@agentproto/governance 0.1.0-alpha.0

package/dist/renderers/index.d.ts

@@ -0,0 +1,73 @@
+import { z } from 'zod';
+
+/**
+ * Renderer wrapper for the `governance.signing-portal` canvakit template.
+ *
+ * The template is a self-contained HTML page that presents a `typed_name`
+ * signing form. The host application is responsible for:
+ *   1. Resolving the artifact + computing its SHA-256 documentHash.
+ *   2. Generating a one-time nonce + signing URL.
+ *   3. Receiving the form POST + writing the signature.json via
+ *      @agentproto/governance `signArtifact` runtime helper.
+ *
+ * This module does NOT call canvakit directly — it just exposes the template
+ * id, the variable schema, and a builder helper. Apps wire it to their canvakit
+ * renderer (e.g., @canvakit/core).
+ */
+
+declare const SIGNING_PORTAL_TEMPLATE_ID: "governance.signing-portal";
+/** Path to the bundled .canvakit.html template (relative to the package root). */
+declare const SIGNING_PORTAL_TEMPLATE_PATH: "src/spec/canvakit-templates/governance.signing-portal/template.canvakit.html";
+declare const signingPortalVariablesSchema: z.ZodObject<{
+    artifactPath: z.ZodString;
+    artifactTitle: z.ZodString;
+    artifactExcerpt: z.ZodOptional<z.ZodString>;
+    documentHash: z.ZodString;
+    signerKind: z.ZodEnum<{
+        operator: "operator";
+        user: "user";
+        counterparty: "counterparty";
+        agent: "agent";
+        external: "external";
+    }>;
+    signerSlug: z.ZodString;
+    signerName: z.ZodOptional<z.ZodString>;
+    signerEmail: z.ZodOptional<z.ZodEmail>;
+    nonce: z.ZodString;
+    signUrl: z.ZodString;
+    agencyName: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+type SigningPortalVariables = z.infer<typeof signingPortalVariablesSchema>;
+/** Build the variable bag for the canvakit template, applying defaults for absent fields. */
+declare function signingPortalVariables(input: SigningPortalVariables): Record<string, string>;
+
+/**
+ * Renderer wrapper for the `governance.signature-card` canvakit template.
+ *
+ * Stub — Phase 4. Will display a single signature event as a compact card
+ * (signer, method, timestamp, document hash truncated, evidence summary).
+ *
+ * For now, callers MAY render their own UI directly from a Signature object.
+ */
+declare const SIGNATURE_CARD_TEMPLATE_ID: "governance.signature-card";
+declare const SIGNATURE_CARD_TEMPLATE_PATH: "src/spec/canvakit-templates/governance.signature-card/template.canvakit.html";
+
+/**
+ * Renderer wrapper for the `governance.audit-timeline` canvakit template.
+ *
+ * Stub — Phase 4. Will display an audit-log.jsonl as a vertical timeline
+ * (chronological, color-coded by action verb, with hash-chain integrity badge).
+ */
+declare const AUDIT_TIMELINE_TEMPLATE_ID: "governance.audit-timeline";
+declare const AUDIT_TIMELINE_TEMPLATE_PATH: "src/spec/canvakit-templates/governance.audit-timeline/template.canvakit.html";
+
+/**
+ * Renderer wrapper for the `governance.policy-summary` canvakit template.
+ *
+ * Stub — Phase 4. Will render a POLICY.md as a human-readable summary
+ * (caps, threshold, required signers, escalation chain).
+ */
+declare const POLICY_SUMMARY_TEMPLATE_ID: "governance.policy-summary";
+declare const POLICY_SUMMARY_TEMPLATE_PATH: "src/spec/canvakit-templates/governance.policy-summary/template.canvakit.html";
+
+export { AUDIT_TIMELINE_TEMPLATE_ID, AUDIT_TIMELINE_TEMPLATE_PATH, POLICY_SUMMARY_TEMPLATE_ID, POLICY_SUMMARY_TEMPLATE_PATH, SIGNATURE_CARD_TEMPLATE_ID, SIGNATURE_CARD_TEMPLATE_PATH, SIGNING_PORTAL_TEMPLATE_ID, SIGNING_PORTAL_TEMPLATE_PATH, type SigningPortalVariables, signingPortalVariables, signingPortalVariablesSchema };

