pi-harness-runtime 1.1.150 → 1.1.152

package/packages/agent-policy/dist/policy-renderer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-renderer.js","sourceRoot":"","sources":["../src/policy-renderer.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAGnD,8EAA8E;AAC9E,4BAA4B;AAC5B,8EAA8E;AAE9E;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAAC,QAAwB;IAC3D,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,SAAS;IACT,KAAK,CAAC,IAAI,CAAC,8BAA8B,QAAQ,CAAC,QAAQ,aAAa,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC5F,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,kBAAkB;IAClB,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACzB,KAAK,CAAC,IAAI,CAAC,gEAAgE,CAAC,CAAC;IAC7E,KAAK,CAAC,IAAI,CAAC,gFAAgF,CAAC,CAAC;IAC7F,KAAK,CAAC,IAAI,CAAC,uDAAuD,CAAC,CAAC;IACpE,KAAK,CAAC,IAAI,CAAC,4DAA4D,CAAC,CAAC;IACzE,KAAK,CAAC,IAAI,CAAC,mEAAmE,CAAC,CAAC;IAChF,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,iBAAiB;IACjB,KAAK,CAAC,IAAI,CAAC,yDAAyD,CAAC,CAAC;IACtE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,kBAAkB;IAClB,IAAI,QAAQ,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;QACnC,KAAK,CAAC,IAAI,CAAC,mEAAmE,CAAC,CAAC;QAChF,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,mBAAmB;IACnB,IAAI,QAAQ,CAAC,QAAQ,KAAK,UAAU,EAAE,CAAC;QACrC,KAAK,CAAC,IAAI,CAAC,+BAA+B,QAAQ,CAAC,QAAQ,8BAA8B,CAAC,CAAC;QAC3F,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,8EAA8E;AAC9E,uBAAuB;AACvB,8EAA8E;AAE9E;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,OAAe,EAAE,MAAc,EAAE,KAAa,EAAE,QAAkC;IAC9G,MAAM,QAAQ,GAAoB,EAAE,CAAC;IACrC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAElC,IAAI,cAAc,GAKP,IAAI,CAAC;IAEhB,IAAI,YAAY,GAAG,CAAC,CAAC;IAErB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACtB,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;QAErE,6BAA6B;QAC7B,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;QACrD,IAAI,YAAY,EAAE,CAAC;YACjB,wBAAwB;YACxB,IAAI,cAAc,EAAE,CAAC;gBACnB,QAAQ,CAAC,IAAI,CAAC;oBACZ,EAAE,EAAE,cAAc,CAAC,EAAE;oBACrB,KAAK,EAAE,cAAc,CAAC,KAAK;oBAC3B,OAAO,EAAE,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE;oBACjD,MAAM;oBACN,KAAK;oBACL,QAAQ;oBACR,MAAM,EAAE,cAAc,CAAC,MAAM;oBAC7B,SAAS,EAAE,KAAK;iBACjB,CAAC,CAAC;YACL,CAAC;YAED,oBAAoB;YACpB,MAAM,KAAK,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;YACrC,MAAM,KAAK,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACrC,cAAc,GAAG;gBACf,EAAE,EAAE,WAAW,YAAY,EAAE,EAAE;gBAC/B,KAAK;gBACL,OAAO,EAAE,EAAE;gBACX,MAAM,EAAE,UAAU;aACnB,CAAC;QACJ,CAAC;aAAM,IAAI,cAAc,EAAE,CAAC;YAC1B,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;IAED,oBAAoB;IACpB,IAAI,cAAc,EAAE,CAAC;QACnB,QAAQ,CAAC,IAAI,CAAC;YACZ,EAAE,EAAE,cAAc,CAAC,EAAE;YACrB,KAAK,EAAE,cAAc,CAAC,KAAK;YAC3B,OAAO,EAAE,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE;YACjD,MAAM;YACN,KAAK;YACL,QAAQ;YACR,MAAM,EAAE,cAAc,CAAC,MAAM;YAC7B,SAAS,EAAE,KAAK;SACjB,CAAC,CAAC;IACL,CAAC;IAED,uEAAuE;IACvE,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,QAAQ,CAAC,IAAI,CAAC;YACZ,EAAE,EAAE,WAAW;YACf,KAAK,EAAE,cAAc;YACrB,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE;YACvB,MAAM;YACN,KAAK;YACL,QAAQ;YACR,MAAM,EAAE,CAAC;YACT,SAAS,EAAE,KAAK;SACjB,CAAC,CAAC;IACL,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,8EAA8E;AAC9E,uBAAuB;AACvB,8EAA8E;AAE9E;;GAEG;AACH,MAAM,UAAU,eAAe,CAC7B,QAAwB,EACxB,OAAO,GAIH,EAAE;IAEN,MAAM,QAAQ,GAAoB,EAAE,CAAC;IACrC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,EAAE,GAAG,IAAI,CAAC,CAAC,mBAAmB;IAEnE,iBAAiB;IACjB,IAAI,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;IAC/B,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAO,CAAC,CAAC,CAAC;IAClE,CAAC;IAED,kCAAkC;IAClC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAG,iBAAiB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC/C,IAAI,CAAC,OAAO;YAAE,SAAS;QAEvB,MAAM,cAAc,GAAG,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;QAE1F,iCAAiC;QACjC,MAAM,gBAAgB,GAAG,OAAO,CAAC,OAAO;YACtC,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CACxB,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAQ,CAAC,WAAW,EAAE,CAAC;gBAC9D,CAAC,CAAC,EAAE,KAAK,OAAO,CAAC,OAAO,CACzB;YACH,CAAC,CAAC,cAAc,CAAC;QAEnB,QAAQ,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,CAAC;IACrC,CAAC;IAED,qBAAqB;IACrB,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,MAAM,iBAAiB,GAAoB,EAAE,CAAC;IAE9C,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,YAAY,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAEhE,IAAI,UAAU,GAAG,YAAY,GAAG,QAAQ,EAAE,CAAC;YACzC,wCAAwC;YACxC,MAAM,cAAc,GAAG,QAAQ,GAAG,UAAU,CAAC;YAC7C,IAAI,cAAc,GAAG,GAAG,EAAE,CAAC;gBACzB,0BAA0B;gBAC1B,iBAAiB,CAAC,IAAI,CAAC;oBACrB,GAAG,OAAO;oBACV,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC;oBACjD,SAAS,EAAE,IAAI;iBAChB,CAAC,CAAC;YACL,CAAC;YACD,SAAS,GAAG,IAAI,CAAC;YACjB,MAAM;QACR,CAAC;QAED,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAChC,UAAU,IAAI,YAAY,CAAC;IAC7B