@flowdesk/opencode-plugin 0.1.7 → 0.1.9

package/dist/local-adapter.js

@@ -1,4 +1,6 @@
-import { applyFlowDeskSessionEvidenceWriteIntentsV1, applyWriteIntentsToDurableState, applyWriteIntentsToInMemoryState, evaluateFlowDeskProductionEnablementV1, invalid, loadFlowDeskDurableWorkflowState, mergePolicyPacksV1, planFlowDeskReviewerFanoutFromReloadedCacheEvidenceV1, prepareAttemptRecordWriteIntent, prepareFlowDeskSessionEvidenceWriteIntentV1, prepareLaneRecordWriteIntent, prepareWorkflowActiveWriteIntent, prepareWorkflowRecordWriteIntent, reloadFlowDeskSessionEvidenceV1, valid } from "@flowdesk/core";
+import { readFileSync } from "node:fs";
+import { resolve, sep } from "node:path";
+import { applyFlowDeskSessionEvidenceWriteIntentsV1, applyWriteIntentsToDurableState, applyWriteIntentsToInMemoryState, evaluateFlowDeskProductionEnablementV1, invalid, loadFlowDeskDurableWorkflowState, mergePolicyPacksV1, planFlowDeskReviewerFanoutFromReloadedCacheEvidenceV1, prepareAttemptRecordWriteIntent, prepareDebugExportManifestWriteIntent, prepareDebugSectionFileWriteIntent, prepareFlowDeskSessionEvidenceWriteIntentV1, prepareLaneRecordWriteIntent, prepareWorkflowActiveWriteIntent, prepareWorkflowRecordWriteIntent, reloadFlowDeskSessionEvidenceV1, valid, validatePolicyPackV1, validateProjectConfigV1, } from "@flowdesk/core";
 import { evaluateFlowDeskCommandBackedHandlerV1 } from "./command-handlers.js";
 export const flowdeskLocalNonDispatchAdapterProfile = "local_non_dispatch_command_adapter";
 export function hasFlowDeskLocalPlanningEvidenceV1(session, workflowId, sessionRef) {
@@ -14,7 +16,9 @@ export function hasFlowDeskLocalPlanningEvidenceV1(session, workflowId, sessionR
             lane.lane_class === "planning_draft" &&
             (workflowId === undefined || lane.workflow_id === workflowId)))
         return true;
-    const rootDir = typeof state.durableStateRootDir === "string" ? state.durableStateRootDir : undefined;
+    const rootDir = typeof state.durableStateRootDir === "string"
+        ? state.durableStateRootDir
+        : undefined;
     if (rootDir === undefined || workflowId === undefined)
         return false;
     const loaded = loadFlowDeskDurableWorkflowState(rootDir, {
@@ -32,7 +36,7 @@ const disabledAuthority = {
     providerCall: false,
     runtimeExecution: false,
     fallbackAuthority: false,
-    hardCancelOrNoReplyAuthority: false
+    hardCancelOrNoReplyAuthority: false,
 };
 const taxonomy = {
     primary_category: "coding",
@@ -44,7 +48,7 @@ const taxonomy = {
     domain_uncertainty: "low",
     verification_hardness: "low",
     operational_risk: "low",
-    policy_professional_boundary: "ordinary"
+    policy_professional_boundary: "ordinary",
 };
 function isRecord(value) {
     return typeof value === "object" && value !== null && !Array.isArray(value);
@@ -67,14 +71,18 @@ function id(prefix, request, fallback = "local") {
     return `${prefix}-${safeToken(request.request_id ?? request.workflow_id, fallback)}`;
 }
 function workflowIdFrom(request) {
-    return isRecord(request) && typeof request.workflow_id === "string" && request.workflow_id.length > 0 ? request.workflow_id : "workflow-local";
+    return isRecord(request) &&
+        typeof request.workflow_id === "string" &&
+        request.workflow_id.length > 0
+        ? request.workflow_id
+        : "workflow-local";
 }
 function nowParts(now = new Date()) {
     const nowMs = now.getTime();
     return {
         nowIso: now.toISOString(),
         expiresAtIso: new Date(nowMs + 24 * 60 * 60 * 1000).toISOString(),
-        nowMs
+        nowMs,
     };
 }
 function retention() {
@@ -83,7 +91,7 @@ function retention() {
         debug_staging_max_days: 7,
         conformance_summary_max_days: 30,
         allow_user_longer_retention: false,
-        deletion_behavior: "delete_after_expiry"
+        deletion_behavior: "delete_after_expiry",
     };
 }
 function usagePolicy() {
@@ -95,7 +103,7 @@ function usagePolicy() {
         shared_limit_suspected_dispatchability: "non_dispatchable",
         fallback_derived_dispatchability: "non_dispatchable",
         allow_local_history_source: false,
-        allow_provider_console_scraping: false
+        allow_provider_console_scraping: false,
     };
 }
 function providerHealthPolicy() {
@@ -105,7 +113,7 @@ function providerHealthPolicy() {
         degraded_dispatchability: "diagnostic_only",
         opencode_go_usage_without_official_quota: "unknown",
         z_ai_usage_without_official_quota: "unknown",
-        allow_automatic_provider_fallback: false
+        allow_automatic_provider_fallback: false,
     };
 }
 function projectConfig(parts) {
@@ -124,9 +132,14 @@ function projectConfig(parts) {
         retention: retention(),
         usage_policy: usagePolicy(),
         provider_health_policy: providerHealthPolicy(),
-        disabled_modes: ["real_dispatch", "managed_fallback", "lane_launch", "hard_chat_blocking"],
+        disabled_modes: [
+            "real_dispatch",
+            "managed_fallback",
+            "lane_launch",
+            "hard_chat_blocking",
+        ],
         extension_namespaces: ["flowdesk.project"],
-        audit_refs: ["audit-local"]
+        audit_refs: ["audit-local"],
     };
 }
 function policyPack() {
@@ -139,15 +152,139 @@ function policyPack() {
         source_ref: "policy-source-local",
         applies_to_release_modes: ["release1"],
         priority: 1,
-        rules: [{ rule_id: "rule-local-approval", effect: "require_approval", target: "permission_class", summary_label: "Require scoped non-dispatch approval for local writes.", refs: ["approval-local"] }],
+        rules: [
+            {
+                rule_id: "rule-local-approval",
+                effect: "require_approval",
+                target: "permission_class",
+                summary_label: "Require scoped non-dispatch approval for local writes.",
+                refs: ["approval-local"],
+            },
+        ],
         hard_ban_refs: ["ban-real-dispatch-local"],
         allowed_extension_namespaces: ["flowdesk.project"],
-        redaction_baseline_ref: "redaction-local"
+        redaction_baseline_ref: "redaction-local",
     };
 }
-function effectivePolicy(parts) {
+function defaultLocalPolicyContext(parts, errors = []) {
     const config = projectConfig(parts);
-    return mergePolicyPacksV1(config, [policyPack()], { effectivePolicyId: "effective-local", computedAt: parts.nowIso, auditRef: "audit-local" });
+    const packs = [policyPack()];
+    return {
+        config,
+        policyPacks: packs,
+        effectivePolicy: mergePolicyPacksV1(config, packs, {
+            effectivePolicyId: "effective-local",
+            computedAt: parts.nowIso,
+            auditRef: "audit-local",
+        }),