package/dist/renderers/index.mjs

@@ -0,0 +1,64 @@
+import { z } from 'zod';
+
+/**
+ * @agentproto/governance v0.1.0-alpha
+ * agentgovernance/v1 — universal contractual approval framework.
+ * Vendor-neutral. Filesystem-first. Third-party verifiable.
+ */
+
+var SIGNING_PORTAL_TEMPLATE_ID = "governance.signing-portal";
+var SIGNING_PORTAL_TEMPLATE_PATH = "src/spec/canvakit-templates/governance.signing-portal/template.canvakit.html";
+var signingPortalVariablesSchema = z.object({
+  /** Workspace-relative path to the artifact being signed. */
+  artifactPath: z.string().min(1),
+  /** Human-readable title to display (e.g., agreement title). */
+  artifactTitle: z.string().min(1),
+  /** Optional short excerpt of the artifact body (rendered above the form). */
+  artifactExcerpt: z.string().optional(),
+  /** SHA-256 hex of the artifact bytes; same value gets stored in signature.json. */
+  documentHash: z.string().regex(/^[a-f0-9]{64}$/),
+  /** Canonical signer kind (operator, user, counterparty, agent, external). */
+  signerKind: z.enum(["operator", "user", "counterparty", "agent", "external"]),
+  /** Canonical signer slug (without the `<kind>:` prefix). */
+  signerSlug: z.string().min(1),
+  /** Pre-filled name (if known); leave blank for a fresh portal session. */
+  signerName: z.string().optional(),
+  signerEmail: z.email().optional(),
+  /** One-shot nonce token; signing endpoint MUST validate + invalidate on submit. */
+  nonce: z.string().min(1),
+  /** URL the form POSTs to. The endpoint receives a form-encoded body. */
+  signUrl: z.string().min(1),
+  /** Optional agency / company name shown in the lead paragraph. */
+  agencyName: z.string().optional()
+});
+function signingPortalVariables(input) {
+  return {
+    artifactPath: input.artifactPath,
+    artifactTitle: input.artifactTitle,
+    artifactExcerpt: input.artifactExcerpt ?? "",
+    documentHash: input.documentHash,
+    signerKind: input.signerKind,
+    signerSlug: input.signerSlug,
+    signerName: input.signerName ?? "",
+    signerEmail: input.signerEmail ?? "",
+    nonce: input.nonce,
+    signUrl: input.signUrl,
+    agencyName: input.agencyName ?? ""
+  };
+}
+
+// src/spec/renderers/signature-card.ts
+var SIGNATURE_CARD_TEMPLATE_ID = "governance.signature-card";
+var SIGNATURE_CARD_TEMPLATE_PATH = "src/spec/canvakit-templates/governance.signature-card/template.canvakit.html";
+
+// src/spec/renderers/audit-timeline.ts
+var AUDIT_TIMELINE_TEMPLATE_ID = "governance.audit-timeline";
+var AUDIT_TIMELINE_TEMPLATE_PATH = "src/spec/canvakit-templates/governance.audit-timeline/template.canvakit.html";
+
+// src/spec/renderers/policy-summary.ts
+var POLICY_SUMMARY_TEMPLATE_ID = "governance.policy-summary";
+var POLICY_SUMMARY_TEMPLATE_PATH = "src/spec/canvakit-templates/governance.policy-summary/template.canvakit.html";
+
+export { AUDIT_TIMELINE_TEMPLATE_ID, AUDIT_TIMELINE_TEMPLATE_PATH, POLICY_SUMMARY_TEMPLATE_ID, POLICY_SUMMARY_TEMPLATE_PATH, SIGNATURE_CARD_TEMPLATE_ID, SIGNATURE_CARD_TEMPLATE_PATH, SIGNING_PORTAL_TEMPLATE_ID, SIGNING_PORTAL_TEMPLATE_PATH, signingPortalVariables, signingPortalVariablesSchema };
+//# sourceMappingURL=index.mjs.map
+//# sourceMappingURL=index.mjs.map

