@executioncontrolprotocol/policies 0.10.0

package/dist/image-policy-eval.d.ts

@@ -0,0 +1,21 @@
+/** Image policy configuration shape. @category Policies */
+export interface ImagePolicyConfig {
+    allowedInputKinds?: Array<"artifact" | "file" | "url" | "buffer">;
+    allowedOutputFormats?: Array<"jpeg" | "png" | "webp" | "avif" | "tiff" | "gif" | "raw">;
+    maxImageRefsPerStep?: number;
+    maxInputBytes?: number;
+    maxOutputBytes?: number;
+    maxPixels?: number;
+    maxWidth?: number;
+    maxHeight?: number;
+    allowSvg?: boolean;
+    allowRemoteUrls?: boolean;
+    allowedUrlDomains?: string[];
+    requireStripMetadata?: boolean;
+    denyRawOutput?: boolean;
+}
+/** Evaluate image refs in step input against policy config. @category Policies */
+export declare function evaluateImageRefsPre(input: Record<string, unknown>, config: ImagePolicyConfig): string | undefined;
+/** Evaluate image output against policy config. @category Policies */
+export declare function evaluateImageRefsPost(output: unknown, config: ImagePolicyConfig): string | undefined;
+//# sourceMappingURL=image-policy-eval.d.ts.map

package/dist/image-policy-eval.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"image-policy-eval.d.ts","sourceRoot":"","sources":["../src/image-policy-eval.ts"],"names":[],"mappings":"AAQA,2DAA2D;AAC3D,MAAM,WAAW,iBAAiB;IAChC,iBAAiB,CAAC,EAAE,KAAK,CAAC,UAAU,GAAG,MAAM,GAAG,KAAK,GAAG,QAAQ,CAAC,CAAA;IACjE,oBAAoB,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,KAAK,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,KAAK,GAAG,KAAK,CAAC,CAAA;IACvF,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,eAAe,CAAC,EAAE,OAAO,CAAA;IACzB,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAA;IAC5B,oBAAoB,CAAC,EAAE,OAAO,CAAA;IAC9B,aAAa,CAAC,EAAE,OAAO,CAAA;CACxB;AAED,kFAAkF;AAClF,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,MAAM,EAAE,iBAAiB,GACxB,MAAM,GAAG,SAAS,CAqCpB;AAED,sEAAsE;AACtE,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,OAAO,EACf,MAAM,EAAE,iBAAiB,GACxB,MAAM,GAAG,SAAS,CAiDpB"}

package/dist/image-policy-eval.js

@@ -0,0 +1,83 @@
+import { collectImageRefs, collectOutputFormatHints, imageRefUrlHostname, isSvgHint, } from "@executioncontrolprotocol/core";
+import { IMAGE_REF_KINDS } from "@executioncontrolprotocol/types";
+/** Evaluate image refs in step input against policy config. @category Policies */
+export function evaluateImageRefsPre(input, config) {
+    const refs = collectImageRefs(input);
+    if (config.maxImageRefsPerStep !== undefined && refs.length > config.maxImageRefsPerStep) {
+        return `Image ref count ${refs.length} exceeds maxImageRefsPerStep (${config.maxImageRefsPerStep})`;
+    }
+    for (const { path, ref } of refs) {
+        if (config.allowedInputKinds && !config.allowedInputKinds.includes(ref.kind)) {
+            return `Image ref at ${path} has disallowed kind '${ref.kind}'`;
+        }
+        if (ref.kind === IMAGE_REF_KINDS.URL) {
+            if (config.allowRemoteUrls === false) {
+                return `Remote URL image ref at ${path} is not allowed`;
+            }
+            const host = imageRefUrlHostname(ref);
+            if (config.allowedUrlDomains?.length && host && !config.allowedUrlDomains.includes(host)) {
+                return `URL domain '${host}' at ${path} is not in allowedUrlDomains`;
+            }
+        }
+        const sizeBytes = "sizeBytes" in ref ? ref.sizeBytes : undefined;
+        if (sizeBytes !== undefined && config.maxInputBytes !== undefined && sizeBytes > config.maxInputBytes) {
+            return `Image ref at ${path} exceeds maxInputBytes`;
+        }
+        const mediaType = "mediaType" in ref ? ref.mediaType : undefined;
+        if (config.allowSvg === false && isSvgHint(mediaType)) {
+            return `SVG input at ${path} is not allowed`;
+        }
+    }
+    if (config.requireStripMetadata === true && input.output && typeof input.output === "object") {
+        const out = input.output;
+        if (out.stripMetadata === false || out.preserveMetadata === true) {
+            return "Metadata retention is not allowed by image-policy";
+        }
+    }
+    return undefined;
+}
+/** Evaluate image output against policy config. @category Policies */
+export function evaluateImageRefsPost(output, config) {
+    if (output === null || typeof output !== "object")
+        return undefined;
+    const refs = collectImageRefs(output);
+    for (const { path, ref } of refs) {
+        const sizeBytes = "sizeBytes" in ref ? ref.sizeBytes : undefined;
+        if (sizeBytes !== undefined && config.maxOutputBytes !== undefined && sizeBytes > config.maxOutputBytes) {
+            return `Output image ref at ${path} exceeds maxOutputBytes`;
+        }
+    }
+    const info = output.info;
+    if (info) {
+        if (info.sizeBytes !== undefined && config.maxOutputBytes !== undefined && info.sizeBytes > config.maxOutputBytes) {
+            return "Output sizeBytes exceeds maxOutputBytes";
+        }
+        if (info.width !== undefined &&
+            info.height !== undefined &&
+            config.maxPixels !== undefined &&
+            info.width * info.height > config.maxPixels) {
+            return "Output dimensions exceed maxPixels";
+        }
+        if (info.width !== undefined && config.maxWidth !== undefined && info.width > config.maxWidth) {
+            return "Output width exceeds maxWidth";
+        }
+        if (info.height !== undefined && config.maxHeight !== undefined && info.height > config.maxHeight) {
+            return "Output height exceeds maxHeight";
+        }
+    }
+    const formats = collectOutputFormatHints(output);
+    for (const { path, format } of formats) {
+        if (config.denyRawOutput === true && format === "raw") {
+            return `Raw output format at ${path} is denied`;
+        }
+        if (config.allowedOutputFormats &&
+            !config.allowedOutputFormats.includes(format)) {
+            return `Output format '${format}' at ${path} is not allowed`;
+        }
+        if (config.allowSvg === false && isSvgHint(format)) {
+            return `SVG output at ${path} is not allowed`;
+        }
+    }
+    return undefined;
+}
+//# sourceMappingURL=image-policy-eval.js.map

