patchwork-os 1.2.0-beta.2.canary.781 → 1.2.0-beta.2.canary.783

package/dist/commands/policyExplain.js

@@ -0,0 +1,221 @@
+/**
+ * `patchwork policy explain <recipe> [tool]` — what can this recipe / worker /
+ * tool actually do right now, and why?
+ *
+ * Uses the SAME functions the runtime enforces with:
+ *   - `resolveProfile`            (config → profile)            profile.ts
+ *   - `toolFactsFor`              (registry → tool facts)       toolFacts.ts
+ *   - `resolveAgentContainment` + `stepSandboxRequest`          (agent steps)
+ *   - `decideWorkerAction` + `resolveGateOutcome`               (worker gate)
+ *   - `parseDataPolicy` + `resolveDestination` + `decideBoundary` (privacy)
+ *   - `readKillSwitch`
+ *   - `computeEffectivePolicy`    (composition)                 effectivePolicy.ts
+ *
+ * It never re-implements a rule. `effectivePolicy.test.ts` pins the runner
+ * to the same calculation, and this command is the human-readable face of it.
+ *
+ * Reads config and ledgers; writes nothing.
+ */
+import { existsSync, readFileSync } from "node:fs";
+import { parse as parseYaml } from "yaml";
+import { computeEffectivePolicy, formatEffectivePolicy, } from "../governance/effectivePolicy.js";
+import { readKillSwitch } from "../governance/killSwitchPolicy.js";
+import { explainPluginPolicy, pluginSpecsOf, policyInputFromConfig, } from "../governance/pluginPolicy.js";
+import { resolveAgentContainment, resolveProfile, } from "../governance/profile.js";
+import { toolFactsFor } from "../governance/toolFacts.js";
+import { loadConfig } from "../patchworkConfig.js";
+import { patchworkPath } from "../patchworkHome.js";
+import { stepSandboxRequest } from "../recipes/agentExecutor.js";
+import { findYamlRecipePath } from "../recipesHttp.js";
+import "../recipes/tools/index.js";
+function resolveRecipeFile(ref, recipesDir) {
+    if (existsSync(ref) && /\.(ya?ml|json)$/.test(ref))
+        return ref;
+    return findYamlRecipePath(recipesDir, ref);
+}
+export async function explainRecipePolicy(ref, opts = {}) {
+    const recipesDir = opts.recipesDir ?? patchworkPath("recipes");
+    const file = resolveRecipeFile(ref, recipesDir);
+    if (!file) {
+        throw new Error(`recipe not found: ${ref} (looked in ${recipesDir})`);
+    }
+    const raw = parseYaml(readFileSync(file, "utf-8"));
+    const name = typeof raw.name === "string" ? raw.name : ref;
+    const trigger = (raw.trigger?.type ??
+        "manual");
+    let cfg = opts.config;
+    if (!cfg) {
+        try {
+            cfg = loadConfig();
+        }
+        catch {
+            cfg = undefined;
+        }
+    }
+    const profile = resolveProfile(cfg ? { profile: cfg.profile, approvalGate: cfg.approvalGate } : undefined);
+    // Worker facts — the same loader + decision the gate uses. Only when the
+    // profile (or the live flag) makes the worker gate active; otherwise the
+    // manifest is inert and the report says so by omitting the worker.
+    let workerId;
+    let workerCtx;
+    {
+        const { resolveWorkerIdForRecipe } = await import("../recipeOrchestration.js");
+        workerId = await resolveWorkerIdForRecipe(name, opts.workersDir);
+        const { isEnabled, FLAG_WORKER_AUTONOMY } = await import("../featureFlags.js");
+        const gateActive = profile.workerAuthority || isEnabled(FLAG_WORKER_AUTONOMY);
+        if (workerId && gateActive) {
+            const { loadWorkerTrustForRecipe } = await import("../workers/runWorkerShadow.js");
+            const trust = loadWorkerTrustForRecipe(name, {
+                ...(opts.patchworkDir && { patchworkDir: opts.patchworkDir }),
+                ...(opts.workersDir && { workersDir: opts.workersDir }),
+            });
+            if (trust) {
+                const { parseForbidRules } = await import("../workers/forbidPolicy.js");
+                workerCtx = {
+                    worker: trust.worker,
+                    store: trust.store,
+                    forbidRules: parseForbidRules(trust.worker.forbids).rules,
+                };
+            }
+        }
+    }
+    // Privacy registry — parsed the way executeAgent parses it.
