promptspeak-mcp-server 0.1.0

package/dist/operator/index.js

@@ -0,0 +1,207 @@
+/**
+ * Operator Control Plane
+ *
+ * Provides hidden knobs for controlling gatekeeper behavior.
+ * These controls are meant for operators, not end users.
+ */
+export { OperatorConfigManager, operatorConfig } from './config.js';
+import { operatorConfig } from './config.js';
+export function ps_config_set(request) {
+    try {
+        operatorConfig.registerOverlay(request.overlay);
+        return {
+            success: true,
+            overlayId: request.overlayId,
+            message: `Overlay '${request.overlayId}' registered successfully`
+        };
+    }
+    catch (error) {
+        return {
+            success: false,
+            overlayId: request.overlayId,
+            message: `Failed to register overlay: ${error}`
+        };
+    }
+}
+export function ps_config_activate(request) {
+    const current = operatorConfig.getActiveOverlay();
+    const previousId = current?.overlayId ?? null;
+    const success = operatorConfig.setActiveOverlay(request.overlayId);
+    return {
+        success,
+        overlayId: request.overlayId,
+        previousOverlay: previousId,
+        message: success
+            ? `Activated overlay '${request.overlayId}'`
+            : `Overlay '${request.overlayId}' not found`
+    };
+}
+export function ps_config_get() {
+    return {
+        activeOverlay: operatorConfig.getActiveOverlay(),
+        registeredOverlays: operatorConfig.listOverlays(),
+        thresholds: operatorConfig.getThresholds(),
+        featureFlags: operatorConfig.getFeatureFlags()
+    };
+}
+export function ps_config_export() {
+    const exportData = operatorConfig.export();
+    const dataString = JSON.stringify(exportData);
+    // Simple checksum for integrity
+    let checksum = 0;
+    for (let i = 0; i < dataString.length; i++) {
+        checksum = ((checksum << 5) - checksum + dataString.charCodeAt(i)) | 0;
+    }
+    return {
+        success: true,
+        data: dataString,
+        checksum: checksum.toString(16)
+    };
+}
+export function ps_config_import(request) {
+    try {
+        // Verify checksum if provided
+        if (request.expectedChecksum) {
+            let checksum = 0;
+            for (let i = 0; i < request.data.length; i++) {
+                checksum = ((checksum << 5) - checksum + request.data.charCodeAt(i)) | 0;
+            }
+            if (checksum.toString(16) !== request.expectedChecksum) {
+                return {
+                    success: false,
+                    message: 'Checksum mismatch - data may be corrupted',
+                    overlaysLoaded: 0
+                };
+            }
+        }
+        const parsedData = JSON.parse(request.data);
+        operatorConfig.import(parsedData);
+        const overlays = operatorConfig.listOverlays();
+        return {
+            success: true,
+            message: 'Configuration imported successfully',
+            overlaysLoaded: overlays.length
+        };
+    }
+    catch (error) {
+        return {
+            success: false,
+            message: `Import failed: ${error}`,
+            overlaysLoaded: 0
+        };
+    }
+}
+export function ps_confidence_set(request) {
+    const thresholds = operatorConfig.getThresholds();
+    const previousValue = thresholds[request.threshold];
+    // Validate range
+    if (request.value < 0 || request.value > 1) {
+        return {
+            success: false,
+            threshold: request.threshold,
+            previousValue,
+            newValue: previousValue,
+            message: 'Value must be between 0 and 1'
+        };
+    }
+    operatorConfig.setThreshold(request.threshold, request.value);
