pi-harness-runtime 1.1.148 → 1.1.152

package/packages/agent-policy/dist/policy-loader.d.ts

@@ -0,0 +1,90 @@
+/**
+ * PolicyLoader - Loads and hashes harness and scoped project rules.
+ *
+ * Responsibilities:
+ * - Load the immutable harness policy shipped with the package
+ * - Walk from project root toward target file collecting scoped AGENTS.md
+ * - Normalize newlines and paths, then hash the ordered mandatory content
+ * - Build a PolicyManifest with source paths, scope, priority, and hashes
+ */
+import type { PolicyManifest } from "./types.js";
+/**
+ * Policy loader configuration.
+ */
+export interface PolicyLoaderConfig {
+    /** Path to the harness-owned AGENTS.md */
+    harnessRulesPath: URL;
+    /** Optional additional harness rule files */
+    additionalRulesPaths?: URL[];
+}
+/**
+ * Loads and processes agent policies from harness and project sources.
+ */
+export declare class PolicyLoader {
+    private harnessRulesPath;
+    private additionalRulesPaths;
+    private cache;
+    private readonly CACHE_TTL_MS;
+    constructor(config: PolicyLoaderConfig);
+    /**
+     * Load policy for a given project root.
+     */
+    load(projectRoot: string): Promise<PolicyManifest>;
+    /**
+     * Load policy for a specific target file (considers scoped rules).
+     */
+    loadForTarget(projectRoot: string, targetPath?: string): Promise<PolicyManifest>;
+    /**
+     * Invalidate cache for a project root.
+     */
+    invalidateCache(projectRoot?: string): void;
+    /**
+     * Build manifest for a project root.
+     */
+    private buildManifest;
+    /**
+     * Load harness-owned rule files.
+     */
+    private loadHarnessRules;
+    /**
+     * Load project-owned rule files, walking from root toward target.
+     */
+    private loadProjectRules;
+    /**
+     * Evaluate trust level for a project.
+     */
+    private evaluateTrust;
+    /**
+     * Infer the scope from a relative path.
+     */
+    private inferScope;
+    /**
+     * Normalize content for consistent hashing.
+     */
+    private normalizeContent;
+    /**
+     * Compute SHA-256 hash of content.
+     */
+    private hashContent;
+    /**
+     * Compute combined revision from sources.
+     */
+    private computeRevision;
+    /**
+     * Determine coverage based on loaded sources and errors.
+     */
+    private determineCoverage;
+    /**
+     * Generate cache key for a project root.
+     */
+    private getCacheKey;
+    /**
+     * Read the raw content of a source file.
+     */
+    readSourceContent(path: string): string | null;
+}
+/**
+ * Create a PolicyLoader with the standard harness configuration.
+ */
+export declare function createPolicyLoader(): PolicyLoader;
+//# sourceMappingURL=policy-loader.d.ts.map

package/packages/agent-policy/dist/policy-loader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-loader.d.ts","sourceRoot":"","sources":["../src/policy-loader.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAKH,OAAO,KAAK,EAAE,cAAc,EAAgB,MAAM,YAAY,CAAC;AAgC/D;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,0CAA0C;IAC1C,gBAAgB,EAAE,GAAG,CAAC;IACtB,6CAA6C;IAC7C,oBAAoB,CAAC,EAAE,GAAG,EAAE,CAAC;CAC9B;AAED;;GAEG;AACH,qBAAa,YAAY;IACvB,OAAO,CAAC,gBAAgB,CAAM;IAC9B,OAAO,CAAC,oBAAoB,CAAQ;IACpC,OAAO,CAAC,KAAK,CAA0E;IACvF,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAQ;IAErC,YAAY,MAAM,EAAE,kBAAkB,EAGrC;IAED;;OAEG;IACG,IAAI,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAWvD;IAED;;OAEG;IACG,aAAa,CAAC,WAAW,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAuBrF;IAED;;OAEG;IACH,eAAe,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAM1C;IAED;;OAEG;YACW,aAAa;IAsC3B;;OAEG;YACW,gBAAgB;IAkD9B;;OAEG;YACW,gBAAgB;IA8C9B;;OAEG;IACH,OAAO,CAAC,aAAa;IAmBrB;;OAEG;IACH,OAAO,CAAC,UAAU;IAoBlB;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAQxB;;OAEG;IACH,OAAO,CAAC,WAAW;IAInB;;OAEG;IACH,OAAO,CAAC,eAAe;IAOvB;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAkBzB;;OAEG;IACH,OAAO,CAAC,WAAW;IAInB;;OAEG;IACH,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAS7C;CACF;AAMD;;GAEG;AACH,wBAAgB,kBAAkB,IAAI,YAAY,CAOjD"}

package/packages/agent-policy/dist/policy-loader.js

@@ -0,0 +1,331 @@
+/**
+ * PolicyLoader - Loads and hashes harness and scoped project rules.
