@agentproto/governance-engine 0.1.0

package/dist/index.d.ts

@@ -0,0 +1,132 @@
+import { G as GovernanceConfig, I as IGovernanceFilesystem } from './workspace-config-vgR1Ieoo.js';
+export { A as AnchorPayload, a as AnchorSink, D as DEFAULT_ANCHOR_EVERY_LINES, b as DirectoryEntry, N as NodeGovernanceFilesystem, d as defaultGovernanceFilesystem } from './workspace-config-vgR1Ieoo.js';
+import { ActorKind, AuditEvent, SignerKind, SigningMethod, SignatureEvidence, Signature } from '@agentproto/governance/doctypes';
+export { P as PendingSignatureEntry, a as PendingSignaturesIndex, b as addPendingSignatures, l as listPendingSignatures, c as loadPendingSignaturesIndex, r as removePendingSignature } from './pending-signatures-index-x8H36e9h.js';
+
+/**
+ * `recordAuditEvent` — append a hash-chained audit event to the workspace's
+ * audit log.
+ *
+ * Scope is workspace-relative; defaults to the workspace-level log
+ * (`audit/audit-log.jsonl`). Per-engagement scope is the typical alternative
+ * (`engagements/<slug>/audit/audit-log.jsonl`).
+ *
+ * The function:
+ *   1. Reads the current log to find the last signature (or uses genesisSeed for the first line).
+ *   2. Composes the row, computes the chain signature.
+ *   3. Appends the JSONL line.
+ *   4. Optionally invokes the anchor sink if the line index crosses the cadence.
+ *
+ * Returns the recorded event with `prevSignature` and `signature` populated.
+ */
+interface RecordAuditEventInput {
+    /**
+     * Where the log lives. Workspace-relative folder; the file is
+     * `<scope>/audit-log.jsonl`. Default: `audit` (workspace-level log).
+     *
+     * Example for engagement-scoped: `engagements/2026-acme/audit`
+     */
+    scopeDir?: string;
+    actorKind: ActorKind;
+    actorId: string | null;
+    entityType: string;
+    entityId: string;
+    /** "<entity>.<verb>" lowercase (e.g., `signature.created`). */
+    action: string;
+    payload?: Record<string, unknown>;
+    requestId?: string;
+    traceId?: string;
+    ipAddress?: string;
+    userAgent?: string;
+    /**
+     * Idempotency key. v1 stores it in `metadata.idempotencyKey` for inspection
+     * but does not yet dedup automatically (TODO: `_index/dispatched-keys.json`).
+     */
+    idempotencyKey?: string;
+    /** Override the timestamp; default is `new Date().toISOString()`. */
+    createdAt?: string;
+    /** Vendor extensions under metadata.<vendor>.* */
+    metadata?: Record<string, unknown>;
+}
+interface RecordAuditEventResult {
+    event: AuditEvent;
+    /** Workspace-relative path to the log file. */
+    logPath: string;
+    /** 0-based line index of the appended event. */
+    lineIndex: number;
+    /** True if an anchor was emitted on this append. */
+    anchored: boolean;
+}
+declare function recordAuditEvent(config: GovernanceConfig, input: RecordAuditEventInput): Promise<RecordAuditEventResult>;
+
+/**
+ * `signArtifact` — write a signature.json file alongside an artifact and
+ * append a hash-chained audit-log entry.
+ *
+ * The signing method's evidence shape MUST match the top-level method.
+ * The document hash is ALWAYS computed from the artifact bytes on disk.
+ * Callers MAY supply `expectedDocumentHash` to assert what they believe
+ * the bytes are; if it doesn't match what we actually read, we reject.
+ * This closes the forgery primitive in earlier drafts where a caller
+ * could dictate the hash and produce a signature that didn't match the
+ * underlying file.
+ */
+interface SignArtifactInput {
+    /** Workspace-relative path to the artifact being signed. */
+    artifactPath: string;
+    /** Canonical signer "<kind>:<slug>" (e.g., `operator:jeremy`, `counterparty:acme-corp`). */
+    signer: string;
+    signerKind: SignerKind;
+    signerEmail?: string;
+    method: SigningMethod;
+    evidence: SignatureEvidence;
+    /**
+     * Optional caller-asserted document hash. When provided, MUST equal the
+     * SHA-256 of the artifact bytes — otherwise `signArtifact` rejects.
+     * The recorded `documentHash` is always the value computed from bytes,
+     * never the caller-supplied assertion.
+     */
+    expectedDocumentHash?: string;
+    /** Override timestamp; default = now. */
+    signedAt?: string;
+    /** Idempotency key (recorded in audit-log entry). */
+    idempotencyKey?: string;
+    /** Vendor extensions under metadata.<vendor>.* */
+    metadata?: Record<string, unknown>;
+}
+interface SignArtifactResult {
+    signature: Signature;
+    /** Workspace-relative path to the signature.json file written. */
+    signaturePath: string;
+    /** Audit log entry summary. */
+    auditLogPath: string;
+    auditLineIndex: number;
+}
+declare function signArtifact(config: GovernanceConfig, input: SignArtifactInput): Promise<SignArtifactResult>;
+
+/**
+ * Pure helpers (no FS) + thin adapter shims.
+ *
+ * The FS-bound legacy exports (`ensureDir`, `readFileIfExists`, `atomicWrite`,
+ * `appendLine`) are kept as thin wrappers over the default Node filesystem so
+ * external consumers continue to work; new code should prefer
+ * `getFilesystem(config)` from `./filesystem.js` and call the adapter directly.
+ */
+/** Resolve the filesystem adapter from a GovernanceConfig (default = Node fs). */
+declare function getFilesystem(config: GovernanceConfig): IGovernanceFilesystem;
+/** Compute SHA-256 of UTF-8 string content, hex lowercase. */
+declare function sha256Hex(content: string | Uint8Array): string;
+/**
+ * Resolve a path against a root directory, rejecting paths that escape the
+ * root. The "root" is any base directory string — workspace, engagement
+ * subdir, external mount, etc. — not coupled to the workspace entity notion.