,CAAC;IAED,OAAO;QACL,QAAQ,EAAE,iBAAiB;KAC5B,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,qBAAqB,CAAC,QAAwB;IAC5D,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAC9B,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAC/B,KAAK,CAAC,IAAI,CAAC,aAAa,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC7C,KAAK,CAAC,IAAI,CAAC,YAAY,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;IAC/C,KAAK,CAAC,IAAI,CAAC,UAAU,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;IACvC,KAAK,CAAC,IAAI,CAAC,aAAa,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC7C,KAAK,CAAC,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IACnE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAEvB,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,QAAQ,CAAC;QACvC,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QACjC,MAAM,KAAK,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC;QAC9D,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,IAAI,KAAK,IAAI,QAAQ,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IAC/D,CAAC;IAED,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;QACvB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,UAAU,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC;IAC7C,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,8EAA8E;AAC9E,6BAA6B;AAC7B,8EAA8E;AAE9E;;GAEG;AACH,MAAM,UAAU,qBAAqB,CAAC,QAAgC;IACpE,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,sBAAsB;IACtB,MAAM,aAAa,GAAG;QACpB,QAAQ,EAAE,YAAY;QACtB,QAAQ,EAAE,YAAY;QACtB,KAAK,EAAE,SAAS;QAChB,QAAQ,EAAE,YAAY;KACvB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAEpB,KAAK,CAAC,IAAI,CAAC,GAAG,aAAa,mBAAmB,QAAQ,CAAC,QAAQ,cAAc,QAAQ,CAAC,SAAS,GAAG,CAAC,CAAC;IACpG,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,UAAU;IACV,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;QACrB,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC7B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,sBAAsB;IACtB,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjC,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACxC,MAAM,QAAQ,GAAG;gBACf,KAAK,EAAE,OAAO;gBACd,OAAO,EAAE,MAAM;gBACf,WAAW,EAAE,MAAM;gBACnB,IAAI,EAAE,MAAM;aACb,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YAEpB,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;YACjF,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;YAEvD,KAAK,CAAC,IAAI,CAAC,GAAG,QAAQ,IAAI,QAAQ,KAAK,OAAO,CAAC,OAAO,GAAG,QAAQ,EAAE,CAAC,CAAC;YAErE,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;gBAChB,KAAK,CAAC,IAAI,CAAC,UAAU,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;YACtC,CAAC;QACH,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,cAAc;IACd,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;QACxB,MAAM,UAAU,GAAG;YACjB,GAAG,EAAE,yDAAyD;YAC9D,MAAM,EAAE,2DAA2D;YACnE,QAAQ,EAAE,iEAAiE;YAC3E,QAAQ,EAAE,2BAA2B;SACtC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QAEvB,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACzB,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAAQ,GAAkC,MAAM;IAClF,OAAO;QACL,OAAO,EAAE,OAAO;QAChB,QAAQ;QACR,SAAS,EAAE,OAAO;QAClB,QAAQ,EAAE,EAAE;QACZ,UAAU,EAAE,UAAU;QACtB,OAAO,EAAE,4CAA4C;KACtD,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,sBAAsB,CACpC,MAAc,EACd,QAAQ,GAAkC,OAAO;IAEjD,OAAO;QACL,OAAO,EAAE,UAAU;QACnB,QAAQ;QACR,SAAS,EAAE,eAAe;QAC1B,QAAQ,EAAE,EAAE;QACZ,UAAU,EAAE,UAAU;QACtB,OAAO,EAAE,sBAAsB,MAAM,sCAAsC;KAC5E,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E;;GAEG;AACH,SAAS,iBAAiB,CAAC,IAAY;IACrC,sBAAsB;IACtB,MAAM,cAAc,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;QAC/C,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QACf,CAAC,CAAC,IAAI,CAAC;IAET,IAAI,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;QAC/B,IAAI,CAAC;YACH,OAAO,YAAY,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;QAC9C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/packages/agent-policy/dist/policy-store.d.ts

@@ -0,0 +1,99 @@
+/**
+ * PolicyStore - Session receipt tracking and validation.
+ *
+ * Responsibilities:
+ * - Record when a policy revision was delivered to a session
+ * - Validate receipts against current manifest
+ * - Invalidate receipts when rules change
+ * - Track delivery method (system_prompt vs tool)
+ */
+import type { PolicyManifest, PolicyReceipt } from "./types.js";
+/**
+ * Policy store configuration.
+ */
+export interface PolicyStoreConfig {
+    /** Maximum receipts to keep per session (prevents memory leaks) */
+    maxReceiptsPerSession?: number;
+    /** Receipt TTL in milliseconds (default: 24 hours) */
+    receiptTtlMs?: number;
+}
+/**
+ * Stores policy receipts and validates delivery.
+ */
+export declare class PolicyStore {
+    private receipts;
+    private sessionScopes;
+    private lastKnownManifests;
+    private config;
+    constructor(config?: PolicyStoreConfig);
+    /**
+     * Record a policy delivery for a session.