+ *
+ * Responsibilities:
+ * - Load the immutable harness policy shipped with the package
+ * - Walk from project root toward target file collecting scoped AGENTS.md
+ * - Normalize newlines and paths, then hash the ordered mandatory content
+ * - Build a PolicyManifest with source paths, scope, priority, and hashes
+ */
+import { createHash } from "node:crypto";
+import { existsSync, readFileSync } from "node:fs";
+import { dirname, join, relative, resolve } from "node:path";
+// ---------------------------------------------------------------------------
+// Constants
+// ---------------------------------------------------------------------------
+/**
+ * Supported rule file names in priority order.
+ * Earlier names have higher priority.
+ */
+const RULE_FILE_NAMES = [
+    "AGENTS.md", // Mandatory, harness or project
+    "RULES.md", // Advisory
+    "PROJECT_RULES.md", // Advisory
+    "CLAUDE.md", // Advisory
+    "CONTRIBUTING.md", // Advisory (only if explicitly trusted)
+];
+/**
+ * Maximum walk depth to prevent infinite loops.
+ */
+const MAX_WALK_DEPTH = 20;
+/**
+ * Files that indicate project trust.
+ */
+const TRUST_INDICATORS = [".git", "package.json", "Cargo.toml", "go.mod"];
+/**
+ * Loads and processes agent policies from harness and project sources.
+ */
+export class PolicyLoader {
+    harnessRulesPath;
+    additionalRulesPaths;
+    cache = new Map();
+    CACHE_TTL_MS = 5000; // 5 second cache for same-cwd loads
+    constructor(config) {
+        this.harnessRulesPath = config.harnessRulesPath;
+        this.additionalRulesPaths = config.additionalRulesPaths ?? [];
+    }
+    /**
+     * Load policy for a given project root.
+     */
+    async load(projectRoot) {
+        const cacheKey = this.getCacheKey(projectRoot);
+        const cached = this.cache.get(cacheKey);
+        if (cached && Date.now() - cached.cachedAt < this.CACHE_TTL_MS) {
+            return cached.manifest;
+        }
+        const manifest = await this.buildManifest(projectRoot);
+        this.cache.set(cacheKey, { manifest, cachedAt: Date.now() });
+        return manifest;
+    }
+    /**
+     * Load policy for a specific target file (considers scoped rules).
+     */
+    async loadForTarget(projectRoot, targetPath) {
+        if (!targetPath) {
+            return this.load(projectRoot);
+        }
+        // Check if target is in a specific scope
+        const relativePath = relative(projectRoot, targetPath);
+        const scope = this.inferScope(relativePath);
+        const manifest = await this.load(projectRoot);
+        // Filter sources to only those applicable to this scope
+        if (scope) {
+            manifest.sources = manifest.sources.filter(s => s.scope === "" || scope.startsWith(s.scope) || s.scope.startsWith(scope));
+            // Recompute revision if sources changed
+            if (manifest.sources.length > 0) {
+                manifest.revision = this.computeRevision(manifest.sources);
+            }
+        }
+        return manifest;
+    }
+    /**
+     * Invalidate cache for a project root.
+     */
+    invalidateCache(projectRoot) {
+        if (projectRoot) {
+            this.cache.delete(this.getCacheKey(projectRoot));
+        }
+        else {
+            this.cache.clear();
+        }
+    }
+    /**
+     * Build manifest for a project root.
