@asm-agent/governance 0.8.2

package/README.md

@@ -0,0 +1,13 @@
+# `@asm-agent/governance`
+
+This package separates intent parsing, provider/model routing, policy decisions,
+approval grants, and execution. Parsing describes an operation; it never
+authorizes it.
+
+Ambiguous requests may be routed only through authenticated `openai-codex` or
+`anthropic` models. The router accepts login-backed model availability and has
+no API-key/BYOK configuration.
+
+External, destructive, deployment, communication, and financial mutations
+require idempotency. Approval grants are bound to the exact intent operation,
+resources, and approval type by SHA-256.

package/dist/catalog.d.ts

@@ -0,0 +1,17 @@
+import type { IntentContract } from "@asm-agent/contracts";
+export type IntentOperation = IntentContract["operation"];
+export type ConsequenceClass = "none" | "local_mutation" | "external_mutation" | "irreversible" | "financial";
+export interface IntentSchemaDefinition {
+    operation: IntentOperation;
+    consequence: ConsequenceClass;
+    requiresIdempotency: boolean;
+    requiredApprovals: readonly string[];
+    resourcePrefixes: readonly string[];
+}
+export declare class IntentSchemaCatalog {
+    private readonly definitions;
+    get(operation: IntentOperation): IntentSchemaDefinition;
+    list(): IntentSchemaDefinition[];
+    validate(intent: IntentContract): void;
+}
+//# sourceMappingURL=catalog.d.ts.map

package/dist/catalog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog.d.ts","sourceRoot":"","sources":["../src/catalog.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAE3D,MAAM,MAAM,eAAe,GAAG,cAAc,CAAC,WAAW,CAAC,CAAC;AAC1D,MAAM,MAAM,gBAAgB,GAAG,MAAM,GAAG,gBAAgB,GAAG,mBAAmB,GAAG,cAAc,GAAG,WAAW,CAAC;AAE9G,MAAM,WAAW,sBAAsB;IACtC,SAAS,EAAE,eAAe,CAAC;IAC3B,WAAW,EAAE,gBAAgB,CAAC;IAC9B,mBAAmB,EAAE,OAAO,CAAC;IAC7B,iBAAiB,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;CACpC;AA6DD,qBAAa,mBAAmB;IAC/B,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAgF;IAE5G,GAAG,CAAC,SAAS,EAAE,eAAe,GAAG,sBAAsB,CAItD;IAED,IAAI,IAAI,sBAAsB,EAAE,CAE/B;IAED,QAAQ,CAAC,MAAM,EAAE,cAAc,GAAG,IAAI,CAWrC;CACD","sourcesContent":["import type { IntentContract } from \"@asm-agent/contracts\";\n\nexport type IntentOperation = IntentContract[\"operation\"];\nexport type ConsequenceClass = \"none\" | \"local_mutation\" | \"external_mutation\" | \"irreversible\" | \"financial\";\n\nexport interface IntentSchemaDefinition {\n\toperation: IntentOperation;\n\tconsequence: ConsequenceClass;\n\trequiresIdempotency: boolean;\n\trequiredApprovals: readonly string[];\n\tresourcePrefixes: readonly string[];\n}\n\nconst DEFINITIONS: readonly IntentSchemaDefinition[] = [\n\t{\n\t\toperation: \"diagnose\",\n\t\tconsequence: \"none\",\n\t\trequiresIdempotency: false,\n\t\trequiredApprovals: [],\n\t\tresourcePrefixes: [\"system:\", \"log:\"],\n\t},\n\t{\n\t\toperation: \"read\",\n\t\tconsequence: \"none\",\n\t\trequiresIdempotency: false,\n\t\trequiredApprovals: [],\n\t\tresourcePrefixes: [\"file:\", \"db:\", \"url:\"],\n\t},\n\t{\n\t\toperation: \"write\",\n\t\tconsequence: \"local_mutation\",\n\t\trequiresIdempotency: false,\n\t\trequiredApprovals: [\"local_write\"],\n\t\tresourcePrefixes: [\"file:\", \"db:\"],\n\t},\n\t{\n\t\toperation: \"execute\",\n\t\tconsequence: \"external_mutation\",\n\t\trequiresIdempotency: true,\n\t\trequiredApprovals: [\"command_execution\"],\n\t\tresourcePrefixes: [\"command:\", \"tool:\"],\n\t},\n\t{\n\t\toperation: \"communicate\",\n\t\tconsequence: \"external_mutation\",\n\t\trequiresIdempotency: true,\n\t\trequiredApprovals: [\"external_communication\"],\n\t\tresourcePrefixes: [\"recipient:\", \"channel:\"],\n\t},\n\t{\n\t\toperation: \"deploy\",\n\t\tconsequence: \"external_mutation\",\n\t\trequiresIdempotency: true,\n\t\trequiredApprovals: [\"deployment\"],\n\t\tresourcePrefixes: [\"environment:\", \"service:\"],\n\t},\n\t{\n\t\toperation: \"purchase\",\n\t\tconsequence: \"financial\",\n\t\trequiresIdempotency: true,\n\t\trequiredApprovals: [\"purchase\"],\n\t\tresourcePrefixes: [\"merchant:\", \"product:\"],\n\t},\n\t{\n\t\toperation: \"delete\",\n\t\tconsequence: \"irreversible\",\n\t\trequiresIdempotency: true,\n\t\trequiredApprovals: [\"destructive_action\"],\n\t\tresourcePrefixes: [\"file:\", \"db:\", \"remote:\"],\n\t},\n] as const;\n\nexport class IntentSchemaCatalog {\n\tprivate readonly definitions = new Map(DEFINITIONS.map((definition) => [definition.operation, definition]));\n\n\tget(operation: IntentOperation): IntentSchemaDefinition {\n\t\tconst definition = this.definitions.get(operation);\n\t\tif (!definition) throw new Error(`Unknown intent operation: ${operation}`);\n\t\treturn definition;\n\t}\n\n\tlist(): IntentSchemaDefinition[] {\n\t\treturn [...this.definitions.values()];\n\t}\n\n\tvalidate(intent: IntentContract): void {\n\t\tconst definition = this.get(intent.operation);\n\t\tif (definition.requiresIdempotency && !intent.idempotencyKey) {\n\t\t\tthrow new Error(`${intent.operation} intent requires an idempotency key`);\n\t\t}\n\t\tif (\n\t\t\tintent.externalEffect !== (definition.consequence !== \"none\" && definition.consequence !== \"local_mutation\")\n\t\t) {\n\t\t\tthrow new Error(`${intent.operation} intent has inconsistent externalEffect`);\n\t\t}\n\t\tif (intent.resources.length === 0) throw new Error(\"Intent requires at least one resource\");\n\t}\n}\n"]}

package/dist/catalog.js

@@ -0,0 +1,82 @@
+const DEFINITIONS = [
+    {
+        operation: "diagnose",
+        consequence: "none",
+        requiresIdempotency: false,
+        requiredApprovals: [],
+        resourcePrefixes: ["system:", "log:"],
+    },
+    {
+        operation: "read",
+        consequence: "none",
+        requiresIdempotency: false,
+        requiredApprovals: [],
+        resourcePrefixes: ["file:", "db:", "url:"],
+    },
+    {
+        operation: "write",
+        consequence: "local_mutation",
+        requiresIdempotency: false,
+        requiredApprovals: ["local_write"],
+        resourcePrefixes: ["file:", "db:"],
+    },
+    {
+        operation: "execute",
+        consequence: "external_mutation",
+        requiresIdempotency: true,
+        requiredApprovals: ["command_execution"],
+        resourcePrefixes: ["command:", "tool:"],
+    },
+    {
+        operation: "communicate",
+        consequence: "external_mutation",
+        requiresIdempotency: true,
+        requiredApprovals: ["external_communication"],
+        resourcePrefixes: ["recipient:", "channel:"],
+    },
+    {
+        operation: "deploy",
+        consequence: "external_mutation",
+        requiresIdempotency: true,
+        requiredApprovals: ["deployment"],
+        resourcePrefixes: ["environment:", "service:"],
+    },
+    {
+        operation: "purchase",
+        consequence: "financial",
+        requiresIdempotency: true,
+        requiredApprovals: ["purchase"],
+        resourcePrefixes: ["merchant:", "product:"],
+    },
+    {
+        operation: "delete",
+        consequence: "irreversible",
+        requiresIdempotency: true,
+        requiredApprovals: ["destructive_action"],
+        resourcePrefixes: ["file:", "db:", "remote:"],
+    },
+];
+export class IntentSchemaCatalog {
+    definitions = new Map(DEFINITIONS.map((definition) => [definition.operation, definition]));
+    get(operation) {
+        const definition = this.definitions.get(operation);
+        if (!definition)
+            throw new Error(`Unknown intent operation: ${operation}`);
+        return definition;
+    }
+    list() {
+        return [...this.definitions.values()];
+    }
+    validate(intent) {
+        const definition = this.get(intent.operation);
+        if (definition.requiresIdempotency && !intent.idempotencyKey) {
+            throw new Error(`${intent.operation} intent requires an idempotency key`);
+        }
+        if (intent.externalEffect !== (definition.consequence !== "none" && definition.consequence !== "local_mutation")) {
+            throw new Error(`${intent.operation} intent has inconsistent externalEffect`);
+        }
+        if (intent.resources.length === 0)
+            throw new Error("Intent requires at least one resource");
+    }
+}
+//# sourceMappingURL=catalog.js.map

package/dist/catalog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog.js","sourceRoot":"","sources":["../src/catalog.ts"],"names":[],"mappings":"AAaA,MAAM,WAAW,GAAsC;IACtD;QACC,SAAS,EAAE,UAAU;QACrB,WAAW,EAAE,MAAM;QACnB,mBAAmB,EAAE,KAAK;QAC1B,iBAAiB,EAAE,EAAE;QACrB,gBAAgB,EAAE,CAAC,SAAS,EAAE,MAAM,CAAC;KACrC;IACD;QACC,SAAS,EAAE,MAAM;QACjB,WAAW,EAAE,MAAM;QACnB,mBAAmB,EAAE,KAAK;QAC1B,iBAAiB,EAAE,EAAE;QACrB,gBAAgB,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC;KAC1C;IACD;QACC,SAAS,EAAE,OAAO;QAClB,WAAW,EAAE,gBAAgB;QAC7B,mBAAmB,EAAE,KAAK;QAC1B,iBAAiB,EAAE,CAAC,aAAa,CAAC;QAClC,gBAAgB,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC;KAClC;IACD;QACC,SAAS,EAAE,SAAS;QACpB,WAAW,EAAE,mBAAmB;QAChC,mBAAmB,EAAE,IAAI;QACzB,iBAAiB,EAAE,CAAC,mBAAmB,CAAC;QACxC,gBAAgB,EAAE,CAAC,UAAU,EAAE,OAAO,CAAC;KACvC;IACD;QACC,SAAS,EAAE,aAAa;QACxB,WAAW,EAAE,mBAAmB;QAChC,mBAAmB,EAAE,IAAI;QACzB,iBAAiB,EAAE,CAAC,wBAAwB,CAAC;QAC7C,gBAAgB,EAAE,CAAC,YAAY,EAAE,UAAU,CAAC;KAC5C;IACD;QACC,SAAS,EAAE,QAAQ;QACnB,WAAW,EAAE,mBAAmB;QAChC,mBAAmB,EAAE,IAAI;QACzB,iBAAiB,EAAE,CAAC,YAAY,CAAC;QACjC,gBAAgB,EAAE,CAAC,cAAc,EAAE,UAAU,CAAC;KAC9C;IACD;QACC,SAAS,EAAE,UAAU;QACrB,WAAW,EAAE,WAAW;QACxB,mBAAmB,EAAE,IAAI;QACzB,iBAAiB,EAAE,CAAC,UAAU,CAAC;QAC/B,gBAAgB,EAAE,CAAC,WAAW,EAAE,UAAU,CAAC;KAC3C;IACD;QACC,SAAS,EAAE,QAAQ;QACnB,WAAW,EAAE,cAAc;QAC3B,mBAAmB,EAAE,IAAI;QACzB,iBAAiB,EAAE,CAAC,oBAAoB,CAAC;QACzC,gBAAgB,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,SAAS,CAAC;KAC7C;CACQ,CAAC;AAEX,MAAM,OAAO,mBAAmB;IACd,WAAW,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC;IAE5G,GAAG,CAAC,SAA0B,EAA0B;QACvD,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACnD,IAAI,CAAC,UAAU;YAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,SAAS,EAAE,CAAC,CAAC;QAC3E,OAAO,UAAU,CAAC;IAAA,CAClB;IAED,IAAI,GAA6B;QAChC,OAAO,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC;IAAA,CACtC;IAED,QAAQ,CAAC,MAAsB,EAAQ;QACtC,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC9C,IAAI,UAAU,CAAC,mBAAmB,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YAC9D,MAAM,IAAI,KAAK,CAAC,GAAG,MAAM,CAAC,SAAS,qCAAqC,CAAC,CAAC;QAC3E,CAAC;QACD,IACC,MAAM,CAAC,cAAc,KAAK,CAAC,UAAU,CAAC,WAAW,KAAK,MAAM,IAAI,UAAU,CAAC,WAAW,KAAK,gBAAgB,CAAC,EAC3G,CAAC;YACF,MAAM,IAAI,KAAK,CAAC,GAAG,MAAM,CAAC,SAAS,yCAAyC,CAAC,CAAC;QAC/E,CAAC;QACD,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAAA,CAC5F;CACD","sourcesContent":["import type { IntentContract } from \"@asm-agent/contracts\";\n\nexport type IntentOperation = IntentContract[\"operation\"];\nexport type ConsequenceClass = \"none\" | \"local_mutation\" | \"external_mutation\" | \"irreversible\" | \"financial\";\n\nexport interface IntentSchemaDefinition {\n\toperation: IntentOperation;\n\tconsequence: ConsequenceClass;\n\trequiresIdempotency: boolean;\n\trequiredApprovals: readonly string[];\n\tresourcePrefixes: readonly string[];\n}\n\nconst DEFINITIONS: readonly IntentSchemaDefinition[] = [\n\t{\n\t\toperation: \"diagnose\",\n\t\tconsequence: \"none\",\n\t\trequiresIdempotency: false,\n\t\trequiredApprovals: [],\n\t\tresourcePrefixes: [\"system:\", \"log:\"],\n\t},\n\t{\n\t\toperation: \"read\",\n\t\tconsequence: \"none\",\n\t\trequiresIdempotency: false,\n\t\trequiredApprovals: [],\n\t\tresourcePrefixes: [\"file:\", \"db:\", \"url:\"],\n\t},\n\t{\n\t\toperation: \"write\",\n\t\tconsequence: \"local_mutation\",\n\t\trequiresIdempotency: false,\n\t\trequiredApprovals: [\"local_write\"],\n\t\tresourcePrefixes: [\"file:\", \"db:\"],\n\t},\n\t{\n\t\toperation: \"execute\",\n\t\tconsequence: \"external_mutation\",\n\t\trequiresIdempotency: true,\n\t\trequiredApprovals: [\"command_execution\"],\n\t\tresourcePrefixes: [\"command:\", \"tool:\"],\n\t},\n\t{\n\t\toperation: \"communicate\",\n\t\tconsequence: \"external_mutation\",\n\t\trequiresIdempotency: true,\n\t\trequiredApprovals: [\"external_communication\"],\n\t\tresourcePrefixes: [\"recipient:\", \"channel:\"],\n\t},\n\t{\n\t\toperation: \"deploy\",\n\t\tconsequence: \"external_mutation\",\n\t\trequiresIdempotency: true,\n\t\trequiredApprovals: [\"deployment\"],\n\t\tresourcePrefixes: [\"environment:\", \"service:\"],\n\t},\n\t{\n\t\toperation: \"purchase\",\n\t\tconsequence: \"financial\",\n\t\trequiresIdempotency: true,\n\t\trequiredApprovals: [\"purchase\"],\n\t\tresourcePrefixes: [\"merchant:\", \"product:\"],\n\t},\n\t{\n\t\toperation: \"delete\",\n\t\tconsequence: \"irreversible\",\n\t\trequiresIdempotency: true,\n\t\trequiredApprovals: [\"destructive_action\"],\n\t\tresourcePrefixes: [\"file:\", \"db:\", \"remote:\"],\n\t},\n] as const;\n\nexport class IntentSchemaCatalog {\n\tprivate readonly definitions = new Map(DEFINITIONS.map((definition) => [definition.operation, definition]));\n\n\tget(operation: IntentOperation): IntentSchemaDefinition {\n\t\tconst definition = this.definitions.get(operation);\n\t\tif (!definition) throw new Error(`Unknown intent operation: ${operation}`);\n\t\treturn definition;\n\t}\n\n\tlist(): IntentSchemaDefinition[] {\n\t\treturn [...this.definitions.values()];\n\t}\n\n\tvalidate(intent: IntentContract): void {\n\t\tconst definition = this.get(intent.operation);\n\t\tif (definition.requiresIdempotency && !intent.idempotencyKey) {\n\t\t\tthrow new Error(`${intent.operation} intent requires an idempotency key`);\n\t\t}\n\t\tif (\n\t\t\tintent.externalEffect !== (definition.consequence !== \"none\" && definition.consequence !== \"local_mutation\")\n\t\t) {\n\t\t\tthrow new Error(`${intent.operation} intent has inconsistent externalEffect`);\n\t\t}\n\t\tif (intent.resources.length === 0) throw new Error(\"Intent requires at least one resource\");\n\t}\n}\n"]}