+ */
+declare function resolveFromRoot(root: string, relPath: string): string;
+/** Inverse of `resolveFromRoot`: forward-slash relative path, no leading "./". */
+declare function toRelativePath(root: string, absPath: string): string;
+declare function ensureDir(dirPath: string): Promise<void>;
+declare function readFileIfExists(filePath: string): Promise<string | null>;
+declare function atomicWrite(filePath: string, content: string): Promise<void>;
+declare function appendLine(filePath: string, line: string): Promise<void>;
+
+export { GovernanceConfig, IGovernanceFilesystem, type RecordAuditEventInput, type RecordAuditEventResult, type SignArtifactInput, type SignArtifactResult, appendLine, atomicWrite, ensureDir, getFilesystem, readFileIfExists, recordAuditEvent, resolveFromRoot, sha256Hex, signArtifact, toRelativePath };

package/dist/index.mjs

@@ -0,0 +1,4 @@
+export { NodeGovernanceFilesystem, addPendingSignatures, appendLine, atomicWrite, defaultGovernanceFilesystem, ensureDir, getFilesystem, listPendingSignatures, loadPendingSignaturesIndex, readFileIfExists, recordAuditEvent, removePendingSignature, resolveFromRoot, sha256Hex, signArtifact, toRelativePath } from './chunk-P7TDNF2H.mjs';
+export { DEFAULT_ANCHOR_EVERY_LINES } from './chunk-M7I5HTGN.mjs';
+//# sourceMappingURL=index.mjs.map
+//# sourceMappingURL=index.mjs.map

package/dist/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"names":[],"mappings":"","file":"index.mjs"}

package/dist/pending-signatures-index-x8H36e9h.d.ts

@@ -0,0 +1,52 @@
+import { G as GovernanceConfig } from './workspace-config-vgR1Ieoo.js';
+
+/**
+ * `_index/pending-signatures.json` — regeneratable index keyed by signer.
+ *
+ * Source of truth: artifact frontmatter / sidecar files declaring
+ * `requiredSignatures`. This index is a cache for fast "what is awaiting
+ * my signature" queries; it can be rebuilt at any time by walking the
+ * workspace.
+ *
+ * Shape:
+ * ```json
+ * {
+ *   "version": "1",
+ *   "updatedAt": "2026-04-26T15:00:00.000Z",
+ *   "bySigner": {
+ *     "operator:founder": [
+ *       {
+ *         "artifactPath": "engagements/2026-acme/INVOICE.md",
+ *         "deadline": "2026-05-15T17:00:00.000Z",
+ *         "requestedAt": "2026-04-26T14:00:00.000Z"
+ *       }
+ *     ]
+ *   }
+ * }
+ * ```
+ */
+interface PendingSignatureEntry {
+    artifactPath: string;
+    deadline?: string;
+    requestedAt: string;
+    /** Method preferred for this signer. */
+    method?: string;
+    /** Optional weight (for weighted_threshold policies). */
+    weight?: number;
+}
+interface PendingSignaturesIndex {
+    version: "1";
+    updatedAt: string;
+    bySigner: Record<string, PendingSignatureEntry[]>;
+}
+declare function loadPendingSignaturesIndex(config: GovernanceConfig): Promise<PendingSignaturesIndex>;
+declare function addPendingSignatures(config: GovernanceConfig, artifactPath: string, required: {
+    signer: string;
+    method?: string;
+    weight?: number;
+    deadline?: string;
+}[], requestedAt?: string): Promise<PendingSignaturesIndex>;
+declare function removePendingSignature(config: GovernanceConfig, signer: string, artifactPath: string): Promise<PendingSignaturesIndex>;
+declare function listPendingSignatures(config: GovernanceConfig, signer: string): Promise<PendingSignatureEntry[]>;
+
+export { type PendingSignatureEntry as P, type PendingSignaturesIndex as a, addPendingSignatures as b, loadPendingSignaturesIndex as c, listPendingSignatures as l, removePendingSignature as r };

package/dist/provider/index.d.ts

@@ -0,0 +1,107 @@
+import * as _agentproto_driver from '@agentproto/driver';
+import { G as GovernanceConfig } from '../workspace-config-vgR1Ieoo.js';
+import { P as PendingSignatureEntry } from '../pending-signatures-index-x8H36e9h.js';
+
+/**
+ * AIP-30 PROVIDER for the four `governance.*` TOOL contracts.
+ *
+ * `kind: "builtin"` — runs in-process against `governanceConfig`
+ * injected via per-call context. No subprocess, no SDK package load,
+ * no network hop. Bodies are typed via `implementTool` — the compiler
+ * enforces shape match between each body and its contract's
+ * input/output/context generics, the same way Solidity's
+ * `MyToken is IERC20` enforces interface conformance.
+ *
+ * Each implementation here can be re-adapted to AI SDK or Mastra
+ * surfaces via `toAiSdkTool(impl, { context })` / `toMastraTool(...)`,
+ * so the same body powers `runTool({ candidates: [...] })` AND
+ * `streamText({ tools: { ... } })` AND `agent.stream({ tools: ... })`
+ * with no duplication.
+ */
+declare const governanceProvider: _agentproto_driver.DriverHandle;
+
+/**
+ * Provider body for the `governance.sign-artifact` TOOL contract.
+ *
+ * Bound to `signArtifactTool` via `implementTool` — input/context types
+ * flow from the contract handle's generics, so the body needs no manual
+ * casts. The matching `defineTool` handle in
+ * `tools/sign-artifact.tool.ts` carries only the contract (id, schemas,
+ * mutates, approval, riskLevel) per AIP-14.
+ */
+declare const signArtifactBuiltin: _agentproto_driver.ToolImplementation<{
+    artifact: string;
+    signer: string;
+    signerKind: "external" | "operator" | "user" | "counterparty" | "agent";
+    method: "typed_name" | "agent_confirm" | "click_through" | "esign_external";
+    evidence: unknown;
+    signerEmail?: string | undefined;
+    expectedDocumentHash?: string | undefined;
+    idempotencyKey?: string | undefined;
+}, {
+    signaturePath: string;
+    auditLogPath: string;
+    auditLineIndex: number;
+    documentHash: string;
+}, {
+    governanceConfig: GovernanceConfig;
+}>;
+
+/**
+ * Provider body for the `governance.record-audit-event` TOOL contract.
+ * Bound via `implementTool` — typed input/context flow from the
+ * contract handle.
+ */
+declare const recordAuditEventBuiltin: _agentproto_driver.ToolImplementation<{
+    actorKind: "operator" | "user" | "counterparty" | "agent" | "system";
+    actor: string | null;
+    entityType: string;
+    entity: string;
+    action: string;
+    scopeDir?: string | undefined;
+    payload?: Record<string, unknown> | undefined;
+    requestId?: string | undefined;
+    traceId?: string | undefined;
+    idempotencyKey?: string | undefined;
+}, {
+    logPath: string;
+    lineIndex: number;
+    anchored: boolean;
+    signature: string;
+}, {
+    governanceConfig: GovernanceConfig;
+}>;
+
+/**
+ * Provider body for the `governance.request-signatures` TOOL contract.
+ * Bound via `implementTool` — typed input/context flow from the
+ * contract handle.
