pi-harness-runtime 1.1.150 → 1.1.152

package/packages/agent-policy/dist/policy-loader.js

@@ -0,0 +1,331 @@
+/**
+ * PolicyLoader - Loads and hashes harness and scoped project rules.
+ *
+ * Responsibilities:
+ * - Load the immutable harness policy shipped with the package
+ * - Walk from project root toward target file collecting scoped AGENTS.md
+ * - Normalize newlines and paths, then hash the ordered mandatory content
+ * - Build a PolicyManifest with source paths, scope, priority, and hashes
+ */
+import { createHash } from "node:crypto";
+import { existsSync, readFileSync } from "node:fs";
+import { dirname, join, relative, resolve } from "node:path";
+// ---------------------------------------------------------------------------
+// Constants
+// ---------------------------------------------------------------------------
+/**
+ * Supported rule file names in priority order.
+ * Earlier names have higher priority.
+ */
+const RULE_FILE_NAMES = [
+    "AGENTS.md", // Mandatory, harness or project
+    "RULES.md", // Advisory
+    "PROJECT_RULES.md", // Advisory
+    "CLAUDE.md", // Advisory
+    "CONTRIBUTING.md", // Advisory (only if explicitly trusted)
+];
+/**
+ * Maximum walk depth to prevent infinite loops.
+ */
+const MAX_WALK_DEPTH = 20;
+/**
+ * Files that indicate project trust.
+ */
+const TRUST_INDICATORS = [".git", "package.json", "Cargo.toml", "go.mod"];
+/**
+ * Loads and processes agent policies from harness and project sources.
+ */
+export class PolicyLoader {
+    harnessRulesPath;
+    additionalRulesPaths;
+    cache = new Map();
+    CACHE_TTL_MS = 5000; // 5 second cache for same-cwd loads
+    constructor(config) {
+        this.harnessRulesPath = config.harnessRulesPath;
+        this.additionalRulesPaths = config.additionalRulesPaths ?? [];
+    }
+    /**
+     * Load policy for a given project root.
+     */
+    async load(projectRoot) {
+        const cacheKey = this.getCacheKey(projectRoot);
+        const cached = this.cache.get(cacheKey);
+        if (cached && Date.now() - cached.cachedAt < this.CACHE_TTL_MS) {
+            return cached.manifest;
+        }
+        const manifest = await this.buildManifest(projectRoot);
+        this.cache.set(cacheKey, { manifest, cachedAt: Date.now() });
+        return manifest;
+    }
+    /**
+     * Load policy for a specific target file (considers scoped rules).
+     */
+    async loadForTarget(projectRoot, targetPath) {
+        if (!targetPath) {
+            return this.load(projectRoot);
+        }
+        // Check if target is in a specific scope
+        const relativePath = relative(projectRoot, targetPath);
+        const scope = this.inferScope(relativePath);
+        const manifest = await this.load(projectRoot);
+        // Filter sources to only those applicable to this scope
+        if (scope) {
+            manifest.sources = manifest.sources.filter(s => s.scope === "" || scope.startsWith(s.scope) || s.scope.startsWith(scope));
+            // Recompute revision if sources changed
+            if (manifest.sources.length > 0) {
+                manifest.revision = this.computeRevision(manifest.sources);
+            }
+        }
+        return manifest;
+    }
+    /**
+     * Invalidate cache for a project root.
+     */
+    invalidateCache(projectRoot) {
+        if (projectRoot) {
+            this.cache.delete(this.getCacheKey(projectRoot));
+        }
+        else {
+            this.cache.clear();
+        }
+    }
+    /**
+     * Build manifest for a project root.
+     */
+    async buildManifest(projectRoot) {
+        const sources = [];
+        const errors = [];
+        // 1. Load harness-owned rules first (highest priority)
+        const harnessSources = await this.loadHarnessRules();
+        sources.push(...harnessSources);
+        // 2. Load project rules (if project is trusted)
+        const trust = this.evaluateTrust(projectRoot);
+        if (trust !== "unknown") {
+            const projectSources = await this.loadProjectRules(projectRoot);
+            sources.push(...projectSources);
+        }
+        else {
+            // Project not trusted, but we still try to load AGENTS.md as advisory
+            const untrustedSources = await this.loadProjectRules(projectRoot, true);
+            sources.push(...untrustedSources);
+        }
+        // 3. Compute revision from mandatory sources
+        const mandatorySources = sources.filter(s => s.priority === "mandatory");
+        const revision = this.computeRevision(mandatorySources);
+        // 4. Determine coverage
+        const coverage = this.determineCoverage(sources, errors);
+        return {
+            revision,
+            projectRoot: resolve(projectRoot),
+            trust,
+            coverage,
+            sources,
+            loadedAt: Date.now(),
+            loadError: errors.length > 0 ? errors.join("; ") : undefined,
+        };
+    }
+    /**
+     * Load harness-owned rule files.
