feat(agent)!: expose active package policy

[Benoît Cortier (CBenoit)]

Exposes the validated active package-broker policy through the authenticated GET /v1/policy route. Clients receive a stable snapshot, while an unavailable policy returns the shared structured 404 response without exposing policy source or file-security details.

Uses the official now-policy 0.3.0, now-policy-api 0.4.0, and now-policy-server-template 0.4.0 releases. Phase 1 remains read-only: policy management, validation, and replacement routes are not exposed.

Package policy files are now JSON-only. Deployments using .yaml or .yml policy files must convert them to .json; unsupported extensions and YAML content are rejected rather than silently parsed.

Coordinated stack: Devolutions/now-libraries#93 defines the shared contract, this PR implements the Agent endpoint, and Devolutions/UniGetUI#5292 consumes it. Keep this PR open while Phase 2 #1963 is restacked and the full stack is finalized.

BREAKING CHANGE: Package broker policy files must use JSON; YAML and YML are no longer discovered or parsed.

Issue: Devolutions/now-libraries#93

Co-authored-by: Copilot App 223556219+Copilot@users.noreply.github.com

[Benoît Cortier (CBenoit)]

Implementation notes:

• Uses official crates.io releases now-policy 0.3.0, now-policy-api 0.4.0, and now-policy-server-template 0.4.0 with no path or git patches.
• Serves a stable clone of the validated in-memory Arc<PolicyDocument> through authenticated GET /v1/policy; the policy lock is released before response serialization.
• Preserves existing named-pipe executable signature authorization, policy owner/DACL validation, and YAML policy-file compatibility.
• Returns structured NotFound/404 when policy inspection has no active policy, while package evaluation continues to return BrokerPaused/503.
• Does not expose policy source, path, reason, security metadata, or policy-body logs.
• Keeps Phase 1 read-only by hiding the shared management and validation routes and rejecting mutation methods with 405 plus Allow: GET, HEAD.

Validation on exact head 8e9cc98e4103b40ddc3511aef39462d9f7610a7a:

cargo +nightly fmt --all -- --check
cargo build --workspace --locked
cargo clippy --workspace --tests --locked -- -D warnings
cargo test --workspace --locked -- --skip winget_app_exec_alias_passes_elevated_verification
cargo test -p now-package-broker --locked policy_response_returns_not_found_when_unavailable
cargo test -p now-package-broker --locked package_evaluation_without_policy_remains_paused
cargo test -p now-package-broker --locked concurrent_policy_replacement_returns_only_complete_snapshots

All commands passed. The skipped test is an existing host-specific check whose local WindowsApps winget.exe grants the current user write access; an unfiltered broker run passed 253 tests with 1 ignored before that expected local DACL failure.

CI run https://github.com/Devolutions/devolutions-gateway/actions/runs/33828611066 passed all 42 checks, including locked Linux/Windows tests and Clippy, Windows Agent builds, and the Agent policy end-to-end test under LocalSystem.

Copilot's exact-head review generated zero findings and left zero unresolved threads. Its Needs a closer look disposition is solely for human scrutiny of the intentionally draft, security-sensitive cross-repository stack.

Note

LLM-assisted content (no human feedback).

[Copilot]

Pull request overview

Adds authenticated active-policy inspection to the Agent’s package broker.

Changes:

• Implements GET /v1/policy with structured responses.
• Reuses connection authentication and adds snapshot/concurrency tests.
• Remains blocked on publishing and committing the 0.4.0 dependencies.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 1 comment.

File	Description
crates/now-package-broker/src/server/mod.rs	Implements and tests policy retrieval.
crates/now-package-broker/src/auth.rs	Exposes connection-level authentication for the endpoint.

---

💡 Configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[Copilot]

Pull request overview

Copilot reviewed 11 out of 12 changed files in this pull request and generated 2 comments.

[Copilot]

🟡 Changes recommended

The custom 405 response violates HTTP requirements by omitting the Allow header.

Once you've addressed the issues Copilot identified, you can request another Copilot review.

Review details

• Files reviewed: 12/13 changed files
• Comments generated: 1
• Review effort level: Balanced

[Copilot]

🔵 Needs a closer look

The coordinated stack remains intentionally draft, and the latest Windows validation was still running during review.

Review details

• Files reviewed: 12/13 changed files
• Comments generated: 0 new
• Review effort level: Balanced

[Copilot]

🟡 Changes recommended

It silently removes released YAML policy compatibility and rewrites the corresponding historical changelog entry.

Once you've addressed the issues Copilot identified, you can request another Copilot review.

Review details

Suppressed comments (1)

Previously missed (1) — in code that hasn't changed since the last review.

CHANGELOG.md:48

• This edits the already-published 2026.2.4 release entry to claim that release supported JSON only, although the implementation shipped there accepted JSON, YAML, and YML. Keep the historical entry accurate; if YAML support is intentionally removed now, record that in the new release's notes instead.

• Files reviewed: 16/17 changed files
• Comments generated: 1
• Review effort level: Balanced