harnery 0.10.0 → 0.12.0

package/README.md

@@ -21,7 +21,7 @@
 
 - **Multi-agent coordination:** per-agent heartbeats in `.harnery/active/`, claim-time and commit-time guards, the canonical event stream, councils, a decision docket, per-agent scratchpads, and harness adapters for Claude Code / Cursor / Codex.
 - **Cross-machine presence:** sessions on every machine that shares a repo see each other, labeled by machine. Zero-config over the repo's own git remote (presence refs), with an optional live-socket upgrade via an end-to-end-encrypted relay — the public `relay.harnery.com`, or self-host with `harn relay serve` / the bundled Cloudflare Worker (`relay/worker/`). The relay sees only ciphertext in opaquely-named rooms.
-- **Coordination-aware workflows:** `harn workflow run <script>` executes bounded, schema-gated multi-subagent workflow scripts — plain JS stages fanning out to headless harness-CLI subagents that are born coordination-registered (heartbeats, events, claim guards), with deterministic code deciding the routing between stages.
+- **Coordination-aware workflows:** `harn workflow run <script>` executes bounded, schema-gated multi-subagent workflow scripts — plain JS stages fanning out to headless harness-CLI subagents that are born coordination-registered (heartbeats, events, claim guards), with deterministic code deciding the routing between stages. An optional host-owned policy gates dispatch and declared external mutations with fail-closed `ALLOW`, `ASK`, and `DENY` decisions recorded in the run proof.
 - **Standalone web UI:** `harn web up` boots a local Next.js dashboard for the coord layer, councils, per-project state, and a local coding-agent status view (Claude Code / Codex / Cursor usage, backed by `harn devtools`). Ships with the git clone, not the npm package (see [Install](#install)).
 - **Backup + sync:** `harn backup` snapshots `.harnery/` via [restic](https://restic.net/); `harn sync` keeps a curated subset live across machines via [rclone](https://rclone.org/) (Google Drive or any rclone remote).
 

package/dist/commander.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"commander.d.ts","sourceRoot":"","sources":["../src/commander.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAKH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAqCpC,MAAM,WAAW,kBAAkB;IACjC;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB;;;;OAIG;IACH,OAAO,CAAC,EAAE,qBAAqB,CAAC;IAEhC;;;;;OAKG;IACH,IAAI,CAAC,EAAE,WAAW,CAAC;IAEnB;;;;;;OAMG;IACH,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAClC;AAED,8CAA8C;AAC9C,MAAM,WAAW,QAAQ;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,IAAI,GAAG,SAAS,GAAG,MAAM,GAAG,MAAM,CAAC;CAC7C;AAED;;;;GAIG;AACH,MAAM,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;AAEnD,MAAM,WAAW,qBAAqB;IACpC,0FAA0F;IAC1F,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,qFAAqF;IACrF,gBAAgB,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;IACvC;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;OAIG;IACH,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/B;;;;;OAKG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACzC;;;;;;;OAOG;IACH,eAAe,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC;;;;;OAKG;IACH,YAAY,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvD;;;;;;OAMG;IACH,gBAAgB,CAAC,EAAE,CAAC,GAAG,EAAE;QACvB,WAAW,EAAE,MAAM,CAAC;QACpB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,KAAK,MAAM,GAAG,SAAS,CAAC;IACzB;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACvE;;;;;OAKG;IACH,yBAAyB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9C;;;;;;;;OAQG;IACH,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC;;;;;;OAMG;IACH,kBAAkB,CAAC,EAAE,MAAM,GAAG,CAAC,MAAM,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,CAAC;CACjE;AAED;;;;;;GAMG;AACH,MAAM,WAAW,WAAW;IAC1B,MAAM,CAAC,IAAI,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IACxC,IAAI,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC;IAC7B,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,IAAI,CAAC;IAC5C,IAAI,CAAC,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC3D,KAAK,CAAC,GAAG,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,KAAK,GAAG,OAAO,GAAG,IAAI,CAAC;IACrF,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC;IACpE,WAAW,CAAC,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED,eAAO,MAAM,WAAW,EAAE,WAkCzB,CAAC;AAEF,wBAAgB,oBAAoB,CAAC,IAAI,GAAE,kBAAuB,GAAG,OAAO,CAiD3E"}
+{"version":3,"file":"commander.d.ts","sourceRoot":"","sources":["../src/commander.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAKH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAsCpC,MAAM,WAAW,kBAAkB;IACjC;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB;;;;OAIG;IACH,OAAO,CAAC,EAAE,qBAAqB,CAAC;IAEhC;;;;;OAKG;IACH,IAAI,CAAC,EAAE,WAAW,CAAC;IAEnB;;;;;;OAMG;IACH,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAClC;AAED,8CAA8C;AAC9C,MAAM,WAAW,QAAQ;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,IAAI,GAAG,SAAS,GAAG,MAAM,GAAG,MAAM,CAAC;CAC7C;AAED;;;;GAIG;AACH,MAAM,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;AAEnD,MAAM,WAAW,qBAAqB;IACpC,0FAA0F;IAC1F,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,qFAAqF;IACrF,gBAAgB,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;IACvC;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;OAIG;IACH,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/B;;;;;OAKG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACzC;;;;;;;OAOG;IACH,eAAe,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC;;;;;OAKG;IACH,YAAY,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvD;;;;;;OAMG;IACH,gBAAgB,CAAC,EAAE,CAAC,GAAG,EAAE;QACvB,WAAW,EAAE,MAAM,CAAC;QACpB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,KAAK,MAAM,GAAG,SAAS,CAAC;IACzB;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACvE;;;;;OAKG;IACH,yBAAyB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9C;;;;;;;;OAQG;IACH,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC;;;;;;OAMG;IACH,kBAAkB,CAAC,EAAE,MAAM,GAAG,CAAC,MAAM,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,CAAC;CACjE;AAED;;;;;;GAMG;AACH,MAAM,WAAW,WAAW;IAC1B,MAAM,CAAC,IAAI,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IACxC,IAAI,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC;IAC7B,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,IAAI,CAAC;IAC5C,IAAI,CAAC,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC3D,KAAK,CAAC,GAAG,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,KAAK,GAAG,OAAO,GAAG,IAAI,CAAC;IACrF,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC;IACpE,WAAW,CAAC,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED,eAAO,MAAM,WAAW,EAAE,WAkCzB,CAAC;AAEF,wBAAgB,oBAAoB,CAAC,IAAI,GAAE,kBAAuB,GAAG,OAAO,CAkD3E"}

