@connexum/govern 0.0.0-stage → 0.1.0-beta.2

package/README.md

@@ -1,3 +1,48 @@
-# Temporary Holding Version
+# @connexum/govern
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+One entry for all three My-CC layers around any agent (end-state D1, task 655).
+
+```ts
+import { govern, GovernBlocked, GovernPaused } from '@connexum/govern'
+import { LocalGate } from '@connexum/typescript-sdk'
+
+const agent = govern({
+  agentId, passportId, governanceServerUrl: 'https://api.my-cc.io', token,   // the agent's own service token
+  localGate,                                            // optional: enforcing mode decides locally
+  sources: [{ sourceId: 'orders-db', tools: ['orders.'] }],
+  verification: { engine, tenantId, consumer, options: { leakageDenylist } },
+})
+
+await agent.tool('orders.update', input, (i) => updateOrder(i), { writes: true })
+const answer = agent.release(modelResponse)            // secrets and PHI blocked (or redacted) before use
+const result = await agent.verify(claims, { snapshot }) // grounded, contradicted or unsupported
+```
+
+Every tool call goes readiness, then runtime, then the tool body:
+
+- **Readiness**: the source the tool reads (by tool-name prefix) must give this agent's passport access, from the
+  organization's sealed scans on My-CC. `none` blocks; `read_only` blocks a writing tool; an unscanned source, or an
+  unreachable My-CC with no earlier answer, blocks. Only the source id and passport id are sent.
+- **Runtime**: a `LocalGate` in enforcing mode decides locally (approval-required actions park until a person decides,
+  task 465); otherwise the governance server's check-action decides.
+- A no throws `GovernBlocked { layer, tool, reason }` or `GovernPaused { parkId, approvalId }`; the body never runs.
+
+`release()` applies the model response check (task 466): `'block'` by default when the local gate is enforcing.
+`verify()` hands the claims to your `VerificationEngine` (`@connexum/verification`).
+
+## Stack adapters (one line per tool)
+
+```ts
+import { governLangChainTool, governOpenAITool, governClaudeTool } from '@connexum/govern'
+
+const tools = [governLangChainTool(agent, ordersRead)]                    // LangChain JS and LangGraph JS (ToolNode)
+const cancel = governOpenAITool(agent, cancelOrder, { writes: true })     // OpenAI Agents SDK (JS)
+const server = createSdkMcpServer({ name: 'orders', tools: [governClaudeTool(agent, ordersRead)] })   // Claude Agent SDK
+```
+
+Each keeps the framework's own tool object (name, schema, class), so the framework accepts it unchanged; only the call
+point goes through `agent.tool()`. A no throws `GovernBlocked` or `GovernPaused` from that call point.
+
+Not yet: an n8n node, the Python twin (LangGraph, CrewAI, OpenAI Agents and Claude Agent SDK in Python), and the
+six-stack conformance set. Design:
+`docs/specs/2026-10-21-govern-655-design.md`.

package/dist/adapters.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Stack adapters (task 655 slice 2, end-state D1): one line puts an existing framework tool under govern(). Each wraps
+ * the framework's own tool object, keeping its name, schema and class, so the framework accepts it unchanged; only the
+ * call point goes through agent.tool() (readiness, then the runtime gate, then the body). Structural: this package does
+ * not depend on any framework.
+ *
+ *   LangChain JS and LangGraph JS   governLangChainTool(agent, tool)   wraps invoke(input | ToolCall, config)
+ *   OpenAI Agents SDK (JS)          governOpenAITool(agent, tool)      wraps invoke(runContext, inputJson, details)
+ *   Claude Agent SDK (TS)           governClaudeTool(agent, tool)      wraps handler(args, extra)
+ *
+ * A no throws GovernBlocked or GovernPaused from the call point; frameworks surface it as the tool's error.