+     */
+    noteDelivered(sessionId: string, manifest: PolicyManifest, deliveryMethod?: "system_prompt" | "tool", sectionsDelivered?: string[]): PolicyReceipt;
+    /**
+     * Get receipt for a session, if it exists.
+     */
+    getReceipt(sessionId: string, projectRoot?: string, scope?: string): PolicyReceipt | null;
+    /**
+     * Check if a session has a valid receipt for the given manifest.
+     */
+    hasValidReceipt(sessionId: string, manifest: PolicyManifest): boolean;
+    /**
+     * Validate a receipt against the current manifest.
+     */
+    validateReceipt(sessionId: string, manifest: PolicyManifest): {
+        valid: boolean;
+        reason?: string;
+    };
+    /**
+     * Invalidate receipts when a rule file changes.
+     */
+    invalidateOnChange(changedPath: string): string[];
+    /**
+     * Invalidate all receipts for a project root.
+     */
+    invalidateProject(projectRoot: string): void;
+    /**
+     * Invalidate all receipts (e.g., after compaction).
+     */
+    invalidateAll(): void;
+    /**
+     * Clear receipts for a specific session.
+     */
+    clearSession(sessionId: string): void;
+    /**
+     * Get all receipts for a session.
+     */
+    getSessionReceipts(sessionId: string): PolicyReceipt[];
+    /**
+     * Get statistics about stored receipts.
+     */
+    getStats(): {
+        totalReceipts: number;
+        sessionsTracked: number;
+        projectsTracked: number;
+        oldestReceipt: number | null;
+        newestReceipt: number | null;
+    };
+    /**
+     * Generate receipt key for storage.
+     */
+    private getReceiptKey;
+    /**
+     * Extract scope from manifest.
+     */
+    private getScopeFromManifest;
+    /**
+     * Cleanup old receipts to prevent memory leaks.
+     */
+    private cleanupOldReceipts;
+}
+/**
+ * Get the global policy store instance.
+ */
+export declare function getPolicyStore(): PolicyStore;
+/**
+ * Reset the global policy store (for testing).
+ */
+export declare function resetPolicyStore(): void;
+//# sourceMappingURL=policy-store.d.ts.map

package/packages/agent-policy/dist/policy-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-store.d.ts","sourceRoot":"","sources":["../src/policy-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAMhE;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,mEAAmE;IACnE,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,sDAAsD;IACtD,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;GAEG;AACH,qBAAa,WAAW;IACtB,OAAO,CAAC,QAAQ,CAAyC;IACzD,OAAO,CAAC,aAAa,CAAuC;IAC5D,OAAO,CAAC,kBAAkB,CAA0C;IACpE,OAAO,CAAC,MAAM,CAA8B;IAE5C,YAAY,MAAM,GAAE,iBAAsB,EAKzC;IAED;;OAEG;IACH,aAAa,CACX,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,cAAc,EACxB,cAAc,GAAE,eAAe,GAAG,MAAwB,EAC1D,iBAAiB,GAAE,MAAM,EAAU,GAClC,aAAa,CA8Bf;IAED;;OAEG;IACH,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,aAAa,GAAG,IAAI,CAaxF;IAED;;OAEG;IACH,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,cAAc,GAAG,OAAO,CAkBpE;IAED;;OAEG;IACH,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,cAAc,GAAG;QAC5D,KAAK,EAAE,OAAO,CAAC;QACf,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,CAmBA;IAED;;OAEG;IACH,kBAAkB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,EAAE,CAkBhD;IAED;;OAEG;IACH,iBAAiB,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAa3C;IAED;;OAEG;IACH,aAAa,IAAI,IAAI,CAGpB;IAED;;OAEG;IACH,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAOpC;IAED;;OAEG;IACH,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,aAAa,EAAE,CAQrD;IAED;;OAEG;IACH,QAAQ,IAAI;QACV,aAAa,EAAE,MAAM,CAAC;QACtB,eAAe,EAAE,MAAM,CAAC;QACxB,eAAe,EAAE,MAAM,CAAC;QACxB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;QAC7B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;KAC9B,CAsBA;IAED;;OAEG;IACH,OAAO,CAAC,aAAa;IAIrB;;OAEG;IACH,OAAO,CAAC,oBAAoB;IAS5B;;OAEG;IACH,OAAO,CAAC,kBAAkB;CAgB3B;AAQD;;GAEG;AACH,wBAAgB,cAAc,IAAI,WAAW,CAK5C;AAED;;GAEG;AACH,wBAAgB,gBAAgB,IAAI,IAAI,CAEvC"}

package/packages/agent-policy/dist/policy-store.js

@@ -0,0 +1,244 @@
+/**
+ * PolicyStore - Session receipt tracking and validation.
+ *
+ * Responsibilities:
+ * - Record when a policy revision was delivered to a session
+ * - Validate receipts against current manifest
+ * - Invalidate receipts when rules change
+ * - Track delivery method (system_prompt vs tool)
+ */
+/**
+ * Stores policy receipts and validates delivery.
+ */
+export class PolicyStore {
+    receipts = new Map();
+    sessionScopes = new Map();
+    lastKnownManifests = new Map();
+    config;
+    constructor(config = {}) {
+        this.config = {
+            maxReceiptsPerSession: config.maxReceiptsPerSession ?? 100,
+            receiptTtlMs: config.receiptTtlMs ?? 24 * 60 * 60 * 1000, // 24 hours
+        };
+    }
+    /**
+     * Record a policy delivery for a session.