package/dist/commander.js

@@ -41,6 +41,7 @@ import { registerGrepCommand } from "./commands/grep.js";
 import { registerHarnessCommand } from "./commands/harness.js";
 import { registerInitCommand } from "./commands/init.js";
 import { registerOutlineCommand } from "./commands/outline.js";
+import { registerPolicyCommand } from "./commands/policy.js";
 import { registerPresenceCommand } from "./commands/presence.js";
 import { registerReadCommand } from "./commands/read.js";
 import { registerRelayCommand } from "./commands/relay.js";
@@ -109,6 +110,7 @@ export function createHarneryProgram(opts = {}) {
     registerEditBatchCommand(program, emit);
     registerGrepCommand(program, emit, opts.context);
     registerHarnessCommand(program, emit);
+    registerPolicyCommand(program, emit);
     registerCookiesCommand(program, emit);
     registerFetchCommand(program, emit, opts.context);
     registerReadCommand(program, emit);

package/dist/commands/policy.d.ts

@@ -0,0 +1,6 @@
+import type { Command } from "commander";
+import type { EmitContext } from "../commander.js";
+import type { NormalizedPolicy } from "../core/policy/index.js";
+export declare function registerPolicyCommand(program: Command, emit: EmitContext): void;
+export declare function renderPolicy(policy: Readonly<NormalizedPolicy>, digest: string): string;
+//# sourceMappingURL=policy.d.ts.map

package/dist/commands/policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../../src/commands/policy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAOhE,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,GAAG,IAAI,CAwB/E;AAED,wBAAgB,YAAY,CAAC,MAAM,EAAE,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAcvF"}

package/dist/commands/policy.js

@@ -0,0 +1,42 @@
+import { loadPolicyFile, policyDigest } from "../core/policy/index.js";
+export function registerPolicyCommand(program, emit) {
+    const command = program
+        .command("policy")
+        .description("Inspect host-enforced workflow policy documents.");
+    command
+        .command("check <file>")
+        .description("Validate and print a normalized policy without running a workflow.")
+        .option("--json", "Emit the normalized policy and digest as JSON")
+        .action((file, opts) => {
+        try {
+            const policy = loadPolicyFile(file);
+            const result = { policy, sha256: policyDigest(policy) };
+            if (opts.json) {
+                emit.config({ format: "json" });
+                emit.data(result);
+            }
+            else {
+                emit.text(renderPolicy(policy, result.sha256));
+            }
+        }
+        catch (error) {
+            emit.error({ code: "policy_invalid", message: error.message });
+            emit.setExitCode(1);
+        }
+    });
+}
+export function renderPolicy(policy, digest) {
+    const lines = [
+        `${policy.name} (schema ${policy.schema_version})`,
+        `sha256: ${digest}`,
+        `cost ceiling: ${policy.max_cost_usd === undefined ? "none" : `$${policy.max_cost_usd.toFixed(4)}`}`,
+        `unknown cost: ${policy.unknown_cost}`,
+        `network: ${policy.network}`,
+        `external actions: ${policy.external_actions}`,
+        `harnesses: ${policy.allowed_harnesses?.join(", ") ?? "any"}`,
+        `models: ${policy.allowed_models?.join(", ") ?? "any"}`,
+        `paths: ${policy.allowed_paths?.join(", ") ?? "any"}`,
+        `isolation: ${policy.allowed_isolation?.join(", ") ?? "any"}`,
+    ];
+    return `${lines.join("\n")}\n`;
+}

package/dist/commands/workflow.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"workflow.d.ts","sourceRoot":"","sources":["../../src/commands/workflow.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AA0BnD,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,GAAG,IAAI,CA+FjF"}
+{"version":3,"file":"workflow.d.ts","sourceRoot":"","sources":["../../src/commands/workflow.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAkCnD,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,GAAG,IAAI,CAuKjF"}