package/dist/renderers/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/spec/renderers/signing-portal.ts","../../src/spec/renderers/signature-card.ts","../../src/spec/renderers/audit-timeline.ts","../../src/spec/renderers/policy-summary.ts"],"names":[],"mappings":";;;;;;;;AAiBO,IAAM,0BAAA,GAA6B;AAGnC,IAAM,4BAAA,GACX;AAEK,IAAM,4BAAA,GAA+B,EAAE,MAAA,CAAO;AAAA;AAAA,EAEnD,YAAA,EAAc,CAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA;AAAA;AAAA,EAE9B,aAAA,EAAe,CAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA;AAAA;AAAA,EAE/B,eAAA,EAAiB,CAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA;AAAA,EAErC,YAAA,EAAc,CAAA,CAAE,MAAA,EAAO,CAAE,MAAM,gBAAgB,CAAA;AAAA;AAAA,EAE/C,UAAA,EAAY,EAAE,IAAA,CAAK,CAAC,YAAY,MAAA,EAAQ,cAAA,EAAgB,OAAA,EAAS,UAAU,CAAC,CAAA;AAAA;AAAA,EAE5E,UAAA,EAAY,CAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA;AAAA;AAAA,EAE5B,UAAA,EAAY,CAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,EAChC,WAAA,EAAa,CAAA,CAAE,KAAA,EAAM,CAAE,QAAA,EAAS;AAAA;AAAA,EAEhC,KAAA,EAAO,CAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA;AAAA;AAAA,EAEvB,OAAA,EAAS,CAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA;AAAA;AAAA,EAEzB,UAAA,EAAY,CAAA,CAAE,MAAA,EAAO,CAAE,QAAA;AACzB,CAAC;AAMM,SAAS,uBACd,KAAA,EACwB;AAGxB,EAAA,OAAO;AAAA,IACL,cAAc,KAAA,CAAM,YAAA;AAAA,IACpB,eAAe,KAAA,CAAM,aAAA;AAAA,IACrB,eAAA,EAAiB,MAAM,eAAA,IAAmB,EAAA;AAAA,IAC1C,cAAc,KAAA,CAAM,YAAA;AAAA,IACpB,YAAY,KAAA,CAAM,UAAA;AAAA,IAClB,YAAY,KAAA,CAAM,UAAA;AAAA,IAClB,UAAA,EAAY,MAAM,UAAA,IAAc,EAAA;AAAA,IAChC,WAAA,EAAa,MAAM,WAAA,IAAe,EAAA;AAAA,IAClC,OAAO,KAAA,CAAM,KAAA;AAAA,IACb,SAAS,KAAA,CAAM,OAAA;AAAA,IACf,UAAA,EAAY,MAAM,UAAA,IAAc;AAAA,GAClC;AACF;;;AC5DO,IAAM,0BAAA,GAA6B;AAEnC,IAAM,4BAAA,GACX;;;ACLK,IAAM,0BAAA,GAA6B;AAEnC,IAAM,4BAAA,GACX;;;ACHK,IAAM,0BAAA,GAA6B;AAEnC,IAAM,4BAAA,GACX","file":"index.mjs","sourcesContent":["/**\n * Renderer wrapper for the `governance.signing-portal` canvakit template.\n *\n * The template is a self-contained HTML page that presents a `typed_name`\n * signing form. The host application is responsible for:\n *   1. Resolving the artifact + computing its SHA-256 documentHash.\n *   2. Generating a one-time nonce + signing URL.\n *   3. Receiving the form POST + writing the signature.json via\n *      @agentproto/governance `signArtifact` runtime helper.\n *\n * This module does NOT call canvakit directly — it just exposes the template\n * id, the variable schema, and a builder helper. Apps wire it to their canvakit\n * renderer (e.g., @canvakit/core).\n */\n\nimport { z } from \"zod\"\n\nexport const SIGNING_PORTAL_TEMPLATE_ID = \"governance.signing-portal\" as const\n\n/** Path to the bundled .canvakit.html template (relative to the package root). */\nexport const SIGNING_PORTAL_TEMPLATE_PATH =\n  \"src/spec/canvakit-templates/governance.signing-portal/template.canvakit.html\" as const\n\nexport const signingPortalVariablesSchema = z.object({\n  /** Workspace-relative path to the artifact being signed. */\n  artifactPath: z.string().min(1),\n  /** Human-readable title to display (e.g., agreement title). */\n  artifactTitle: z.string().min(1),\n  /** Optional short excerpt of the artifact body (rendered above the form). */\n  artifactExcerpt: z.string().optional(),\n  /** SHA-256 hex of the artifact bytes; same value gets stored in signature.json. */\n  documentHash: z.string().regex(/^[a-f0-9]{64}$/),\n  /** Canonical signer kind (operator, user, counterparty, agent, external). */\n  signerKind: z.enum([\"operator\", \"user\", \"counterparty\", \"agent\", \"external\"]),\n  /** Canonical signer slug (without the `<kind>:` prefix). */\n  signerSlug: z.string().min(1),\n  /** Pre-filled name (if known); leave blank for a fresh portal session. */\n  signerName: z.string().optional(),\n  signerEmail: z.email().optional(),\n  /** One-shot nonce token; signing endpoint MUST validate + invalidate on submit. */\n  nonce: z.string().min(1),\n  /** URL the form POSTs to. The endpoint receives a form-encoded body. */\n  signUrl: z.string().min(1),\n  /** Optional agency / company name shown in the lead paragraph. */\n  agencyName: z.string().optional(),\n})\nexport type SigningPortalVariables = z.infer<\n  typeof signingPortalVariablesSchema\n>\n\n/** Build the variable bag for the canvakit template, applying defaults for absent fields. */\nexport function signingPortalVariables(\n  input: SigningPortalVariables\n): Record<string, string> {\n  // canvakit's mustache engine treats undefined / \"\" identically for falsy\n  // sections; we coerce optional fields to \"\".\n  return {\n    artifactPath: input.artifactPath,\n    artifactTitle: input.artifactTitle,\n    artifactExcerpt: input.artifactExcerpt ?? \"\",\n    documentHash: input.documentHash,\n    signerKind: input.signerKind,\n    signerSlug: input.signerSlug,\n    signerName: input.signerName ?? \"\",\n    signerEmail: input.signerEmail ?? \"\",\n    nonce: input.nonce,\n    signUrl: input.signUrl,\n    agencyName: input.agencyName ?? \"\",\n  }\n}\n","/**\n * Renderer wrapper for the `governance.signature-card` canvakit template.\n *\n * Stub — Phase 4. Will display a single signature event as a compact card\n * (signer, method, timestamp, document hash truncated, evidence summary).\n *\n * For now, callers MAY render their own UI directly from a Signature object.\n */\n\nexport const SIGNATURE_CARD_TEMPLATE_ID = \"governance.signature-card\" as const\n\nexport const SIGNATURE_CARD_TEMPLATE_PATH =\n  \"src/spec/canvakit-templates/governance.signature-card/template.canvakit.html\" as const\n\n// TODO(phase-4): implement template + variables schema.\n","/**\n * Renderer wrapper for the `governance.audit-timeline` canvakit template.\n *\n * Stub — Phase 4. Will display an audit-log.jsonl as a vertical timeline\n * (chronological, color-coded by action verb, with hash-chain integrity badge).\n */\n\nexport const AUDIT_TIMELINE_TEMPLATE_ID = \"governance.audit-timeline\" as const\n\nexport const AUDIT_TIMELINE_TEMPLATE_PATH =\n  \"src/spec/canvakit-templates/governance.audit-timeline/template.canvakit.html\" as const\n\n// TODO(phase-4): implement template + variables schema.\n","/**\n * Renderer wrapper for the `governance.policy-summary` canvakit template.\n *\n * Stub — Phase 4. Will render a POLICY.md as a human-readable summary\n * (caps, threshold, required signers, escalation chain).\n */\n\nexport const POLICY_SUMMARY_TEMPLATE_ID = \"governance.policy-summary\" as const\n\nexport const POLICY_SUMMARY_TEMPLATE_PATH =\n  \"src/spec/canvakit-templates/governance.policy-summary/template.canvakit.html\" as const\n\n// TODO(phase-4): implement template + variables schema.\n"]}