+ */
+declare const requestSignaturesBuiltin: _agentproto_driver.ToolImplementation<{
+    artifact: string;
+    requiredSignatures: {
+        signer: string;
+        method?: "typed_name" | "agent_confirm" | "click_through" | "esign_external" | undefined;
+        weight?: number | undefined;
+        deadline?: string | undefined;
+    }[];
+}, {
+    added: number;
+}, {
+    governanceConfig: GovernanceConfig;
+}>;
+
+/**
+ * Provider body for the `governance.list-pending-signatures` TOOL contract.
+ * Bound via `implementTool` — typed input/context flow from the
+ * contract handle.
+ */
+declare const listPendingSignaturesBuiltin: _agentproto_driver.ToolImplementation<{
+    signer: string;
+}, {
+    pending: PendingSignatureEntry[];
+}, {
+    governanceConfig: GovernanceConfig;
+}>;
+
+export { governanceProvider, listPendingSignaturesBuiltin, recordAuditEventBuiltin, requestSignaturesBuiltin, signArtifactBuiltin };

package/dist/provider/index.mjs

@@ -0,0 +1,232 @@
+import { listPendingSignatures, recordAuditEvent, addPendingSignatures, signArtifact } from '../chunk-P7TDNF2H.mjs';
+import { listPendingSignaturesTool, recordAuditEventTool, requestSignaturesTool, signArtifactTool } from '../chunk-NXMY54BX.mjs';
+import '../chunk-M7I5HTGN.mjs';
+import { implementTool, defineDriver } from '@agentproto/driver';
+import { defineRef, refMatchesCollection } from '@agentproto/ref';
+import { ToolError } from '@agentproto/tool';
+
+/**
+ * @agentproto/governance-engine v0.1.0-alpha
+ * Reference engine for agentgovernance/v1 — audit chain + sign artifact +
+ * pending-signatures index, all routed through IGovernanceFilesystem so the
+ * same code runs against Node fs, Supabase Storage, S3, or in-memory.
+ */
+var listPendingSignaturesBuiltin = implementTool(
+  listPendingSignaturesTool,
+  async ({ input, context }) => {
+    if (!context?.governanceConfig) {
+      throw new ToolError({
+        code: "input_invalid",
+        message: "context.governanceConfig is required",
+        cause: { field: "context" }
+      });
+    }
+    let parsed;
+    try {
+      parsed = defineRef(input.signer);
+    } catch (err) {
+      throw new ToolError({
+        code: "input_invalid",
+        message: `signer: ${err.message}`,
+        cause: err
+      });
+    }
+    if (!refMatchesCollection(parsed.value, "identity")) {
+      throw new ToolError({
+        code: "input_invalid",
+        message: `signer: ref kind '${parsed.kind}' is not in the 'identity' collection`
+      });
+    }
+    const pending = await listPendingSignatures(
+      context.governanceConfig,
+      parsed.compact
+    );
+    return { pending };
+  }
+);
+function parseAndAssertCollection(refString, collection, field) {
+  let parsed;
+  try {
+    parsed = defineRef(refString);
+  } catch (err) {
+    throw new ToolError({
+      code: "input_invalid",
+      message: `${field}: ${err.message}`,
+      cause: err
+    });
+  }
+  if (!refMatchesCollection(parsed.value, collection)) {
+    throw new ToolError({
+      code: "input_invalid",
+      message: `${field}: ref kind '${parsed.kind}' is not in the '${collection}' collection`
+    });
+  }
+  return parsed;
+}
+function legacyArtifactPath(ref) {
+  if (ref.kind === "local" && typeof ref.path === "string") return ref.path;
+  throw new ToolError({
+    code: "input_invalid",
+    message: `artifact: only 'local' refs are supported by the v0.1 runtime \u2014 got '${ref.kind}'`
+  });
+}
+function legacySignerString(ref) {
+  if (ref.kind === "operator" && typeof ref.slug === "string")
+    return `operator:${ref.slug}`;
+  if (ref.kind === "user" && typeof ref.id === "string") return `user:${ref.id}`;
+  if (ref.kind === "persona" && typeof ref.id === "string")
+    return `persona:${ref.id}`;
+  if (ref.kind === "email" && typeof ref.address === "string")
+    return `counterparty:${ref.address}`;
+  throw new ToolError({
+    code: "input_invalid",
+    message: `signer: ref kind '${ref.kind}' has no legacy string mapping`
+  });
+}
+function parseLegacyIdentity(refString, field) {
+  const parsed = parseAndAssertCollection(refString, "identity", field);
+  return parsed.compact;
+}
+
+// src/provider/bodies/record-audit-event.body.ts
+var recordAuditEventBuiltin = implementTool(
+  recordAuditEventTool,
+  async ({ input, context }) => {
+    if (!context?.governanceConfig) {
+      throw new ToolError({
+        code: "input_invalid",
+        message: "context.governanceConfig is required",
+        cause: { field: "context" }
+      });
+    }
+    let actorId = null;
+    if (input.actor !== null) {
+      actorId = parseLegacyIdentity(input.actor, "actor");
+    }
+    try {
+      defineRef(input.entity);
+    } catch (err) {
+      throw new ToolError({
+        code: "input_invalid",
