -0,0 +1,281 @@
+import { compareCapabilityConfidence, } from './capabilityAssessment.js';
+import { SUPERVISION_POLICY_BUNDLE_VERSION, SUPERVISION_POLICY_DIAL_VERSIONS, } from './policyVersions.js';
+const AUTONOMY_LOOSENESS = {
+    none: 0,
+    single_step: 1,
+    milestone_plan: 2,
+    outcome_delegation: 3,
+};
+const TASK_GRANULARITY_LOOSENESS = {
+    tiny: 0,
+    step: 1,
+    milestone: 2,
+    outcome: 3,
+};
+const TOOL_SCOPE_LOOSENESS = {
+    none: 0,
+    read_only: 1,
+    narrow_write: 2,
+    broad_write: 3,
+};
+const SCAFFOLDING_LOOSENESS = {
+    sop_template: 0,
+    grammar_forced: 1,
+    few_shot: 2,
+    none: 3,
+};
+// semantic_check keeps the provider-agent schema-ref gate, but does not
+// yet run an additional semantic validator. Until that lands, treat it
+// as looser than schema_required for weak_worker ceiling purposes.
+const VALIDATION_LOOSENESS = {
+    schema_required: 0,
+    semantic_check: 1,
+    best_effort: 2,
+};
+const CHECKPOINT_CADENCE_LOOSENESS = {
+    every_step: 0,
+    milestone: 1,
+    on_risk: 2,
+    final: 3,
+};
+const APPROVAL_THRESHOLD_LOOSENESS = {
+    high: 0,
+    medium: 1,
+    low: 2,
+};
+const FALLBACK_POLICY_LOOSENESS = {
+    ask_human: 0,
+    retry: 1,
+    escalate_model: 2,
+    delegate_other: 3,
+};
+function findWeakWorkerCeilingViolations(policy, ceiling) {
+    const violations = [];
+    if (AUTONOMY_LOOSENESS[policy.autonomy] > AUTONOMY_LOOSENESS[ceiling.autonomy]) {
+        violations.push({ dial: 'autonomy', value: policy.autonomy, ceiling: ceiling.autonomy });
+    }
+    if (TASK_GRANULARITY_LOOSENESS[policy.taskGranularity]
+        > TASK_GRANULARITY_LOOSENESS[ceiling.taskGranularity]) {
+        violations.push({
+            dial: 'taskGranularity',
+            value: policy.taskGranularity,
+            ceiling: ceiling.taskGranularity,
+        });
+    }
+    if (TOOL_SCOPE_LOOSENESS[policy.toolScope] > TOOL_SCOPE_LOOSENESS[ceiling.toolScope]) {
+        violations.push({ dial: 'toolScope', value: policy.toolScope, ceiling: ceiling.toolScope });
+    }
+    if (SCAFFOLDING_LOOSENESS[policy.scaffolding] > SCAFFOLDING_LOOSENESS[ceiling.scaffolding]) {
+        violations.push({
+            dial: 'scaffolding',
+            value: policy.scaffolding,
+            ceiling: ceiling.scaffolding,
+        });
+    }
+    if (VALIDATION_LOOSENESS[policy.validation] > VALIDATION_LOOSENESS[ceiling.validation]) {
+        violations.push({ dial: 'validation', value: policy.validation, ceiling: ceiling.validation });
+    }
+    if (CHECKPOINT_CADENCE_LOOSENESS[policy.checkpointCadence]
+        > CHECKPOINT_CADENCE_LOOSENESS[ceiling.checkpointCadence]) {
+        violations.push({
+            dial: 'checkpointCadence',
+            value: policy.checkpointCadence,
+            ceiling: ceiling.checkpointCadence,
+        });
+    }
+    if (APPROVAL_THRESHOLD_LOOSENESS[policy.approvalThreshold]
+        > APPROVAL_THRESHOLD_LOOSENESS[ceiling.approvalThreshold]) {
+        violations.push({
+            dial: 'approvalThreshold',
+            value: policy.approvalThreshold,
+            ceiling: ceiling.approvalThreshold,
+        });
+    }
+    if (FALLBACK_POLICY_LOOSENESS[policy.fallbackPolicy]
+        > FALLBACK_POLICY_LOOSENESS[ceiling.fallbackPolicy]) {
+        violations.push({
+            dial: 'fallbackPolicy',
+            value: policy.fallbackPolicy,
+            ceiling: ceiling.fallbackPolicy,
+        });
+    }
+    return violations;
+}
+export function decideSupervisionPolicy(context) {
+    const reasons = [
+        `policy bundle ${SUPERVISION_POLICY_BUNDLE_VERSION} evaluated ${context.actionType}`,
+        `bootstrap treatment ${context.capabilityAssessment.bootstrapTreatment}`,
+        `capability confidence ${context.capabilityAssessment.confidenceLevel}`,
+        `tool ${context.toolManifest.name} sideEffect ${context.toolManifest.sideEffect}`,
+    ];
+    const basePolicy = buildBasePolicy(context);
+    const requestedPolicy = context.requestedPolicy ?? {};
+    const operatorPolicy = context.operatorOverride?.policy ?? {};
+    const policy = {
+        ...basePolicy,
+        ...requestedPolicy,
+        ...operatorPolicy,
+    };
+    if (Object.keys(requestedPolicy).length > 0) {
+        reasons.push(`requested policy dials: ${Object.keys(requestedPolicy).sort().join(', ')}`);
+    }
+    if (context.operatorOverride) {
+        reasons.push(`operator override ${context.operatorOverride.overrideId} by ` +
+            `${context.operatorOverride.operatorRef}: ${context.operatorOverride.reason}`);
+    }
+    const rejectionReason = validatePolicy(context, basePolicy, policy, reasons);
+    const snapshot = buildPolicySnapshot(context, policy, reasons);
+    if (rejectionReason !== undefined) {
+        return {
+            status: 'rejected',
+            error: {
+                code: 'E_TOOL_SCOPE_DENIED',
+                message: rejectionReason,
+                details: { snapshot },
+            },
+        };
+    }
+    return {
+        status: 'applied',
+        result: {
+            policy,
+            snapshot,
+        },
+    };
+}
+export function decideDefaultToolScope(input) {
+    if (input.sideEffect === 'none') {
+        return 'read_only';
+    }
+    if (input.bootstrapTreatment === 'weak_worker') {
+        return 'read_only';
+    }
+    return 'narrow_write';
+}
+export function decideDefaultApprovalThreshold(sideEffect) {
+    switch (sideEffect) {
+        case 'none':
+            return 'low';