+        configHash: config.config_hash,
+        policyPackId: packs[0].policy_pack_id,
+        policyPackHash: packs[0].policy_pack_hash,
+        policyPackHashes: packs.map((pack) => pack.policy_pack_hash),
+        projectRootRef: config.project_root_ref,
+        auditRef: "audit-local",
+        scopeRef: "scope-local",
+        errors,
+    };
+}
+function resolveInsideRoot(rootDir, relativeOrAbsolutePath) {
+    const root = resolve(rootDir);
+    const target = resolve(root, relativeOrAbsolutePath);
+    return target === root || target.startsWith(`${root}${sep}`)
+        ? target
+        : undefined;
+}
+function parseJsonFile(path) {
+    try {
+        return { value: JSON.parse(readFileSync(path, "utf8")) };
+    }
+    catch (error) {
+        const code = error instanceof Error && "code" in error
+            ? String(error.code)
+            : "read_or_parse_failed";
+        return {
+            error: code === "ENOENT" ? "file_missing" : "file_unreadable_or_invalid_json",
+        };
+    }
+}
+function loadLocalPolicyContext(parts, options) {
+    if (options?.enabled !== true)
+        return defaultLocalPolicyContext(parts);
+    const rootDir = typeof options.rootDir === "string" && options.rootDir.trim().length > 0
+        ? options.rootDir
+        : undefined;
+    if (rootDir === undefined)
+        return defaultLocalPolicyContext(parts, ["project_config_root_missing"]);
+    const configPath = resolveInsideRoot(rootDir, ".flowdesk/config.json");
+    if (configPath === undefined)
+        return defaultLocalPolicyContext(parts, ["project_config_path_unsafe"]);
+    const configJson = parseJsonFile(configPath);
+    if (configJson.error !== undefined)
+        return defaultLocalPolicyContext(parts, [
+            `project_config_${configJson.error}`,
+        ]);
+    const configValidation = validateProjectConfigV1(configJson.value);
+    if (!configValidation.ok)
+        return defaultLocalPolicyContext(parts, configValidation.errors.map((error) => `project_config_${error}`));
+    const config = configJson.value;
+    const policyPackPaths = options.policyPackPaths ?? [];
+    if (policyPackPaths.length !== config.policy_pack_hashes.length)
+        return defaultLocalPolicyContext(parts, [
+            "policy_pack_file_count_mismatch",
+        ]);
+    const policyPacks = [];
+    const errors = [];
+    for (const [index, policyPackPath] of policyPackPaths.entries()) {
+        if (typeof policyPackPath !== "string" ||
+            policyPackPath.trim().length === 0) {
+            errors.push(`policy_pack_path_${index}_invalid`);
+            continue;
+        }
+        const resolved = resolveInsideRoot(rootDir, policyPackPath);
+        if (resolved === undefined) {
+            errors.push(`policy_pack_path_${index}_unsafe`);
+            continue;
+        }
+        const policyJson = parseJsonFile(resolved);
+        if (policyJson.error !== undefined) {
+            errors.push(`policy_pack_${index}_${policyJson.error}`);
+            continue;
+        }
+        const policyValidation = validatePolicyPackV1(policyJson.value, {
+            expectedPolicyPackHashes: config.policy_pack_hashes,
+        });
+        if (!policyValidation.ok) {
+            errors.push(...policyValidation.errors.map((error) => `policy_pack_${index}_${error}`));
+            continue;
+        }
+        policyPacks.push(policyJson.value);
+    }
+    const loadedHashes = policyPacks.map((pack) => pack.policy_pack_hash);
+    for (const expectedHash of config.policy_pack_hashes) {
+        if (!loadedHashes.includes(expectedHash))
+            errors.push(`policy_pack_hash_not_loaded_${expectedHash}`);
+    }
+    if (errors.length > 0)
+        return defaultLocalPolicyContext(parts, errors);
+    const auditRef = config.audit_refs[0] ?? "audit-local";
+    const effectivePolicy = mergePolicyPacksV1(config, policyPacks, {
+        effectivePolicyId: `effective-${config.config_id}`,
+        computedAt: parts.nowIso,
+        auditRef,
+    });
+    return {
+        config,
+        policyPacks,
+        effectivePolicy,
+        configHash: config.config_hash,
+        policyPackId: policyPacks[0]?.policy_pack_id ?? "policy-none",
+        policyPackHash: policyPacks[0]?.policy_pack_hash ?? "policy-none",
+        policyPackHashes: policyPacks.map((pack) => pack.policy_pack_hash),
+        projectRootRef: config.project_root_ref,
+        auditRef,
+        scopeRef: "scope-local",
+        errors: [],
+    };
 }
 export function createFlowDeskLocalNonDispatchPermissionProvider() {
     return ({ nowIso, expiresAtIso, workflowId, permissionClass }) => ({
@@ -162,22 +299,33 @@ export function createFlowDeskLocalNonDispatchPermissionProvider() {
         config_hash: "config-hash-local",
         policy_pack_hash: "policy-hash-local",
         release_mode: "release1",
-        audit_ref: "audit-local"
+        audit_ref: "audit-local",
     });
 }
-function permission(provider, parts, workflowId, permissionClass) {
-    return provider({ nowIso: parts.nowIso, expiresAtIso: parts.expiresAtIso, workflowId, permissionClass });
+function permission(provider, parts, workflowId, permissionClass, policyContext) {
+    return {
+        ...provider({
+            nowIso: parts.nowIso,
+            expiresAtIso: parts.expiresAtIso,
+            workflowId,
+            permissionClass,
+        }),
+        scope_ref: policyContext.scopeRef,
+        config_hash: policyContext.configHash,
+        policy_pack_hash: policyContext.policyPackHash,
+        audit_ref: policyContext.auditRef,
+    };
 }
-function guardBoundary(provider, parts, workflowId, permissionClass) {
+function guardBoundary(provider, parts, workflowId, permissionClass, policyContext) {
     return {
-        configHash: "config-hash-local",
-        scopeRef: "scope-local",
-        policy: effectivePolicy(parts),
-        auditRef: "audit-local",
+        configHash: policyContext.configHash,
+        scopeRef: policyContext.scopeRef,
+        policy: policyContext.effectivePolicy,
+        auditRef: policyContext.auditRef,
         conformanceRef: "conformance-local-non-dispatch",
         runtimeCapabilityRef: "runtime-local-fake",
-        nonDispatchPermission: permission(provider, parts, workflowId, permissionClass),
-        now: parts.nowMs
+        nonDispatchPermission: permission(provider, parts, workflowId, permissionClass, policyContext),
+        now: parts.nowMs,
     };
 }
 function providerHealth(parts) {
@@ -194,7 +342,7 @@ function providerHealth(parts) {
         failure_class: "none",
         dispatchability: "diagnostic_only",
         source_ref: "health-local-source",
-        safe_remediation: "Use FlowDesk local non-dispatch diagnostics before any retry."