package/dist/image-policy-eval.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"image-policy-eval.js","sourceRoot":"","sources":["../src/image-policy-eval.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gBAAgB,EAChB,wBAAwB,EACxB,mBAAmB,EACnB,SAAS,GACV,MAAM,gCAAgC,CAAA;AACvC,OAAO,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAA;AAmBjE,kFAAkF;AAClF,MAAM,UAAU,oBAAoB,CAClC,KAA8B,EAC9B,MAAyB;IAEzB,MAAM,IAAI,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAA;IACpC,IAAI,MAAM,CAAC,mBAAmB,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,mBAAmB,EAAE,CAAC;QACzF,OAAO,mBAAmB,IAAI,CAAC,MAAM,iCAAiC,MAAM,CAAC,mBAAmB,GAAG,CAAA;IACrG,CAAC;IAED,KAAK,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,IAAI,EAAE,CAAC;QACjC,IAAI,MAAM,CAAC,iBAAiB,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7E,OAAO,gBAAgB,IAAI,yBAAyB,GAAG,CAAC,IAAI,GAAG,CAAA;QACjE,CAAC;QACD,IAAI,GAAG,CAAC,IAAI,KAAK,eAAe,CAAC,GAAG,EAAE,CAAC;YACrC,IAAI,MAAM,CAAC,eAAe,KAAK,KAAK,EAAE,CAAC;gBACrC,OAAO,2BAA2B,IAAI,iBAAiB,CAAA;YACzD,CAAC;YACD,MAAM,IAAI,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAA;YACrC,IAAI,MAAM,CAAC,iBAAiB,EAAE,MAAM,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBACzF,OAAO,eAAe,IAAI,QAAQ,IAAI,8BAA8B,CAAA;YACtE,CAAC;QACH,CAAC;QACD,MAAM,SAAS,GAAG,WAAW,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAA;QAChE,IAAI,SAAS,KAAK,SAAS,IAAI,MAAM,CAAC,aAAa,KAAK,SAAS,IAAI,SAAS,GAAG,MAAM,CAAC,aAAa,EAAE,CAAC;YACtG,OAAO,gBAAgB,IAAI,wBAAwB,CAAA;QACrD,CAAC;QACD,MAAM,SAAS,GAAG,WAAW,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAA;QAChE,IAAI,MAAM,CAAC,QAAQ,KAAK,KAAK,IAAI,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC;YACtD,OAAO,gBAAgB,IAAI,iBAAiB,CAAA;QAC9C,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,oBAAoB,KAAK,IAAI,IAAI,KAAK,CAAC,MAAM,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC7F,MAAM,GAAG,GAAG,KAAK,CAAC,MAAiE,CAAA;QACnF,IAAI,GAAG,CAAC,aAAa,KAAK,KAAK,IAAI,GAAG,CAAC,gBAAgB,KAAK,IAAI,EAAE,CAAC;YACjE,OAAO,mDAAmD,CAAA;QAC5D,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,qBAAqB,CACnC,MAAe,EACf,MAAyB;IAEzB,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAA;IAEnE,MAAM,IAAI,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAA;IACrC,KAAK,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,IAAI,EAAE,CAAC;QACjC,MAAM,SAAS,GAAG,WAAW,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAA;QAChE,IAAI,SAAS,KAAK,SAAS,IAAI,MAAM,CAAC,cAAc,KAAK,SAAS,IAAI,SAAS,GAAG,MAAM,CAAC,cAAc,EAAE,CAAC;YACxG,OAAO,uBAAuB,IAAI,yBAAyB,CAAA;QAC7D,CAAC;IACH,CAAC;IAED,MAAM,IAAI,GAAI,MAA8F,CAAC,IAAI,CAAA;IACjH,IAAI,IAAI,EAAE,CAAC;QACT,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,MAAM,CAAC,cAAc,KAAK,SAAS,IAAI,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,cAAc,EAAE,CAAC;YAClH,OAAO,yCAAyC,CAAA;QAClD,CAAC;QACD,IACE,IAAI,CAAC,KAAK,KAAK,SAAS;YACxB,IAAI,CAAC,MAAM,KAAK,SAAS;YACzB,MAAM,CAAC,SAAS,KAAK,SAAS;YAC9B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,SAAS,EAC3C,CAAC;YACD,OAAO,oCAAoC,CAAA;QAC7C,CAAC;QACD,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;YAC9F,OAAO,+BAA+B,CAAA;QACxC,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC;YAClG,OAAO,iCAAiC,CAAA;QAC1C,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAG,wBAAwB,CAAC,MAAM,CAAC,CAAA;IAChD,KAAK,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,OAAO,EAAE,CAAC;QACvC,IAAI,MAAM,CAAC,aAAa,KAAK,IAAI,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;YACtD,OAAO,wBAAwB,IAAI,YAAY,CAAA;QACjD,CAAC;QACD,IACE,MAAM,CAAC,oBAAoB;YAC3B,CAAC,MAAM,CAAC,oBAAoB,CAAC,QAAQ,CAAC,MAAsD,CAAC,EAC7F,CAAC;YACD,OAAO,kBAAkB,MAAM,QAAQ,IAAI,iBAAiB,CAAA;QAC9D,CAAC;QACD,IAAI,MAAM,CAAC,QAAQ,KAAK,KAAK,IAAI,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;YACnD,OAAO,iBAAiB,IAAI,iBAAiB,CAAA;QAC/C,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAA;AAClB,CAAC"}