+     */
+    async buildManifest(projectRoot) {
+        const sources = [];
+        const errors = [];
+        // 1. Load harness-owned rules first (highest priority)
+        const harnessSources = await this.loadHarnessRules();
+        sources.push(...harnessSources);
+        // 2. Load project rules (if project is trusted)
+        const trust = this.evaluateTrust(projectRoot);
+        if (trust !== "unknown") {
+            const projectSources = await this.loadProjectRules(projectRoot);
+            sources.push(...projectSources);
+        }
+        else {
+            // Project not trusted, but we still try to load AGENTS.md as advisory
+            const untrustedSources = await this.loadProjectRules(projectRoot, true);
+            sources.push(...untrustedSources);
+        }
+        // 3. Compute revision from mandatory sources
+        const mandatorySources = sources.filter(s => s.priority === "mandatory");
+        const revision = this.computeRevision(mandatorySources);
+        // 4. Determine coverage
+        const coverage = this.determineCoverage(sources, errors);
+        return {
+            revision,
+            projectRoot: resolve(projectRoot),
+            trust,
+            coverage,
+            sources,
+            loadedAt: Date.now(),
+            loadError: errors.length > 0 ? errors.join("; ") : undefined,
+        };
+    }
+    /**
+     * Load harness-owned rule files.
+     */
+    async loadHarnessRules() {
+        const sources = [];
+        // Load main harness AGENTS.md
+        if (existsSync(this.harnessRulesPath)) {
+            try {
+                const content = readFileSync(this.harnessRulesPath, "utf8");
+                const normalized = this.normalizeContent(content);
+                const sha256 = this.hashContent(normalized);
+                sources.push({
+                    path: this.harnessRulesPath.toString(),
+                    scope: "", // Root scope - applies everywhere
+                    priority: "mandatory",
+                    sha256,
+                    bytes: Buffer.byteLength(content, "utf8"),
+                    harnessOwned: true,
+                });
+            }
+            catch (err) {
+                throw new Error(`Failed to load harness rules from ${this.harnessRulesPath}: ${err}`);
+            }
+        }
+        else {
+            throw new Error(`Harness rules not found at ${this.harnessRulesPath}`);
+        }
+        // Load additional harness rules
+        for (const rulesPath of this.additionalRulesPaths) {
+            if (existsSync(rulesPath)) {
+                try {
+                    const content = readFileSync(rulesPath, "utf8");
+                    const normalized = this.normalizeContent(content);
+                    const sha256 = this.hashContent(normalized);
+                    sources.push({
+                        path: rulesPath.toString(),
+                        scope: "", // Root scope
+                        priority: "mandatory",
+                        sha256,
+                        bytes: Buffer.byteLength(content, "utf8"),
+                        harnessOwned: true,
+                    });
+                }
+                catch (err) {
+                    console.error(`Failed to load additional rules from ${rulesPath}: ${err}`);
+                }
+            }
+        }
+        return sources;
+    }
+    /**
+     * Load project-owned rule files, walking from root toward target.
+     */
+    async loadProjectRules(projectRoot, forceAdvisory = false) {
+        const sources = [];
+        let dir = projectRoot;
+        let depth = 0;
+        while (dir && depth < MAX_WALK_DEPTH) {
+            for (const fileName of RULE_FILE_NAMES) {
+                const filePath = join(dir, fileName);
+                if (existsSync(filePath)) {
+                    try {
+                        const content = readFileSync(filePath, "utf8");
+                        const normalized = this.normalizeContent(content);
+                        const sha256 = this.hashContent(normalized);
+                        // Determine priority and scope
+                        const isMandatory = fileName === "AGENTS.md" && !forceAdvisory;
+                        const scope = dir === projectRoot ? "" : "/" + relative(projectRoot, dir);
+                        sources.push({
+                            path: filePath,
+                            scope,
+                            priority: isMandatory ? "mandatory" : "advisory",
+                            sha256,
+                            bytes: Buffer.byteLength(content, "utf8"),
+                            harnessOwned: false,
+                        });
+                    }
+                    catch (err) {
+                        console.error(`Failed to load project rule ${filePath}: ${err}`);
+                    }
+                }
+            }
+            // Move to parent directory
+            const parent = dirname(dir);
+            if (parent === dir)
+                break;
+            dir = parent;
+            depth++;
+        }
+        return sources;
+    }
+    /**
+     * Evaluate trust level for a project.
