@neuroverseos/governance 0.1.0 → 0.1.2

package/dist/index.js

@@ -1,1170 +1,329 @@
-"use strict";
-/**
- * NeuroVerseOS Governance Plugin for OpenClaw
- *
- * A governance layer that intercepts tool calls and enforces
- * ALLOW / PAUSE / BLOCK verdicts against structured world rules.
- *
- * Performance: Deterministic, local, no model calls. Sub-millisecond
- * per evaluation. Condition engine against world.json rules.
- *
- * Logging: Quiet by default. Only BLOCK and PAUSE print to terminal.
- * Set "verbose": true to see all verdicts including ALLOW.
- *
- * Audit: Every verdict logged to .neuroverseos/audit.jsonl.
- *
- * Install:
- *   openclaw plugins install neuroverseos-governance
- *
- * Commands:
- *   /world              — Quick status dashboard
- *   /world summary      — One-line protection status
- *   /world status       — Full governance metrics (drift, audit, friction)
- *   /world laws         — Display the full constitution
- *   /world bootstrap    — Generate world.json from your .md files
- *   /world bind         — Bind agent identity to governance role
- *   /world unbind       — Remove agent role binding
- *   /world bindings     — Show all agent-to-role bindings
- *   /world propose      — Agent recommends governance amendments
- *   /world approve <id> — Human approves a proposed amendment
- *   /world export       — Export for use in other tools
- *   /world help         — Command reference
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.default = register;
-const fs_1 = require("fs");
-const readline_1 = require("readline");
-const path_1 = require("path");
-const world_bootstrap_1 = require("./world-bootstrap");
-const governance_engine_1 = require("./governance-engine");
-const drift_monitor_1 = require("./drift-monitor");
-const audit_logger_1 = require("./audit-logger");
-/**
- * Prompt the developer in the terminal for a pause decision.
- * Blocks until they respond. Returns their choice.
- *
- * Display format — full agent context:
- *   [governance] PAUSE
- *     agent:    coder-agent-01 (role: executor)
- *     action:   file_write → /etc/passwd
- *     guard:    guard-sensitive-paths
- *               "Blocks writes to system directories"
- *     evidence: path matches /etc/*
- *     Allow? [y]es once / [a]lways / [n]o: _
- */
-function promptForDecision(ctx) {
-    return new Promise((resolvePrompt) => {
-        const rl = (0, readline_1.createInterface)({
-            input: process.stdin,
-            output: process.stderr,
-        });
-        const isGovernance = ctx.severity === 'governance';
-        const isCritical = ctx.severity === 'critical';
-        // ── Governance-level pauses get visually distinct treatment ──
-        if (isGovernance) {
-            process.stderr.write(`\n[governance] 🔒 GOVERNANCE PAUSE\n`);
-            process.stderr.write(`             ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━\n`);
-        }
-        else if (isCritical) {
-            process.stderr.write(`\n[governance] ⚠️  PAUSE [CRITICAL]\n`);
-        }
-        else {
-            process.stderr.write(`\n[governance] PAUSE\n`);
-        }
-        if (ctx.agentId) {
-            const roleSuffix = ctx.role ? ` (role: ${ctx.role})` : ' (unbound)';
-            process.stderr.write(`             agent:    ${ctx.agentId}${roleSuffix}\n`);
-        }
-        const actionTarget = ctx.scope ? ` → ${ctx.scope}` : '';
-        process.stderr.write(`             action:   ${ctx.tool}${actionTarget}\n`);
-        process.stderr.write(`             guard:    ${ctx.guardLabel}\n`);
-        if (ctx.guardDescription) {
-            process.stderr.write(`                       "${ctx.guardDescription}"\n`);
-        }
-        if (ctx.evidence) {
-            process.stderr.write(`             evidence: ${ctx.evidence}\n`);
-        }
-        // Governance-level pauses get explicit denial guidance
-        if (isGovernance) {
-            process.stderr.write(`             ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━\n`);
-            process.stderr.write(`             🚫 DENY this if you did not request this change.\n`);
-        }
-        process.stderr.write(`             Allow? [y]es once / [a]lways / [n]o: `);
-        rl.on('line', (answer) => {
-            rl.close();
-            const a = answer.trim().toLowerCase();
-            if (a === 'a' || a === 'always') {
-                resolvePrompt('allow-always');
-            }
-            else if (a === 'n' || a === 'no') {
-                resolvePrompt('deny');
-            }
-            else {
-                resolvePrompt('allow-once');
-            }
-        });
-        rl.on('close', () => {
-            resolvePrompt('deny');
-        });
-    });
+import {
+  generateImpactReport,
+  generateImpactReportFromFile,
+  renderImpactReport
+} from "./chunk-ITJ3LCPG.js";
+import {
+  CompositeAuditLogger,
+  ConsoleAuditLogger,
+  FileAuditLogger,
+  createGovernanceEngine,
+  readAuditLog,
+  summarizeAuditEvents,
+  verdictToAuditEvent
+} from "./chunk-FYPYZFV5.js";
+import {
+  deriveWorld,
+  extractWorldMarkdown,
+  normalizeWorldMarkdown
+} from "./chunk-D7BGWV2J.js";
+import {
+  CONFIGURE_AI_EXIT_CODES,
+  DERIVE_EXIT_CODES
+} from "./chunk-T4X42QXC.js";
+import {
+  explainWorld,
+  renderExplainText
+} from "./chunk-BUWWN2NX.js";
+import {
+  improveWorld,
+  renderImproveText
+} from "./chunk-EIUHJXBB.js";
+import {
+  renderSimulateText,
+  simulateWorld
+} from "./chunk-FYS2CBUW.js";
+import {
+  BOOTSTRAP_EXIT_CODES
+} from "./chunk-4NGDRRQH.js";
+import {
+  emitWorldDefinition,
+  parseWorldMarkdown
+} from "./chunk-XPDMYECO.js";
+import {
+  VALIDATE_EXIT_CODES
+} from "./chunk-I3RRAYK2.js";
+import {
+  GUARD_EXIT_CODES
+} from "./chunk-MWDQ4MJB.js";
+import {
+  evaluateGuard,
+  eventToAllowlistKey
+} from "./chunk-B4NF3OLW.js";
+import {
+  loadWorld,
+  loadWorldFromDirectory
+} from "./chunk-M3TZFGHO.js";
+import {
+  validateWorld
+} from "./chunk-O5OMJMIE.js";
+
+// src/engine/verdict-formatter.ts
+var ANSI = {
+  red: "\x1B[31m",
+  green: "\x1B[32m",
+  yellow: "\x1B[33m",
+  bold: "\x1B[1m",
+  dim: "\x1B[2m",
+  reset: "\x1B[0m"
+};
+function c(text, ...codes) {
+  return codes.join("") + text + ANSI.reset;
 }
-// ────────────────────────────────────────────────────────────────────────
-// Session Allowlist — Keyed by guard ID, not tool name (spec §6)
-// ────────────────────────────────────────────────────────────────────────
-class SessionAllowlist {
-    constructor() {
-        this.guardIds = new Set();
-    }
-    isAllowed(guardId) {
-        return this.guardIds.has(guardId);
-    }
-    add(guardId) {
-        this.guardIds.add(guardId);
-    }
-    getOverrides() {
-        return Array.from(this.guardIds);
+function formatVerdict(verdict, options = {}) {
+  const {
+    showRuleId = true,
+    showEvidence = false,
+    showWarning = true,
+    color = false,
+    compact = false
+  } = options;
+  if (compact) {
+    return formatCompact(verdict, { showRuleId, showWarning, color });
+  }
+  return formatFull(verdict, { showRuleId, showEvidence, showWarning, color });
+}
+function formatCompact(verdict, opts) {
+  const status = formatStatus(verdict.status, opts.color);
+  const parts = [status];
+  if (opts.showRuleId && verdict.ruleId) {
+    parts.push(verdict.ruleId);
+  }
+  if (verdict.reason) {
+    parts.push(verdict.reason);
+  }
+  if (opts.showWarning && verdict.warning) {
+    parts.push(`warning: ${verdict.warning}`);
+  }
+  return parts.join(" \u2014 ");
+}
+function formatFull(verdict, opts) {
+  const lines = [];
+  lines.push(formatStatus(verdict.status, opts.color));
+  if (opts.showRuleId && verdict.ruleId) {
+    lines.push(`  Rule: ${verdict.ruleId}`);
+  }
+  if (verdict.reason) {
+    lines.push(`  Reason: ${verdict.reason}`);
+  }
+  if (opts.showWarning && verdict.warning) {
+    const label = opts.color ? c("Warning:", ANSI.yellow) : "Warning:";
+    lines.push(`  ${label} ${verdict.warning}`);
+  }
+  if (opts.showEvidence) {
+    const ev = verdict.evidence;
+    lines.push(`  World: ${ev.worldName} v${ev.worldVersion}`);
+    lines.push(`  Invariants: ${ev.invariantsSatisfied}/${ev.invariantsTotal} covered`);
+    if (ev.guardsMatched.length > 0) {
+      lines.push(`  Guards matched: ${ev.guardsMatched.join(", ")}`);
     }
-    clear() {
-        this.guardIds.clear();
+    if (ev.rulesMatched.length > 0) {
+      lines.push(`  Rules matched: ${ev.rulesMatched.join(", ")}`);
     }
+    lines.push(`  Enforcement: ${ev.enforcementLevel}`);
+  }
+  return lines.join("\n");
 }
-// ────────────────────────────────────────────────────────────────────────
-// Event Construction — Normalize OpenClaw hook event to internal shape
-// ────────────────────────────────────────────────────────────────────────
-/**
- * Derive scope from tool call params.