+     */
+    noteDelivered(sessionId, manifest, deliveryMethod = "system_prompt", sectionsDelivered = ["*"]) {
+        // Invalidate any existing receipt for this session+scope
+        const existingKey = this.getReceiptKey(sessionId, manifest.projectRoot, "");
+        this.receipts.delete(existingKey);
+        const receipt = {
+            sessionId,
+            projectRoot: manifest.projectRoot,
+            revision: manifest.revision,
+            scope: this.getScopeFromManifest(manifest),
+            deliveredAt: Date.now(),
+            sectionsDelivered,
+            deliveryMethod,
+        };
+        this.receipts.set(existingKey, receipt);
+        // Track scope for this session
+        if (!this.sessionScopes.has(sessionId)) {
+            this.sessionScopes.set(sessionId, new Set());
+        }
+        this.sessionScopes.get(sessionId).add(manifest.projectRoot);
+        // Store manifest for later validation
+        this.lastKnownManifests.set(existingKey, manifest);
+        // Cleanup old receipts if needed
+        this.cleanupOldReceipts();
+        return receipt;
+    }
+    /**
+     * Get receipt for a session, if it exists.
+     */
+    getReceipt(sessionId, projectRoot, scope) {
+        const key = this.getReceiptKey(sessionId, projectRoot ?? "", scope ?? "");
+        const receipt = this.receipts.get(key);
+        if (!receipt)
+            return null;
+        // Check TTL
+        if (Date.now() - receipt.deliveredAt > this.config.receiptTtlMs) {
+            this.receipts.delete(key);
+            return null;
+        }
+        return receipt;
+    }
+    /**
+     * Check if a session has a valid receipt for the given manifest.
+     */
+    hasValidReceipt(sessionId, manifest) {
+        const receipt = this.getReceipt(sessionId, manifest.projectRoot);
+        if (!receipt)
+            return false;
+        // Check revision match
+        if (receipt.revision !== manifest.revision) {
+            return false;
+        }
+        // Check scope coverage
+        const receiptScope = receipt.scope;
+        const manifestScope = this.getScopeFromManifest(manifest);
+        if (receiptScope && manifestScope && !receiptScope.startsWith(manifestScope)) {
+            return false;
+        }
+        return true;
+    }
+    /**
+     * Validate a receipt against the current manifest.
+     */
+    validateReceipt(sessionId, manifest) {
+        const receipt = this.getReceipt(sessionId, manifest.projectRoot);
+        if (!receipt) {
+            return { valid: false, reason: "No receipt found for this session" };
+        }
+        if (receipt.revision !== manifest.revision) {
+            return {
+                valid: false,
+                reason: `Receipt revision ${receipt.revision} does not match current ${manifest.revision}`,
+            };
+        }
+        if (Date.now() - receipt.deliveredAt > this.config.receiptTtlMs) {
+            return { valid: false, reason: "Receipt has expired" };
+        }
+        return { valid: true };
+    }
+    /**
+     * Invalidate receipts when a rule file changes.
+     */
+    invalidateOnChange(changedPath) {
+        const invalidatedSessions = [];
+        for (const [key, manifest] of this.lastKnownManifests) {
+            // Check if the changed path affects any of our sources
+            const affectedSource = manifest.sources.find(s => s.path === changedPath || s.path.includes(changedPath));
+            if (affectedSource) {
+                // Extract session ID from key
+                const sessionId = key.split("|")[0];
+                this.receipts.delete(key);
+                invalidatedSessions.push(sessionId);
+            }
+        }
+        return invalidatedSessions;
+    }
+    /**
+     * Invalidate all receipts for a project root.
+     */
+    invalidateProject(projectRoot) {
+        for (const [key, receipt] of this.receipts) {
+            if (receipt.projectRoot === projectRoot) {
+                this.receipts.delete(key);
+            }
+        }
+        // Also clean up last known manifests for this project
+        for (const [key, manifest] of this.lastKnownManifests) {
+            if (manifest.projectRoot === projectRoot) {
+                this.lastKnownManifests.delete(key);
+            }
+        }
+    }
+    /**
+     * Invalidate all receipts (e.g., after compaction).
+     */
+    invalidateAll() {
+        this.receipts.clear();
+        this.sessionScopes.clear();
+    }
+    /**
+     * Clear receipts for a specific session.
+     */
+    clearSession(sessionId) {
+        for (const [key, receipt] of this.receipts) {
+            if (receipt.sessionId === sessionId) {
+                this.receipts.delete(key);
+            }
+        }
+        this.sessionScopes.delete(sessionId);
+    }
+    /**
+     * Get all receipts for a session.
+     */
+    getSessionReceipts(sessionId) {
+        const receipts = [];
+        for (const receipt of this.receipts.values()) {
+            if (receipt.sessionId === sessionId) {
+                receipts.push(receipt);
+            }
+        }
+        return receipts;
+    }
+    /**
+     * Get statistics about stored receipts.
+     */
+    getStats() {
+        let oldest = null;
+        let newest = null;
+        const projects = new Set();
+        for (const receipt of this.receipts.values()) {
+            if (oldest === null || receipt.deliveredAt < oldest) {
+                oldest = receipt.deliveredAt;
+            }
+            if (newest === null || receipt.deliveredAt > newest) {
+                newest = receipt.deliveredAt;
+            }
+            projects.add(receipt.projectRoot);
+        }
+        return {
+            totalReceipts: this.receipts.size,
+            sessionsTracked: this.sessionScopes.size,
+            projectsTracked: projects.size,
+            oldestReceipt: oldest,
+            newestReceipt: newest,
+        };
+    }
+    /**
+     * Generate receipt key for storage.
+     */
+    getReceiptKey(sessionId, projectRoot, scope) {
+        return `${sessionId}|${projectRoot}|${scope}`;
+    }
+    /**
+     * Extract scope from manifest.
+     */
+    getScopeFromManifest(manifest) {
+        const mandatorySources = manifest.sources.filter(s => s.priority === "mandatory");
+        if (mandatorySources.length === 0)
+            return "";
+        // Get the most specific (longest) scope
+        mandatorySources.sort((a, b) => b.scope.length - a.scope.length);
+        return mandatorySources[0]?.scope ?? "";
+    }
+    /**
+     * Cleanup old receipts to prevent memory leaks.