package/dist/commands/workflow.js

@@ -1,6 +1,7 @@
 import { workflowSubscriptionOnly } from "../core/config.js";
 import { createBuiltinHarnessRegistry } from "../core/harnesses/index.js";
 import { findCoordRoot } from "../core/hooks/resolve/coord-root.js";
+import { loadPolicyFile } from "../core/policy/index.js";
 export function registerWorkflowCommand(program, emit) {
     const registry = createBuiltinHarnessRegistry();
     const harnesses = registry.ids();
@@ -9,7 +10,7 @@ export function registerWorkflowCommand(program, emit) {
         .description("Run bounded, schema-gated multi-subagent workflow scripts.");
     workflow
         .command("run <script>")
-        .description("Execute a workflow script (plain JS: `export default async ({agent, parallel, stage, log}) => …`). " +
+        .description("Execute a workflow script (plain JS: `export default async ({agent, parallel, stage, log, evidence, authorize}) => …`). " +
         "Subagents spawn as headless harness-CLI subprocesses, coordination-registered.")
         .option("--max-agents <n>", "Total-agent ceiling for the run (default 50)")
         .option("--concurrency <n>", "Concurrent-subagent cap (default 4)")
@@ -20,6 +21,8 @@ export function registerWorkflowCommand(program, emit) {
         "harness has no stored login (repo default via config.jsonc workflow.subscriptionOnly)")
         .option("--allow-api-billing", "Permit an exported API key to override a stored subscription login (per-token billing); " +
         "without this the engine refuses that silent-override state")
+        .option("--policy <file>", "Host policy JSON/JSONC applied before dispatch and external mutation")
+        .option("--isolation <mode>", "Host-created execution boundary: shared | worktree | sandbox | remote (default shared)")
         .option("--json", "Emit the full RunReport as JSON")
         .action(async (script, opts) => {
         const coordRoot = findCoordRoot();
@@ -37,6 +40,14 @@ export function registerWorkflowCommand(program, emit) {
             });
             process.exit(1);
         }
+        if (opts.isolation &&
+            !["shared", "worktree", "sandbox", "remote"].includes(opts.isolation)) {
+            emit.error({
+                code: "bad_isolation",
+                message: `unknown isolation ${JSON.stringify(opts.isolation)} (expected: shared | worktree | sandbox | remote)`,
+            });
+            process.exit(1);
+        }
         // Flag beats config; the two flags contradict each other by design.
         const subscriptionOnly = opts.subscriptionOnly || workflowSubscriptionOnly(coordRoot);
         if (subscriptionOnly && opts.allowApiBilling) {
@@ -59,6 +70,18 @@ export function registerWorkflowCommand(program, emit) {
                 maxAgents: opts.maxAgents ? Number.parseInt(opts.maxAgents, 10) : undefined,
                 concurrency: opts.concurrency ? Number.parseInt(opts.concurrency, 10) : undefined,
                 cwd: opts.cwd,
+                harnessEvidence: Object.fromEntries(registry
+                    .list()
+                    .map((adapter) => [
+                    adapter.profile.id,
+                    { toolEvidence: adapter.profile.capabilities.toolEvidence },
+                ])),
+                policy: opts.policy ? loadPolicyFile(opts.policy) : undefined,
+                isolation: opts.isolation,
+                // CLI harness subprocesses inherit the host network. A policy that
+                // forbids network must therefore deny dispatch unless a future host
+                // adapter creates and declares a network-disabled boundary.
+                networkAccess: "enabled",
             });
             if (opts.json) {
                 emit.config({ format: "json" });
@@ -71,11 +94,48 @@ export function registerWorkflowCommand(program, emit) {
                 : "";
             emit.text(`run ${report.runId} (${report.name}) finished: ${report.agentsSpawned} agent(s)${cachedPart}, ` +
                 `$${report.costUsd.toFixed(4)}, ${Math.round(report.durationMs / 1000)}s\n${billingPart}` +
+                `acceptance: ${report.acceptance.satisfied} satisfied, ${report.acceptance.unsatisfied} unsatisfied, ` +
+                `${report.acceptance.unknown} unknown\n` +
                 `journal: ${report.journalPath}\n` +
+                `proof: ${report.proofPath}\n` +
                 `result: ${typeof report.result === "string" ? report.result : JSON.stringify(report.result, null, 2)}\n`);
         }
         catch (err) {
-            emit.error({ code: "workflow_failed", message: err.message });
+            const proofPath = typeof err === "object" && err !== null && "proofPath" in err
+                ? String(err.proofPath)
+                : undefined;
+            emit.error({
+                code: "workflow_failed",
+                message: `${err.message}${proofPath ? `\nproof: ${proofPath}` : ""}`,
+            });
+            process.exit(1);
+        }
+    });
+    workflow
+        .command("proof <run-id>")
+        .description("Show the bounded proof packet for a completed workflow run.")
+        .option("--json", "Emit the stored proof packet as JSON")
+        .action(async (runId, opts) => {
+        const coordRoot = findCoordRoot();
+        if (!coordRoot) {
+            emit.error({
+                code: "no_coord_root",
+                message: "no .harnery/ coordination root found; run `init` first",
+            });
+            process.exit(1);
+        }
+        try {
+            const { readWorkflowProof, renderWorkflowProof } = await import("../core/workflow/proof.js");
+            const proof = readWorkflowProof(coordRoot, runId);
+            if (opts.json) {
+                emit.config({ format: "json" });
+                emit.data(proof);
+                return;
+            }
+            emit.text(renderWorkflowProof(proof));
+        }
+        catch (err) {
+            emit.error({ code: "workflow_proof_failed", message: err.message });
             process.exit(1);
         }
     });