package/dist/image-policy.d.ts

@@ -0,0 +1,7 @@
+/** @executioncontrolprotocol/image-policy — generic ImageRef governance. @category Policies */
+export declare const imagePolicy: import("@executioncontrolprotocol/core").PolicyDefinition;
+export { evaluateImageRefsPre, evaluateImageRefsPost } from "./image-policy-eval.js";
+export type { ImagePolicyConfig } from "./image-policy-eval.js";
+/** Register `@executioncontrolprotocol/image-policy`. @category Policies */
+export declare function registerImagePolicy(registry?: import("@executioncontrolprotocol/core").Registry): Promise<void>;
+//# sourceMappingURL=image-policy.d.ts.map

package/dist/image-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"image-policy.d.ts","sourceRoot":"","sources":["../src/image-policy.ts"],"names":[],"mappings":"AAmBA,+FAA+F;AAC/F,eAAO,MAAM,WAAW,2DAqCd,CAAA;AAEV,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAA;AACpF,YAAY,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAA;AAE/D,4EAA4E;AAC5E,wBAAsB,mBAAmB,CAAC,QAAQ,oDAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAIlF"}

package/dist/image-policy.js

@@ -0,0 +1,54 @@
+import { definePolicy, globalRegistry, hook } from "@executioncontrolprotocol/core";
+import { z } from "zod";
+import { evaluateImageRefsPost, evaluateImageRefsPre } from "./image-policy-eval.js";
+function policyHook(event, fn) {
+    return hook(event, (lifecycleCtx) => fn(lifecycleCtx));
+}
+/** @executioncontrolprotocol/image-policy — generic ImageRef governance. @category Policies */
+export const imagePolicy = definePolicy("@executioncontrolprotocol", "image-policy")
+    .withConfig({
+    allowedInputKinds: z
+        .array(z.enum(["artifact", "file", "url", "buffer"]))
+        .optional(),
+    allowedOutputFormats: z
+        .array(z.enum(["jpeg", "png", "webp", "avif", "tiff", "gif", "raw"]))
+        .optional(),
+    maxImageRefsPerStep: z.number().optional(),
+    maxInputBytes: z.number().optional(),
+    maxOutputBytes: z.number().optional(),
+    maxPixels: z.number().optional(),
+    maxWidth: z.number().optional(),
+    maxHeight: z.number().optional(),
+    allowSvg: z.boolean().optional(),
+    allowRemoteUrls: z.boolean().optional(),
+    allowedUrlDomains: z.array(z.string()).optional(),
+    requireStripMetadata: z.boolean().optional(),
+    denyRawOutput: z.boolean().optional(),
+})
+    .withHooks([
+    policyHook("policy:pre", (ctx) => {
+        const reason = evaluateImageRefsPre(ctx.input, ctx.config);
+        if (reason) {
+            return { type: "deny", reason, code: "IMAGE_POLICY_DENIED" };
+        }
+        return { type: "allow" };
+    }),
+    policyHook("policy:post", (ctx) => {
+        if (ctx.output === undefined)
+            return { type: "allow" };
+        const reason = evaluateImageRefsPost(ctx.output, ctx.config);
+        if (reason) {
+            return { type: "deny", reason, code: "IMAGE_POLICY_DENIED" };
+        }
+        return { type: "allow" };
+    }),
+])
+    .build();
+export { evaluateImageRefsPre, evaluateImageRefsPost } from "./image-policy-eval.js";
+/** Register `@executioncontrolprotocol/image-policy`. @category Policies */
+export async function registerImagePolicy(registry = globalRegistry) {
+    if (!registry.getPolicy("@executioncontrolprotocol/image-policy")) {
+        await registry.registerPolicy(imagePolicy);
+    }
+}
+//# sourceMappingURL=image-policy.js.map