package/dist/executor.d.ts

@@ -0,0 +1,14 @@
+import type { IntentContract, PolicyContract } from "@asm-agent/contracts";
+import type { PostgresStore } from "@asm-agent/postgres";
+export interface GovernedExecutionResult<T> {
+    status: "executed" | "replayed";
+    value: T;
+}
+export declare class GovernedExecutor {
+    private readonly database;
+    private readonly policy;
+    private readonly repository;
+    constructor(database: PostgresStore);
+    execute<T>(intent: IntentContract, decision: PolicyContract, handler: () => Promise<T>): Promise<GovernedExecutionResult<T>>;
+}
+//# sourceMappingURL=executor.d.ts.map

package/dist/executor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"executor.d.ts","sourceRoot":"","sources":["../src/executor.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAIzD,MAAM,WAAW,uBAAuB,CAAC,CAAC;IACzC,MAAM,EAAE,UAAU,GAAG,UAAU,CAAC;IAChC,KAAK,EAAE,CAAC,CAAC;CACT;AAED,qBAAa,gBAAgB;IAIhB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAHrC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA4B;IACnD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAuB;IAElD,YAA6B,QAAQ,EAAE,aAAa,EAEnD;IAEK,OAAO,CAAC,CAAC,EACd,MAAM,EAAE,cAAc,EACtB,QAAQ,EAAE,cAAc,EACxB,OAAO,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GACvB,OAAO,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,CAoCrC;CACD","sourcesContent":["import { createHash, randomUUID } from \"node:crypto\";\nimport type { IntentContract, PolicyContract } from \"@asm-agent/contracts\";\nimport type { PostgresStore } from \"@asm-agent/postgres\";\nimport { IntentPolicyEngine } from \"./policy.js\";\nimport { GovernanceRepository } from \"./repository.js\";\n\nexport interface GovernedExecutionResult<T> {\n\tstatus: \"executed\" | \"replayed\";\n\tvalue: T;\n}\n\nexport class GovernedExecutor {\n\tprivate readonly policy = new IntentPolicyEngine();\n\tprivate readonly repository: GovernanceRepository;\n\n\tconstructor(private readonly database: PostgresStore) {\n\t\tthis.repository = new GovernanceRepository(database);\n\t}\n\n\tasync execute<T>(\n\t\tintent: IntentContract,\n\t\tdecision: PolicyContract,\n\t\thandler: () => Promise<T>,\n\t): Promise<GovernedExecutionResult<T>> {\n\t\tif (decision.outcome === \"deny\") throw new Error(\"Policy denied governed execution\");\n\t\tif (!(await this.repository.hasApprovals(decision, intent, (type) => this.policy.scopeHash(intent, type)))) {\n\t\t\tthrow new Error(\"Required approval is missing, expired, consumed, or outside scope\");\n\t\t}\n\t\tconst key = intent.idempotencyKey ?? (intent.externalEffect ? undefined : intent.intentId);\n\t\tif (!key) throw new Error(\"Consequential execution requires an idempotency key\");\n\t\tconst scope = `governed:${intent.operation}`;\n\t\tconst requestHash = createHash(\"sha256\").update(stableJson(intent)).digest(\"hex\");\n\t\tconst started = await this.database.startIdempotent({ scope, key, requestHash });\n\t\tif (started.status === \"replayed\") return { status: \"replayed\", value: started.response as T };\n\t\tif (started.status === \"in_progress\") throw new Error(\"Governed execution is already in progress\");\n\t\tconst executionId = randomUUID();\n\t\tawait this.repository.recordExecutionStarted({\n\t\t\tid: executionId,\n\t\t\tintentId: intent.intentId,\n\t\t\tdecisionId: decision.decisionId,\n\t\t\tscope,\n\t\t\tkey,\n\t\t\trequestHash,\n\t\t});\n\t\tawait this.repository.consumeApprovals(decision.decisionId);\n\t\ttry {\n\t\t\tconst value = await handler();\n\t\t\tawait this.database.completeIdempotent(scope, key, value);\n\t\t\tawait this.repository.finishExecution(executionId, \"completed\", value);\n\t\t\treturn { status: \"executed\", value };\n\t\t} catch (error) {\n\t\t\tconst detail = { message: error instanceof Error ? error.message : String(error) };\n\t\t\tawait this.repository.finishExecution(\n\t\t\t\texecutionId,\n\t\t\t\tintent.externalEffect ? \"unknown_external_outcome\" : \"failed\",\n\t\t\t\tdetail,\n\t\t\t);\n\t\t\tthrow error;\n\t\t}\n\t}\n}\n\nfunction stableJson(value: IntentContract): string {\n\treturn JSON.stringify({\n\t\theader: value.header,\n\t\tintentId: value.intentId,\n\t\toperation: value.operation,\n\t\tresources: [...value.resources].sort(),\n\t\texternalEffect: value.externalEffect,\n\t\tidempotencyKey: value.idempotencyKey,\n\t\trequestedAt: value.requestedAt,\n\t\targuments: value.arguments,\n\t});\n}\n"]}

package/dist/executor.js

@@ -0,0 +1,63 @@
+import { createHash, randomUUID } from "node:crypto";
+import { IntentPolicyEngine } from "./policy.js";
+import { GovernanceRepository } from "./repository.js";
+export class GovernedExecutor {
+    database;
+    policy = new IntentPolicyEngine();
+    repository;
+    constructor(database) {
+        this.database = database;
+        this.repository = new GovernanceRepository(database);
+    }
+    async execute(intent, decision, handler) {
+        if (decision.outcome === "deny")
+            throw new Error("Policy denied governed execution");
+        if (!(await this.repository.hasApprovals(decision, intent, (type) => this.policy.scopeHash(intent, type)))) {
+            throw new Error("Required approval is missing, expired, consumed, or outside scope");
+        }
+        const key = intent.idempotencyKey ?? (intent.externalEffect ? undefined : intent.intentId);
+        if (!key)
+            throw new Error("Consequential execution requires an idempotency key");
+        const scope = `governed:${intent.operation}`;
+        const requestHash = createHash("sha256").update(stableJson(intent)).digest("hex");
+        const started = await this.database.startIdempotent({ scope, key, requestHash });
+        if (started.status === "replayed")
+            return { status: "replayed", value: started.response };
+        if (started.status === "in_progress")
+            throw new Error("Governed execution is already in progress");
+        const executionId = randomUUID();
+        await this.repository.recordExecutionStarted({
+            id: executionId,
+            intentId: intent.intentId,
+            decisionId: decision.decisionId,
+            scope,
+            key,
+            requestHash,
+        });
+        await this.repository.consumeApprovals(decision.decisionId);
+        try {
+            const value = await handler();
+            await this.database.completeIdempotent(scope, key, value);
+            await this.repository.finishExecution(executionId, "completed", value);
+            return { status: "executed", value };
+        }
+        catch (error) {
+            const detail = { message: error instanceof Error ? error.message : String(error) };
+            await this.repository.finishExecution(executionId, intent.externalEffect ? "unknown_external_outcome" : "failed", detail);
+            throw error;
+        }
+    }
+}
+function stableJson(value) {
+    return JSON.stringify({
+        header: value.header,
+        intentId: value.intentId,
+        operation: value.operation,
+        resources: [...value.resources].sort(),
+        externalEffect: value.externalEffect,
+        idempotencyKey: value.idempotencyKey,
+        requestedAt: value.requestedAt,
+        arguments: value.arguments,
+    });
+}
+//# sourceMappingURL=executor.js.map

package/dist/executor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"executor.js","sourceRoot":"","sources":["../src/executor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGrD,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAOvD,MAAM,OAAO,gBAAgB;IAIC,QAAQ;IAHpB,MAAM,GAAG,IAAI,kBAAkB,EAAE,CAAC;IAClC,UAAU,CAAuB;IAElD,YAA6B,QAAuB,EAAE;wBAAzB,QAAQ;QACpC,IAAI,CAAC,UAAU,GAAG,IAAI,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IAAA,CACrD;IAED,KAAK,CAAC,OAAO,CACZ,MAAsB,EACtB,QAAwB,EACxB,OAAyB,EACa;QACtC,IAAI,QAAQ,CAAC,OAAO,KAAK,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACrF,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5G,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;QACtF,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,CAAC,cAAc,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC3F,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;QACjF,MAAM,KAAK,GAAG,YAAY,MAAM,CAAC,SAAS,EAAE,CAAC;QAC7C,MAAM,WAAW,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAClF,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC,CAAC;QACjF,IAAI,OAAO,CAAC,MAAM,KAAK,UAAU;YAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,CAAC,QAAa,EAAE,CAAC;QAC/F,IAAI,OAAO,CAAC,MAAM,KAAK,aAAa;YAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QACnG,MAAM,WAAW,GAAG,UAAU,EAAE,CAAC;QACjC,MAAM,IAAI,CAAC,UAAU,CAAC,sBAAsB,CAAC;YAC5C,EAAE,EAAE,WAAW;YACf,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,KAAK;YACL,GAAG;YACH,WAAW;SACX,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QAC5D,IAAI,CAAC;YACJ,MAAM,KAAK,GAAG,MAAM,OAAO,EAAE,CAAC;YAC9B,MAAM,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,KAAK,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;YAC1D,MAAM,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,WAAW,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;YACvE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;QACtC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,MAAM,GAAG,EAAE,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YACnF,MAAM,IAAI,CAAC,UAAU,CAAC,eAAe,CACpC,WAAW,EACX,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,QAAQ,EAC7D,MAAM,CACN,CAAC;YACF,MAAM,KAAK,CAAC;QACb,CAAC;IAAA,CACD;CACD;AAED,SAAS,UAAU,CAAC,KAAqB,EAAU;IAClD,OAAO,IAAI,CAAC,SAAS,CAAC;QACrB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,SAAS,EAAE,CAAC,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE;QACtC,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,SAAS,EAAE,KAAK,CAAC,SAAS;KAC1B,CAAC,CAAC;AAAA,CACH","sourcesContent":["import { createHash, randomUUID } from \"node:crypto\";\nimport type { IntentContract, PolicyContract } from \"@asm-agent/contracts\";\nimport type { PostgresStore } from \"@asm-agent/postgres\";\nimport { IntentPolicyEngine } from \"./policy.js\";\nimport { GovernanceRepository } from \"./repository.js\";\n\nexport interface GovernedExecutionResult<T> {\n\tstatus: \"executed\" | \"replayed\";\n\tvalue: T;\n}\n\nexport class GovernedExecutor {\n\tprivate readonly policy = new IntentPolicyEngine();\n\tprivate readonly repository: GovernanceRepository;\n\n\tconstructor(private readonly database: PostgresStore) {\n\t\tthis.repository = new GovernanceRepository(database);\n\t}\n\n\tasync execute<T>(\n\t\tintent: IntentContract,\n\t\tdecision: PolicyContract,\n\t\thandler: () => Promise<T>,\n\t): Promise<GovernedExecutionResult<T>> {\n\t\tif (decision.outcome === \"deny\") throw new Error(\"Policy denied governed execution\");\n\t\tif (!(await this.repository.hasApprovals(decision, intent, (type) => this.policy.scopeHash(intent, type)))) {\n\t\t\tthrow new Error(\"Required approval is missing, expired, consumed, or outside scope\");\n\t\t}\n\t\tconst key = intent.idempotencyKey ?? (intent.externalEffect ? undefined : intent.intentId);\n\t\tif (!key) throw new Error(\"Consequential execution requires an idempotency key\");\n\t\tconst scope = `governed:${intent.operation}`;\n\t\tconst requestHash = createHash(\"sha256\").update(stableJson(intent)).digest(\"hex\");\n\t\tconst started = await this.database.startIdempotent({ scope, key, requestHash });\n\t\tif (started.status === \"replayed\") return { status: \"replayed\", value: started.response as T };\n\t\tif (started.status === \"in_progress\") throw new Error(\"Governed execution is already in progress\");\n\t\tconst executionId = randomUUID();\n\t\tawait this.repository.recordExecutionStarted({\n\t\t\tid: executionId,\n\t\t\tintentId: intent.intentId,\n\t\t\tdecisionId: decision.decisionId,\n\t\t\tscope,\n\t\t\tkey,\n\t\t\trequestHash,\n\t\t});\n\t\tawait this.repository.consumeApprovals(decision.decisionId);\n\t\ttry {\n\t\t\tconst value = await handler();\n\t\t\tawait this.database.completeIdempotent(scope, key, value);\n\t\t\tawait this.repository.finishExecution(executionId, \"completed\", value);\n\t\t\treturn { status: \"executed\", value };\n\t\t} catch (error) {\n\t\t\tconst detail = { message: error instanceof Error ? error.message : String(error) };\n\t\t\tawait this.repository.finishExecution(\n\t\t\t\texecutionId,\n\t\t\t\tintent.externalEffect ? \"unknown_external_outcome\" : \"failed\",\n\t\t\t\tdetail,\n\t\t\t);\n\t\t\tthrow error;\n\t\t}\n\t}\n}\n\nfunction stableJson(value: IntentContract): string {\n\treturn JSON.stringify({\n\t\theader: value.header,\n\t\tintentId: value.intentId,\n\t\toperation: value.operation,\n\t\tresources: [...value.resources].sort(),\n\t\texternalEffect: value.externalEffect,\n\t\tidempotencyKey: value.idempotencyKey,\n\t\trequestedAt: value.requestedAt,\n\t\targuments: value.arguments,\n\t});\n}\n"]}

package/dist/index.d.ts

@@ -0,0 +1,9 @@
+export { type ConsequenceClass, type IntentOperation, IntentSchemaCatalog, type IntentSchemaDefinition, } from "./catalog.js";
+export { type GovernedExecutionResult, GovernedExecutor } from "./executor.js";
+export { type ParsedIntentResult, type ParseIntentInput, type StructuredIntentModel, VersionedIntentParser, } from "./parser.js";
+export { IntentPolicyEngine, type PolicyContext } from "./policy.js";
+export { GovernanceRepository } from "./repository.js";
+export { type AuthenticatedModel, AuthenticatedModelRouter, type LoginProvider, type ModelRoute, type RoutingPurpose, } from "./router.js";
+export { GovernanceService } from "./service.js";
+export { classifyDefaultTool, DEFAULT_CONSEQUENTIAL_TOOL_NAMES, type DefaultConsequentialToolName, type ToolIntentClassification, } from "./tool-policy.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,KAAK,gBAAgB,EACrB,KAAK,eAAe,EACpB,mBAAmB,EACnB,KAAK,sBAAsB,GAC3B,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,KAAK,uBAAuB,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAC/E,OAAO,EACN,KAAK,kBAAkB,EACvB,KAAK,gBAAgB,EACrB,KAAK,qBAAqB,EAC1B,qBAAqB,GACrB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,kBAAkB,EAAE,KAAK,aAAa,EAAE,MAAM,aAAa,CAAC;AACrE,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AACvD,OAAO,EACN,KAAK,kBAAkB,EACvB,wBAAwB,EACxB,KAAK,aAAa,EAClB,KAAK,UAAU,EACf,KAAK,cAAc,GACnB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,EACN,mBAAmB,EACnB,gCAAgC,EAChC,KAAK,4BAA4B,EACjC,KAAK,wBAAwB,GAC7B,MAAM,kBAAkB,CAAC","sourcesContent":["export {\n\ttype ConsequenceClass,\n\ttype IntentOperation,\n\tIntentSchemaCatalog,\n\ttype IntentSchemaDefinition,\n} from \"./catalog.js\";\nexport { type GovernedExecutionResult, GovernedExecutor } from \"./executor.js\";\nexport {\n\ttype ParsedIntentResult,\n\ttype ParseIntentInput,\n\ttype StructuredIntentModel,\n\tVersionedIntentParser,\n} from \"./parser.js\";\nexport { IntentPolicyEngine, type PolicyContext } from \"./policy.js\";\nexport { GovernanceRepository } from \"./repository.js\";\nexport {\n\ttype AuthenticatedModel,\n\tAuthenticatedModelRouter,\n\ttype LoginProvider,\n\ttype ModelRoute,\n\ttype RoutingPurpose,\n} from \"./router.js\";\nexport { GovernanceService } from \"./service.js\";\nexport {\n\tclassifyDefaultTool,\n\tDEFAULT_CONSEQUENTIAL_TOOL_NAMES,\n\ttype DefaultConsequentialToolName,\n\ttype ToolIntentClassification,\n} from \"./tool-policy.js\";\n"]}

package/dist/index.js

@@ -0,0 +1,9 @@
+export { IntentSchemaCatalog, } from "./catalog.js";
+export { GovernedExecutor } from "./executor.js";
+export { VersionedIntentParser, } from "./parser.js";
+export { IntentPolicyEngine } from "./policy.js";
+export { GovernanceRepository } from "./repository.js";
+export { AuthenticatedModelRouter, } from "./router.js";
+export { GovernanceService } from "./service.js";
+export { classifyDefaultTool, DEFAULT_CONSEQUENTIAL_TOOL_NAMES, } from "./tool-policy.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAGN,mBAAmB,GAEnB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAgC,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAC/E,OAAO,EAIN,qBAAqB,GACrB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,kBAAkB,EAAsB,MAAM,aAAa,CAAC;AACrE,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AACvD,OAAO,EAEN,wBAAwB,GAIxB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,EACN,mBAAmB,EACnB,gCAAgC,GAGhC,MAAM,kBAAkB,CAAC","sourcesContent":["export {\n\ttype ConsequenceClass,\n\ttype IntentOperation,\n\tIntentSchemaCatalog,\n\ttype IntentSchemaDefinition,\n} from \"./catalog.js\";\nexport { type GovernedExecutionResult, GovernedExecutor } from \"./executor.js\";\nexport {\n\ttype ParsedIntentResult,\n\ttype ParseIntentInput,\n\ttype StructuredIntentModel,\n\tVersionedIntentParser,\n} from \"./parser.js\";\nexport { IntentPolicyEngine, type PolicyContext } from \"./policy.js\";\nexport { GovernanceRepository } from \"./repository.js\";\nexport {\n\ttype AuthenticatedModel,\n\tAuthenticatedModelRouter,\n\ttype LoginProvider,\n\ttype ModelRoute,\n\ttype RoutingPurpose,\n} from \"./router.js\";\nexport { GovernanceService } from \"./service.js\";\nexport {\n\tclassifyDefaultTool,\n\tDEFAULT_CONSEQUENTIAL_TOOL_NAMES,\n\ttype DefaultConsequentialToolName,\n\ttype ToolIntentClassification,\n} from \"./tool-policy.js\";\n"]}

package/dist/parser.d.ts

@@ -0,0 +1,30 @@
+import { type IntentContract } from "@asm-agent/contracts";
+import { IntentSchemaCatalog } from "./catalog.js";
+import type { AuthenticatedModelRouter, LoginProvider, ModelRoute } from "./router.js";
+export interface ParseIntentInput {
+    text: string;
+    resources?: string[];
+    arguments?: Record<string, unknown>;
+    idempotencyKey?: string;
+    now?: Date;
+    intentId?: string;
+    preferredProvider?: LoginProvider;
+}
+export interface ParsedIntentResult {
+    intent: IntentContract;
+    parserId: "deterministic-v1" | "authenticated-model-v1";
+    parserVersion: "1";
+    route?: ModelRoute;
+}
+export interface StructuredIntentModel {
+    parse(route: ModelRoute, input: ParseIntentInput): Promise<IntentContract>;
+}
+export declare class VersionedIntentParser {
+    private readonly catalog;
+    private readonly router?;
+    private readonly model?;
+    constructor(catalog?: IntentSchemaCatalog, router?: AuthenticatedModelRouter | undefined, model?: StructuredIntentModel | undefined);
+    parse(input: ParseIntentInput): Promise<ParsedIntentResult>;
+    private buildDeterministic;
+}
+//# sourceMappingURL=parser.d.ts.map

package/dist/parser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"parser.d.ts","sourceRoot":"","sources":["../src/parser.ts"],"names":[],"mappings":"AACA,OAAO,EAAkB,KAAK,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3E,OAAO,EAAwB,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACzE,OAAO,KAAK,EAAE,wBAAwB,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEvF,MAAM,WAAW,gBAAgB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,GAAG,CAAC,EAAE,IAAI,CAAC;IACX,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,iBAAiB,CAAC,EAAE,aAAa,CAAC;CAClC;AAED,MAAM,WAAW,kBAAkB;IAClC,MAAM,EAAE,cAAc,CAAC;IACvB,QAAQ,EAAE,kBAAkB,GAAG,wBAAwB,CAAC;IACxD,aAAa,EAAE,GAAG,CAAC;IACnB,KAAK,CAAC,EAAE,UAAU,CAAC;CACnB;AAED,MAAM,WAAW,qBAAqB;IACrC,KAAK,CAAC,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;CAC3E;AAED,qBAAa,qBAAqB;IAEhC,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;IACxB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC;IAHxB,YACkB,OAAO,sBAA4B,EACnC,MAAM,CAAC,sCAA0B,EACjC,KAAK,CAAC,mCAAuB,EAC3C;IAEE,KAAK,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAUhE;IAED,OAAO,CAAC,kBAAkB;CAgB1B","sourcesContent":["import { randomUUID } from \"node:crypto\";\nimport { assertContract, type IntentContract } from \"@asm-agent/contracts\";\nimport { type IntentOperation, IntentSchemaCatalog } from \"./catalog.js\";\nimport type { AuthenticatedModelRouter, LoginProvider, ModelRoute } from \"./router.js\";\n\nexport interface ParseIntentInput {\n\ttext: string;\n\tresources?: string[];\n\targuments?: Record<string, unknown>;\n\tidempotencyKey?: string;\n\tnow?: Date;\n\tintentId?: string;\n\tpreferredProvider?: LoginProvider;\n}\n\nexport interface ParsedIntentResult {\n\tintent: IntentContract;\n\tparserId: \"deterministic-v1\" | \"authenticated-model-v1\";\n\tparserVersion: \"1\";\n\troute?: ModelRoute;\n}\n\nexport interface StructuredIntentModel {\n\tparse(route: ModelRoute, input: ParseIntentInput): Promise<IntentContract>;\n}\n\nexport class VersionedIntentParser {\n\tconstructor(\n\t\tprivate readonly catalog = new IntentSchemaCatalog(),\n\t\tprivate readonly router?: AuthenticatedModelRouter,\n\t\tprivate readonly model?: StructuredIntentModel,\n\t) {}\n\n\tasync parse(input: ParseIntentInput): Promise<ParsedIntentResult> {\n\t\tconst deterministic = deterministicOperation(input.text);\n\t\tif (deterministic) return this.buildDeterministic(input, deterministic);\n\t\tif (!this.router || !this.model)\n\t\t\tthrow new Error(\"Intent is ambiguous and no authenticated model parser is configured\");\n\t\tconst route = this.router.route(\"intent_parse\", input.preferredProvider);\n\t\tconst intent = await this.model.parse(route, input);\n\t\tassertContract(\"intent\", intent);\n\t\tthis.catalog.validate(intent);\n\t\treturn { intent, parserId: \"authenticated-model-v1\", parserVersion: \"1\", route };\n\t}\n\n\tprivate buildDeterministic(input: ParseIntentInput, operation: IntentOperation): ParsedIntentResult {\n\t\tconst definition = this.catalog.get(operation);\n\t\tconst intent: IntentContract = {\n\t\t\theader: { namespace: \"ai.aletheion.asm\", major: 1, minor: 1 },\n\t\t\tintentId: input.intentId ?? randomUUID(),\n\t\t\toperation,\n\t\t\tresources: input.resources ?? inferResources(input.text, operation),\n\t\t\texternalEffect: definition.consequence !== \"none\" && definition.consequence !== \"local_mutation\",\n\t\t\tidempotencyKey: input.idempotencyKey,\n\t\t\trequestedAt: (input.now ?? new Date()).toISOString(),\n\t\t\targuments: input.arguments ?? { text: input.text },\n\t\t};\n\t\tassertContract(\"intent\", intent);\n\t\tthis.catalog.validate(intent);\n\t\treturn { intent, parserId: \"deterministic-v1\", parserVersion: \"1\" };\n\t}\n}\n\nfunction deterministicOperation(text: string): IntentOperation | undefined {\n\tconst normalized = text.trim().toLowerCase();\n\tif (/\\b(delete|remove|erase|drop|apagar|deletar|excluir|remover)\\b/.test(normalized)) return \"delete\";\n\tif (/\\b(buy|purchase|checkout|comprar|pagar|adquirir)\\b/.test(normalized)) return \"purchase\";\n\tif (/\\b(deploy|release|publish|implantar|publicar)\\b/.test(normalized)) return \"deploy\";\n\tif (/\\b(send|email|message|notify|enviar|avisar|comunicar)\\b/.test(normalized)) return \"communicate\";\n\tif (/\\b(run|execute|restart|executar|rodar|reiniciar)\\b/.test(normalized)) return \"execute\";\n\tif (/\\b(edit|write|change|create|editar|alterar|criar|escrever)\\b/.test(normalized)) return \"write\";\n\tif (/\\b(read|show|list|inspect|ler|mostrar|listar|ver)\\b/.test(normalized)) return \"read\";\n\tif (/\\b(diagnose|debug|investigate|diagnosticar|depurar|investigar)\\b/.test(normalized)) return \"diagnose\";\n\treturn undefined;\n}\n\nfunction inferResources(text: string, operation: IntentOperation): string[] {\n\treturn [`${operation}:${text.trim().slice(0, 160) || \"unspecified\"}`];\n}\n"]}