+        case 'local_state':
+            return 'medium';
+        case 'external_visible':
+        case 'destructive':
+        case 'expensive':
+            return 'high';
+        default: {
+            const exhaustive = sideEffect;
+            return exhaustive;
+        }
+    }
+}
+function buildBasePolicy(context) {
+    const treatment = context.capabilityAssessment.bootstrapTreatment;
+    const confidence = context.capabilityAssessment.confidenceLevel;
+    const approvalThreshold = decideDefaultApprovalThreshold(context.toolManifest.sideEffect);
+    // weak_worker is a blacklist label that stays clamped regardless of
+    // evidence — evaluated/observed evidence must NOT loosen any dial.
+    if (treatment === 'weak_worker') {
+        return {
+            autonomy: 'single_step',
+            taskGranularity: 'tiny',
+            toolScope: 'read_only',
+            scaffolding: 'sop_template',
+            validation: 'schema_required',
+            checkpointCadence: 'every_step',
+            approvalThreshold,
+            fallbackPolicy: 'ask_human',
+        };
+    }
+    const isEvaluatedOrBetter = compareCapabilityConfidence(confidence, 'evaluated') >= 0;
+    const isStrongOrBetter = treatment === 'strong_agent' || isEvaluatedOrBetter;
+    return {
+        autonomy: isStrongOrBetter ? 'milestone_plan' : 'single_step',
+        taskGranularity: isEvaluatedOrBetter ? 'milestone' : 'step',
+        toolScope: decideDefaultToolScope({
+            bootstrapTreatment: treatment,
+            sideEffect: context.toolManifest.sideEffect,
+        }),
+        scaffolding: isStrongOrBetter ? 'few_shot' : 'sop_template',
+        // Stay on schema_required until semantic_check ships an additional
+        // semantic validator. The gate preserves the schema-ref requirement
+        // for semantic_check, but it does not add semantic validation yet.
+        validation: 'schema_required',
+        checkpointCadence: isStrongOrBetter ? 'milestone' : 'every_step',
+        approvalThreshold,
+        fallbackPolicy: isStrongOrBetter ? 'retry' : 'ask_human',
+    };
+}
+function validatePolicy(context, basePolicy, policy, reasons) {
+    const confidence = context.capabilityAssessment.confidenceLevel;
+    const treatment = context.capabilityAssessment.bootstrapTreatment;
+    const constrainedByFloor = confidence === 'unknown' || confidence === 'catalog_only';
+    const isWeak = treatment === 'weak_worker';
+    if (constrainedByFloor && policy.toolScope === 'broad_write') {
+        const message = `FR-19 rejected broad_write under ${confidence} confidence with E_TOOL_SCOPE_DENIED.`;
+        reasons.push(message);
+        return message;
+    }
+    if (constrainedByFloor && policy.autonomy === 'outcome_delegation') {
+        const message = `FR-19 rejected outcome_delegation under ${confidence} confidence with ` +
+            'E_TOOL_SCOPE_DENIED.';
+        reasons.push(message);
+        return message;
+    }
+    if (isWeak) {
+        const violations = findWeakWorkerCeilingViolations(policy, basePolicy);
+        if (violations.length > 0) {
+            const detail = violations
+                .map((violation) => `${violation.dial}=${violation.value} (ceiling ${violation.ceiling})`)
+                .join(', ');
+            const message = `weak_worker treatment cannot loosen ${detail} with E_TOOL_SCOPE_DENIED.`;
+            reasons.push(message);
+            return message;
+        }
+    }
+    if (constrainedByFloor && policy.fallbackPolicy === 'delegate_other') {
+        const message = `FR-19 rejected delegate_other recovery under ${confidence} confidence with ` +
+            'E_TOOL_SCOPE_DENIED.';
+        reasons.push(message);
+        return message;
+    }
+    if (policy.toolScope === 'broad_write' &&
+        isSideEffectBearing(context.toolManifest.sideEffect) &&
+        policy.approvalThreshold !== 'high') {
+        const message = `Rejected broad_write for ${context.toolManifest.sideEffect} tool without high approval ` +
+            'threshold.';
+        reasons.push(message);
+        return message;
+    }
+    return undefined;
+}
+function buildPolicySnapshot(context, policy, reasons) {
+    return {
+        schemaVersion: context.capabilityAssessment.schemaVersion,
+        policyBundleVersion: SUPERVISION_POLICY_BUNDLE_VERSION,
+        dialVersions: SUPERVISION_POLICY_DIAL_VERSIONS,
+        experimentId: context.experimentId,
+        evaluatedAt: context.evaluatedAt,
+        actionId: context.actionId,
+        runId: context.runId,
+        actorRef: context.actorRef,
+        policy,
+        contextSummary: {
+            actorRef: context.actorRef,
+            targetRef: context.targetRef,
+            providerRef: context.providerRef,
+            actionType: context.actionType,
+            sideEffect: context.toolManifest.sideEffect,
+            bootstrapTreatment: context.capabilityAssessment.bootstrapTreatment,
+            capabilityConfidence: context.capabilityAssessment.confidenceLevel,
+            deliveryObservability: context.deliveryObservability,
+            budgetState: context.budgetState,
+            approvalState: context.approvalState,
+            recentReliability: context.recentReliability,
+        },
+        reasons: [...reasons],
+    };
+}
+function isSideEffectBearing(sideEffect) {
+    return sideEffect === 'external_visible' || sideEffect === 'destructive' || sideEffect === 'expensive';
+}
+//# sourceMappingURL=policyEngine.js.map