+     */
+    async loadHarnessRules() {
+        const sources = [];
+        // Load main harness AGENTS.md
+        if (existsSync(this.harnessRulesPath)) {
+            try {
+                const content = readFileSync(this.harnessRulesPath, "utf8");
+                const normalized = this.normalizeContent(content);
+                const sha256 = this.hashContent(normalized);
+                sources.push({
+                    path: this.harnessRulesPath.toString(),
+                    scope: "", // Root scope - applies everywhere
+                    priority: "mandatory",
+                    sha256,
+                    bytes: Buffer.byteLength(content, "utf8"),
+                    harnessOwned: true,
+                });
+            }
+            catch (err) {
+                throw new Error(`Failed to load harness rules from ${this.harnessRulesPath}: ${err}`);
+            }
+        }
+        else {
+            throw new Error(`Harness rules not found at ${this.harnessRulesPath}`);
+        }
+        // Load additional harness rules
+        for (const rulesPath of this.additionalRulesPaths) {
+            if (existsSync(rulesPath)) {
+                try {
+                    const content = readFileSync(rulesPath, "utf8");
+                    const normalized = this.normalizeContent(content);
+                    const sha256 = this.hashContent(normalized);
+                    sources.push({
+                        path: rulesPath.toString(),
+                        scope: "", // Root scope
+                        priority: "mandatory",
+                        sha256,
+                        bytes: Buffer.byteLength(content, "utf8"),
+                        harnessOwned: true,
+                    });
+                }
+                catch (err) {
+                    console.error(`Failed to load additional rules from ${rulesPath}: ${err}`);
+                }
+            }
+        }
+        return sources;
+    }
+    /**
+     * Load project-owned rule files, walking from root toward target.
+     */
+    async loadProjectRules(projectRoot, forceAdvisory = false) {
+        const sources = [];
+        let dir = projectRoot;
+        let depth = 0;
+        while (dir && depth < MAX_WALK_DEPTH) {
+            for (const fileName of RULE_FILE_NAMES) {
+                const filePath = join(dir, fileName);
+                if (existsSync(filePath)) {
+                    try {
+                        const content = readFileSync(filePath, "utf8");
+                        const normalized = this.normalizeContent(content);
+                        const sha256 = this.hashContent(normalized);
+                        // Determine priority and scope
+                        const isMandatory = fileName === "AGENTS.md" && !forceAdvisory;
+                        const scope = dir === projectRoot ? "" : "/" + relative(projectRoot, dir);
+                        sources.push({
+                            path: filePath,
+                            scope,
+                            priority: isMandatory ? "mandatory" : "advisory",
+                            sha256,
+                            bytes: Buffer.byteLength(content, "utf8"),
+                            harnessOwned: false,
+                        });
+                    }
+                    catch (err) {
+                        console.error(`Failed to load project rule ${filePath}: ${err}`);
+                    }
+                }
+            }
+            // Move to parent directory
+            const parent = dirname(dir);
+            if (parent === dir)
+                break;
+            dir = parent;
+            depth++;
+        }
+        return sources;
+    }
+    /**
+     * Evaluate trust level for a project.
+     */
+    evaluateTrust(projectRoot) {
+        let trustIndicatorsFound = 0;
+        let untrustIndicatorsFound = 0;
+        for (const indicator of TRUST_INDICATORS) {
+            if (existsSync(join(projectRoot, indicator))) {
+                trustIndicatorsFound++;
+            }
+        }
+        // Check for untrusted indicators (e.g., downloaded zip, unknown origin)
+        // For now, presence of .git or package.json means trusted
+        if (trustIndicatorsFound > 0) {
+            return "trusted";
+        }
+        return "unknown";
+    }
+    /**
+     * Infer the scope from a relative path.
