@neuroverseos/governance 0.10.0 → 0.12.0

package/dist/cli/neuroverse.cjs

@@ -6332,6 +6332,24 @@ function isExternalScope(scope) {
   return !internalPatterns.some((p) => p.test(scope));
 }
 function evaluateGuard(event, world, options = {}) {
+  const verdict = evaluateGuardCore(event, world, options);
+  return options.mode === "observe" ? toShadowVerdict(verdict) : verdict;
+}
+function toShadowVerdict(verdict) {
+  if (verdict.status === "ALLOW") return verdict;
+  return {
+    ...verdict,
+    status: "ALLOW",
+    shadowStatus: verdict.status,
+    shadowReason: verdict.reason,
+    // Preserve the original reason as shadowReason and wipe the
+    // top-level reason so callers that display `reason` for BLOCK/PAUSE
+    // don't accidentally surface an enforcement message.
+    reason: void 0,
+    warning: verdict.reason ? `Observe mode: would have ${verdict.status.toLowerCase()} \u2014 ${verdict.reason}` : `Observe mode: would have ${verdict.status.toLowerCase()}`
+  };
+}
+function evaluateGuardCore(event, world, options = {}) {
   const startTime = performance.now();
   const level = options.level ?? "standard";
   const includeTrace = options.trace ?? false;
@@ -7647,10 +7665,104 @@ var init_guard = __esm({
   }
 });
 
+// src/cli/audit.ts
+var audit_exports = {};
+__export(audit_exports, {
+  main: () => main12
+});
+function parseArgs12(argv) {
+  let worldPath = "";
+  let trace = false;
+  let level;
+  let multi = false;
+  let crossingsOnly = false;
+  for (let i = 0; i < argv.length; i++) {
+    const a = argv[i];
+    if (a === "--world") worldPath = argv[++i] ?? "";
+    else if (a === "--trace") trace = true;
+    else if (a === "--level") {
+      const v = argv[++i];
+      if (v === "basic" || v === "standard" || v === "strict") level = v;
+    } else if (a === "--multi") multi = true;
+    else if (a === "--crossings-only") crossingsOnly = true;
+  }
+  return { worldPath, trace, level, multi, crossingsOnly };
+}
+function usage() {
+  process.stderr.write(
+    "Usage: neuroverse audit --world <path> [--trace] [--level basic|standard|strict] [--multi] [--crossings-only]\n\nReads GuardEvent JSON from stdin. With --multi, reads a JSON array.\nEvaluates in observe mode \u2014 no enforcement. Verdicts carry\nshadowStatus/shadowReason for any event that would have crossed.\n"
+  );
+}
+async function main12(argv = process.argv.slice(2)) {
+  const args = parseArgs12(argv);
+  if (!args.worldPath) {
+    usage();
+    process.exit(1);
+  }
+  let world;
+  try {
+    const resolved = resolveWorldPath(args.worldPath);
+    if (!resolved) {
+      process.stderr.write(`Failed to resolve world path: ${args.worldPath}
+`);
+      process.exit(1);
+    }
+    world = await loadWorld(resolved);
+  } catch (err) {
+    process.stderr.write(`Failed to load world: ${err instanceof Error ? err.message : err}
+`);
+    process.exit(1);
+  }
+  let raw = "";
+  try {
+    raw = await readStdin();
+  } catch (err) {
+    process.stderr.write(`Failed to read stdin: ${err instanceof Error ? err.message : err}
+`);
+    process.exit(1);
+  }
+  if (!raw.trim()) {
+    process.stderr.write("No input on stdin. Pipe a GuardEvent or a JSON array with --multi.\n");
+    process.exit(1);
+  }
+  let parsed;
+  try {
+    parsed = JSON.parse(raw);
+  } catch (err) {
+    process.stderr.write(`Invalid JSON on stdin: ${err instanceof Error ? err.message : err}
+`);
+    process.exit(1);
+  }
+  const options = { trace: args.trace, level: args.level, mode: "observe" };
+  if (args.multi) {
+    if (!Array.isArray(parsed)) {
+      process.stderr.write("--multi expects a JSON array on stdin.\n");
+      process.exit(1);
+    }
+    const verdicts = parsed.map(
+      (e) => evaluateGuard(e, world, options)