package/dist/validators/index.d.ts

@@ -0,0 +1,61 @@
+import { AuditEvent, Signature } from '../doctypes/index.js';
+import { a as Policy } from '../policy-YqpSg3Ep.js';
+import { V as VerifyChainOptions, a as VerifyChainResult } from '../verify-e_UfVr02.js';
+import 'zod';
+
+/**
+ * agentgovernance/v1 validators.
+ *
+ * Per-doctype validators that take file content (string) and return a typed
+ * ValidationResult. Cross-doctype consistency checks live alongside.
+ *
+ * Validators do NOT touch the filesystem — callers pass file contents in.
+ * For FS-aware orchestration, see `../../runtime/`.
+ */
+
+type ValidationResult<T = unknown> = {
+    ok: true;
+    value: T;
+    warnings: string[];
+} | {
+    ok: false;
+    errors: ValidationError[];
+    warnings: string[];
+};
+interface ValidationError {
+    path: string[];
+    message: string;
+    code?: string;
+}
+/**
+ * Validate a `signature.json` file content (raw JSON string).
+ */
+declare function validateSignature(json: string): ValidationResult<Signature>;
+/**
+ * Validate a single line of an audit-log.jsonl file.
+ *
+ * Whitespace is trimmed; empty input returns parse_error.
+ */
+declare function validateAuditEvent(line: string): ValidationResult<AuditEvent>;
+/**
+ * Validate a POLICY.md file content (markdown with YAML frontmatter).
+ */
+declare function validatePolicy(markdown: string): ValidationResult<Policy>;
+/**
+ * Validate an entire audit-log.jsonl file: every line parses + every line
+ * passes the audit-event schema + the hash chain verifies end-to-end.
+ *
+ * Returns the parsed events on success; the first mismatch (schema or chain)
+ * on failure.
+ */
+declare function validateAuditLog(jsonl: string, opts: VerifyChainOptions): ValidationResult<{
+    events: AuditEvent[];
+    chain: VerifyChainResult;
+}>;
+/**
+ * Verify that a signature's `documentHash` matches the SHA-256 of the artifact bytes
+ * it claims to sign.
+ */
+declare function validateSignatureAgainstArtifact(signature: Signature, artifactBytes: Uint8Array, computeSha256Hex: (bytes: Uint8Array) => string): ValidationResult<true>;
+
+export { AuditEvent, Policy, Signature, type ValidationError, type ValidationResult, validateAuditEvent, validateAuditLog, validatePolicy, validateSignature, validateSignatureAgainstArtifact };