+     */
+    evaluateTrust(projectRoot) {
+        let trustIndicatorsFound = 0;
+        let untrustIndicatorsFound = 0;
+        for (const indicator of TRUST_INDICATORS) {
+            if (existsSync(join(projectRoot, indicator))) {
+                trustIndicatorsFound++;
+            }
+        }
+        // Check for untrusted indicators (e.g., downloaded zip, unknown origin)
+        // For now, presence of .git or package.json means trusted
+        if (trustIndicatorsFound > 0) {
+            return "trusted";
+        }
+        return "unknown";
+    }
+    /**
+     * Infer the scope from a relative path.
+     */
+    inferScope(relativePath) {
+        // Extract directory component
+        const segments = relativePath.split("/");
+        if (segments.length <= 1) {
+            return ""; // Root scope
+        }
+        // If first segment is "src" or "packages", use that as scope
+        if (segments[0] === "src" || segments[0] === "packages") {
+            return segments[0] + "/";
+        }
+        // Otherwise, use the directory containing the file
+        if (segments.length > 1) {
+            return segments.slice(0, -1).join("/") + "/";
+        }
+        return "";
+    }
+    /**
+     * Normalize content for consistent hashing.
+     */
+    normalizeContent(content) {
+        return content
+            .replace(/\r\n/g, "\n") // Normalize line endings
+            .replace(/\t/g, "    ") // Normalize tabs
+            .replace(/[ \t]+$/gm, "") // Trim trailing whitespace
+            .replace(/\n{3,}/g, "\n\n"); // Collapse excessive newlines
+    }
+    /**
+     * Compute SHA-256 hash of content.
+     */
+    hashContent(content) {
+        return createHash("sha256").update(content, "utf8").digest("hex").slice(0, 16);
+    }
+    /**
+     * Compute combined revision from sources.
+     */
+    computeRevision(sources) {
+        // Sort by path for deterministic ordering
+        const sorted = [...sources].sort((a, b) => a.path.localeCompare(b.path));
+        const combined = sorted.map(s => s.sha256).join("|");
+        return this.hashContent(combined);
+    }
+    /**
+     * Determine coverage based on loaded sources and errors.
+     */
+    determineCoverage(sources, errors) {
+        if (errors.length > 0) {
+            return "degraded";
+        }
+        const mandatorySources = sources.filter(s => s.priority === "mandatory");
+        if (mandatorySources.length === 0) {
+            return "degraded"; // No mandatory rules loaded
+        }
+        // Check if any mandatory sources failed to load (bytes === 0)
+        if (mandatorySources.some(s => s.bytes === 0)) {
+            return "partial";
+        }
+        return "complete";
+    }
+    /**
+     * Generate cache key for a project root.
+     */
+    getCacheKey(projectRoot) {
+        return resolve(projectRoot);
+    }
+    /**
+     * Read the raw content of a source file.
+     */
+    readSourceContent(path) {
+        if (existsSync(path)) {
+            try {
+                return readFileSync(path, "utf8");
+            }
+            catch {
+                return null;
+            }
+        }
+        return null;
+    }
+}
+// ---------------------------------------------------------------------------
+// Factory
+// ---------------------------------------------------------------------------
+/**
+ * Create a PolicyLoader with the standard harness configuration.
