pi-harness-runtime 1.1.320 → 1.1.321

package/packages/agent-policy/test/policy-retention.test.ts

@@ -0,0 +1,299 @@
+/**
+ * Policy Retention Tests
+ *
+ * Tests for lifecycle retention after compaction, reset, resume.
+ */
+
+import { describe, it, before, after } from "node:test";
+import assert from "node:assert";
+import { existsSync, mkdirSync, writeFileSync, unlinkSync, rmSync } from "node:fs";
+import { join } from "node:path";
+import { randomUUID } from "node:crypto";
+import type { PolicyManifest } from "../dist/types.js";
+import { PolicyLoader } from "../dist/policy-loader.js";
+import { getPolicyStore, resetPolicyStore } from "../dist/policy-store.js";
+
+// Test workspace
+const TEST_DIR = "/tmp/policy-retention-test-" + Date.now();
+const AGENTS_MD = join(TEST_DIR, "AGENTS.md");
+const RULES_MD = join(TEST_DIR, "RULES.md");
+
+describe("Policy Retention Tests", () => {
+  before(() => {
+    mkdirSync(TEST_DIR, { recursive: true });
+    resetPolicyStore();
+  });
+
+  after(() => {
+    try {
+      rmSync(TEST_DIR, { recursive: true, force: true });
+    } catch {
+      // ignore cleanup errors
+    }
+    resetPolicyStore();
+  });
+
+  // --- Session Epoch Tests ---
+  describe("Session epochs", () => {
+    it("should track session epochs separately", async () => {
+      const store = getPolicyStore();
+      const session1 = "session-1-" + randomUUID().slice(0, 8);
+      const session2 = "session-2-" + randomUUID().slice(0, 8);
+
+      // Create a manifest
+      const manifest: PolicyManifest = {
+        revision: "abc123",
+        projectRoot: TEST_DIR,
+        trust: "unknown",
+        coverage: "complete",
+        sources: [],
+        loadedAt: Date.now(),
+      };
+
+      // Note delivery for session 1
+      const receipt1 = store.noteDelivered(session1, manifest, "system_prompt");
+      assert.strictEqual(receipt1.sessionId, session1);
+
+      // Session 2 should NOT have a receipt
+      const receipt2 = store.getReceipt(session2, TEST_DIR);
+      assert.strictEqual(receipt2, null);
+    });
+
+    it("should not leak receipts between sessions after reset", async () => {
+      const store = getPolicyStore();
+      const sessionId = "session-reset-" + randomUUID().slice(0, 8);
+
+      const manifest: PolicyManifest = {
+        revision: "abc123",
+        projectRoot: TEST_DIR,
+        trust: "unknown",
+        coverage: "complete",
+        sources: [],
+        loadedAt: Date.now(),
+      };
+
+      // Deliver to session
+      store.noteDelivered(sessionId, manifest, "system_prompt");
+
+      // Clear session
+      store.clearSession(sessionId);
+
+      // Receipt should be gone
+      const receipt = store.getReceipt(sessionId, TEST_DIR);
+      assert.strictEqual(receipt, null);
+    });
+  });
+
+  // --- Source Change Tests ---
+  describe("Source changes", () => {
+    it("should invalidate receipts when AGENTS.md changes", async () => {
+      const store = getPolicyStore();
+      const sessionId = "session-change-" + randomUUID().slice(0, 8);
+
+      // Write initial content
+      writeFileSync(AGENTS_MD, "# Original Agents\n\nFollow the rules.", "utf8");
+
+      const loader = new PolicyLoader({
+        harnessRulesPath: new URL(`file://${AGENTS_MD}`),
+      });
+
+      // Load and deliver
+      const manifest1 = await loader.load(TEST_DIR);
+      store.noteDelivered(sessionId, manifest1, "system_prompt");
+
+      // Modify file