+ */
+import type { Governed } from './index.js';
+export interface AdapterOptions {
+    /** Whether the tool writes (readiness blocks a writing tool on a read-only source). Default: false. */
+    writes?: boolean;
+    /** The current run id, if the framework has one (kept on a park so a release can resume it). */
+    runId?: () => string | undefined;
+}
+/** LangChain JS / LangGraph JS tool (StructuredTool, DynamicStructuredTool, tool()). */
+export declare function governLangChainTool<T extends {
+    name: string;
+    invoke: (input: any, config?: any) => Promise<any>;
+}>(agent: Governed, tool: T, opts?: AdapterOptions): T;
+/** OpenAI Agents SDK (JS) function tool, from tool({ name, parameters, execute }). */
+export declare function governOpenAITool<T extends {
+    name: string;
+    invoke: (runContext: any, input: string, details?: any) => Promise<any>;
+}>(agent: Governed, tool: T, opts?: AdapterOptions): T;
+/** Claude Agent SDK (TS) tool, from tool(name, description, inputSchema, handler); pass the result to createSdkMcpServer. */
+export declare function governClaudeTool<T extends {
+    name: string;
+    handler: (args: any, extra: any) => Promise<any>;
+}>(agent: Governed, tool: T, opts?: AdapterOptions): T;
+//# sourceMappingURL=adapters.d.ts.map

package/dist/adapters.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapters.d.ts","sourceRoot":"","sources":["../src/adapters.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAE3C,MAAM,WAAW,cAAc;IAC7B,uGAAuG;IACvG,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,gGAAgG;IAChG,KAAK,CAAC,EAAE,MAAM,MAAM,GAAG,SAAS,CAAC;CAClC;AAaD,wFAAwF;AACxF,wBAAgB,mBAAmB,CAAC,CAAC,SAAS;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,MAAM,CAAC,EAAE,GAAG,KAAK,OAAO,CAAC,GAAG,CAAC,CAAA;CAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,GAAE,cAAmB,GAAG,CAAC,CAS1K;AAED,sFAAsF;AACtF,wBAAgB,gBAAgB,CAAC,CAAC,SAAS;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,CAAC,UAAU,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,KAAK,OAAO,CAAC,GAAG,CAAC,CAAA;CAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,GAAE,cAAmB,GAAG,CAAC,CAQ5L;AAED,6HAA6H;AAC7H,wBAAgB,gBAAgB,CAAC,CAAC,SAAS;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,KAAK,OAAO,CAAC,GAAG,CAAC,CAAA;CAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,GAAE,cAAmB,GAAG,CAAC,CAOrK"}

package/dist/adapters.js

@@ -0,0 +1,51 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.governLangChainTool = governLangChainTool;
+exports.governOpenAITool = governOpenAITool;
+exports.governClaudeTool = governClaudeTool;
+const callOpts = (o) => {
+    const runId = o.runId?.();
+    return { ...(o.writes ? { writes: true } : {}), ...(runId ? { runId } : {}) };
+};
+function withCall(target, key, replacement) {
+    return new Proxy(target, {
+        get(t, p, r) { return p === key ? replacement : Reflect.get(t, p, r); },
+    });
+}
+/** LangChain JS / LangGraph JS tool (StructuredTool, DynamicStructuredTool, tool()). */
+function governLangChainTool(agent, tool, opts = {}) {
+    const original = tool.invoke.bind(tool);
+    const invoke = async (input, config) => {
+        // LangGraph's ToolNode passes a ToolCall { name, args, id, type: 'tool_call' }; a direct call passes the args.
+        const args = input && typeof input === 'object' && input.type === 'tool_call' && input.args && typeof input.args === 'object' ? input.args : input;
+        const govInput = args && typeof args === 'object' ? args : { input: args };
+        return agent.tool(tool.name, govInput, () => original(input, config), callOpts(opts));
+    };
+    return withCall(tool, 'invoke', invoke);
+}
+/** OpenAI Agents SDK (JS) function tool, from tool({ name, parameters, execute }). */
+function governOpenAITool(agent, tool, opts = {}) {
+    const original = tool.invoke.bind(tool);
+    const invoke = async (runContext, input, details) => {
+        let govInput;
+        try {
+            const parsed = JSON.parse(input);