package/dist/image-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"image-policy.js","sourceRoot":"","sources":["../src/image-policy.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,gCAAgC,CAAA;AACnF,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAA;AAMpF,SAAS,UAAU,CACjB,KAAqE,EACrE,EAAgB;IAEhB,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC,YAAY,EAAE,EAAE,CAClC,EAAE,CAAC,YAA8E,CAAC,CACnF,CAAA;AACH,CAAC;AAED,+FAA+F;AAC/F,MAAM,CAAC,MAAM,WAAW,GAAG,YAAY,CAAC,2BAA2B,EAAE,cAAc,CAAC;KACjF,UAAU,CAAC;IACV,iBAAiB,EAAE,CAAC;SACjB,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;SACpD,QAAQ,EAAE;IACb,oBAAoB,EAAE,CAAC;SACpB,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;SACpE,QAAQ,EAAE;IACb,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1C,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACpC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACrC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAChC,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACvC,iBAAiB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACjD,oBAAoB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC5C,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CACtC,CAAC;KACD,SAAS,CAAC;IACT,UAAU,CAAC,YAAY,EAAE,CAAC,GAAG,EAAE,EAAE;QAC/B,MAAM,MAAM,GAAG,oBAAoB,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;QAC1D,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAA;QAC9D,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAA;IAC1B,CAAC,CAAC;IACF,UAAU,CAAC,aAAa,EAAE,CAAC,GAAG,EAAE,EAAE;QAChC,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS;YAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAA;QACtD,MAAM,MAAM,GAAG,qBAAqB,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;QAC5D,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAA;QAC9D,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAA;IAC1B,CAAC,CAAC;CACH,CAAC;KACD,KAAK,EAAE,CAAA;AAEV,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAA;AAGpF,4EAA4E;AAC5E,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,QAAQ,GAAG,cAAc;IACjE,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,wCAAwC,CAAC,EAAE,CAAC;QAClE,MAAM,QAAQ,CAAC,cAAc,CAAC,WAAW,CAAC,CAAA;IAC5C,CAAC;AACH,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,11 @@
+/** @executioncontrolprotocol/budget policy definition. @category Policies */
+export declare const budgetPolicy: import("@executioncontrolprotocol/core").PolicyDefinition;
+/** @executioncontrolprotocol/approval policy. @category Policies */
+export declare const approvalPolicy: import("@executioncontrolprotocol/core").PolicyDefinition;
+/** @executioncontrolprotocol/state-control policy. @category Policies */
+export declare const stateControlPolicy: import("@executioncontrolprotocol/core").PolicyDefinition;
+export { registryControlPolicy, registerRegistryControlPolicy, REGISTRY_CONTROL_POLICY_ID, type RegistryControlPolicyConfig, } from "./registry-control.js";
+export { imagePolicy, evaluateImageRefsPre, evaluateImageRefsPost, registerImagePolicy, type ImagePolicyConfig, } from "./image-policy.js";
+/** Register all standard policies. @category Policies */
+export declare function registerStandardPolicies(registry?: import("@executioncontrolprotocol/core").Registry): Promise<void>;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAsDA,6EAA6E;AAC7E,eAAO,MAAM,YAAY,2DAcf,CAAA;AAEV,oEAAoE;AACpE,eAAO,MAAM,cAAc,2DAajB,CAAA;AASV,yEAAyE;AACzE,eAAO,MAAM,kBAAkB,2DAwErB,CAAA;AAEV,OAAO,EACL,qBAAqB,EACrB,6BAA6B,EAC7B,0BAA0B,EAC1B,KAAK,2BAA2B,GACjC,MAAM,uBAAuB,CAAA;AAC9B,OAAO,EACL,WAAW,EACX,oBAAoB,EACpB,qBAAqB,EACrB,mBAAmB,EACnB,KAAK,iBAAiB,GACvB,MAAM,mBAAmB,CAAA;AAE1B,yDAAyD;AACzD,wBAAsB,wBAAwB,CAAC,QAAQ,oDAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAWvF"}