+      writeFileSync(AGENTS_MD, "# Updated Agents\n\nDifferent rules.", "utf8");
+
+      // Invalidate cache
+      loader.invalidateCache(TEST_DIR);
+
+      // Load new manifest
+      const manifest2 = await loader.load(TEST_DIR);
+
+      // Revision should be different
+      assert.notStrictEqual(manifest1.revision, manifest2.revision);
+
+      // Old receipt should NOT cover new manifest
+      const hasCoverage = store.hasValidReceipt(sessionId, manifest2);
+      assert.strictEqual(hasCoverage, false);
+    });
+
+    it("should include RULES.md in sources", async () => {
+      // Write RULES.md
+      writeFileSync(RULES_MD, "# Rules\n\nThese are rules.", "utf8");
+
+      const loader = new PolicyLoader({
+        harnessRulesPath: new URL(`file://${AGENTS_MD}`),
+      });
+
+      const manifest = await loader.load(TEST_DIR);
+
+      // RULES.md should be included as advisory at minimum
+      const rulesSource = manifest.sources.find(s => s.path.includes("RULES.md"));
+      assert.ok(rulesSource, "RULES.md should be included in sources");
+
+      // Clean up
+      unlinkSync(RULES_MD);
+    });
+  });
+
+  // --- Bounded Delivery Tests ---
+  describe("Bounded delivery", () => {
+    it("should track exact revision and source coverage", async () => {
+      const store = getPolicyStore();
+      const sessionId = "session-exact-" + randomUUID().slice(0, 8);
+
+      writeFileSync(AGENTS_MD, "# Agents\n\nContent.", "utf8");
+
+      const loader = new PolicyLoader({
+        harnessRulesPath: new URL(`file://${AGENTS_MD}`),
+      });
+
+      const manifest = await loader.load(TEST_DIR);
+
+      // Note delivery with specific sections
+      const receipt = store.noteDelivered(sessionId, manifest, "tool", ["section-1"]);
+
+      assert.strictEqual(receipt.revision, manifest.revision);
+      assert.deepStrictEqual(receipt.sectionsDelivered, ["section-1"]);
+    });
+
+    it("should reject acknowledgement of wrong revision", async () => {
+      const store = getPolicyStore();
+      const sessionId = "session-wrong-rev-" + randomUUID().slice(0, 8);
+
+      writeFileSync(AGENTS_MD, "# Agents v1\n\nContent.", "utf8");
+
+      const loader = new PolicyLoader({
+        harnessRulesPath: new URL(`file://${AGENTS_MD}`),
+      });
+
+      const manifest1 = await loader.load(TEST_DIR);
+      store.noteDelivered(sessionId, manifest1, "system_prompt");
+
+      // Update content
+      writeFileSync(AGENTS_MD, "# Agents v2\n\nDifferent content.", "utf8");
+      loader.invalidateCache(TEST_DIR);
+      const manifest2 = await loader.load(TEST_DIR);
+
+      // Old receipt should NOT cover new manifest
+      const hasCoverage = store.hasValidReceipt(sessionId, manifest2);
+      assert.strictEqual(hasCoverage, false);
+    });
+  });
+
+  // --- Trust Evaluation Tests ---
+  describe("Trust evaluation", () => {
+    it("should evaluate trust appropriately", async () => {
+      // Create a .git directory (indicates repository)
+      mkdirSync(join(TEST_DIR, ".git"), { recursive: true });
+
+      const loader = new PolicyLoader({
+        harnessRulesPath: new URL(`file://${AGENTS_MD}`),
+      });
+
+      const manifest = await loader.load(TEST_DIR);
+
+      // Trust should be evaluated
+      assert.ok(["trusted", "untrusted", "unknown"].includes(manifest.trust));
+
+      // Clean up
+      rmSync(join(TEST_DIR, ".git"), { recursive: true, force: true });
+    });
+  });
+