+            govInput = parsed && typeof parsed === 'object' ? parsed : { input: parsed };
+        }
+        catch {
+            govInput = { input };
+        }
+        return agent.tool(tool.name, govInput, () => original(runContext, input, details), callOpts(opts));
+    };
+    return withCall(tool, 'invoke', invoke);
+}
+/** Claude Agent SDK (TS) tool, from tool(name, description, inputSchema, handler); pass the result to createSdkMcpServer. */
+function governClaudeTool(agent, tool, opts = {}) {
+    const original = tool.handler;
+    const handler = async (args, extra) => {
+        const govInput = args && typeof args === 'object' ? args : { input: args };
+        return agent.tool(tool.name, govInput, () => original(args, extra), callOpts(opts));
+    };
+    return { ...tool, handler };
+}
+//# sourceMappingURL=adapters.js.map

package/dist/adapters.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapters.js","sourceRoot":"","sources":["../src/adapters.ts"],"names":[],"mappings":";;AAiCA,kDASC;AAGD,4CAQC;AAGD,4CAOC;AA1CD,MAAM,QAAQ,GAAG,CAAC,CAAiB,EAAE,EAAE;IACrC,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;IAC1B,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AAChF,CAAC,CAAC;AAEF,SAAS,QAAQ,CAAmB,MAAS,EAAE,GAAW,EAAE,WAAoB;IAC9E,OAAO,IAAI,KAAK,CAAC,MAAM,EAAE;QACvB,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,IAAI,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;KACxE,CAAC,CAAC;AACL,CAAC;AAED,wFAAwF;AACxF,SAAgB,mBAAmB,CAAiF,KAAe,EAAE,IAAO,EAAE,OAAuB,EAAE;IACrK,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,KAAK,EAAE,KAAU,EAAE,MAAY,EAAE,EAAE;QAChD,+GAA+G;QAC/G,MAAM,IAAI,GAAG,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,IAAI,KAAK,CAAC,IAAI,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;QACnJ,MAAM,QAAQ,GAAG,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAE,IAAgC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QACxG,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IACxF,CAAC,CAAC;IACF,OAAO,QAAQ,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;AAC1C,CAAC;AAED,sFAAsF;AACtF,SAAgB,gBAAgB,CAAsG,KAAe,EAAE,IAAO,EAAE,OAAuB,EAAE;IACvL,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,KAAK,EAAE,UAAe,EAAE,KAAa,EAAE,OAAa,EAAE,EAAE;QACrE,IAAI,QAAiC,CAAC;QACtC,IAAI,CAAC;YAAC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAAC,QAAQ,GAAG,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,QAAQ,GAAG,EAAE,KAAK,EAAE,CAAC;QAAC,CAAC;QACvJ,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,UAAU,EAAE,KAAK,EAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IACrG,CAAC,CAAC;IACF,OAAO,QAAQ,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;AAC1C,CAAC;AAED,6HAA6H;AAC7H,SAAgB,gBAAgB,CAA+E,KAAe,EAAE,IAAO,EAAE,OAAuB,EAAE;IAChK,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC;IAC9B,MAAM,OAAO,GAAG,KAAK,EAAE,IAAS,EAAE,KAAU,EAAE,EAAE;QAC9C,MAAM,QAAQ,GAAG,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAE,IAAgC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QACxG,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IACtF,CAAC,CAAC;IACF,OAAO,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,CAAC;AAC9B,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,114 @@
+/**
+ * @connexum/govern (task 655, end-state D1): one entry that puts any agent under all three My-CC layers.
+ *
+ *   readiness  before a tool reads a source: the source's access for this agent's passport (the organization's scans on
+ *              My-CC); none blocks, read_only blocks a writing tool, an unscanned or unknown source blocks.
+ *   runtime    during: the customer's LocalGate in enforcing mode decides locally (park, release, fail closed);
+ *              otherwise the governance server's check-action decides (advisory).
+ *   correctness after: the agent's claims are checked by the consumer's VerificationEngine against a source snapshot.
+ *
+ * A layer that says no throws GovernBlocked (or GovernPaused); nothing runs after a no. Design:
+ * docs/specs/2026-10-21-govern-655-design.md.