package/dist/validators/index.mjs

@@ -0,0 +1,5 @@
+export { validateAuditEvent, validateAuditLog, validatePolicy, validateSignature, validateSignatureAgainstArtifact } from '../chunk-UVBFLWSG.mjs';
+import '../chunk-VWEBMWO2.mjs';
+import '../chunk-J2DX2WOA.mjs';
+//# sourceMappingURL=index.mjs.map
+//# sourceMappingURL=index.mjs.map

package/dist/validators/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"names":[],"mappings":"","file":"index.mjs"}

package/dist/verify-e_UfVr02.d.ts

@@ -0,0 +1,50 @@
+/**
+ * agentgovernance/v1 hash-chain — verifier.
+ *
+ * Walks an audit-log.jsonl file, recomputing each line's signature given the
+ * previous one, and reports the first mismatch. Reports either:
+ *   - ok with the count of verified lines + last signature (handy for anchoring)
+ *   - first-mismatch diagnostic (line index, expected vs actual)
+ *
+ * The verifier is intentionally simple so third-party implementations in any
+ * language can be tested for compatibility. See `protocol.md` for the wire
+ * format and reference test vectors.
+ */
+interface VerifyChainOptions {
+    /** HMAC secret (must match the one used to compute signatures). */
+    secret: string;
+    /** Workspace genesis seed (hex). Becomes prev_signature for the first line. */
+    genesisSeed: string;
+    /** Optional inclusive starting line index (0-based). Defaults to 0. */
+    rangeStart?: number;
+    /** Optional inclusive ending line index (0-based). Defaults to last line. */
+    rangeEnd?: number;
+}
+type VerifyChainResult = {
+    ok: true;
+    /** Number of lines verified (inside the optional range). */
+    verifiedLines: number;
+    /** The last line's signature — anchor candidate. */
+    lastSignature: string;
+} | {
+    ok: false;
+    /** 0-based line index where verification failed. */
+    brokenAtLine: number;
+    /** What the verifier computed (expected). */
+    expected: string;
+    /** What the file claims (actual). */
+    actual: string;
+    /** Human-readable diagnostic. */
+    message: string;
+    /** Detail kind for programmatic handling. */
+    reason: "prev_signature_mismatch" | "signature_mismatch" | "missing_field" | "parse_error";
+};
+/**
+ * Verify a JSONL audit log's hash chain.
+ *
+ * Empty lines are skipped. Whitespace-only lines are skipped. JSON parse errors
+ * are reported as `parse_error`.
+ */
+declare function verifyChain(jsonl: string, opts: VerifyChainOptions): VerifyChainResult;
+
+export { type VerifyChainOptions as V, type VerifyChainResult as a, verifyChain as v };