+        safe_remediation: "Use FlowDesk local non-dispatch diagnostics before any retry.",
     };
 }
 function makePlanContext(request, parts) {
@@ -211,7 +359,7 @@ function makePlanContext(request, parts) {
         auditRef: "audit-local",
         routeRef: id("route", request),
         nowIso: parts.nowIso,
-        taxonomy
+        taxonomy,
     };
 }
 function laneObservabilityRefFor(request, laneClass) {
@@ -219,13 +367,13 @@ function laneObservabilityRefFor(request, laneClass) {
         ? id("lane-observability", request)
         : id("lane-observability-run", request);
 }
-function makeRunContext(request, parts, permissionProvider) {
+function makeRunContext(request, parts, permissionProvider, policyContext) {
     const workflowId = workflowIdFrom(request);
     const runMode = request.run_mode;
     if (runMode === "guarded-dry-run") {
         return {
             guardedDryRun: {
-                guardBoundary: guardBoundary(permissionProvider, parts, workflowId, "audit_write"),
+                guardBoundary: guardBoundary(permissionProvider, parts, workflowId, "audit_write", policyContext),
                 sessionId: "session-local",
                 attemptId: id("attempt", request),
                 auditEventId: id("event-audit", request),
@@ -235,17 +383,17 @@ function makeRunContext(request, parts, permissionProvider) {
                 commandShapeHash: id("shape", request),
                 runResultRef: id("run-result", request),
                 verificationSummaryRef: id("verification", request),
-                redactionVersion: "redaction-v1"
-            }
+                redactionVersion: "redaction-v1",
+            },
         };
     }
     if (runMode === "managed-dispatch")
         return {};
     return {
         fakeRuntime: {
-            guardBoundary: guardBoundary(permissionProvider, parts, workflowId, "fake_runtime_write"),
-            auditWritePermission: permission(permissionProvider, parts, workflowId, "audit_write"),
-            stateWritePermission: permission(permissionProvider, parts, workflowId, "state_write"),
+            guardBoundary: guardBoundary(permissionProvider, parts, workflowId, "fake_runtime_write", policyContext),
+            auditWritePermission: permission(permissionProvider, parts, workflowId, "audit_write", policyContext),
+            stateWritePermission: permission(permissionProvider, parts, workflowId, "state_write", policyContext),
             sessionId: "session-local",
             attemptId: id("attempt", request),
             auditEventId: id("event-audit", request),
@@ -264,21 +412,29 @@ function makeRunContext(request, parts, permissionProvider) {
             laneSummaryRef: id("lane-summary-run", request),
             laneObservabilityRef: laneObservabilityRefFor(request, "verification"),
             laneEventRef: id("event-run", request),
-            laneDebugRef: "debug-local"
-        }
+            laneDebugRef: "debug-local",
+        },
     };
 }
 function laneRecordFor(request, parts, laneClass) {
     const workflowId = workflowIdFrom(request);
-    const planRevisionId = typeof request.plan_revision_id === "string" ? request.plan_revision_id : id("plan", request);
+    const planRevisionId = typeof request.plan_revision_id === "string"
+        ? request.plan_revision_id
+        : id("plan", request);
     const observabilityRef = laneObservabilityRefFor(request, laneClass);
     return {
         schema_version: "flowdesk.lane_record.v1",
-        lane_id: laneClass === "planning_draft" ? id("lane-plan", request) : id("lane-run", request),
+        lane_id: laneClass === "planning_draft"
+            ? id("lane-plan", request)
+            : id("lane-run", request),
         workflow_id: workflowId,
         plan_revision_id: planRevisionId,
-        ...(laneClass === "verification" ? { attempt_id: id("attempt", request) } : {}),
-        task_ref: laneClass === "planning_draft" ? id("task-plan", request) : id("task-run", request),
+        ...(laneClass === "verification"
+            ? { attempt_id: id("attempt", request) }
+            : {}),
+        task_ref: laneClass === "planning_draft"
+            ? id("task-plan", request)
+            : id("task-run", request),
         lane_class: laneClass,
         state: "completed",
         created_at: parts.nowIso,
@@ -286,15 +442,25 @@ function laneRecordFor(request, parts, laneClass) {
         updated_at: parts.nowIso,
         completed_at: parts.nowIso,
         safe_next_action: "/flowdesk-status",
-        refs: [laneClass === "planning_draft" ? id("lane-summary", request) : id("lane-summary-run", request), observabilityRef],
-        event_refs: [laneClass === "planning_draft" ? id("event-plan", request) : id("event-run", request)],
+        refs: [
+            laneClass === "planning_draft"
+                ? id("lane-summary", request)
+                : id("lane-summary-run", request),
+            observabilityRef,
+        ],
+        event_refs: [
+            laneClass === "planning_draft"
+                ? id("event-plan", request)
+                : id("event-run", request),
+        ],
         audit_refs: ["audit-local"],
         observability_ref: observabilityRef,
-        ...(laneClass === "verification" ? { debug_ref: "debug-local" } : {})
+        ...(laneClass === "verification" ? { debug_ref: "debug-local" } : {}),
     };
 }
 function requiresRunConfirmation(request) {
-    return typeof request.risk_hint === "string" && /requires explicit user confirmation/i.test(request.risk_hint);
+    return (typeof request.risk_hint === "string" &&
+        /requires explicit user confirmation/i.test(request.risk_hint));
 }
 function pendingApprovalRef(request) {
     return id("approval", request);
@@ -307,12 +473,16 @@ function createPendingConfirmation(request, parts, planRevisionId) {
         status: "pending",
         approvalRef: pendingApprovalRef(request),
         workflowId: workflowIdFrom(request),
-        ...(typeof request.session_ref === "string" ? { sessionRef: request.session_ref } : {}),