- */
-function deriveScope(tool, params) {
-    if (params.file_path && typeof params.file_path === 'string')
-        return params.file_path;
-    if (params.command && typeof params.command === 'string')
-        return params.command;
-    if (params.url && typeof params.url === 'string')
-        return params.url;
-    if (params.path && typeof params.path === 'string')
-        return params.path;
-    return undefined;
+function formatStatus(status, color) {
+  switch (status) {
+    case "ALLOW":
+      return color ? c("ALLOWED", ANSI.green, ANSI.bold) : "ALLOWED";
+    case "BLOCK":
+      return color ? c("BLOCKED", ANSI.red, ANSI.bold) : "BLOCKED";
+    case "PAUSE":
+      return color ? c("PAUSED", ANSI.yellow, ANSI.bold) : "PAUSED";
+    default:
+      return status;
+  }
 }
-/**
- * Build a normalized ToolCallEvent from OpenClaw's before_tool_call event + context.
- *
- * OpenClaw provides:
- *   event: { toolName: string; params: Record<string, unknown> }
- *   ctx:   { agentId?: string; sessionKey?: string; toolName: string }
- */
-function buildEvent(toolName, params, agentId, allowlist, roleMap, environment) {
-    return {
-        type: 'tool_call',
-        tool: toolName,
-        intent: `${toolName}: ${JSON.stringify(params).slice(0, 100)}`,
-        args: params,
-        scope: deriveScope(toolName, params),
-        role: agentId ? roleMap.get(agentId) : undefined,
-        environment,
-        sessionOverrides: allowlist.getOverrides(),
-    };
+function formatVerdictOneLine(verdict) {
+  const parts = [verdict.status];
+  if (verdict.ruleId) {
+    parts[0] += `: ${verdict.ruleId}`;
+  }
+  if (verdict.reason) {
+    parts.push(verdict.reason);
+  }
+  return parts.join(" \u2014 ");
 }
-// ────────────────────────────────────────────────────────────────────────
-// Shared: Read .md files from workspace
-// ────────────────────────────────────────────────────────────────────────
-function readMdFiles(dir) {
-    const mdFiles = {};
-    try {
-        const entries = (0, fs_1.readdirSync)(dir);
-        for (const file of entries) {
-            if (file.toLowerCase().endsWith('.md')) {
-                const fullPath = (0, path_1.join)(dir, file);
-                mdFiles[file] = (0, fs_1.readFileSync)(fullPath, 'utf-8');
-            }
-        }
-    }
-    catch {
-        // Directory unreadable — return empty
-    }
-    return mdFiles;
+
+// src/engine/condition-engine.ts
+function getFieldValue(event, field) {
+  if (field.startsWith("args.")) {
+    const key = field.slice(5);
+    return event.args?.[key];
+  }
+  return event[field];
 }
-// ────────────────────────────────────────────────────────────────────────
-// Plugin Registration
-// ────────────────────────────────────────────────────────────────────────
-/**
- * Resolve the persistent storage root.
- * Priority: explicit env var → /data if present (Docker) → cwd fallback.
- *
- * In OpenClaw Docker containers /data is always the mounted persistent volume.
- * We detect its *presence* (existsSync), not its permissions (accessSync),
- * because the node process may not yet have write access at register time
- * on certain hosts (e.g. Hostinger), causing a false fallback to process.cwd().
- */
-function getStorageRoot() {
-    // 1. Explicit override — always wins
-    if (process.env.OPENCLAW_DATA_DIR) {
-        return process.env.OPENCLAW_DATA_DIR;
-    }
-    // 2. /data exists — standard OpenClaw container volume
-    if ((0, fs_1.existsSync)('/data')) {
-        return '/data';
-    }
-    // 3. Local dev fallback
-    return process.cwd();
+function toString(value) {
+  if (value === null || value === void 0) return "";
+  if (typeof value === "string") return value;
+  if (typeof value === "number" || typeof value === "boolean") return String(value);
+  return JSON.stringify(value);
 }
-function register(api) {
-    // Config: OpenClaw provides plugin-specific config via api.pluginConfig
-    const config = (api.pluginConfig ?? {});
-    const verbose = config.verbose ?? false;
-    const autoAllow = config.autoAllow ?? false;
-    const allowlist = new SessionAllowlist();
-    const roleMap = new Map();
-    const environment = config.environment ?? process.env.NODE_ENV;
-    // Track .md files modified by agents during this session (for bootstrap warning)
-    const agentModifiedMdFiles = new Map();
-    // Storage root: where .neuroverse/ persistent data lives
-    const storageRoot = getStorageRoot();
-    // Workspace content: where .md files live (for bootstrap & drift detection)
-    // OpenClaw workspace is at <dataRoot>/.openclaw/workspace — NOT the container CWD.
-    // api.resolvePath('.') returns the container root (e.g. /data), which has no .md files.
-    const workspaceDir = (0, path_1.resolve)(storageRoot, '.openclaw', 'workspace');
-    const worldDir = (0, path_1.resolve)(storageRoot, '.neuroverseos');
-    const worldPath = config.worldPath
-        ? (0, path_1.resolve)(storageRoot, config.worldPath)
-        : (0, path_1.join)(worldDir, 'world.json');
-    const auditPath = (0, path_1.join)(worldDir, 'audit.jsonl');
-    const statePath = (0, path_1.join)(worldDir, 'state.json');
-    const proposalsDir = (0, path_1.join)(worldDir, 'proposals');
-    // Ensure directories
-    if (!(0, fs_1.existsSync)(worldDir))
-        (0, fs_1.mkdirSync)(worldDir, { recursive: true });
-    if (!(0, fs_1.existsSync)(proposalsDir))
-        (0, fs_1.mkdirSync)(proposalsDir, { recursive: true });
-    // ── Core Services ──────────────────────────────────────────────
-    const engine = new governance_engine_1.GovernanceEngine({
-        worldPath,
-        enforcement: config.enforcement ?? 'standard',
-        observeOnly: config.observeFirst ?? false,
-    });
-    // Set workspace dir for runtime md drift detection (spec §8)
-    engine.setWorkspaceDir(workspaceDir);
-    const audit = new audit_logger_1.AuditLogger(auditPath);
-    let monitor = null;
-    if (config.driftTracking !== false) {
-        monitor = new drift_monitor_1.DriftMonitor({ statePath, auditPath, engine });
-    }
-    // ── Tool Interception Hook (spec §3 pipeline) ─────────────────
-    // OpenClaw before_tool_call hook signature (from src/plugins/types.ts):
-    //   event: { toolName: string; params: Record<string, unknown> }
-    //   ctx:   { agentId?: string; sessionKey?: string; toolName: string }
-    //   return: { block?: boolean; blockReason?: string; params?: Record<string, unknown> } | void
-    api.on('before_tool_call', async (event, ctx) => {
-        // 1. Build normalized event (spec §1)
-        const govEvent = buildEvent(event.toolName, event.params, ctx.agentId, allowlist, roleMap, environment);
-        // 2. Run decision pipeline (spec §3)
-        const verdict = engine.evaluate(govEvent);
-        // 3. Audit log every verdict (spec §7)
-        const eventId = audit.logVerdict(event.toolName, govEvent.intent, verdict, ctx.agentId);
-        // 4. Track in drift monitor
-        monitor?.recordAction(event.toolName, verdict.status, verdict.ruleId ?? undefined);
-        // 4.5 Surface proactive alerts (spec §8)
-        if (verdict.alerts && verdict.alerts.length > 0) {
-            for (const alert of verdict.alerts) {
-                const prefix = alert.level === 'critical' ? '!!!'