+ */
+export function createPolicyLoader() {
+    // Resolve harness AGENTS.md relative to the package directory
+    const harnessRulesPath = new URL("../../AGENTS.md", import.meta.url);
+    return new PolicyLoader({
+        harnessRulesPath,
+    });
+}
+//# sourceMappingURL=policy-loader.js.map

package/packages/agent-policy/dist/policy-loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-loader.js","sourceRoot":"","sources":["../src/policy-loader.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAG7D,8EAA8E;AAC9E,YAAY;AACZ,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,eAAe,GAAG;IACtB,WAAW,EAAO,gCAAgC;IAClD,UAAU,EAAQ,WAAW;IAC7B,kBAAkB,EAAE,WAAW;IAC/B,WAAW,EAAO,WAAW;IAC7B,iBAAiB,EAAE,wCAAwC;CACnD,CAAC;AAEX;;GAEG;AACH,MAAM,cAAc,GAAG,EAAE,CAAC;AAE1B;;GAEG;AACH,MAAM,gBAAgB,GAAG,CAAC,MAAM,EAAE,cAAc,EAAE,YAAY,EAAE,QAAQ,CAAU,CAAC;AAgBnF;;GAEG;AACH,MAAM,OAAO,YAAY;IACf,gBAAgB,CAAM;IACtB,oBAAoB,CAAQ;IAC5B,KAAK,GAAgE,IAAI,GAAG,EAAE,CAAC;IACtE,YAAY,GAAG,IAAI,CAAC,CAAC,oCAAoC;IAE1E,YAAY,MAA0B;QACpC,IAAI,CAAC,gBAAgB,GAAG,MAAM,CAAC,gBAAgB,CAAC;QAChD,IAAI,CAAC,oBAAoB,GAAG,MAAM,CAAC,oBAAoB,IAAI,EAAE,CAAC;IAChE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,IAAI,CAAC,WAAmB;QAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;QAC/C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAExC,IAAI,MAAM,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;YAC/D,OAAO,MAAM,CAAC,QAAQ,CAAC;QACzB,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC;QACvD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAC7D,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CAAC,WAAmB,EAAE,UAAmB;QAC1D,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAChC,CAAC;QAED,yCAAyC;QACzC,MAAM,YAAY,GAAG,QAAQ,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;QACvD,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;QAE5C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAE9C,wDAAwD;QACxD,IAAI,KAAK,EAAE,CAAC;YACV,QAAQ,CAAC,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAC7C,CAAC,CAAC,KAAK,KAAK,EAAE,IAAI,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CACzE,CAAC;YACF,wCAAwC;YACxC,IAAI,QAAQ,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAChC,QAAQ,CAAC,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAC7D,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;OAEG;IACH,eAAe,CAAC,WAAoB;QAClC,IAAI,WAAW,EAAE,CAAC;YAChB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC,CAAC;QACnD,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,aAAa,CAAC,WAAmB;QAC7C,MAAM,OAAO,GAAmB,EAAE,CAAC;QACnC,MAAM,MAAM,GAAa,EAAE,CAAC;QAE5B,uDAAuD;QACvD,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACrD,OAAO,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC,CAAC;QAEhC,gDAAgD;QAChD,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC;QAE9C,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC;YAChE,OAAO,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC,CAAC;QAClC,CAAC;aAAM,CAAC;YACN,sEAAsE;YACtE,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;YACxE,OAAO,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,CAAC;QACpC,CAAC;QAED,6CAA6C;QAC7C,MAAM,gBAAgB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,WAAW,CAAC,CAAC;QACzE,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC,gBAAgB,CAAC,CAAC;QAExD,wBAAwB;QACxB,MAAM,QAAQ,GAAG,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAEzD,OAAO;YACL,QAAQ;YACR,WAAW,EAAE,OAAO,CAAC,WAAW,CAAC;YACjC,KAAK;YACL,QAAQ;YACR,OAAO;YACP,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE;YACpB,SAAS,EAAE,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;SAC7D,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,gBAAgB;QAC5B,MAAM,OAAO,GAAmB,EAAE,CAAC;QAEnC,8BAA8B;QAC9B,IAAI,UAAU,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACtC,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC;gBAC5D,MAAM,UAAU,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;gBAClD,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;gBAE5C,OAAO,CAAC,IAAI,CAAC;oBACX,IAAI,EAAE,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE;oBACtC,KAAK,EAAE,EAAE,EAAE,kCAAkC;oBAC7C,QAAQ,EAAE,WAAW;oBACrB,MAAM;oBACN,KAAK,EAAE,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC;oBACzC,YAAY,EAAE,IAAI;iBACnB,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,IAAI,KAAK,CAAC,qCAAqC,IAAI,CAAC,gBAAgB,KAAK,GAAG,EAAE,CAAC,CAAC;YACxF,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,KAAK,CAAC,8BAA8B,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC;QACzE,CAAC;QAED,gCAAgC;QAChC,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAClD,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC1B,IAAI,CAAC;oBACH,MAAM,OAAO,GAAG,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;oBAChD,MAAM,UAAU,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;oBAClD,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;oBAE5C,OAAO,CAAC,IAAI,CAAC;wBACX,IAAI,EAAE,SAAS,CAAC,QAAQ,EAAE;wBAC1B,KAAK,EAAE,EAAE,EAAE,aAAa;wBACxB,QAAQ,EAAE,WAAW;wBACrB,MAAM;wBACN,KAAK,EAAE,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC;wBACzC,YAAY,EAAE,IAAI;qBACnB,CAAC,CAAC;gBACL,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,OAAO,CAAC,KAAK,CAAC,wCAAwC,SAAS,KAAK,GAAG,EAAE,CAAC,CAAC;gBAC7E,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,gBAAgB,CAC5B,WAAmB,EACnB,aAAa,GAAG,KAAK;QAErB,MAAM,OAAO,GAAmB,EAAE,CAAC;QACnC,IAAI,GAAG,GAAG,WAAW,CAAC;QACtB,IAAI,KAAK,GAAG,CAAC,CAAC;QAEd,OAAO,GAAG,IAAI,KAAK,GAAG,cAAc,EAAE,CAAC;YACrC,KAAK,MAAM,QAAQ,IAAI,eAAe,EAAE,CAAC;gBACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;gBAErC,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;oBACzB,IAAI,CAAC;wBACH,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;wBAC/C,MAAM,UAAU,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;wBAClD,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;wBAE5C,+BAA+B;wBAC/B,MAAM,WAAW,GAAG,QAAQ,KAAK,WAAW,IAAI,CAAC,aAAa,CAAC;wBAC/D,MAAM,KAAK,GAAG,GAAG,KAAK,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,QAAQ,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;wBAE1E,OAAO,CAAC,IAAI,CAAC;4BACX,IAAI,EAAE,QAAQ;4BACd,KAAK;4BACL,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,UAAU;4BAChD,MAAM;4BACN,KAAK,EAAE,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC;4BACzC,YAAY,EAAE,KAAK;yBACpB,CAAC,CAAC;oBACL,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACb,OAAO,CAAC,KAAK,CAAC,+BAA+B,QAAQ,KAAK,GAAG,EAAE,CAAC,CAAC;oBACnE,CAAC;gBACH,CAAC;YACH,CAAC;YAED,2BAA2B;YAC3B,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;YAC5B,IAAI,MAAM,KAAK,GAAG;gBAAE,MAAM;YAC1B,GAAG,GAAG,MAAM,CAAC;YACb,KAAK,EAAE,CAAC;QACV,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACK,aAAa,CAAC,WAAmB;QACvC,IAAI,oBAAoB,GAAG,CAAC,CAAC;QAC7B,IAAI,sBAAsB,GAAG,CAAC,CAAC;QAE/B,KAAK,MAAM,SAAS,IAAI,gBAAgB,EAAE,CAAC;YACzC,IAAI,UAAU,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC;gBAC7C,oBAAoB,EAAE,CAAC;YACzB,CAAC;QACH,CAAC;QAED,wEAAwE;QACxE,0DAA0D;QAC1D,IAAI,oBAAoB,GAAG,CAAC,EAAE,CAAC;YAC7B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;OAEG;IACK,UAAU,CAAC,YAAoB;QACrC,8BAA8B;QAC9B,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,QAAQ,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;YACzB,OAAO,EAAE,CAAC,CAAC,aAAa;QAC1B,CAAC;QAED,6DAA6D;QAC7D,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,UAAU,EAAE,CAAC;YACxD,OAAO,QAAQ,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC;QAC3B,CAAC;QAED,mDAAmD;QACnD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;QAC/C,CAAC;QAED,OAAO,EAAE,CAAC;IACZ,CAAC;IAED;;OAEG;IACK,gBAAgB,CAAC,OAAe;QACtC,OAAO,OAAO;aACX,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAE,yBAAyB;aACjD,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAE,iBAAiB;aACzC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,2BAA2B;aACpD,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,8BAA8B;IAC/D,CAAC;IAED;;OAEG;IACK,WAAW,CAAC,OAAe;QACjC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACjF,CAAC;IAED