+    return {
+        success: true,
+        threshold: request.threshold,
+        previousValue,
+        newValue: request.value,
+        message: `Threshold '${request.threshold}' updated: ${previousValue} → ${request.value}`
+    };
+}
+export function ps_confidence_get() {
+    return {
+        thresholds: operatorConfig.getThresholds(),
+        descriptions: {
+            parseConfidence: 'Minimum confidence for frame parsing (0-1)',
+            coverageConfidence: 'Minimum coverage of action by frame (0-1)',
+            chainConfidence: 'Minimum trust in delegation chain (0-1)',
+            driftThreshold: 'Maximum allowed drift before alert (0-1)',
+            tripwireThreshold: 'Maximum tripwire failure rate (0-1)'
+        }
+    };
+}
+export function ps_confidence_bulk_set(request) {
+    const updated = [];
+    const failed = [];
+    for (const [key, value] of Object.entries(request.thresholds)) {
+        if (value === undefined)
+            continue;
+        if (value < 0 || value > 1) {
+            failed.push(`${key}: value out of range`);
+            continue;
+        }
+        operatorConfig.setThreshold(key, value);
+        updated.push(key);
+    }
+    return {
+        success: failed.length === 0,
+        updated,
+        failed,
+        message: failed.length === 0
+            ? `Updated ${updated.length} thresholds`
+            : `Updated ${updated.length}, failed ${failed.length}`
+    };
+}
+export function ps_feature_set(request) {
+    const flags = operatorConfig.getFeatureFlags();
+    const flagKey = request.flag;
+    const previousValue = flags[flagKey] ?? false;
+    // Use specific setters based on flag name
+    switch (request.flag) {
+        case 'circuitBreakerEnabled':
+            operatorConfig.setCircuitBreakerEnabled(request.enabled);
+            break;
+        case 'tripwireEnabled':
+            operatorConfig.setTripwireEnabled(request.enabled);
+            break;
+        case 'auditLogEnabled':
+            operatorConfig.setAuditLogEnabled(request.enabled);
+            break;
+        default:
+            return {
+                success: false,
+                flag: request.flag,
+                previousValue,
+                newValue: previousValue
+            };
+    }
+    return {
+        success: true,
+        flag: request.flag,
+        previousValue,
+        newValue: request.enabled
+    };
+}
+export function ps_feature_get() {
+    return operatorConfig.getFeatureFlags();
+}
+const auditLog = [];
+export function recordAudit(action, actor, details) {
+    auditLog.push({
+        timestamp: Date.now(),
+        action,
+        actor,
+        details
+    });
+    // Keep last 1000 entries
+    if (auditLog.length > 1000) {
+        auditLog.shift();
+    }
+}
+export function ps_audit_get(request = {}) {
+    let results = auditLog;
+    if (request.since) {
+        results = results.filter(e => e.timestamp >= request.since);
+    }
+    if (request.action) {
+        results = results.filter(e => e.action === request.action);
+    }
+    const limit = request.limit ?? 100;
+    return results.slice(-limit);
+}
+//# sourceMappingURL=index.js.map