+    const { parseRegistry, resolveDestination } = await import("../privacy/destinationRegistry.js");
+    const { decideBoundary, parseDataPolicy, DEFAULT_CLASSIFICATION } = await import("../privacy/dataPolicy.js");
+    const registry = parseRegistry(cfg?.privacy);
+    const { decideWorkerAction, resolveGateOutcome } = await import("../workers/workerGate.js");
+    const plugins = explainPluginPolicy(pluginSpecsOf(raw), policyInputFromConfig(profile, cfg)).map((v) => ({ spec: v.spec, allowed: v.allowed, reason: v.reason }));
+    const steps = [];
+    const rawSteps = Array.isArray(raw.steps)
+        ? raw.steps
+        : [];
+    let n = 0;
+    for (const step of rawSteps) {
+        const agent = step.agent;
+        const toolId = agent
+            ? "agent"
+            : typeof step.tool === "string"
+                ? step.tool
+                : undefined;
+        const stepId = (typeof step.id === "string" && step.id) ||
+            (typeof step.into === "string" && step.into) ||
+            (agent && typeof agent.into === "string" && agent.into) ||
+            `step_${n}`;
+        n++;
+        if (!toolId)
+            continue; // compound / nested steps are governed by their children
+        if (opts.tool && opts.tool !== toolId)
+            continue;
+        const containment = agent
+            ? resolveAgentContainment(profile, stepSandboxRequest({
+                ...(agent.sandbox !== undefined && {
+                    sandbox: agent.sandbox,
+                }),
+                ...(Array.isArray(agent.tools) && {
+                    allowedTools: agent.tools,
+                }),
+                ...(Array.isArray(agent.disallowedTools) && {
+                    disallowedTools: agent.disallowedTools,
+                }),
+                ...(typeof agent.mcpAccess === "boolean" && {
+                    mcpAccess: agent.mcpAccess,
+                }),
+            }))
+            : undefined;
+        const tool = toolFactsFor(toolId, containment ? { containment } : undefined);
+        let worker;
+        if (workerCtx && workerId) {
+            const decision = decideWorkerAction(workerCtx.worker, toolId, undefined, workerCtx.store, workerCtx.forbidRules.length > 0
+                ? { forbidRules: workerCtx.forbidRules }
+                : undefined);
+            const resolved = resolveGateOutcome(decision, undefined);
+            worker = {
+                id: workerId,
+                action: decision.action,
+                ...(decision.ruleId !== undefined && {
+                    ruleId: String(decision.ruleId),
+                }),
+                ...(resolved.standingPermissionId !== undefined && {
+                    standingPermissionId: resolved.standingPermissionId,
+                }),
+            };
+        }
+        let privacy;
+        if (agent && registry.destinations.length > 0) {
+            const declared = agent.data_policy;
+            const policy = declared === undefined
+                ? { classification: DEFAULT_CLASSIFICATION }
+                : parseDataPolicy(declared);
+            const driver = typeof agent.driver === "string" ? agent.driver : cfg?.driver;
+            const dest = resolveDestination(registry, driver, policy?.classification ?? DEFAULT_CLASSIFICATION, cfg?.localEndpoint ? { endpoint: cfg.localEndpoint } : {});
+            if (dest) {
+                const outcome = policy