package/dist/core/policy/evaluate.d.ts

@@ -0,0 +1,14 @@
+import type { NormalizedPolicy, PolicyEvaluation, PolicyIsolation, PolicyRequest, PolicyRequestSummary, PolicySpec } from "./types.js";
+export declare class PolicyDeniedError extends Error {
+    readonly decisionId: string;
+    constructor(message: string, decisionId: string);
+}
+export declare function normalizePolicy(input: PolicySpec, options?: {
+    baseDir?: string;
+}): Readonly<NormalizedPolicy>;
+export declare function policyDigest(policy: NormalizedPolicy): string;
+export declare function evaluatePolicy(policy: Readonly<NormalizedPolicy>, rawRequest: PolicyRequest): PolicyEvaluation;
+/** Bound and normalize the receipt-safe subset before it reaches a journal or proof. */
+export declare function summarizePolicyRequest(input: PolicyRequest): PolicyRequestSummary;
+export type { PolicyIsolation };
+//# sourceMappingURL=evaluate.d.ts.map

package/dist/core/policy/evaluate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"evaluate.d.ts","sourceRoot":"","sources":["../../../src/core/policy/evaluate.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,gBAAgB,EAChB,gBAAgB,EAChB,eAAe,EACf,aAAa,EACb,oBAAoB,EAEpB,UAAU,EAEX,MAAM,YAAY,CAAC;AAqBpB,qBAAa,iBAAkB,SAAQ,KAAK;IAC1C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;gBAEhB,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM;CAKhD;AAED,wBAAgB,eAAe,CAC7B,KAAK,EAAE,UAAU,EACjB,OAAO,GAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAA;CAAO,GACjC,QAAQ,CAAC,gBAAgB,CAAC,CAwB5B;AAED,wBAAgB,YAAY,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,CAE7D;AAED,wBAAgB,cAAc,CAC5B,MAAM,EAAE,QAAQ,CAAC,gBAAgB,CAAC,EAClC,UAAU,EAAE,aAAa,GACxB,gBAAgB,CA8FlB;AAED,wFAAwF;AACxF,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,aAAa,GAAG,oBAAoB,CA8BjF;AAyGD,YAAY,EAAE,eAAe,EAAE,CAAC"}