-                    : alert.level === 'warning' ? '!'
-                        : 'i';
-                api.logger.warn(`[governance] [${prefix}] ${alert.message}`);
-                if (alert.details) {
-                    api.logger.warn(`             ${alert.details}`);
-                }
-                api.logger.warn(`             → ${alert.action}`);
-            }
-        }
-        // ── BLOCK ──────────────────────────────────────────────
-        if (verdict.status === 'BLOCK') {
-            api.logger.warn(`[governance] BLOCK`);
-            if (ctx.agentId) {
-                const roleSuffix = govEvent.role ? ` (role: ${govEvent.role})` : ' (unbound)';
-                api.logger.warn(`             agent:    ${ctx.agentId}${roleSuffix}`);
-            }
-            const actionTarget = govEvent.scope ? ` → ${govEvent.scope}` : '';
-            api.logger.warn(`             action:   ${event.toolName}${actionTarget}`);
-            api.logger.warn(`             rule:     ${verdict.ruleId ?? 'default'}`);
-            api.logger.warn(`             reason:   ${verdict.reason}`);
-            if (verdict.evidence) {
-                api.logger.warn(`             evidence: ${verdict.evidence}`);
-            }
-            return { block: true, blockReason: verdict.reason };
-        }
-        // ── PAUSE ──────────────────────────────────────────────
-        if (verdict.status === 'PAUSE') {
-            const guardId = verdict.ruleId ?? '';
-            // Check session allowlist first (spec §6 step 1)
-            if (guardId && allowlist.isAllowed(guardId)) {
-                if (verbose) {
-                    api.logger.debug?.(`[governance] ALLOW  ${govEvent.intent} (session allowlist: ${guardId})`);
-                }
-                audit.logDecision(eventId, 'allow-always');
-                monitor?.recordAction(event.toolName, 'ALLOW', verdict.ruleId ?? undefined);
-                return; // allow — return void
-            }
-            // Auto-allow mode for CI/headless (spec §6 step 2)
-            // NEVER auto-allow governance-level pauses — these require human decision
-            if (autoAllow && verdict.severity !== 'governance') {
-                api.logger.info(`[governance] PAUSE  ${govEvent.intent} (auto-allowed)`);
-                api.logger.info(`             ${verdict.guard ?? verdict.ruleId}`);
-                audit.logDecision(eventId, 'allow-once');
-                return; // allow — return void
-            }
-            // Interactive prompt with full context (spec §6 step 3)
-            const guardLabel = verdict.guard ?? verdict.ruleId ?? 'governance rule';
-            const decision = await promptForDecision({
-                agentId: ctx.agentId,
-                role: govEvent.role,
-                tool: event.toolName,
-                scope: govEvent.scope,
-                intent: govEvent.intent,
-                guardLabel,
-                guardDescription: verdict.reason !== guardLabel ? verdict.reason : undefined,
-                evidence: verdict.evidence,
-                severity: verdict.severity,
-            });
-            // Log the decision (spec §7 — every PAUSE paired with a decision)
-            audit.logDecision(eventId, decision);
-            if (decision === 'allow-always') {
-                if (guardId)
-                    allowlist.add(guardId);
-                process.stderr.write(`[governance] Added ${guardId} to session allowlist\n\n`);
-                monitor?.recordOverride();
-                // Track agent-approved .md modifications for bootstrap warning
-                if (verdict.severity === 'governance' && govEvent.scope?.toLowerCase().endsWith('.md')) {
-                    agentModifiedMdFiles.set(govEvent.scope, { agentId: ctx.agentId ?? 'unknown', at: Date.now() });
-                }
-                return; // allow — return void
-            }
-            if (decision === 'allow-once') {
-                monitor?.recordOverride();
-                // Track agent-approved .md modifications for bootstrap warning
-                if (verdict.severity === 'governance' && govEvent.scope?.toLowerCase().endsWith('.md')) {
-                    agentModifiedMdFiles.set(govEvent.scope, { agentId: ctx.agentId ?? 'unknown', at: Date.now() });
-                }
-                return; // allow — return void
-            }
-            // deny
-            process.stderr.write(`[governance] Denied\n\n`);
-            return { block: true, blockReason: verdict.reason };
-        }
-        // ── ALLOW ──────────────────────────────────────────────
-        if (verbose) {
-            api.logger.debug?.(`[governance] ALLOW  ${govEvent.intent}`);
-        }
-        // allow — return void
-    });
-    // ── Session Reset Hook — Drift detection on /new ────────────────
-    // OpenClaw before_reset hook (from src/plugins/types.ts):
-    //   event: { sessionFile?: string; messages?: unknown[]; reason?: string }
-    //   ctx:   { agentId?: string; sessionKey?: string }
-    //   return: void
-    //
-    // On /new or /reset, check if .md files have changed since last bootstrap.
-    // If drifted, prompt the user: "Regenerate constitution? [y/n]"
-    // If yes, re-bootstrap from current .md files before the new session starts.
-    api.on('before_reset', async () => {
-        // Only check if we have a world with hash baseline
-        const world = engine.getWorld();
-        const storedHashes = world?.metadata?.mdHashes;
-        if (!storedHashes)
-            return;
-        const drift = (0, world_bootstrap_1.checkMdDrift)(workspaceDir, storedHashes);
-        const hasDrift = drift.changed.length > 0 || drift.added.length > 0 || drift.removed.length > 0;
-        if (!hasDrift) {
-            // Clear session allowlist on reset (fresh session = fresh allowlist)
-            allowlist.clear();
-            return;
-        }
-        // Report what changed
-        const changedSummary = [];
-        if (drift.changed.length > 0)
-            changedSummary.push(`modified: ${drift.changed.join(', ')}`);
-        if (drift.added.length > 0)
-            changedSummary.push(`new: ${drift.added.join(', ')}`);
-        if (drift.removed.length > 0)
-            changedSummary.push(`removed: ${drift.removed.join(', ')}`);
-        process.stderr.write(`\n[NeuroVerseOS] Markdown files changed since last bootstrap.\n`);
-        process.stderr.write(`  ${changedSummary.join('; ')}\n`);
-        // Prompt: regenerate?
-        const answer = await new Promise((res) => {
-            const rl = (0, readline_1.createInterface)({ input: process.stdin, output: process.stderr });
-            process.stderr.write(`  Regenerate constitution? [y/n]: `);
-            rl.on('line', (line) => { rl.close(); res(line.trim().toLowerCase()); });
-            rl.on('close', () => res('n'));
-        });
-        if (answer === 'y' || answer === 'yes') {
-            const mdFiles = readMdFiles(workspaceDir);
-            if (Object.keys(mdFiles).length > 0) {
-                const newWorld = (0, world_bootstrap_1.bootstrapWorldFromMarkdown)(mdFiles);
-                engine.setWorld(newWorld);
-                engine.saveWorld();
-                process.stderr.write(`[NeuroVerseOS] Constitution regenerated. ${newWorld.invariants.length} invariants, ${newWorld.guards.length} guards, ${newWorld.rules.length} rules.\n\n`);
-            }
-            else {
-                process.stderr.write(`[NeuroVerseOS] No .md files found. Keeping current constitution.\n\n`);
-            }
-        }
-        else {
-            process.stderr.write(`[NeuroVerseOS] Keeping current constitution.\n\n`);
-        }
-        // Always clear session allowlist and alert history on reset
-        allowlist.clear();
-        engine.clearAlertHistory();
-    });
-    // ── Background Drift Service ───────────────────────────────────
-    if (monitor) {
-        api.registerService({
-            id: 'neuroverse-drift-monitor',
-            start: () => {
-                monitor.start();
-                api.logger.info('[NeuroVerseOS] Drift monitor started');
-            },
-            stop: () => {
-                monitor.stop();
-                api.logger.info('[NeuroVerseOS] Drift monitor stopped');
-            },
-        });
-    }
-    // ── Agent Tool: governance_status ──────────────────────────────
-    // Lets agents answer "am I protected?", "any issues?", "what's enforced?"