+                    ? decideBoundary(policy, dest.destination, {
+                        localDestinationAccepts: dest.localDestinationAccepts,
+                    })
+                    : {
+                        decision: "DENY",
+                        reason: "unrecognised classification",
+                    };
+                privacy = {
+                    classification: policy?.classification ?? "invalid",
+                    destination: dest.destination.id,
+                    decision: outcome.decision,
+                    ...(outcome.reason !== undefined && { reason: outcome.reason }),
+                };
+            }
+        }
+        const input = {
+            profile,
+            recipe: {
+                name,
+                ...(typeof raw.requireApproval === "boolean" && {
+                    requireApproval: raw.requireApproval,
+                }),
+            },
+            trigger,
+            tool,
+            ...(worker && { worker }),
+            ...(privacy && { privacy }),
+            killSwitch: readKillSwitch(profile),
+        };
+        steps.push({
+            stepId,
+            toolId,
+            input,
+            result: computeEffectivePolicy(input),
+        });
+    }
+    return {
+        recipe: name,
+        file,
+        trigger,
+        profileMode: profile.mode,
+        ...(workerId && { workerId }),
+        plugins,
+        steps,
+    };
+}
+export function formatExplainReport(r) {
+    const out = [];
+    if (r.plugins.length > 0) {
+        out.push(`PLUGINS (servers:)`);
+        for (const p of r.plugins) {
+            out.push(`  ${p.allowed ? "ALLOWED" : "REFUSED"}  ${p.spec} — ${p.reason}`);
+        }
+        out.push("");
+    }
+    if (r.steps.length === 0) {
+        out.push(`RECIPE: ${r.recipe}`);
+        out.push(`PROFILE: ${r.profileMode.toUpperCase()}`);
+        out.push("No tool or agent steps to explain.");
+        return out.join("\n");
+    }
+    for (const s of r.steps) {
+        out.push(`STEP: ${s.stepId}`);
+        out.push(formatEffectivePolicy(s.input, s.result));
+        out.push("");
+    }
+    return out.join("\n").trimEnd();
+}
+//# sourceMappingURL=policyExplain.js.map

package/dist/commands/policyExplain.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policyExplain.js","sourceRoot":"","sources":["../../src/commands/policyExplain.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,EACL,sBAAsB,EAGtB,qBAAqB,GAItB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAC;AACnE,OAAO,EACL,mBAAmB,EACnB,aAAa,EACb,qBAAqB,GACtB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,uBAAuB,EACvB,cAAc,GACf,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AACjE,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,2BAA2B,CAAC;AA4BnC,SAAS,iBAAiB,CAAC,GAAW,EAAE,UAAkB;IACxD,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC;IAC/D,OAAO,kBAAkB,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,GAAW,EACX,OAAuB,EAAE;IAEzB,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,aAAa,CAAC,SAAS,CAAC,CAAC;IAC/D,MAAM,IAAI,GAAG,iBAAiB,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IAChD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CAAC,qBAAqB,GAAG,eAAe,UAAU,GAAG,CAAC,CAAC;IACxE,CAAC;IACD,MAAM,GAAG,GAAG,SAAS,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAA4B,CAAC;IAC9E,MAAM,IAAI,GAAG,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;