+     */
+    inferScope(relativePath) {
+        // Extract directory component
+        const segments = relativePath.split("/");
+        if (segments.length <= 1) {
+            return ""; // Root scope
+        }
+        // If first segment is "src" or "packages", use that as scope
+        if (segments[0] === "src" || segments[0] === "packages") {
+            return segments[0] + "/";
+        }
+        // Otherwise, use the directory containing the file
+        if (segments.length > 1) {
+            return segments.slice(0, -1).join("/") + "/";
+        }
+        return "";
+    }
+    /**
+     * Normalize content for consistent hashing.
+     */
+    normalizeContent(content) {
+        return content
+            .replace(/\r\n/g, "\n") // Normalize line endings
+            .replace(/\t/g, "    ") // Normalize tabs
+            .replace(/[ \t]+$/gm, "") // Trim trailing whitespace
+            .replace(/\n{3,}/g, "\n\n"); // Collapse excessive newlines
+    }
+    /**
+     * Compute SHA-256 hash of content.
+     */
+    hashContent(content) {
+        return createHash("sha256").update(content, "utf8").digest("hex").slice(0, 16);
+    }
+    /**
+     * Compute combined revision from sources.
+     */
+    computeRevision(sources) {
+        // Sort by path for deterministic ordering
+        const sorted = [...sources].sort((a, b) => a.path.localeCompare(b.path));
+        const combined = sorted.map(s => s.sha256).join("|");
+        return this.hashContent(combined);
+    }
+    /**
+     * Determine coverage based on loaded sources and errors.
+     */
+    determineCoverage(sources, errors) {
+        if (errors.length > 0) {
+            return "degraded";
+        }
+        const mandatorySources = sources.filter(s => s.priority === "mandatory");
+        if (mandatorySources.length === 0) {
+            return "degraded"; // No mandatory rules loaded
+        }
+        // Check if any mandatory sources failed to load (bytes === 0)
+        if (mandatorySources.some(s => s.bytes === 0)) {
+            return "partial";
+        }
+        return "complete";
+    }
+    /**
+     * Generate cache key for a project root.
+     */
+    getCacheKey(projectRoot) {
+        return resolve(projectRoot);
+    }
+    /**
+     * Read the raw content of a source file.
+     */
+    readSourceContent(path) {
+        if (existsSync(path)) {
+            try {
+                return readFileSync(path, "utf8");
+            }
+            catch {
+                return null;
+            }
+        }
+        return null;
+    }
+}
+// ---------------------------------------------------------------------------
+// Factory
+// ---------------------------------------------------------------------------
+/**
+ * Create a PolicyLoader with the standard harness configuration.
+ */
+export function createPolicyLoader() {
+    // Resolve harness AGENTS.md relative to the package directory
+    const harnessRulesPath = new URL("../../AGENTS.md", import.meta.url);
+    return new PolicyLoader({
+        harnessRulesPath,
+    });
+}
+//# sourceMappingURL=policy-loader.js.map

package/packages/agent-policy/dist/policy-loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-loader.js","sourceRoot":"","sources":["../src/policy-loader.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAG7D,8EAA8E;AAC9E,YAAY;AACZ,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,eAAe,GAAG;IACtB,WAAW,EAAO,gCAAgC;IAClD,UAAU,EAAQ,WAAW;IAC7B,kBAAkB,EAAE,WAAW;IAC/B,WAAW,EAAO,WAAW;IAC7B,iBAAiB,EAAE,wCAAwC;CACnD,CAAC;AAEX;;GAEG;AACH,MAAM,cAAc,GAAG,EAAE,CAAC;AAE1B;;GAEG;AACH,MAAM,gBAAgB,GAAG,CAAC,MAAM,EAAE,cAAc,EAAE,YAAY,EAAE,QAAQ,CAAU,CAAC;AAgBnF;;GAEG;AACH,MAAM,OAAO,YAAY;IACf,gBAAgB,CAAM;IACtB,oBAAoB,CAAQ;IAC5B,KAAK,GAAgE,IAAI,GAAG,EAAE,CAAC;IACtE,YAAY,GAAG,IAAI,CAAC,CAAC,oCAAoC;IAE1E,YAAY,MAA0B;QACpC,IAAI,CAAC,gBAAgB,GAAG,MAAM,CAAC,gBAAgB,CAAC;QAChD,IAAI,CAAC,oBAAoB,GAAG,MAAM,CAAC,oBAAoB,IAAI,EAAE,CAAC;IAChE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,IAAI,CAAC,WAAmB;QAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;QAC/C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAExC,IAAI,MAAM,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;YAC/D,OAAO,MAAM,CAAC,QAAQ,CAAC;QACzB,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC;QACvD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAC7D,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CAAC,WAAmB,EAAE,UAAmB;QAC1D,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAChC,CAAC;QAED,yCAAyC;QACzC,MAAM,YAAY,GAAG,QAAQ,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;QACvD,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;QAE5C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAE9C,wDAAwD;QACxD,IAAI,KAAK,EAAE,CAAC;YACV,QAAQ,CAAC,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAC7C,CAAC,CAAC,KAAK,KAAK,EAAE,IAAI,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CACzE,CAAC;YACF,wCAAwC;YACxC,IAAI,QAAQ,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAChC,QAAQ,CAAC,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAC7D,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;OAEG;IACH,eAAe,CAAC,WAAoB;QAClC,IAAI,WAAW,EAAE,CAAC;YAChB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC,CAAC;QACnD,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,aAAa,CAAC,WAAmB;QAC7C,MAAM,OAAO,GAAmB,EAAE,CAAC;QACnC,MAAM,MAAM,GAAa,EAAE,CAAC;QAE5B,uDAAuD;QACvD,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACrD,OAAO,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC,CAAC;QAEhC,gDAAgD;QAChD,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC;QAE9C,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC;YAChE,OAAO,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC,CAAC;QAClC,CAAC;aAAM,CAAC;YACN,sEAAsE;YACtE,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;YACxE,OAAO,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,CAAC;QACpC,CAAC;QAED,6CAA6C;QAC7C,MAAM,gBAAgB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,WAAW,CAAC,CAAC;QACzE,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC,gBAAgB,CAAC,CAAC;QAExD,wBAAwB;QACxB,MAAM,QAAQ,GAAG,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAEzD,OAAO;YACL,QAAQ;YACR,WAAW,EAAE,OAAO,CAAC,WAAW,CAAC;YACjC,KAAK;YACL,QAAQ;YACR,OAAO;YACP,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE;YACpB,SAAS,EAAE,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;SAC7D,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,gBAAgB;QAC5B,MAAM,OAAO,GAAmB,EAAE,CAAC;QAEnC,8BAA8B;QAC9B,IAAI,UAAU,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACtC,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC;gBAC5D,MAAM,UAAU,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;gBAClD,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;gBAE5C,OAAO,CAAC,IAAI,CAAC;oBACX,IAAI,EAAE,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE;oBACtC,KAAK,EAAE,EAAE,EAAE,kCAAkC;oBAC7C,QAAQ,EAAE,WAAW;oBACrB,MAAM;oBACN,KAAK,EAAE,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC;oBACzC,YAAY,EAAE,IAAI;iBACnB,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,IAAI,KAAK,CAAC,qCAAqC,IAAI,CAAC,gBAAgB,KAAK,GAAG,EAAE,CAAC,CAAC;YACxF,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,KAAK,CAAC,8BAA8B,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC;QACzE,CAAC;QAED,gCAAgC;QAChC,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAClD,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC1B,IAAI,CAAC;oBACH,MAAM,OAAO,GAAG,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;oBAChD,MAAM,UAAU,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;oBAClD,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;oBAE5C,OAAO,CAAC,IAAI,CAAC;wBACX,IAAI,EAAE,SAAS,CAAC,QAAQ,EAAE;wBAC1B,KAAK,EAAE,EAAE,EAAE,aAAa;wBACxB,QAAQ,EAAE,WAAW;wBACrB,MAAM;wBACN,KAAK,EAAE,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC;wBACzC,YAAY,EAAE,IAAI;qBACnB,CAAC,CAAC;gBACL,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,OAAO,CAAC,KAAK,CAAC,wCAAwC,SAAS,KAAK,GAAG,EAAE,CAAC,CAAC;gBAC7E,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,gBAAgB,CAC5B,WAAmB,EACnB,aAAa,GAAG,KAAK;QAErB,MAAM,OAAO,GAAmB,EAAE,CAAC;QACnC,IAAI,GAAG,GAAG,WAAW,CAAC;QACtB,IAAI,KAAK,GAAG,CAAC,CAAC;QAEd,OAAO,GAAG,IAAI,KAAK,GAAG,cAAc,EAAE,CAAC;YACrC,KAAK,MAAM,QAAQ,IAAI,eAAe,EAAE,CAAC;gBACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;gBAErC,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;oBACzB,IAAI,CAAC;wBACH,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;wBAC/C,MAAM,UAAU,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;wBAClD,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;wBAE5C,+BAA+B;wBAC/B,MAAM,WAAW,GAAG,QAAQ,KAAK,WAAW,IAAI,CAAC,aAAa,CAAC;wBAC/D,MAAM,KAAK,GAAG,GAAG,KAAK,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,QAAQ,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;wBAE1E,OAAO,CAAC,IAAI,CAAC;4BACX,IAAI,EAAE,QAAQ;4BACd,KAAK;4BACL,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,UAAU;4BAChD,MAAM;4BACN,KAAK,EAAE,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC;4BACzC,YAAY,EAAE,KAAK;yBACpB,CAAC,CAAC;oBACL,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACb,OAAO,CAAC,KAAK,CAAC,+BAA+B,QAAQ,KAAK,GAAG,EAAE,CAAC,CAAC;oBACnE,CAAC;gBACH,CAAC;YACH,CAAC;YAED,2BAA2B;YAC3B,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;YAC5B,IAAI,MAAM,KAAK,GAAG;gBAAE,MAAM;YAC1B,GAAG,GAAG,MAAM,CAAC;YACb,KAAK,EAAE,CAAC;QACV,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACK,aAAa,CAAC,WAAmB;QACvC,IAAI,oBAAoB,GAAG,CAAC,CAAC;QAC7B,IAAI,sBAAsB,GAAG,CAAC,CAAC;QAE/B,KAAK,MAAM,SAAS,IAAI,gBAAgB,EAAE,CAAC;YACzC,IAAI,UAAU,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC;gBAC7C,oBAAoB,EAAE,CAAC;YACzB,CAAC;QACH,CAAC;QAED,wEAAwE;QACxE,0DAA0D;QAC1D,IAAI,oBAAoB,GAAG,CAAC,EAAE,CAAC;YAC7B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;OAEG;IACK,UAAU,CAAC,YAAoB;QACrC,8BAA8B;QAC9B,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,QAAQ,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;YACzB,OAAO,EAAE,CAAC,CAAC,aAAa;QAC1B,CAAC;QAED,6DAA6D;QAC7D,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,UAAU,EAAE,CAAC;YACxD,OAAO,QAAQ,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC;QAC3B,CAAC;QAED,mDAAmD;QACnD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;QAC/C,CAAC;QAED,OAAO,EAAE,CAAC;IACZ,CAAC;IAED;;OAEG;IACK,gBAAgB,CAAC,OAAe;QACtC,OAAO,OAAO;aACX,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAE,yBAAyB;aACjD,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAE,iBAAiB;aACzC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,2BAA2B;aACpD,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,8BAA8B;IAC/D,CAAC;IAED;;OAEG;IACK,WAAW,CAAC,OAAe;QACjC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACjF,CAAC;IAED;;OAEG;IACK,eAAe,CAAC,OAAuB;QAC7C,0CAA0C;QAC1C,MAAM,MAAM,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QACzE,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACrD,OAAO,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;IACpC,CAAC;IAED;;OAEG;IACK,iBAAiB,CAAC,OAAuB,EAAE,MAAgB;QACjE,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,OAAO,UAAU,CAAC;QACpB,CAAC;QAED,MAAM,gBAAgB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,WAAW,CAAC,CAAC;QACzE,IAAI,gBAAgB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClC,OAAO,UAAU,CAAC,CAAC,4BAA4B;QACjD,CAAC;QAED,8DAA8D;QAC9D,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;YAC9C,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC;IAED;;OAEG;IACK,WAAW,CAAC,WAAmB;QACrC,OAAO,OAAO,CAAC,WAAW,CAAC,CAAC;IAC9B,CAAC;IAED;;OAEG;IACH,iBAAiB,CAAC,IAAY;QAC5B,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACrB,IAAI,CAAC;gBACH,OAAO,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACpC,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAED,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E;;GAEG;AACH,MAAM,UAAU,kBAAkB;IAChC,8DAA8D;IAC9D,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,iBAAiB,EAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;IAErE,OAAO,IAAI,YAAY,CAAC;QACtB,gBAAgB;KACjB,CAAC,CAAC;AACL,CAAC"}

package/packages/agent-policy/dist/policy-renderer.d.ts

@@ -0,0 +1,42 @@
+/**
+ * PolicyRenderer - Renders compact system contract for agent injection.