-    // by querying structured kernel state. No guessing — deterministic output.
-    api.registerTool({
-        name: 'governance_status',
-        description: 'Query the governance kernel state. Use when the user asks about protection status, pending changes, integrity, role bindings, or audit trail.',
-        parameters: {
-            type: 'object',
-            properties: {
-                query: {
-                    type: 'string',
-                    enum: ['summary', 'status', 'bindings', 'audit', 'integrity'],
-                    description: 'What aspect of governance to query',
-                },
-            },
-            required: ['query'],
-        },
-        handler: async (args) => {
-            const world = engine.getWorld();
-            const stats = engine.getStatus();
-            const auditCounts = audit.getCounts();
-            const bindings = engine.getRoleBindings();
-            const meta = engine.getMetaRecord();
-            if (!world) {
-                return { text: 'No governance world loaded. The user should run /world bootstrap to create one from their .md files.' };
-            }
-            switch (args.query) {
-                case 'summary': {
-                    const ruleCount = stats.invariantCount + stats.guardCount + stats.ruleCount;
-                    const issues = [];
-                    const storedHashes = world.metadata?.mdHashes;
-                    if (storedHashes) {
-                        const drift = (0, world_bootstrap_1.checkMdDrift)(workspaceDir, storedHashes);
-                        if (drift.changed.length > 0 || drift.added.length > 0 || drift.removed.length > 0) {
-                            issues.push('source files have drifted from the active world');
-                        }
-                    }
-                    if ((0, fs_1.existsSync)((0, path_1.join)(worldDir, 'world.pending.json'))) {
-                        issues.push('pending governance changes await approval');
-                    }
-                    if (bindings.length === 0 && stats.roleCount > 0) {
-                        issues.push('roles are defined but no agents are bound to them');
-                    }
-                    return {
-                        text: JSON.stringify({
-                            worldActive: true,
-                            worldName: world.metadata.name,
-                            enforcement: stats.enforcement,
-                            ruleCount,
-                            roleCount: stats.roleCount,
-                            bindingCount: bindings.length,
-                            verdicts: auditCounts,
-                            issues,
-                        }),
-                    };
-                }
-                case 'bindings': {
-                    const bindingList = bindings.map(b => {
-                        const role = world.roles.find(r => r.id === b.roleId);
-                        return {
-                            agentId: b.agentId,
-                            roleId: b.roleId,
-                            roleName: role?.name ?? '(unknown)',
-                            boundBy: b.boundBy,
-                        };
-                    });
-                    return {
-                        text: JSON.stringify({
-                            totalBindings: bindings.length,
-                            totalRoles: stats.roleCount,
-                            availableRoles: world.roles.map(r => ({ id: r.id, name: r.name })),
-                            bindings: bindingList,
-                        }),
-                    };
-                }
-                case 'audit': {
-                    return {
-                        text: JSON.stringify({
-                            totalVerdicts: auditCounts.total,
-                            allowed: auditCounts.allow,
-                            paused: auditCounts.pause,
-                            blocked: auditCounts.block,
-                            driftStats: monitor?.getStats() ?? null,
-                        }),
-                    };
-                }
-                case 'integrity': {
-                    let driftStatus = 'unknown';
-                    const storedHashes = world.metadata?.mdHashes;
-                    if (storedHashes) {
-                        const drift = (0, world_bootstrap_1.checkMdDrift)(workspaceDir, storedHashes);
-                        const hasDrift = drift.changed.length > 0 || drift.added.length > 0 || drift.removed.length > 0;
-                        driftStatus = hasDrift ? 'drifted' : 'in_sync';
-                    }
-                    return {
-                        text: JSON.stringify({
-                            worldHash: meta?.hash?.slice(0, 16) ?? null,
-                            version: meta?.version ?? null,
-                            activatedAt: meta?.activatedAt ?? null,
-                            sourceDrift: driftStatus,
-                            pendingChanges: (0, fs_1.existsSync)((0, path_1.join)(worldDir, 'world.pending.json')),
-                        }),
-                    };
-                }
-                default:
-                    return { text: 'Unknown query. Use: summary, status, bindings, audit, or integrity.' };
-            }
-        },
-    });
-    // ── Agent Tool: world_proposal.create ──────────────────────────
-    api.registerTool({
-        name: 'world_proposal_create',
-        description: 'Propose a governance amendment. The human must approve it with /world approve.',
-        parameters: {
-            type: 'object',
-            properties: {
-                type: { type: 'string', enum: ['add_guard', 'modify_threshold', 'add_role', 'add_invariant'] },
-                reason: { type: 'string', description: 'Why this amendment is needed' },
-                suggestion: { type: 'string', description: 'The specific change to make' },
-                evidence: { type: 'string', description: 'What behavior triggered this recommendation' },
-            },
-            required: ['type', 'reason', 'suggestion'],
-        },
-        handler: async (args) => {
-            const id = Date.now().toString(36);
-            const proposal = { ...args, id, createdAt: Date.now(), source: 'agent' };
-            const proposalPath = (0, path_1.join)(proposalsDir, `${id}.json`);
-            (0, fs_1.writeFileSync)(proposalPath, JSON.stringify(proposal, null, 2));
-            return {
-                text: `Governance amendment proposed (ID: ${id}).\nType: ${args.type}\nReason: ${args.reason}\nThe human must run /world approve ${id} to apply this change.`,
-            };
-        },
-    });
-    // ── CLI Commands (gateway CLI: `openclaw world ...`) ───────────
-    api.registerCli(({ program, logger }) => {
-        const worldCmd = program
-            .command('world')
-            .description('NeuroVerse governance commands');
-        // openclaw world bootstrap
-        worldCmd
-            .command('bootstrap')
-            .description('Generate world.json from your .md files')
-            .action(async () => {
-            logger.info('[NeuroVerseOS] Reading .md files from workspace...');
-            const mdFiles = readMdFiles(workspaceDir);
-            for (const file of Object.keys(mdFiles)) {
-                logger.info(`  Found ${file}`);
-            }
-            if (Object.keys(mdFiles).length === 0) {
-                logger.info('  No .md files found in workspace.');
-                logger.info('  Add any .md files to define your governance rules.');
-                return;
-            }
-            logger.info(`[NeuroVerseOS] Bootstrapping world from ${Object.keys(mdFiles).length} files...`);
-            const world = (0, world_bootstrap_1.bootstrapWorldFromMarkdown)(mdFiles);
-            engine.setWorld(world);
-            engine.saveWorld();
-            logger.info(`World file created: ${worldPath}`);
-            logger.info(`  Kernel: ${world.kernel.enforcementMode} mode`);
-            logger.info(`  Invariants: ${world.invariants.length}`);
-            logger.info(`  Guards: ${world.guards.length}`);
-            logger.info(`  Rules: ${world.rules.length}`);
-            logger.info(`  Roles: ${world.roles.length}`);
-        });
-        // openclaw world status
-        worldCmd
-            .command('status')
-            .description('Show governance status')
-            .action(() => {
-            if (!(0, fs_1.existsSync)(worldPath)) {
-                logger.info('[NeuroVerseOS] No world file found. Run /world bootstrap first.');
-                return;
-            }
-            const stats = engine.getStatus();
-            const auditCounts = audit.getCounts();
-            logger.info(`World: ${worldPath}`);
-            logger.info(`Enforcement: ${config.enforcement ?? 'standard'}`);
-            logger.info(`Invariants: ${stats.invariantCount}, Guards: ${stats.guardCount}, Rules: ${stats.ruleCount}, Roles: ${stats.roleCount}`);
-            logger.info(`Verdicts — ALLOW: ${auditCounts.allow}, PAUSE: ${auditCounts.pause}, BLOCK: ${auditCounts.block}`);
-        });
-        // openclaw world laws
-        worldCmd
-            .command('laws')
-            .description('Display the full constitution')
-            .action(() => {
-            if (!(0, fs_1.existsSync)(worldPath)) {
-                logger.info('[NeuroVerseOS] No world file found. Run /world bootstrap first.');
-                return;
-            }
-            const world = engine.getWorld();
-            if (!world) {
-                logger.info('[NeuroVerseOS] World file could not be loaded.');
-                return;
-            }
-            logger.info(`\n=== THE LAWS OF ${(world.metadata.name ?? 'NeuroVerseOS').toUpperCase()} ===\n`);
-            if (world.metadata.description)
-                logger.info(world.metadata.description);
-            logger.info(`Enforcement: ${world.kernel.enforcementMode} | Overrides: ${world.kernel.sessionOverridesAllowed ? 'allowed' : 'disabled'}\n`);
-            logger.info(`--- INVARIANTS (${world.invariants.length}) ---`);
-            for (const inv of world.invariants) {
-                logger.info(`  [${inv.id}] ${inv.description}`);
-                logger.info(`    When: ${inv.condition.field} ${inv.condition.operator} ${JSON.stringify(inv.condition.value)}`);
-            }
-            logger.info(`\n--- GUARDS (${world.guards.length}) ---`);
-            for (const guard of world.guards) {
-                logger.info(`  [${guard.id}] → ${guard.enforcement.toUpperCase()}${guard.description ? ': ' + guard.description : ''}`);
-                logger.info(`    When: ${guard.condition.field} ${guard.condition.operator} ${JSON.stringify(guard.condition.value)}`);
-                if (guard.appliesTo.length > 0)
-                    logger.info(`    Applies to: ${guard.appliesTo.join(', ')}`);
-            }
-            logger.info(`\n--- RULES (${world.rules.length}) ---`);
-            for (const rule of world.rules) {
-                logger.info(`  [${rule.id}] → ${rule.effect.verdict.toUpperCase()}${rule.description ? ': ' + rule.description : ''}`);
-                logger.info(`    Trigger: ${rule.trigger.field} ${rule.trigger.operator} ${JSON.stringify(rule.trigger.value)}`);
-            }
-            logger.info(`\n--- ROLES (${world.roles.length}) ---`);
-            for (const role of world.roles) {
-                logger.info(`  [${role.id}] ${role.name}`);
-                if (role.canDo.length > 0)
-                    logger.info(`    Can do: ${role.canDo.join(', ')}`);
-                if (role.cannotDo.length > 0)
-                    logger.info(`    Cannot do: ${role.cannotDo.join(', ')}`);
-                logger.info(`    Requires approval: ${role.requiresApproval ? 'yes' : 'no'}`);
-            }
-        });
-    }, { commands: ['world'] });
-    // ── Chat Command: /world ───────────────────────────────────────
-    // Registers as a slash command in the agent conversation.