+    );
+    const out = args.crossingsOnly ? verdicts.filter((v) => v.shadowStatus && v.shadowStatus !== "ALLOW") : verdicts;
+    process.stdout.write(JSON.stringify(out, null, 2) + "\n");
+    return;
+  }
+  const verdict = evaluateGuard(parsed, world, options);
+  process.stdout.write(JSON.stringify(verdict, null, 2) + "\n");
+}
+var init_audit = __esm({
+  "src/cli/audit.ts"() {
+    "use strict";
+    init_guard_engine();
+    init_world_loader();
+    init_world_resolver();
+    init_cli_utils();
+  }
+});
+
 // src/cli/test.ts
 var test_exports = {};
 __export(test_exports, {
-  main: () => main12
+  main: () => main13
 });
 function generateFuzzEvent() {
   const verb = FUZZ_VERBS[Math.floor(Math.random() * FUZZ_VERBS.length)];
@@ -7668,7 +7780,7 @@ function generateFuzzEvent() {
     }
   };
 }
-function parseArgs12(argv) {
+function parseArgs13(argv) {
   let worldPath;
   let fuzz = false;
   let count = 20;
@@ -7684,8 +7796,8 @@ function parseArgs12(argv) {
   }
   return { worldPath, fuzz, count, json, level };
 }
-async function main12(argv) {
-  const args = parseArgs12(argv);
+async function main13(argv) {
+  const args = parseArgs13(argv);
   if (!args.worldPath) {
     process.stderr.write("Usage: neuroverse test --world <dir> [--fuzz] [--count N] [--json]\n");
     process.exit(1);
@@ -7868,9 +7980,9 @@ var init_test = __esm({
 // src/cli/redteam.ts
 var redteam_exports = {};
 __export(redteam_exports, {
-  main: () => main13
+  main: () => main14
 });
-function parseArgs13(argv) {
+function parseArgs14(argv) {
   let worldPath;
   let level = "standard";
   let json = false;
@@ -7882,8 +7994,8 @@ function parseArgs13(argv) {
   }
   return { worldPath, level, json };
 }
-async function main13(argv) {
-  const args = parseArgs13(argv);
+async function main14(argv) {
+  const args = parseArgs14(argv);
   if (!args.worldPath) {
     process.stderr.write("Usage: neuroverse redteam --world <dir> [--level basic|standard|strict] [--json]\n");
     process.exit(1);
@@ -8585,9 +8697,9 @@ var init_behavioral_engine = __esm({
 // src/cli/demo.ts
 var demo_exports = {};
 __export(demo_exports, {
-  main: () => main14
+  main: () => main15
 });
-async function main14(args) {
+async function main15(args) {
   let port = 3456;
   let worldName;
   let noBrowser = false;
@@ -11425,9 +11537,9 @@ var init_ = __esm({
 // src/cli/doctor.ts
 var doctor_exports = {};
 __export(doctor_exports, {
-  main: () => main15
+  main: () => main16
 });
-async function main15(argv) {
+async function main16(argv) {
   const json = argv.includes("--json");
   let worldPath;
   for (let i = 0; i < argv.length; i++) {
@@ -11589,7 +11701,7 @@ var init_doctor = __esm({
 // src/cli/playground.ts
 var playground_exports = {};
 __export(playground_exports, {
-  main: () => main16
+  main: () => main17
 });
 function buildPlaygroundHtml(world, healthSummary) {
   const worldName = world.world.name;
@@ -12015,7 +12127,7 @@ function esc(s) {
 function esc(s) {
   return s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;");
 }
-function parseArgs14(argv) {
+function parseArgs15(argv) {
   let worldPath;
   let port = 4242;
   for (let i = 0; i < argv.length; i++) {
@@ -12025,8 +12137,8 @@ function parseArgs14(argv) {
   }
   return { worldPath, port };
 }
-async function main16(argv) {
-  const args = parseArgs14(argv);
+async function main17(argv) {
+  const args = parseArgs15(argv);
   let world;
   if (args.worldPath) {
     try {
@@ -12317,7 +12429,7 @@ var init_plan_contract = __esm({
 // src/cli/plan.ts
 var plan_exports = {};
 __export(plan_exports, {
-  main: () => main17
+  main: () => main18
 });
 function parseArg(args, flag) {
   const idx = args.indexOf(flag);