package/dist/operator/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/operator/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,qBAAqB,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAEpE,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAuB7C,MAAM,UAAU,aAAa,CAAC,OAAyB;IACrD,IAAI,CAAC;QACH,cAAc,CAAC,eAAe,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAChD,OAAO;YACL,OAAO,EAAE,IAAI;YACb,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,OAAO,EAAE,YAAY,OAAO,CAAC,SAAS,2BAA2B;SAClE,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,OAAO,EAAE,KAAK;YACd,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,OAAO,EAAE,+BAA+B,KAAK,EAAE;SAChD,CAAC;IACJ,CAAC;AACH,CAAC;AAaD,MAAM,UAAU,kBAAkB,CAAC,OAA8B;IAC/D,MAAM,OAAO,GAAG,cAAc,CAAC,gBAAgB,EAAE,CAAC;IAClD,MAAM,UAAU,GAAG,OAAO,EAAE,SAAS,IAAI,IAAI,CAAC;IAE9C,MAAM,OAAO,GAAG,cAAc,CAAC,gBAAgB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAEnE,OAAO;QACL,OAAO;QACP,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,eAAe,EAAE,UAAU;QAC3B,OAAO,EAAE,OAAO;YACd,CAAC,CAAC,sBAAsB,OAAO,CAAC,SAAS,GAAG;YAC5C,CAAC,CAAC,YAAY,OAAO,CAAC,SAAS,aAAa;KAC/C,CAAC;AACJ,CAAC;AASD,MAAM,UAAU,aAAa;IAC3B,OAAO;QACL,aAAa,EAAE,cAAc,CAAC,gBAAgB,EAAE;QAChD,kBAAkB,EAAE,cAAc,CAAC,YAAY,EAAE;QACjD,UAAU,EAAE,cAAc,CAAC,aAAa,EAAE;QAC1C,YAAY,EAAE,cAAc,CAAC,eAAe,EAAE;KAC/C,CAAC;AACJ,CAAC;AAQD,MAAM,UAAU,gBAAgB;IAC9B,MAAM,UAAU,GAAG,cAAc,CAAC,MAAM,EAAE,CAAC;IAC3C,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IAE9C,gCAAgC;IAChC,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3C,QAAQ,GAAG,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,GAAG,QAAQ,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACzE,CAAC;IAED,OAAO;QACL,OAAO,EAAE,IAAI;QACb,IAAI,EAAE,UAAU;QAChB,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;KAChC,CAAC;AACJ,CAAC;AAaD,MAAM,UAAU,gBAAgB,CAAC,OAA4B;IAC3D,IAAI,CAAC;QACH,8BAA8B;QAC9B,IAAI,OAAO,CAAC,gBAAgB,EAAE,CAAC;YAC7B,IAAI,QAAQ,GAAG,CAAC,CAAC;YACjB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC7C,QAAQ,GAAG,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,GAAG,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YAC3E,CAAC;YACD,IAAI,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,KAAK,OAAO,CAAC,gBAAgB,EAAE,CAAC;gBACvD,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,OAAO,EAAE,2CAA2C;oBACpD,cAAc,EAAE,CAAC;iBAClB,CAAC;YACJ,CAAC;QACH,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC5C,cAAc,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAClC,MAAM,QAAQ,GAAG,cAAc,CAAC,YAAY,EAAE,CAAC;QAE/C,OAAO;YACL,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,qCAAqC;YAC9C,cAAc,EAAE,QAAQ,CAAC,MAAM;SAChC,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,OAAO,EAAE,KAAK;YACd,OAAO,EAAE,kBAAkB,KAAK,EAAE;YAClC,cAAc,EAAE,CAAC;SAClB,CAAC;IACJ,CAAC;AACH,CAAC;AAmBD,MAAM,UAAU,iBAAiB,CAAC,OAA6B;IAC7D,MAAM,UAAU,GAAG,cAAc,CAAC,aAAa,EAAE,CAAC;IAClD,MAAM,aAAa,GAAG,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAEpD,iBAAiB;IACjB,IAAI,OAAO,CAAC,KAAK,GAAG,CAAC,IAAI,OAAO,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;QAC3C,OAAO;YACL,OAAO,EAAE,KAAK;YACd,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,aAAa;YACb,QAAQ,EAAE,aAAa;YACvB,OAAO,EAAE,+BAA+B;SACzC,CAAC;IACJ,CAAC;IAED,cAAc,CAAC,YAAY,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAE9D,OAAO;QACL,OAAO,EAAE,IAAI;QACb,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,aAAa;QACb,QAAQ,EAAE,OAAO,CAAC,KAAK;QACvB,OAAO,EAAE,cAAc,OAAO,CAAC,SAAS,cAAc,aAAa,MAAM,OAAO,CAAC,KAAK,EAAE;KACzF,CAAC;AACJ,CAAC;AAOD,MAAM,UAAU,iBAAiB;IAC/B,OAAO;QACL,UAAU,EAAE,cAAc,CAAC,aAAa,EAAE;QAC1C,YAAY,EAAE;YACZ,eAAe,EAAE,4CAA4C;YAC7D,kBAAkB,EAAE,2CAA2C;YAC/D,eAAe,EAAE,yCAAyC;YAC1D,cAAc,EAAE,0CAA0C;YAC1D,iBAAiB,EAAE,qCAAqC;SACzD;KACF,CAAC;AACJ,CAAC;AAaD,MAAM,UAAU,sBAAsB,CAAC,OAAiC;IACtE,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9D,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAElC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YAC3B,MAAM,CAAC,IAAI,CAAC,GAAG,GAAG,sBAAsB,CAAC,CAAC;YAC1C,SAAS;QACX,CAAC;QAED,cAAc,CAAC,YAAY,CAAC,GAAiC,EAAE,KAAK,CAAC,CAAC;QACtE,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACpB,CAAC;IAED,OAAO;QACL,OAAO,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;QAC5B,OAAO;QACP,MAAM;QACN,OAAO,