+ *
+ * Responsibilities:
+ * - Render a compact, deterministic contract for before_agent_start injection
+ * - Render full rule text for the harness_rules tool
+ * - Render policy status for display
+ */
+import type { PolicyManifest, PolicySection, HarnessRulesOutput, MinimaxFindingEnvelope } from "./types.js";
+/**
+ * Render the compact mandatory contract for system prompt injection.
+ */
+export declare function renderSystemContract(manifest: PolicyManifest): string;
+/**
+ * Parse markdown content into sections.
+ */
+export declare function parseSections(content: string, source: string, scope: string, priority: "mandatory" | "advisory"): PolicySection[];
+/**
+ * Render full rules for the harness_rules tool.
+ */
+export declare function renderFullRules(manifest: PolicyManifest, options?: {
+    source?: string;
+    section?: string;
+    maxBytes?: number;
+}): HarnessRulesOutput;
+/**
+ * Render a manifest summary.
+ */
+export declare function renderManifestSummary(manifest: PolicyManifest): string;
+/**
+ * Render a finding envelope for display.
+ */
+export declare function renderFindingEnvelope(envelope: MinimaxFindingEnvelope): string;
+/**
+ * Create a clean finding envelope.
+ */
+export declare function createCleanEnvelope(coverage?: "delta" | "targeted" | "full"): MinimaxFindingEnvelope;
+/**
+ * Create a degraded finding envelope.
+ */
+export declare function createDegradedEnvelope(reason: string, coverage?: "delta" | "targeted" | "full"): MinimaxFindingEnvelope;
+//# sourceMappingURL=policy-renderer.d.ts.map

package/packages/agent-policy/dist/policy-renderer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-renderer.d.ts","sourceRoot":"","sources":["../src/policy-renderer.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAM5G;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,cAAc,GAAG,MAAM,CAiCrE;AAMD;;GAEG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,GAAG,UAAU,GAAG,aAAa,EAAE,CA6EjI;AAMD;;GAEG;AACH,wBAAgB,eAAe,CAC7B,QAAQ,EAAE,cAAc,EACxB,OAAO,GAAE;IACP,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACd,GACL,kBAAkB,CA0DpB;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,cAAc,GAAG,MAAM,CA0BtE;AAMD;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,sBAAsB,GAAG,MAAM,CAuD9E;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,GAAE,OAAO,GAAG,UAAU,GAAG,MAAe,GAAG,sBAAsB,CAS5G;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,MAAM,EACd,QAAQ,GAAE,OAAO,GAAG,UAAU,GAAG,MAAgB,GAChD,sBAAsB,CASxB"}

package/packages/agent-policy/dist/policy-renderer.js

@@ -0,0 +1,295 @@
+/**
+ * PolicyRenderer - Renders compact system contract for agent injection.
+ *
+ * Responsibilities:
+ * - Render a compact, deterministic contract for before_agent_start injection
+ * - Render full rule text for the harness_rules tool
+ * - Render policy status for display
+ */
+import { readFileSync, existsSync } from "node:fs";
+// ---------------------------------------------------------------------------
+// System Contract Rendering
+// ---------------------------------------------------------------------------
+/**
+ * Render the compact mandatory contract for system prompt injection.