-        ...(typeof request.redacted_intake_ref === "string" ? { redactedIntakeRef: request.redacted_intake_ref } : {}),
+        ...(typeof request.session_ref === "string"
+            ? { sessionRef: request.session_ref }
+            : {}),
+        ...(typeof request.redacted_intake_ref === "string"
+            ? { redactedIntakeRef: request.redacted_intake_ref }
+            : {}),
         sourceSummaryHash: safeHash(request.goal_summary ?? request.intake_summary),
         planRevisionId,
         createdAtIso: parts.nowIso,
-        expiresAtIso: pendingExpiresAt(parts)
+        expiresAtIso: pendingExpiresAt(parts),
     };
 }
 function matchesOptionalScope(expected, actual) {
@@ -328,8 +498,10 @@ function validatePendingConfirmation(state, request, parts) {
         pending.status = "expired";
         return invalid("pending confirmation expired");
     }
-    const summaryMatches = pending.sourceSummaryHash === safeHash(request.goal_summary ?? request.intake_summary);
-    const sourceRefMatches = pending.redactedIntakeRef !== undefined && request.redacted_intake_ref === pending.redactedIntakeRef;
+    const summaryMatches = pending.sourceSummaryHash ===
+        safeHash(request.goal_summary ?? request.intake_summary);
+    const sourceRefMatches = pending.redactedIntakeRef !== undefined &&
+        request.redacted_intake_ref === pending.redactedIntakeRef;
     const errors = [];
     if (request.user_approval_ref !== pending.approvalRef)
         errors.push("user_approval_ref does not match pending confirmation");
@@ -342,11 +514,16 @@ function validatePendingConfirmation(state, request, parts) {
     return errors.length === 0 ? valid() : invalid(...errors);
 }
 function shouldGateRun(state, request) {
-    return request.input_mode === "chat_routed" || state.workflow?.state === "plan_pending_approval";
+    return (request.input_mode === "chat_routed" ||
+        state.workflow?.state === "plan_pending_approval");
 }
 function consumePendingConfirmation(state, parts) {
     if (state.pendingConfirmation !== undefined) {
-        state.pendingConfirmation = { ...state.pendingConfirmation, status: "consumed", consumedAtIso: parts.nowIso };
+        state.pendingConfirmation = {
+            ...state.pendingConfirmation,
+            status: "consumed",
+            consumedAtIso: parts.nowIso,
+        };
     }
 }
 function cancelPendingConfirmation(state, request, parts) {
@@ -357,7 +534,11 @@ function cancelPendingConfirmation(state, request, parts) {
         return;
     if (!matchesOptionalScope(pending.sessionRef, request.session_ref))
         return;
-    state.pendingConfirmation = { ...pending, status: "cancelled", cancelledAtIso: parts.nowIso };
+    state.pendingConfirmation = {
+        ...pending,
+        status: "cancelled",
+        cancelledAtIso: parts.nowIso,
+    };
 }
 function applyAdapterWriteIntents(state, intents, parts) {
     try {
@@ -381,50 +562,67 @@ function applyAdapterWriteIntents(state, intents, parts) {
 }
 function updateWorkflowState(state, request, parts, nextState) {
     const workflowId = workflowIdFrom(request);
-    const planRevisionId = typeof request.plan_revision_id === "string" ? request.plan_revision_id : id("plan", request);
+    const planRevisionId = typeof request.plan_revision_id === "string"
+        ? request.plan_revision_id
+        : id("plan", request);
     const laneRefs = state.laneRecords.flatMap((record) => record.refs);
     const pendingConfirmation = nextState === "plan_pending_approval";
     const workflow = {
         schema_version: "flowdesk.workflow_record.v1",
         workflow_id: workflowId,
-        session_ref: typeof request.session_ref === "string" ? request.session_ref : "session-local-ref",
+        session_ref: typeof request.session_ref === "string"
+            ? request.session_ref
+            : "session-local-ref",
         created_at: state.workflow?.created_at ?? parts.nowIso,
         updated_at: parts.nowIso,
         state: nextState,
         latest_plan_revision_id: planRevisionId,
-        current_step_id: typeof request.step_id === "string" ? request.step_id : id("step-plan", request),
-        project_root_ref: "project-root-local",
-        config_hash: "config-hash-local",
-        policy_pack_id: "policy-local",
-        policy_pack_hash: "policy-hash-local",
-        ...(nextState === "complete" ? { current_attempt_id: id("attempt", request) } : {}),
+        current_step_id: typeof request.step_id === "string"
+            ? request.step_id
+            : id("step-plan", request),
+        project_root_ref: state.policyContext.projectRootRef,
+        config_hash: state.policyContext.configHash,
+        policy_pack_id: state.policyContext.policyPackId,
+        policy_pack_hash: state.policyContext.policyPackHash,
+        ...(nextState === "complete"
+            ? { current_attempt_id: id("attempt", request) }
+            : {}),
         attempt_refs: nextState === "complete" ? [id("attempt", request)] : [],
         checkpoint_refs: [],
         lane_refs: laneRefs,
         latest_lane_summary_refs: laneRefs,
-        audit_refs: ["audit-local"],
+        audit_refs: [state.policyContext.auditRef],
         status_summary_ref: "status-summary-local",
         artifact_disposition: "quarantined",
-        ...(pendingConfirmation ? {
-            blocker_summary: {
-                category: "policy",
-                summary: "Execution-like chat intake is waiting for explicit user confirmation before any run.",
-                safe_remediation: "Review the FlowDesk plan and provide typed confirmation before using /flowdesk-run.",
-                refs: [id("confirmation-pending", request)]
+        ...(pendingConfirmation
+            ? {
+                blocker_summary: {
+                    category: "policy",
+                    summary: "Execution-like chat intake is waiting for explicit user confirmation before any run.",
+                    safe_remediation: "Review the FlowDesk plan and provide typed confirmation before using /flowdesk-run.",