package/dist/core/policy/evaluate.js

@@ -0,0 +1,238 @@
+import { createHash } from "node:crypto";
+import { isAbsolute, relative, resolve } from "node:path";
+import { POLICY_SCHEMA_VERSION } from "./types.js";
+const VERDICTS = ["allow", "ask", "deny"];
+const ISOLATIONS = ["shared", "worktree", "sandbox", "remote"];
+const MAX_NAME = 200;
+const MAX_FIELD = 500;
+const MAX_LIST = 100;
+const POLICY_FIELDS = new Set([
+    "schema_version",
+    "name",
+    "max_cost_usd",
+    "unknown_cost",
+    "allowed_harnesses",
+    "allowed_models",
+    "allowed_paths",
+    "network",
+    "external_actions",
+    "allowed_isolation",
+]);
+export class PolicyDeniedError extends Error {
+    decisionId;
+    constructor(message, decisionId) {
+        super(message);
+        this.name = "PolicyDeniedError";
+        this.decisionId = decisionId;
+    }
+}
+export function normalizePolicy(input, options = {}) {
+    if (!isRecord(input))
+        throw new Error("policy must be an object");
+    const unknownFields = Object.keys(input).filter((field) => !POLICY_FIELDS.has(field));
+    if (unknownFields.length > 0) {
+        throw new Error(`policy contains unknown field(s): ${unknownFields.sort().join(", ")}`);
+    }
+    const schemaVersion = input.schema_version ?? POLICY_SCHEMA_VERSION;
+    if (schemaVersion !== POLICY_SCHEMA_VERSION) {
+        throw new Error(`unsupported policy schema_version ${JSON.stringify(schemaVersion)}`);
+    }
+    const baseDir = resolve(options.baseDir ?? process.cwd());
+    const normalized = {
+        schema_version: POLICY_SCHEMA_VERSION,
+        name: boundedString(input.name ?? "workflow policy", "policy name", MAX_NAME),
+        max_cost_usd: optionalMoney(input.max_cost_usd, "max_cost_usd"),
+        unknown_cost: enumValue(input.unknown_cost ?? "deny", ["ask", "deny"], "unknown_cost"),
+        allowed_harnesses: optionalStringList(input.allowed_harnesses, "allowed_harnesses"),
+        allowed_models: optionalStringList(input.allowed_models, "allowed_models"),
+        allowed_paths: optionalPathList(input.allowed_paths, baseDir),
+        network: enumValue(input.network ?? "deny", VERDICTS, "network"),
+        external_actions: enumValue(input.external_actions ?? "deny", VERDICTS, "external_actions"),
+        allowed_isolation: optionalEnumList(input.allowed_isolation, ISOLATIONS, "allowed_isolation"),
+    };
+    return deepFreeze(normalized);
+}
+export function policyDigest(policy) {
+    return createHash("sha256").update(JSON.stringify(policy)).digest("hex");
+}
+export function evaluatePolicy(policy, rawRequest) {
+    const request = summarizePolicyRequest(rawRequest);
+    const rules = [];
+    const add = (code, verdict, reason) => {
+        rules.push({ code, verdict, reason });
+    };
+    if (policy.allowed_harnesses && request.phase === "dispatch") {
+        if (!request.harness || !policy.allowed_harnesses.includes(request.harness)) {
+            add("harness_not_allowed", "deny", `harness ${JSON.stringify(request.harness ?? "unknown")} is not allowed`);
+        }
+    }
+    if (policy.allowed_models && request.phase === "dispatch") {
+        if (!request.model || !policy.allowed_models.includes(request.model)) {
+            add("model_not_allowed", "deny", `model ${JSON.stringify(request.model ?? "unknown")} is not allowed`);
+        }
+    }
+    if (policy.allowed_paths) {
+        if (!request.path || !policy.allowed_paths.some((root) => contains(root, request.path))) {
+            add("path_not_allowed", "deny", `path ${JSON.stringify(request.path ?? "unknown")} is outside the allowed roots`);
+        }
+    }
+    if (policy.allowed_isolation && !policy.allowed_isolation.includes(request.isolation)) {
+        add("isolation_not_allowed", "deny", `isolation ${JSON.stringify(request.isolation)} is not allowed`);
+    }
+    if (request.network_access !== "disabled" && policy.network !== "allow") {
+        add(request.network_access === "unknown" ? "network_unknown" : "network_restricted", policy.network, request.network_access === "unknown"
+            ? "network access is unknown"
+            : "network access requires policy authorization");
+    }
+    if (request.phase === "external_mutation" && policy.external_actions !== "allow") {
+        add("external_action_restricted", policy.external_actions, "external mutation requires policy authorization");
+    }
+    if (policy.max_cost_usd !== undefined && request.phase === "dispatch") {
+        const current = request.current_cost_usd ?? 0;
+        if (current >= policy.max_cost_usd) {
+            add("cost_budget_exhausted", "deny", `run cost $${current.toFixed(4)} has reached the $${policy.max_cost_usd.toFixed(4)} ceiling`);
+        }
+        else if (request.projected_cost_usd === null || request.projected_cost_usd === undefined) {
+            add("dispatch_cost_unknown", policy.unknown_cost, `dispatch cost is unknown under a $${policy.max_cost_usd.toFixed(4)} ceiling`);
+        }
+        else if (current + request.projected_cost_usd > policy.max_cost_usd) {
+            add("cost_budget_exceeded", "deny", `projected run cost $${(current + request.projected_cost_usd).toFixed(4)} exceeds the $${policy.max_cost_usd.toFixed(4)} ceiling`);
+        }
+    }
+    if (rules.length === 0) {
+        rules.push({ code: "policy_allow", verdict: "allow", reason: "all configured rules allow" });
+    }
+    const verdict = rules.some((rule) => rule.verdict === "deny")
+        ? "deny"
+        : rules.some((rule) => rule.verdict === "ask")
+            ? "ask"
+            : "allow";
+    const decisive = rules.filter((rule) => rule.verdict === verdict);
+    return {
+        verdict,
+        reason: decisive.map((rule) => rule.reason).join("; "),
+        rules,
+    };
+}
+/** Bound and normalize the receipt-safe subset before it reaches a journal or proof. */
+export function summarizePolicyRequest(input) {
+    if (!isRecord(input))
+        throw new Error("policy request must be an object");
+    const phase = enumValue(input.phase, ["dispatch", "external_mutation"], "policy phase");
+    const isolation = enumValue(input.isolation, ISOLATIONS, "policy isolation");
+    const networkAccess = enumValue(input.network_access, ["enabled", "disabled", "unknown"], "policy network_access");
+    return {
+        phase,
+        action: boundedString(input.action, "policy action", MAX_FIELD),
+        path: optionalBounded(input.path, "policy path"),
+        harness: optionalBounded(input.harness, "policy harness"),
+        model: optionalBounded(input.model, "policy model"),
+        effort: optionalBounded(input.effort, "policy effort"),
+        max_attempts: optionalWholeNumber(input.max_attempts, "policy max_attempts", 1),
+        max_turns: optionalWholeNumber(input.max_turns, "policy max_turns", 1),
+        timeout_ms: optionalWholeNumber(input.timeout_ms, "policy timeout_ms", 1),
+        prompt_bytes: optionalWholeNumber(input.prompt_bytes, "policy prompt_bytes", 0),
+        isolation,
+        network_access: networkAccess,
+        service: optionalBounded(input.service, "policy service"),
+        target: optionalBounded(safeTarget(input.target), "policy target"),
+        current_cost_usd: optionalMoney(input.current_cost_usd, "current_cost_usd"),
+        projected_cost_usd: input.projected_cost_usd === null
+            ? null
+            : optionalMoney(input.projected_cost_usd, "projected_cost_usd"),
+    };
+}
+function contains(root, candidate) {
+    const rel = relative(resolve(root), resolve(candidate));
+    return rel === "" || (!rel.startsWith("..") && !isAbsolute(rel));
+}
+function optionalPathList(value, baseDir) {
+    const values = optionalStringList(value, "allowed_paths");
+    if (!values)
+        return undefined;
+    return [...new Set(values.map((item) => resolve(baseDir, item)))].sort();
+}
+function optionalStringList(value, field) {
+    if (value === undefined)
+        return undefined;
+    if (!Array.isArray(value) || value.length === 0 || value.length > MAX_LIST) {
+        throw new Error(`${field} must be a non-empty array with at most ${MAX_LIST} entries`);
+    }
+    return [
+        ...new Set(value.map((item, index) => boundedString(item, `${field}[${index}]`, MAX_FIELD))),
+    ].sort();
+}
+function optionalEnumList(value, allowed, field) {
+    if (value === undefined)
+        return undefined;
+    if (!Array.isArray(value) || value.length === 0 || value.length > MAX_LIST) {
+        throw new Error(`${field} must be a non-empty array with at most ${MAX_LIST} entries`);
+    }
+    return [...new Set(value.map((item) => enumValue(item, allowed, field)))].sort();
+}
+function enumValue(value, values, field) {
+    if (typeof value !== "string" || !values.includes(value)) {
+        throw new Error(`${field} must be one of: ${values.join(", ")}`);
+    }
+    return value;
+}
+function optionalMoney(value, field) {
+    if (value === undefined)
+        return undefined;
+    if (typeof value !== "number" || !Number.isFinite(value) || value < 0) {
+        throw new Error(`${field} must be a finite non-negative number`);
+    }
+    return value;
+}
+function optionalWholeNumber(value, field, minimum) {
+    if (value === undefined)
+        return undefined;
+    if (!Number.isSafeInteger(value) || value < minimum) {
+        throw new Error(`${field} must be a safe integer greater than or equal to ${minimum}`);
+    }
+    return value;
+}
+function boundedString(value, field, max) {
+    if (typeof value !== "string")
+        throw new Error(`${field} must be a string`);
+    const normalized = withoutControls(value).replace(/\s+/g, " ").trim();
+    if (!normalized)
+        throw new Error(`${field} must not be empty`);
+    if (normalized.length > max)
+        throw new Error(`${field} exceeds ${max} characters`);
+    return normalized;
+}
+function optionalBounded(value, field) {
+    return value === undefined ? undefined : boundedString(value, field, MAX_FIELD);
+}
+function safeTarget(value) {
+    if (typeof value !== "string")
+        return value;
+    try {
+        const url = new URL(value);
+        return `${url.origin}${url.pathname}`;
+    }
+    catch {
+        const query = value.indexOf("?");
+        const fragment = value.indexOf("#");
+        const boundary = Math.min(query === -1 ? value.length : query, fragment === -1 ? value.length : fragment);
+        return value.slice(0, boundary);
+    }
+}
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function withoutControls(value) {
+    return Array.from(value, (character) => {
+        const code = character.charCodeAt(0);
+        return code < 32 || code === 127 ? " " : character;
+    }).join("");
+}
+function deepFreeze(value) {
+    if (value && typeof value === "object") {
+        for (const child of Object.values(value))
+            deepFreeze(child);
+        Object.freeze(value);
+    }
+    return value;
+}