-    // Bypasses the LLM — processed directly by the plugin.
-    api.registerCommand({
-        name: 'world',
-        description: 'NeuroVerse governance commands (bootstrap, status, laws, propose, approve, export)',
-        acceptsArgs: true,
-        requireAuth: true,
-        handler: async (ctx) => {
-            const cmdArgs = (ctx.args ?? '').trim();
-            const [subcommand, ...rest] = cmdArgs.split(/\s+/);
-            // ── /world (no args) — Quick status dashboard ──
-            if (!subcommand) {
-                if (!(0, fs_1.existsSync)(worldPath)) {
-                    return {
-                        text: [
-                            '**NeuroVerse Governance**',
-                            '',
-                            'No world file found. Run `/world bootstrap` to create one from your .md files.',
-                            'Type `/world help` for all commands.',
-                        ].join('\n'),
-                    };
-                }
-                const world = engine.getWorld();
-                const stats = engine.getStatus();
-                const auditCounts = audit.getCounts();
-                const bindings = engine.getRoleBindings();
-                const meta = engine.getMetaRecord();
-                const worldName = world?.metadata?.name ?? 'NeuroVerseOS';
-                // Integrity check
-                let integrityStatus = 'Verified';
-                if (!meta) {
-                    integrityStatus = 'No baseline (run /world bootstrap)';
-                }
-                // Drift check
-                let driftStatus = 'In sync';
-                const storedHashes = world?.metadata?.mdHashes;
-                if (storedHashes) {
-                    const drift = (0, world_bootstrap_1.checkMdDrift)(workspaceDir, storedHashes);
-                    const hasDrift = drift.changed.length > 0 || drift.added.length > 0 || drift.removed.length > 0;
-                    if (hasDrift) {
-                        const parts = [];
-                        if (drift.changed.length > 0)
-                            parts.push(`${drift.changed.length} modified`);
-                        if (drift.added.length > 0)
-                            parts.push(`${drift.added.length} new`);
-                        if (drift.removed.length > 0)
-                            parts.push(`${drift.removed.length} removed`);
-                        driftStatus = parts.join(', ') + ' — run /world bootstrap';
-                    }
-                }
-                else {
-                    driftStatus = 'No baseline';
-                }
-                // Pending check
-                const pendingPath = (0, path_1.join)(worldDir, 'world.pending.json');
-                const hasPending = (0, fs_1.existsSync)(pendingPath);
-                const lines = [
-                    `**${worldName}** — NeuroVerse Governance`,
-                    '',
-                    `World:          ACTIVE`,
-                    `Integrity:      ${integrityStatus}`,
-                    `Enforcement:    ${stats.enforcement}`,
-                    `Source drift:    ${driftStatus}`,
-                    `Pending updates: ${hasPending ? 'Yes — run /world approve' : 'None'}`,
-                    '',
-                    `Invariants: ${stats.invariantCount}  Guards: ${stats.guardCount}  Rules: ${stats.ruleCount}  Roles: ${stats.roleCount}`,
-                    `Role bindings:  ${bindings.length > 0 ? `${bindings.length} active` : 'None — run /world bind'}`,
-                    '',
-                    `Verdicts this session:  ${auditCounts.allow} allowed, ${auditCounts.pause} paused, ${auditCounts.block} blocked`,
-                ];
-                return { text: lines.join('\n') };
-            }
-            // ── /world help ──
-            if (subcommand === 'help') {
-                return {
-                    text: [
-                        '**NeuroVerse Governance Commands**',
-                        '',
-                        '`/world` — Quick status dashboard',
-                        '`/world summary` — One-line protection status',
-                        '`/world status` — Full metrics (drift, audit, friction)',
-                        '`/world laws` — Read the full constitution',
-                        '`/world bootstrap` — Generate world.json from your .md files',
-                        '',
-                        '**Role bindings:**',
-                        '`/world bind <agentId> <roleId>` — Bind an agent to a role',
-                        '`/world unbind <agentId>` — Remove a binding',
-                        '`/world bindings` — Show all bindings',
-                        '',
-                        '**Amendments:**',
-                        '`/world propose` — Agent recommends amendments',
-                        '`/world approve <id>` — Approve amendment',
-                        '`/world export` — Export world file',
-                        '',
-                        'You can also ask naturally:',
-                        '  "Am I protected?"  "Any pending changes?"  "What changed?"',
-                    ].join('\n'),
-                };
-            }
-            // ── /world summary ── One-line conversational status
-            if (subcommand === 'summary') {
-                if (!(0, fs_1.existsSync)(worldPath)) {
-                    return { text: 'No governance world loaded. Run `/world bootstrap` to create one.' };
-                }
-                const stats = engine.getStatus();
-                const bindings = engine.getRoleBindings();
-                const auditCounts = audit.getCounts();
-                // Check for issues
-                const issues = [];
-                const storedHashes = engine.getWorld()?.metadata?.mdHashes;
-                if (storedHashes) {
-                    const drift = (0, world_bootstrap_1.checkMdDrift)(workspaceDir, storedHashes);
-                    if (drift.changed.length > 0 || drift.added.length > 0 || drift.removed.length > 0) {
-                        issues.push('source drift detected');
-                    }
-                }
-                const pendingPath = (0, path_1.join)(worldDir, 'world.pending.json');
-                if ((0, fs_1.existsSync)(pendingPath)) {
-                    issues.push('pending updates await approval');
-                }
-                if (bindings.length === 0 && stats.roleCount > 0) {
-                    issues.push('roles defined but no agents bound');
-                }
-                const enforcement = stats.enforcement;
-                const ruleCount = stats.invariantCount + stats.guardCount + stats.ruleCount;
-                if (issues.length === 0) {
-                    return {
-                        text: `Governance active. ${ruleCount} rules enforcing in ${enforcement} mode. ${bindings.length} agent(s) bound. ${auditCounts.total} verdicts logged. No issues.`,
-                    };
-                }
-                return {
-                    text: `Governance active. ${ruleCount} rules enforcing in ${enforcement} mode. ${bindings.length} agent(s) bound. ${auditCounts.total} verdicts logged. Attention: ${issues.join('; ')}.`,
-                };
-            }
-            // ── /world bootstrap ──
-            if (subcommand === 'bootstrap') {
-                const lines = [];
-                // Warn if agents modified .md files during this session
-                if (agentModifiedMdFiles.size > 0) {
-                    lines.push('🔒 GOVERNANCE WARNING');
-                    lines.push('━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━');
-                    lines.push('The following .md files were modified by agents this session:');
-                    for (const [file, { agentId }] of agentModifiedMdFiles) {
-                        lines.push(`  ⚠️  ${file}  (by ${agentId})`);
-                    }
-                    lines.push('');
-                    lines.push('Bootstrapping will compile these changes into your World File.');
-                    lines.push('Review each file before proceeding. If any changes look');
-                    lines.push('unexpected, revert them before bootstrapping.');
-                    lines.push('━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━');
-                    lines.push('');
-                }
-                lines.push('[NeuroVerseOS] Reading .md files from workspace...');
-                const mdFiles = readMdFiles(workspaceDir);