+                    refs: [id("confirmation-pending", request)],
+                },
             }
-        } : {}),
-        safe_next_actions: pendingConfirmation ? ["/flowdesk-plan", "/flowdesk-status"] : ["/flowdesk-status"]
+            : {}),
+        safe_next_actions: pendingConfirmation
+            ? ["/flowdesk-plan", "/flowdesk-status"]
+            : ["/flowdesk-status"],
     };
     const active = {
         schema_version: "flowdesk.workflow_active.v1",
         active_workflow_id: workflowId,
-        ...(nextState === "complete" ? { active_attempt_id: id("attempt", request) } : {}),
+        ...(nextState === "complete"
+            ? { active_attempt_id: id("attempt", request) }
+            : {}),
         state: nextState,
         updated_at: parts.nowIso,
         status_summary_ref: "status-summary-local",
-        audit_refs: ["audit-local"]
+        audit_refs: [state.policyContext.auditRef],
     };
-    const intents = [prepareWorkflowActiveWriteIntent(active).writeIntent, prepareWorkflowRecordWriteIntent(workflow).writeIntent].filter((intent) => intent !== undefined);
+    const intents = [
+        prepareWorkflowActiveWriteIntent(active).writeIntent,
+        prepareWorkflowRecordWriteIntent(workflow).writeIntent,
+    ].filter((intent) => intent !== undefined);
     if (intents.length !== 2)
         return false;
     if (!applyAdapterWriteIntents(state, intents, parts))
@@ -448,7 +646,9 @@ function recordPlanningState(state, request, parts) {
         return false;
     }
     if (pendingConfirmation)
-        state.pendingConfirmation = createPendingConfirmation(request, parts, typeof request.plan_revision_id === "string" ? request.plan_revision_id : id("plan", request));
+        state.pendingConfirmation = createPendingConfirmation(request, parts, typeof request.plan_revision_id === "string"
+            ? request.plan_revision_id
+            : id("plan", request));
     return true;
 }
 function recordRunState(state, request, parts, permissionProvider) {
@@ -457,23 +657,29 @@ function recordRunState(state, request, parts, permissionProvider) {
         schema_version: "flowdesk.attempt_record.v1",
         attempt_id: id("attempt", request),
         workflow_id: workflowId,
-        ...(typeof request.step_id === "string" ? { step_id: request.step_id } : {}),
+        ...(typeof request.step_id === "string"
+            ? { step_id: request.step_id }
+            : {}),
         created_at: parts.nowIso,
         updated_at: parts.nowIso,
-        run_mode: request.run_mode === "guarded-dry-run" ? "guarded-dry-run" : "fake-runtime",
+        run_mode: request.run_mode === "guarded-dry-run"
+            ? "guarded-dry-run"
+            : "fake-runtime",
         state_at_start: "ready_to_run",
         state_at_end: "complete",
         attempt_state: "complete",
         guard_decision_ref: id("decision", request),
-        non_dispatch_permission_ref: permission(permissionProvider, parts, workflowId, request.run_mode === "guarded-dry-run" ? "audit_write" : "fake_runtime_write").permission_id,
+        non_dispatch_permission_ref: permission(permissionProvider, parts, workflowId, request.run_mode === "guarded-dry-run"
+            ? "audit_write"
+            : "fake_runtime_write", state.policyContext).permission_id,
         command_shape_hash: id("shape", request),
         runtime_capability_ref: "runtime-local-fake",
-        pre_run_audit_ref: "audit-local",
+        pre_run_audit_ref: state.policyContext.auditRef,
         runtime_echo_validation: "not_applicable",
         verification_ref: id("verification", request),
         artifact_disposition: "quarantined",
         outcome_audit_ref: "audit-outcome-local",
-        safe_next_actions: ["/flowdesk-status", "/flowdesk-export-debug"]
+        safe_next_actions: ["/flowdesk-status", "/flowdesk-export-debug"],
     };
     const lane = laneRecordFor(request, parts, "verification");
     const attemptIntent = prepareAttemptRecordWriteIntent(attempt).writeIntent;
@@ -485,7 +691,10 @@ function recordRunState(state, request, parts, permissionProvider) {
     const previousAttempt = state.currentAttempt;
     const previousLaneRecords = state.laneRecords;
     state.currentAttempt = attempt;
-    state.laneRecords = [...state.laneRecords.filter((record) => record.lane_id !== lane.lane_id), lane];
+    state.laneRecords = [
+        ...state.laneRecords.filter((record) => record.lane_id !== lane.lane_id),
+        lane,
+    ];
     if (!updateWorkflowState(state, request, parts, "complete")) {
         state.currentAttempt = previousAttempt;
         state.laneRecords = previousLaneRecords;
@@ -493,18 +702,120 @@ function recordRunState(state, request, parts, permissionProvider) {
     }
     return true;
 }
+function recordDebugExportManifestState(state, request, response, parts) {
+    if (!isRecord(response))
+        return false;
+    const exportId = safeToken(response.export_manifest_ref, id("debug-export", request));
+    const rawSections = Array.isArray(response.included_sections)
+        ? response.included_sections
+        : [];
+    const workflowId = typeof request.workflow_id === "string" ? request.workflow_id : undefined;
+    const sessionRef = typeof request.session_ref === "string" ? request.session_ref : undefined;
+    const sourceRefs = [
+        safeToken(request.redacted_intake_ref, "debug-export-request"),
+    ];
+    const sectionFiles = [];
+    const updatedSummaries = [];
+    for (const entry of rawSections) {
+        if (!isRecord(entry) || typeof entry.section !== "string")
+            continue;
+        const sectionName = entry.section;
+        const sectionRef = `debug-section-file-${exportId}-${sectionName.replaceAll("_", "-")}`;
+        const redactionStatus = entry.redaction_status === "partial" ||
+            entry.redaction_status === "blocked"
+            ? entry.redaction_status
+            : "passed";
+        const warningCount = typeof entry.warning_count === "number" && entry.warning_count >= 0