package/dist/core/policy/file.d.ts

@@ -0,0 +1,3 @@
+import type { NormalizedPolicy } from "./types.js";
+export declare function loadPolicyFile(path: string): Readonly<NormalizedPolicy>;
+//# sourceMappingURL=file.d.ts.map

package/dist/core/policy/file.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file.d.ts","sourceRoot":"","sources":["../../../src/core/policy/file.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,gBAAgB,EAAc,MAAM,YAAY,CAAC;AAE/D,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,QAAQ,CAAC,gBAAgB,CAAC,CAavE"}

package/dist/core/policy/file.js

@@ -0,0 +1,20 @@
+import { readFileSync } from "node:fs";
+import { dirname, resolve } from "node:path";
+import { stripJsonComments } from "../config.js";
+import { normalizePolicy } from "./evaluate.js";
+export function loadPolicyFile(path) {
+    const absolute = resolve(path);
+    let parsed;
+    try {
+        parsed = JSON.parse(stripJsonComments(readFileSync(absolute, "utf8")));
+    }
+    catch (error) {
+        throw new Error(`cannot parse policy at ${absolute}: ${error.message}`);
+    }
+    try {
+        return normalizePolicy(parsed, { baseDir: dirname(absolute) });
+    }
+    catch (error) {
+        throw new Error(`invalid policy at ${absolute}: ${error.message}`);
+    }
+}