+  // --- Compaction Recovery Tests ---
+  describe("Compaction recovery", () => {
+    it("should invalidate receipts on session_compact event", async () => {
+      const store = getPolicyStore();
+      const sessionId = "session-compact-" + randomUUID().slice(0, 8);
+
+      writeFileSync(AGENTS_MD, "# Agents\n\nContent.", "utf8");
+
+      const loader = new PolicyLoader({
+        harnessRulesPath: new URL(`file://${AGENTS_MD}`),
+      });
+
+      const manifest = await loader.load(TEST_DIR);
+      store.noteDelivered(sessionId, manifest, "system_prompt");
+
+      // Simulate compaction: invalidate all
+      store.invalidateAll();
+
+      // Receipt should be gone
+      const receipt = store.getReceipt(sessionId, TEST_DIR);
+      assert.strictEqual(receipt, null);
+    });
+  });
+
+  // --- Nested Scope Tests ---
+  describe("Nested scope resolution", () => {
+    it("should load scoped rules for subdirectories", async () => {
+      // Create nested structure
+      mkdirSync(join(TEST_DIR, "packages", "my-pkg"), { recursive: true });
+      writeFileSync(AGENTS_MD, "# Root Agents\n\nRoot rules.", "utf8");
+      writeFileSync(join(TEST_DIR, "packages", "AGENTS.md"), "# Package Agents\n\nPackage rules.", "utf8");
+
+      const loader = new PolicyLoader({
+        harnessRulesPath: new URL(`file://${AGENTS_MD}`),
+      });
+
+      const manifest = await loader.load(TEST_DIR);
+
+      // Should have both root and package rules
+      assert.ok(manifest.sources.length >= 2, "Should include both root and package rules");
+
+      // Clean up nested structure
+      rmSync(join(TEST_DIR, "packages"), { recursive: true, force: true });
+    });
+  });
+
+  // --- Delivery Deduplication Tests ---
+  describe("Delivery deduplication", () => {
+    it("should not create duplicate receipts in same session", async () => {
+      const store = getPolicyStore();
+      const sessionId = "session-dedup-" + randomUUID().slice(0, 8);
+
+      writeFileSync(AGENTS_MD, "# Agents\n\nContent.", "utf8");
+
+      const loader = new PolicyLoader({
+        harnessRulesPath: new URL(`file://${AGENTS_MD}`),
+      });
+
+      const manifest = await loader.load(TEST_DIR);
+
+      // First delivery
+      const receipt1 = store.noteDelivered(sessionId, manifest, "system_prompt");
+
+      // Second delivery should update, not create duplicate
+      const receipt2 = store.noteDelivered(sessionId, manifest, "system_prompt");
+
+      // Should be same session
+      assert.strictEqual(receipt1.sessionId, receipt2.sessionId);
+
+      // Should have same revision
+      assert.strictEqual(receipt1.revision, receipt2.revision);
+    });
+  });
+
+  // --- Partial Read Tracking Tests ---
+  describe("Partial read tracking", () => {
+    it("should track which sections were actually delivered", async () => {
+      const store = getPolicyStore();
+      const sessionId = "session-partial-" + randomUUID().slice(0, 8);
+
+      writeFileSync(AGENTS_MD, "# Agents\n\n## Section 1\n\nContent 1.\n\n## Section 2\n\nContent 2.", "utf8");
+
+      const loader = new PolicyLoader({
+        harnessRulesPath: new URL(`file://${AGENTS_MD}`),
+      });
+
+      const manifest = await loader.load(TEST_DIR);
+
+      // Note partial delivery (only section 1)
+      const receipt = store.noteDelivered(sessionId, manifest, "tool", ["section-1"]);
+
+      assert.deepStrictEqual(receipt.sectionsDelivered, ["section-1"]);
+    });
+  });
+});