+ */
+export function renderSystemContract(manifest) {
+    const lines = [];
+    // Header
+    lines.push(`PI-HARNESS POLICY revision=${manifest.revision} coverage=${manifest.coverage}`);
+    lines.push("");
+    // Mandatory rules
+    lines.push("Mandatory:");
+    lines.push("- Read and follow the active harness and scoped project rules.");
+    lines.push("- Before mutation, call harness_rules when the current revision is not loaded.");
+    lines.push("- Treat [BLOCKING] code findings as completion gates.");
+    lines.push("- Treat [DEGRADED] as incomplete evidence, never as clean.");
+    lines.push("- Re-read a file after the harness reports an automatic mutation.");
+    lines.push("");
+    // Tool reference
+    lines.push("Use harness_rules for full text and source attribution.");
+    lines.push("");
+    // Trust indicator
+    if (manifest.trust === "untrusted") {
+        lines.push("WARNING: Project is not trusted. Project rules are advisory only.");
+        lines.push("");
+    }
+    // Coverage warning
+    if (manifest.coverage !== "complete") {
+        lines.push(`WARNING: Policy coverage is ${manifest.coverage}. Some rules may be missing.`);
+        lines.push("");
+    }
+    return lines.join("\n");
+}
+// ---------------------------------------------------------------------------
+// Rule Section Parsing
+// ---------------------------------------------------------------------------
+/**
+ * Parse markdown content into sections.
+ */
+export function parseSections(content, source, scope, priority) {
+    const sections = [];
+    const lines = content.split("\n");
+    let currentSection = null;
+    let sectionIndex = 0;
+    for (let i = 0; i < lines.length; i++) {
+        const line = lines[i];
+        const lineOffset = content.split("\n").slice(0, i).join("\n").length;
+        // Check for markdown heading
+        const headingMatch = line.match(/^(#{1,6})\s+(.+)$/);
+        if (headingMatch) {
+            // Save previous section
+            if (currentSection) {
+                sections.push({
+                    id: currentSection.id,
+                    title: currentSection.title,
+                    content: currentSection.content.join("\n").trim(),
+                    source,
+                    scope,
+                    priority,
+                    offset: currentSection.offset,
+                    truncated: false,
+                });
+            }
+            // Start new section
+            const level = headingMatch[1].length;
+            const title = headingMatch[2].trim();
+            currentSection = {
+                id: `section-${sectionIndex++}`,
+                title,
+                content: [],
+                offset: lineOffset,
+            };
+        }
+        else if (currentSection) {
+            currentSection.content.push(line);
+        }
+    }
+    // Save last section
+    if (currentSection) {
+        sections.push({
+            id: currentSection.id,
+            title: currentSection.title,
+            content: currentSection.content.join("\n").trim(),
+            source,
+            scope,
+            priority,
+            offset: currentSection.offset,
+            truncated: false,
+        });
+    }
+    // If no sections found, create a single section with the whole content
+    if (sections.length === 0) {
+        sections.push({
+            id: "section-0",
+            title: "Full Content",
+            content: content.trim(),
+            source,
+            scope,
+            priority,
+            offset: 0,
+            truncated: false,
+        });
+    }
+    return sections;
+}
+// ---------------------------------------------------------------------------
+// Full Rules Rendering
+// ---------------------------------------------------------------------------
+/**
+ * Render full rules for the harness_rules tool.
+ */
+export function renderFullRules(manifest, options = {}) {
+    const sections = [];
+    const maxBytes = options.maxBytes ?? 50 * 1024; // Default 50KB cap
+    // Filter sources
+    let sources = manifest.sources;
+    if (options.source) {
+        sources = sources.filter(s => s.path.includes(options.source));
+    }
+    // Parse sections from each source
+    for (const source of sources) {
+        const content = readSourceContent(source.path);
+        if (!content)
+            continue;
+        const sourceSections = parseSections(content, source.path, source.scope, source.priority);
+        // Filter by section if requested
+        const filteredSections = options.section
+            ? sourceSections.filter(s => s.title.toLowerCase().includes(options.section.toLowerCase()) ||
+                s.id === options.section)
+            : sourceSections;
+        sections.push(...filteredSections);
+    }
+    // Truncate if needed
+    let totalBytes = 0;
+    let truncated = false;
+    const truncatedSections = [];
+    for (const section of sections) {
+        const sectionBytes = Buffer.byteLength(section.content, "utf8");
+        if (totalBytes + sectionBytes > maxBytes) {
+            // Check if we can fit a partial section
+            const remainingBytes = maxBytes - totalBytes;
+            if (remainingBytes > 100) {
+                // Fit as much as possible
+                truncatedSections.push({
+                    ...section,
+                    content: section.content.slice(0, remainingBytes),
+                    truncated: true,
+                });
+            }
+            truncated = true;
+            break;
+        }
+        truncatedSections.push(section);
+        totalBytes += sectionBytes;
+    }
+    return {
+        sections: truncatedSections,
+    };
+}
+/**
+ * Render a manifest summary.