+            ? entry.warning_count
+            : 0;
+        const excludedCategories = Array.isArray(entry.excluded_categories)
+            ? entry.excluded_categories
+            : [];
+        const sectionFile = {
+            schema_version: "flowdesk.debug_section_file.v1",
+            export_id: exportId,
+            section: sectionName,
+            ref: sectionRef,
+            ...(workflowId !== undefined ? { workflow_id: workflowId } : {}),
+            ...(sessionRef !== undefined ? { session_ref: sessionRef } : {}),
+            generated_at: parts.nowIso,
+            redaction_version: "redaction-v1",
+            redaction_status: redactionStatus,
+            warning_count: warningCount,
+            excluded_categories: excludedCategories,
+            source_refs: [...sourceRefs],
+            summary_labels: [`flowdesk debug section ${sectionName}`],
+            audit_refs: ["audit-local"],
+        };
+        sectionFiles.push(sectionFile);
+        updatedSummaries.push({
+            schema_version: "flowdesk.debug_section_summary.v1",
+            export_id: exportId,
+            section: sectionName,
+            ref: sectionRef,
+            redaction_status: redactionStatus,
+            warning_count: warningCount,
+            excluded_categories: excludedCategories,
+        });
+    }
+    const byteCount = sectionFiles.reduce((acc, file) => acc + Buffer.byteLength(JSON.stringify(file), "utf8"), 0);
+    const manifest = {
+        schema_version: "flowdesk.debug_export_manifest.v1",
+        export_id: exportId,
+        manifest_ref: safeToken(response.export_manifest_ref, `manifest-${exportId}`),
+        ...(workflowId !== undefined ? { workflow_id: workflowId } : {}),
+        ...(sessionRef !== undefined ? { session_ref: sessionRef } : {}),
+        created_at: parts.nowIso,
+        delete_after: typeof response.delete_after === "string"
+            ? response.delete_after
+            : parts.expiresAtIso,
+        included_sections: updatedSummaries,
+        redaction_version: "redaction-v1",
+        source_refs: sourceRefs,
+        file_count: sectionFiles.length,
+        byte_count: byteCount,
+        warnings: [],
+        deletion_state: request.retention_hint === "delete_after_export"
+            ? "deleted"
+            : "retained_by_policy",
+        ...(request.retention_hint === "delete_after_export"
+            ? { deletion_proof_ref: `deletion-${exportId}` }
+            : {}),
+        audit_refs: ["audit-local"],
+    };
+    const manifestIntent = prepareDebugExportManifestWriteIntent("session-local", manifest).writeIntent;
+    if (manifestIntent === undefined)
+        return false;
+    const sectionIntents = [];
+    for (const file of sectionFiles) {
+        const prep = prepareDebugSectionFileWriteIntent("session-local", file);
+        if (prep.writeIntent === undefined)
+            return false;
+        sectionIntents.push(prep.writeIntent);
+    }
+    return applyAdapterWriteIntents(state, [manifestIntent, ...sectionIntents], parts);
+}
 function fallbackRegatePlanContext(state, request) {
     if (state.durableStateRootDir === undefined)
         return undefined;
     const workflowId = workflowIdFrom(request);
-    const evidenceReload = reloadFlowDeskSessionEvidenceV1({ workflowId, rootDir: state.durableStateRootDir });
-    const entry = evidenceReload.entries.find(e => e.evidenceClass === "fallback_regate_plan");
+    const evidenceReload = reloadFlowDeskSessionEvidenceV1({
+        workflowId,
+        rootDir: state.durableStateRootDir,
+    });
+    const entry = evidenceReload.entries.find((e) => e.evidenceClass === "fallback_regate_plan");
     return entry?.record;
 }
 function statusContext(state, request, parts) {
     const requestedWorkflowId = workflowIdFrom(request);
-    if (state.durableStateRootDir !== undefined && (state.workflow === undefined || state.workflow.workflow_id !== requestedWorkflowId)) {
-        const loaded = loadFlowDeskDurableWorkflowState(state.durableStateRootDir, { workflowId: requestedWorkflowId, sessionId: "session-local", now: parts.nowMs });
+    if (state.durableStateRootDir !== undefined &&
+        (state.workflow === undefined ||
+            state.workflow.workflow_id !== requestedWorkflowId)) {
+        const loaded = loadFlowDeskDurableWorkflowState(state.durableStateRootDir, {
+            workflowId: requestedWorkflowId,
+            sessionId: "session-local",
+            now: parts.nowMs,
+        });
         state.lastDurableStateReadErrors = loaded.ok ? [] : loaded.errors;
         if (loaded.ok && loaded.snapshot !== undefined) {
             state.active = loaded.snapshot.active;
@@ -516,27 +827,40 @@ function statusContext(state, request, parts) {
     else {
         state.lastDurableStateReadErrors = [];
     }
-    if (state.lastDurableStateReadErrors.length === 0 && (state.workflow === undefined || state.active === undefined))
+    if (state.lastDurableStateReadErrors.length === 0 &&
+        (state.workflow === undefined || state.active === undefined))
         updateWorkflowState(state, request, parts, "ready_to_run");
     const fanoutDiagnostics = reviewerFanoutDiagnosticsContext(state, request, parts);
     return {
         active: state.active,
         workflow: state.workflow,
-        ...(state.currentAttempt === undefined ? {} : { currentAttempt: state.currentAttempt }),
+        ...(state.currentAttempt === undefined
+            ? {}
+            : { currentAttempt: state.currentAttempt }),
         laneRecords: state.laneRecords,
         providerHealthSnapshot: providerHealth(parts),
-        ...(fanoutDiagnostics?.selection.cacheRefreshPlan === undefined ? {} : { exactModelAvailabilityCacheRefreshPlan: fanoutDiagnostics.selection.cacheRefreshPlan }),
-        ...(fanoutDiagnostics === undefined ? {} : { reviewerFanoutPlan: fanoutDiagnostics.fanoutPlan }),
+        ...(fanoutDiagnostics?.selection.cacheRefreshPlan === undefined
+            ? {}
+            : {