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;YAC1B,CAAC,CAAC,WAAW,OAAO,CAAC,MAAM,aAAa;YACxC,CAAC,CAAC,WAAW,OAAO,CAAC,MAAM,YAAY,MAAM,CAAC,MAAM,EAAE;KACzD,CAAC;AACJ,CAAC;AAkBD,MAAM,UAAU,cAAc,CAAC,OAA8B;IAC3D,MAAM,KAAK,GAAG,cAAc,CAAC,eAAe,EAAE,CAAC;IAC/C,MAAM,OAAO,GAAG,OAAO,CAAC,IAA0B,CAAC;IACnD,MAAM,aAAa,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC;IAE9C,0CAA0C;IAC1C,QAAQ,OAAO,CAAC,IAAI,EAAE,CAAC;QACrB,KAAK,uBAAuB;YAC1B,cAAc,CAAC,wBAAwB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YACzD,MAAM;QACR,KAAK,iBAAiB;YACpB,cAAc,CAAC,kBAAkB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YACnD,MAAM;QACR,KAAK,iBAAiB;YACpB,cAAc,CAAC,kBAAkB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YACnD,MAAM;QACR;YACE,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,aAAa;gBACb,QAAQ,EAAE,aAAa;aACxB,CAAC;IACN,CAAC;IAED,OAAO;QACL,OAAO,EAAE,IAAI;QACb,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,aAAa;QACb,QAAQ,EAAE,OAAO,CAAC,OAAO;KAC1B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,OAAO,cAAc,CAAC,eAAe,EAAE,CAAC;AAC1C,CAAC;AAaD,MAAM,QAAQ,GAAoB,EAAE,CAAC;AAErC,MAAM,UAAU,WAAW,CAAC,MAAc,EAAE,KAAa,EAAE,OAAgC;IACzF,QAAQ,CAAC,IAAI,CAAC;QACZ,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;QACrB,MAAM;QACN,KAAK;QACL,OAAO;KACR,CAAC,CAAC;IAEH,yBAAyB;IACzB,IAAI,QAAQ,CAAC,MAAM,GAAG,IAAI,EAAE,CAAC;QAC3B,QAAQ,CAAC,KAAK,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AAQD,MAAM,UAAU,YAAY,CAAC,UAA2B,EAAE;IACxD,IAAI,OAAO,GAAG,QAAQ,CAAC;IAEvB,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,IAAI,OAAO,CAAC,KAAM,CAAC,CAAC;IAC/D,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC7D,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,GAAG,CAAC;IACnC,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC;AAC/B,CAAC"}

package/dist/policies/loader.d.ts

@@ -0,0 +1,120 @@
+/**
+ * Policy Loader
+ *
+ * Loads and merges policy files from disk.
+ * Handles base policies and overlays with priority ordering.
+ */
+import type { PolicyOverlay, ConfidenceThresholds } from '../types/index.js';
+export interface PolicyFile {
+    id: string;
+    name: string;
+    version: string;
+    description: string;
+    created: string;
+    priority: number;
+    extends?: string;
+    classification?: string;
+    symbol_overrides?: Record<string, SymbolOverride>;
+    tool_bindings?: ToolBindings;
+    thresholds?: Partial<ConfidenceThresholds>;
+    enforcement?: EnforcementConfig;
+    drift_detection?: DriftDetectionConfig;
+    features?: Record<string, boolean>;
+    extensions?: Record<string, unknown>;
+    decoy_responses?: DecoyConfig;
+    ontology?: Record<string, Record<string, unknown>>;
+    validation_rules?: Record<string, unknown>;
+}
+export interface SymbolOverride {
+    name?: string;
+    description?: string;
+    blocked?: boolean;
+    replacement?: string;
+    enforcement?: string;
+    allow_execution?: boolean;
+    sandbox?: boolean;
+    silent_transforms?: boolean;
+    original_meaning_suppressed?: boolean;
+    pre_execution_hook?: string;
+    post_execution_hook?: string;
+}
+export interface ToolBindings {
+    allowed?: string[];
+    blocked?: string[];
+    require_approval?: string[];
+    default_allowed?: string[];
+    default_blocked?: string[];
+    domain_specific?: Record<string, {
+        allowed?: string[];
+        blocked?: string[];
+    }>;
+    transform_outputs?: {
+        enabled: boolean;
+        transforms: Array<{
+            type: string;
+            [key: string]: unknown;
+        }>;
+    };
+}
+export interface EnforcementConfig {
+    audit_all_operations?: boolean;
+    audit_encrypted?: boolean;
+    audit_destination?: string;
+    require_explicit_mode?: boolean;
+    block_unknown_symbols?: boolean;