+        message: `entity: ${err.message}`,
+        cause: err
+      });
+    }
+    const result = await recordAuditEvent(context.governanceConfig, {
+      ...input.scopeDir !== void 0 ? { scopeDir: input.scopeDir } : {},
+      actorKind: input.actorKind,
+      actorId,
+      entityType: input.entityType,
+      entityId: input.entity,
+      action: input.action,
+      ...input.payload !== void 0 ? { payload: input.payload } : {},
+      ...input.requestId !== void 0 ? { requestId: input.requestId } : {},
+      ...input.traceId !== void 0 ? { traceId: input.traceId } : {},
+      ...input.idempotencyKey !== void 0 ? { idempotencyKey: input.idempotencyKey } : {}
+    });
+    return {
+      logPath: result.logPath,
+      lineIndex: result.lineIndex,
+      anchored: result.anchored,
+      signature: result.event.signature
+    };
+  }
+);
+var requestSignaturesBuiltin = implementTool(
+  requestSignaturesTool,
+  async ({ input, context }) => {
+    if (!context?.governanceConfig) {
+      throw new ToolError({
+        code: "input_invalid",
+        message: "context.governanceConfig is required",
+        cause: { field: "context" }
+      });
+    }
+    const artifactRef = parseAndAssertCollection(
+      input.artifact,
+      "file",
+      "artifact"
+    );
+    const artifactPath = legacyArtifactPath(artifactRef.value);
+    const required = input.requiredSignatures.map((r) => {
+      const sigRef = parseAndAssertCollection(r.signer, "identity", "signer");
+      return {
+        signer: sigRef.compact,
+        ...r.method !== void 0 ? { method: r.method } : {},
+        ...r.weight !== void 0 ? { weight: r.weight } : {},
+        ...r.deadline !== void 0 ? { deadline: r.deadline } : {}
+      };
+    });
+    await addPendingSignatures(context.governanceConfig, artifactPath, required);
+    return { added: required.length };
+  }
+);
+var signArtifactBuiltin = implementTool(
+  signArtifactTool,
+  async ({ input, context }) => {
+    if (!context?.governanceConfig) {
+      throw new ToolError({
+        code: "input_invalid",
+        message: "context.governanceConfig is required",
+        cause: { field: "context" }
+      });
+    }
+    const artifactRef = parseAndAssertCollection(
+      input.artifact,
+      "file",
+      "artifact"
+    );
+    const signerRef = parseAndAssertCollection(
+      input.signer,
+      "identity",
+      "signer"
+    );
+    const artifactPath = legacyArtifactPath(artifactRef.value);
+    const signerLegacy = legacySignerString(signerRef.value);
+    const result = await signArtifact(context.governanceConfig, {
+      artifactPath,
+      signer: signerLegacy,
+      signerKind: input.signerKind,
+      ...input.signerEmail !== void 0 ? { signerEmail: input.signerEmail } : {},
+      method: input.method,
+      evidence: input.evidence,
+      ...input.expectedDocumentHash !== void 0 ? { expectedDocumentHash: input.expectedDocumentHash } : {},
+      ...input.idempotencyKey !== void 0 ? { idempotencyKey: input.idempotencyKey } : {}
+    });
+    return {
+      signaturePath: result.signaturePath,
+      auditLogPath: result.auditLogPath,
+      auditLineIndex: result.auditLineIndex,
+      documentHash: result.signature.documentHash
+    };
+  }
+);
+
+// src/provider/governance-provider.ts
+var governanceProvider = defineDriver({
+  id: "governance-engine-builtin",
+  name: "Governance Runtime (built-in)",
+  description: "In-process implementation of the four AIP-7 governance contracts \u2014 signature creation, audit logging, pending-signatures index. Operates on a workspace root via `governanceConfig` injected from per-call context. No subprocess, no network egress; the host owns the filesystem boundary.",
+  version: "0.1.0",
+  kind: "builtin",
+  implements: [
+    { tool: "governance.sign-artifact", version: "0.1.0" },
+    { tool: "governance.record-audit-event", version: "0.1.0" },
+    { tool: "governance.request-signatures", version: "0.1.0" },
+    { tool: "governance.list-pending-signatures", version: "0.1.0" }
+  ],
+  // Typed bindings — each impl carries its contract handle, so
+  // `defineDriver` derives the execute map keys from `impl.tool.id`
+  // without the author restating them as strings. Drift between a
+  // body and its contract is a compile error.
+  implementations: [
+    signArtifactBuiltin,
+    recordAuditEventBuiltin,
+    requestSignaturesBuiltin,
+    listPendingSignaturesBuiltin
+  ]
+});
+
+export { governanceProvider, listPendingSignaturesBuiltin, recordAuditEventBuiltin, requestSignaturesBuiltin, signArtifactBuiltin };
+//# sourceMappingURL=index.mjs.map
+//# sourceMappingURL=index.mjs.map