package/packages/architecture-generator/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/architecture-generator",
-  "version": "1.1.320",
+  "version": "1.1.321",
   "description": "Generate ADR and Mermaid diagrams from project analysis",
   "type": "module",
   "main": "./dist/index.js",

package/packages/auth/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/auth",
-  "version": "1.1.320",
+  "version": "1.1.321",
   "description": "pi-harness-runtime — auth",
   "type": "module",
   "main": "./dist/index.js",

package/packages/autonomous-refactor/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/autonomous-refactor",
-  "version": "1.1.320",
+  "version": "1.1.321",
   "type": "module",
   "description": "Autonomous refactoring engine",
   "main": "dist/index.js",

package/packages/autonomous-runtime/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/autonomous-runtime",
-  "version": "1.1.320",
+  "version": "1.1.321",
   "description": "Autonomous Operations Runtime — task inbox, lease management, and worker lifecycle (RFC-0101)",
   "type": "module",
   "main": "./dist/index.js",

package/packages/cache-strategy/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/cache-strategy",
-  "version": "1.1.320",
+  "version": "1.1.321",
   "type": "module",
   "description": "Smart caching with TTL and invalidation strategies (RFC-0022)",
   "main": "dist/index.js",

package/packages/capability-registry/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/capability-registry",
-  "version": "1.1.320",
+  "version": "1.1.321",
   "description": "Capability Registry for pi-harness-runtime — tracks model capabilities and enables capability-based routing",
   "type": "module",
   "main": "./dist/index.js",

package/packages/checkpoint/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/checkpoint",
-  "version": "1.1.320",
+  "version": "1.1.321",
   "description": "Enhanced checkpoint system with incremental snapshots, diff-based storage, and recovery strategies",
   "type": "module",
   "main": "./dist/index.js",

package/packages/cli-plugin-sdk/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/cli-plugin-sdk",
-  "version": "1.1.320",
+  "version": "1.1.321",
   "type": "module",
   "description": "CLI Plugin SDK for pi-harness — install, list, remove, update, invoke plugins",
   "main": "dist/index.js",

package/packages/clipboard/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/clipboard",
-  "version": "1.1.320",
+  "version": "1.1.321",
   "type": "module",
   "main": "src/index.ts",
   "exports": {

package/packages/clipboard-plugin/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/clipboard-plugin",
-  "version": "1.1.320",
+  "version": "1.1.321",
   "type": "module",
   "main": "src/index.ts",
   "exports": {

package/packages/code-generation/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/code-generation",
-  "version": "1.1.320",
+  "version": "1.1.321",
   "description": "Code generation pipeline for pi-harness-runtime",
   "type": "module",
   "main": "./dist/index.js",

package/packages/code-review/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/code-review",
-  "version": "1.1.320",
+  "version": "1.1.321",
   "description": "Automated code review engine for pi-harness-runtime",
   "type": "module",
   "main": "./dist/index.js",

package/packages/codex-adapter/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/codex-adapter",
-  "version": "1.1.320",
+  "version": "1.1.321",
   "type": "module",
   "description": "OpenAI Codex provider adapter for pi-harness",
   "main": "dist/index.js",

package/packages/codex-watcher/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/codex-watcher",
-  "version": "1.1.320",
+  "version": "1.1.321",
   "description": "Watches Codex CLI sessions and emits visible messages for PING-PONG monitoring",
   "type": "module",
   "main": "./dist/src/index.js",

package/packages/config-capture/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@moocoding/config-capture",
-  "version": "1.1.320",
+  "version": "1.1.321",
   "description": "Auto-capture API-fetched configuration values to AGENTS.md",
   "type": "module",
   "main": "src/index.ts",

package/packages/context-compiler/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/context-compiler",
-  "version": "1.1.320",
+  "version": "1.1.321",
   "description": "Bounded context selection engine for pi-harness-runtime",
   "type": "module",
   "main": "./dist/index.js",

package/packages/context-discovery/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/context-discovery",
-  "version": "1.1.320",
+  "version": "1.1.321",
   "type": "module",
   "main": "src/index.ts",
   "exports": {

package/packages/context-manager/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/context-manager",
-  "version": "1.1.320",
+  "version": "1.1.321",
   "description": "Context Window Manager — prevents model context overflow via compaction and resume prompts (RFC-0010)",
   "type": "module",
   "main": "./dist/index.js",

package/packages/cookie-sanitizer/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/cookie-sanitizer",
-  "version": "1.1.320",
+  "version": "1.1.321",
   "description": "pi-harness-runtime — cookie sanitizer (provider-quota cookie file normaliser)",
   "type": "module",
   "main": "./dist/index.js",

package/packages/cost-optimizer/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/cost-optimizer",
-  "version": "1.1.320",
+  "version": "1.1.321",
   "description": "Cost Optimizer for pi-harness-runtime — budget tracking, forecasting, and model selection optimization",
   "type": "module",
   "main": "./dist/index.js",

package/packages/dependency-analyzer/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/dependency-analyzer",
-  "version": "1.1.320",
+  "version": "1.1.321",
   "type": "module",
   "main": "src/index.ts",
   "exports": {