package/build/server/platform/supervision/policyEngine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policyEngine.js","sourceRoot":"","sources":["../../../../src/platform/supervision/policyEngine.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,2BAA2B,GAC5B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,iCAAiC,EACjC,gCAAgC,GACjC,MAAM,qBAAqB,CAAC;AAkB7B,MAAM,kBAAkB,GAAwC;IAC9D,IAAI,EAAE,CAAC;IACP,WAAW,EAAE,CAAC;IACd,cAAc,EAAE,CAAC;IACjB,kBAAkB,EAAE,CAAC;CACtB,CAAC;AAEF,MAAM,0BAA0B,GAA+C;IAC7E,IAAI,EAAE,CAAC;IACP,IAAI,EAAE,CAAC;IACP,SAAS,EAAE,CAAC;IACZ,OAAO,EAAE,CAAC;CACX,CAAC;AAEF,MAAM,oBAAoB,GAAyC;IACjE,IAAI,EAAE,CAAC;IACP,SAAS,EAAE,CAAC;IACZ,YAAY,EAAE,CAAC;IACf,WAAW,EAAE,CAAC;CACf,CAAC;AAEF,MAAM,qBAAqB,GAA2C;IACpE,YAAY,EAAE,CAAC;IACf,cAAc,EAAE,CAAC;IACjB,QAAQ,EAAE,CAAC;IACX,IAAI,EAAE,CAAC;CACR,CAAC;AAEF,wEAAwE;AACxE,uEAAuE;AACvE,mEAAmE;AACnE,MAAM,oBAAoB,GAA0C;IAClE,eAAe,EAAE,CAAC;IAClB,cAAc,EAAE,CAAC;IACjB,WAAW,EAAE,CAAC;CACf,CAAC;AAEF,MAAM,4BAA4B,GAAiD;IACjF,UAAU,EAAE,CAAC;IACb,SAAS,EAAE,CAAC;IACZ,OAAO,EAAE,CAAC;IACV,KAAK,EAAE,CAAC;CACT,CAAC;AAEF,MAAM,4BAA4B,GAAiD;IACjF,IAAI,EAAE,CAAC;IACP,MAAM,EAAE,CAAC;IACT,GAAG,EAAE,CAAC;CACP,CAAC;AAEF,MAAM,yBAAyB,GAA8C;IAC3E,SAAS,EAAE,CAAC;IACZ,KAAK,EAAE,CAAC;IACR,cAAc,EAAE,CAAC;IACjB,cAAc,EAAE,CAAC;CAClB,CAAC;AAQF,SAAS,+BAA+B,CACtC,MAAyB,EACzB,OAA0B;IAE1B,MAAM,UAAU,GAA2B,EAAE,CAAC;IAC9C,IAAI,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,kBAAkB,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC/E,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC3F,CAAC;IACD,IACE,0BAA0B,CAAC,MAAM,CAAC,eAAe,CAAC;UAChD,0BAA0B,CAAC,OAAO,CAAC,eAAe,CAAC,EACrD,CAAC;QACD,UAAU,CAAC,IAAI,CAAC;YACd,IAAI,EAAE,iBAAiB;YACvB,KAAK,EAAE,MAAM,CAAC,eAAe;YAC7B,OAAO,EAAE,OAAO,CAAC,eAAe;SACjC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,oBAAoB,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,oBAAoB,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QACrF,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;IAC9F,CAAC;IACD,IAAI,qBAAqB,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,qBAAqB,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;QAC3F,UAAU,CAAC,IAAI,CAAC;YACd,IAAI,EAAE,aAAa;YACnB,KAAK,EAAE,MAAM,CAAC,WAAW;YACzB,OAAO,EAAE,OAAO,CAAC,WAAW;SAC7B,CAAC,CAAC;IACL,CAAC;IACD,IAAI,oBAAoB,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,oBAAoB,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QACvF,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,CAAC,UAAU,EAAE,OAAO,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;IACjG,CAAC;IACD,IACE,4BAA4B,CAAC,MAAM,CAAC,iBAAiB,CAAC;UACpD,4BAA4B,CAAC,OAAO,CAAC,iBAAiB,CAAC,EACzD,CAAC;QACD,UAAU,CAAC,IAAI,CAAC;YACd,IAAI,EAAE,mBAAmB;YACzB,KAAK,EAAE,MAAM,CAAC,iBAAiB;YAC/B,OAAO,EAAE,OAAO,CAAC,iBAAiB;SACnC,CAAC,CAAC;IACL,CAAC;IACD,IACE,4BAA4B,CAAC,MAAM,CAAC,iBAAiB,CAAC;UACpD,4BAA4B,CAAC,OAAO,CAAC,iBAAiB,CAAC,EACzD,CAAC;QACD,UAAU,CAAC,IAAI,CAAC;YACd,IAAI,EAAE,mBAAmB;YACzB,KAAK,EAAE,MAAM,CAAC,iBAAiB;YAC/B,OAAO,EAAE,OAAO,CAAC,iBAAiB;SACnC,CAAC,CAAC;IACL,CAAC;IACD,IACE,yBAAyB,CAAC,MAAM,CAAC,cAAc,CAAC;UAC9C,yBAAyB,CAAC,OAAO,CAAC,cAAc,CAAC,EACnD,CAAC;QACD,UAAU,CAAC,IAAI,CAAC;YACd,IAAI,EAAE,gBAAgB;YACtB,KAAK,EAAE,MAAM,CAAC,cAAc;YAC5B,OAAO,EAAE,OAAO,CAAC,cAAc;SAChC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAuCD,MAAM,UAAU,uBAAuB,CACrC,OAAiC;IAEjC,MAAM,OAAO,GAAa;QACxB,iBAAiB,iCAAiC,cAAc,OAAO,CAAC,UAAU,EAAE;QACpF,uBAAuB,OAAO,CAAC,oBAAoB,CAAC,kBAAkB,EAAE;QACxE,yBAAyB,OAAO,CAAC,oBAAoB,CAAC,eAAe,EAAE;QACvE,QAAQ,OAAO,CAAC,YAAY,CAAC,IAAI,eAAe,OAAO,CAAC,YAAY,CAAC,UAAU,EAAE;KAClF,CAAC;IACF,MAAM,UAAU,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IAC5C,MAAM,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,EAAE,CAAC;IACtD,MAAM,cAAc,GAAG,OAAO,CAAC,gBAAgB,EAAE,MAAM,IAAI,EAAE,CAAC;IAC9D,MAAM,MAAM,GAAsB;QAChC,GAAG,UAAU;QACb,GAAG,eAAe;QAClB,GAAG,cAAc;KAClB,CAAC;IAEF,IAAI,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5C,OAAO,CAAC,IAAI,CAAC,2BAA2B,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC5F,CAAC;IACD,IAAI,OAAO,CAAC,gBAAgB,EAAE,CAAC;QAC7B,OAAO,CAAC,IAAI,CACV,qBAAqB,OAAO,CAAC,gBAAgB,CAAC,UAAU,MAAM;YAC5D,GAAG,OAAO,CAAC,gBAAgB,CAAC,WAAW,KAAK,OAAO,CAAC,gBAAgB,CAAC,MAAM,EAAE,CAChF,CAAC;IACJ,CAAC;IAED,MAAM,eAAe,GAAG,cAAc,CAAC,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7E,MAAM,QAAQ,GAAG,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IAE/D,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;QAClC,OAAO;YACL,MAAM,EAAE,UAAU;YAClB,KAAK,EAAE;gBACL,IAAI,EAAE,qBAAqB;gBAC3B,OAAO,EAAE,eAAe;gBACxB,OAAO,EAAE,EAAE,QAAQ,EAA8C;aAClE;SACF,CAAC;IACJ,CAAC;IAED,OAAO;QACL,MAAM,EAAE,SAAS;QACjB,MAAM,EAAE;YACN,MAAM;YACN,QAAQ;SACT;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAGtC;IACC,IAAI,KAAK,CAAC,UAAU,KAAK,MAAM,EAAE,CAAC;QAChC,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,IAAI,KAAK,CAAC,kBAAkB,KAAK,aAAa,EAAE,CAAC;QAC/C,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,OAAO,cAAc,CAAC;AACxB,CAAC;AAED,MAAM,UAAU,8BAA8B,CAC5C,UAAoC;IAEpC,QAAQ,UAAU,EAAE,CAAC;QACnB,KAAK,MAAM;YACT,OAAO,KAAK,CAAC;QACf,KAAK,aAAa;YAChB,OAAO,QAAQ,CAAC;QAClB,KAAK,kBAAkB,CAAC;QACxB,KAAK,aAAa,CAAC;QACnB,KAAK,WAAW;YACd,OAAO,MAAM,CAAC;QAChB,OAAO,CAAC,CAAC,CAAC;YACR,MAAM,UAAU,GAAU,UAAU,CAAC;YACrC,OAAO,UAAU,CAAC;QACpB,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,OAAiC;IACxD,MAAM,SAAS,GAAG,OAAO,CAAC,oBAAoB,CAAC,kBAAkB,CAAC;IAClE,MAAM,UAAU,GAAG,OAAO,CAAC,oBAAoB,CAAC,eAAe,CAAC;IAChE,MAAM,iBAAiB,GAAG,8BAA8B,CAAC,OAAO,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;IAE1F,oEAAoE;IACpE,mEAAmE;IACnE,IAAI,SAAS,KAAK,aAAa,EAAE,CAAC;QAChC,OAAO;YACL,QAAQ,EAAE,aAAa;YACvB,eAAe,EAAE,MAAM;YACvB,SAAS,EAAE,WAAW;YACtB,WAAW,EAAE,cAAc;YAC3B,UAAU,EAAE,iBAAiB;YAC7B,iBAAiB,EAAE,YAAY;YAC/B,iBAAiB;YACjB,cAAc,EAAE,WAAW;SAC5B,CAAC;IACJ,CAAC;IAED,MAAM,mBAAmB,GAAG,2BAA2B,CAAC,UAAU,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC;IACtF,MAAM,gBAAgB,GAAG,SAAS,KAAK,cAAc,IAAI,mBAAmB,CAAC;IAE7E,OAAO;QACL,QAAQ,EAAE,gBAAgB,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,aAAa;QAC7D,eAAe,EAAE,mBAAmB,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM;QAC3D,SAAS,EAAE,sBAAsB,CAAC;YAChC,kBAAkB,EAAE,SAAS;YAC7B,UAAU,EAAE,OAAO,CAAC,YAAY,CAAC,UAAU;SAC5C,CAAC;QACF,WAAW,EAAE,gBAAgB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,cAAc;QAC3D,mEAAmE;QACnE,oEAAoE;QACpE,mEAAmE;QACnE,UAAU,EAAE,iBAAiB;QAC7B,iBAAiB,EAAE,gBAAgB,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,YAAY;QAChE,iBAAiB;QACjB,cAAc,EAAE,gBAAgB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW;KACzD,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CACrB,OAAiC,EACjC,UAA6B,EAC7B,MAAyB,EACzB,OAAiB;IAEjB,MAAM,UAAU,GAAG,OAAO,CAAC,oBAAoB,CAAC,eAAe,CAAC;IAChE,MAAM,SAAS,GAAG,OAAO,CAAC,oBAAoB,CAAC,kBAAkB,CAAC;IAClE,MAAM,kBAAkB,GAAG,UAAU,KAAK,SAAS,IAAI,UAAU,KAAK,cAAc,CAAC;IACrF,MAAM,MAAM,GAAG,SAAS,KAAK,aAAa,CAAC;IAE3C,IAAI,kBAAkB,IAAI,MAAM,CAAC,SAAS,KAAK,aAAa,EAAE,CAAC;QAC7D,MAAM,OAAO,GACX,oCAAoC,UAAU,uCAAuC,CAAC;QACxF,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACtB,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,IAAI,kBAAkB,IAAI,MAAM,CAAC,QAAQ,KAAK,oBAAoB,EAAE,CAAC;QACnE,MAAM,OAAO,GACX,2CAA2C,UAAU,mBAAmB;YACxE,sBAAsB,CAAC;QACzB,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACtB,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,UAAU,GAAG,+BAA+B,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACvE,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1B,MAAM,MAAM,GAAG,UAAU;iBACtB,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CACjB,GAAG,SAAS,CAAC,IAAI,IAAI,SAAS,CAAC,KAAK,aAAa,SAAS,CAAC,OAAO,GAAG,CAAC;iBACvE,IAAI,CAAC,IAAI,CAAC,CAAC;YACd,MAAM,OAAO,GACX,uCAAuC,MAAM,4BAA4B,CAAC;YAC5E,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACtB,OAAO,OAAO,CAAC;QACjB,CAAC;IACH,CAAC;IACD,IAAI,kBAAkB,IAAI,MAAM,CAAC,cAAc,KAAK,gBAAgB,EAAE,CAAC;QACrE,MAAM,OAAO,GACX,gDAAgD,UAAU,mBAAmB;YAC7E,sBAAsB,CAAC;QACzB,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACtB,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,IACE,MAAM,CAAC,SAAS,KAAK,aAAa;QAClC,mBAAmB,CAAC,OAAO,CAAC,YAAY,CAAC,UAAU,CAAC;QACpD,MAAM,CAAC,iBAAiB,KAAK,MAAM,EACnC,CAAC;QACD,MAAM,OAAO,GACX,4BAA4B,OAAO,CAAC,YAAY,CAAC,UAAU,8BAA8B;YACzF,YAAY,CAAC;QACf,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACtB,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,mBAAmB,CAC1B,OAAiC,EACjC,MAAyB,EACzB,OAAiB;IAEjB,OAAO;QACL,aAAa,EAAE,OAAO,CAAC,oBAAoB,CAAC,aAAa;QACzD,mBAAmB,EAAE,iCAAiC;QACtD,YAAY,EAAE,gCAAgC;QAC9C,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,MAAM;QACN,cAAc,EAAE;YACd,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,UAAU,EAAE,OAAO,CAAC,YAAY,CAAC,UAAU;YAC3C,kBAAkB,EAAE,OAAO,CAAC,oBAAoB,CAAC,kBAAkB;YACnE,oBAAoB,EAAE,OAAO,CAAC,oBAAoB,CAAC,eAAe;YAClE,qBAAqB,EAAE,OAAO,CAAC,qBAAqB;YACpD,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,aAAa,EAAE,OAAO,CAAC,aAAa;YACpC,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;SAC7C;QACD,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC;KACtB,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,UAAoC;IAC/D,OAAO,UAAU,KAAK,kBAAkB,IAAI,UAAU,KAAK,aAAa,IAAI,UAAU,KAAK,WAAW,CAAC;AACzG,CAAC"}