package/dist/parser.js

@@ -0,0 +1,65 @@
+import { randomUUID } from "node:crypto";
+import { assertContract } from "@asm-agent/contracts";
+import { IntentSchemaCatalog } from "./catalog.js";
+export class VersionedIntentParser {
+    catalog;
+    router;
+    model;
+    constructor(catalog = new IntentSchemaCatalog(), router, model) {
+        this.catalog = catalog;
+        this.router = router;
+        this.model = model;
+    }
+    async parse(input) {
+        const deterministic = deterministicOperation(input.text);
+        if (deterministic)
+            return this.buildDeterministic(input, deterministic);
+        if (!this.router || !this.model)
+            throw new Error("Intent is ambiguous and no authenticated model parser is configured");
+        const route = this.router.route("intent_parse", input.preferredProvider);
+        const intent = await this.model.parse(route, input);
+        assertContract("intent", intent);
+        this.catalog.validate(intent);
+        return { intent, parserId: "authenticated-model-v1", parserVersion: "1", route };
+    }
+    buildDeterministic(input, operation) {
+        const definition = this.catalog.get(operation);
+        const intent = {
+            header: { namespace: "ai.aletheion.asm", major: 1, minor: 1 },
+            intentId: input.intentId ?? randomUUID(),
+            operation,
+            resources: input.resources ?? inferResources(input.text, operation),
+            externalEffect: definition.consequence !== "none" && definition.consequence !== "local_mutation",
+            idempotencyKey: input.idempotencyKey,
+            requestedAt: (input.now ?? new Date()).toISOString(),
+            arguments: input.arguments ?? { text: input.text },
+        };
+        assertContract("intent", intent);
+        this.catalog.validate(intent);
+        return { intent, parserId: "deterministic-v1", parserVersion: "1" };
+    }
+}
+function deterministicOperation(text) {
+    const normalized = text.trim().toLowerCase();
+    if (/\b(delete|remove|erase|drop|apagar|deletar|excluir|remover)\b/.test(normalized))
+        return "delete";
+    if (/\b(buy|purchase|checkout|comprar|pagar|adquirir)\b/.test(normalized))
+        return "purchase";
+    if (/\b(deploy|release|publish|implantar|publicar)\b/.test(normalized))
+        return "deploy";
+    if (/\b(send|email|message|notify|enviar|avisar|comunicar)\b/.test(normalized))
+        return "communicate";
+    if (/\b(run|execute|restart|executar|rodar|reiniciar)\b/.test(normalized))
+        return "execute";
+    if (/\b(edit|write|change|create|editar|alterar|criar|escrever)\b/.test(normalized))
+        return "write";
+    if (/\b(read|show|list|inspect|ler|mostrar|listar|ver)\b/.test(normalized))
+        return "read";
+    if (/\b(diagnose|debug|investigate|diagnosticar|depurar|investigar)\b/.test(normalized))
+        return "diagnose";
+    return undefined;
+}
+function inferResources(text, operation) {
+    return [`${operation}:${text.trim().slice(0, 160) || "unspecified"}`];
+}
+//# sourceMappingURL=parser.js.map

package/dist/parser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"parser.js","sourceRoot":"","sources":["../src/parser.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,cAAc,EAAuB,MAAM,sBAAsB,CAAC;AAC3E,OAAO,EAAwB,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAwBzE,MAAM,OAAO,qBAAqB;IAEf,OAAO;IACP,MAAM;IACN,KAAK;IAHvB,YACkB,OAAO,GAAG,IAAI,mBAAmB,EAAE,EACnC,MAAiC,EACjC,KAA6B,EAC7C;uBAHgB,OAAO;sBACP,MAAM;qBACN,KAAK;IACpB,CAAC;IAEJ,KAAK,CAAC,KAAK,CAAC,KAAuB,EAA+B;QACjE,MAAM,aAAa,GAAG,sBAAsB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACzD,IAAI,aAAa;YAAE,OAAO,IAAI,CAAC,kBAAkB,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;QACxE,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK;YAC9B,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;QACxF,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,iBAAiB,CAAC,CAAC;QACzE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACpD,cAAc,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACjC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC9B,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,wBAAwB,EAAE,aAAa,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;IAAA,CACjF;IAEO,kBAAkB,CAAC,KAAuB,EAAE,SAA0B,EAAsB;QACnG,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC/C,MAAM,MAAM,GAAmB;YAC9B,MAAM,EAAE,EAAE,SAAS,EAAE,kBAAkB,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE;YAC7D,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,UAAU,EAAE;YACxC,SAAS;YACT,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,cAAc,CAAC,KAAK,CAAC,IAAI,EAAE,SAAS,CAAC;YACnE,cAAc,EAAE,UAAU,CAAC,WAAW,KAAK,MAAM,IAAI,UAAU,CAAC,WAAW,KAAK,gBAAgB;YAChG,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE;YACpD,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE;SAClD,CAAC;QACF,cAAc,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACjC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC9B,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,kBAAkB,EAAE,aAAa,EAAE,GAAG,EAAE,CAAC;IAAA,CACpE;CACD;AAED,SAAS,sBAAsB,CAAC,IAAY,EAA+B;IAC1E,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC7C,IAAI,+DAA+D,CAAC,IAAI,CAAC,UAAU,CAAC;QAAE,OAAO,QAAQ,CAAC;IACtG,IAAI,oDAAoD,CAAC,IAAI,CAAC,UAAU,CAAC;QAAE,OAAO,UAAU,CAAC;IAC7F,IAAI,iDAAiD,CAAC,IAAI,CAAC,UAAU,CAAC;QAAE,OAAO,QAAQ,CAAC;IACxF,IAAI,yDAAyD,CAAC,IAAI,CAAC,UAAU,CAAC;QAAE,OAAO,aAAa,CAAC;IACrG,IAAI,oDAAoD,CAAC,IAAI,CAAC,UAAU,CAAC;QAAE,OAAO,SAAS,CAAC;IAC5F,IAAI,8DAA8D,CAAC,IAAI,CAAC,UAAU,CAAC;QAAE,OAAO,OAAO,CAAC;IACpG,IAAI,qDAAqD,CAAC,IAAI,CAAC,UAAU,CAAC;QAAE,OAAO,MAAM,CAAC;IAC1F,IAAI,kEAAkE,CAAC,IAAI,CAAC,UAAU,CAAC;QAAE,OAAO,UAAU,CAAC;IAC3G,OAAO,SAAS,CAAC;AAAA,CACjB;AAED,SAAS,cAAc,CAAC,IAAY,EAAE,SAA0B,EAAY;IAC3E,OAAO,CAAC,GAAG,SAAS,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,aAAa,EAAE,CAAC,CAAC;AAAA,CACtE","sourcesContent":["import { randomUUID } from \"node:crypto\";\nimport { assertContract, type IntentContract } from \"@asm-agent/contracts\";\nimport { type IntentOperation, IntentSchemaCatalog } from \"./catalog.js\";\nimport type { AuthenticatedModelRouter, LoginProvider, ModelRoute } from \"./router.js\";\n\nexport interface ParseIntentInput {\n\ttext: string;\n\tresources?: string[];\n\targuments?: Record<string, unknown>;\n\tidempotencyKey?: string;\n\tnow?: Date;\n\tintentId?: string;\n\tpreferredProvider?: LoginProvider;\n}\n\nexport interface ParsedIntentResult {\n\tintent: IntentContract;\n\tparserId: \"deterministic-v1\" | \"authenticated-model-v1\";\n\tparserVersion: \"1\";\n\troute?: ModelRoute;\n}\n\nexport interface StructuredIntentModel {\n\tparse(route: ModelRoute, input: ParseIntentInput): Promise<IntentContract>;\n}\n\nexport class VersionedIntentParser {\n\tconstructor(\n\t\tprivate readonly catalog = new IntentSchemaCatalog(),\n\t\tprivate readonly router?: AuthenticatedModelRouter,\n\t\tprivate readonly model?: StructuredIntentModel,\n\t) {}\n\n\tasync parse(input: ParseIntentInput): Promise<ParsedIntentResult> {\n\t\tconst deterministic = deterministicOperation(input.text);\n\t\tif (deterministic) return this.buildDeterministic(input, deterministic);\n\t\tif (!this.router || !this.model)\n\t\t\tthrow new Error(\"Intent is ambiguous and no authenticated model parser is configured\");\n\t\tconst route = this.router.route(\"intent_parse\", input.preferredProvider);\n\t\tconst intent = await this.model.parse(route, input);\n\t\tassertContract(\"intent\", intent);\n\t\tthis.catalog.validate(intent);\n\t\treturn { intent, parserId: \"authenticated-model-v1\", parserVersion: \"1\", route };\n\t}\n\n\tprivate buildDeterministic(input: ParseIntentInput, operation: IntentOperation): ParsedIntentResult {\n\t\tconst definition = this.catalog.get(operation);\n\t\tconst intent: IntentContract = {\n\t\t\theader: { namespace: \"ai.aletheion.asm\", major: 1, minor: 1 },\n\t\t\tintentId: input.intentId ?? randomUUID(),\n\t\t\toperation,\n\t\t\tresources: input.resources ?? inferResources(input.text, operation),\n\t\t\texternalEffect: definition.consequence !== \"none\" && definition.consequence !== \"local_mutation\",\n\t\t\tidempotencyKey: input.idempotencyKey,\n\t\t\trequestedAt: (input.now ?? new Date()).toISOString(),\n\t\t\targuments: input.arguments ?? { text: input.text },\n\t\t};\n\t\tassertContract(\"intent\", intent);\n\t\tthis.catalog.validate(intent);\n\t\treturn { intent, parserId: \"deterministic-v1\", parserVersion: \"1\" };\n\t}\n}\n\nfunction deterministicOperation(text: string): IntentOperation | undefined {\n\tconst normalized = text.trim().toLowerCase();\n\tif (/\\b(delete|remove|erase|drop|apagar|deletar|excluir|remover)\\b/.test(normalized)) return \"delete\";\n\tif (/\\b(buy|purchase|checkout|comprar|pagar|adquirir)\\b/.test(normalized)) return \"purchase\";\n\tif (/\\b(deploy|release|publish|implantar|publicar)\\b/.test(normalized)) return \"deploy\";\n\tif (/\\b(send|email|message|notify|enviar|avisar|comunicar)\\b/.test(normalized)) return \"communicate\";\n\tif (/\\b(run|execute|restart|executar|rodar|reiniciar)\\b/.test(normalized)) return \"execute\";\n\tif (/\\b(edit|write|change|create|editar|alterar|criar|escrever)\\b/.test(normalized)) return \"write\";\n\tif (/\\b(read|show|list|inspect|ler|mostrar|listar|ver)\\b/.test(normalized)) return \"read\";\n\tif (/\\b(diagnose|debug|investigate|diagnosticar|depurar|investigar)\\b/.test(normalized)) return \"diagnose\";\n\treturn undefined;\n}\n\nfunction inferResources(text: string, operation: IntentOperation): string[] {\n\treturn [`${operation}:${text.trim().slice(0, 160) || \"unspecified\"}`];\n}\n"]}

package/dist/policy.d.ts

@@ -0,0 +1,16 @@
+import type { IntentContract, PolicyContract } from "@asm-agent/contracts";
+import { IntentSchemaCatalog } from "./catalog.js";
+export interface PolicyContext {
+    trustedOwnerProject: boolean;
+    preauthorizedApprovals?: readonly string[];
+    now?: Date;
+}
+export declare class IntentPolicyEngine {
+    private readonly catalog;
+    readonly version = "asm-personal-policy-v1";
+    constructor(catalog?: IntentSchemaCatalog);
+    decide(intent: IntentContract, context: PolicyContext): PolicyContract;
+    scopeHash(intent: IntentContract, approvalType: string): string;
+    private decision;
+}
+//# sourceMappingURL=policy.d.ts.map