+                exactModelAvailabilityCacheRefreshPlan: fanoutDiagnostics.selection.cacheRefreshPlan,
+            }),
+        ...(fanoutDiagnostics === undefined
+            ? {}
+            : { reviewerFanoutPlan: fanoutDiagnostics.fanoutPlan }),
         auditRef: "audit-local",
         debugRef: "debug-local",
-        now: parts.nowMs
+        now: parts.nowMs,
     };
 }
 function productionEnablementContext(state, request) {
-    if (state.productionEnablement?.enabled !== true || state.durableStateRootDir === undefined)
+    if (state.productionEnablement?.enabled !== true ||
+        state.durableStateRootDir === undefined)
         return undefined;
     const workflowId = workflowIdFrom(request);
-    const evidenceReload = reloadFlowDeskSessionEvidenceV1({ workflowId, rootDir: state.durableStateRootDir });
+    const evidenceReload = reloadFlowDeskSessionEvidenceV1({
+        workflowId,
+        rootDir: state.durableStateRootDir,
+    });
     return evaluateFlowDeskProductionEnablementV1({
         workflowId,
         evidenceReload,
@@ -550,26 +874,32 @@ function productionEnablementContext(state, request) {
         externalAuthProviderPolicyResult: state.productionEnablement.externalAuthProviderPolicyResult,
         laneConformanceRefs: state.productionEnablement.laneConformanceRefs,
         allowIncompleteConformance: state.productionEnablement.allowIncompleteConformance,
-        approvalDecision: state.productionEnablement.approvalDecision
+        approvalDecision: state.productionEnablement.approvalDecision,
     });
 }
 function reviewerFanoutDiagnosticsContext(state, request, parts) {
-    if (state.reviewerFanoutDiagnostics?.enabled !== true || state.durableStateRootDir === undefined)
+    if (state.reviewerFanoutDiagnostics?.enabled !== true ||
+        state.durableStateRootDir === undefined)
         return undefined;
     const workflowId = workflowIdFrom(request);
-    const reloadedEvidence = reloadFlowDeskSessionEvidenceV1({ workflowId, rootDir: state.durableStateRootDir });
+    const reloadedEvidence = reloadFlowDeskSessionEvidenceV1({
+        workflowId,
+        rootDir: state.durableStateRootDir,
+    });
     const plan = planFlowDeskReviewerFanoutFromReloadedCacheEvidenceV1({
         ...state.reviewerFanoutDiagnostics,
         workflowId,
         reloadedEvidence,
-        requestedAt: state.reviewerFanoutDiagnostics.requestedAt ?? parts.nowIso
+        requestedAt: state.reviewerFanoutDiagnostics.requestedAt ?? parts.nowIso,
     });
-    if (state.reviewerFanoutDiagnostics.persistDerivedFanoutPlanEvidence === true && plan.state === "fanout_ready") {
+    if (state.reviewerFanoutDiagnostics.persistDerivedFanoutPlanEvidence === true &&
+        plan.state === "fanout_ready") {
         const materialized = materializeReviewerFanoutPlanEvidence({
             rootDir: state.durableStateRootDir,
             workflowId,
-            evidenceId: state.reviewerFanoutDiagnostics.fanoutPlanEvidenceId ?? reviewerFanoutPlanEvidenceId(workflowId, plan.fanoutPlan),
-            fanoutPlan: plan.fanoutPlan
+            evidenceId: state.reviewerFanoutDiagnostics.fanoutPlanEvidenceId ??
+                reviewerFanoutPlanEvidenceId(workflowId, plan.fanoutPlan),
+            fanoutPlan: plan.fanoutPlan,
         });
         if (!materialized.ok)
             state.lastDurableStateReadErrors = materialized.errors;
@@ -582,54 +912,80 @@ function reviewerFanoutPlanEvidenceId(workflowId, plan) {
 function materializeReviewerFanoutPlanEvidence(input) {
     if (input.fanoutPlan.state !== "fanout_ready" || !input.fanoutPlan.ok)
         return invalid("reviewer fanout plan evidence requires a ready fanout plan");
-    const prepared = prepareFlowDeskSessionEvidenceWriteIntentV1({ workflowId: input.workflowId, evidenceId: input.evidenceId, record: input.fanoutPlan });
+    const prepared = prepareFlowDeskSessionEvidenceWriteIntentV1({
+        workflowId: input.workflowId,
+        evidenceId: input.evidenceId,
+        record: input.fanoutPlan,
+    });
     if (!prepared.ok || prepared.writeIntent === undefined)
         return prepared;
-    return applyFlowDeskSessionEvidenceWriteIntentsV1(input.rootDir, [prepared.writeIntent]);
+    return applyFlowDeskSessionEvidenceWriteIntentsV1(input.rootDir, [
+        prepared.writeIntent,
+    ]);
 }
 function contextFor(toolName, request, state, parts, permissionProvider) {
     const record = isRecord(request) ? request : {};
     if (toolName === "flowdesk_plan")
         return { plan: makePlanContext(record, parts) };
     if (toolName === "flowdesk_run")
-        return { run: makeRunContext(record, parts, permissionProvider) };
+        return {
+            run: makeRunContext(record, parts, permissionProvider, state.policyContext),
+        };
     if (toolName === "flowdesk_status")
         return { status: statusContext(state, record, parts) };
     const fallbackRegatePlan = fallbackRegatePlanContext(state, record);
     if (toolName === "flowdesk_retry") {
-        const retry = { request: record, providerHealthSnapshot: providerHealth(parts), newAttemptId: id("attempt-retry", record), auditRef: "audit-local", debugRef: "debug-local" };
+        const retry = {
+            request: record,
+            providerHealthSnapshot: providerHealth(parts),
+            newAttemptId: id("attempt-retry", record),
+            auditRef: "audit-local",
+            debugRef: "debug-local",
+        };
         return { retry };
     }
     const fanoutDiagnostics = reviewerFanoutDiagnosticsContext(state, record, parts);
-    return { diagnostic: {
+    return {
+        diagnostic: {
             nowIso: parts.nowIso,
             deleteAfterIso: parts.expiresAtIso,
             providerHealthSnapshotRef: "health-local",
             productionEnablement: productionEnablementContext(state, record),
-            ...(fanoutDiagnostics?.selection.cacheRefreshPlan === undefined ? {} : { exactModelAvailabilityCacheRefreshPlan: fanoutDiagnostics.selection.cacheRefreshPlan }),
-            ...(fanoutDiagnostics === undefined ? {} : { reviewerFanoutPlan: fanoutDiagnostics.fanoutPlan }),