-                for (const file of Object.keys(mdFiles)) {
-                    lines.push(`  Found ${file}`);
-                }
-                if (Object.keys(mdFiles).length === 0) {
-                    lines.push('  No .md files found in workspace.');
-                    lines.push('  Add any .md files to define your governance rules.');
-                    return { text: lines.join('\n') };
-                }
-                lines.push(`\n[NeuroVerseOS] Bootstrapping world from ${Object.keys(mdFiles).length} files...`);
-                const world = (0, world_bootstrap_1.bootstrapWorldFromMarkdown)(mdFiles);
-                engine.setWorld(world);
-                engine.saveWorld();
-                lines.push(`\nWorld file created: ${worldPath}`);
-                lines.push(`  Kernel: ${world.kernel.enforcementMode} mode`);
-                lines.push(`  Session overrides: ${world.kernel.sessionOverridesAllowed ? 'allowed' : 'disabled'}`);
-                lines.push(`  Invariants: ${world.invariants.length}`);
-                lines.push(`  Guards: ${world.guards.length}`);
-                lines.push(`  Rules: ${world.rules.length}`);
-                lines.push(`  Roles: ${world.roles.length}`);
-                lines.push(`\n  Run '/world status' to see governance overview.`);
-                return { text: lines.join('\n') };
-            }
-            // ── /world status ──
-            if (subcommand === 'status') {
-                if (!(0, fs_1.existsSync)(worldPath)) {
-                    return { text: '[NeuroVerseOS] No world file found. Run /world bootstrap first.' };
-                }
-                const stats = engine.getStatus();
-                const driftStats = monitor?.getStats();
-                const auditCounts = audit.getCounts();
-                const lines = [
-                    '\n=== NeuroVerse Governance Status ===\n',
-                    `World: ${worldPath}`,
-                    `Enforcement: ${config.enforcement ?? 'standard'}`,
-                    `Mode: ${config.observeFirst ? 'OBSERVE (recording only)' : 'ENFORCE (active governance)'}`,
-                    `\nInvariants: ${stats.invariantCount}`,
-                    `Guards: ${stats.guardCount}`,
-                    `Rules: ${stats.ruleCount}`,
-                    `Roles: ${stats.roleCount}`,
-                    `Role bindings: ${engine.getRoleBindings().length}`,
-                    `\n--- Audit Log ---`,
-                    `Total verdicts: ${auditCounts.total}`,
-                    `  ALLOW: ${auditCounts.allow}`,
-                    `  PAUSE: ${auditCounts.pause}`,
-                    `  BLOCK: ${auditCounts.block}`,
-                ];
-                if (driftStats) {
-                    lines.push(`\n--- Drift Metrics ---`, `Total actions: ${driftStats.totalActions}`, `Blocks: ${driftStats.blockCount} (${(driftStats.blockRate * 100).toFixed(1)}%)`, `Pauses: ${driftStats.pauseCount} (${(driftStats.pauseRate * 100).toFixed(1)}%)`, `Allows: ${driftStats.allowCount}`, `Override rate: ${(driftStats.overrideRate * 100).toFixed(1)}%`);
-                    if (driftStats.driftSignals.length > 0) {
-                        lines.push(`\nDrift signals:`);
-                        for (const signal of driftStats.driftSignals) {
-                            lines.push(`  - ${signal}`);
-                        }
-                    }
-                }
-                // ── Markdown Drift Detection ──
-                const world = engine.getWorld();
-                const storedHashes = world?.metadata?.mdHashes;
-                if (storedHashes) {
-                    const drift = (0, world_bootstrap_1.checkMdDrift)(workspaceDir, storedHashes);
-                    const hasDrift = drift.changed.length > 0 || drift.added.length > 0 || drift.removed.length > 0;
-                    if (hasDrift) {
-                        lines.push(`\n--- Constitution Drift ---`);
-                        lines.push(`Markdown files changed since last bootstrap.`);
-                        if (drift.changed.length > 0)
-                            lines.push(`  Modified: ${drift.changed.join(', ')}`);
-                        if (drift.added.length > 0)
-                            lines.push(`  New: ${drift.added.join(', ')}`);
-                        if (drift.removed.length > 0)
-                            lines.push(`  Removed: ${drift.removed.join(', ')}`);
-                        lines.push(`Governance may be out of sync. Run /world bootstrap to regenerate.`);
-                    }
-                    else {
-                        lines.push(`\nConstitution: in sync with .md files`);
-                    }
-                }
-                else {
-                    lines.push(`\nConstitution: no hash baseline (bootstrapped before drift detection was added)`);
-                    lines.push(`Run /world bootstrap to establish baseline.`);
-                }
-                return { text: lines.join('\n') };
-            }
-            // ── /world laws ──
-            if (subcommand === 'laws') {
-                if (!(0, fs_1.existsSync)(worldPath)) {
-                    return { text: '[NeuroVerseOS] No world file found. Run /world bootstrap first.' };
-                }
-                const world = engine.getWorld();
-                if (!world) {
-                    return { text: '[NeuroVerseOS] World file could not be loaded.' };
-                }
-                const lines = [
-                    '\n========================================',
-                    `  THE LAWS OF ${(world.metadata.name ?? 'NeuroVerseOS').toUpperCase()}`,
-                    '========================================\n',
-                ];
-                if (world.metadata.description) {
-                    lines.push(`${world.metadata.description}\n`);
-                }
-                lines.push(`Bootstrapped from: ${world.metadata.bootstrappedFrom.join(', ')}`);
-                lines.push(`Enforcement mode: ${world.kernel.enforcementMode}`);
-                lines.push(`Session overrides: ${world.kernel.sessionOverridesAllowed ? 'allowed' : 'disabled'}`);
-                // ── Invariants ──
-                lines.push(`\n--- INVARIANTS (${world.invariants.length}) ---`);
-                lines.push(`Hard blocks. Cannot be overridden. Ever.\n`);
-                if (world.invariants.length === 0) {
-                    lines.push('  (none)');
-                }
-                for (const inv of world.invariants) {
-                    lines.push(`  [${inv.id}]`);
-                    lines.push(`    ${inv.description}`);
-                    lines.push(`    When: ${inv.condition.field} ${inv.condition.operator} ${JSON.stringify(inv.condition.value)}`);
-                    if (inv.scope.length > 0)
-                        lines.push(`    Scope: ${inv.scope.join(', ')}`);
-                    lines.push('');
-                }
-                // ── Guards ──
-                lines.push(`--- GUARDS (${world.guards.length}) ---`);
-                lines.push(`Pause or block. Can be session-overridden if allowed.\n`);
-                if (world.guards.length === 0) {
-                    lines.push('  (none)');
-                }
-                for (const guard of world.guards) {
-                    lines.push(`  [${guard.id}] → ${guard.enforcement.toUpperCase()}`);
-                    if (guard.description)
-                        lines.push(`    ${guard.description}`);
-                    lines.push(`    When: ${guard.condition.field} ${guard.condition.operator} ${JSON.stringify(guard.condition.value)}`);
-                    if (guard.appliesTo.length > 0)
-                        lines.push(`    Applies to: ${guard.appliesTo.join(', ')}`);
-                    if (guard.scope.length > 0)
-                        lines.push(`    Scope: ${guard.scope.join(', ')}`);
-                    if (guard.requiresApproval)
-                        lines.push(`    Requires approval: yes`);
-                    lines.push('');
-                }
-                // ── Rules ──
-                lines.push(`--- RULES (${world.rules.length}) ---`);
-                lines.push(`Contextual triggers with verdict effects.\n`);
-                if (world.rules.length === 0) {
-                    lines.push('  (none)');
-                }
-                for (const rule of world.rules) {
-                    lines.push(`  [${rule.id}] → ${rule.effect.verdict.toUpperCase()}`);
