3jmUdZddlmZddlZddlZddlmZmZmZddl m Z ddl m Z m Z mZmZdZded <d Zded <d Zded <dZded<dZded<dZded<dZded<dZded<dZded<dZded<dZded<Gdd eZefee fe!fe"fe"e#fe$fd!Z%d"ed#<dCd$Z&dDd%Z'dEd&Z(dFd'Z)ed(dGd)Z*ed( dHd*Z+eeed+ dId,Z,dJd-Z- dKd.Z.eGd/d0Z/dLd1Z0dMd2Z1 dNd3Z2d4Z3ded5<dOd6Z4 dPd7Z5ed( dQd8Z6ed( dQd9Z7 dRd:Z8eGd;d<Z9dd= dSd>Z:dd? dTd@Z;eeed+ dUdAZgetr8)value json_types r._type_okrGes}I%%Ej.E*EEH%#u.Nz%7N3NNI%&& eY]]9vi@ AAr/c |jd}t|tr:t||s.|j |d|dt |j dyd|vr%||dk7r|j |d|dd|dd|vr$||dvr|j |d|d |ddt|tr|jd }|r0tj|||j |d |d |d |jd}t|tr%t||kr|j |d|dt|ttfrSt|tsC|jd}t|ttfr||kr|j |d|dt|ttfr|jd}t|tr%t||kr|j |d|d|jd} t| tr%t|| kDr|j |d| d|jd} t| tr't!|D]\} } t#| | |d| d|t|t$r|jdixsi} |jdgxsgD]}||vs|j |d|d |jdd }|j'D]<\}}|| vrt#|| ||d!||!|d"us&|j |d#|d$>yy)%Ntypeu: type 불일치 (expected z, got )constu: const 불일치 (expected enumu : enum 밖 (z not in patternu: pattern 불일치 (z !~ /z/) minLengthz : minLength u 미만minimumz : minimum minItemsz : minItems maxItemsz : maxItems u 초과itemsr'] propertiesrequiredu: 필수 key 'u' 누락additionalPropertiesT.Fu%: additionalProperties false 인데 'u' 존재)rDr@r0rGappendrIr3researchrAlenrCrBlisttupler enumerate _validatedictrR)rEschemapatherrsjtpatmlmnmimx item_schemaiitempropsreqapkvs r.r_r_osD F B"c8E2#6 tf7t6$u+BVBVAWWXYZ&UfWo5 tf88K6RWQZZ[\] E7 tfL &.9K1MN%jj# 299S%(0 KK4& 5eYeC5K L ZZ $ b# 3u:? KK4& RD8 9%#u&z%/F ZZ " b3, 'EBJ KK4& 2$g6 7%$' ZZ # b# 3u:? KK4& B4w7 8 ZZ # b# 3u:? KK4& B4w7 8jj) k7 +$U+ C4$ vQqc^TB C%#)::lB#?#E2::j"-3 BC% tfN3%x@A BZZ. 5KKM WDAqEz!U1X$q}d;u tf$I!HUV  W r/c&g}t||d||S)uEinstance 를 draft-07 subset meta-schema 로 검증. 빈 list = PASS.$)r_)instance meta_schemarcs r.validate_against_metarvsD h S$/ Kr/c: |jd} tj|}t |tst|d||S#t$r}t|d|d||d}~wwxYw#tj $r}t|d|d||d}~wwxYw)Nzutf-8)encodingu파일 읽기 실패 z: uJSON 파싱 실패 u최상위 dict 아님 ) read_textOSErrorr%jsonloadsJSONDecodeErrorr@r`)pr*raweobjs r. _read_jsonrsOkk7k+Mjjo c4 (>qc&BCC J O(=aS1#&FGQNO   M(;A3b&DE1LMs.A A/ A,A''A,/BBB schema_dirc2tt||z dS)u=정적 meta-schema 로드 (참조 전용; 절대 mutation 0).meta_schema_load_fail)rr)namers r.load_meta_schemars d:&-/F GGr/cHt|ts"tddt|jt t |}tt||}|rtddj|t|}t|jdxsg|d<|S)uchair-supplied goal_request → 정적 meta-schema 검증된 dict (fail-closed). 입력: {goal_id, goal_statement, boundary?, goal_type?, policy_profile{name}}. goal_request_not_mappingugoal_request dict 아님: rgoal_request_schema_fail; boundary) r@r r%rIr3rrrvr`joinr\rD)rrmetarcouts r.parse_goal_requestrs c7 # :>XY]^aYbYkYkXl.schema.json) (b) 엔진 generic 정적 meta-schema (policy_profile_2553plus33.schema.json) 둘 다 통과해야 함 (fail-closed). 기존 단일 profile 의미 보존. profile_name_invaliduprofile name 무효: z.jsonprofile_load_failz .schema.json!profile_concrete_schema_load_failprofile_concrete_schema_failrrprofile_generic_meta_fail) r@r0r%rrexistsrvrrr) rrrrprofileconcrete_schema_pathconcretercgenericgerrss r.load_policy_profilers z$, 6:OPTx8XYY./TF%.