package/package.json

@@ -0,0 +1,97 @@
+{
+  "name": "@agentproto/governance",
+  "version": "0.1.0-alpha.0",
+  "description": "agentgovernance/v1 — universal contractual approval framework. Doctypes (signature.json, audit-log.jsonl, POLICY.md) describe how to record signatures, append hash-chained audit events, and declare autonomy policies as workspace files. Vendor-neutral, filesystem-first, third-party verifiable.",
+  "keywords": [
+    "agentgovernance",
+    "governance",
+    "approval",
+    "signature",
+    "audit-log",
+    "hash-chain",
+    "policy",
+    "open-standard",
+    "agentcompanies",
+    "agentic"
+  ],
+  "homepage": "https://agentproto.sh/docs/gov-1",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/agentproto/ts",
+    "directory": "packages/governance/core"
+  },
+  "bugs": {
+    "url": "https://github.com/agentproto/ts/issues"
+  },
+  "license": "MIT",
+  "type": "module",
+  "main": "dist/index.mjs",
+  "module": "dist/index.mjs",
+  "types": "dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.mjs",
+      "default": "./dist/index.mjs"
+    },
+    "./doctypes": {
+      "types": "./dist/doctypes/index.d.ts",
+      "import": "./dist/doctypes/index.mjs",
+      "default": "./dist/doctypes/index.mjs"
+    },
+    "./hash-chain": {
+      "types": "./dist/hash-chain/index.d.ts",
+      "import": "./dist/hash-chain/index.mjs",
+      "default": "./dist/hash-chain/index.mjs"
+    },
+    "./validators": {
+      "types": "./dist/validators/index.d.ts",
+      "import": "./dist/validators/index.mjs",
+      "default": "./dist/validators/index.mjs"
+    },
+    "./policy": {
+      "types": "./dist/policy/index.d.ts",
+      "import": "./dist/policy/index.mjs",
+      "default": "./dist/policy/index.mjs"
+    },
+    "./renderers": {
+      "types": "./dist/renderers/index.d.ts",
+      "import": "./dist/renderers/index.mjs",
+      "default": "./dist/renderers/index.mjs"
+    },
+    "./package.json": "./package.json",
+    "./AGENTGOVERNANCE.md": "./AGENTGOVERNANCE.md"
+  },
+  "files": [
+    "dist",
+    "src/spec/canvakit-templates",
+    "src/spec/agentgovernance-v1.md",
+    "AGENTGOVERNANCE.md",
+    "README.md",
+    "LICENSE"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "dependencies": {
+    "gray-matter": "^4.0.3",
+    "yaml": "^2.8.4",
+    "zod": "^4.4.3",
+    "@agentproto/define-doctype": "0.1.0"
+  },
+  "devDependencies": {
+    "@types/node": "^25.6.2",
+    "tsup": "^8.5.1",
+    "typescript": "^5.9.3",
+    "vitest": "^3.2.4",
+    "@agentproto/tooling": "0.1.0-alpha.0"
+  },
+  "scripts": {
+    "dev": "tsup --watch",
+    "build": "tsup",
+    "clean": "rm -rf dist",
+    "check-types": "tsc --noEmit",
+    "test": "vitest run",
+    "test:watch": "vitest"
+  }
+}

package/src/spec/canvakit-templates/governance.signing-portal/template.canvakit.html