+    require_domain?: boolean;
+    max_delegation_depth?: number;
+    max_concurrent_agents?: number;
+    compartmentalization?: {
+        enabled: boolean;
+        need_to_know?: boolean;
+        agent_isolation?: boolean;
+    };
+}
+export interface DriftDetectionConfig {
+    check_frequency_ms?: number;
+    tripwire_frequency?: number;
+    circuit_breaker_threshold?: number;
+    auto_halt_on_drift?: boolean;
+    silent_tripwires?: boolean;
+    behavior_profiling?: boolean;
+}
+export interface DecoyConfig {
+    enabled: boolean;
+    trigger_on: string[];
+    response_type: string;
+    log_decoy_usage?: boolean;
+}
+export declare class PolicyLoader {
+    private basePoliciesDir;
+    private overlaysDir;
+    private loadedPolicies;
+    constructor(policiesRoot: string);
+    /**
+     * Load all policies from disk
+     */
+    loadAll(): void;
+    private loadDirectory;
+    /**
+     * Get a specific policy by ID
+     */
+    getPolicy(id: string): PolicyFile | undefined;
+    /**
+     * List all loaded policy IDs
+     */
+    listPolicies(): string[];
+    /**
+     * Get merged policy with inheritance resolved
+     */
+    getMergedPolicy(id: string): PolicyFile | undefined;
+    private mergePolicies;
+    private mergeToolBindings;
+    /**
+     * Convert policy to PolicyOverlay format
+     */
+    toPolicyOverlay(id: string): PolicyOverlay | undefined;
+    private convertSymbolOverrides;
+}
+export declare function initializePolicyLoader(policiesRoot: string): PolicyLoader;
+export declare function getPolicyLoader(): PolicyLoader;
+//# sourceMappingURL=loader.d.ts.map

package/dist/policies/loader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"loader.d.ts","sourceRoot":"","sources":["../../src/policies/loader.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,KAAK,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAS7E,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAClD,aAAa,CAAC,EAAE,YAAY,CAAC;IAC7B,UAAU,CAAC,EAAE,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAC3C,WAAW,CAAC,EAAE,iBAAiB,CAAC;IAChC,eAAe,CAAC,EAAE,oBAAoB,CAAC;IACvC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,eAAe,CAAC,EAAE,WAAW,CAAC;IAC9B,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACnD,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC5C;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,2BAA2B,CAAC,EAAE,OAAO,CAAC;IACtC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,YAAY;IAC3B,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAC;IAC7E,iBAAiB,CAAC,EAAE;QAClB,OAAO,EAAE,OAAO,CAAC;QACjB,UAAU,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;SAAE,CAAC,CAAC;KAC7D,CAAC;CACH;AAED,MAAM,WAAW,iBAAiB;IAChC,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,oBAAoB,CAAC,EAAE;QACrB,OAAO,EAAE,OAAO,CAAC;QACjB,YAAY,CAAC,EAAE,OAAO,CAAC;QACvB,eAAe,CAAC,EAAE,OAAO,CAAC;KAC3B,CAAC;CACH;AAED,MAAM,WAAW,oBAAoB;IACnC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAMD,qBAAa,YAAY;IACvB,OAAO,CAAC,eAAe,CAAS;IAChC,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,cAAc,CAAsC;gBAEhD,YAAY,EAAE,MAAM;IAKhC;;OAEG;IACH,OAAO,IAAI,IAAI;IAcf,OAAO,CAAC,aAAa;IAgBrB;;OAEG;IACH,SAAS,CAAC,EAAE,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS;IAI7C;;OAEG;IACH,YAAY,IAAI,MAAM,EAAE;IAIxB;;OAEG;IACH,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS;IAmBnD,OAAO,CAAC,aAAa;IAiCrB,OAAO,CAAC,iBAAiB;IAsBzB;;OAEG;IACH,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS;IA2BtD,OAAO,CAAC,sBAAsB;CAe/B;AAQD,wBAAgB,sBAAsB,CAAC,YAAY,EAAE,MAAM,GAAG,YAAY,CAIzE;AAED,wBAAgB,eAAe,IAAI,YAAY,CAK9C"}

package/dist/policies/loader.js

@@ -0,0 +1,193 @@
+/**
+ * Policy Loader
+ *
+ * Loads and merges policy files from disk.