package/dist/index.js

@@ -0,0 +1,157 @@
+import { definePolicy, hook, globalRegistry } from "@executioncontrolprotocol/core";
+import { z } from "zod";
+import { registerRegistryControlPolicy } from "./registry-control.js";
+function policyHook(event, fn) {
+    return hook(event, (lifecycleCtx) => fn(lifecycleCtx));
+}
+/** Budget dimensions enforced by the budget policy. */
+const BUDGET_LIMITS = [
+    { config: "maxModelCalls", usage: "modelCalls", code: "BUDGET_MODEL_CALLS", label: "model calls" },
+    { config: "maxCostUsd", usage: "costUsd", code: "BUDGET_COST_USD", label: "cost (USD)" },
+    { config: "maxTokens", usage: "tokens", code: "BUDGET_TOKENS", label: "tokens" },
+    { config: "maxRetries", usage: "retries", code: "BUDGET_RETRIES", label: "retries" },
+];
+/**
+ * Evaluate every configured budget dimension against the usage ledger.
+ * `inclusive` denies when usage has already reached the limit (`policy:pre`,
+ * before more work is done); otherwise denies only when the limit is exceeded
+ * (`policy:post`, after work has completed).
+ */
+function evaluateBudget(config, usage, inclusive) {
+    for (const limit of BUDGET_LIMITS) {
+        const max = config[limit.config];
+        if (max === undefined)
+            continue;
+        const used = usage[limit.usage];
+        const overBudget = inclusive ? used >= max : used > max;
+        if (overBudget) {
+            return {
+                type: "deny",
+                reason: `Budget exceeded for ${limit.label}: ${used} of ${max}`,
+                code: limit.code,
+            };
+        }
+    }
+    return { type: "allow" };
+}
+/** @executioncontrolprotocol/budget policy definition. @category Policies */
+export const budgetPolicy = definePolicy("@executioncontrolprotocol", "budget")
+    .withConfig({
+    maxCostUsd: z.number().optional(),
+    maxModelCalls: z.number().optional(),
+    maxRetries: z.number().optional(),
+    maxTokens: z.number().optional(),
+})
+    .withHooks([
+    policyHook("policy:pre", (ctx) => evaluateBudget(ctx.config, ctx.usage, true)),
+    policyHook("policy:post", (ctx) => evaluateBudget(ctx.config, ctx.usage, false)),
+    // `policy:finally` cannot change the step outcome; it is reserved for
+    // usage reconciliation/reporting. No-op until a reporting sink is bound.
+    policyHook("policy:finally", () => undefined),
+])
+    .build();
+/** @executioncontrolprotocol/approval policy. @category Policies */
+export const approvalPolicy = definePolicy("@executioncontrolprotocol", "approval")
+    .withConfig({
+    requireApprovalFor: z.array(z.string()).default([]),
+})
+    .withHooks([
+    policyHook("policy:pre", (ctx) => {
+        const list = ctx.config.requireApprovalFor ?? [];
+        if (list.includes(ctx.step.capabilityId)) {
+            return { type: "pause", reason: "Approval required" };
+        }
+        return { type: "allow" };
+    }),
+])
+    .build();
+/** Whether `path` is covered by `prefix` (exact or dotted descendant). */
+function pathMatches(path, prefix) {
+    return path === prefix || path.startsWith(`${prefix}.`);
+}
+/** @executioncontrolprotocol/state-control policy. @category Policies */
+export const stateControlPolicy = definePolicy("@executioncontrolprotocol", "state-control")
+    .withConfig({
+    allowedMutablePaths: z.array(z.string()).optional(),
+    deniedMutablePaths: z.array(z.string()).optional(),
+    allowedMutationOps: z
+        .array(z.enum(["set", "replace", "merge", "append"]))
+        .optional(),
+    requireReason: z.boolean().optional(),
+    maxMutationsPerStep: z.number().optional(),
+})
+    .withHooks([
+    policyHook("policy:pre", (ctx) => {
+        const denied = ctx.config.deniedMutablePaths;
+        const allowed = ctx.config.allowedMutablePaths;
+        for (const h of ctx.mutableStateHandles ?? []) {
+            const path = typeof h === "string" ? h : h.path;
+            // Denied paths win over allowed paths.
+            if (denied?.some((d) => pathMatches(path, d))) {
+                return {
+                    type: "deny",
+                    reason: `Mutable path is denied: ${path}`,
+                    code: "STATE_PATH_DENIED",
+                };
+            }
+            if (allowed && !allowed.some((a) => pathMatches(path, a))) {
+                return {
+                    type: "deny",
+                    reason: `Mutable path not allowed: ${path}`,
+                    code: "STATE_PATH_NOT_ALLOWED",
+                };
+            }
+        }
+        return { type: "allow" };
+    }),
+    policyHook("policy:post", (ctx) => {
+        const pending = ctx.pendingMutations ?? [];
+        const max = ctx.config.maxMutationsPerStep;
+        if (max !== undefined && pending.length > max) {
+            return {
+                type: "deny",
+                reason: `Too many mutations in step: ${pending.length} of ${max}`,
+                code: "STATE_MAX_MUTATIONS",
+            };
+        }
+        const allowedOps = ctx.config.allowedMutationOps;
+        if (allowedOps) {
+            const disallowed = pending.find((m) => !allowedOps.includes(m.op));
+            if (disallowed) {
+                return {
+                    type: "deny",
+                    reason: `Mutation op not allowed: ${disallowed.op}`,
+                    code: "STATE_OP_NOT_ALLOWED",
+                };
+            }
+        }
+        if (ctx.config.requireReason === true) {
+            const missing = pending.find((m) => !m.reason || m.reason.trim() === "");
+            if (missing) {
+                return {
+                    type: "deny",
+                    reason: `Mutation to '${missing.path}' requires a reason`,
+                    code: "STATE_REASON_REQUIRED",
+                };
+            }
+        }
+        return { type: "allow" };
+    }),
+])
+    .build();
+export { registryControlPolicy, registerRegistryControlPolicy, REGISTRY_CONTROL_POLICY_ID, } from "./registry-control.js";