package/packages/django-plugin/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/django-plugin",
-  "version": "1.1.320",
+  "version": "1.1.321",
   "description": "Django framework analysis — models, management commands, settings",
   "type": "module",
   "main": "./dist/index.js",

package/packages/doc-generator/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/doc-generator",
-  "version": "1.1.320",
+  "version": "1.1.321",
   "description": "Auto-Doc Generator — generate documentation from source code (RFC-0014)",
   "type": "module",
   "main": "./dist/index.js",

package/packages/durable-review/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@moocoding/durable-review",
-  "version": "1.1.320",
+  "version": "1.1.321",
   "description": "SQLite-backed durable reviewer using @earendil-works/pi-durable",
   "type": "module",
   "main": "src/index.ts",

package/packages/e2e-tester/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/e2e-tester",
-  "version": "1.1.320",
+  "version": "1.1.321",
   "description": "WebMCP-powered E2E testing for pi-harness - natural language test scenarios",
   "type": "module",
   "main": "./dist/index.js",

package/packages/evaluation-engine/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/evaluation-engine",
-  "version": "1.1.320",
+  "version": "1.1.321",
   "description": "Evaluation engine for pi-harness runtime (RFC-0057)",
   "type": "module",
   "main": "./dist/index.js",

package/packages/evaluation-runner/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/evaluation-runner",
-  "version": "1.1.320",
+  "version": "1.1.321",
   "type": "module",
   "description": "Framework-agnostic evaluation framework for AI outputs (RFC-0020)",
   "main": "dist/index.js",

package/packages/event-bus/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/event-bus",
-  "version": "1.1.320",
+  "version": "1.1.321",
   "type": "module",
   "main": "src/index.ts",
   "exports": {

package/packages/event-store/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/event-store",
-  "version": "1.1.320",
+  "version": "1.1.321",
   "type": "module",
   "main": "src/index.ts",
   "exports": {

package/packages/experience-replay/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/experience-replay",
-  "version": "1.1.320",
+  "version": "1.1.321",
   "description": "Experience replay for debugging and reproducibility (RFC-0059)",
   "type": "module",
   "main": "./dist/index.js",

package/packages/feedback-collector/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/feedback-collector",
-  "version": "1.1.320",
+  "version": "1.1.321",
   "type": "module",
   "description": "Collect and aggregate human/automated feedback (RFC-0021)",
   "main": "dist/index.js",

package/packages/file-copy-helper/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@moocoding/file-copy-helper",
-  "version": "1.1.320",
+  "version": "1.1.321",
   "description": "Injects cp/sudo cp rule when user asks to mimic/copy files",
   "type": "module",
   "main": "dist/index.js",

package/packages/framework-detector/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/framework-detector",
-  "version": "1.1.320",
+  "version": "1.1.321",
   "description": "Framework detection system for pi-harness-runtime",
   "type": "module",
   "main": "./dist/index.js",

package/packages/framework-plugin-sdk/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/framework-plugin-sdk",
-  "version": "1.1.320",
+  "version": "1.1.321",
   "description": "Framework plugin SDK for pi-harness-runtime",
   "type": "module",
   "main": "./dist/index.js",

package/packages/frappe-plugin/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/frappe-plugin",
-  "version": "1.1.320",
+  "version": "1.1.321",
   "description": "Frappe/ERPNext framework analysis — DocTypes, hooks, bench sites, site config",
   "type": "module",
   "main": "./dist/index.js",

package/packages/generic-web-plugin/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/generic-web-plugin",
-  "version": "1.1.320",
+  "version": "1.1.321",
   "description": "Generic web framework analysis — REST/GraphQL endpoints, OpenAPI, auth",
   "type": "module",
   "main": "./dist/index.js",

package/packages/health-monitor/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/health-monitor",
-  "version": "1.1.320",
+  "version": "1.1.321",
   "type": "module",
   "description": "Health monitoring and auto-healing",
   "main": "dist/index.js",

package/packages/intent-analyzer/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/intent-analyzer",
-  "version": "1.1.320",
+  "version": "1.1.321",
   "type": "module",
   "main": "src/index.ts",
   "exports": {