+ * Handles base policies and overlays with priority ordering.
+ */
+import * as fs from 'fs';
+import * as path from 'path';
+import { createLogger } from '../core/logging/index.js';
+const logger = createLogger('PolicyLoader');
+// ============================================================================
+// POLICY LOADER
+// ============================================================================
+export class PolicyLoader {
+    basePoliciesDir;
+    overlaysDir;
+    loadedPolicies = new Map();
+    constructor(policiesRoot) {
+        this.basePoliciesDir = path.join(policiesRoot, 'base');
+        this.overlaysDir = path.join(policiesRoot, 'overlays');
+    }
+    /**
+     * Load all policies from disk
+     */
+    loadAll() {
+        this.loadedPolicies.clear();
+        // Load base policies
+        if (fs.existsSync(this.basePoliciesDir)) {
+            this.loadDirectory(this.basePoliciesDir);
+        }
+        // Load overlays
+        if (fs.existsSync(this.overlaysDir)) {
+            this.loadDirectory(this.overlaysDir);
+        }
+    }
+    loadDirectory(dir) {
+        const files = fs.readdirSync(dir);
+        for (const file of files) {
+            if (file.endsWith('.json')) {
+                const filePath = path.join(dir, file);
+                try {
+                    const content = fs.readFileSync(filePath, 'utf-8');
+                    const policy = JSON.parse(content);
+                    this.loadedPolicies.set(policy.id, policy);
+                }
+                catch (error) {
+                    logger.error(`Failed to load policy ${filePath}`, error instanceof Error ? error : undefined);
+                }
+            }
+        }
+    }
+    /**
+     * Get a specific policy by ID
+     */
+    getPolicy(id) {
+        return this.loadedPolicies.get(id);
+    }
+    /**
+     * List all loaded policy IDs
+     */
+    listPolicies() {
+        return Array.from(this.loadedPolicies.keys());
+    }
+    /**
+     * Get merged policy with inheritance resolved
+     */
+    getMergedPolicy(id) {
+        const policy = this.loadedPolicies.get(id);
+        if (!policy)
+            return undefined;
+        if (!policy.extends) {
+            return policy;
+        }
+        // Recursively get parent
+        const parent = this.getMergedPolicy(policy.extends);
+        if (!parent) {
+            logger.warn(`Policy ${id} extends ${policy.extends} but parent not found`);
+            return policy;
+        }
+        // Merge with parent
+        return this.mergePolicies(parent, policy);
+    }
+    mergePolicies(parent, child) {
+        return {
+            ...parent,
+            ...child,
+            // Merge nested objects
+            symbol_overrides: {
+                ...parent.symbol_overrides,
+                ...child.symbol_overrides
+            },
+            tool_bindings: this.mergeToolBindings(parent.tool_bindings, child.tool_bindings),
+            thresholds: {
+                ...parent.thresholds,
+                ...child.thresholds
+            },
+            enforcement: {
+                ...parent.enforcement,
+                ...child.enforcement
+            },
+            drift_detection: {
+                ...parent.drift_detection,
+                ...child.drift_detection
+            },
+            features: {
+                ...parent.features,
+                ...child.features
+            },
+            extensions: {
+                ...parent.extensions,
+                ...child.extensions
+            }
+        };
+    }
+    mergeToolBindings(parent, child) {
+        if (!parent && !child)
+            return undefined;
+        if (!parent)
+            return child;
+        if (!child)
+            return parent;
+        return {
+            allowed: [...(child.allowed ?? parent.allowed ?? [])],
+            blocked: [...(parent.blocked ?? []), ...(child.blocked ?? [])],