IAC3D,MAAM,OAAO,GAAG,CAAE,GAAG,CAAC,OAAyC,EAAE,IAAI;QACnE,QAAQ,CAAgB,CAAC;IAC3B,IAAI,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC;IACtB,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,IAAI,CAAC;YACH,GAAG,GAAG,UAAU,EAAE,CAAC;QACrB,CAAC;QAAC,MAAM,CAAC;YACP,GAAG,GAAG,SAAS,CAAC;QAClB,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GAAG,cAAc,CAC5B,GAAG,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,YAAY,EAAE,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,SAAS,CAC3E,CAAC;IAEF,yEAAyE;IACzE,yEAAyE;IACzE,mEAAmE;IACnE,IAAI,QAA4B,CAAC;IACjC,IAAI,SAMS,CAAC;IACd,CAAC;QACC,MAAM,EAAE,wBAAwB,EAAE,GAAG,MAAM,MAAM,CAC/C,2BAA2B,CAC5B,CAAC;QACF,QAAQ,GAAG,MAAM,wBAAwB,CAAC,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QACjE,MAAM,EAAE,SAAS,EAAE,oBAAoB,EAAE,GAAG,MAAM,MAAM,CACtD,oBAAoB,CACrB,CAAC;QACF,MAAM,UAAU,GACd,OAAO,CAAC,eAAe,IAAI,SAAS,CAAC,oBAAoB,CAAC,CAAC;QAC7D,IAAI,QAAQ,IAAI,UAAU,EAAE,CAAC;YAC3B,MAAM,EAAE,wBAAwB,EAAE,GAAG,MAAM,MAAM,CAC/C,+BAA+B,CAChC,CAAC;YACF,MAAM,KAAK,GAAG,wBAAwB,CAAC,IAAI,EAAE;gBAC3C,GAAG,CAAC,IAAI,CAAC,YAAY,IAAI,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC;gBAC7D,GAAG,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC;aACxD,CAAC,CAAC;YACH,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,EAAE,gBAAgB,EAAE,GAAG,MAAM,MAAM,CAAC,4BAA4B,CAAC,CAAC;gBACxE,SAAS,GAAG;oBACV,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,KAAK,EAAE,KAAK,CAAC,KAAK;oBAClB,WAAW,EAAE,gBAAgB,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK;iBAC1D,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,4DAA4D;IAC5D,MAAM,EAAE,aAAa,EAAE,kBAAkB,EAAE,GAAG,MAAM,MAAM,CACxD,mCAAmC,CACpC,CAAC;IACF,MAAM,EAAE,cAAc,EAAE,eAAe,EAAE,sBAAsB,EAAE,GAC/D,MAAM,MAAM,CAAC,0BAA0B,CAAC,CAAC;IAC3C,MAAM,QAAQ,GAAG,aAAa,CAE1B,GAKD,EAAE,OAAO,CACX,CAAC;IAEF,MAAM,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,GAAG,MAAM,MAAM,CAC7D,0BAA0B,CAC3B,CAAC;IAEF,MAAM,OAAO,GAAG,mBAAmB,CACjC,aAAa,CAAC,GAAG,CAAC,EAClB,qBAAqB,CAAC,OAAO,EAAE,GAAG,CAAC,CACpC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAEvE,MAAM,KAAK,GAAkB,EAAE,CAAC;IAChC,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC;QACvC,CAAC,CAAE,GAAG,CAAC,KAAwC;QAC/C,CAAC,CAAC,EAAE,CAAC;IACP,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAG,IAAI,CAAC,KAA4C,CAAC;QAChE,MAAM,MAAM,GAAG,KAAK;YAClB,CAAC,CAAC,OAAO;YACT,CAAC,CAAC,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;gBAC7B,CAAC,CAAC,IAAI,CAAC,IAAI;gBACX,CAAC,CAAC,SAAS,CAAC;QAChB,MAAM,MAAM,GACV,CAAC,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,IAAI,IAAI,CAAC,EAAE,CAAC;YACxC,CAAC,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC;YAC5C,CAAC,KAAK,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC;YACvD,QAAQ,CAAC,EAAE,CAAC;QACd,CAAC,EAAE,CAAC;QACJ,IAAI,CAAC,MAAM;YAAE,SAAS,CAAC,yDAAyD;QAChF,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM;YAAE,SAAS;QAEhD,MAAM,WAAW,GAAG,KAAK;YACvB,CAAC,CAAC,uBAAuB,CACrB,OAAO,EACP,kBAAkB,CAAC;gBACjB,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI;oBACjC,OAAO,EAAE,KAAK,CAAC,OAAgB;iBAChC,CAAC;gBACF,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI;oBAChC,YAAY,EAAE,KAAK,CAAC,KAAiB;iBACtC,CAAC;gBACF,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,eAAe,CAAC,IAAI;oBAC1C,eAAe,EAAE,KAAK,CAAC,eAA2B;iBACnD,CAAC;gBACF,GAAG,CAAC,OAAO,KAAK,CAAC,SAAS,KAAK,SAAS,IAAI;oBAC1C,SAAS,EAAE,KAAK,CAAC,SAAS;iBAC3B,CAAC;aACH,CAAC,CACH;YACH,CAAC,CAAC,SAAS,CAAC;QACd,MAAM,IAAI,GAAG,YAAY,CACvB,MAAM,EACN,