-            fallbackRegatePlan
-        } };
+            ...(fanoutDiagnostics?.selection.cacheRefreshPlan === undefined
+                ? {}
+                : {
+                    exactModelAvailabilityCacheRefreshPlan: fanoutDiagnostics.selection.cacheRefreshPlan,
+                }),
+            ...(fanoutDiagnostics === undefined
+                ? {}
+                : { reviewerFanoutPlan: fanoutDiagnostics.fanoutPlan }),
+            fallbackRegatePlan,
+        },
+    };
 }
 function summarize(state, stateWriteApplied) {
     const pending = state.pendingConfirmation;
     return {
         workflowId: state.workflow?.workflow_id,
         workflowState: state.workflow?.state,
-        ...(pending === undefined ? { pendingConfirmationStatus: "missing" } : {
-            pendingConfirmationStatus: pending.status,
-            pendingConfirmationRef: pending.approvalRef,
-            pendingConfirmationWorkflowId: pending.workflowId,
-            pendingConfirmationExpiresAt: pending.expiresAtIso
-        }),
+        ...(pending === undefined
+            ? { pendingConfirmationStatus: "missing" }
+            : {
+                pendingConfirmationStatus: pending.status,
+                pendingConfirmationRef: pending.approvalRef,
+                pendingConfirmationWorkflowId: pending.workflowId,
+                pendingConfirmationExpiresAt: pending.expiresAtIso,
+            }),
         laneRecords: state.laneRecords.length,
         inMemoryStateEntries: state.inMemoryState.size,
-        durableStateMode: state.durableStateRootDir === undefined ? "memory_only" : "durable_flowdesk_root",
+        durableStateMode: state.durableStateRootDir === undefined
+            ? "memory_only"
+            : "durable_flowdesk_root",
         durableStateWriteApplied: state.lastDurableStateWriteApplied,
         durableStateWrites: state.durableStateWrites,
         stateWriteApplied,
         permissionSource: "tool_boundary_injected",
-        ...disabledAuthority
+        ...disabledAuthority,
     };
 }
 function blockedRunHandler(toolName, validation) {
@@ -640,14 +996,25 @@ function blockedRunHandler(toolName, validation) {
         requestSchemaValid: false,
         responseSchemaValid: false,
         coreEvaluationOk: false,
-        ...disabledAuthority
+        ...disabledAuthority,
     };
 }
 function clockDate(clock) {
     return typeof clock === "function" ? clock() : clock;
 }
 export function createFlowDeskLocalNonDispatchAdapterSession(now = new Date(), permissionProvider = createFlowDeskLocalNonDispatchPermissionProvider(), options = {}) {
-    const state = { laneRecords: [], inMemoryState: new Map(), durableStateRootDir: options.durableStateRootDir, productionEnablement: options.productionEnablement, reviewerFanoutDiagnostics: options.reviewerFanoutDiagnostics, durableStateWrites: 0, lastDurableStateWriteApplied: false, lastDurableStateReadErrors: [] };
+    const initialParts = nowParts(clockDate(now));
+    const state = {
+        laneRecords: [],
+        inMemoryState: new Map(),
+        durableStateRootDir: options.durableStateRootDir,
+        productionEnablement: options.productionEnablement,
+        reviewerFanoutDiagnostics: options.reviewerFanoutDiagnostics,
+        policyContext: loadLocalPolicyContext(initialParts, options.projectConfig),
+        durableStateWrites: 0,
+        lastDurableStateWriteApplied: false,
+        lastDurableStateReadErrors: [],
+    };
     return {
         state,
         evaluate(toolName, request) {
@@ -663,7 +1030,7 @@ export function createFlowDeskLocalNonDispatchAdapterSession(now = new Date(), p
                         toolName,
                         handler,
                         localState: summarize(state, false),
-                        ...disabledAuthority
+                        ...disabledAuthority,
                     };
                 }
                 consumePendingConfirmation(state, parts);
@@ -675,22 +1042,30 @@ export function createFlowDeskLocalNonDispatchAdapterSession(now = new Date(), p
                 stateWriteApplied = recordPlanningState(state, record, parts);
             if (handler.ok && toolName === "flowdesk_run")
                 stateWriteApplied = recordRunState(state, record, parts, permissionProvider);
+            if (handler.ok && toolName === "flowdesk_export_debug")
+                stateWriteApplied = recordDebugExportManifestState(state, record, handler.response, parts);
             if (handler.ok && toolName === "flowdesk_abort")
                 cancelPendingConfirmation(state, record, parts);
-            const adapterValidation = state.lastDurableStateReadErrors.length > 0
-                ? invalid(...state.lastDurableStateReadErrors)
-                : handler.ok && (toolName === "flowdesk_plan" || toolName === "flowdesk_run") && !stateWriteApplied
-                    ? invalid("local adapter state write failed")
-                    : valid();
+            const adapterValidation = state.policyContext.errors.length > 0
+                ? invalid(...state.policyContext.errors)
+                : state.lastDurableStateReadErrors.length > 0
+                    ? invalid(...state.lastDurableStateReadErrors)
+                    : handler.ok &&
+                        (toolName === "flowdesk_plan" ||
+                            toolName === "flowdesk_run" ||
+                            toolName === "flowdesk_export_debug") &&
+                        !stateWriteApplied
+                        ? invalid("local adapter state write failed")
+                        : valid();
             return {
                 ...adapterValidation,
                 adapterProfile: flowdeskLocalNonDispatchAdapterProfile,
                 toolName,
                 handler,
                 localState: summarize(state, stateWriteApplied),
-                ...disabledAuthority
+                ...disabledAuthority,
             };
-        }
+        },
     };
 }
 //# sourceMappingURL=local-adapter.js.map