package/dist/policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../src/policy.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3E,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAEnD,MAAM,WAAW,aAAa;IAC7B,mBAAmB,EAAE,OAAO,CAAC;IAC7B,sBAAsB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C,GAAG,CAAC,EAAE,IAAI,CAAC;CACX;AAED,qBAAa,kBAAkB;IAGlB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAFpC,QAAQ,CAAC,OAAO,4BAA4B;IAE5C,YAA6B,OAAO,sBAA4B,EAAI;IAEpE,MAAM,CAAC,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE,aAAa,GAAG,cAAc,CAsBrE;IAED,SAAS,CAAC,MAAM,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,GAAG,MAAM,CAW9D;IAED,OAAO,CAAC,QAAQ;CAkBhB","sourcesContent":["import { createHash, randomUUID } from \"node:crypto\";\nimport type { IntentContract, PolicyContract } from \"@asm-agent/contracts\";\nimport { IntentSchemaCatalog } from \"./catalog.js\";\n\nexport interface PolicyContext {\n\ttrustedOwnerProject: boolean;\n\tpreauthorizedApprovals?: readonly string[];\n\tnow?: Date;\n}\n\nexport class IntentPolicyEngine {\n\treadonly version = \"asm-personal-policy-v1\";\n\n\tconstructor(private readonly catalog = new IntentSchemaCatalog()) {}\n\n\tdecide(intent: IntentContract, context: PolicyContext): PolicyContract {\n\t\tthis.catalog.validate(intent);\n\t\tif (!context.trustedOwnerProject)\n\t\t\treturn this.decision(intent, \"deny\", [\"untrusted_identity_scope\"], [], context.now);\n\t\tif (intent.operation === \"purchase\") {\n\t\t\tconst amount = intent.arguments.amount;\n\t\t\tif (typeof amount !== \"number\" || !Number.isFinite(amount) || amount <= 0) {\n\t\t\t\treturn this.decision(intent, \"deny\", [\"invalid_purchase_amount\"], [], context.now);\n\t\t\t}\n\t\t}\n\t\tconst required = [...this.catalog.get(intent.operation).requiredApprovals];\n\t\tconst preauthorized = new Set(context.preauthorizedApprovals ?? []);\n\t\tconst missing = required.filter((approval) => !preauthorized.has(approval));\n\t\tif (missing.length > 0)\n\t\t\treturn this.decision(intent, \"require_approval\", [\"approval_required\"], missing, context.now);\n\t\treturn this.decision(\n\t\t\tintent,\n\t\t\t\"allow\",\n\t\t\trequired.length > 0 ? [\"preauthorized_scope\"] : [\"read_only_or_diagnostic\"],\n\t\t\t[],\n\t\t\tcontext.now,\n\t\t);\n\t}\n\n\tscopeHash(intent: IntentContract, approvalType: string): string {\n\t\treturn createHash(\"sha256\")\n\t\t\t.update(\n\t\t\t\tJSON.stringify({\n\t\t\t\t\tintentId: intent.intentId,\n\t\t\t\t\toperation: intent.operation,\n\t\t\t\t\tresources: intent.resources,\n\t\t\t\t\tapprovalType,\n\t\t\t\t}),\n\t\t\t)\n\t\t\t.digest(\"hex\");\n\t}\n\n\tprivate decision(\n\t\tintent: IntentContract,\n\t\toutcome: PolicyContract[\"outcome\"],\n\t\treasonCodes: string[],\n\t\trequiredApprovals: string[],\n\t\tnow = new Date(),\n\t): PolicyContract {\n\t\treturn {\n\t\t\theader: { namespace: \"ai.aletheion.asm\", major: 1, minor: 1 },\n\t\t\tdecisionId: randomUUID(),\n\t\t\tintentId: intent.intentId,\n\t\t\toutcome,\n\t\t\treasonCodes,\n\t\t\trequiredApprovals,\n\t\t\tdecidedAt: now.toISOString(),\n\t\t\tpolicyVersion: this.version,\n\t\t};\n\t}\n}\n"]}

package/dist/policy.js

@@ -0,0 +1,49 @@
+import { createHash, randomUUID } from "node:crypto";
+import { IntentSchemaCatalog } from "./catalog.js";
+export class IntentPolicyEngine {
+    catalog;
+    version = "asm-personal-policy-v1";
+    constructor(catalog = new IntentSchemaCatalog()) {
+        this.catalog = catalog;
+    }
+    decide(intent, context) {
+        this.catalog.validate(intent);
+        if (!context.trustedOwnerProject)
+            return this.decision(intent, "deny", ["untrusted_identity_scope"], [], context.now);
+        if (intent.operation === "purchase") {
+            const amount = intent.arguments.amount;
+            if (typeof amount !== "number" || !Number.isFinite(amount) || amount <= 0) {
+                return this.decision(intent, "deny", ["invalid_purchase_amount"], [], context.now);
+            }
+        }
+        const required = [...this.catalog.get(intent.operation).requiredApprovals];
+        const preauthorized = new Set(context.preauthorizedApprovals ?? []);
+        const missing = required.filter((approval) => !preauthorized.has(approval));
+        if (missing.length > 0)
+            return this.decision(intent, "require_approval", ["approval_required"], missing, context.now);
+        return this.decision(intent, "allow", required.length > 0 ? ["preauthorized_scope"] : ["read_only_or_diagnostic"], [], context.now);
+    }
+    scopeHash(intent, approvalType) {
+        return createHash("sha256")
+            .update(JSON.stringify({
+            intentId: intent.intentId,
+            operation: intent.operation,
+            resources: intent.resources,
+            approvalType,
+        }))
+            .digest("hex");
+    }
+    decision(intent, outcome, reasonCodes, requiredApprovals, now = new Date()) {
+        return {
+            header: { namespace: "ai.aletheion.asm", major: 1, minor: 1 },
+            decisionId: randomUUID(),
+            intentId: intent.intentId,
+            outcome,
+            reasonCodes,
+            requiredApprovals,
+            decidedAt: now.toISOString(),
+            policyVersion: this.version,
+        };
+    }
+}
+//# sourceMappingURL=policy.js.map

package/dist/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../src/policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAErD,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAQnD,MAAM,OAAO,kBAAkB;IAGD,OAAO;IAF3B,OAAO,GAAG,wBAAwB,CAAC;IAE5C,YAA6B,OAAO,GAAG,IAAI,mBAAmB,EAAE,EAAE;uBAArC,OAAO;IAA+B,CAAC;IAEpE,MAAM,CAAC,MAAsB,EAAE,OAAsB,EAAkB;QACtE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC9B,IAAI,CAAC,OAAO,CAAC,mBAAmB;YAC/B,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,0BAA0B,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;QACrF,IAAI,MAAM,CAAC,SAAS,KAAK,UAAU,EAAE,CAAC;YACrC,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC;YACvC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,EAAE,CAAC;gBAC3E,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,yBAAyB,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;YACpF,CAAC;QACF,CAAC;QACD,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,iBAAiB,CAAC,CAAC;QAC3E,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,sBAAsB,IAAI,EAAE,CAAC,CAAC;QACpE,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC5E,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;YACrB,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,kBAAkB,EAAE,CAAC,mBAAmB,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;QAC/F,OAAO,IAAI,CAAC,QAAQ,CACnB,MAAM,EACN,OAAO,EACP,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,CAAC,yBAAyB,CAAC,EAC3E,EAAE,EACF,OAAO,CAAC,GAAG,CACX,CAAC;IAAA,CACF;IAED,SAAS,CAAC,MAAsB,EAAE,YAAoB,EAAU;QAC/D,OAAO,UAAU,CAAC,QAAQ,CAAC;aACzB,MAAM,CACN,IAAI,CAAC,SAAS,CAAC;YACd,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,YAAY;SACZ,CAAC,CACF;aACA,MAAM,CAAC,KAAK,CAAC,CAAC;IAAA,CAChB;IAEO,QAAQ,CACf,MAAsB,EACtB,OAAkC,EAClC,WAAqB,EACrB,iBAA2B,EAC3B,GAAG,GAAG,IAAI,IAAI,EAAE,EACC;QACjB,OAAO;YACN,MAAM,EAAE,EAAE,SAAS,EAAE,kBAAkB,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE;YAC7D,UAAU,EAAE,UAAU,EAAE;YACxB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,OAAO;YACP,WAAW;YACX,iBAAiB;YACjB,SAAS,EAAE,GAAG,CAAC,WAAW,EAAE;YAC5B,aAAa,EAAE,IAAI,CAAC,OAAO;SAC3B,CAAC;IAAA,CACF;CACD","sourcesContent":["import { createHash, randomUUID } from \"node:crypto\";\nimport type { IntentContract, PolicyContract } from \"@asm-agent/contracts\";\nimport { IntentSchemaCatalog } from \"./catalog.js\";\n\nexport interface PolicyContext {\n\ttrustedOwnerProject: boolean;\n\tpreauthorizedApprovals?: readonly string[];\n\tnow?: Date;\n}\n\nexport class IntentPolicyEngine {\n\treadonly version = \"asm-personal-policy-v1\";\n\n\tconstructor(private readonly catalog = new IntentSchemaCatalog()) {}\n\n\tdecide(intent: IntentContract, context: PolicyContext): PolicyContract {\n\t\tthis.catalog.validate(intent);\n\t\tif (!context.trustedOwnerProject)\n\t\t\treturn this.decision(intent, \"deny\", [\"untrusted_identity_scope\"], [], context.now);\n\t\tif (intent.operation === \"purchase\") {\n\t\t\tconst amount = intent.arguments.amount;\n\t\t\tif (typeof amount !== \"number\" || !Number.isFinite(amount) || amount <= 0) {\n\t\t\t\treturn this.decision(intent, \"deny\", [\"invalid_purchase_amount\"], [], context.now);\n\t\t\t}\n\t\t}\n\t\tconst required = [...this.catalog.get(intent.operation).requiredApprovals];\n\t\tconst preauthorized = new Set(context.preauthorizedApprovals ?? []);\n\t\tconst missing = required.filter((approval) => !preauthorized.has(approval));\n\t\tif (missing.length > 0)\n\t\t\treturn this.decision(intent, \"require_approval\", [\"approval_required\"], missing, context.now);\n\t\treturn this.decision(\n\t\t\tintent,\n\t\t\t\"allow\",\n\t\t\trequired.length > 0 ? [\"preauthorized_scope\"] : [\"read_only_or_diagnostic\"],\n\t\t\t[],\n\t\t\tcontext.now,\n\t\t);\n\t}\n\n\tscopeHash(intent: IntentContract, approvalType: string): string {\n\t\treturn createHash(\"sha256\")\n\t\t\t.update(\n\t\t\t\tJSON.stringify({\n\t\t\t\t\tintentId: intent.intentId,\n\t\t\t\t\toperation: intent.operation,\n\t\t\t\t\tresources: intent.resources,\n\t\t\t\t\tapprovalType,\n\t\t\t\t}),\n\t\t\t)\n\t\t\t.digest(\"hex\");\n\t}\n\n\tprivate decision(\n\t\tintent: IntentContract,\n\t\toutcome: PolicyContract[\"outcome\"],\n\t\treasonCodes: string[],\n\t\trequiredApprovals: string[],\n\t\tnow = new Date(),\n\t): PolicyContract {\n\t\treturn {\n\t\t\theader: { namespace: \"ai.aletheion.asm\", major: 1, minor: 1 },\n\t\t\tdecisionId: randomUUID(),\n\t\t\tintentId: intent.intentId,\n\t\t\toutcome,\n\t\t\treasonCodes,\n\t\t\trequiredApprovals,\n\t\t\tdecidedAt: now.toISOString(),\n\t\t\tpolicyVersion: this.version,\n\t\t};\n\t}\n}\n"]}

package/dist/repository.d.ts

@@ -0,0 +1,29 @@
+import type { IntentContract, PolicyContract } from "@asm-agent/contracts";
+import type { PostgresStore } from "@asm-agent/postgres";
+import type { ParsedIntentResult } from "./parser.js";
+export declare class GovernanceRepository {
+    private readonly database;
+    constructor(database: PostgresStore);
+    saveIntent(ownerId: string, projectId: string, sessionId: string | undefined, parsed: ParsedIntentResult): Promise<void>;
+    saveDecision(decision: PolicyContract): Promise<void>;
+    grantApproval(input: {
+        id: string;
+        decisionId: string;
+        approvalType: string;
+        grantedBy: string;
+        scopeHash: string;
+        expiresAt?: Date;
+    }): Promise<void>;
+    hasApprovals(decision: PolicyContract, intent: IntentContract, expectedScopeHash: (type: string) => string): Promise<boolean>;
+    consumeApprovals(decisionId: string): Promise<void>;
+    recordExecutionStarted(input: {
+        id: string;
+        intentId: string;
+        decisionId: string;
+        scope: string;
+        key: string;
+        requestHash: string;
+    }): Promise<void>;
+    finishExecution(id: string, status: "completed" | "failed" | "unknown_external_outcome", value: unknown): Promise<void>;
+}
+//# sourceMappingURL=repository.d.ts.map