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS,CAC1C,CAAC;QAEF,IAAI,MAA+B,CAAC;QACpC,IAAI,SAAS,IAAI,QAAQ,EAAE,CAAC;YAC1B,MAAM,QAAQ,GAAG,kBAAkB,CACjC,SAAS,CAAC,MAAM,EAChB,MAAM,EACN,SAAS,EACT,SAAS,CAAC,KAAK,EACf,SAAS,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC;gBAC9B,CAAC,CAAC,EAAE,WAAW,EAAE,SAAS,CAAC,WAAW,EAAE;gBACxC,CAAC,CAAC,SAAS,CACd,CAAC;YACF,MAAM,QAAQ,GAAG,kBAAkB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;YACzD,MAAM,GAAG;gBACP,EAAE,EAAE,QAAQ;gBACZ,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,GAAG,CAAC,QAAQ,CAAC,MAAM,KAAK,SAAS,IAAI;oBACnC,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;iBAChC,CAAC;gBACF,GAAG,CAAC,QAAQ,CAAC,oBAAoB,KAAK,SAAS,IAAI;oBACjD,oBAAoB,EAAE,QAAQ,CAAC,oBAAoB;iBACpD,CAAC;aACH,CAAC;QACJ,CAAC;QAED,IAAI,OAAiC,CAAC;QACtC,IAAI,KAAK,IAAI,QAAQ,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9C,MAAM,QAAQ,GAAG,KAAK,CAAC,WAAW,CAAC;YACnC,MAAM,MAAM,GACV,QAAQ,KAAK,SAAS;gBACpB,CAAC,CAAC,EAAE,cAAc,EAAE,sBAAsB,EAAE;gBAC5C,CAAC,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;YAChC,MAAM,MAAM,GACV,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC;YAChE,MAAM,IAAI,GAAG,kBAAkB,CAC7B,QAAQ,EACR,MAAM,EACN,MAAM,EAAE,cAAc,IAAI,sBAAsB,EAChD,GAAG,EAAE,aAAa,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAC1D,CAAC;YACF,IAAI,IAAI,EAAE,CAAC;gBACT,MAAM,OAAO,GAAG,MAAM;oBACpB,CAAC,CAAC,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,WAAW,EAAE;wBACvC,uBAAuB,EAAE,IAAI,CAAC,uBAAuB;qBACtD,CAAC;oBACJ,CAAC,CAAC;wBACE,QAAQ,EAAE,MAAe;wBACzB,MAAM,EAAE,6BAA6B;qBACtC,CAAC;gBACN,OAAO,GAAG;oBACR,cAAc,EAAE,MAAM,EAAE,cAAc,IAAI,SAAS;oBACnD,WAAW,EAAE,IAAI,CAAC,WAAW,CAAC,EAAE;oBAChC,QAAQ,EAAE,OAAO,CAAC,QAAQ;oBAC1B,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;iBAChE,CAAC;YACJ,CAAC;QACH,CAAC;QAED,MAAM,KAAK,GAAyB;YAClC,OAAO;YACP,MAAM,EAAE;gBACN,IAAI;gBACJ,GAAG,CAAC,OAAO,GAAG,CAAC,eAAe,KAAK,SAAS,IAAI;oBAC9C,eAAe,EAAE,GAAG,CAAC,eAAe;iBACrC,CAAC;aACH;YACD,OAAO;YACP,IAAI;YACJ,GAAG,CAAC,MAAM,IAAI,EAAE,MAAM,EAAE,CAAC;YACzB,GAAG,CAAC,OAAO,IAAI,EAAE,OAAO,EAAE,CAAC;YAC3B,UAAU,EAAE,cAAc,CAAC,OAAO,CAAC;SACpC,CAAC;QACF,KAAK,CAAC,IAAI,CAAC;YACT,MAAM;YACN,MAAM;YACN,KAAK;YACL,MAAM,EAAE,sBAAsB,CAAC,KAAK,CAAC;SACtC,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,MAAM,EAAE,IAAI;QACZ,IAAI;QACJ,OAAO;QACP,WAAW,EAAE,OAAO,CAAC,IAAI;QACzB,GAAG,CAAC,QAAQ,IAAI,EAAE,QAAQ,EAAE,CAAC;QAC7B,OAAO;QACP,KAAK;KACN,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,CAAgB;IAClD,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,GAAG,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QAC/B,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;YAC1B,GAAG,CAAC,IAAI,CACN,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,MAAM,EAAE,CAClE,CAAC;QACJ,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,CAAC;IACD,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QAChC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,WAAW,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QACpD,GAAG,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;QAC/C,OAAO,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;QACxB,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QAC9B,GAAG,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;QACnD,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;AAClC,CAAC"}

package/dist/commands/profile.d.ts

@@ -0,0 +1,17 @@
+/**
+ * `patchwork profile [show|governed|compat]` — read or set the governance
+ * profile in config.json.