package/dist/provider/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/provider/bodies/list-pending-signatures.body.ts","../../src/provider/helpers.ts","../../src/provider/bodies/record-audit-event.body.ts","../../src/provider/bodies/request-signatures.body.ts","../../src/provider/bodies/sign-artifact.body.ts","../../src/provider/governance-provider.ts"],"names":["defineRef","ToolError","refMatchesCollection","implementTool"],"mappings":";;;;;;;;;;;;;AAaO,IAAM,4BAAA,GAA+B,aAAA;AAAA,EAC1C,yBAAA;AAAA,EACA,OAAO,EAAE,KAAA,EAAO,OAAA,EAAQ,KAAM;AAC5B,IAAA,IAAI,CAAC,SAAS,gBAAA,EAAkB;AAC9B,MAAA,MAAM,IAAI,SAAA,CAAU;AAAA,QAClB,IAAA,EAAM,eAAA;AAAA,QACN,OAAA,EAAS,sCAAA;AAAA,QACT,KAAA,EAAO,EAAE,KAAA,EAAO,SAAA;AAAU,OAC3B,CAAA;AAAA,IACH;AAEA,IAAA,IAAI,MAAA;AACJ,IAAA,IAAI;AACF,MAAA,MAAA,GAAS,SAAA,CAAU,MAAM,MAAM,CAAA;AAAA,IACjC,SAAS,GAAA,EAAK;AACZ,MAAA,MAAM,IAAI,SAAA,CAAU;AAAA,QAClB,IAAA,EAAM,eAAA;AAAA,QACN,OAAA,EAAS,CAAA,QAAA,EAAY,GAAA,CAAc,OAAO,CAAA,CAAA;AAAA,QAC1C,KAAA,EAAO;AAAA,OACR,CAAA;AAAA,IACH;AACA,IAAA,IAAI,CAAC,oBAAA,CAAqB,MAAA,CAAO,KAAA,EAAO,UAAU,CAAA,EAAG;AACnD,MAAA,MAAM,IAAI,SAAA,CAAU;AAAA,QAClB,IAAA,EAAM,eAAA;AAAA,QACN,OAAA,EAAS,CAAA,kBAAA,EAAqB,MAAA,CAAO,IAAI,CAAA,qCAAA;AAAA,OAC1C,CAAA;AAAA,IACH;AACA,IAAA,MAAM,UAAU,MAAM,qBAAA;AAAA,MACpB,OAAA,CAAQ,gBAAA;AAAA,MACR,MAAA,CAAO;AAAA,KACT;AACA,IAAA,OAAO,EAAE,OAAA,EAAQ;AAAA,EACnB;AACF;AClCO,SAAS,wBAAA,CACd,SAAA,EACA,UAAA,EACA,KAAA,EAC8B;AAC9B,EAAA,IAAI,MAAA;AACJ,EAAA,IAAI;AACF,IAAA,MAAA,GAASA,UAAU,SAAS,CAAA;AAAA,EAC9B,SAAS,GAAA,EAAK;AACZ,IAAA,MAAM,IAAIC,SAAAA,CAAU;AAAA,MAClB,IAAA,EAAM,eAAA;AAAA,MACN,OAAA,EAAS,CAAA,EAAG,KAAK,CAAA,EAAA,EAAM,IAAc,OAAO,CAAA,CAAA;AAAA,MAC5C,KAAA,EAAO;AAAA,KACR,CAAA;AAAA,EACH;AACA,EAAA,IAAI,CAACC,oBAAAA,CAAqB,MAAA,CAAO,KAAA,EAAO,UAAU,CAAA,EAAG;AACnD,IAAA,MAAM,IAAID,SAAAA,CAAU;AAAA,MAClB,IAAA,EAAM,eAAA;AAAA,MACN,SAAS,CAAA,EAAG,KAAK,eAAe,MAAA,CAAO,IAAI,oBAAoB,UAAU,CAAA,YAAA;AAAA,KAC1E,CAAA;AAAA,EACH;AACA,EAAA,OAAO,MAAA;AACT;AAEO,SAAS,mBAAmB,GAAA,EAGxB;AACT,EAAA,IAAI,GAAA,CAAI,SAAS,OAAA,IAAW,OAAO,IAAI,IAAA,KAAS,QAAA,SAAiB,GAAA,CAAI,IAAA;AACrE,EAAA,MAAM,IAAIA,SAAAA,CAAU;AAAA,IAClB,IAAA,EAAM,eAAA;AAAA,IACN,OAAA,EAAS,CAAA,0EAAA,EAAwE,GAAA,CAAI,IAAI,CAAA,CAAA;AAAA,GAC1F,CAAA;AACH;AAEO,SAAS,mBAAmB,GAAA,EAGxB;AACT,EAAA,IAAI,GAAA,CAAI,IAAA,KAAS,UAAA,IAAc,OAAO,IAAI,IAAA,KAAS,QAAA;AACjD,IAAA,OAAO,CAAA,SAAA,EAAY,IAAI,IAAI,CAAA,CAAA;AAC7B,EAAA,IAAI,GAAA,CAAI,IAAA,KAAS,MAAA,IAAU,OAAO,GAAA,CAAI,OAAO,QAAA,EAAU,OAAO,CAAA,KAAA,EAAQ,GAAA,CAAI,EAAE,CAAA,CAAA;AAC5E,EAAA,IAAI,GAAA,CAAI,IAAA,KAAS,SAAA,IAAa,OAAO,IAAI,EAAA,KAAO,QAAA;AAC9C,IAAA,OAAO,CAAA,QAAA,EAAW,IAAI,EAAE,CAAA,CAAA;AAC1B,EAAA,IAAI,GAAA,CAAI,IAAA,KAAS,OAAA,IAAW,OAAO,IAAI,OAAA,KAAY,QAAA;AACjD,IAAA,OAAO,CAAA,aAAA,EAAgB,IAAI,OAAO,CAAA,CAAA;AACpC,EAAA,MAAM,IAAIA,SAAAA,CAAU;AAAA,IAClB,IAAA,EAAM,eAAA;AAAA,IACN,OAAA,EAAS,CAAA,kBAAA,EAAqB,GAAA,CAAI,IAAI,CAAA,8BAAA;AAAA,GACvC,CAAA;AACH;AAEO,SAAS,mBAAA,CAAoB,WAAmB,KAAA,EAAuB;AAC5E,EAAA,MAAM,MAAA,GAAS,wBAAA,CAAyB,SAAA,EAAW,UAAA,EAAY,KAAK,CAAA;AACpE,EAAA,OAAO,MAAA,CAAO,OAAA;AAChB;;;ACrDO,IAAM,uBAAA,GAA0BE,aAAAA;AAAA,EACrC,oBAAA;AAAA,EACA,OAAO,EAAE,KAAA,EAAO,OAAA,EAAQ,KAAM;AAC5B,IAAA,IAAI,CAAC,SAAS,gBAAA,EAAkB;AAC9B,MAAA,MAAM,IAAIF,SAAAA,CAAU;AAAA,QAClB,IAAA,EAAM,eAAA;AAAA,QACN,OAAA,EAAS,sCAAA;AAAA,QACT,KAAA,EAAO,EAAE,KAAA,EAAO,SAAA;AAAU,OAC3B,CAAA;AAAA,IACH;AAEA,IAAA,IAAI,OAAA,GAAyB,IAAA;AAC7B,IAAA,IAAI,KAAA,CAAM,UAAU,IAAA,EAAM;AACxB,MAAA,OAAA,GAAU,mBAAA,CAAoB,KAAA,CAAM,KAAA,EAAO,OAAO,CAAA;AAAA,IACpD;AACA,IAAA,IAAI;AACF,MAAAD,SAAAA,CAAU,MAAM,MAAM,CAAA;AAAA,IACxB,SAAS,GAAA,EAAK;AACZ,MAAA,MAAM,IAAIC,SAAAA,CAAU;AAAA,QAClB,IAAA,EAAM,eAAA;AAAA,QACN,OAAA,EAAS,CAAA,QAAA,EAAY,GAAA,CAAc,OAAO,CAAA,CAAA;AAAA,QAC1C,KAAA,EAAO;AAAA,OACR,CAAA;AAAA,IACH;AAEA,IAAA,MAAM,MAAA,GAAS,MAAM,gBAAA,CAAiB,OAAA,CAAQ,gBAAA,EAAkB;AAAA,MAC9D,GAAI,MAAM,QAAA,KAAa,MAAA,GAAY,EAAE,QAAA,EAAU,KAAA,CAAM,QAAA,EAAS,GAAI,EAAC;AAAA,MACnE,WAAW,KAAA,CAAM,SAAA;AAAA,MACjB,OAAA;AAAA,MACA,YAAY,KAAA,CAAM,UAAA;AAAA,MAClB,UAAU,KAAA,CAAM,MAAA;AAAA,MAChB,QAAQ,KAAA,CAAM,MAAA;AAAA,MACd,GAAI,MAAM,OAAA,KAAY,MAAA,GAAY,EAAE,OAAA,EAAS,KAAA,CAAM,OAAA,EAAQ,GAAI,EAAC;AAAA,MAChE,GAAI,MAAM,SAAA,KAAc,MAAA,GAAY,EAAE,SAAA,EAAW,KAAA,CAAM,SAAA,EAAU,GAAI,EAAC;AAAA,MACtE,GAAI,MAAM,OAAA,KAAY,MAAA,GAAY,EAAE,OAAA,EAAS,KAAA,CAAM,OAAA,EAAQ,GAAI,EAAC;AAAA,MAChE,GAAI,MAAM,cAAA,KAAmB,MAAA,GACzB,EAAE,cAAA,EAAgB,KAAA,CAAM,cAAA,EAAe,GACvC;AAAC,KACN,CAAA;AAED,IAAA,OAAO;AAAA,MACL,SAAS,MAAA,CAAO,OAAA;AAAA,MAChB,WAAW,MAAA,CAAO,SAAA;AAAA,MAClB,UAAU,MAAA,CAAO,QAAA;AAAA,MACjB,SAAA,EAAW,OAAO,KAAA,CAAM;AAAA,KAC1B;AAAA,EACF;AACF;AChDO,IAAM,wBAAA,GAA2BE,aAAAA;AAAA,EACtC,qBAAA;AAAA,EACA,OAAO,EAAE,KAAA,EAAO,OAAA,EAAQ,KAAM;AAC5B,IAAA,IAAI,CAAC,SAAS,gBAAA,EAAkB;AAC9B,MAAA,MAAM,IAAIF,SAAAA,CAAU;AAAA,QAClB,IAAA,EAAM,eAAA;AAAA,QACN,OAAA,EAAS,sCAAA;AAAA,QACT,KAAA,EAAO,EAAE,KAAA,EAAO,SAAA;AAAU,OAC3B,CAAA;AAAA,IACH;AAEA,IAAA,MAAM,WAAA,GAAc,wBAAA;AAAA,MAClB,KAAA,CAAM,QAAA;AAAA,MACN,MAAA;AAAA,MACA;AAAA,KACF;AACA,IAAA,MAAM,YAAA,GAAe,kBAAA,CAAmB,WAAA,CAAY,KAAK,CAAA;AAEzD,IAAA,MAAM,QAAA,GAAW,KAAA,CAAM,kBAAA,CAAmB,GAAA