package/build/server/platform/supervision/policySnapshots.d.ts

@@ -0,0 +1,19 @@
+import type { CoreStore } from '../../core/store.js';
+import type { CatsCoreState, CoreTraceRecord } from '../../core/types.js';
+import type { SupervisionPolicySnapshot, SupervisionPolicySnapshotRef } from './contracts.js';
+export interface SupervisionPolicySnapshotPersistenceInput {
+    coreStore: CoreStore;
+    snapshot: SupervisionPolicySnapshot;
+    conversationId?: string | null;
+    taskId?: string | null;
+    traceId?: string | null;
+    now?: () => Date;
+}
+export interface SupervisionPolicySnapshotPersistenceResult {
+    snapshotRef: SupervisionPolicySnapshotRef;
+    trace: CoreTraceRecord;
+    core: CatsCoreState;
+}
+export declare function createSupervisionPolicySnapshotRef(snapshot: SupervisionPolicySnapshot): SupervisionPolicySnapshotRef;
+export declare function persistSupervisionPolicySnapshot(input: SupervisionPolicySnapshotPersistenceInput): Promise<SupervisionPolicySnapshotPersistenceResult>;
+//# sourceMappingURL=policySnapshots.d.ts.map

package/build/server/platform/supervision/policySnapshots.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policySnapshots.d.ts","sourceRoot":"","sources":["../../../../src/platform/supervision/policySnapshots.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,KAAK,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAE1E,OAAO,KAAK,EACV,yBAAyB,EACzB,4BAA4B,EAC7B,MAAM,gBAAgB,CAAC;AAExB,MAAM,WAAW,yCAAyC;IACxD,SAAS,EAAE,SAAS,CAAC;IACrB,QAAQ,EAAE,yBAAyB,CAAC;IACpC,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB;AAED,MAAM,WAAW,0CAA0C;IACzD,WAAW,EAAE,4BAA4B,CAAC;IAC1C,KAAK,EAAE,eAAe,CAAC;IACvB,IAAI,EAAE,aAAa,CAAC;CACrB;AAED,wBAAgB,kCAAkC,CAChD,QAAQ,EAAE,yBAAyB,GAClC,4BAA4B,CAS9B;AAED,wBAAsB,gCAAgC,CACpD,KAAK,EAAE,yCAAyC,GAC/C,OAAO,CAAC,0CAA0C,CAAC,CA+BrD"}