+     */
+    cleanupOldReceipts() {
+        if (this.receipts.size <= this.config.maxReceiptsPerSession) {
+            return;
+        }
+        // Sort by delivery time, oldest first
+        const sorted = [...this.receipts.entries()].sort((a, b) => a[1].deliveredAt - b[1].deliveredAt);
+        // Remove oldest entries until under limit
+        const toRemove = sorted.slice(0, sorted.length - this.config.maxReceiptsPerSession);
+        for (const [key] of toRemove) {
+            this.receipts.delete(key);
+        }
+    }
+}
+// ---------------------------------------------------------------------------
+// Singleton instance (for use in extension)
+// ---------------------------------------------------------------------------
+let globalPolicyStore = null;
+/**
+ * Get the global policy store instance.
+ */
+export function getPolicyStore() {
+    if (!globalPolicyStore) {
+        globalPolicyStore = new PolicyStore();
+    }
+    return globalPolicyStore;
+}
+/**
+ * Reset the global policy store (for testing).
+ */
+export function resetPolicyStore() {
+    globalPolicyStore = null;
+}
+//# sourceMappingURL=policy-store.js.map

package/packages/agent-policy/dist/policy-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-store.js","sourceRoot":"","sources":["../src/policy-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAkBH;;GAEG;AACH,MAAM,OAAO,WAAW;IACd,QAAQ,GAA+B,IAAI,GAAG,EAAE,CAAC;IACjD,aAAa,GAA6B,IAAI,GAAG,EAAE,CAAC;IACpD,kBAAkB,GAAgC,IAAI,GAAG,EAAE,CAAC;IAC5D,MAAM,CAA8B;IAE5C,YAAY,MAAM,GAAsB,EAAE;QACxC,IAAI,CAAC,MAAM,GAAG;YACZ,qBAAqB,EAAE,MAAM,CAAC,qBAAqB,IAAI,GAAG;YAC1D,YAAY,EAAE,MAAM,CAAC,YAAY,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,WAAW;SACtE,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,aAAa,CACX,SAAiB,EACjB,QAAwB,EACxB,cAAc,GAA6B,eAAe,EAC1D,iBAAiB,GAAa,CAAC,GAAG,CAAC;QAEnC,yDAAyD;QACzD,MAAM,WAAW,GAAG,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QAC5E,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAElC,MAAM,OAAO,GAAkB;YAC7B,SAAS;YACT,WAAW,EAAE,QAAQ,CAAC,WAAW;YACjC,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,KAAK,EAAE,IAAI,CAAC,oBAAoB,CAAC,QAAQ,CAAC;YAC1C,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE;YACvB,iBAAiB;YACjB,cAAc;SACf,CAAC;QAEF,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QAExC,+BAA+B;QAC/B,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YACvC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC;QAC/C,CAAC;QACD,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,CAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAE7D,sCAAsC;QACtC,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAEnD,iCAAiC;QACjC,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAE1B,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACH,UAAU,CAAC,SAAiB,EAAE,WAAoB,EAAE,KAAc;QAChE,MAAM,GAAG,GAAG,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,WAAW,IAAI,EAAE,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;QAC1E,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAEvC,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAE1B,YAAY;QACZ,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;YAChE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC1B,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACH,eAAe,CAAC,SAAiB,EAAE,QAAwB;QACzD,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAC;QACjE,IAAI,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC;QAE3B,uBAAuB;QACvB,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ,EAAE,CAAC;YAC3C,OAAO,KAAK,CAAC;QACf,CAAC;QAED,uBAAuB;QACvB,MAAM,YAAY,GAAG,OAAO,CAAC,KAAK,CAAC;QACnC,MAAM,aAAa,GAAG,IAAI,CAAC,oBAAoB,CAAC,QAAQ,CAAC,CAAC;QAE1D,IAAI,YAAY,IAAI,aAAa,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;YAC7E,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,eAAe,CAAC,SAAiB,EAAE,QAAwB;QAIzD,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAC;QAEjE,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,mCAAmC,EAAE,CAAC;QACvE,CAAC;QAED,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ,EAAE,CAAC;YAC3C,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,MAAM,EAAE,oBAAoB,OAAO,CAAC,QAAQ,2BAA2B,QAAQ,CAAC,QAAQ,EAAE;aAC3F,CAAC;QACJ,CAAC;QAED,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;YAChE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;QACzD,CAAC;QAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACzB,CAAC;IAED;;OAEG;IACH,kBAAkB,CAAC,WAAmB;QACpC,MAAM,mBAAmB,GAAa,EAAE,CAAC;QAEzC,KAAK,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;YACtD,uDAAuD;YACvD,MAAM,cAAc,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAC/C,CAAC,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CACvD,CAAC;YAEF,IAAI,cAAc,EAAE,CAAC;gBACnB,8BAA8B;gBAC9B,MAAM,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;gBACpC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAC1B,mBAAmB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACtC,CAAC;QACH,CAAC;QAED,OAAO,mBAAmB,CAAC;IAC7B,CAAC;IAED;;OAEG;IACH,iBAAiB,CAAC,WAAmB;QACnC,KAAK,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC3C,IAAI,OAAO,CAAC,WAAW,KAAK,WAAW,EAAE,CAAC;gBACxC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC5B,CAAC;QACH,CAAC;QAED,sDAAsD;QACtD,KAAK,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;YACtD,IAAI,QAAQ,CAAC,WAAW,KAAK,WAAW,EAAE,CAAC;gBACzC,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACtC,CAAC;QACH,CAAC;IACH,CAAC;IAED;;OAEG;IACH,aAAa;QACX,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC;IAC7B,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,SAAiB;QAC5B,KAAK,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC3C,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBACpC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC5B,CAAC;QACH,CAAC;QACD,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACvC,CAAC;IAED;;OAEG;IACH,kBAAkB,CAAC,SAAiB;QAClC,MAAM,QAAQ,GAAoB,EAAE,CAAC;QACrC,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;YAC7C,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBACpC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;OAEG;IACH,QAAQ;QAON,IAAI,MAAM,GAAkB,IAAI,CAAC;QACjC,IAAI,MAAM,GAAkB,IAAI,CAAC;QACjC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;QAEnC,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;YAC7C,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,CAAC,WAAW,GAAG,MAAM,EAAE,CAAC;gBACpD,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;YAC/B,CAAC;YACD,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,CAAC,WAAW,GAAG,MAAM,EAAE,CAAC;gBACpD,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;YAC/B,CAAC;YACD,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QACpC,CAAC;QAED,OAAO;YACL,aAAa,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI;YACjC,eAAe,EAAE,IAAI,CAAC,aAAa,CAAC,IAAI;YACxC,eAAe,EAAE,QAAQ,CAAC,IAAI;YAC9B,aAAa,EAAE,MAAM;YACrB,aAAa,EAAE,MAAM;SACtB,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,aAAa,CAAC,SAAiB,EAAE,WAAmB,EAAE,KAAa;QACzE,OAAO,GAAG,SAAS,IAAI,WAAW,IAAI,KAAK,EAAE,CAAC;IAChD,CAAC;IAED;;OAEG;IACK,oBAAoB,CAAC,QAAwB;QACnD,MAAM,gBAAgB,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,WAAW,CAAC,CAAC;QAClF,IAAI,gBAAgB,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAE7C,wCAAwC;QACxC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACjE,OAAO,gBAAgB,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC;IAC1C,CAAC;IAED;;OAEG;IACK,kBAAkB;QACxB,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,qBAAqB,EAAE,CAAC;YAC5D,OAAO;QACT,CAAC;QAED,sCAAsC;QACtC,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAC9C,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAC9C,CAAC;QAEF,0CAA0C;QAC1C,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC;QACpF,KAAK,MAAM,CAAC,GAAG,CAAC,IAAI,QAAQ,EAAE,CAAC;YAC7B,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;CACF;AAED,8EAA8E;AAC9E,4CAA4C;AAC5C,8EAA8E;AAE9E,IAAI,iBAAiB,GAAuB,IAAI,CAAC;AAEjD;;GAEG;AACH,MAAM,UAAU,cAAc;IAC5B,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACvB,iBAAiB,GAAG,IAAI,WAAW,EAAE,CAAC;IACxC,CAAC;IACD,OAAO,iBAAiB,CAAC;AAC3B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB;IAC9B,iBAAiB,GAAG,IAAI,CAAC;AAC3B,CAAC"}

package/packages/agent-policy/dist/types.d.ts

@@ -0,0 +1,237 @@
+/**
+ * Core types for the agent-policy package.
+ *
+ * These types define the policy delivery and enforcement model:
+ * - PolicyManifest: describes the loaded rules (hashed, scoped, trusted)
+ * - PolicyReceipt: proves a session received a specific revision
+ * - HarnessRulesTool: the tool for retrieving and acknowledging rules
+ * - MinimaxFindingEnvelope: LSP/code analysis verdict for tool results
+ */
+/**
+ * A single source file contributing to the policy.
+ */
+export interface PolicySource {
+    /** Absolute path to the source file */
+    path: string;
+    /** Scope this source applies to (e.g., "src/", "packages/foo/") */
+    scope: string;
+    /** Whether this source is mandatory or advisory */
+    priority: "mandatory" | "advisory";
+    /** SHA-256 hash of the normalized content */
+    sha256: string;
+    /** Byte count of the content */
+    bytes: number;
+    /** Whether this is a harness-owned source (vs project-owned) */
+    harnessOwned: boolean;
+}
+/**
+ * Policy manifest describing all loaded rules for a session.
+ */
+export interface PolicyManifest {
+    /** Short SHA-256 of the combined mandatory content */
+    revision: string;
+    /** Absolute path to the resolved project root */
+    projectRoot: string;
+    /** Trust level for project-owned rules */
+    trust: "trusted" | "untrusted" | "unknown";
+    /** Coverage status of the policy loading */
+    coverage: "complete" | "partial" | "degraded";
+    /** All sources contributing to this policy */
+    sources: PolicySource[];
+    /** When this manifest was created (ms since epoch) */
+    loadedAt: number;
+    /** Error message if coverage is degraded */
+    loadError?: string;
+}
+/**
+ * Proof that a session received a specific policy revision.
+ * Stored per-session to prevent reuse across sessions or scopes.
+ */
+export interface PolicyReceipt {
+    /** Stable session identifier */
+    sessionId: string;
+    /** Project root this receipt applies to */
+    projectRoot: string;
+    /** The revision this receipt covers */
+    revision: string;
+    /** Scope this receipt applies to (empty = root scope) */
+    scope: string;
+    /** When the policy was delivered (ms since epoch) */
+    deliveredAt: number;
+    /** Which sections were delivered */
+    sectionsDelivered: string[];
+    /** Delivery method: 'system_prompt' or 'tool' */
+    deliveryMethod: "system_prompt" | "tool";
+}
+/**
+ * Check if a receipt covers a given manifest.
+ */
+export declare function receiptCoversManifest(receipt: PolicyReceipt, manifest: PolicyManifest): boolean;
+/**
+ * Extract scope from manifest sources.
+ */
+export declare function getScopeFromManifest(manifest: PolicyManifest): string;
+/**
+ * Classification of a tool call for policy enforcement.
+ */
+export interface ToolCallCapability {
+    /** Whether this call can modify project files */
+    mutatesProject: boolean;
+    /** Whether this call can release the project (commit, push, build) */
+    releasesProject: boolean;
+    /** Specific file paths affected (if known) */
+    affectedPaths?: string[];
+    /** Whether this is a child agent delegation */
+    isChildDelegation: boolean;
+    /** Classification confidence */
+    confidence: "high" | "medium" | "low";
+}
+/**
+ * Classify a tool call by its name and input.