package/dist/repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"repository.d.ts","sourceRoot":"","sources":["../src/repository.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAEtD,qBAAa,oBAAoB;IACpB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAArC,YAA6B,QAAQ,EAAE,aAAa,EAAI;IAElD,UAAU,CACf,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,MAAM,EAAE,kBAAkB,GACxB,OAAO,CAAC,IAAI,CAAC,CA2Bf;IAEK,YAAY,CAAC,QAAQ,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAe1D;IAEK,aAAa,CAAC,KAAK,EAAE;QAC1B,EAAE,EAAE,MAAM,CAAC;QACX,UAAU,EAAE,MAAM,CAAC;QACnB,YAAY,EAAE,MAAM,CAAC;QACrB,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,CAAC,EAAE,IAAI,CAAC;KACjB,GAAG,OAAO,CAAC,IAAI,CAAC,CAMhB;IAEK,YAAY,CACjB,QAAQ,EAAE,cAAc,EACxB,MAAM,EAAE,cAAc,EACtB,iBAAiB,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,GACzC,OAAO,CAAC,OAAO,CAAC,CAalB;IAEK,gBAAgB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAMxD;IAEK,sBAAsB,CAAC,KAAK,EAAE;QACnC,EAAE,EAAE,MAAM,CAAC;QACX,QAAQ,EAAE,MAAM,CAAC;QACjB,UAAU,EAAE,MAAM,CAAC;QACnB,KAAK,EAAE,MAAM,CAAC;QACd,GAAG,EAAE,MAAM,CAAC;QACZ,WAAW,EAAE,MAAM,CAAC;KACpB,GAAG,OAAO,CAAC,IAAI,CAAC,CAOhB;IAEK,eAAe,CACpB,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,WAAW,GAAG,QAAQ,GAAG,0BAA0B,EAC3D,KAAK,EAAE,OAAO,GACZ,OAAO,CAAC,IAAI,CAAC,CAQf;CACD","sourcesContent":["import type { IntentContract, PolicyContract } from \"@asm-agent/contracts\";\nimport type { PostgresStore } from \"@asm-agent/postgres\";\nimport type { ParsedIntentResult } from \"./parser.js\";\n\nexport class GovernanceRepository {\n\tconstructor(private readonly database: PostgresStore) {}\n\n\tasync saveIntent(\n\t\townerId: string,\n\t\tprojectId: string,\n\t\tsessionId: string | undefined,\n\t\tparsed: ParsedIntentResult,\n\t): Promise<void> {\n\t\tconst { intent } = parsed;\n\t\tawait this.database.pool.query(\n\t\t\t`INSERT INTO asm_agent.parsed_intents\n\t\t\t (id, owner_id, project_id, session_id, contract_major, contract_minor, operation,\n\t\t\t resources, external_effect, idempotency_key, arguments, parser_id, parser_version,\n\t\t\t model_provider, model_id, requested_at)\n\t\t\t VALUES ($1,$2,$3,$4,$5,$6,$7,$8,$9,$10,$11::jsonb,$12,$13,$14,$15,$16)`,\n\t\t\t[\n\t\t\t\tintent.intentId,\n\t\t\t\townerId,\n\t\t\t\tprojectId,\n\t\t\t\tsessionId ?? null,\n\t\t\t\tintent.header.major,\n\t\t\t\tintent.header.minor,\n\t\t\t\tintent.operation,\n\t\t\t\tintent.resources,\n\t\t\t\tintent.externalEffect,\n\t\t\t\tintent.idempotencyKey ?? null,\n\t\t\t\tJSON.stringify(intent.arguments),\n\t\t\t\tparsed.parserId,\n\t\t\t\tparsed.parserVersion,\n\t\t\t\tparsed.route?.provider ?? null,\n\t\t\t\tparsed.route?.modelId ?? null,\n\t\t\t\tintent.requestedAt,\n\t\t\t],\n\t\t);\n\t}\n\n\tasync saveDecision(decision: PolicyContract): Promise<void> {\n\t\tawait this.database.pool.query(\n\t\t\t`INSERT INTO asm_agent.policy_decisions\n\t\t\t (id, intent_id, outcome, reason_codes, required_approvals, policy_version, decided_at)\n\t\t\t VALUES ($1,$2,$3,$4,$5,$6,$7)`,\n\t\t\t[\n\t\t\t\tdecision.decisionId,\n\t\t\t\tdecision.intentId,\n\t\t\t\tdecision.outcome,\n\t\t\t\tdecision.reasonCodes,\n\t\t\t\tdecision.requiredApprovals,\n\t\t\t\tdecision.policyVersion,\n\t\t\t\tdecision.decidedAt,\n\t\t\t],\n\t\t);\n\t}\n\n\tasync grantApproval(input: {\n\t\tid: string;\n\t\tdecisionId: string;\n\t\tapprovalType: string;\n\t\tgrantedBy: string;\n\t\tscopeHash: string;\n\t\texpiresAt?: Date;\n\t}): Promise<void> {\n\t\tawait this.database.pool.query(\n\t\t\t`INSERT INTO asm_agent.approval_grants\n\t\t\t (id, decision_id, approval_type, granted_by, scope_hash, expires_at) VALUES ($1,$2,$3,$4,$5,$6)`,\n\t\t\t[input.id, input.decisionId, input.approvalType, input.grantedBy, input.scopeHash, input.expiresAt ?? null],\n\t\t);\n\t}\n\n\tasync hasApprovals(\n\t\tdecision: PolicyContract,\n\t\tintent: IntentContract,\n\t\texpectedScopeHash: (type: string) => string,\n\t): Promise<boolean> {\n\t\tif (decision.outcome === \"allow\") return true;\n\t\tif (decision.outcome === \"deny\") return false;\n\t\tconst result = await this.database.pool.query<{ approval_type: string; scope_hash: string }>(\n\t\t\t`SELECT approval_type, scope_hash FROM asm_agent.approval_grants\n\t\t\t WHERE decision_id = $1 AND (expires_at IS NULL OR expires_at > clock_timestamp())`,\n\t\t\t[decision.decisionId],\n\t\t);\n\t\tconst grants = new Map(result.rows.map((row) => [row.approval_type, row.scope_hash]));\n\t\treturn (\n\t\t\tdecision.requiredApprovals.every((type) => grants.get(type) === expectedScopeHash(type)) &&\n\t\t\tintent.intentId === decision.intentId\n\t\t);\n\t}\n\n\tasync consumeApprovals(decisionId: string): Promise<void> {\n\t\tawait this.database.pool.query(\n\t\t\t`UPDATE asm_agent.approval_grants SET consumed_at = clock_timestamp()\n\t\t\t WHERE decision_id = $1 AND consumed_at IS NULL`,\n\t\t\t[decisionId],\n\t\t);\n\t}\n\n\tasync recordExecutionStarted(input: {\n\t\tid: string;\n\t\tintentId: string;\n\t\tdecisionId: string;\n\t\tscope: string;\n\t\tkey: string;\n\t\trequestHash: string;\n\t}): Promise<void> {\n\t\tawait this.database.pool.query(\n\t\t\t`INSERT INTO asm_agent.governed_executions\n\t\t\t (id, intent_id, decision_id, idempotency_scope, idempotency_key, request_hash, status)\n\t\t\t VALUES ($1,$2,$3,$4,$5,$6,'started') ON CONFLICT (idempotency_scope, idempotency_key) DO NOTHING`,\n\t\t\t[input.id, input.intentId, input.decisionId, input.scope, input.key, input.requestHash],\n\t\t);\n\t}\n\n\tasync finishExecution(\n\t\tid: string,\n\t\tstatus: \"completed\" | \"failed\" | \"unknown_external_outcome\",\n\t\tvalue: unknown,\n\t): Promise<void> {\n\t\tawait this.database.pool.query(\n\t\t\t`UPDATE asm_agent.governed_executions SET status = $2,\n\t\t\t result = CASE WHEN $2 = 'completed' THEN $3::jsonb ELSE NULL END,\n\t\t\t error = CASE WHEN $2 <> 'completed' THEN $3::jsonb ELSE NULL END,\n\t\t\t completed_at = clock_timestamp() WHERE id = $1`,\n\t\t\t[id, status, JSON.stringify(value)],\n\t\t);\n\t}\n}\n"]}

package/dist/repository.js

@@ -0,0 +1,75 @@
+export class GovernanceRepository {
+    database;
+    constructor(database) {
+        this.database = database;
+    }
+    async saveIntent(ownerId, projectId, sessionId, parsed) {
+        const { intent } = parsed;
+        await this.database.pool.query(`INSERT INTO asm_agent.parsed_intents
+			 (id, owner_id, project_id, session_id, contract_major, contract_minor, operation,
+			 resources, external_effect, idempotency_key, arguments, parser_id, parser_version,
+			 model_provider, model_id, requested_at)
+			 VALUES ($1,$2,$3,$4,$5,$6,$7,$8,$9,$10,$11::jsonb,$12,$13,$14,$15,$16)`, [
+            intent.intentId,
+            ownerId,
+            projectId,
+            sessionId ?? null,
+            intent.header.major,
+            intent.header.minor,
+            intent.operation,
+            intent.resources,
+            intent.externalEffect,
+            intent.idempotencyKey ?? null,
+            JSON.stringify(intent.arguments),
+            parsed.parserId,
+            parsed.parserVersion,
+            parsed.route?.provider ?? null,
+            parsed.route?.modelId ?? null,
+            intent.requestedAt,
+        ]);
+    }
+    async saveDecision(decision) {
+        await this.database.pool.query(`INSERT INTO asm_agent.policy_decisions
+			 (id, intent_id, outcome, reason_codes, required_approvals, policy_version, decided_at)
+			 VALUES ($1,$2,$3,$4,$5,$6,$7)`, [
+            decision.decisionId,
+            decision.intentId,
+            decision.outcome,
+            decision.reasonCodes,
+            decision.requiredApprovals,
+            decision.policyVersion,
+            decision.decidedAt,
+        ]);
+    }
+    async grantApproval(input) {
+        await this.database.pool.query(`INSERT INTO asm_agent.approval_grants
+			 (id, decision_id, approval_type, granted_by, scope_hash, expires_at) VALUES ($1,$2,$3,$4,$5,$6)`, [input.id, input.decisionId, input.approvalType, input.grantedBy, input.scopeHash, input.expiresAt ?? null]);
+    }
+    async hasApprovals(decision, intent, expectedScopeHash) {
+        if (decision.outcome === "allow")
+            return true;
+        if (decision.outcome === "deny")
+            return false;
+        const result = await this.database.pool.query(`SELECT approval_type, scope_hash FROM asm_agent.approval_grants
+			 WHERE decision_id = $1 AND (expires_at IS NULL OR expires_at > clock_timestamp())`, [decision.decisionId]);
+        const grants = new Map(result.rows.map((row) => [row.approval_type, row.scope_hash]));
+        return (decision.requiredApprovals.every((type) => grants.get(type) === expectedScopeHash(type)) &&
+            intent.intentId === decision.intentId);
+    }
+    async consumeApprovals(decisionId) {
+        await this.database.pool.query(`UPDATE asm_agent.approval_grants SET consumed_at = clock_timestamp()
+			 WHERE decision_id = $1 AND consumed_at IS NULL`, [decisionId]);
+    }
+    async recordExecutionStarted(input) {
+        await this.database.pool.query(`INSERT INTO asm_agent.governed_executions
+			 (id, intent_id, decision_id, idempotency_scope, idempotency_key, request_hash, status)
+			 VALUES ($1,$2,$3,$4,$5,$6,'started') ON CONFLICT (idempotency_scope, idempotency_key) DO NOTHING`, [input.id, input.intentId, input.decisionId, input.scope, input.key, input.requestHash]);
+    }
+    async finishExecution(id, status, value) {
+        await this.database.pool.query(`UPDATE asm_agent.governed_executions SET status = $2,
+			 result = CASE WHEN $2 = 'completed' THEN $3::jsonb ELSE NULL END,
+			 error = CASE WHEN $2 <> 'completed' THEN $3::jsonb ELSE NULL END,
+			 completed_at = clock_timestamp() WHERE id = $1`, [id, status, JSON.stringify(value)]);
+    }
+}
+//# sourceMappingURL=repository.js.map