@@ -12607,7 +12719,7 @@ async function deriveCommand(args) {
   process.stdout.write(`  Invariants: ${plan.constraints.length} (one per constraint)
 `);
 }
-async function main17(args) {
+async function main18(args) {
   const subcommand = args[0];
   const subArgs = args.slice(1);
   switch (subcommand) {
@@ -13502,7 +13614,7 @@ var init_session = __esm({
 // src/cli/run.ts
 var run_exports = {};
 __export(run_exports, {
-  main: () => main18
+  main: () => main19
 });
 function parseArg2(args, flag) {
   const idx = args.indexOf(flag);
@@ -13527,7 +13639,7 @@ function autoDetectPlan() {
 function loadPlan(path) {
   return JSON.parse((0, import_fs5.readFileSync)(path, "utf-8"));
 }
-async function main18(args) {
+async function main19(args) {
   if (hasFlag(args, "--help") || hasFlag(args, "-h")) {
     process.stdout.write(RUN_USAGE + "\n");
     process.exit(0);
@@ -14280,9 +14392,9 @@ Progress: ${progress.completed}/${progress.total} (${progress.percentage}%)`;
 // src/cli/world.ts
 var world_exports = {};
 __export(world_exports, {
-  main: () => main19
+  main: () => main20
 });
-function parseArgs15(argv) {
+function parseArgs16(argv) {
   const subcommand = argv[0];
   const paths = [];
   const flags = {};
@@ -14560,8 +14672,8 @@ function worldCurrent(json) {
   process.stdout.write(`Source: ${info2.source}
 `);
 }
-async function main19(argv = process.argv.slice(2)) {
-  const { subcommand, paths, flags } = parseArgs15(argv);
+async function main20(argv = process.argv.slice(2)) {
+  const { subcommand, paths, flags } = parseArgs16(argv);
   if (flags.help || !subcommand) {
     process.stdout.write(USAGE + "\n");
     process.exit(0);
@@ -14652,9 +14764,9 @@ Options:
 // src/cli/trace.ts
 var trace_exports = {};
 __export(trace_exports, {
-  main: () => main20
+  main: () => main21
 });
-function parseArgs16(argv) {
+function parseArgs17(argv) {
   const args = {};
   for (let i = 0; i < argv.length; i++) {
     const arg = argv[i];
@@ -14738,8 +14850,8 @@ function formatSummary(events) {
   }
   return lines.join("\n");
 }
-async function main20(argv = process.argv.slice(2)) {
-  const args = parseArgs16(argv);
+async function main21(argv = process.argv.slice(2)) {
+  const args = parseArgs17(argv);
   if (args.help) {
     process.stdout.write(USAGE2 + "\n");
     process.exit(0);
@@ -15058,9 +15170,9 @@ var init_impact_report = __esm({
 // src/cli/impact.ts
 var impact_exports = {};
 __export(impact_exports, {
-  main: () => main21
+  main: () => main22
 });
-function parseArgs17(argv) {
+function parseArgs18(argv) {
   const args = {};
   for (let i = 0; i < argv.length; i++) {
     const arg = argv[i];
@@ -15070,8 +15182,8 @@ function parseArgs17(argv) {
   }
   return args;
 }
-async function main21(argv = process.argv.slice(2)) {
-  const args = parseArgs17(argv);
+async function main22(argv = process.argv.slice(2)) {
+  const args = parseArgs18(argv);
   if (args.help) {
     process.stdout.write(USAGE3 + "\n");
     process.exit(0);
@@ -15116,9 +15228,9 @@ repeat violations, and actor behavior patterns.
 // src/cli/behavioral.ts
 var behavioral_exports = {};
 __export(behavioral_exports, {
-  main: () => main22
+  main: () => main23
 });
-function parseArgs18(argv) {
+function parseArgs19(argv) {
   const args = {};
   for (let i = 0; i < argv.length; i++) {
     const arg = argv[i];
@@ -15128,8 +15240,8 @@ function parseArgs18(argv) {
   }
   return args;
 }
-async function main22(argv = process.argv.slice(2)) {
-  const args = parseArgs18(argv);
+async function main23(argv = process.argv.slice(2)) {
+  const args = parseArgs19(argv);
   if (args.help) {
     process.stdout.write(USAGE4 + "\n");
     process.exit(0);
@@ -15232,9 +15344,9 @@ and generates a human-readable narrative.