+ *
+ * Setting writes ONE key. Everything the profile implies is resolved at
+ * bridge startup from that key (src/governance/profile.ts), so there is no
+ * second place the posture can be recorded and drift. A running bridge must
+ * be restarted for the change to take effect; the command says so.
+ */
+export interface ProfileCommandResult {
+    ok: boolean;
+    text: string;
+    exitCode: number;
+}
+export declare function runProfileCommand(args: string[], opts?: {
+    configPath?: string;
+}): ProfileCommandResult;

package/dist/commands/profile.js

@@ -0,0 +1,85 @@
+/**
+ * `patchwork profile [show|governed|compat]` — read or set the governance
+ * profile in config.json.
+ *
+ * Setting writes ONE key. Everything the profile implies is resolved at
+ * bridge startup from that key (src/governance/profile.ts), so there is no
+ * second place the posture can be recorded and drift. A running bridge must
+ * be restarted for the change to take effect; the command says so.
+ */
+import { formatGovernanceReport, governanceReport, } from "../governance/doctorReport.js";
+import { PROFILE_MODES, resolveProfile, } from "../governance/profile.js";
+import { loadConfig, saveConfig } from "../patchworkConfig.js";
+export function runProfileCommand(args, opts = {}) {
+    const verb = args[0] ?? "show";
+    if (verb === "--help" || verb === "-h") {
+        return {
+            ok: true,
+            exitCode: 0,
+            text: "Usage: patchwork profile [show|governed|compat] [--json]\n\n" +
+                "  show       print the resolved governance posture (same lines as `patchwork doctor`)\n" +
+                "  governed   set profile: governed in config.json — approval gate ≥ high, automated\n" +
+                "             triggers gated, worker authority + policy matrix enforced, agent steps\n" +
+                "             contained, recipe plugins allowlisted, kill switch fails closed\n" +
+                "  compat     set profile: compat — byte-identical to pre-profile behaviour\n\n" +
+                "A running bridge must be restarted (launchctl kickstart …) to pick up a change.\n",
+        };
+    }
+    if (verb === "show") {
+        const json = args.includes("--json");
+        let cfg;
+        try {
+            cfg = loadConfig(opts.configPath);
+        }
+        catch {
+            cfg = undefined;
+        }
+        const report = governanceReport(cfg ? { config: cfg } : {});
+        return {
+            ok: true,
+            exitCode: report.governed ? 0 : 1,
+            text: json
+                ? JSON.stringify({
+                    profile: report.profile.mode,
+                    governed: report.governed,
+                    lines: report.lines,
+                    reasons: report.reasons,
+                }, null, 2)
+                : formatGovernanceReport(report),
+        };
+    }
+    if (!PROFILE_MODES.includes(verb)) {
+        return {
+            ok: false,
+            exitCode: 2,
+            text: `[profile] unknown verb "${verb}"; expected show | governed | compat\n`,
+        };
+    }
+    const mode = verb;
+    let cfg;
+    try {
+        cfg = loadConfig(opts.configPath);
+    }
+    catch (err) {
+        return {
+            ok: false,
+            exitCode: 1,
+            text: `[profile] cannot read config.json: ${err instanceof Error ? err.message : String(err)}\n`,
+        };
+    }
+    const before = cfg.profile;
+    saveConfig({ ...cfg, profile: mode }, opts.configPath);