package/dist/repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"repository.js","sourceRoot":"","sources":["../src/repository.ts"],"names":[],"mappings":"AAIA,MAAM,OAAO,oBAAoB;IACH,QAAQ;IAArC,YAA6B,QAAuB,EAAE;wBAAzB,QAAQ;IAAkB,CAAC;IAExD,KAAK,CAAC,UAAU,CACf,OAAe,EACf,SAAiB,EACjB,SAA6B,EAC7B,MAA0B,EACV;QAChB,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;QAC1B,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAC7B;;;;2EAIwE,EACxE;YACC,MAAM,CAAC,QAAQ;YACf,OAAO;YACP,SAAS;YACT,SAAS,IAAI,IAAI;YACjB,MAAM,CAAC,MAAM,CAAC,KAAK;YACnB,MAAM,CAAC,MAAM,CAAC,KAAK;YACnB,MAAM,CAAC,SAAS;YAChB,MAAM,CAAC,SAAS;YAChB,MAAM,CAAC,cAAc;YACrB,MAAM,CAAC,cAAc,IAAI,IAAI;YAC7B,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC;YAChC,MAAM,CAAC,QAAQ;YACf,MAAM,CAAC,aAAa;YACpB,MAAM,CAAC,KAAK,EAAE,QAAQ,IAAI,IAAI;YAC9B,MAAM,CAAC,KAAK,EAAE,OAAO,IAAI,IAAI;YAC7B,MAAM,CAAC,WAAW;SAClB,CACD,CAAC;IAAA,CACF;IAED,KAAK,CAAC,YAAY,CAAC,QAAwB,EAAiB;QAC3D,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAC7B;;kCAE+B,EAC/B;YACC,QAAQ,CAAC,UAAU;YACnB,QAAQ,CAAC,QAAQ;YACjB,QAAQ,CAAC,OAAO;YAChB,QAAQ,CAAC,WAAW;YACpB,QAAQ,CAAC,iBAAiB;YAC1B,QAAQ,CAAC,aAAa;YACtB,QAAQ,CAAC,SAAS;SAClB,CACD,CAAC;IAAA,CACF;IAED,KAAK,CAAC,aAAa,CAAC,KAOnB,EAAiB;QACjB,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAC7B;oGACiG,EACjG,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI,CAAC,CAC3G,CAAC;IAAA,CACF;IAED,KAAK,CAAC,YAAY,CACjB,QAAwB,EACxB,MAAsB,EACtB,iBAA2C,EACxB;QACnB,IAAI,QAAQ,CAAC,OAAO,KAAK,OAAO;YAAE,OAAO,IAAI,CAAC;QAC9C,IAAI,QAAQ,CAAC,OAAO,KAAK,MAAM;YAAE,OAAO,KAAK,CAAC;QAC9C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAC5C;sFACmF,EACnF,CAAC,QAAQ,CAAC,UAAU,CAAC,CACrB,CAAC;QACF,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,aAAa,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QACtF,OAAO,CACN,QAAQ,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,iBAAiB,CAAC,IAAI,CAAC,CAAC;YACxF,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ,CACrC,CAAC;IAAA,CACF;IAED,KAAK,CAAC,gBAAgB,CAAC,UAAkB,EAAiB;QACzD,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAC7B;mDACgD,EAChD,CAAC,UAAU,CAAC,CACZ,CAAC;IAAA,CACF;IAED,KAAK,CAAC,sBAAsB,CAAC,KAO5B,EAAiB;QACjB,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAC7B;;qGAEkG,EAClG,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,WAAW,CAAC,CACvF,CAAC;IAAA,CACF;IAED,KAAK,CAAC,eAAe,CACpB,EAAU,EACV,MAA2D,EAC3D,KAAc,EACE;QAChB,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAC7B;;;mDAGgD,EAChD,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CACnC,CAAC;IAAA,CACF;CACD","sourcesContent":["import type { IntentContract, PolicyContract } from \"@asm-agent/contracts\";\nimport type { PostgresStore } from \"@asm-agent/postgres\";\nimport type { ParsedIntentResult } from \"./parser.js\";\n\nexport class GovernanceRepository {\n\tconstructor(private readonly database: PostgresStore) {}\n\n\tasync saveIntent(\n\t\townerId: string,\n\t\tprojectId: string,\n\t\tsessionId: string | undefined,\n\t\tparsed: ParsedIntentResult,\n\t): Promise<void> {\n\t\tconst { intent } = parsed;\n\t\tawait this.database.pool.query(\n\t\t\t`INSERT INTO asm_agent.parsed_intents\n\t\t\t (id, owner_id, project_id, session_id, contract_major, contract_minor, operation,\n\t\t\t resources, external_effect, idempotency_key, arguments, parser_id, parser_version,\n\t\t\t model_provider, model_id, requested_at)\n\t\t\t VALUES ($1,$2,$3,$4,$5,$6,$7,$8,$9,$10,$11::jsonb,$12,$13,$14,$15,$16)`,\n\t\t\t[\n\t\t\t\tintent.intentId,\n\t\t\t\townerId,\n\t\t\t\tprojectId,\n\t\t\t\tsessionId ?? null,\n\t\t\t\tintent.header.major,\n\t\t\t\tintent.header.minor,\n\t\t\t\tintent.operation,\n\t\t\t\tintent.resources,\n\t\t\t\tintent.externalEffect,\n\t\t\t\tintent.idempotencyKey ?? null,\n\t\t\t\tJSON.stringify(intent.arguments),\n\t\t\t\tparsed.parserId,\n\t\t\t\tparsed.parserVersion,\n\t\t\t\tparsed.route?.provider ?? null,\n\t\t\t\tparsed.route?.modelId ?? null,\n\t\t\t\tintent.requestedAt,\n\t\t\t],\n\t\t);\n\t}\n\n\tasync saveDecision(decision: PolicyContract): Promise<void> {\n\t\tawait this.database.pool.query(\n\t\t\t`INSERT INTO asm_agent.policy_decisions\n\t\t\t (id, intent_id, outcome, reason_codes, required_approvals, policy_version, decided_at)\n\t\t\t VALUES ($1,$2,$3,$4,$5,$6,$7)`,\n\t\t\t[\n\t\t\t\tdecision.decisionId,\n\t\t\t\tdecision.intentId,\n\t\t\t\tdecision.outcome,\n\t\t\t\tdecision.reasonCodes,\n\t\t\t\tdecision.requiredApprovals,\n\t\t\t\tdecision.policyVersion,\n\t\t\t\tdecision.decidedAt,\n\t\t\t],\n\t\t);\n\t}\n\n\tasync grantApproval(input: {\n\t\tid: string;\n\t\tdecisionId: string;\n\t\tapprovalType: string;\n\t\tgrantedBy: string;\n\t\tscopeHash: string;\n\t\texpiresAt?: Date;\n\t}): Promise<void> {\n\t\tawait this.database.pool.query(\n\t\t\t`INSERT INTO asm_agent.approval_grants\n\t\t\t (id, decision_id, approval_type, granted_by, scope_hash, expires_at) VALUES ($1,$2,$3,$4,$5,$6)`,\n\t\t\t[input.id, input.decisionId, input.approvalType, input.grantedBy, input.scopeHash, input.expiresAt ?? null],\n\t\t);\n\t}\n\n\tasync hasApprovals(\n\t\tdecision: PolicyContract,\n\t\tintent: IntentContract,\n\t\texpectedScopeHash: (type: string) => string,\n\t): Promise<boolean> {\n\t\tif (decision.outcome === \"allow\") return true;\n\t\tif (decision.outcome === \"deny\") return false;\n\t\tconst result = await this.database.pool.query<{ approval_type: string; scope_hash: string }>(\n\t\t\t`SELECT approval_type, scope_hash FROM asm_agent.approval_grants\n\t\t\t WHERE decision_id = $1 AND (expires_at IS NULL OR expires_at > clock_timestamp())`,\n\t\t\t[decision.decisionId],\n\t\t);\n\t\tconst grants = new Map(result.rows.map((row) => [row.approval_type, row.scope_hash]));\n\t\treturn (\n\t\t\tdecision.requiredApprovals.every((type) => grants.get(type) === expectedScopeHash(type)) &&\n\t\t\tintent.intentId === decision.intentId\n\t\t);\n\t}\n\n\tasync consumeApprovals(decisionId: string): Promise<void> {\n\t\tawait this.database.pool.query(\n\t\t\t`UPDATE asm_agent.approval_grants SET consumed_at = clock_timestamp()\n\t\t\t WHERE decision_id = $1 AND consumed_at IS NULL`,\n\t\t\t[decisionId],\n\t\t);\n\t}\n\n\tasync recordExecutionStarted(input: {\n\t\tid: string;\n\t\tintentId: string;\n\t\tdecisionId: string;\n\t\tscope: string;\n\t\tkey: string;\n\t\trequestHash: string;\n\t}): Promise<void> {\n\t\tawait this.database.pool.query(\n\t\t\t`INSERT INTO asm_agent.governed_executions\n\t\t\t (id, intent_id, decision_id, idempotency_scope, idempotency_key, request_hash, status)\n\t\t\t VALUES ($1,$2,$3,$4,$5,$6,'started') ON CONFLICT (idempotency_scope, idempotency_key) DO NOTHING`,\n\t\t\t[input.id, input.intentId, input.decisionId, input.scope, input.key, input.requestHash],\n\t\t);\n\t}\n\n\tasync finishExecution(\n\t\tid: string,\n\t\tstatus: \"completed\" | \"failed\" | \"unknown_external_outcome\",\n\t\tvalue: unknown,\n\t): Promise<void> {\n\t\tawait this.database.pool.query(\n\t\t\t`UPDATE asm_agent.governed_executions SET status = $2,\n\t\t\t result = CASE WHEN $2 = 'completed' THEN $3::jsonb ELSE NULL END,\n\t\t\t error = CASE WHEN $2 <> 'completed' THEN $3::jsonb ELSE NULL END,\n\t\t\t completed_at = clock_timestamp() WHERE id = $1`,\n\t\t\t[id, status, JSON.stringify(value)],\n\t\t);\n\t}\n}\n"]}

package/dist/router.d.ts

@@ -0,0 +1,18 @@
+export type LoginProvider = "openai-codex" | "anthropic";
+export type RoutingPurpose = "intent_parse" | "intent_repair";
+export interface AuthenticatedModel {
+    provider: LoginProvider;
+    modelId: string;
+    purposes: readonly RoutingPurpose[];
+}
+export interface ModelRoute {
+    provider: LoginProvider;
+    modelId: string;
+    purpose: RoutingPurpose;
+}
+export declare class AuthenticatedModelRouter {
+    private readonly models;
+    constructor(models: readonly AuthenticatedModel[]);
+    route(purpose: RoutingPurpose, preferredProvider?: LoginProvider): ModelRoute;
+}
+//# sourceMappingURL=router.d.ts.map

package/dist/router.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"router.d.ts","sourceRoot":"","sources":["../src/router.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,aAAa,GAAG,cAAc,GAAG,WAAW,CAAC;AACzD,MAAM,MAAM,cAAc,GAAG,cAAc,GAAG,eAAe,CAAC;AAE9D,MAAM,WAAW,kBAAkB;IAClC,QAAQ,EAAE,aAAa,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,SAAS,cAAc,EAAE,CAAC;CACpC;AAED,MAAM,WAAW,UAAU;IAC1B,QAAQ,EAAE,aAAa,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,cAAc,CAAC;CACxB;AAED,qBAAa,wBAAwB;IACxB,OAAO,CAAC,QAAQ,CAAC,MAAM;IAAnC,YAA6B,MAAM,EAAE,SAAS,kBAAkB,EAAE,EAAI;IAEtE,KAAK,CAAC,OAAO,EAAE,cAAc,EAAE,iBAAiB,CAAC,EAAE,aAAa,GAAG,UAAU,CAK5E;CACD","sourcesContent":["export type LoginProvider = \"openai-codex\" | \"anthropic\";\nexport type RoutingPurpose = \"intent_parse\" | \"intent_repair\";\n\nexport interface AuthenticatedModel {\n\tprovider: LoginProvider;\n\tmodelId: string;\n\tpurposes: readonly RoutingPurpose[];\n}\n\nexport interface ModelRoute {\n\tprovider: LoginProvider;\n\tmodelId: string;\n\tpurpose: RoutingPurpose;\n}\n\nexport class AuthenticatedModelRouter {\n\tconstructor(private readonly models: readonly AuthenticatedModel[]) {}\n\n\troute(purpose: RoutingPurpose, preferredProvider?: LoginProvider): ModelRoute {\n\t\tconst candidates = this.models.filter((model) => model.purposes.includes(purpose));\n\t\tconst selected = candidates.find((model) => model.provider === preferredProvider) ?? candidates[0];\n\t\tif (!selected) throw new Error(`No authenticated Codex or Claude model supports ${purpose}`);\n\t\treturn { provider: selected.provider, modelId: selected.modelId, purpose };\n\t}\n}\n"]}

package/dist/router.js

@@ -0,0 +1,14 @@
+export class AuthenticatedModelRouter {
+    models;
+    constructor(models) {
+        this.models = models;
+    }
+    route(purpose, preferredProvider) {
+        const candidates = this.models.filter((model) => model.purposes.includes(purpose));
+        const selected = candidates.find((model) => model.provider === preferredProvider) ?? candidates[0];
+        if (!selected)
+            throw new Error(`No authenticated Codex or Claude model supports ${purpose}`);
+        return { provider: selected.provider, modelId: selected.modelId, purpose };
+    }
+}
+//# sourceMappingURL=router.js.map

package/dist/router.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"router.js","sourceRoot":"","sources":["../src/router.ts"],"names":[],"mappings":"AAeA,MAAM,OAAO,wBAAwB;IACP,MAAM;IAAnC,YAA6B,MAAqC,EAAE;sBAAvC,MAAM;IAAkC,CAAC;IAEtE,KAAK,CAAC,OAAuB,EAAE,iBAAiC,EAAc;QAC7E,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;QACnF,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,iBAAiB,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;QACnG,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,OAAO,EAAE,CAAC,CAAC;QAC7F,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC;IAAA,CAC3E;CACD","sourcesContent":["export type LoginProvider = \"openai-codex\" | \"anthropic\";\nexport type RoutingPurpose = \"intent_parse\" | \"intent_repair\";\n\nexport interface AuthenticatedModel {\n\tprovider: LoginProvider;\n\tmodelId: string;\n\tpurposes: readonly RoutingPurpose[];\n}\n\nexport interface ModelRoute {\n\tprovider: LoginProvider;\n\tmodelId: string;\n\tpurpose: RoutingPurpose;\n}\n\nexport class AuthenticatedModelRouter {\n\tconstructor(private readonly models: readonly AuthenticatedModel[]) {}\n\n\troute(purpose: RoutingPurpose, preferredProvider?: LoginProvider): ModelRoute {\n\t\tconst candidates = this.models.filter((model) => model.purposes.includes(purpose));\n\t\tconst selected = candidates.find((model) => model.provider === preferredProvider) ?? candidates[0];\n\t\tif (!selected) throw new Error(`No authenticated Codex or Claude model supports ${purpose}`);\n\t\treturn { provider: selected.provider, modelId: selected.modelId, purpose };\n\t}\n}\n"]}