+            require_approval: [...(parent.require_approval ?? []), ...(child.require_approval ?? [])],
+            default_allowed: child.default_allowed ?? parent.default_allowed,
+            default_blocked: [...(parent.default_blocked ?? []), ...(child.default_blocked ?? [])],
+            domain_specific: {
+                ...parent.domain_specific,
+                ...child.domain_specific
+            },
+            transform_outputs: child.transform_outputs ?? parent.transform_outputs
+        };
+    }
+    /**
+     * Convert policy to PolicyOverlay format
+     */
+    toPolicyOverlay(id) {
+        const policy = this.getMergedPolicy(id);
+        if (!policy)
+            return undefined;
+        return {
+            overlayId: policy.id,
+            id: policy.id, // Backward-compatible alias
+            name: policy.name,
+            description: policy.description ?? `Policy: ${policy.name}`,
+            priority: policy.priority,
+            symbolOverrides: this.convertSymbolOverrides(policy.symbol_overrides),
+            toolBindings: {
+                allowed: policy.tool_bindings?.allowed ?? [],
+                blocked: policy.tool_bindings?.blocked ?? [],
+                riskOverrides: {}
+            },
+            thresholdOverrides: policy.thresholds,
+            extensions: {
+                enforcement: policy.enforcement,
+                driftDetection: policy.drift_detection,
+                decoyResponses: policy.decoy_responses,
+                features: policy.features,
+                ...policy.extensions
+            }
+        };
+    }
+    convertSymbolOverrides(overrides) {
+        if (!overrides)
+            return {};
+        const result = {};
+        for (const [symbol, override] of Object.entries(overrides)) {
+            result[symbol] = {
+                meaning: override.description,
+                blocked: override.blocked,
+                replacement: override.replacement
+            };
+        }
+        return result;
+    }
+}
+// ============================================================================
+// SINGLETON INSTANCE
+// ============================================================================
+let policyLoader = null;
+export function initializePolicyLoader(policiesRoot) {
+    policyLoader = new PolicyLoader(policiesRoot);
+    policyLoader.loadAll();
+    return policyLoader;
+}
+export function getPolicyLoader() {
+    if (!policyLoader) {
+        throw new Error('PolicyLoader not initialized. Call initializePolicyLoader first.');
+    }
+    return policyLoader;
+}
+//# sourceMappingURL=loader.js.map

package/dist/policies/loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"loader.js","sourceRoot":"","sources":["../../src/policies/loader.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAE7B,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAExD,MAAM,MAAM,GAAG,YAAY,CAAC,cAAc,CAAC,CAAC;AAsF5C,+EAA+E;AAC/E,gBAAgB;AAChB,+EAA+E;AAE/E,MAAM,OAAO,YAAY;IACf,eAAe,CAAS;IACxB,WAAW,CAAS;IACpB,cAAc,GAA4B,IAAI,GAAG,EAAE,CAAC;IAE5D,YAAY,YAAoB;QAC9B,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QACvD,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;IACzD,CAAC;IAED;;OAEG;IACH,OAAO;QACL,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC;QAE5B,qBAAqB;QACrB,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC;YACxC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAC3C,CAAC;QAED,gBAAgB;QAChB,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;YACpC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IAEO,aAAa,CAAC,GAAW;QAC/B,MAAM,KAAK,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAClC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC3B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;gBACtC,IAAI,CAAC;oBACH,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;oBACnD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAe,CAAC;oBACjD,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;gBAC7C,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,CAAC,KAAK,CAAC,yBAAyB,QAAQ,EAAE,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;gBAChG,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,EAAU;QAClB,OAAO,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACrC,CAAC;IAED;;OAEG;IACH,YAAY;QACV,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;IAED;;OAEG;IACH,eAAe,CAAC,EAAU;QACxB,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC3C,IAAI,CAAC,MAAM;YAAE,OAAO,SAAS,CAAC;QAE9B,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,yBAAyB;QACzB,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACpD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,YAAY,MAAM,CAAC,OAAO,uBAAuB,CAAC,CAAC;YAC3E,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,oBAAoB;QACpB,OAAO,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5C,CAAC;IAEO,aAAa,CAAC,MAAkB,EAAE,KAAiB;QACzD,OAAO;YACL,GAAG,MAAM;YACT,GAAG,KAAK;YACR,uBAAuB;YACvB,gBAAgB,EAAE;gBAChB,GAAG,MAAM,CAAC,gBAAgB;gBAC1B,GAAG,KAAK,CAAC,gBAAgB;aAC1B;YACD,aAAa,EAAE,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,aAAa,EAAE,KAAK,CAAC,aAAa,CAAC;YAChF,UAAU,EAAE;gBACV,GAAG,MAAM,CAAC,UAAU;gBACpB,GAAG,KAAK,CAAC,UAAU;aACpB;YACD,WAAW,EAAE;gBACX,GAAG,MAAM,CAAC,WAAW;gBACrB,GAAG,KAAK,CAAC,WAAW;aACrB;YACD,eAAe,EAAE;gBACf,GAAG,MAAM,CAAC,eAAe;gBACzB,GAAG,KAAK,CAAC,eAAe;aACzB;YACD,QAAQ,EAAE;gBACR,GAAG,MAAM,CAAC,QAAQ;gBAClB,GAAG,KAAK,CAAC,QAAQ;aAClB;YACD,UAAU,EAAE;gBACV,GAAG,MAAM,CAAC,UAAU;gBACpB,GAAG,KAAK,CAAC,UAAU;aACpB;SACF,CAAC;IACJ,CAAC;IAEO,iBAAiB,CACvB,MAAqB,EACrB,KAAoB;QAEpB,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK;YAAE,OAAO,SAAS,CAAC;QACxC,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAC1B,IAAI,CAAC,KAAK;YAAE,OAAO,MAAM,CAAC;QAE1B,OAAO;YACL,OAAO,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;YACrD,OAAO,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;YAC9D,gBAAgB,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,gBAAgB,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC;YACzF,eAAe,EAAE,KAAK,CAAC,eAAe,IAAI,MAAM,CAAC,eAAe;YAChE,eAAe,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC;YACtF,eAAe,EAAE;gBACf,GAAG,MAAM,CAAC,eAAe;gBACzB,GAAG,KAAK,CAAC,eAAe;aACzB;YACD,iBAAiB,EAAE,KAAK,CAAC,iBAAiB,IAAI,MAAM,CAAC,iBAAiB;SACvE,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,eAAe,CAAC,EAAU;QACxB,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;QACxC,IAAI,CAAC,MAAM;YAAE,OAAO,SAAS,CAAC;QAE9B,OAAO;YACL,SAAS,EAAE,MAAM,CAAC,EAAE;YACpB,EAAE,EAAE,MAAM,CAAC,EAAE,EAAG,4BAA4B;YAC5C,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,WAAW,MAAM,CAAC,IAAI,EAAE;YAC3D,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,eAAe,EAAE,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC,gBAAgB,CAAC;YACrE,YAAY,EAAE;gBACZ,OAAO,EAAE,MAAM,CAAC,aAAa,EAAE,OAAO,IAAI,EAAE;gBAC5C,OAAO,EAAE,MAAM,CAAC,aAAa,EAAE,OAAO,IAAI,EAAE;gBAC5C,aAAa,EAAE,EAAE;aAClB;YACD,kBAAkB,EAAE,MAAM,CAAC,UAAkC;YAC7D,UAAU,EAAE;gBACV,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,cAAc,EAAE,MAAM,CAAC,eAAe;gBACtC,cAAc,EAAE,MAAM,CAAC,eAAe;gBACtC,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,GAAG,MAAM,CAAC,UAAU;aACrB;SACF,CAAC;IACJ,CAAC;IAEO,sBAAsB,CAC5B,SAA0C;QAE1C,IAAI,CAAC,SAAS;YAAE,OAAO,EAAE,CAAC;QAE1B,MAAM,MAAM,GAAkF,EAAE,CAAC;QACjG,KAAK,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YAC3D,MAAM,CAAC,MAAM,CAAC,GAAG;gBACf,OAAO,EAAE,QAAQ,CAAC,WAAW;gBAC7B,OAAO,EAAE,QAAQ,CAAC,OAAO;gBACzB,WAAW,EAAE,QAAQ,CAAC,WAAW;aAClC,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;CACF;AAED,+EAA+E;AAC/E,qBAAqB;AACrB,+EAA+E;AAE/E,IAAI,YAAY,GAAwB,IAAI,CAAC;AAE7C,MAAM,UAAU,sBAAsB,CAAC,YAAoB;IACzD,YAAY,GAAG,IAAI,YAAY,CAAC,YAAY,CAAC,CAAC;IAC9C,YAAY,CAAC,OAAO,EAAE,CAAC;IACvB,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,eAAe;IAC7B,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;IACtF,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC"}