+ */
+export function renderManifestSummary(manifest) {
+    const lines = [];
+    lines.push(`Policy Manifest`);
+    lines.push(`================`);
+    lines.push(`Revision: ${manifest.revision}`);
+    lines.push(`Project: ${manifest.projectRoot}`);
+    lines.push(`Trust: ${manifest.trust}`);
+    lines.push(`Coverage: ${manifest.coverage}`);
+    lines.push(`Loaded: ${new Date(manifest.loadedAt).toISOString()}`);
+    lines.push("");
+    lines.push("Sources:");
+    for (const source of manifest.sources) {
+        const scope = source.scope || "(root)";
+        const priority = source.priority;
+        const owner = source.harnessOwned ? "[harness]" : "[project]";
+        lines.push(`  ${owner} ${scope} ${priority} ${source.path}`);
+    }
+    if (manifest.loadError) {
+        lines.push("");
+        lines.push(`ERROR: ${manifest.loadError}`);
+    }
+    return lines.join("\n");
+}
+// ---------------------------------------------------------------------------
+// Finding Envelope Rendering
+// ---------------------------------------------------------------------------
+/**
+ * Render a finding envelope for display.
+ */
+export function renderFindingEnvelope(envelope) {
+    const lines = [];
+    // Header with verdict
+    const verdictPrefix = {
+        blocking: "[BLOCKING]",
+        advisory: "[ADVISORY]",
+        clean: "[CLEAN]",
+        degraded: "[DEGRADED]",
+    }[envelope.verdict];
+    lines.push(`${verdictPrefix} Code Analysis (${envelope.coverage} coverage, ${envelope.freshness})`);
+    lines.push("");
+    // Summary
+    if (envelope.summary) {
+        lines.push(envelope.summary);
+        lines.push("");
+    }
+    // Individual findings
+    if (envelope.findings.length > 0) {
+        for (const finding of envelope.findings) {
+            const severity = {
+                error: "ERROR",
+                warning: "WARN",
+                information: "INFO",
+                hint: "HINT",
+            }[finding.severity];
+            const location = finding.line ? `${finding.path}:${finding.line}` : finding.path;
+            const blocking = finding.blocking ? " [BLOCKING]" : "";
+            lines.push(`${severity} ${location}: ${finding.message}${blocking}`);
+            if (finding.fix) {
+                lines.push(`  Fix: ${finding.fix}`);
+            }
+        }
+        lines.push("");
+    }
+    // Next action
+    if (envelope.nextAction) {
+        const actionText = {
+            fix: "Required: fix these issues before reporting completion.",
+            reread: "Required: re-read affected files to get updated analysis.",
+            run_full: "Required: do not report the project clean; run a full analysis.",
+            continue: "No blocking issues found.",
+        }[envelope.nextAction];
+        lines.push(actionText);
+    }
+    return lines.join("\n");
+}
+/**
+ * Create a clean finding envelope.
+ */
+export function createCleanEnvelope(coverage = "full") {
+    return {
+        verdict: "clean",
+        coverage,
+        freshness: "fresh",
+        findings: [],
+        nextAction: "continue",
+        summary: "No blocking issues found in code analysis.",
+    };
+}
+/**
+ * Create a degraded finding envelope.
+ */
+export function createDegradedEnvelope(reason, coverage = "delta") {
+    return {
+        verdict: "degraded",
+        coverage,
+        freshness: "indeterminate",
+        findings: [],
+        nextAction: "run_full",
+        summary: `Analysis degraded: ${reason}. Do not claim the project is clean.`,
+    };
+}
+// ---------------------------------------------------------------------------
+// Helpers
+// ---------------------------------------------------------------------------
+/**
+ * Read source content from a path.
+ */
+function readSourceContent(path) {
+    // Handle file:// URLs
+    const normalizedPath = path.startsWith("file://")
+        ? path.slice(7)
+        : path;
+    if (existsSync(normalizedPath)) {
+        try {
+            return readFileSync(normalizedPath, "utf8");
+        }
+        catch {
+            return null;
+        }
+    }
+    return null;
+}
+//# sourceMappingURL=policy-renderer.js.map