package/dist/service.d.ts

@@ -0,0 +1,21 @@
+import type { PolicyContract } from "@asm-agent/contracts";
+import type { ParsedIntentResult, ParseIntentInput, VersionedIntentParser } from "./parser.js";
+import type { IntentPolicyEngine, PolicyContext } from "./policy.js";
+import type { GovernanceRepository } from "./repository.js";
+export declare class GovernanceService {
+    private readonly parser;
+    private readonly policy;
+    private readonly repository;
+    constructor(parser: VersionedIntentParser, policy: IntentPolicyEngine, repository: GovernanceRepository);
+    assess(input: {
+        ownerId: string;
+        projectId: string;
+        sessionId?: string;
+        request: ParseIntentInput;
+        policyContext: PolicyContext;
+    }): Promise<{
+        parsed: ParsedIntentResult;
+        decision: PolicyContract;
+    }>;
+}
+//# sourceMappingURL=service.d.ts.map

package/dist/service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../src/service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,KAAK,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAC/F,OAAO,KAAK,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACrE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAE5D,qBAAa,iBAAiB;IAE5B,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,UAAU;IAH5B,YACkB,MAAM,EAAE,qBAAqB,EAC7B,MAAM,EAAE,kBAAkB,EAC1B,UAAU,EAAE,oBAAoB,EAC9C;IAEE,MAAM,CAAC,KAAK,EAAE;QACnB,OAAO,EAAE,MAAM,CAAC;QAChB,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,OAAO,EAAE,gBAAgB,CAAC;QAC1B,aAAa,EAAE,aAAa,CAAC;KAC7B,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,kBAAkB,CAAC;QAAC,QAAQ,EAAE,cAAc,CAAA;KAAE,CAAC,CAMpE;CACD","sourcesContent":["import type { PolicyContract } from \"@asm-agent/contracts\";\nimport type { ParsedIntentResult, ParseIntentInput, VersionedIntentParser } from \"./parser.js\";\nimport type { IntentPolicyEngine, PolicyContext } from \"./policy.js\";\nimport type { GovernanceRepository } from \"./repository.js\";\n\nexport class GovernanceService {\n\tconstructor(\n\t\tprivate readonly parser: VersionedIntentParser,\n\t\tprivate readonly policy: IntentPolicyEngine,\n\t\tprivate readonly repository: GovernanceRepository,\n\t) {}\n\n\tasync assess(input: {\n\t\townerId: string;\n\t\tprojectId: string;\n\t\tsessionId?: string;\n\t\trequest: ParseIntentInput;\n\t\tpolicyContext: PolicyContext;\n\t}): Promise<{ parsed: ParsedIntentResult; decision: PolicyContract }> {\n\t\tconst parsed = await this.parser.parse(input.request);\n\t\tawait this.repository.saveIntent(input.ownerId, input.projectId, input.sessionId, parsed);\n\t\tconst decision = this.policy.decide(parsed.intent, input.policyContext);\n\t\tawait this.repository.saveDecision(decision);\n\t\treturn { parsed, decision };\n\t}\n}\n"]}

package/dist/service.js

@@ -0,0 +1,18 @@
+export class GovernanceService {
+    parser;
+    policy;
+    repository;
+    constructor(parser, policy, repository) {
+        this.parser = parser;
+        this.policy = policy;
+        this.repository = repository;
+    }
+    async assess(input) {
+        const parsed = await this.parser.parse(input.request);
+        await this.repository.saveIntent(input.ownerId, input.projectId, input.sessionId, parsed);
+        const decision = this.policy.decide(parsed.intent, input.policyContext);
+        await this.repository.saveDecision(decision);
+        return { parsed, decision };
+    }
+}
+//# sourceMappingURL=service.js.map

package/dist/service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.js","sourceRoot":"","sources":["../src/service.ts"],"names":[],"mappings":"AAKA,MAAM,OAAO,iBAAiB;IAEX,MAAM;IACN,MAAM;IACN,UAAU;IAH5B,YACkB,MAA6B,EAC7B,MAA0B,EAC1B,UAAgC,EAChD;sBAHgB,MAAM;sBACN,MAAM;0BACN,UAAU;IACzB,CAAC;IAEJ,KAAK,CAAC,MAAM,CAAC,KAMZ,EAAqE;QACrE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACtD,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC1F,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC;QACxE,MAAM,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QAC7C,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAAA,CAC5B;CACD","sourcesContent":["import type { PolicyContract } from \"@asm-agent/contracts\";\nimport type { ParsedIntentResult, ParseIntentInput, VersionedIntentParser } from \"./parser.js\";\nimport type { IntentPolicyEngine, PolicyContext } from \"./policy.js\";\nimport type { GovernanceRepository } from \"./repository.js\";\n\nexport class GovernanceService {\n\tconstructor(\n\t\tprivate readonly parser: VersionedIntentParser,\n\t\tprivate readonly policy: IntentPolicyEngine,\n\t\tprivate readonly repository: GovernanceRepository,\n\t) {}\n\n\tasync assess(input: {\n\t\townerId: string;\n\t\tprojectId: string;\n\t\tsessionId?: string;\n\t\trequest: ParseIntentInput;\n\t\tpolicyContext: PolicyContext;\n\t}): Promise<{ parsed: ParsedIntentResult; decision: PolicyContract }> {\n\t\tconst parsed = await this.parser.parse(input.request);\n\t\tawait this.repository.saveIntent(input.ownerId, input.projectId, input.sessionId, parsed);\n\t\tconst decision = this.policy.decide(parsed.intent, input.policyContext);\n\t\tawait this.repository.saveDecision(decision);\n\t\treturn { parsed, decision };\n\t}\n}\n"]}

package/dist/tool-policy.d.ts

@@ -0,0 +1,11 @@
+import type { IntentOperation } from "./catalog.js";
+export declare const DEFAULT_CONSEQUENTIAL_TOOL_NAMES: readonly ["edit", "bash", "ipython"];
+export type DefaultConsequentialToolName = (typeof DEFAULT_CONSEQUENTIAL_TOOL_NAMES)[number];
+export interface ToolIntentClassification {
+    operation: IntentOperation;
+    externalEffect: boolean;
+    requiresIdempotency: boolean;
+    requiredApproval: string;
+}
+export declare function classifyDefaultTool(toolName: string): ToolIntentClassification;
+//# sourceMappingURL=tool-policy.d.ts.map

package/dist/tool-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-policy.d.ts","sourceRoot":"","sources":["../src/tool-policy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAEpD,eAAO,MAAM,gCAAgC,sCAAuC,CAAC;AACrF,MAAM,MAAM,4BAA4B,GAAG,CAAC,OAAO,gCAAgC,CAAC,CAAC,MAAM,CAAC,CAAC;AAE7F,MAAM,WAAW,wBAAwB;IACxC,SAAS,EAAE,eAAe,CAAC;IAC3B,cAAc,EAAE,OAAO,CAAC;IACxB,mBAAmB,EAAE,OAAO,CAAC;IAC7B,gBAAgB,EAAE,MAAM,CAAC;CACzB;AAED,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,wBAAwB,CAoB9E","sourcesContent":["import type { IntentOperation } from \"./catalog.js\";\n\nexport const DEFAULT_CONSEQUENTIAL_TOOL_NAMES = [\"edit\", \"bash\", \"ipython\"] as const;\nexport type DefaultConsequentialToolName = (typeof DEFAULT_CONSEQUENTIAL_TOOL_NAMES)[number];\n\nexport interface ToolIntentClassification {\n\toperation: IntentOperation;\n\texternalEffect: boolean;\n\trequiresIdempotency: boolean;\n\trequiredApproval: string;\n}\n\nexport function classifyDefaultTool(toolName: string): ToolIntentClassification {\n\tswitch (toolName) {\n\t\tcase \"edit\":\n\t\t\treturn {\n\t\t\t\toperation: \"write\",\n\t\t\t\texternalEffect: false,\n\t\t\t\trequiresIdempotency: false,\n\t\t\t\trequiredApproval: \"local_write\",\n\t\t\t};\n\t\tcase \"bash\":\n\t\tcase \"ipython\":\n\t\t\treturn {\n\t\t\t\toperation: \"execute\",\n\t\t\t\texternalEffect: true,\n\t\t\t\trequiresIdempotency: true,\n\t\t\t\trequiredApproval: \"command_execution\",\n\t\t\t};\n\t\tdefault:\n\t\t\tthrow new Error(`Default tool is not classified for consequential execution: ${toolName}`);\n\t}\n}\n"]}

package/dist/tool-policy.js

@@ -0,0 +1,23 @@
+export const DEFAULT_CONSEQUENTIAL_TOOL_NAMES = ["edit", "bash", "ipython"];
+export function classifyDefaultTool(toolName) {
+    switch (toolName) {
+        case "edit":
+            return {
+                operation: "write",
+                externalEffect: false,
+                requiresIdempotency: false,
+                requiredApproval: "local_write",
+            };
+        case "bash":
+        case "ipython":
+            return {
+                operation: "execute",
+                externalEffect: true,
+                requiresIdempotency: true,
+                requiredApproval: "command_execution",
+            };
+        default:
+            throw new Error(`Default tool is not classified for consequential execution: ${toolName}`);
+    }
+}
+//# sourceMappingURL=tool-policy.js.map

package/dist/tool-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-policy.js","sourceRoot":"","sources":["../src/tool-policy.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,CAAU,CAAC;AAUrF,MAAM,UAAU,mBAAmB,CAAC,QAAgB,EAA4B;IAC/E,QAAQ,QAAQ,EAAE,CAAC;QAClB,KAAK,MAAM;YACV,OAAO;gBACN,SAAS,EAAE,OAAO;gBAClB,cAAc,EAAE,KAAK;gBACrB,mBAAmB,EAAE,KAAK;gBAC1B,gBAAgB,EAAE,aAAa;aAC/B,CAAC;QACH,KAAK,MAAM,CAAC;QACZ,KAAK,SAAS;YACb,OAAO;gBACN,SAAS,EAAE,SAAS;gBACpB,cAAc,EAAE,IAAI;gBACpB,mBAAmB,EAAE,IAAI;gBACzB,gBAAgB,EAAE,mBAAmB;aACrC,CAAC;QACH;YACC,MAAM,IAAI,KAAK,CAAC,+DAA+D,QAAQ,EAAE,CAAC,CAAC;IAC7F,CAAC;AAAA,CACD","sourcesContent":["import type { IntentOperation } from \"./catalog.js\";\n\nexport const DEFAULT_CONSEQUENTIAL_TOOL_NAMES = [\"edit\", \"bash\", \"ipython\"] as const;\nexport type DefaultConsequentialToolName = (typeof DEFAULT_CONSEQUENTIAL_TOOL_NAMES)[number];\n\nexport interface ToolIntentClassification {\n\toperation: IntentOperation;\n\texternalEffect: boolean;\n\trequiresIdempotency: boolean;\n\trequiredApproval: string;\n}\n\nexport function classifyDefaultTool(toolName: string): ToolIntentClassification {\n\tswitch (toolName) {\n\t\tcase \"edit\":\n\t\t\treturn {\n\t\t\t\toperation: \"write\",\n\t\t\t\texternalEffect: false,\n\t\t\t\trequiresIdempotency: false,\n\t\t\t\trequiredApproval: \"local_write\",\n\t\t\t};\n\t\tcase \"bash\":\n\t\tcase \"ipython\":\n\t\t\treturn {\n\t\t\t\toperation: \"execute\",\n\t\t\t\texternalEffect: true,\n\t\t\t\trequiresIdempotency: true,\n\t\t\t\trequiredApproval: \"command_execution\",\n\t\t\t};\n\t\tdefault:\n\t\t\tthrow new Error(`Default tool is not classified for consequential execution: ${toolName}`);\n\t}\n}\n"]}

package/fixtures/intents.json

@@ -0,0 +1,8 @@
+[
+  { "name": "diagnosis", "text": "diagnose the failing worker", "operation": "diagnose", "externalEffect": false },
+  { "name": "editing", "text": "edit file src/app.ts", "operation": "write", "externalEffect": false },
+  { "name": "deployment", "text": "deploy service api to production", "operation": "deploy", "externalEffect": true },
+  { "name": "communication", "text": "send message to the maintainer", "operation": "communicate", "externalEffect": true },
+  { "name": "purchase", "text": "purchase product database-plan", "operation": "purchase", "externalEffect": true },
+  { "name": "deletion", "text": "delete remote backup", "operation": "delete", "externalEffect": true }
+]

package/package.json

@@ -0,0 +1,43 @@
+{
+	"name": "@asm-agent/governance",
+	"version": "0.8.2",
+	"description": "Versioned intent parsing, policy, approval, and governed execution",
+	"type": "module",
+	"main": "./dist/index.js",
+	"types": "./dist/index.d.ts",
+	"exports": {
+		".": {
+			"types": "./dist/index.d.ts",
+			"import": "./dist/index.js"
+		}
+	},
+	"files": [
+		"dist",
+		"fixtures",
+		"README.md"
+	],
+	"scripts": {
+		"clean": "shx rm -rf dist",
+		"build": "tsgo -p tsconfig.build.json",
+		"test": "vitest --run",
+		"prepublishOnly": "npm run clean && npm run build"
+	},
+	"dependencies": {
+		"@asm-agent/contracts": "^0.8.2",
+		"@asm-agent/postgres": "^0.8.2"
+	},
+	"devDependencies": {
+		"@types/node": "^24.3.0",
+		"typescript": "^7.0.2",
+		"vitest": "^4.1.10"
+	},
+	"engines": {
+		"node": ">=22.8.0"
+	},
+	"license": "(AGPL-3.0-only OR LicenseRef-ASM-Commercial)",
+	"repository": {
+		"type": "git",
+		"url": "git+https://github.com/AletheionAGI/asm-agent.git",
+		"directory": "packages/governance"
+	}
+}