+export { imagePolicy, evaluateImageRefsPre, evaluateImageRefsPost, registerImagePolicy, } from "./image-policy.js";
+/** Register all standard policies. @category Policies */
+export async function registerStandardPolicies(registry = globalRegistry) {
+    if (!registry.getPolicy("@executioncontrolprotocol/budget")) {
+        await registry.registerPolicy(budgetPolicy);
+    }
+    if (!registry.getPolicy("@executioncontrolprotocol/approval")) {
+        await registry.registerPolicy(approvalPolicy);
+    }
+    if (!registry.getPolicy("@executioncontrolprotocol/state-control")) {
+        await registry.registerPolicy(stateControlPolicy);
+    }
+    await registerRegistryControlPolicy(registry);
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAA;AACnF,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,EAAE,6BAA6B,EAAE,MAAM,uBAAuB,CAAA;AAMrE,SAAS,UAAU,CACjB,KAAqE,EACrE,EAAgB;IAEhB,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC,YAAY,EAAE,EAAE,CAClC,EAAE,CAAC,YAA8E,CAAC,CACnF,CAAA;AACH,CAAC;AAED,uDAAuD;AACvD,MAAM,aAAa,GAAG;IACpB,EAAE,MAAM,EAAE,eAAe,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,oBAAoB,EAAE,KAAK,EAAE,aAAa,EAAE;IAClG,EAAE,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,YAAY,EAAE;IACxF,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,QAAQ,EAAE;IAChF,EAAE,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,SAAS,EAAE;CAC5E,CAAA;AAEV;;;;;GAKG;AACH,SAAS,cAAc,CACrB,MAA+B,EAC/B,KAA6B,EAC7B,SAAkB;IAElB,KAAK,MAAM,KAAK,IAAI,aAAa,EAAE,CAAC;QAClC,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAuB,CAAA;QACtD,IAAI,GAAG,KAAK,SAAS;YAAE,SAAQ;QAC/B,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;QAC/B,MAAM,UAAU,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,GAAG,GAAG,CAAA;QACvD,IAAI,UAAU,EAAE,CAAC;YACf,OAAO;gBACL,IAAI,EAAE,MAAM;gBACZ,MAAM,EAAE,uBAAuB,KAAK,CAAC,KAAK,KAAK,IAAI,OAAO,GAAG,EAAE;gBAC/D,IAAI,EAAE,KAAK,CAAC,IAAI;aACjB,CAAA;QACH,CAAC;IACH,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAA;AAC1B,CAAC;AAED,6EAA6E;AAC7E,MAAM,CAAC,MAAM,YAAY,GAAG,YAAY,CAAC,2BAA2B,EAAE,QAAQ,CAAC;KAC5E,UAAU,CAAC;IACV,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACpC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAC;KACD,SAAS,CAAC;IACT,UAAU,CAAC,YAAY,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAC9E,UAAU,CAAC,aAAa,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAChF,sEAAsE;IACtE,yEAAyE;IACzE,UAAU,CAAC,gBAAgB,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC;CAC9C,CAAC;KACD,KAAK,EAAE,CAAA;AAEV,oEAAoE;AACpE,MAAM,CAAC,MAAM,cAAc,GAAG,YAAY,CAAC,2BAA2B,EAAE,UAAU,CAAC;KAChF,UAAU,CAAC;IACV,kBAAkB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CACpD,CAAC;KACD,SAAS,CAAC;IACT,UAAU,CAAC,YAAY,EAAE,CAAC,GAAG,EAAE,EAAE;QAC/B,MAAM,IAAI,GAAI,GAAG,CAAC,MAAM,CAAC,kBAA+B,IAAI,EAAE,CAAA;QAC9D,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;YACzC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAA;QACvD,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAA;IAC1B,CAAC,CAAC;CACH,CAAC;KACD,KAAK,EAAE,CAAA;AAIV,0EAA0E;AAC1E,SAAS,WAAW,CAAC,IAAY,EAAE,MAAc;IAC/C,OAAO,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,MAAM,GAAG,CAAC,CAAA;AACzD,CAAC;AAED,yEAAyE;AACzE,MAAM,CAAC,MAAM,kBAAkB,GAAG,YAAY,CAAC,2BAA2B,EAAE,eAAe,CAAC;KACzF,UAAU,CAAC;IACV,mBAAmB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACnD,kBAAkB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAClD,kBAAkB,EAAE,CAAC;SAClB,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;SACpD,QAAQ,EAAE;IACb,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACrC,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC3C,CAAC;KACD,SAAS,CAAC;IACT,UAAU,CAAC,YAAY,EAAE,CAAC,GAAG,EAAE,EAAE;QAC/B,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,kBAA0C,CAAA;QACpE,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,mBAA2C,CAAA;QACtE,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,mBAAmB,IAAI,EAAE,EAAE,CAAC;YAC9C,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;YAC/C,uCAAuC;YACvC,IAAI,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC9C,OAAO;oBACL,IAAI,EAAE,MAAM;oBACZ,MAAM,EAAE,2BAA2B,IAAI,EAAE;oBACzC,IAAI,EAAE,mBAAmB;iBAC1B,CAAA;YACH,CAAC;YACD,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1D,OAAO;oBACL,IAAI,EAAE,MAAM;oBACZ,MAAM,EAAE,6BAA6B,IAAI,EAAE;oBAC3C,IAAI,EAAE,wBAAwB;iBAC/B,CAAA;YACH,CAAC;QACH,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAA;IAC1B,CAAC,CAAC;IACF,UAAU,CAAC,aAAa,EAAE,CAAC,GAAG,EAAE,EAAE;QAChC,MAAM,OAAO,GAAG,GAAG,CAAC,gBAAgB,IAAI,EAAE,CAAA;QAE1C,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,mBAAyC,CAAA;QAChE,IAAI,GAAG,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;YAC9C,OAAO;gBACL,IAAI,EAAE,MAAM;gBACZ,MAAM,EAAE,+BAA+B,OAAO,CAAC,MAAM,OAAO,GAAG,EAAE;gBACjE,IAAI,EAAE,qBAAqB;aAC5B,CAAA;QACH,CAAC;QAED,MAAM,UAAU,GAAG,GAAG,CAAC,MAAM,CAAC,kBAA8C,CAAA;QAC5E,IAAI,UAAU,EAAE,CAAC;YACf,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;YAClE,IAAI,UAAU,EAAE,CAAC;gBACf,OAAO;oBACL,IAAI,EAAE,MAAM;oBACZ,MAAM,EAAE,4BAA4B,UAAU,CAAC,EAAE,EAAE;oBACnD,IAAI,EAAE,sBAAsB;iBAC7B,CAAA;YACH,CAAC;QACH,CAAC;QAED,IAAI,GAAG,CAAC,MAAM,CAAC,aAAa,KAAK,IAAI,EAAE,CAAC;YACtC,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;YACxE,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO;oBACL,IAAI,EAAE,MAAM;oBACZ,MAAM,EAAE,gBAAgB,OAAO,CAAC,IAAI,qBAAqB;oBACzD,IAAI,EAAE,uBAAuB;iBAC9B,CAAA;YACH,CAAC;QACH,CAAC;QAED,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAA;IAC1B,CAAC,CAAC;CACH,CAAC;KACD,KAAK,EAAE,CAAA;AAEV,OAAO,EACL,qBAAqB,EACrB,6BAA6B,EAC7B,0BAA0B,GAE3B,MAAM,uBAAuB,CAAA;AAC9B,OAAO,EACL,WAAW,EACX,oBAAoB,EACpB,qBAAqB,EACrB,mBAAmB,GAEpB,MAAM,mBAAmB,CAAA;AAE1B,yDAAyD;AACzD,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,QAAQ,GAAG,cAAc;IACtE,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,kCAAkC,CAAC,EAAE,CAAC;QAC5D,MAAM,QAAQ,CAAC,cAAc,CAAC,YAAY,CAAC,CAAA;IAC7C,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,oCAAoC,CAAC,EAAE,CAAC;QAC9D,MAAM,QAAQ,CAAC,cAAc,CAAC,cAAc,CAAC,CAAA;IAC/C,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,yCAAyC,CAAC,EAAE,CAAC;QACnE,MAAM,QAAQ,CAAC,cAAc,CAAC,kBAAkB,CAAC,CAAA;IACnD,CAAC;IACD,MAAM,6BAA6B,CAAC,QAAQ,CAAC,CAAA;AAC/C,CAAC"}

package/dist/registry-control.d.ts

@@ -0,0 +1,18 @@
+/** Config for `@executioncontrolprotocol/registry-control`. @category Policies */
+export interface RegistryControlPolicyConfig {
+    /** Allowed extension namespace patterns. */
+    allowedExtensionNamespaces?: string[];
+    /** Denied extension namespace patterns (wins over allow). */
+    deniedExtensionNamespaces?: string[];
+    /** Whether dynamic extension registration is permitted. */
+    allowDynamicExtensionRegistration?: boolean;
+    /** Whether auto-bind after registration is permitted. */
+    allowAutoBind?: boolean;
+}
+declare const POLICY_ID = "@executioncontrolprotocol/registry-control";
+/** @executioncontrolprotocol/registry-control — governs dynamic extension registration. @category Policies */
+export declare const registryControlPolicy: import("@executioncontrolprotocol/core").PolicyDefinition;
+export { POLICY_ID as REGISTRY_CONTROL_POLICY_ID };
+/** Register `@executioncontrolprotocol/registry-control` on the global registry. */
+export declare function registerRegistryControlPolicy(registry?: import("@executioncontrolprotocol/core").Registry): Promise<void>;
+//# sourceMappingURL=registry-control.d.ts.map

package/dist/registry-control.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry-control.d.ts","sourceRoot":"","sources":["../src/registry-control.ts"],"names":[],"mappings":"AAkBA,kFAAkF;AAClF,MAAM,WAAW,2BAA2B;IAC1C,4CAA4C;IAC5C,0BAA0B,CAAC,EAAE,MAAM,EAAE,CAAA;IACrC,6DAA6D;IAC7D,yBAAyB,CAAC,EAAE,MAAM,EAAE,CAAA;IACpC,2DAA2D;IAC3D,iCAAiC,CAAC,EAAE,OAAO,CAAA;IAC3C,yDAAyD;IACzD,aAAa,CAAC,EAAE,OAAO,CAAA;CACxB;AAED,QAAA,MAAM,SAAS,+CAA+C,CAAA;AAE9D,8GAA8G;AAC9G,eAAO,MAAM,qBAAqB,2DA0DxB,CAAA;AAEV,OAAO,EAAE,SAAS,IAAI,0BAA0B,EAAE,CAAA;AAElD,oFAAoF;AACpF,wBAAsB,6BAA6B,CAAC,QAAQ,oDAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAI5F"}

package/dist/registry-control.js

@@ -0,0 +1,69 @@
+import { definePolicy, globalRegistry, hook, matchesAnyNamespace } from "@executioncontrolprotocol/core";
+import { z } from "zod";
+function policyHook(event, fn) {
+    return hook(event, (lifecycleCtx) => fn(lifecycleCtx));
+}
+const POLICY_ID = "@executioncontrolprotocol/registry-control";
+/** @executioncontrolprotocol/registry-control — governs dynamic extension registration. @category Policies */
+export const registryControlPolicy = definePolicy("@executioncontrolprotocol", "registry-control")
+    .withConfig({
+    allowedExtensionNamespaces: z.array(z.string()).optional(),
+    deniedExtensionNamespaces: z.array(z.string()).default([]),
+    allowDynamicExtensionRegistration: z.boolean().default(true),
+    allowAutoBind: z.boolean().default(true),
+})
+    .withHooks([
+    policyHook("policy:pre", (ctx) => {
+        const req = ctx.registryRequest;
+        if (!req)
+            return { type: "allow" };
+        if (req.kind !== "extension") {
+            return {
+                type: "deny",
+                reason: "Dynamic policy and runtime registration is not allowed",
+                code: "REGISTRY_KIND_DENIED",
+            };
+        }
+        const allowDynamic = ctx.config.allowDynamicExtensionRegistration !== false;
+        if (!allowDynamic) {
+            return {
+                type: "deny",
+                reason: "Dynamic extension registration is disabled",
+                code: "REGISTRY_DYNAMIC_DISABLED",
+            };
+        }
+        if (req.autoBindRequested && ctx.config.allowAutoBind === false) {
+            return {
+                type: "deny",
+                reason: "Auto-bind after registration is not allowed",
+                code: "REGISTRY_AUTOBIND_DENIED",
+            };
+        }
+        const denied = ctx.config.deniedExtensionNamespaces ?? [];
+        if (denied.length > 0 && matchesAnyNamespace(req.id, denied)) {
+            return {
+                type: "deny",
+                reason: `Extension namespace is denied: ${req.id}`,
+                code: "REGISTRY_NAMESPACE_DENIED",
+            };
+        }
+        const allowed = ctx.config.allowedExtensionNamespaces;
+        if (allowed && allowed.length > 0 && !matchesAnyNamespace(req.id, allowed)) {
+            return {
+                type: "deny",
+                reason: `Extension namespace is not allowed: ${req.id}`,
+                code: "REGISTRY_NAMESPACE_NOT_ALLOWED",
+            };
+        }
+        return { type: "allow" };
+    }),
+])
+    .build();
+export { POLICY_ID as REGISTRY_CONTROL_POLICY_ID };
+/** Register `@executioncontrolprotocol/registry-control` on the global registry. */
+export async function registerRegistryControlPolicy(registry = globalRegistry) {
+    if (!registry.getPolicy(POLICY_ID)) {
+        await registry.registerPolicy(registryControlPolicy);
+    }
+}
+//# sourceMappingURL=registry-control.js.map