;;OAEG;IACK,eAAe,CAAC,OAAuB;QAC7C,0CAA0C;QAC1C,MAAM,MAAM,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QACzE,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACrD,OAAO,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;IACpC,CAAC;IAED;;OAEG;IACK,iBAAiB,CAAC,OAAuB,EAAE,MAAgB;QACjE,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,OAAO,UAAU,CAAC;QACpB,CAAC;QAED,MAAM,gBAAgB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,WAAW,CAAC,CAAC;QACzE,IAAI,gBAAgB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClC,OAAO,UAAU,CAAC,CAAC,4BAA4B;QACjD,CAAC;QAED,8DAA8D;QAC9D,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;YAC9C,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC;IAED;;OAEG;IACK,WAAW,CAAC,WAAmB;QACrC,OAAO,OAAO,CAAC,WAAW,CAAC,CAAC;IAC9B,CAAC;IAED;;OAEG;IACH,iBAAiB,CAAC,IAAY;QAC5B,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACrB,IAAI,CAAC;gBACH,OAAO,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACpC,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAED,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E;;GAEG;AACH,MAAM,UAAU,kBAAkB;IAChC,8DAA8D;IAC9D,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,iBAAiB,EAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;IAErE,OAAO,IAAI,YAAY,CAAC;QACtB,gBAAgB;KACjB,CAAC,CAAC;AACL,CAAC"}

package/packages/agent-policy/dist/policy-renderer.d.ts

@@ -0,0 +1,42 @@
+/**
+ * PolicyRenderer - Renders compact system contract for agent injection.
+ *
+ * Responsibilities:
+ * - Render a compact, deterministic contract for before_agent_start injection
+ * - Render full rule text for the harness_rules tool
+ * - Render policy status for display
+ */
+import type { PolicyManifest, PolicySection, HarnessRulesOutput, MinimaxFindingEnvelope } from "./types.js";
+/**
+ * Render the compact mandatory contract for system prompt injection.
+ */
+export declare function renderSystemContract(manifest: PolicyManifest): string;
+/**
+ * Parse markdown content into sections.
+ */
+export declare function parseSections(content: string, source: string, scope: string, priority: "mandatory" | "advisory"): PolicySection[];
+/**
+ * Render full rules for the harness_rules tool.
+ */
+export declare function renderFullRules(manifest: PolicyManifest, options?: {
+    source?: string;
+    section?: string;
+    maxBytes?: number;
+}): HarnessRulesOutput;
+/**
+ * Render a manifest summary.
+ */
+export declare function renderManifestSummary(manifest: PolicyManifest): string;
+/**
+ * Render a finding envelope for display.
+ */
+export declare function renderFindingEnvelope(envelope: MinimaxFindingEnvelope): string;
+/**
+ * Create a clean finding envelope.
+ */
+export declare function createCleanEnvelope(coverage?: "delta" | "targeted" | "full"): MinimaxFindingEnvelope;
+/**
+ * Create a degraded finding envelope.
+ */
+export declare function createDegradedEnvelope(reason: string, coverage?: "delta" | "targeted" | "full"): MinimaxFindingEnvelope;
+//# sourceMappingURL=policy-renderer.d.ts.map

package/packages/agent-policy/dist/policy-renderer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-renderer.d.ts","sourceRoot":"","sources":["../src/policy-renderer.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAM5G;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,cAAc,GAAG,MAAM,CAiCrE;AAMD;;GAEG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,GAAG,UAAU,GAAG,aAAa,EAAE,CA6EjI;AAMD;;GAEG;AACH,wBAAgB,eAAe,CAC7B,QAAQ,EAAE,cAAc,EACxB,OAAO,GAAE;IACP,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACd,GACL,kBAAkB,CA0DpB;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,cAAc,GAAG,MAAM,CA0BtE;AAMD;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,sBAAsB,GAAG,MAAM,CAuD9E;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,GAAE,OAAO,GAAG,UAAU,GAAG,MAAe,GAAG,sBAAsB,CAS5G;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,MAAM,EACd,QAAQ,GAAE,OAAO,GAAG,UAAU,GAAG,MAAgB,GAChD,sBAAsB,CASxB"}