+ */
+export type ToolClassifier = (toolName: string, input: unknown) => ToolCallCapability;
+/**
+ * Default tool classifier for pi-harness.
+ * Classifies actual capability, not just literal tool names.
+ */
+export declare function classifyToolCall(toolName: string, input: unknown): ToolCallCapability;
+/**
+ * Input for the harness_rules tool.
+ */
+export type HarnessRulesInput = {
+    action: "manifest";
+} | {
+    action: "read";
+    source?: string;
+    section?: string;
+} | {
+    action: "acknowledge";
+    revision: string;
+};
+/**
+ * Output for the harness_rules tool.
+ */
+export interface HarnessRulesOutput {
+    manifest?: PolicyManifest;
+    sections?: PolicySection[];
+    receipt?: PolicyReceipt;
+    acknowledged?: boolean;
+    error?: string;
+}
+/**
+ * A single section of a policy source.
+ */
+export interface PolicySection {
+    /** Section identifier (heading or index) */
+    id: string;
+    /** Section title */
+    title: string;
+    /** Section content */
+    content: string;
+    /** Source file path */
+    source: string;
+    /** Scope this section applies to */
+    scope: string;
+    /** Priority of the containing source */
+    priority: "mandatory" | "advisory";
+    /** Byte offset in source */
+    offset: number;
+    /** Whether this section was truncated */
+    truncated: boolean;
+}
+/**
+ * A single code finding from LSP or other analyzer.
+ */
+export interface PolicyFinding {
+    /** Unique identifier for this finding */
+    id: string;
+    /** File path (relative or absolute) */
+    path: string;
+    /** Line number (1-based) */
+    line?: number;
+    /** Column number (1-based) */
+    column?: number;
+    /** Source of this finding */
+    source: "lsp" | "runner" | "structural" | "test" | "security" | "policy";
+    /** Human-readable message */
+    message: string;
+    /** Suggested fix (if available) */
+    fix?: string;
+    /** Severity level */
+    severity: "error" | "warning" | "information" | "hint";
+    /** Whether this finding blocks completion */
+    blocking: boolean;
+}
+/**
+ * Envelope for code analysis findings, attached to tool results.
+ * This is the pi-lens-style verdict that Minimax respects.
+ */
+export interface MinimaxFindingEnvelope {
+    /** Overall verdict */
+    verdict: "blocking" | "advisory" | "clean" | "degraded";
+    /** Coverage level of this analysis */
+    coverage: "delta" | "targeted" | "full";
+    /** Freshness of the analysis */
+    freshness: "fresh" | "stale" | "indeterminate";
+    /** Individual findings */
+    findings: PolicyFinding[];
+    /** Suggested next action */
+    nextAction?: "fix" | "reread" | "run_full" | "continue";
+    /** Human-readable summary for display */
+    summary: string;
+}
+/**
+ * Combined verdict for harness policy + code analysis.
+ */
+export interface HarnessAgentVerdict {
+    /** Policy status */
+    policy: {
+        revision: string;
+        received: boolean;
+        coverage: "complete" | "partial" | "degraded";
+    };
+    /** Code analysis status */
+    code: MinimaxFindingEnvelope;
+    /** Whether completion is allowed */
+    completionAllowed: boolean;
+}
+/**
+ * Configuration for the agent-policy extension.
+ */
+export interface AgentPolicyConfig {
+    /** Path to the harness-owned AGENTS.md */
+    harnessRulesPath: URL;
+    /** Whether to require receipt before mutation */
+    requireReceiptBeforeMutation: boolean;
+    /** LSP mode: 'pi-lens' (compose) or 'native' (fallback) */
+    lspMode: "pi-lens" | "native";
+    /** Optional: path to additional harness rules */
+    additionalRulesPaths?: URL[];
+    /** Optional: custom tool classifier */
+    toolClassifier?: ToolClassifier;
+    /** Whether to enable Git guard (blocks commit until blockers cleared) */
+    gitGuardEnabled?: boolean;
+    /** Whether to enable build guard */
+    buildGuardEnabled?: boolean;
+}
+/**
+ * Events emitted by the policy runtime.