 // src/cli/derive.ts
 var derive_exports = {};
 __export(derive_exports, {
-  main: () => main23
+  main: () => main24
 });
-function parseArgs19(argv) {
+function parseArgs20(argv) {
   let inputPath = "";
   let outputPath = "./derived.nv-world.md";
   let validate = true;
@@ -15268,9 +15380,9 @@ function parseArgs19(argv) {
   if (!inputPath) throw new DeriveInputError("--input <path> is required");
   return { inputPath, outputPath, validate, dryRun, bootstrapDir, provider, model, endpoint };
 }
-async function main23(argv = process.argv.slice(2)) {
+async function main24(argv = process.argv.slice(2)) {
   try {
-    const args = parseArgs19(argv);
+    const args = parseArgs20(argv);
     const { result, exitCode, dryRunOutput } = await deriveWorld({
       inputPath: args.inputPath,
       outputPath: args.outputPath,
@@ -15380,9 +15492,9 @@ var init_derive = __esm({
 // src/cli/decision-flow.ts
 var decision_flow_exports = {};
 __export(decision_flow_exports, {
-  main: () => main24
+  main: () => main25
 });
-async function main24(args) {
+async function main25(args) {
   let logPath = ".neuroverse/audit.ndjson";
   let jsonOutput = false;
   for (let i = 0; i < args.length; i++) {
@@ -15439,7 +15551,7 @@ var init_decision_flow = __esm({
 // src/cli/equity-penalties.ts
 var equity_penalties_exports = {};
 __export(equity_penalties_exports, {
-  main: () => main25
+  main: () => main26
 });
 function generateActionsForRound(agents, round2) {
   const actions = [];
@@ -15496,7 +15608,7 @@ function generateActionsForRound(agents, round2) {
   }
   return actions;
 }
-async function main25(args) {
+async function main26(args) {
   let worldPath = "";
   let agentCount = 8;
   let rounds = 5;
@@ -15675,9 +15787,9 @@ var init_equity_penalties = __esm({
 // src/cli/keygen.ts
 var keygen_exports = {};
 __export(keygen_exports, {
-  main: () => main26
+  main: () => main27
 });
-function parseArgs20(argv) {
+function parseArgs21(argv) {
   let output = (0, import_path8.join)((0, import_os2.homedir)(), ".neuroverse", "keys");
   let name = "neuroverse";
   let force = false;
@@ -15696,8 +15808,8 @@ function parseArgs20(argv) {
   }
   return { output, name, force, help };
 }
-async function main26(argv = process.argv.slice(2)) {
-  const args = parseArgs20(argv);
+async function main27(argv = process.argv.slice(2)) {
+  const args = parseArgs21(argv);
   if (args.help) {
     process.stdout.write(USAGE5 + "\n");
     return;
@@ -15760,9 +15872,9 @@ var sign_exports = {};
 __export(sign_exports, {
   buildManifest: () => buildManifest,
   canonicalManifest: () => canonicalManifest,
-  main: () => main27
+  main: () => main28
 });
-function parseArgs21(argv) {
+function parseArgs22(argv) {
   let worldPath = "";
   let keyPath = (0, import_path9.join)((0, import_os3.homedir)(), ".neuroverse", "keys", "neuroverse.key");
   let help = false;
@@ -15806,8 +15918,8 @@ function canonicalManifest(files) {
   const sorted = Object.keys(files).sort();
   return sorted.map((k) => `${k}:${files[k]}`).join("\n");
 }
-async function main27(argv = process.argv.slice(2)) {
-  const args = parseArgs21(argv);
+async function main28(argv = process.argv.slice(2)) {
+  const args = parseArgs22(argv);
   if (args.help) {
     process.stdout.write(USAGE6 + "\n");
     return;
@@ -15872,9 +15984,9 @@ Examples:
 // src/cli/verify.ts
 var verify_exports = {};
 __export(verify_exports, {
-  main: () => main28
+  main: () => main29
 });
-function parseArgs22(argv) {
+function parseArgs23(argv) {
   let worldPath = "";
   let keyPath = (0, import_path10.join)((0, import_os4.homedir)(), ".neuroverse", "keys", "neuroverse.pub");
   let json = false;
@@ -15893,8 +16005,8 @@ function parseArgs22(argv) {
   }
   return { worldPath, keyPath, json, help };
 }
-async function main28(argv = process.argv.slice(2)) {