@BUVG 23l6KK""$24WX$Wh7 #$BDIIdOT T2zJG !'7 3E  ;TYYu=MNN Nr/c|jd}t|tr |jr|jSt|jdd}d|vsd|vryd|vryy ) uOgoal_type 산출. 우선순위: 명시 goal_type > profile_id 추론 > generic. goal_type profile_idpr_mergemergepr_merge_lifecycle hardeninghardening_lifecycle generic_goal)rDr@r0strip) goal_requestrexplicitpids r.resolve_goal_typersf ,H(C X^^%5~~ gkk,+ ,CSGsN#c$ r/cN|jdxsgDcgc] }t|}}|jdxsi}|t|jdxsg|jd|jd|jd|jddScc}w) uHchair boundary[] + profile scope_invariants → 정규화 boundary dict.rscope_invariantsforbidden_paths_regex live_ws_pathlive_ws_sanctioned_commitlive_ws_branchmerge_ops_isolation)rrrrr ops_isolation)rDr0r\)rrbrsis r.resolve_boundaryrs".!1!1*!=!CE1AEHE ' ( .BB!%bff-D&E&K!L~.%'VV,G%H&&!12 56  FsB"c"eZdZUded<ded<y) GateConditionr0rrexpectedN)r3r4r5__annotations__r/r.rrs IMr/rc|jd}t|ts|jd}t|tsgS|jDcgc]\}}t ||c}}Scc}}w)uprofile AND-gate predicate → ordered GateCondition list. generic: ``gate_predicate`` 우선, 없으면 ``merge_ready_predicate`` (기존 단일 profile 의미 보존). ALL true 여야 gate PASS. gate_predicatemerge_ready_predicate)rr)rDr@r rRr)rpredrprqs r. expand_gaters` ;;' (D dG ${{23 dG $ :>**, G$!QMq1 - GG GsA3c|jdxsi}t|tsgS|jDcgc]\}}|s t |c}}Scc}}w)uRprofile hold_conditions 중 truthy → HOLD trigger 이름 list. any true => HOLD.hold_conditions)rDr@r rRr0)rhcrprqs r. expand_holdr*sI & ' -2B b' " !xxz /tq!QCF // /s A Ac|jd}t|ttfr|Dcgc] }t |c}Stt }|jdxsgD]}|j d||jdxsi}t|tr(|jdr|j d|d|jdxsi}t|tr3t|jdd xsd d kDr|j d |j d |t}|Dcgc]}||vr|j|r|c}Scc}wcc}w) uTprofile → allowed_actions. 명시 우선, 없으면 인식된 block 에서 파생.allowed_actionspost_merge_stepsz post_merge: merge_methoddefault_preferencez merge_method:gemini_thread_resolvemax_resolve_callsrzreview_thread_resolve:boundedz goal_type:) rDr@r\r]r0r#rXr rAsetadd) rrrarstepmmgtrseens r.expand_allowed_actionsr2sC{{,-H(T5M* ()1A))34C ./52) ['() ^ $ *B"g266*>#? ]2&:#;"<=> ++- . 4"C#wC0CQ(G(L1$MPQ$Q 23JJI;'(UD =!19 A ==* >sE( E-E-!E-)zforbid:zno:zdeny:_BOUNDARY_DENY_PREFIXESc|jj}tD]E}|j|s|jt |dj}|xsdcSy)uboundary deny 토큰을 bare action id 로 정규화. 'forbid:completion_packet_emit' -> 'completion_packet_emit'. deny 접두사가 없으면 None (= deny 아님). Codex CRITICAL fix: raw 표현 mismatch 로 boundary 가 우회되지 않도록 한다. N)rlowerr startswithr[)tokenlowpfxbares r.normalize_boundary_denyrKsa ++-   C&  >># ;;=S+113D<4   r/ctt}|jd}t|ttfr|j d|D|jdxsgD]}|j d||jdxsgD]=}t|}t|}||j ||j |?t}|D cgc]} | |vr|j| r| c} Scc} w)uuniversal forbidden + profile/boundary 파생 forbidden. boundary deny 는 raw 토큰과 **정규화된 bare action id** 를 모두 등재해 allowed_actions 와의 교집합 검사/가지치기에서 표현 mismatch 우회를 차단한다 (Codex CRITICAL fix). forbidden_actionsc32K|]}t|yw)N)r0).0rs r. z+expand_forbidden_actions..fs,a3q6,srz write_path:r) r\rrDr@r]extendrXr0rrr) rrrrrgxrbsrrrs r.expand_forbidden_actionsrZs56C{{./H(T5M* ,8,,||34:( [&'( \\* % + V&r*   JJrN JJt   UD =!19 A == =s D*D<Dct|tz }tt|}t|j dxsg}|j d}d|j d|t |t r|ndd}t||dS) ucompletion packet schema resolver. 반환: {meta_schema(정적 ref), concrete(per-profile in-memory spec)}. 