package/dist/core/policy/index.d.ts

@@ -0,0 +1,5 @@
+export { evaluatePolicy, normalizePolicy, PolicyDeniedError, policyDigest, summarizePolicyRequest, } from "./evaluate.js";
+export { loadPolicyFile } from "./file.js";
+export type { DispatchCostEstimator, ExternalMutationRequest, NormalizedPolicy, PolicyAskResolution, PolicyAskResolver, PolicyDecision, PolicyEvaluation, PolicyIsolation, PolicyNetworkAccess, PolicyPhase, PolicyRequest, PolicyRequestSummary, PolicyRuleResult, PolicySpec, PolicyVerdict, } from "./types.js";
+export { POLICY_SCHEMA_VERSION } from "./types.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/core/policy/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/core/policy/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EACd,eAAe,EACf,iBAAiB,EACjB,YAAY,EACZ,sBAAsB,GACvB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAC3C,YAAY,EACV,qBAAqB,EACrB,uBAAuB,EACvB,gBAAgB,EAChB,mBAAmB,EACnB,iBAAiB,EACjB,cAAc,EACd,gBAAgB,EAChB,eAAe,EACf,mBAAmB,EACnB,WAAW,EACX,aAAa,EACb,oBAAoB,EACpB,gBAAgB,EAChB,UAAU,EACV,aAAa,GACd,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC"}

package/dist/core/policy/index.js

@@ -0,0 +1,3 @@
+export { evaluatePolicy, normalizePolicy, PolicyDeniedError, policyDigest, summarizePolicyRequest, } from "./evaluate.js";
+export { loadPolicyFile } from "./file.js";
+export { POLICY_SCHEMA_VERSION } from "./types.js";

package/dist/core/policy/types.d.ts

@@ -0,0 +1,91 @@
+export declare const POLICY_SCHEMA_VERSION: 1;
+export type PolicyVerdict = "allow" | "ask" | "deny";
+export type PolicyPhase = "dispatch" | "external_mutation";
+export type PolicyIsolation = "shared" | "worktree" | "sandbox" | "remote";
+export type PolicyNetworkAccess = "enabled" | "disabled" | "unknown";
+/** Host-owned policy document. Workflow metadata cannot supply this value. */
+export interface PolicySpec {
+    schema_version?: typeof POLICY_SCHEMA_VERSION;
+    name?: string;
+    max_cost_usd?: number;
+    /** Applied when a cost ceiling exists but the host cannot price a dispatch. */
+    unknown_cost?: Exclude<PolicyVerdict, "allow">;
+    allowed_harnesses?: readonly string[];
+    allowed_models?: readonly string[];
+    /** Absolute paths, or paths relative to the policy file. */
+    allowed_paths?: readonly string[];
+    network?: PolicyVerdict;
+    external_actions?: PolicyVerdict;
+    /** Allowed host-declared execution boundaries. No strength ordering is inferred. */
+    allowed_isolation?: readonly PolicyIsolation[];
+}
+export interface NormalizedPolicy {
+    schema_version: typeof POLICY_SCHEMA_VERSION;
+    name: string;
+    max_cost_usd?: number;
+    unknown_cost: Exclude<PolicyVerdict, "allow">;
+    allowed_harnesses?: readonly string[];
+    allowed_models?: readonly string[];
+    allowed_paths?: readonly string[];
+    network: PolicyVerdict;
+    external_actions: PolicyVerdict;
+    allowed_isolation?: readonly PolicyIsolation[];
+}
+export interface PolicyRequest {
+    phase: PolicyPhase;
+    action: string;
+    path?: string;
+    harness?: string;
+    model?: string;
+    effort?: string;
+    max_attempts?: number;
+    max_turns?: number;
+    timeout_ms?: number;
+    /** Prompt size for host estimation. Prompt content is never included. */
+    prompt_bytes?: number;
+    isolation: PolicyIsolation;
+    network_access: PolicyNetworkAccess;
+    service?: string;
+    target?: string;
+    current_cost_usd?: number;
+    projected_cost_usd?: number | null;
+}
+export type PolicyRequestSummary = PolicyRequest;
+export interface PolicyRuleResult {
+    code: string;
+    verdict: PolicyVerdict;
+    reason: string;
+}
+export interface PolicyEvaluation {
+    verdict: PolicyVerdict;
+    reason: string;
+    rules: PolicyRuleResult[];
+}
+export interface PolicyAskResolution {
+    verdict: "allow" | "deny";
+    reason?: string;
+}
+export type PolicyAskResolver = (request: Readonly<PolicyRequestSummary>, evaluation: Readonly<PolicyEvaluation>) => Promise<PolicyAskResolution> | PolicyAskResolution;
+export interface PolicyDecision {
+    id: string;
+    checked_at: string;
+    policy: string;
+    phase: PolicyPhase;
+    initial_verdict: PolicyVerdict;
+    verdict: "allow" | "deny";
+    resolved_by: "policy" | "host" | "fail_closed";
+    reason: string;
+    rule_codes: string[];
+    request: PolicyRequestSummary;
+}
+export interface ExternalMutationRequest {
+    /** Short verb phrase, for example "publish release" or "write report". */
+    action: string;
+    path?: string;
+    network?: boolean;
+    service?: string;
+    /** Bounded destination descriptor. Do not include credentials or payloads. */
+    target?: string;
+}
+export type DispatchCostEstimator = (request: Readonly<PolicyRequestSummary>) => Promise<number | null> | number | null;
+//# sourceMappingURL=types.d.ts.map