-                    if (rule.description)
-                        lines.push(`    ${rule.description}`);
-                    lines.push(`    Trigger: ${rule.trigger.field} ${rule.trigger.operator} ${JSON.stringify(rule.trigger.value)}`);
-                    lines.push('');
-                }
-                // ── Roles ──
-                lines.push(`--- ROLES (${world.roles.length}) ---`);
-                lines.push(`Identity-based constraints.\n`);
-                if (world.roles.length === 0) {
-                    lines.push('  (none)');
-                }
-                for (const role of world.roles) {
-                    lines.push(`  [${role.id}] ${role.name}`);
-                    if (role.canDo.length > 0)
-                        lines.push(`    Can do: ${role.canDo.join(', ')}`);
-                    if (role.cannotDo.length > 0)
-                        lines.push(`    Cannot do: ${role.cannotDo.join(', ')}`);
-                    lines.push(`    Requires approval: ${role.requiresApproval ? 'yes' : 'no'}`);
-                    lines.push('');
-                }
-                // ── Role Bindings ──
-                const bindings = engine.getRoleBindings();
-                lines.push(`--- ROLE BINDINGS (${bindings.length}) ---`);
-                lines.push(`Agent identity → governance role. Environment-specific.\n`);
-                if (bindings.length === 0) {
-                    lines.push('  (none — roles are defined but no agents are bound)');
-                    lines.push('  Run /world bind <agentId> <roleId> to assign.');
-                }
-                for (const binding of bindings) {
-                    const role = world.roles.find(r => r.id === binding.roleId);
-                    const roleName = role ? role.name : '(unknown role)';
-                    lines.push(`  ${binding.agentId} → [${binding.roleId}] ${roleName}`);
-                    lines.push(`    Bound by: ${binding.boundBy}`);
-                }
-                lines.push('');
-                lines.push('========================================');
-                return { text: lines.join('\n') };
-            }
-            // ── /world bind <agentId> <roleId> ──
-            if (subcommand === 'bind') {
-                const [agentId, roleId] = rest;
-                if (!agentId || !roleId) {
-                    return { text: 'Usage: `/world bind <agentId> <roleId>`\n\nExample: `/world bind agent-coder-01 executor`' };
-                }
-                // Validate roleId exists in the world
-                const world = engine.getWorld();
-                if (!world) {
-                    return { text: '[NeuroVerseOS] No world loaded. Run /world bootstrap first.' };
-                }
-                const role = world.roles.find(r => r.id === roleId);
-                if (!role) {
-                    const available = world.roles.map(r => `\`${r.id}\` (${r.name})`).join(', ');
-                    return { text: `[NeuroVerseOS] Role "${roleId}" not found.\n\nAvailable roles: ${available}` };
-                }
-                const meta = engine.getMetaRecord();
-                if (!meta) {
-                    return { text: '[NeuroVerseOS] No meta record. Run /world bootstrap first.' };
-                }
-                // Classify severity and apply
-                const severity = engine.setRoleBinding(agentId, roleId, 'human');
-                engine.saveMeta();
-                engine.hydrateRoleMap(roleMap);
-                const severityLabel = {
-                    new_binding: 'LOW — new binding',
-                    reassignment: 'HIGH — role reassignment',
-                    escalation: 'CRITICAL — privilege escalation',
-                    de_escalation: 'LOW — privilege de-escalation',
-                    removal: 'HIGH — binding removed',
-                };
-                const lines = [
-                    `[NeuroVerseOS] Role binding updated.`,
-                    `  Agent:    ${agentId}`,
-                    `  Role:     ${role.id} (${role.name})`,
-                    `  Severity: ${severityLabel[severity] ?? severity}`,
-                    `  Can do:   ${role.canDo.join(', ') || '(none)'}`,
-                    `  Cannot do: ${role.cannotDo.join(', ') || '(none)'}`,
-                    `  Requires approval: ${role.requiresApproval ? 'yes' : 'no'}`,
-                ];
-                if (severity === 'escalation') {
-                    lines.push('');
-                    lines.push('  ⚠ This is a privilege escalation. The agent now has broader permissions.');
-                }
-                return { text: lines.join('\n') };
-            }
-            // ── /world unbind <agentId> ──
-            if (subcommand === 'unbind') {
-                const [agentId] = rest;
-                if (!agentId) {
-                    return { text: 'Usage: `/world unbind <agentId>`' };
-                }
-                const removed = engine.removeRoleBinding(agentId);
-                if (!removed) {
-                    return { text: `[NeuroVerseOS] No binding found for agent "${agentId}".` };
-                }
-                engine.saveMeta();
-                engine.hydrateRoleMap(roleMap);
-                return {
-                    text: [
-                        `[NeuroVerseOS] Role binding removed.`,
-                        `  Agent: ${agentId}`,
-                        `  Status: unbound (deny-by-default — role constraints will not apply)`,
-                    ].join('\n'),
-                };
-            }
-            // ── /world bindings ──
-            if (subcommand === 'bindings') {
-                const bindings = engine.getRoleBindings();
-                if (bindings.length === 0) {
-                    return {
-                        text: [
-                            '[NeuroVerseOS] No role bindings configured.',
-                            '',
-                            'Agents are unbound. Role constraints are inert.',
-                            'Run `/world bind <agentId> <roleId>` to assign roles.',
-                            '',
-                            'Available roles:',
-                            ...(engine.getWorld()?.roles.map(r => `  \`${r.id}\` — ${r.name}`) ?? ['  (no world loaded)']),
-                        ].join('\n'),
-                    };
-                }
-                const lines = [
-                    '**Agent Role Bindings**',
-                    '',
-                ];
-                for (const binding of bindings) {
-                    const role = engine.getWorld()?.roles.find(r => r.id === binding.roleId);
-                    const roleName = role ? ` (${role.name})` : ' (role not found in world)';
-                    const boundDate = new Date(binding.boundAt).toISOString().slice(0, 19);
-                    lines.push(`  \`${binding.agentId}\` → \`${binding.roleId}\`${roleName}`);
-                    lines.push(`    Bound by: ${binding.boundBy} at ${boundDate}`);
-                }
-                return { text: lines.join('\n') };
-            }
-            // ── /world propose ──
-            if (subcommand === 'propose') {
-                if (!monitor) {
-                    return { text: '[NeuroVerseOS] Drift tracking is disabled. Enable it to generate proposals.' };
-                }
-                const proposals = monitor.generateProposals();
-                if (proposals.length === 0) {
-                    return { text: '[NeuroVerseOS] No amendments to propose. Governance is stable.' };
-                }
-                const lines = [];
-                for (const proposal of proposals) {
-                    const id = Date.now().toString(36);
-                    const proposalPath = (0, path_1.join)(proposalsDir, `${id}.json`);
-                    (0, fs_1.writeFileSync)(proposalPath, JSON.stringify({ ...proposal, id, createdAt: Date.now() }, null, 2));
-                    lines.push(`\nProposal ${id}:`);
-                    lines.push(`  Type: ${proposal.type}`);
-                    lines.push(`  Reason: ${proposal.reason}`);
-                    lines.push(`  Suggestion: ${proposal.suggestion}`);
-                }
-                lines.push(`\nRun '/world approve <id>' to apply a proposal.`);
-                return { text: lines.join('\n') };
-            }
-            // ── /world approve <id> ──
-            if (subcommand === 'approve') {
-                const id = rest[0];