,CAAI,CAAA,CAAA,KAAK;AACjD,MAAA,MAAM,MAAA,GAAS,wBAAA,CAAyB,CAAA,CAAE,MAAA,EAAQ,YAAY,QAAQ,CAAA;AACtE,MAAA,OAAO;AAAA,QACL,QAAQ,MAAA,CAAO,OAAA;AAAA,QACf,GAAI,EAAE,MAAA,KAAW,MAAA,GAAY,EAAE,MAAA,EAAQ,CAAA,CAAE,MAAA,EAAO,GAAI,EAAC;AAAA,QACrD,GAAI,EAAE,MAAA,KAAW,MAAA,GAAY,EAAE,MAAA,EAAQ,CAAA,CAAE,MAAA,EAAO,GAAI,EAAC;AAAA,QACrD,GAAI,EAAE,QAAA,KAAa,MAAA,GAAY,EAAE,QAAA,EAAU,CAAA,CAAE,QAAA,EAAS,GAAI;AAAC,OAC7D;AAAA,IACF,CAAC,CAAA;AAED,IAAA,MAAM,oBAAA,CAAqB,OAAA,CAAQ,gBAAA,EAAkB,YAAA,EAAc,QAAQ,CAAA;AAC3E,IAAA,OAAO,EAAE,KAAA,EAAO,QAAA,CAAS,MAAA,EAAO;AAAA,EAClC;AACF;ACvBO,IAAM,mBAAA,GAAsBE,aAAAA;AAAA,EACjC,gBAAA;AAAA,EACA,OAAO,EAAE,KAAA,EAAO,OAAA,EAAQ,KAAM;AAC5B,IAAA,IAAI,CAAC,SAAS,gBAAA,EAAkB;AAC9B,MAAA,MAAM,IAAIF,SAAAA,CAAU;AAAA,QAClB,IAAA,EAAM,eAAA;AAAA,QACN,OAAA,EAAS,sCAAA;AAAA,QACT,KAAA,EAAO,EAAE,KAAA,EAAO,SAAA;AAAU,OAC3B,CAAA;AAAA,IACH;AAEA,IAAA,MAAM,WAAA,GAAc,wBAAA;AAAA,MAClB,KAAA,CAAM,QAAA;AAAA,MACN,MAAA;AAAA,MACA;AAAA,KACF;AACA,IAAA,MAAM,SAAA,GAAY,wBAAA;AAAA,MAChB,KAAA,CAAM,MAAA;AAAA,MACN,UAAA;AAAA,MACA;AAAA,KACF;AAGA,IAAA,MAAM,YAAA,GAAe,kBAAA,CAAmB,WAAA,CAAY,KAAK,CAAA;AACzD,IAAA,MAAM,YAAA,GAAe,kBAAA,CAAmB,SAAA,CAAU,KAAK,CAAA;AAEvD,IAAA,MAAM,MAAA,GAAS,MAAM,YAAA,CAAa,OAAA,CAAQ,gBAAA,EAAkB;AAAA,MAC1D,YAAA;AAAA,MACA,MAAA,EAAQ,YAAA;AAAA,MACR,YAAY,KAAA,CAAM,UAAA;AAAA,MAClB,GAAI,MAAM,WAAA,KAAgB,MAAA,GACtB,EAAE,WAAA,EAAa,KAAA,CAAM,WAAA,EAAY,GACjC,EAAC;AAAA,MACL,QAAQ,KAAA,CAAM,MAAA;AAAA,MACd,UAAU,KAAA,CAAM,QAAA;AAAA,MAChB,GAAI,MAAM,oBAAA,KAAyB,MAAA,GAC/B,EAAE,oBAAA,EAAsB,KAAA,CAAM,oBAAA,EAAqB,GACnD,EAAC;AAAA,MACL,GAAI,MAAM,cAAA,KAAmB,MAAA,GACzB,EAAE,cAAA,EAAgB,KAAA,CAAM,cAAA,EAAe,GACvC;AAAC,KACN,CAAA;AAED,IAAA,OAAO;AAAA,MACL,eAAe,MAAA,CAAO,aAAA;AAAA,MACtB,cAAc,MAAA,CAAO,YAAA;AAAA,MACrB,gBAAgB,MAAA,CAAO,cAAA;AAAA,MACvB,YAAA,EAAc,OAAO,SAAA,CAAU;AAAA,KACjC;AAAA,EACF;AACF;;;AC/CO,IAAM,qBAAqB,YAAA,CAAa;AAAA,EAC7C,EAAA,EAAI,2BAAA;AAAA,EACJ,IAAA,EAAM,+BAAA;AAAA,EACN,WAAA,EACE,mSAAA;AAAA,EAIF,OAAA,EAAS,OAAA;AAAA,EACT,IAAA,EAAM,SAAA;AAAA,EACN,UAAA,EAAY;AAAA,IACV,EAAE,IAAA,EAAM,0BAAA,EAA4B,OAAA,EAAS,OAAA,EAAQ;AAAA,IACrD,EAAE,IAAA,EAAM,+BAAA,EAAiC,OAAA,EAAS,OAAA,EAAQ;AAAA,IAC1D,EAAE,IAAA,EAAM,+BAAA,EAAiC,OAAA,EAAS,OAAA,EAAQ;AAAA,IAC1D,EAAE,IAAA,EAAM,oCAAA,EAAsC,OAAA,EAAS,OAAA;AAAQ,GACjE;AAAA;AAAA;AAAA;AAAA;AAAA,EAKA,eAAA,EAAiB;AAAA,IACf,mBAAA;AAAA,IACA,uBAAA;AAAA,IACA,wBAAA;AAAA,IACA;AAAA;AAEJ,CAAC","file":"index.mjs","sourcesContent":["/**\n * Provider body for the `governance.list-pending-signatures` TOOL contract.\n * Bound via `implementTool` — typed input/context flow from the\n * contract handle.\n */\n\nimport { defineRef, refMatchesCollection } from \"@agentproto/ref\"\nimport { ToolError } from \"@agentproto/tool\"\nimport { implementTool } from \"@agentproto/driver\"\n\nimport { listPendingSignatures } from \"../../pending-signatures-index.js\"\nimport { listPendingSignaturesTool } from \"../../tools/list-pending-signatures.tool.js\"\n\nexport const listPendingSignaturesBuiltin = implementTool(\n  listPendingSignaturesTool,\n  async ({ input, context }) => {\n    if (!context?.governanceConfig) {\n      throw new ToolError({\n        code: \"input_invalid\",\n        message: \"context.governanceConfig is required\",\n        cause: { field: \"context\" },\n      })\n    }\n\n    let parsed\n    try {\n      parsed = defineRef(input.signer)\n    } catch (err) {\n      throw new ToolError({\n        code: \"input_invalid\",\n        message: `signer: ${(err as Error).message}`,\n        cause: err,\n      })\n    }\n    if (!refMatchesCollection(parsed.value, \"identity\")) {\n      throw new ToolError({\n        code: \"input_invalid\",\n        message: `signer: ref kind '${parsed.kind}' is not in the 'identity' collection`,\n      })\n    }\n    const pending = await listPendingSignatures(\n      context.governanceConfig,\n      parsed.compact\n    )\n    return { pending }\n  }\n)\n","/**\n * Shared Ref-parsing helpers used by every governance provider body.\n *\n * The bodies accept AIP-27 `Ref` compact strings on the contract surface\n * and bridge to the legacy string forms the v0.1 runtime helpers\n * (`signArtifact`, `recordAuditEvent`, …) still consume. The bridge\n * goes away when the doctype schemas migrate to native Ref objects (M1.5).