@@ -0,0 +1,100 @@
+---
+template: true
+name: governance.signing-portal
+version: 1.0.0-alpha
+description: |
+  Single-page signing portal for `typed_name` signatures on agentgovernance/v1 artifacts.
+  Renders a form where the signer types their full name and submits. The host application
+  is responsible for posting the form, capturing IP/UA evidence, and writing the
+  signature.json file via @agentproto/governance-engine.
+author: governance.sh
+variables:
+  artifactPath: "engagements/example/AGREEMENT.md"
+  artifactTitle: "Agreement"
+  artifactExcerpt: ""
+  documentHash: "0000000000000000000000000000000000000000000000000000000000000000"
+  signerKind: "counterparty"
+  signerSlug: "example-corp"
+  signerName: ""
+  signerEmail: ""
+  nonce: ""
+  signUrl: "/api/governance/sign"
+  agencyName: ""
+sources: {}
+---
+<!doctype html>
+<html lang="en">
+  <head>
+    <meta charset="utf-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1" />
+    <title>Sign: {{artifactTitle}}</title>
+    <style>
+      :root {
+        --fg: #1a1a1a;
+        --muted: #666;
+        --bg: #faf9f7;
+        --panel: #ffffff;
+        --border: #e5e5e5;
+        --accent: #1a1a1a;
+      }
+      body { font: 16px/1.5 ui-sans-serif, system-ui, -apple-system, sans-serif; max-width: 36rem; margin: 0 auto; padding: 3rem 1.5rem; color: var(--fg); background: var(--bg); }
+      h1 { font-size: 1.5rem; letter-spacing: -0.01em; margin: 0 0 0.5rem; }
+      .lead { color: var(--muted); margin: 0 0 2rem; }
+      .panel { background: var(--panel); border: 1px solid var(--border); border-radius: 8px; padding: 1.5rem; margin-bottom: 1.5rem; }
+      .field { margin-bottom: 1rem; }
+      label { display: block; font-size: 0.875rem; font-weight: 500; margin-bottom: 0.375rem; color: #333; }
+      input { width: 100%; padding: 0.625rem 0.75rem; border: 1px solid #d4d4d4; border-radius: 6px; font: inherit; box-sizing: border-box; background: #fff; color: var(--fg); }
+      input:focus { outline: 2px solid #2563eb; outline-offset: -2px; }
+      .meta { font-size: 0.875rem; color: var(--muted); padding: 0.875rem 1rem; background: #f5f4f0; border: 1px solid var(--border); border-radius: 6px; margin-bottom: 1rem; }
+      .meta dl { margin: 0; display: grid; grid-template-columns: max-content 1fr; gap: 0.25rem 0.75rem; }
+      .meta dt { font-weight: 500; color: #333; }
+      .meta dd { margin: 0; font-family: ui-monospace, SF Mono, monospace; font-size: 0.8125rem; word-break: break-all; }
+      button { width: 100%; padding: 0.75rem 1rem; background: var(--accent); color: white; border: 0; border-radius: 6px; font: inherit; font-weight: 500; cursor: pointer; transition: background 0.1s; }
+      button:hover { background: #000; }
+      button:disabled { background: #999; cursor: not-allowed; }
+      .legal { font-size: 0.8125rem; color: #777; margin-top: 1.5rem; line-height: 1.6; }
+      .legal em { font-style: normal; font-weight: 500; color: var(--fg); }
+      .excerpt { background: #fafafa; border: 1px solid var(--border); border-radius: 6px; padding: 1rem; margin: 0 0 1rem; max-height: 14rem; overflow: auto; font-size: 0.875rem; line-height: 1.55; white-space: pre-wrap; }
+      .agency { font-size: 0.875rem; color: var(--muted); margin-bottom: 1.5rem; }
+    </style>
+  </head>
+  <body>
+    <h1>Sign &ldquo;{{artifactTitle}}&rdquo;</h1>
+    <p class="lead">
+      You are signing on behalf of <strong>{{signerKind}}:{{signerSlug}}</strong>{{#agencyName}} for {{agencyName}}{{/agencyName}}.
+    </p>
+
+    {{#artifactExcerpt}}
+    <div class="excerpt">{{artifactExcerpt}}</div>
+    {{/artifactExcerpt}}
+
+    <div class="panel">
+      <form id="signing-form" action="{{signUrl}}" method="POST">
+        <input type="hidden" name="nonce" value="{{nonce}}" />
+        <input type="hidden" name="artifactPath" value="{{artifactPath}}" />
+        <input type="hidden" name="documentHash" value="{{documentHash}}" />
+        <input type="hidden" name="signer" value="{{signerKind}}:{{signerSlug}}" />
+        <input type="hidden" name="signerKind" value="{{signerKind}}" />
+        {{#signerEmail}}<input type="hidden" name="signerEmail" value="{{signerEmail}}" />{{/signerEmail}}
+
+        <div class="field">
+          <label for="signerName">Type your full legal name to sign</label>
+          <input id="signerName" name="signerName" type="text" required value="{{signerName}}" autocomplete="name" />
+        </div>
+
+        <button type="submit">Sign &amp; submit</button>
+      </form>
+    </div>
+
+    <div class="meta">
+      <dl>
+        <dt>Artifact</dt><dd>{{artifactPath}}</dd>
+        <dt>SHA-256</dt><dd>{{documentHash}}</dd>
+      </dl>
+    </div>
+
+    <p class="legal">
+      By typing your name and clicking <em>Sign &amp; submit</em>, you create a binding electronic signature. The host application captures your typed name, IP address, browser user agent, and a one-time nonce as evidence. The artifact&rsquo;s content is identified by its SHA-256 hash above; if the hash changes, this signature does not apply.
+    </p>
+  </body>
+</html>