-                if (!id) {
-                    return { text: 'Usage: /world approve <proposal-id>' };
-                }
-                const proposalPath = (0, path_1.join)(proposalsDir, `${id}.json`);
-                if (!(0, fs_1.existsSync)(proposalPath)) {
-                    return { text: `[NeuroVerseOS] Proposal ${id} not found.` };
-                }
-                const proposal = JSON.parse((0, fs_1.readFileSync)(proposalPath, 'utf-8'));
-                engine.applyAmendment(proposal);
-                engine.saveWorld();
-                return { text: `Proposal ${id} approved and applied to world.\n  World file updated: ${worldPath}` };
-            }
-            // ── /world export ──
-            if (subcommand === 'export') {
-                if (!(0, fs_1.existsSync)(worldPath)) {
-                    return { text: '[NeuroVerseOS] No world file. Run /world bootstrap first.' };
-                }
-                return {
-                    text: [
-                        '[NeuroVerseOS] Export to .nv-world.zip:',
-                        '  Use the NeuroVerse configurator at https://www.neuroverseos.com/build/configurator',
-                        `  Or copy ${worldPath} to use with the Action Space runner.`,
-                    ].join('\n'),
-                };
-            }
-            return { text: `Unknown subcommand: ${subcommand}. Run /world help for usage.` };
-        },
-    });
-    // ── Startup ────────────────────────────────────────────────────
-    api.logger.info('[NeuroVerseOS] Governance plugin loaded (v1.3.0)');
-    if ((0, fs_1.existsSync)(worldPath)) {
-        engine.loadWorld();
-        engine.loadMeta();
-        const status = engine.getStatus();
-        const ruleCount = status.invariantCount + status.guardCount + status.ruleCount;
-        api.logger.info(`[NeuroVerseOS] World active: ${ruleCount} rules, ${status.roleCount} roles, ${status.enforcement} enforcement`);
-        const meta = engine.getMetaRecord();
-        if (meta) {
-            api.logger.info(`[NeuroVerseOS] Integrity: verified (v${meta.version})`);
-        }
-        // Hydrate roleMap from meta bindings (agent identity → governance role)
-        engine.hydrateRoleMap(roleMap);
-        const bindingCount = engine.getRoleBindings().length;
-        if (bindingCount > 0) {
-            api.logger.info(`[NeuroVerseOS] ${bindingCount} agent(s) bound to roles`);
-        }
-        api.logger.info(`[NeuroVerseOS] Type /world for status, /world help for commands`);
+function evaluateCondition(condition, event) {
+  const fieldValue = getFieldValue(event, condition.field);
+  if (fieldValue === void 0 && condition.operator !== "!=") {
+    return { matched: false, evidence: null };
+  }
+  switch (condition.operator) {
+    case "==":
+      return evaluateEquals(fieldValue, condition.value);
+    case "!=":
+      return evaluateNotEquals(fieldValue, condition.value);
+    case ">":
+      return evaluateComparison(fieldValue, condition.value, (a, b) => a > b);
+    case "<":
+      return evaluateComparison(fieldValue, condition.value, (a, b) => a < b);
+    case ">=":
+      return evaluateComparison(fieldValue, condition.value, (a, b) => a >= b);
+    case "<=":
+      return evaluateComparison(fieldValue, condition.value, (a, b) => a <= b);
+    case "in":
+      return evaluateIn(fieldValue, condition.value);
+    case "contains":
+      return evaluateContains(fieldValue, condition.value);
+    case "contains_any":
+      return evaluateContainsAny(fieldValue, condition.value);
+    case "matches_pattern":
+      return evaluateMatchesPattern(fieldValue, condition.value);
+    case "starts_with":
+      return evaluateStartsWith(fieldValue, condition.value);
+    case "ends_with":
+      return evaluateEndsWith(fieldValue, condition.value);
+    default:
+      return { matched: false, evidence: null };
+  }
+}
+function evaluateEquals(fieldValue, conditionValue) {
+  const fieldStr = toString(fieldValue);
+  const condStr = toString(conditionValue);
+  const matched = fieldStr === condStr;
+  return {
+    matched,
+    evidence: matched ? `${fieldStr} == ${condStr}` : null
+  };
+}
+function evaluateNotEquals(fieldValue, conditionValue) {
+  const fieldStr = toString(fieldValue);
+  const condStr = toString(conditionValue);
+  const matched = fieldStr !== condStr;
+  return {
+    matched,
+    evidence: matched ? `${fieldStr} != ${condStr}` : null
+  };
+}
+function evaluateComparison(fieldValue, conditionValue, comparator) {
+  const a = Number(fieldValue);
+  const b = Number(conditionValue);
+  if (isNaN(a) || isNaN(b)) return { matched: false, evidence: null };
+  const matched = comparator(a, b);
+  return {
+    matched,
+    evidence: matched ? `${a} compared to ${b}` : null
+  };
+}
+function evaluateIn(fieldValue, conditionValue) {
+  if (!Array.isArray(conditionValue)) return { matched: false, evidence: null };
+  const fieldStr = toString(fieldValue);
+  const matched = conditionValue.some((v) => toString(v) === fieldStr);
+  return {
+    matched,
+    evidence: matched ? `"${fieldStr}" found in [${conditionValue.join(", ")}]` : null
+  };
+}
+function evaluateContains(fieldValue, conditionValue) {
+  const fieldStr = toString(fieldValue).toLowerCase();
+  const searchStr = toString(conditionValue).toLowerCase();
+  const matched = fieldStr.includes(searchStr);
+  return {
+    matched,
+    evidence: matched ? `"${searchStr}" found in field` : null
+  };
+}
+function evaluateContainsAny(fieldValue, conditionValue) {
+  if (!Array.isArray(conditionValue)) return { matched: false, evidence: null };
+  const fieldStr = toString(fieldValue).toLowerCase();
+  for (const pattern of conditionValue) {
+    const patternLower = toString(pattern).toLowerCase();
+    if (fieldStr.includes(patternLower)) {
+      return {
+        matched: true,
+        evidence: `"${patternLower}" found in field`
+      };
     }
-    else {
-        // First install — clean onboarding
-        api.logger.info('[NeuroVerseOS] Welcome. No governance world found.');
-        api.logger.info('[NeuroVerseOS] To get started:');
-        api.logger.info('[NeuroVerseOS]   1. Add .md files defining your agent rules');
-        api.logger.info('[NeuroVerseOS]   2. Run /world bootstrap to compile them');
-        api.logger.info('[NeuroVerseOS]   3. Run /world bind <agentId> <roleId> to assign roles');
-        api.logger.info('[NeuroVerseOS] Type /world help for all commands');
+  }
+  return { matched: false, evidence: null };
+}
+function evaluateMatchesPattern(fieldValue, conditionValue) {
+  const fieldStr = toString(fieldValue);
+  const patterns = Array.isArray(conditionValue) ? conditionValue : [toString(conditionValue)];
+  for (const pattern of patterns) {
+    try {
+      const regex = new RegExp(toString(pattern), "i");
+      if (regex.test(fieldStr)) {
+        return {
+          matched: true,
+          evidence: `matched pattern /${pattern}/`
+        };
+      }
+    } catch {
+      continue;
     }
+  }
+  return { matched: false, evidence: null };
+}
+function evaluateStartsWith(fieldValue, conditionValue) {
+  const fieldStr = toString(fieldValue).toLowerCase();
+  const prefix = toString(conditionValue).toLowerCase();
+  const matched = fieldStr.startsWith(prefix);
+  return {
+    matched,
+    evidence: matched ? `field starts with "${prefix}"` : null
+  };
+}
+function evaluateEndsWith(fieldValue, conditionValue) {
+  const fieldStr = toString(fieldValue).toLowerCase();
+  const suffix = toString(conditionValue).toLowerCase();
+  const matched = fieldStr.endsWith(suffix);
+  return {
+    matched,
+    evidence: matched ? `field ends with "${suffix}"` : null
+  };
 }
-//# sourceMappingURL=index.js.map
+export {
+  BOOTSTRAP_EXIT_CODES,
+  CONFIGURE_AI_EXIT_CODES,
+  CompositeAuditLogger,
+  ConsoleAuditLogger,
+  DERIVE_EXIT_CODES,
+  FileAuditLogger,
+  GUARD_EXIT_CODES,
+  VALIDATE_EXIT_CODES,
+  createGovernanceEngine,
+  deriveWorld,
+  emitWorldDefinition,
+  evaluateCondition,
+  evaluateGuard,
+  eventToAllowlistKey,
+  explainWorld,
+  extractWorldMarkdown,
+  formatVerdict,
+  formatVerdictOneLine,
+  generateImpactReport,
+  generateImpactReportFromFile,
+  improveWorld,
+  loadWorld,
+  loadWorldFromDirectory,
+  normalizeWorldMarkdown,
+  parseWorldMarkdown,
+  readAuditLog,
+  renderExplainText,
+  renderImpactReport,
+  renderImproveText,
+  renderSimulateText,
+  simulateWorld,
+  summarizeAuditEvents,
+  validateWorld,
+  verdictToAuditEvent
+};