feat(miner): add .gittensory-ams.yml operator execution-policy config (#5132)

[JSONbored]

Summary

Advances #5132

runMinerAttempt requires submissionMode/slopThreshold/capLimits/convergenceThresholds, none of which had any config or env backing anywhere in the codebase -- pure policy dials that would otherwise get hardcoded with no way to tune them.

Adds AmsPolicySpec (engine package, a structural sibling to MinerGoalSpec) and resolveAmsPolicy (miner package), mirroring .gittensory.yml's own established self-host precedent (src/selfhost/private-config.ts's makeLocalManifestReader, whose own doc comment says the operator's local file "takes priority over -- and fully REPLACES -- the public .gittensory.yml"): a target repo may propose a .gittensory-ams.yml default, but the operator's own local copy (in their gittensory-miner config dir), when present, fully replaces it -- never a field-by-field merge.

This boundary is deliberate: MinerGoalSpec (.gittensory-miner.yml) is what a target repo wants from being mined (paths, labels, opt-out) -- that's legitimately the repo's own call. AmsPolicySpec is how aggressive the operator wants their own agent to be (budget, submission mode, slop threshold) -- a repo's own checked-in file must never get to loosen what an operator's agent is willing to do against that same repo, since that would let a malicious/compromised repo talk an operator's miner into raising its own risk tolerance. A repo's file can only ever propose a fallback default for an unconfigured operator.

Deny-by-default: submissionMode defaults to "observe" (computes real decisions, never actually submits) and slopThreshold to "low" (strict), matching the codebase's own stated deny-by-default conventions (src/settings/autonomy.ts's AUTONOMY_LEVELS).

Test plan

• node --test packages/gittensory-engine/test/ams-policy-spec-parser.test.ts -- 9/9 (missing/malformed input, every field's normalization + rejection, JSON/YAML parsing, oversized content)
• node --test packages/gittensory-engine/test/*.test.ts -- full engine suite, 519/519 passing
• npx vitest run test/unit/miner-ams-policy.test.ts -- 9/9 (config-path precedence, defaults-when-neither-exists, repo-file fallback, local-fully-replaces-repo regression, never-fetches-once-local-found, malformed-local-file, malformed-repoFullName, network-error, .github/+.json candidate paths)
• npm run test:engine-parity
• node --check packages/gittensory-miner/lib/ams-policy.js
• npm run --prefix packages/gittensory-miner build (added ams-policy.js to the check list)

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Preview URL	Updated (UTC)
✅ Deployment successful! View logs	gittensory-ui	b927588	Commit Preview URL Branch Preview URL	Jul 12 2026, 11:39 AM

[superagent-security]

Superagent did not find any vulnerabilities or security issues in this PR.

[codecov]

Codecov Report

❌ Patch coverage is 40.98361% with 36 lines in your changes missing coverage. Please review.
✅ Project coverage is 94.26%. Comparing base (e6adb43) to head (b927588).
⚠️ Report is 2 commits behind head on main.
✅ All tests successful. No failed tests found.

Files with missing lines	Patch %	Lines
packages/gittensory-engine/src/ams-policy-spec.ts	40.98%	24 Missing and 12 partials ⚠️

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #5249      +/-   ##
==========================================
- Coverage   94.34%   94.26%   -0.09%     
==========================================
  Files         473      474       +1     
  Lines       39982    40043      +61     
  Branches    14576    14598      +22     
==========================================
+ Hits        37722    37747      +25     
- Misses       1585     1609      +24     
- Partials      675      687      +12     

Flag	Coverage Δ
shard-1	46.37% <4.91%> (-0.07%)	⬇️
shard-2	34.54% <4.91%> (-0.05%)	⬇️
shard-3	32.04% <4.91%> (-0.05%)	⬇️
shard-4	32.11% <40.98%> (+<0.01%)	⬆️
shard-5	33.70% <4.91%> (-0.11%)	⬇️
shard-6	44.81% <4.91%> (-0.05%)	⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

Files with missing lines	Coverage Δ
packages/gittensory-engine/src/ams-policy-spec.ts	40.98% <40.98%> (ø)

🚀 New features to boost your workflow:

• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.