+ */
+import { type ResponseCheckMode } from '@connexum/typescript-sdk';
+export type GovernLayer = 'readiness' | 'runtime' | 'response';
+export declare class GovernBlocked extends Error {
+    readonly layer: GovernLayer;
+    readonly tool: string;
+    readonly reason: string;
+    constructor(layer: GovernLayer, tool: string, reason: string);
+}
+export declare class GovernPaused extends Error {
+    readonly tool: string;
+    readonly reason: string;
+    readonly parkId?: string | undefined;
+    readonly approvalId?: string | undefined;
+    constructor(tool: string, reason: string, parkId?: string | undefined, approvalId?: string | undefined);
+}
+/** The LocalGate surface govern uses (LocalGate in @connexum/typescript-sdk 0.1.0-beta.5 or later). */
+export interface GovernLocalGate {
+    effective(): {
+        mode: 'advisory' | 'enforcing';
+    };
+    decide(action: {
+        toolName: string;
+        input?: Record<string, unknown>;
+        runId?: string;
+    }): {
+        decision: 'ALLOW' | 'DENY' | 'QUEUE' | 'PAUSE';
+        reason: string;
+        detail: string;
+        parkId?: string;
+        approvalId?: string;
+    };
+}
+/** The VerificationEngine surface govern uses (@connexum/verification). */
+export interface GovernVerifier {
+    verify(req: {
+        tenantId: string;
+        consumer: unknown;
+        claims: unknown[];
+        snapshot?: unknown;
+        source?: unknown;
+        options?: Record<string, unknown>;
+    }): Promise<unknown>;
+}
+export interface GovernSource {
+    sourceId: string;
+    /** Tool name prefixes that read this source (e.g. 'orders.'). */
+    tools: string[];
+}
+export interface GovernOptions {
+    agentId: string;
+    agentName?: string;
+    /** The agent's passport id: readiness scans name the passports a source is exposed to. */
+    passportId: string;
+    governanceServerUrl: string;
+    /** The agent's own service token (or an operator token of its organization). */
+    token: string;
+    localGate?: GovernLocalGate;
+    sources?: GovernSource[];
+    /** options: engine options sent on every verify (for example the tenant's leakageDenylist of client names). */
+    verification?: {
+        engine: GovernVerifier;
+        tenantId: string;
+        consumer: unknown;
+        options?: Record<string, unknown>;
+    };
+    /** Model response check (466). Default: 'block' when the local gate is in enforcing mode, otherwise 'off'. */
+    responseCheck?: ResponseCheckMode;
+    /** How long a readiness answer is reused. Default 60 s. */
+    accessTtlMs?: number;
+    /** Server check-action behaviour when the server is unreachable (advisory runtime path). Default 'fail-closed'. */
+    onServerUnreachable?: 'fail-open' | 'fail-closed';
+    timeoutMs?: number;
+    fetch?: typeof fetch;
+    now?: () => number;
+}
+export interface GovernBlockRecord {
+    at: string;
+    layer: GovernLayer;
+    tool: string;
+    reason: string;
+}
+export interface Governed {
+    /** Readiness, then runtime, then the tool body. Throws GovernBlocked or GovernPaused instead of calling it. */
+    tool<T>(name: string, input: Record<string, unknown>, fn: (input: Record<string, unknown>) => Promise<T> | T, opts?: {
+        writes?: boolean;
+        runId?: string;
+    }): Promise<T>;
+    /** Check a model response before it is used (466). Throws GovernBlocked in block mode; returns a redacted copy in redact mode. */
+    release<T>(response: T): T;
+    /** Correctness after: verify the agent's claims with the configured engine. */
+    verify(claims: unknown[], from: {
+        snapshot?: unknown;
+        source?: unknown;
+        options?: Record<string, unknown>;
+    }): Promise<unknown>;
+    /** Recent blocks, newest first (for the caller's own display). */
+    blocks(): GovernBlockRecord[];
+}
+export declare function govern(opts: GovernOptions): Governed;
+export { governLangChainTool, governOpenAITool, governClaudeTool } from './adapters.js';
+export type { AdapterOptions } from './adapters.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAA4C,KAAK,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAE5G,MAAM,MAAM,WAAW,GAAG,WAAW,GAAG,SAAS,GAAG,UAAU,CAAC;AAE/D,qBAAa,aAAc,SAAQ,KAAK;IAC1B,QAAQ,CAAC,KAAK,EAAE,WAAW;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM;IAAE,QAAQ,CAAC,MAAM,EAAE,MAAM;gBAAlE,KAAK,EAAE,WAAW,EAAW,IAAI,EAAE,MAAM,EAAW,MAAM,EAAE,MAAM;CAIxF;AAED,qBAAa,YAAa,SAAQ,KAAK;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM;IAAE,QAAQ,CAAC,MAAM,EAAE,MAAM;IAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM;IAAE,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM;gBAA7F,IAAI,EAAE,MAAM,EAAW,MAAM,EAAE,MAAM,EAAW,MAAM,CAAC,EAAE,MAAM,YAAA,EAAW,UAAU,CAAC,EAAE,MAAM,YAAA;CAInH;AAED,uGAAuG;AACvG,MAAM,WAAW,eAAe;IAC9B,SAAS,IAAI;QAAE,IAAI,EAAE,UAAU,GAAG,WAAW,CAAA;KAAE,CAAC;IAChD,MAAM,CAAC,MAAM,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG;QAAE,QAAQ,EAAE,OAAO,GAAG,MAAM,GAAG,OAAO,GAAG,OAAO,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CACjN;AAED,2EAA2E;AAC3E,MAAM,WAAW,cAAc;IAC7B,MAAM,CAAC,GAAG,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,OAAO,EAAE,CAAC;QAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,OAAO,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACpK;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,iEAAiE;IACjE,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,0FAA0F;IAC1F,UAAU,EAAE,MAAM,CAAC;IACnB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,gFAAgF;IAChF,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,eAAe,CAAC;IAC5B,OAAO,CAAC,EAAE,YAAY,EAAE,CAAC;IACzB,+GAA+G;IAC/G,YAAY,CAAC,EAAE;QAAE,MAAM,EAAE,cAAc,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC;IAClH,8GAA8G;IAC9G,aAAa,CAAC,EAAE,iBAAiB,CAAC;IAClC,2DAA2D;IAC3D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,mHAAmH;IACnH,mBAAmB,CAAC,EAAE,WAAW,GAAG,aAAa,CAAC;IAClD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,iBAAiB;IAAG,EAAE,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,WAAW,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE;AAInG,MAAM,WAAW,QAAQ;IACvB,+GAA+G;IAC/G,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACvK,kIAAkI;IAClI,OAAO,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,GAAG,CAAC,CAAC;IAC3B,+EAA+E;IAC/E,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE;QAAE,QAAQ,CAAC,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,OAAO,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/H,kEAAkE;IAClE,MAAM,IAAI,iBAAiB,EAAE,CAAC;CAC/B;AAED,wBAAgB,MAAM,CAAC,IAAI,EAAE,aAAa,GAAG,QAAQ,CA0FpD;AAED,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACxF,YAAY,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC"}

package/dist/index.js

@@ -0,0 +1,150 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.governClaudeTool = exports.governOpenAITool = exports.governLangChainTool = exports.GovernPaused = exports.GovernBlocked = void 0;
+exports.govern = govern;
+/**
+ * @connexum/govern (task 655, end-state D1): one entry that puts any agent under all three My-CC layers.
+ *
+ *   readiness  before a tool reads a source: the source's access for this agent's passport (the organization's scans on
+ *              My-CC); none blocks, read_only blocks a writing tool, an unscanned or unknown source blocks.
+ *   runtime    during: the customer's LocalGate in enforcing mode decides locally (park, release, fail closed);
+ *              otherwise the governance server's check-action decides (advisory).
+ *   correctness after: the agent's claims are checked by the consumer's VerificationEngine against a source snapshot.
+ *
+ * A layer that says no throws GovernBlocked (or GovernPaused); nothing runs after a no. Design:
+ * docs/specs/2026-10-21-govern-655-design.md.
+ */
+const typescript_sdk_1 = require("@connexum/typescript-sdk");
+class GovernBlocked extends Error {
+    layer;
+    tool;
+    reason;
+    constructor(layer, tool, reason) {
+        super(`[${layer}] ${tool}: ${reason}`);
+        this.layer = layer;
+        this.tool = tool;
+        this.reason = reason;
+        this.name = 'GovernBlocked';
+    }
+}
+exports.GovernBlocked = GovernBlocked;
+class GovernPaused extends Error {
+    tool;
+    reason;
+    parkId;
+    approvalId;
+    constructor(tool, reason, parkId, approvalId) {
+        super(`[runtime] ${tool} paused: ${reason}`);
+        this.tool = tool;
+        this.reason = reason;
+        this.parkId = parkId;
+        this.approvalId = approvalId;
+        this.name = 'GovernPaused';
+    }
+}
+exports.GovernPaused = GovernPaused;
+function govern(opts) {
+    const fetchFn = opts.fetch ?? fetch;
+    const now = opts.now ?? Date.now;
+    const ttl = opts.accessTtlMs ?? 60_000;
+    const base = opts.governanceServerUrl.replace(/\/$/, '');
+    const access = new Map();
+    const blocks = [];
+    const server = new typescript_sdk_1.GovernanceHttpClient({
+        governanceServerUrl: base, licenseKey: opts.token,
+        onServerUnreachable: opts.onServerUnreachable ?? 'fail-closed',
+        ...(opts.timeoutMs !== undefined ? { timeoutMs: opts.timeoutMs } : {}),
+        defaultAgent: { name: opts.agentName ?? opts.agentId, role: 'governed-agent' },
+    });
+    const block = (layer, tool, reason) => {
+        blocks.push({ at: new Date(now()).toISOString(), layer, tool, reason });
+        if (blocks.length > 500)
+            blocks.shift();
+        throw new GovernBlocked(layer, tool, reason);
+    };
+    async function accessFor(sourceId) {
+        const hit = access.get(sourceId);
+        if (hit && now() - hit.at < ttl)
+            return hit;
+        try {
+            const r = await fetchFn(`${base}/api/v1/readiness/access?sourceId=${encodeURIComponent(sourceId)}&passportId=${encodeURIComponent(opts.passportId)}`, {
+                headers: { authorization: `Bearer ${opts.token}` }, signal: AbortSignal.timeout(opts.timeoutMs ?? 5000),
+            });
+            const b = (await r.json().catch(() => ({})));
+            if (r.ok && (b.access === 'full' || b.access === 'read_only' || b.access === 'none')) {
+                const answer = { access: b.access, reason: b.reason ?? 'enforcement', at: now() };
+                access.set(sourceId, answer);
+                return answer;
+            }
+            return hit ?? { access: 'none', reason: `readiness answer unavailable (http ${r.status})` };
+        }
+        catch (e) {
+            // Fail closed: an unreachable My-CC with no earlier answer gives no access; an earlier answer is reused.