-  const args = parseArgs22(argv);
+async function main29(argv = process.argv.slice(2)) {
+  const args = parseArgs23(argv);
   if (args.help) {
     process.stdout.write(USAGE7 + "\n");
     return;
@@ -16027,7 +16139,7 @@ Examples:
 var migrate_exports = {};
 __export(migrate_exports, {
   LATEST_VERSION: () => LATEST_VERSION,
-  main: () => main29
+  main: () => main30
 });
 function detectVersion(worldPath) {
   const metaPath = (0, import_path11.join)(worldPath, "metadata.json");
@@ -16060,7 +16172,7 @@ function findMigrationPath(from, to) {
   }
   return path;
 }
-function parseArgs23(argv) {
+function parseArgs24(argv) {
   let worldPath = "";
   let dryRun = false;
   let backup = false;
@@ -16085,8 +16197,8 @@ function parseArgs23(argv) {
   }
   return { worldPath, dryRun, backup, target, json, help };
 }
-async function main29(argv = process.argv.slice(2)) {
-  const args = parseArgs23(argv);
+async function main30(argv = process.argv.slice(2)) {
+  const args = parseArgs24(argv);
   if (args.help) {
     process.stdout.write(USAGE8 + "\n");
     return;
@@ -16253,9 +16365,9 @@ Examples:
 // src/cli/configure-ai.ts
 var configure_ai_exports = {};
 __export(configure_ai_exports, {
-  main: () => main30
+  main: () => main31
 });
-function parseArgs24(argv) {
+function parseArgs25(argv) {
   let provider;
   let model;
   let apiKey;
@@ -16280,9 +16392,9 @@ function parseArgs24(argv) {
   }
   return { provider, model, apiKey, endpoint, show, test };
 }
-async function main30(argv = process.argv.slice(2)) {
+async function main31(argv = process.argv.slice(2)) {
   try {
-    const args = parseArgs24(argv);
+    const args = parseArgs25(argv);
     if (args.show) {
       const config2 = await loadConfig();
       if (!config2) {
@@ -16483,7 +16595,7 @@ var init_prompt_utils = __esm({
 // src/cli/configure-world.ts
 var configure_world_exports = {};
 __export(configure_world_exports, {
-  main: () => main31
+  main: () => main32
 });
 function metricToStateVariable(metric) {
   const id = metric.toLowerCase().replace(/[^a-z0-9]+/g, "_").replace(/^_|_$/g, "");
@@ -16927,7 +17039,7 @@ async function writeWorld(outputDir, world) {
   }
   return files;
 }
-function parseArgs25(argv) {
+function parseArgs26(argv) {
   let outputDir = "./world/";
   for (let i = 0; i < argv.length; i++) {
     const arg = argv[i];
@@ -16937,9 +17049,9 @@ function parseArgs25(argv) {
   }
   return { outputDir };
 }
-async function main31(argv = process.argv.slice(2)) {
+async function main32(argv = process.argv.slice(2)) {
   try {
-    const args = parseArgs25(argv);
+    const args = parseArgs26(argv);
     const context = await phaseContext();
     const guardState = await phaseGuard(context.domain);
     const systemState = await phaseSystem(context.domain);
@@ -17840,7 +17952,7 @@ var init_lens = __esm({
 // src/cli/lens.ts
 var lens_exports = {};
 __export(lens_exports, {
-  main: () => main32
+  main: () => main33
 });
 async function cmdList(argv) {
   let worldPath = "";
@@ -18173,7 +18285,7 @@ async function cmdAdd(argv) {
 
 `);
 }
-async function main32(argv = process.argv.slice(2)) {
+async function main33(argv = process.argv.slice(2)) {
   const subcommand = argv[0];
   const subArgs = argv.slice(1);
   try {
@@ -19341,9 +19453,9 @@ var init_worldmodel_create = __esm({
 // src/cli/worldmodel.ts
 var worldmodel_exports = {};
 __export(worldmodel_exports, {
-  main: () => main33
+  main: () => main34
 });
-function parseArgs26(argv) {
+function parseArgs27(argv) {
   const args = {
     inputPath: "",
     output: "",
@@ -19396,7 +19508,7 @@ async function loadAndParse(inputPath) {
   return { model: result.model, issues: result.issues };
 }
 async function cmdInit(argv) {
-  const args = parseArgs26(argv);
+  const args = parseArgs27(argv);