+    const resolved = resolveProfile({
+        profile: mode,
+        approvalGate: cfg.approvalGate,
+    });
+    const lines = [
+        `[profile] ${before === undefined ? "(unset)" : before} → ${mode}`,
+        mode === "governed"
+            ? `[profile] governed: approval gate ${resolved.approvalGate}, automated triggers gated, worker authority + policy matrix enforced, agent steps contained, plugins allowlisted, kill switch fails closed`
+            : "[profile] compat: behaviour is byte-identical to a pre-profile install",
+        "[profile] restart the bridge for this to take effect; `patchwork doctor` shows the live posture",
+    ];
+    return { ok: true, exitCode: 0, text: `${lines.join("\n")}\n` };
+}
+//# sourceMappingURL=profile.js.map

package/dist/commands/profile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile.js","sourceRoot":"","sources":["../../src/commands/profile.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EACL,sBAAsB,EACtB,gBAAgB,GACjB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,aAAa,EAEb,cAAc,GACf,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAQ/D,MAAM,UAAU,iBAAiB,CAC/B,IAAc,EACd,OAAgC,EAAE;IAElC,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC;IAC/B,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QACvC,OAAO;YACL,EAAE,EAAE,IAAI;YACR,QAAQ,EAAE,CAAC;YACX,IAAI,EACF,8DAA8D;gBAC9D,yFAAyF;gBACzF,uFAAuF;gBACvF,uFAAuF;gBACvF,gFAAgF;gBAChF,gFAAgF;gBAChF,mFAAmF;SACtF,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACpB,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACrC,IAAI,GAA8C,CAAC;QACnD,IAAI,CAAC;YACH,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACpC,CAAC;QAAC,MAAM,CAAC;YACP,GAAG,GAAG,SAAS,CAAC;QAClB,CAAC;QACD,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC5D,OAAO;YACL,EAAE,EAAE,IAAI;YACR,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACjC,IAAI,EAAE,IAAI;gBACR,CAAC,CAAC,IAAI,CAAC,SAAS,CACZ;oBACE,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI;oBAC5B,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,KAAK,EAAE,MAAM,CAAC,KAAK;oBACnB,OAAO,EAAE,MAAM,CAAC,OAAO;iBACxB,EACD,IAAI,EACJ,CAAC,CACF;gBACH,CAAC,CAAC,sBAAsB,CAAC,MAAM,CAAC;SACnC,CAAC;IACJ,CAAC;IACD,IAAI,CAAE,aAAmC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACzD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,QAAQ,EAAE,CAAC;YACX,IAAI,EAAE,2BAA2B,IAAI,wCAAwC;SAC9E,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,IAAmB,CAAC;IACjC,IAAI,GAAkC,CAAC;IACvC,IAAI,CAAC;QACH,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACpC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,EAAE,EAAE,KAAK;YACT,QAAQ,EAAE,CAAC;YACX,IAAI,EAAE,sCAAsC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI;SACjG,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC;IAC3B,UAAU,CAAC,EAAE,GAAG,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,cAAc,CAAC;QAC9B,OAAO,EAAE,IAAI;QACb,YAAY,EAAE,GAAG,CAAC,YAAY;KAC/B,CAAC,CAAC;IACH,MAAM,KAAK,GAAG;QACZ,aAAa,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,MAAM,IAAI,EAAE;QAClE,IAAI,KAAK,UAAU;YACjB,CAAC,CAAC,qCAAqC,QAAQ,CAAC,YAAY,6IAA6I;YACzM,CAAC,CAAC,wEAAwE;QAC5E,iGAAiG;KAClG,CAAC;IACF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;AAClE,CAAC"}

package/dist/commands/recipe.d.ts

@@ -141,6 +141,14 @@ export interface WatchedRecipeRunResult {
     run?: RunRecipeResult;
     summary?: RecipeExecutionSummary;
 }
+/**
+ * Resolve the governance deps for a bridge-less (`--local`) run. Exported for
+ * tests. Returns `{}` under compat or when the caller already supplied them.