+            return hit ?? { access: 'none', reason: `readiness answer unavailable: ${e.message.slice(0, 80)}` };
+        }
+    }
+    const responseMode = () => {
+        if (opts.responseCheck)
+            return opts.responseCheck;
+        try {
+            return opts.localGate?.effective().mode === 'enforcing' ? 'block' : 'off';
+        }
+        catch {
+            return 'block';
+        }
+    };
+    return {
+        async tool(name, input, fn, o = {}) {
+            // 1. Readiness: the source this tool reads, if any.
+            const src = (opts.sources ?? []).find((s) => s.tools.some((p) => name.startsWith(p)));
+            if (src) {
+                const a = await accessFor(src.sourceId);
+                if (a.access === 'none')
+                    block('readiness', name, `source ${src.sourceId} gives this agent no access (${a.reason})`);
+                if (a.access === 'read_only' && o.writes)
+                    block('readiness', name, `source ${src.sourceId} is read-only for this agent (${a.reason}); ${name} writes`);
+            }
+            // 2. Runtime: the local gate in enforcing mode, otherwise the governance server.
+            const local = opts.localGate;
+            if (local && local.effective().mode === 'enforcing') {
+                const d = local.decide({ toolName: name, input, ...(o.runId ? { runId: o.runId } : {}) });
+                if (d.decision === 'PAUSE' || d.decision === 'QUEUE') {
+                    blocks.push({ at: new Date(now()).toISOString(), layer: 'runtime', tool: name, reason: `${d.reason}: ${d.detail}` });
+                    throw new GovernPaused(name, `${d.reason}: ${d.detail}`, d.parkId, d.approvalId);
+                }
+                if (d.decision === 'DENY')
+                    block('runtime', name, `${d.reason}: ${d.detail}`);
+            }
+            else {
+                const r = await server.check({ toolName: name, input, metadata: { agentId: opts.agentId, passportId: opts.passportId, source: '@connexum/govern', ...(o.runId ? { runId: o.runId } : {}) } });
+                if (r.decision === 'REQUIRE_APPROVAL') {
+                    blocks.push({ at: new Date(now()).toISOString(), layer: 'runtime', tool: name, reason: r.reason ?? 'approval required' });
+                    throw new GovernPaused(name, r.reason ?? 'approval required', undefined, r.approvalId);
+                }
+                if (r.decision !== 'ALLOW')
+                    block('runtime', name, r.reason ?? 'denied by governance');
+            }
+            // 3. The tool body.