   if (args.help) {
     process.stdout.write(
       'neuroverse worldmodel init \u2014 Create a new behavioral model\n\nWith ANTHROPIC_API_KEY set:\n  Interactive \u2014 answers questions, AI structures your worldmodel.\n  Your natural process: talk \u2192 structure \u2192 refine.\n\nWithout ANTHROPIC_API_KEY:\n  Template \u2014 generates a scaffold you fill in manually.\n\nOptions:\n  --name <name>      Model name (default: "My Behavioral Model")\n  --output <path>    Output path (default: ./model.worldmodel.md)\n  --template         Force template mode even with API key set\n'
@@ -19718,7 +19830,7 @@ Examples:
 `;
 }
 async function cmdValidate(argv) {
-  const args = parseArgs26(argv);
+  const args = parseArgs27(argv);
   if (args.help || !args.inputPath) {
     process.stdout.write(
       "neuroverse worldmodel validate <source.worldmodel.md> [--json]\n"
@@ -19775,7 +19887,7 @@ async function cmdValidate(argv) {
   process.exit(errors.length > 0 ? 1 : 0);
 }
 async function cmdExplain(argv) {
-  const args = parseArgs26(argv);
+  const args = parseArgs27(argv);
   if (args.help || !args.inputPath) {
     process.stdout.write(
       "neuroverse worldmodel explain <source.worldmodel.md> [--json]\n"
@@ -19941,7 +20053,7 @@ function buildExplainData(model) {
   };
 }
 async function cmdBuild(argv) {
-  const args = parseArgs26(argv);
+  const args = parseArgs27(argv);
   if (args.help || !args.inputPath) {
     process.stdout.write(
       "neuroverse worldmodel build <source.worldmodel.md> [--output <dir>] [--json]\n"
@@ -20038,7 +20150,7 @@ async function cmdBuild(argv) {
   }
 }
 async function cmdEmitWorld(argv) {
-  const args = parseArgs26(argv);
+  const args = parseArgs27(argv);
   if (args.help || !args.inputPath) {
     process.stdout.write("neuroverse worldmodel emit-world <source.worldmodel.md>\n");
     return;
@@ -20056,7 +20168,7 @@ async function cmdEmitWorld(argv) {
   }
 }
 async function cmdEmitSignals(argv) {
-  const args = parseArgs26(argv);
+  const args = parseArgs27(argv);
   if (args.help || !args.inputPath) {
     process.stdout.write(
       "neuroverse worldmodel emit-signals <source.worldmodel.md> [--json]\n"
@@ -20068,7 +20180,7 @@ async function cmdEmitSignals(argv) {
   process.stdout.write(JSON.stringify(schema, null, 2) + "\n");
 }
 async function cmdEmitLenses(argv) {
-  const args = parseArgs26(argv);
+  const args = parseArgs27(argv);
   if (args.help || !args.inputPath) {
     process.stdout.write(
       "neuroverse worldmodel emit-lenses <source.worldmodel.md> [--json]\n"
@@ -20080,7 +20192,7 @@ async function cmdEmitLenses(argv) {
   process.stdout.write(JSON.stringify(lenses, null, 2) + "\n");
 }
 async function cmdEmitContexts(argv) {
-  const args = parseArgs26(argv);
+  const args = parseArgs27(argv);
   if (args.help || !args.inputPath) {
     process.stdout.write(
       "neuroverse worldmodel emit-contexts <source.worldmodel.md> [--json]\n"
@@ -20092,7 +20204,7 @@ async function cmdEmitContexts(argv) {
   process.stdout.write(JSON.stringify(contexts, null, 2) + "\n");
 }
 async function cmdEmitOverlaps(argv) {
-  const args = parseArgs26(argv);
+  const args = parseArgs27(argv);
   if (args.help || !args.inputPath) {
     process.stdout.write(
       "neuroverse worldmodel emit-overlaps <source.worldmodel.md> [--json]\n"
@@ -20103,7 +20215,7 @@ async function cmdEmitOverlaps(argv) {
   const overlaps = emitOverlapMap(model);
   process.stdout.write(JSON.stringify(overlaps, null, 2) + "\n");
 }
-async function main33(argv = process.argv.slice(2)) {
+async function main34(argv = process.argv.slice(2)) {
   const subcommand = argv[0] ?? "";
   const subArgs = argv.slice(1);
   switch (subcommand) {
@@ -22741,6 +22853,7 @@ async function auditGovernance(events, worldPath) {