package/build/server/platform/supervision/policySnapshots.js

@@ -0,0 +1,38 @@
+import { appendCoreTrace } from '../../core/model/index.js';
+export function createSupervisionPolicySnapshotRef(snapshot) {
+    return {
+        snapshotId: `policy-snapshot:${snapshot.runId}:${snapshot.actionId}:` +
+            `${snapshot.policyBundleVersion}:${snapshot.evaluatedAt}`,
+        policyBundleVersion: snapshot.policyBundleVersion,
+        actionId: snapshot.actionId,
+        runId: snapshot.runId,
+    };
+}
+export async function persistSupervisionPolicySnapshot(input) {
+    const snapshotRef = createSupervisionPolicySnapshotRef(input.snapshot);
+    const now = input.now?.() ?? new Date();
+    const next = appendCoreTrace(await input.coreStore.readCore(), {
+        id: snapshotRef.snapshotId,
+        traceId: input.traceId ?? `supervision-policy:${input.snapshot.runId}`,
+        kind: 'status',
+        conversationId: input.conversationId,
+        runId: input.snapshot.runId,
+        taskId: input.taskId,
+        actorId: input.snapshot.actorRef,
+        message: `Supervision policy snapshot for ${input.snapshot.actionId}`,
+        createdAt: input.snapshot.evaluatedAt,
+        metadata: {
+            source: 'supervision_policy_snapshot',
+            snapshotRef,
+            snapshot: input.snapshot,
+        },
+    }, now);
+    const core = await input.coreStore.writeCore(next.core);
+    const trace = core.traces.find((candidate) => candidate.id === next.trace.id) ?? next.trace;
+    return {
+        snapshotRef,
+        trace,
+        core,
+    };
+}
+//# sourceMappingURL=policySnapshots.js.map

package/build/server/platform/supervision/policySnapshots.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policySnapshots.js","sourceRoot":"","sources":["../../../../src/platform/supervision/policySnapshots.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAqB5D,MAAM,UAAU,kCAAkC,CAChD,QAAmC;IAEnC,OAAO;QACL,UAAU,EACR,mBAAmB,QAAQ,CAAC,KAAK,IAAI,QAAQ,CAAC,QAAQ,GAAG;YACzD,GAAG,QAAQ,CAAC,mBAAmB,IAAI,QAAQ,CAAC,WAAW,EAAE;QAC3D,mBAAmB,EAAE,QAAQ,CAAC,mBAAmB;QACjD,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,KAAK,EAAE,QAAQ,CAAC,KAAK;KACtB,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gCAAgC,CACpD,KAAgD;IAEhD,MAAM,WAAW,GAAG,kCAAkC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACvE,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC;IACxC,MAAM,IAAI,GAAG,eAAe,CAC1B,MAAM,KAAK,CAAC,SAAS,CAAC,QAAQ,EAAE,EAChC;QACE,EAAE,EAAE,WAAW,CAAC,UAAU;QAC1B,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,sBAAsB,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE;QACtE,IAAI,EAAE,QAAQ;QACd,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK;QAC3B,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,OAAO,EAAE,KAAK,CAAC,QAAQ,CAAC,QAAQ;QAChC,OAAO,EAAE,mCAAmC,KAAK,CAAC,QAAQ,CAAC,QAAQ,EAAE;QACrE,SAAS,EAAE,KAAK,CAAC,QAAQ,CAAC,WAAW;QACrC,QAAQ,EAAE;YACR,MAAM,EAAE,6BAA6B;YACrC,WAAW;YACX,QAAQ,EAAE,KAAK,CAAC,QAAQ;SACzB;KACF,EACD,GAAG,CACJ,CAAC;IACF,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxD,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC;IAE5F,OAAO;QACL,WAAW;QACX,KAAK;QACL,IAAI;KACL,CAAC;AACJ,CAAC"}

package/build/server/platform/supervision/policyVersions.d.ts

@@ -0,0 +1,4 @@
+import type { SupervisionPolicy } from './contracts.js';
+export declare const SUPERVISION_POLICY_BUNDLE_VERSION: "supervision-policy@2";
+export declare const SUPERVISION_POLICY_DIAL_VERSIONS: Partial<Record<keyof SupervisionPolicy, string>>;
+//# sourceMappingURL=policyVersions.d.ts.map

package/build/server/platform/supervision/policyVersions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policyVersions.d.ts","sourceRoot":"","sources":["../../../../src/platform/supervision/policyVersions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAExD,eAAO,MAAM,iCAAiC,EAAG,sBAA+B,CAAC;AAEjF,eAAO,MAAM,gCAAgC,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,iBAAiB,EAAE,MAAM,CAAC,CAIpF,CAAC"}

package/build/server/platform/supervision/policyVersions.js

@@ -0,0 +1,7 @@
+export const SUPERVISION_POLICY_BUNDLE_VERSION = 'supervision-policy@2';
+export const SUPERVISION_POLICY_DIAL_VERSIONS = {
+    autonomy: 'autonomy@2',
+    toolScope: 'tool-scope@2',
+    approvalThreshold: 'approval-threshold@1',
+};
+//# sourceMappingURL=policyVersions.js.map

package/build/server/platform/supervision/policyVersions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policyVersions.js","sourceRoot":"","sources":["../../../../src/platform/supervision/policyVersions.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,iCAAiC,GAAG,sBAA+B,CAAC;AAEjF,MAAM,CAAC,MAAM,gCAAgC,GAAqD;IAChG,QAAQ,EAAE,YAAY;IACtB,SAAS,EAAE,cAAc;IACzB,iBAAiB,EAAE,sBAAsB;CACjC,CAAC"}