+ */
+export declare function resolveLocalGovernance(provided: Partial<RunnerDeps> | undefined, io?: {
+    isTTY?: boolean;
+    ask?: (question: string) => Promise<string>;
+}): Promise<Partial<RunnerDeps>>;
 export declare function runRecipe(recipeRef: string, options?: RunRecipeOptions): Promise<RunRecipeResult>;
 export declare function summarizeRecipeExecution(result: RunRecipeResult["result"]): RecipeExecutionSummary;
 /**

package/dist/commands/recipe.js

@@ -818,6 +818,62 @@ function extractSchemaHeader(content) {
     }
     return {};
 }
+/**
+ * Resolve the governance deps for a bridge-less (`--local`) run. Exported for
+ * tests. Returns `{}` under compat or when the caller already supplied them.
+ */
+export async function resolveLocalGovernance(provided, io = {}) {
+    if (provided?.governance !== undefined)
+        return {};
+    const { loadConfig } = await import("../patchworkConfig.js");
+    const { resolveProfile } = await import("../governance/profile.js");
+    let cfg = {};
+    try {
+        cfg = loadConfig();
+    }
+    catch {
+        cfg = {};
+    }
+    const profile = resolveProfile(cfg);
+    // Publish it process-wide too: executeAgent (containment) and
+    // loadRecipeServers (plugin allowlist) read `activeProfile()`, not the
+    // runner deps. A local run that set only `deps.governance` would gate
+    // approvals as governed while containing agents as compat.
+    const { setActiveProfile } = await import("../governance/profile.js");
+    setActiveProfile(profile);
+    if (profile.mode !== "governed")
+        return {};
+    if (provided?.requireApprovalFn !== undefined)
+        return { governance: profile };
+    const isTTY = io.isTTY ?? (process.stdin.isTTY === true && process.stdout.isTTY === true);
+    const ask = io.ask ??
+        (async (question) => {
+            const readline = await import("node:readline/promises");
+            const rl = readline.createInterface({
+                input: process.stdin,
+                output: process.stdout,
+            });
+            try {
+                return await rl.question(question);
+            }
+            finally {
+                rl.close();
+            }
+        });
+    const requireApprovalFn = async (input) => {
+        if (input.effective === "ALLOW")
+            return true;
+        if (!isTTY) {
+            process.stderr.write(`[recipe run] step "${input.summary ?? input.toolId}" needs human approval under the governed profile and there is no terminal to ask on — refused. Run from a terminal, or run through the bridge so the approval reaches the dashboard.\n`);
+            return { approved: false, refusal: "rejected" };
+        }
+        const answer = await ask(`[recipe run] approve ${input.summary ?? input.toolId} (${input.tier} tier)? [y/N] `);
+        return /^y(es)?$/i.test(answer.trim())
+            ? true
+            : { approved: false, refusal: "rejected" };
+    };
+    return { governance: profile, requireApprovalFn };
+}
 export async function runRecipe(recipeRef, options = {}) {
     const recipePath = resolveRecipePath(recipeRef);
     const recipe = loadYamlRecipe(recipePath);
@@ -831,11 +887,19 @@ export async function runRecipe(recipeRef, options = {}) {
     const recipeToRun = selection
         ? { ...recipe, steps: [selection.step] }
         : recipe;
+    // Phase 0: a local run is governed by the SAME profile as a bridge run.
+    // Under governed, a step the effective policy says needs a human is put to
+    // the operator on the terminal; with no TTY it is refused (fail closed)
+    // rather than executed. Under compat nothing is injected — byte-identical
+    // to before. Tests that pass their own `deps.requireApprovalFn` /
+    // `deps.governance` keep them.
+    const localGovernance = await resolveLocalGovernance(options.deps);
     const runnerDeps = {
         ...options.deps,
         workdir: options.workdir ?? options.deps?.workdir ?? process.cwd(),
         ...(options.manualRunId && { manualRunId: options.manualRunId }),
         ...(options.ledgerDir && { ledgerDir: options.ledgerDir }),
+        ...localGovernance,
     };
     if (options.dryRun) {
         throw new Error("runRecipeDryPlan must be used for dry-run execution");