     return emptyAudit(events.length, "Could not load compiled worldmodel for governance audit.");
   }
   const verdicts = [];
+  const crossings = [];
   for (const ce of events) {
     const intent = ce.event.content?.slice(0, 500) || ce.event.kind || "activity";
     const scope = ce.event.metadata?.scope || void 0;
@@ -22751,16 +22864,32 @@ async function auditGovernance(events, worldPath) {
           scope,
           actionCategory: mapKindToCategory(ce.event.kind)
         },
-        world
+        world,
+        { mode: "observe" }
       );
+      const shadow = result.shadowStatus ?? "ALLOW";
       verdicts.push({
         eventId: ce.event.id,
         domain: ce.domain,
-        status: result.status,
-        reason: result.reason,
+        status: shadow,
+        reason: result.shadowReason,
         ruleId: result.ruleId,
         warning: result.warning
       });
+      if (shadow !== "ALLOW") {
+        crossings.push({
+          eventId: ce.event.id,
+          timestamp: ce.event.timestamp,
+          kind: ce.event.kind,
+          actorId: ce.event.actor.id,
+          shadowStatus: shadow,
+          shadowReason: result.shadowReason,
+          ruleId: result.ruleId,
+          excerpt: intent.length > 280 ? intent.slice(0, 279) + "\u2026" : intent,
+          wouldHaveBlocked: true,
+          verdict: result
+        });
+      }
     } catch {
       verdicts.push({
         eventId: ce.event.id,
@@ -22779,6 +22908,7 @@ async function auditGovernance(events, worldPath) {
     human,
     cyber,
     joint,
+    crossings,
     summary: summary2
   };
 }
@@ -22834,6 +22964,7 @@ function emptyAudit(total, reason) {
     human: { allow: 0, modify: 0, block: 0, details: [] },
     cyber: { allow: 0, modify: 0, block: 0, details: [] },
     joint: { allow: 0, modify: 0, block: 0, details: [] },
+    crossings: [],
     summary: reason
   };
 }
@@ -23858,7 +23989,8 @@ Compare stated intent against actual GitHub activity. Gaps = drift.`;
     scores,
     eventCount: events.length,
     activeAdapters,
-    worldStack
+    worldStack,
+    governance
   };
 }
 function filterEventsByUser(events, username) {
@@ -24250,10 +24382,10 @@ var init_server = __esm({
 var radiant_exports = {};
 __export(radiant_exports, {
   checkScopeConsent: () => checkScopeConsent,
-  main: () => main34,
-  parseArgs: () => parseArgs27
+  main: () => main35,
+  parseArgs: () => parseArgs28
 });
-function parseArgs27(argv) {
+function parseArgs28(argv) {
   const result = {
     subcommand: void 0,
     lens: void 0,
@@ -24737,8 +24869,8 @@ ${DIM3}Files are yours. Edit freely.${RESET3}
 `
   );
 }
-async function main34(argv) {
-  const args = parseArgs27(argv);
+async function main35(argv) {
+  const args = parseArgs28(argv);
   if (args.help || !args.subcommand) {
     process.stdout.write(USAGE10 + "\n");
     return;
@@ -25065,7 +25197,7 @@ Governance:
   neuroverse mcp --world ./world/ --plan plan.json
   neuroverse test --world ./world/ --fuzz --count 50
 `.trim();
-async function main35() {
+async function main36() {
   const args = process.argv.slice(2);
   const command = args[0];
   const subArgs = args.slice(1);
@@ -25116,6 +25248,10 @@ async function main35() {
       const { main: guardMain } = await Promise.resolve().then(() => (init_guard(), guard_exports));
       return guardMain(subArgs);
     }
+    case "audit": {
+      const { main: auditMain } = await Promise.resolve().then(() => (init_audit(), audit_exports));
+      return auditMain(subArgs);
+    }
     case "test": {
       const { main: testMain } = await Promise.resolve().then(() => (init_test(), test_exports));
       return testMain(subArgs);
@@ -25235,7 +25371,7 @@ async function main35() {
     }
   }
 }
-main35().catch((e) => {
+main36().catch((e) => {
   process.stderr.write(`Fatal: ${e}
 `);
   process.exit(3);