package/build/server/platform/supervision/providerCapabilityBootstrapConfig.d.ts

@@ -0,0 +1,50 @@
+import type { CapabilityConfidenceLevel, SupervisionDiagnosticRecord } from './contracts.js';
+export type ProviderCapabilityBootstrapTreatment = 'strong_agent' | 'weak_worker';
+export type ProviderCapabilityBootstrapResolutionTreatment = 'default' | ProviderCapabilityBootstrapTreatment;
+export interface ProviderCapabilityBootstrapSelector {
+    provider: string;
+    instance?: string | null;
+    model?: string | null;
+    control?: string | null;
+}
+export interface ProviderCapabilityBootstrapRule {
+    id: string;
+    selector: ProviderCapabilityBootstrapSelector;
+    initialTreatment: ProviderCapabilityBootstrapTreatment;
+    confidenceLevel: Extract<CapabilityConfidenceLevel, 'catalog_only'>;
+    reason: string;
+}
+export interface ProviderCapabilityBootstrapConfig {
+    version: 1;
+    configPath?: string | null;
+    profiles: ProviderCapabilityBootstrapRule[];
+}
+export interface ProviderCapabilityBootstrapTarget {
+    provider: string;
+    instance?: string | null;
+    model?: string | null;
+    control?: string | null;
+}
+export interface ProviderCapabilityBootstrapConfigResult {
+    config: ProviderCapabilityBootstrapConfig | null;
+    diagnostics: SupervisionDiagnosticRecord[];
+}
+export interface ProviderCapabilityBootstrapRuleResolution {
+    treatment: ProviderCapabilityBootstrapResolutionTreatment;
+    rule: ProviderCapabilityBootstrapRule | null;
+    diagnostics: SupervisionDiagnosticRecord[];
+}
+export declare function parseProviderCapabilityBootstrapConfigDocument(document: unknown, options: {
+    observedAt: string;
+    configPath?: string | null;
+}): ProviderCapabilityBootstrapConfigResult;
+export declare function createMissingProviderCapabilityBootstrapDiagnostic(input: {
+    observedAt: string;
+    configPath?: string | null;
+}): SupervisionDiagnosticRecord;
+export declare function resolveProviderCapabilityBootstrapRule(config: ProviderCapabilityBootstrapConfig | null | undefined, target: ProviderCapabilityBootstrapTarget, options: {
+    observedAt: string;
+    configPath?: string | null;
+}): ProviderCapabilityBootstrapRuleResolution;
+export declare function normalizeBootstrapTarget(target: ProviderCapabilityBootstrapTarget): Required<ProviderCapabilityBootstrapTarget>;
+//# sourceMappingURL=providerCapabilityBootstrapConfig.d.ts.map

package/build/server/platform/supervision/providerCapabilityBootstrapConfig.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"providerCapabilityBootstrapConfig.d.ts","sourceRoot":"","sources":["../../../../src/platform/supervision/providerCapabilityBootstrapConfig.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EACV,yBAAyB,EAEzB,2BAA2B,EAE5B,MAAM,gBAAgB,CAAC;AAKxB,MAAM,MAAM,oCAAoC,GAAG,cAAc,GAAG,aAAa,CAAC;AAClF,MAAM,MAAM,8CAA8C,GACtD,SAAS,GACT,oCAAoC,CAAC;AAEzC,MAAM,WAAW,mCAAmC;IAClD,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED,MAAM,WAAW,+BAA+B;IAC9C,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,mCAAmC,CAAC;IAC9C,gBAAgB,EAAE,oCAAoC,CAAC;IACvD,eAAe,EAAE,OAAO,CAAC,yBAAyB,EAAE,cAAc,CAAC,CAAC;IACpE,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,iCAAiC;IAChD,OAAO,EAAE,CAAC,CAAC;IACX,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,QAAQ,EAAE,+BAA+B,EAAE,CAAC;CAC7C;AAED,MAAM,WAAW,iCAAiC;IAChD,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED,MAAM,WAAW,uCAAuC;IACtD,MAAM,EAAE,iCAAiC,GAAG,IAAI,CAAC;IACjD,WAAW,EAAE,2BAA2B,EAAE,CAAC;CAC5C;AAED,MAAM,WAAW,yCAAyC;IACxD,SAAS,EAAE,8CAA8C,CAAC;IAC1D,IAAI,EAAE,+BAA+B,GAAG,IAAI,CAAC;IAC7C,WAAW,EAAE,2BAA2B,EAAE,CAAC;CAC5C;AAQD,wBAAgB,8CAA8C,CAC5D,QAAQ,EAAE,OAAO,EACjB,OAAO,EAAE;IACP,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B,GACA,uCAAuC,CAsFzC;AAED,wBAAgB,kDAAkD,CAAC,KAAK,EAAE;IACxE,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B,GAAG,2BAA2B,CAS9B;AAED,wBAAgB,sCAAsC,CACpD,MAAM,EAAE,iCAAiC,GAAG,IAAI,GAAG,SAAS,EAC5D,MAAM,EAAE,iCAAiC,EACzC,OAAO,EAAE;IACP,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B,GACA,yCAAyC,CAyE3C;AAED,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,iCAAiC,GACxC,QAAQ,CAAC,iCAAiC,CAAC,CAS7C"}