\n */\n\nimport { defineRef, refMatchesCollection } from \"@agentproto/ref\"\nimport { ToolError } from \"@agentproto/tool\"\n\nexport function parseAndAssertCollection(\n  refString: string,\n  collection: string,\n  field: string\n): ReturnType<typeof defineRef> {\n  let parsed\n  try {\n    parsed = defineRef(refString)\n  } catch (err) {\n    throw new ToolError({\n      code: \"input_invalid\",\n      message: `${field}: ${(err as Error).message}`,\n      cause: err,\n    })\n  }\n  if (!refMatchesCollection(parsed.value, collection)) {\n    throw new ToolError({\n      code: \"input_invalid\",\n      message: `${field}: ref kind '${parsed.kind}' is not in the '${collection}' collection`,\n    })\n  }\n  return parsed\n}\n\nexport function legacyArtifactPath(ref: {\n  kind: string\n  [key: string]: unknown\n}): string {\n  if (ref.kind === \"local\" && typeof ref.path === \"string\") return ref.path\n  throw new ToolError({\n    code: \"input_invalid\",\n    message: `artifact: only 'local' refs are supported by the v0.1 runtime — got '${ref.kind}'`,\n  })\n}\n\nexport function legacySignerString(ref: {\n  kind: string\n  [key: string]: unknown\n}): string {\n  if (ref.kind === \"operator\" && typeof ref.slug === \"string\")\n    return `operator:${ref.slug}`\n  if (ref.kind === \"user\" && typeof ref.id === \"string\") return `user:${ref.id}`\n  if (ref.kind === \"persona\" && typeof ref.id === \"string\")\n    return `persona:${ref.id}`\n  if (ref.kind === \"email\" && typeof ref.address === \"string\")\n    return `counterparty:${ref.address}`\n  throw new ToolError({\n    code: \"input_invalid\",\n    message: `signer: ref kind '${ref.kind}' has no legacy string mapping`,\n  })\n}\n\nexport function parseLegacyIdentity(refString: string, field: string): string {\n  const parsed = parseAndAssertCollection(refString, \"identity\", field)\n  return parsed.compact\n}\n","/**\n * Provider body for the `governance.record-audit-event` TOOL contract.\n * Bound via `implementTool` — typed input/context flow from the\n * contract handle.\n */\n\nimport { defineRef } from \"@agentproto/ref\"\nimport { ToolError } from \"@agentproto/tool\"\nimport { implementTool } from \"@agentproto/driver\"\n\nimport { recordAuditEvent } from \"../../audit-chain.js\"\nimport { recordAuditEventTool } from \"../../tools/record-audit-event.tool.js\"\nimport { parseLegacyIdentity } from \"../helpers.js\"\n\nexport const recordAuditEventBuiltin = implementTool(\n  recordAuditEventTool,\n  async ({ input, context }) => {\n    if (!context?.governanceConfig) {\n      throw new ToolError({\n        code: \"input_invalid\",\n        message: \"context.governanceConfig is required\",\n        cause: { field: \"context\" },\n      })\n    }\n\n    let actorId: string | null = null\n    if (input.actor !== null) {\n      actorId = parseLegacyIdentity(input.actor, \"actor\")\n    }\n    try {\n      defineRef(input.entity)\n    } catch (err) {\n      throw new ToolError({\n        code: \"input_invalid\",\n        message: `entity: ${(err as Error).message}`,\n        cause: err,\n      })\n    }\n\n    const result = await recordAuditEvent(context.governanceConfig, {\n      ...(input.scopeDir !== undefined ? { scopeDir: input.scopeDir } : {}),\n      actorKind: input.actorKind,\n      actorId,\n      entityType: input.entityType,\n      entityId: input.entity,\n      action: input.action,\n      ...(input.payload !== undefined ? { payload: input.payload } : {}),\n      ...(input.requestId !== undefined ? { requestId: input.requestId } : {}),\n      ...(input.traceId !== undefined ? { traceId: input.traceId } : {}),\n      ...(input.idempotencyKey !== undefined\n        ? { idempotencyKey: input.idempotencyKey }\n        : {}),\n    })\n\n    return {\n      logPath: result.logPath,\n      lineIndex: result.lineIndex,\n      anchored: result.anchored,\n      signature: result.event.signature,\n    }\n  }\n)\n","/**\n * Provider body for the `governance.request-signatures` TOOL contract.\n * Bound via `implementTool` — typed input/context flow from the\n * contract handle.\n */\n\nimport { ToolError } from \"@agentproto/tool\"\nimport { implementTool } from \"@agentproto/driver\"\n\nimport { addPendingSignatures } from \"../../pending-signatures-index.js\"\nimport { requestSignaturesTool } from \"../../tools/request-signatures.tool.js\"\nimport { legacyArtifactPath, parseAndAssertCollection } from \"../helpers.js\"\n\nexport const requestSignaturesBuiltin = implementTool(\n  requestSignaturesTool,\n  async ({ input, context }) => {\n    if (!context?.governanceConfig) {\n      throw new ToolError({\n        code: \"input_invalid\",\n        message: \"context.governanceConfig is required\",\n        cause: { field: \"context\" },\n      })\n    }\n\n    const artifactRef = parseAndAssertCollection(\n      input.artifact,\n      \"file\",\n      \"artifact\"\n    )\n    const artifactPath = legacyArtifactPath(artifactRef.value)\n\n    const required = input.requiredSignatures.map(r => {\n      const sigRef = parseAndAssertCollection(r.signer, \"identity\", \"signer\")\n      return {\n        signer: sigRef.compact,\n        ...(r.method !== undefined ? { method: r.method } : {}),\n        ...(r.weight !== undefined ? { weight: r.weight } : {}),\n        ...(r.deadline !== undefined ? { deadline: r.deadline } : {}),\n      }\n    })\n\n    await addPendingSignatures(context.governanceConfig, artifactPath, required)\n    return { added: required.length }\n  }\n)\n","/**\n * Provider body for the `governance.sign-artifact` TOOL contract.\n *\n * Bound to `signArtifactTool` via `implementTool` — input/context types\n * flow from the contract handle's generics, so the body needs no manual\n * casts. The matching `defineTool` handle in\n * `tools/sign-artifact.tool.ts` carries only the contract (id, schemas,\n * mutates, approval, riskLevel) per AIP-14.\n */\n\nimport { ToolError } from \"@agentproto/tool\"\nimport { implementTool } from \"@agentproto/driver\"\n\nimport { signArtifact } from \"../../sign-artifact.js\"\nimport { signArtifactTool } from \"../../tools/sign-artifact.tool.js\"\nimport {\n  legacyArtifactPath,\n  legacySignerString,\n  parseAndAssertCollection,\n} from \"../helpers.js\"\n\nexport const signArtifactBuiltin = implementTool(\n  signArtifactTool,\n  async ({ input, context }) => {\n    if (!context?.governanceConfig) {\n      throw new ToolError({\n        code: \"input_invalid\",\n        message: \"context.governanceConfig is required\",\n        cause: { field: \"context\" },\n      })\n    }\n\n    const artifactRef = parseAndAssertCollection(\n      input.artifact,\n      \"file\",\n      \"artifact\"\n    )\n    const signerRef = parseAndAssertCollection(\n      input.signer,\n      \"identity\",\n      \"signer\"\n    )\n\n    // Bridge to legacy runtime input (string forms). M1.5 makes this go away.\n    const artifactPath = legacyArtifactPath(artifactRef.value)\n    const signerLegacy = legacySignerString(signerRef.value)\n\n    const result = await signArtifact(context.governanceConfig, {\n      artifactPath,\n      signer: signerLegacy,\n      signerKind: input.signerKind,\n      ...(input.signerEmail !== undefined\n        ? { signerEmail: input.signerEmail }\n        : {}),\n      method: input.method,\n      evidence: input.evidence as never,\n      ...(input.expectedDocumentHash !== undefined\n        ? { expectedDocumentHash: input.expectedDocumentHash }\n        : {}),\n      ...(input.idempotencyKey !== undefined\n        ? { idempotencyKey: input.idempotencyKey }\n        : {}),\n    })\n\n    return {\n      signaturePath: result.signaturePath,\n      auditLogPath: result.auditLogPath,\n      auditLineIndex: result.auditLineIndex,\n      documentHash: result.signature.documentHash,\n    }\n  }\n)\n","/**\n * AIP-30 PROVIDER for the four `governance.*` TOOL contracts.\n *\n * `kind: \"builtin\"` — runs in-process against `governanceConfig`\n * injected via per-call context. No subprocess, no SDK package load,\n * no network hop. Bodies are typed via `implementTool` — the compiler\n * enforces shape match between each body and its contract's\n * input/output/context generics, the same way Solidity's\n * `MyToken is IERC20` enforces interface conformance.\n *\n * Each implementation here can be re-adapted to AI SDK or Mastra\n * surfaces via `toAiSdkTool(impl, { context })` / `toMastraTool(...)`,\n * so the same body powers `runTool({ candidates: [...] })` AND\n * `streamText({ tools: { ... } })` AND `agent.stream({ tools: ... })`\n * with no duplication.\n */\n\nimport { defineDriver } from \"@agentproto/driver\"\n\nimport { listPendingSignaturesBuiltin } from \"./bodies/list-pending-signatures.body.js\"\nimport { recordAuditEventBuiltin } from \"./bodies/record-audit-event.body.js\"\nimport { requestSignaturesBuiltin } from \"./bodies/request-signatures.body.js\"\nimport { signArtifactBuiltin } from \"./bodies/sign-artifact.body.js\"\n\nexport const governanceProvider = defineDriver({\n  id: \"governance-engine-builtin\",\n  name: \"Governance Runtime (built-in)\",\n  description:\n    \"In-process implementation of the four AIP-7 governance contracts — \" +\n    \"signature creation, audit logging, pending-signatures index. Operates \" +\n    \"on a workspace root via `governanceConfig` injected from per-call context. \" +\n    \"No subprocess, no network egress; the host owns the filesystem boundary.\",\n  version: \"0.1.0\",\n  kind: \"builtin\",\n  implements: [\n    { tool: \"governance.sign-artifact\", version: \"0.1.0\" },\n    { tool: \"governance.record-audit-event\", version: \"0.1.0\" },\n    { tool: \"governance.request-signatures\", version: \"0.1.0\" },\n    { tool: \"governance.list-pending-signatures\", version: \"0.1.0\" },\n  ],\n  // Typed bindings — each impl carries its contract handle, so\n  // `defineDriver` derives the execute map keys from `impl.tool.id`\n  // without the author restating them as strings. Drift between a\n  // body and its contract is a compile error.\n  implementations: [\n    signArtifactBuiltin,\n    recordAuditEventBuiltin,\n    requestSignaturesBuiltin,\n    listPendingSignaturesBuiltin,\n  ],\n})\n"]}