Provision OpenShell policies from resolved configuration

Author: Homer

README.md

@@ -1,5 +1,12 @@
 # MirrorNeuron CLI
 
+OpenShell worker policies may declare `policy_config_bindings: true` and bind
+unquoted `${config.path.to.scalar}` values from their SDK-resolved configuration.
+The SDK renders bounded JSON-quoted scalars before native provisioning and
+payload staging, preserving source policy files and existing network rules.
+Missing bindings fail before image preparation. This requires SDK
+`>=1.3.58.dev63,<2`; workers without the declaration retain their policy behavior.
+
 Blueprint `execution.json` can set `runtime.placement.must_run_local: true` to
 pin its Job owner and all workers to the submitting computer. `mn blueprint run`
 honors that requirement before resource/model preparation, rejects a remote

SPEC.md

@@ -800,3 +800,12 @@ than operating-system or runtime installers. Keep it private: configuration and
 local data may contain sensitive values. Core, SDK, CLI and API must be upgraded
 together for the new streamed backup RPCs. `mn blueprint export <run-id>` remains
 a run report export (JSON/Markdown/HTML), with no job restore counterpart.
+# Configured OpenShell policies
+
+OpenShell workers may declare `policy_config_bindings: true` and bind unquoted
+`${config.path.to.scalar}` values from the SDK-resolved configuration snapshot.
+The SDK owns scalar validation and rendering. The CLI validates before image
+preparation and uses the derived policy for native sandbox provisioning; SDK
+payload staging carries the same policy to Core without changing source files.
+Missing or invalid bindings fail; existing undeclared policies remain unchanged.
+This contract requires SDK `>=1.3.58.dev63,<2`.

mn_cli/libs/run_cmds/openshell.py

@@ -1,5 +1,6 @@
 from mn_sdk.native_resource_registry import register_native_resource
 from mn_sdk.errors import AppError
+from mn_sdk.openshell_policy import materialize_worker_policy, render_worker_policy
 from mn_sdk.submission_preparation import (
     _ensure_docker_worker_requirements_install,
     _local_skill_dependency_source_records,
@@ -54,6 +55,11 @@ def _prepare_openshell_custom_images(
             continue
         if config.get("runner_module") not in OPENSHELL_RUNNER_MODULES:
             continue
+        if config.get("policy_config_bindings") is True:
+            policy = _openshell_policy_path(bundle_dir, config.get("policy"))
+            if policy is None:
+                raise ValueError("Configured OpenShell policy is missing")
+            render_worker_policy(policy.read_text(encoding="utf-8"), config)
 
         # Resolve before image builds or native-resource registration.
         _openshell_executable()
@@ -274,6 +280,8 @@ def _prepare_openshell_shared_sandbox(
                 command.extend([option, value.strip()])
         policy = _openshell_policy_path(bundle_dir, config.get("policy"))
         if policy is not None:
+            if config.get("policy_config_bindings") is True:
+                policy = materialize_worker_policy(policy, config, mn_home() / "openshell" / "policies")
             command.extend(["--policy", str(policy)])
         for provider in config.get("providers") or []:
             if isinstance(provider, str) and provider.strip():

pyproject.toml

@@ -9,7 +9,7 @@ classifiers = [
     "Programming Language :: Python :: 3",
 ]
 dependencies = [
-    "mirrorneuron-python-sdk[local-source]>=1.3.58.dev46,<2.0",
+    "mirrorneuron-python-sdk[local-source]>=1.3.58.dev63,<2.0",
     "click>=8.1.0",
     "jsonschema>=4.25",
     "typer>=0.9.0",

tests/test_run_cmds_openshell.py

@@ -694,3 +694,24 @@ def test_openshell_definition_revisions_have_separate_sandboxes(tmp_path, mocker
     assert len(records) == 2
     assert len({r["external_id"] for r in records}) == 2
     assert {r["job_id"] for r in records} == {"job-one"}
+
+
+def test_configured_policy_is_rendered_before_sandbox_creation(mocker, tmp_path):
+    from mn_cli.libs.run_cmds import openshell
+    mocker.patch.object(openshell, 'mn_home', return_value=tmp_path/'mn')
+    mocker.patch.object(openshell, '_openshell_executable', return_value='openshell')
+    mocker.patch.object(openshell, '_openshell_env', return_value={})
+    mocker.patch.object(openshell, 'register_native_resource')
+    policy=tmp_path/'bundle/payloads/policy.yaml'
+    policy.parent.mkdir(parents=True)
+    policy.write_text('version: 1\nhost: ${config.gateway.host}\n')
+    config={'policy':'policy.yaml','policy_config_bindings':True,
+            'environment':{'MN_BLUEPRINT_CONFIG_JSON':json.dumps({'gateway':{'host':'test-gateway'}})}}
+    run=mocker.patch.object(openshell.subprocess,'run',side_effect=[
+        subprocess.CompletedProcess([],1,'','missing'), subprocess.CompletedProcess([],0,'created','')])
+    openshell._prepare_openshell_shared_sandbox(tmp_path/'bundle',config,job_id='job',
+        submission_id='definition',node_id='review')
+    command=run.call_args_list[1].args[0]
+    rendered=Path(command[command.index('--policy')+1])
+    assert rendered.read_text()=='version: 1\nhost: "test-gateway"\n'
+    assert policy.read_text()=='version: 1\nhost: ${config.gateway.host}\n'