동적 schema 파일 생성 0 / 공유 schema mutation 0 (9-R.3). rrUcompletion_packetz1anu_v3.policy_profile_engine.completion_packet.v1rN schema_idrrequired_fieldsprofile_declaredmeta_schema_refr)rrrr\rDr@r r0rr meta_pathrrUdeclaredrs r. resolve_completion_packet_schemarvsZ #99I 2z JDDHHZ(.B/H{{./HHkk,/#(28W(EH4 H #9~8 DDr/ct|tz }tt|}t|j dxsg}|j d}d|j d|t |t r|ndd}t||dS) uUevidence schema resolver. 정적 meta-schema 참조 + per-profile concrete in-memory.rrUevidencez(anu_v3.policy_profile_engine.evidence.v1rNrr)rrrr\rDr@r r0rs r.resolve_evidence_schemars} Z =0I Mj ADDHHZ(.B/H{{:&H?kk,/#(28W(EH4 H #9~8 DDr/ch|Dcgc]}|j|s|}}t||fScc}w)u2런타임 HOLD 평가기 (순수). HOLD 의미를 명시적으로 구현. profile.hold_conditions 의 truthy 항목 = **enabled HOLD trigger 이름** (정의-시점 enablement, schema const:true). 실제 HOLD 는 그 trigger 가 런타임에 *관측*될 때 발생한다. resolve-time status 는 contract 도출만 반영하며 런타임 발생을 미리 단정하지 않는다 (Codex HIGH fix — 정의-시점 enablement 와 런타임 발생 분리). 반환: (hold: bool, fired: 발화된 trigger 이름 list). ANY fired => HOLD. )rDrB)hold_trigger_conditionsruntime_signalscfireds r. evaluate_holdrs90 J1?3F3Fq3IQ JE J K  Ks//ceZdZUded<ded<ded<ded<ded<ded <d ed <d ed <d ed <ded<ded<dZded<dZded<eZded<eZ ded<e e Z d ed<ddZ ddZy)PolicyResolutionr0goal_idrrprofile_versiondict[str, Any]rlist[GateCondition]gate list[str]rrrcompletion_packet_schemaevidence_schemaRESOLVEDstatusN str | None hold_reasonengineengine_version)default_factorynotesc6iddd|jd|jd|jd|jd|jd|j d |j d |jd |jd |jDcgc] }t|c}d ddt|jdddt|jdt|jd|j|j t|j"dScc}w)Nraz(anu_v3.policy_profile_engine.decision.v1rrrrrrr r rrgate_semanticsu)AND — ALL conditions must hold for PASSrhold_semanticsuenabled HOLD triggers (definition-time enablement). ANY trigger OBSERVED at runtime => HOLD, action 0. resolve-time status reflects contract derivation only, not runtime occurrence — use evaluate_hold(hold_trigger_conditions, runtime_signals).rrr)r r)rrrrrrr r rrrr\rrrrr rr,gs r.to_decision_dictz!PolicyResolution.to_decision_dicts_ @ dkk  d11  t||    $//   t33  dkk  4++      21VAY2  I  &tD,@,@'A  O ( tD$8$89) * d&<&$L  =?[\\!)- G""g.IG,H w D w D$Wi8G((;I  NM3w<-78M!(CAA],BaCNCG *7z JC !'j ACE F"K !x !''4o 7   ? OP BFF9b)*w{{<45GKK 267 #!$ 3Ds  FF)r r rrrrrr#r%rrrvrrrrrrrrrrrrrr%r/rA)rErrFr0r1rB) rErraMapping[str, Any]rbr0rcrr1r2)rtrrurBr1r)r~rr*r0r1r)rr0r str | Pathr1r)rrrrCr1r) rr0rrCrrCrrCr1r)rrBrrBr1r0)rrBrrBr1r)rrBr1r)rrBr1r)rrBrr0r1r)rr0r1r )rrBrrBr1r)rrBrrCr1r)rz Sequence[str]rrBr1ztuple[bool, list[str]])r$'PolicyResolution'rr0r r0r#r0r"r0rzMapping[str, Any] | Noner1r)r$rDr,r0r&z"Sequence[Mapping[str, Any]] | Noner1r) rrrrCrrCrrCr1r)>r6 __future__rr{rY dataclassesrrrpathlibrtypingrr r r r rr rrrrrrrrr# ValueErrorr%r`r\r]r0rArCrBr>rGr_rvrrrrrrrrrrrrrrrrrr%r/rA__all__rr/r.rKs\8# 0000: z:1 1 "+J* E:E"IZI%O O= z=(@*?)BJB 73 51 gE]fvElw 1 -B)WX =OH+= '0$<%?/  !#     F  # .?  &   H0> >+.>>,3N/M > >*;>>>0E EE E40E EE E, * &  $ ? ?  ? R-1"     *B26 " /   >$<%?/ LL!L# L  L  L^ r/