+ */
+export interface PolicyEvents {
+    /** Fired when a policy is loaded */
+    onPolicyLoaded?: (manifest: PolicyManifest) => void;
+    /** Fired when a policy receipt is recorded */
+    onReceiptRecorded?: (receipt: PolicyReceipt) => void;
+    /** Fired when a mutation is blocked */
+    onMutationBlocked?: (event: {
+        sessionId: string;
+        revision: string;
+        reason: string;
+    }) => void;
+    /** Fired when policy coverage is degraded */
+    onCoverageDegraded?: (event: {
+        reason: string;
+        error?: string;
+    }) => void;
+}
+//# sourceMappingURL=types.d.ts.map

package/packages/agent-policy/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAMH;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,uCAAuC;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,mEAAmE;IACnE,KAAK,EAAE,MAAM,CAAC;IACd,mDAAmD;IACnD,QAAQ,EAAE,WAAW,GAAG,UAAU,CAAC;IACnC,6CAA6C;IAC7C,MAAM,EAAE,MAAM,CAAC;IACf,gCAAgC;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,gEAAgE;IAChE,YAAY,EAAE,OAAO,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,sDAAsD;IACtD,QAAQ,EAAE,MAAM,CAAC;IACjB,iDAAiD;IACjD,WAAW,EAAE,MAAM,CAAC;IACpB,0CAA0C;IAC1C,KAAK,EAAE,SAAS,GAAG,WAAW,GAAG,SAAS,CAAC;IAC3C,4CAA4C;IAC5C,QAAQ,EAAE,UAAU,GAAG,SAAS,GAAG,UAAU,CAAC;IAC9C,8CAA8C;IAC9C,OAAO,EAAE,YAAY,EAAE,CAAC;IACxB,sDAAsD;IACtD,QAAQ,EAAE,MAAM,CAAC;IACjB,4CAA4C;IAC5C,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAMD;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B,gCAAgC;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,2CAA2C;IAC3C,WAAW,EAAE,MAAM,CAAC;IACpB,uCAAuC;IACvC,QAAQ,EAAE,MAAM,CAAC;IACjB,yDAAyD;IACzD,KAAK,EAAE,MAAM,CAAC;IACd,qDAAqD;IACrD,WAAW,EAAE,MAAM,CAAC;IACpB,oCAAoC;IACpC,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,iDAAiD;IACjD,cAAc,EAAE,eAAe,GAAG,MAAM,CAAC;CAC1C;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,cAAc,GAAG,OAAO,CAM/F;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,cAAc,GAAG,MAAM,CAQrE;AAMD;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,iDAAiD;IACjD,cAAc,EAAE,OAAO,CAAC;IACxB,sEAAsE;IACtE,eAAe,EAAE,OAAO,CAAC;IACzB,8CAA8C;IAC9C,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,+CAA+C;IAC/C,iBAAiB,EAAE,OAAO,CAAC;IAC3B,gCAAgC;IAChC,UAAU,EAAE,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;CACvC;AAED;;GAEG;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,KAAK,kBAAkB,CAAC;AAEtF;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,kBAAkB,CAwGrF;AAMD;;GAEG;AACH,MAAM,MAAM,iBAAiB,GACzB;IAAE,MAAM,EAAE,UAAU,CAAA;CAAE,GACtB;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GACrD;IAAE,MAAM,EAAE,aAAa,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC;AAEhD;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,EAAE,cAAc,CAAC;IAC1B,QAAQ,CAAC,EAAE,aAAa,EAAE,CAAC;IAC3B,OAAO,CAAC,EAAE,aAAa,CAAC;IACxB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,4CAA4C;IAC5C,EAAE,EAAE,MAAM,CAAC;IACX,oBAAoB;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,sBAAsB;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,uBAAuB;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,oCAAoC;IACpC,KAAK,EAAE,MAAM,CAAC;IACd,wCAAwC;IACxC,QAAQ,EAAE,WAAW,GAAG,UAAU,CAAC;IACnC,4BAA4B;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,yCAAyC;IACzC,SAAS,EAAE,OAAO,CAAC;CACpB;AAMD;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,yCAAyC;IACzC,EAAE,EAAE,MAAM,CAAC;IACX,uCAAuC;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,4BAA4B;IAC5B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,8BAA8B;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,6BAA6B;IAC7B,MAAM,EAAE,KAAK,GAAG,QAAQ,GAAG,YAAY,GAAG,MAAM,GAAG,UAAU,GAAG,QAAQ,CAAC;IACzE,6BAA6B;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,mCAAmC;IACnC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,qBAAqB;IACrB,QAAQ,EAAE,OAAO,GAAG,SAAS,GAAG,aAAa,GAAG,MAAM,CAAC;IACvD,6CAA6C;IAC7C,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED;;;GAGG;AACH,MAAM,WAAW,sBAAsB;IACrC,sBAAsB;IACtB,OAAO,EAAE,UAAU,GAAG,UAAU,GAAG,OAAO,GAAG,UAAU,CAAC;IACxD,sCAAsC;IACtC,QAAQ,EAAE,OAAO,GAAG,UAAU,GAAG,MAAM,CAAC;IACxC,gCAAgC;IAChC,SAAS,EAAE,OAAO,GAAG,OAAO,GAAG,eAAe,CAAC;IAC/C,0BAA0B;IAC1B,QAAQ,EAAE,aAAa,EAAE,CAAC;IAC1B,4BAA4B;IAC5B,UAAU,CAAC,EAAE,KAAK,GAAG,QAAQ,GAAG,UAAU,GAAG,UAAU,CAAC;IACxD,yCAAyC;IACzC,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,oBAAoB;IACpB,MAAM,EAAE;QACN,QAAQ,EAAE,MAAM,CAAC;QACjB,QAAQ,EAAE,OAAO,CAAC;QAClB,QAAQ,EAAE,UAAU,GAAG,SAAS,GAAG,UAAU,CAAC;KAC/C,CAAC;IACF,2BAA2B;IAC3B,IAAI,EAAE,sBAAsB,CAAC;IAC7B,oCAAoC;IACpC,iBAAiB,EAAE,OAAO,CAAC;CAC5B;AAMD;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,0CAA0C;IAC1C,gBAAgB,EAAE,GAAG,CAAC;IACtB,iDAAiD;IACjD,4BAA4B,EAAE,OAAO,CAAC;IACtC,2DAA2D;IAC3D,OAAO,EAAE,SAAS,GAAG,QAAQ,CAAC;IAC9B,iDAAiD;IACjD,oBAAoB,CAAC,EAAE,GAAG,EAAE,CAAC;IAC7B,uCAAuC;IACvC,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,yEAAyE;IACzE,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,oCAAoC;IACpC,iBAAiB,CAAC,EAAE,OAAO,CAAC;CAC7B;AAMD;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,oCAAoC;IACpC,cAAc,CAAC,EAAE,CAAC,QAAQ,EAAE,cAAc,KAAK,IAAI,CAAC;IACpD,8CAA8C;IAC9C,iBAAiB,CAAC,EAAE,CAAC,OAAO,EAAE,aAAa,KAAK,IAAI,CAAC;IACrD,uCAAuC;IACvC,iBAAiB,CAAC,EAAE,CAAC,KAAK,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;IAC7F,6CAA6C;IAC7C,kBAAkB,CAAC,EAAE,CAAC,KAAK,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;CAC1E"}