package/dist/core/policy/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/core/policy/types.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,qBAAqB,EAAG,CAAU,CAAC;AAEhD,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,KAAK,GAAG,MAAM,CAAC;AACrD,MAAM,MAAM,WAAW,GAAG,UAAU,GAAG,mBAAmB,CAAC;AAC3D,MAAM,MAAM,eAAe,GAAG,QAAQ,GAAG,UAAU,GAAG,SAAS,GAAG,QAAQ,CAAC;AAC3E,MAAM,MAAM,mBAAmB,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,CAAC;AAErE,8EAA8E;AAC9E,MAAM,WAAW,UAAU;IACzB,cAAc,CAAC,EAAE,OAAO,qBAAqB,CAAC;IAC9C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,+EAA+E;IAC/E,YAAY,CAAC,EAAE,OAAO,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;IAC/C,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,4DAA4D;IAC5D,aAAa,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,OAAO,CAAC,EAAE,aAAa,CAAC;IACxB,gBAAgB,CAAC,EAAE,aAAa,CAAC;IACjC,oFAAoF;IACpF,iBAAiB,CAAC,EAAE,SAAS,eAAe,EAAE,CAAC;CAChD;AAED,MAAM,WAAW,gBAAgB;IAC/B,cAAc,EAAE,OAAO,qBAAqB,CAAC;IAC7C,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,OAAO,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;IAC9C,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,aAAa,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,OAAO,EAAE,aAAa,CAAC;IACvB,gBAAgB,EAAE,aAAa,CAAC;IAChC,iBAAiB,CAAC,EAAE,SAAS,eAAe,EAAE,CAAC;CAChD;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,WAAW,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,yEAAyE;IACzE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,eAAe,CAAC;IAC3B,cAAc,EAAE,mBAAmB,CAAC;IACpC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACpC;AAED,MAAM,MAAM,oBAAoB,GAAG,aAAa,CAAC;AAEjD,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,aAAa,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,aAAa,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,gBAAgB,EAAE,CAAC;CAC3B;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,OAAO,GAAG,MAAM,CAAC;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,MAAM,iBAAiB,GAAG,CAC9B,OAAO,EAAE,QAAQ,CAAC,oBAAoB,CAAC,EACvC,UAAU,EAAE,QAAQ,CAAC,gBAAgB,CAAC,KACnC,OAAO,CAAC,mBAAmB,CAAC,GAAG,mBAAmB,CAAC;AAExD,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,WAAW,CAAC;IACnB,eAAe,EAAE,aAAa,CAAC;IAC/B,OAAO,EAAE,OAAO,GAAG,MAAM,CAAC;IAC1B,WAAW,EAAE,QAAQ,GAAG,MAAM,GAAG,aAAa,CAAC;IAC/C,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,OAAO,EAAE,oBAAoB,CAAC;CAC/B;AAED,MAAM,WAAW,uBAAuB;IACtC,0EAA0E;IAC1E,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,8EAA8E;IAC9E,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,MAAM,qBAAqB,GAAG,CAClC,OAAO,EAAE,QAAQ,CAAC,oBAAoB,CAAC,KACpC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,MAAM,GAAG,IAAI,CAAC"}

package/dist/core/policy/types.js

@@ -0,0 +1 @@
+export const POLICY_SCHEMA_VERSION = 1;

package/dist/core/workflow/engine.d.ts

@@ -17,5 +17,10 @@
  *     cost, duration, and child session id (the resume + web-UI substrate).
  */
 import type { EngineOpts, RunReport } from "./types.js";
+export declare class WorkflowRunError extends Error {
+    readonly runId: string;
+    readonly proofPath: string;
+    constructor(message: string, runId: string, proofPath: string, cause?: unknown);
+}
 export declare function runWorkflow(scriptPath: string, opts: EngineOpts): Promise<RunReport>;
 //# sourceMappingURL=engine.d.ts.map

package/dist/core/workflow/engine.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"engine.d.ts","sourceRoot":"","sources":["../../../src/core/workflow/engine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAOH,OAAO,KAAK,EAEV,UAAU,EAEV,SAAS,EAIV,MAAM,YAAY,CAAC;AASpB,wBAAsB,WAAW,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC,CAgS1F"}
+{"version":3,"file":"engine.d.ts","sourceRoot":"","sources":["../../../src/core/workflow/engine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAuBH,OAAO,KAAK,EAEV,UAAU,EAEV,SAAS,EAOV,MAAM,YAAY,CAAC;AAYpB,qBAAa,gBAAiB,SAAQ,KAAK;IACzC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;gBAEf,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO;CAM/E;AAED,wBAAsB,WAAW,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC,CAsmB1F"}