package/dist/registry-control.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry-control.js","sourceRoot":"","sources":["../src/registry-control.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,IAAI,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAA;AACxG,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAMvB,SAAS,UAAU,CACjB,KAAqE,EACrE,EAAgB;IAEhB,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC,YAAY,EAAE,EAAE,CAClC,EAAE,CAAC,YAA8E,CAAC,CACnF,CAAA;AACH,CAAC;AAcD,MAAM,SAAS,GAAG,4CAA4C,CAAA;AAE9D,8GAA8G;AAC9G,MAAM,CAAC,MAAM,qBAAqB,GAAG,YAAY,CAAC,2BAA2B,EAAE,kBAAkB,CAAC;KAC/F,UAAU,CAAC;IACV,0BAA0B,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC1D,yBAAyB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC1D,iCAAiC,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAC5D,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;CACzC,CAAC;KACD,SAAS,CAAC;IACT,UAAU,CAAC,YAAY,EAAE,CAAC,GAAG,EAAE,EAAE;QAC/B,MAAM,GAAG,GAAG,GAAG,CAAC,eAAe,CAAA;QAC/B,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAA;QAElC,IAAI,GAAG,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YAC7B,OAAO;gBACL,IAAI,EAAE,MAAM;gBACZ,MAAM,EAAE,wDAAwD;gBAChE,IAAI,EAAE,sBAAsB;aAC7B,CAAA;QACH,CAAC;QAED,MAAM,YAAY,GAAG,GAAG,CAAC,MAAM,CAAC,iCAAiC,KAAK,KAAK,CAAA;QAC3E,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO;gBACL,IAAI,EAAE,MAAM;gBACZ,MAAM,EAAE,4CAA4C;gBACpD,IAAI,EAAE,2BAA2B;aAClC,CAAA;QACH,CAAC;QAED,IAAI,GAAG,CAAC,iBAAiB,IAAI,GAAG,CAAC,MAAM,CAAC,aAAa,KAAK,KAAK,EAAE,CAAC;YAChE,OAAO;gBACL,IAAI,EAAE,MAAM;gBACZ,MAAM,EAAE,6CAA6C;gBACrD,IAAI,EAAE,0BAA0B;aACjC,CAAA;QACH,CAAC;QAED,MAAM,MAAM,GAAI,GAAG,CAAC,MAAM,CAAC,yBAAkD,IAAI,EAAE,CAAA;QACnF,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,mBAAmB,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,EAAE,CAAC;YAC7D,OAAO;gBACL,IAAI,EAAE,MAAM;gBACZ,MAAM,EAAE,kCAAkC,GAAG,CAAC,EAAE,EAAE;gBAClD,IAAI,EAAE,2BAA2B;aAClC,CAAA;QACH,CAAC;QAED,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,0BAAkD,CAAA;QAC7E,IAAI,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,CAAC,EAAE,CAAC;YAC3E,OAAO;gBACL,IAAI,EAAE,MAAM;gBACZ,MAAM,EAAE,uCAAuC,GAAG,CAAC,EAAE,EAAE;gBACvD,IAAI,EAAE,gCAAgC;aACvC,CAAA;QACH,CAAC;QAED,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAA;IAC1B,CAAC,CAAC;CACH,CAAC;KACD,KAAK,EAAE,CAAA;AAEV,OAAO,EAAE,SAAS,IAAI,0BAA0B,EAAE,CAAA;AAElD,oFAAoF;AACpF,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAAC,QAAQ,GAAG,cAAc;IAC3E,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC;QACnC,MAAM,QAAQ,CAAC,cAAc,CAAC,qBAAqB,CAAC,CAAA;IACtD,CAAC;AACH,CAAC"}

package/package.json

@@ -0,0 +1,33 @@
+{
+  "name": "@executioncontrolprotocol/policies",
+  "version": "0.10.0",
+  "description": "Standard ECP policies",
+  "license": "Apache-2.0",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "scripts": {
+    "build": "tsc -b"
+  },
+  "peerDependencies": {
+    "@executioncontrolprotocol/core": "^0.10.0",
+    "@executioncontrolprotocol/types": "^0.10.0",
+    "zod": "^3.24.0"
+  },
+  "devDependencies": {
+    "@executioncontrolprotocol/core": "0.10.0",
+    "@executioncontrolprotocol/types": "0.10.0",
+    "typescript": "^5.7.0",
+    "zod": "^3.24.0"
+  }
+}