+            return fn(input);
+        },
+        release(response) {
+            const r = (0, typescript_sdk_1.checkModelResponse)(response, responseMode());
+            if (r.decision === 'BLOCK')
+                block('response', 'model', `local output guards matched ${r.guards.join(', ')}`);
+            return r.response;
+        },
+        async verify(claims, from) {
+            if (!opts.verification)
+                throw new Error('govern: no verification engine configured');
+            const { engine, tenantId, consumer } = opts.verification;
+            const options = { ...(opts.verification.options ?? {}), ...(from.options ?? {}) };
+            return engine.verify({ tenantId, consumer, claims, options, ...(from.snapshot !== undefined ? { snapshot: from.snapshot } : {}), ...(from.source !== undefined ? { source: from.source } : {}) });
+        },
+        blocks() { return blocks.slice().reverse(); },
+    };
+}
+var adapters_js_1 = require("./adapters.js");
+Object.defineProperty(exports, "governLangChainTool", { enumerable: true, get: function () { return adapters_js_1.governLangChainTool; } });
+Object.defineProperty(exports, "governOpenAITool", { enumerable: true, get: function () { return adapters_js_1.governOpenAITool; } });
+Object.defineProperty(exports, "governClaudeTool", { enumerable: true, get: function () { return adapters_js_1.governClaudeTool; } });
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AAqFA,wBA0FC;AA/KD;;;;;;;;;;;GAWG;AACH,6DAA4G;AAI5G,MAAa,aAAc,SAAQ,KAAK;IACjB;IAA6B;IAAuB;IAAzE,YAAqB,KAAkB,EAAW,IAAY,EAAW,MAAc;QACrF,KAAK,CAAC,IAAI,KAAK,KAAK,IAAI,KAAK,MAAM,EAAE,CAAC,CAAC;QADpB,UAAK,GAAL,KAAK,CAAa;QAAW,SAAI,GAAJ,IAAI,CAAQ;QAAW,WAAM,GAAN,MAAM,CAAQ;QAErF,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;IAC9B,CAAC;CACF;AALD,sCAKC;AAED,MAAa,YAAa,SAAQ,KAAK;IAChB;IAAuB;IAAyB;IAA0B;IAA/F,YAAqB,IAAY,EAAW,MAAc,EAAW,MAAe,EAAW,UAAmB;QAChH,KAAK,CAAC,aAAa,IAAI,YAAY,MAAM,EAAE,CAAC,CAAC;QAD1B,SAAI,GAAJ,IAAI,CAAQ;QAAW,WAAM,GAAN,MAAM,CAAQ;QAAW,WAAM,GAAN,MAAM,CAAS;QAAW,eAAU,GAAV,UAAU,CAAS;QAEhH,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;IAC7B,CAAC;CACF;AALD,oCAKC;AAyDD,SAAgB,MAAM,CAAC,IAAmB;IACxC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC;IACpC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IACjC,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,IAAI,MAAM,CAAC;IACvC,MAAM,IAAI,GAAG,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACzD,MAAM,MAAM,GAAG,IAAI,GAAG,EAA0D,CAAC;IACjF,MAAM,MAAM,GAAwB,EAAE,CAAC;IACvC,MAAM,MAAM,GAAG,IAAI,qCAAoB,CAAC;QACtC,mBAAmB,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,KAAK;QACjD,mBAAmB,EAAE,IAAI,CAAC,mBAAmB,IAAI,aAAa;QAC9D,GAAG,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtE,YAAY,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE;KAC/E,CAAC,CAAC;IAEH,MAAM,KAAK,GAAG,CAAC,KAAkB,EAAE,IAAY,EAAE,MAAc,EAAS,EAAE;QACxE,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QACxE,IAAI,MAAM,CAAC,MAAM,GAAG,GAAG;YAAE,MAAM,CAAC,KAAK,EAAE,CAAC;QACxC,MAAM,IAAI,aAAa,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IAC/C,CAAC,CAAC;IAEF,KAAK,UAAU,SAAS,CAAC,QAAgB;QACvC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACjC,IAAI,GAAG,IAAI,GAAG,EAAE,GAAG,GAAG,CAAC,EAAE,GAAG,GAAG;YAAE,OAAO,GAAG,CAAC;QAC5C,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,IAAI,qCAAqC,kBAAkB,CAAC,QAAQ,CAAC,eAAe,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE;gBACpJ,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,IAAI,CAAC,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC;aACxG,CAAC,CAAC;YACH,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAyC,CAAC;YACrF,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,WAAW,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,EAAE,CAAC;gBACrF,MAAM,MAAM,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,aAAa,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC;gBAClF,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;gBAC7B,OAAO,MAAM,CAAC;YAChB,CAAC;YACD,OAAO,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,sCAAsC,CAAC,CAAC,MAAM,GAAG,EAAE,CAAC;QAC9F,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,yGAAyG;YACzG,OAAO,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,iCAAkC,CAAW,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;QACjH,CAAC;IACH,CAAC;IAED,MAAM,YAAY,GAAG,GAAsB,EAAE;QAC3C,IAAI,IAAI,CAAC,aAAa;YAAE,OAAO,IAAI,CAAC,aAAa,CAAC;QAClD,IAAI,CAAC;YAAC,OAAO,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,OAAO,CAAC;QAAC,CAAC;IAC9G,CAAC,CAAC;IAEF,OAAO;QACL,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,GAAG,EAAE;YAChC,oDAAoD;YACpD,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACtF,IAAI,GAAG,EAAE,CAAC;gBACR,MAAM,CAAC,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;gBACxC,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM;oBAAE,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,UAAU,GAAG,CAAC,QAAQ,gCAAgC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;gBACrH,IAAI,CAAC,CAAC,MAAM,KAAK,WAAW,IAAI,CAAC,CAAC,MAAM;oBAAE,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,UAAU,GAAG,CAAC,QAAQ,iCAAiC,CAAC,CAAC,MAAM,MAAM,IAAI,SAAS,CAAC,CAAC;YACzJ,CAAC;YACD,iFAAiF;YACjF,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC;YAC7B,IAAI,KAAK,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;gBACpD,MAAM,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;gBAC1F,IAAI,CAAC,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;oBACrD,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;oBACrH,MAAM,IAAI,YAAY,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC;gBACnF,CAAC;gBACD,IAAI,CAAC,CAAC,QAAQ,KAAK,MAAM;oBAAE,KAAK,CAAC,SAAS,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;YAChF,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,MAAM,EAAE,kBAAkB,EAAE,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC9L,IAAI,CAAC,CAAC,QAAQ,KAAK,kBAAkB,EAAE,CAAC;oBACtC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,mBAAmB,EAAE,CAAC,CAAC;oBAC1H,MAAM,IAAI,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,IAAI,mBAAmB,EAAE,SAAS,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC;gBACzF,CAAC;gBACD,IAAI,CAAC,CAAC,QAAQ,KAAK,OAAO;oBAAE,KAAK,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,IAAI,sBAAsB,CAAC,CAAC;YACzF,CAAC;YACD,oBAAoB;YACpB,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC;QACnB,CAAC;QAED,OAAO,CAAC,QAAQ;YACd,MAAM,CAAC,GAAG,IAAA,mCAAkB,EAAC,QAAQ,EAAE,YAAY,EAAE,CAAC,CAAC;YACvD,IAAI,CAAC,CAAC,QAAQ,KAAK,OAAO;gBAAE,KAAK,CAAC,UAAU,EAAE,OAAO,EAAE,+BAA+B,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC7G,OAAO,CAAC,CAAC,QAA2B,CAAC;QACvC,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI;YACvB,IAAI,CAAC,IAAI,CAAC,YAAY;gBAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;YACrF,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC,YAAY,CAAC;YACzD,MAAM,OAAO,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;YAClF,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QACpM,CAAC;QAED,MAAM,KAAK,OAAO,MAAM,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;KAC9C,CAAC;AACJ,CAAC;AAED,6CAAwF;AAA/E,kHAAA,mBAAmB,OAAA;AAAE,+GAAA,gBAAgB,OAAA;AAAE,+GAAA,gBAAgB,OAAA"}

package/package.json

@@ -1,6 +1,42 @@
 {
   "name": "@connexum/govern",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.1.0-beta.2",
+  "private": false,
+  "description": "One entry for all three My-CC layers around any agent: data readiness before a tool reads a source, the runtime gate during (the local enforcing gate or the governance server), and correctness after (verification of the agent's claims). Thin stack adapters wrap it; the agent's own code calls govern().tool(), .release() and .verify().",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "scripts": {
+    "build": "tsc",
+    "typecheck": "tsc --noEmit",
+    "test": "npx tsx --test --test-force-exit --test-timeout=120000 tests/*.test.mts"
+  },
+  "dependencies": {
+    "@connexum/typescript-sdk": "^0.1.0-beta.9"
+  },
+  "devDependencies": {
+    "@anthropic-ai/claude-agent-sdk": "^0.3.306",
+    "@connexum/verification": "0.1.0-beta.4",
+    "@langchain/core": "^1.2.20",
+    "@openai/agents": "^0.21.0",
+    "@types/node": "^20.0.0",
+    "tsx": "^4.19.0",
+    "typescript": "^5.4.0",
+    "zod": "^4.6.7"
+  },
+  "engines": {
+    "node": ">=20.0.0"
+  },
+  "license": "SEE LICENSE IN ../../LICENSE.md",
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/Glasgowlad1/AI-Agents-GS.git",
+    "directory": "packages/govern"
+  }
+}