@neuroverseos/governance 0.2.2 → 0.2.3

package/openapi.yaml

@@ -0,0 +1,230 @@
+openapi: 3.1.0
+info:
+  title: NeuroVerse Governance API
+  version: 0.2.2
+  description: |
+    Deterministic governance engine for AI agents.
+    Evaluates actions against world rules and plan constraints.
+    Returns ALLOW, BLOCK, or PAUSE verdicts. No LLM in the evaluation loop.
+  license:
+    name: Apache-2.0
+    url: https://www.apache.org/licenses/LICENSE-2.0
+  contact:
+    name: NeuroverseOS
+    url: https://neuroverseos.com
+
+servers:
+  - url: http://localhost:4242
+    description: Local governance server (neuroverse playground or Express middleware)
+
+paths:
+  /api/guard:
+    post:
+      operationId: evaluateGuard
+      summary: Evaluate an agent action against world governance rules
+      description: |
+        Synchronously evaluates whether an action is allowed by the loaded world.
+        Returns a verdict with status (ALLOW/BLOCK/PAUSE), matched rule, and optional trace.
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/GuardEvent'
+            examples:
+              block_example:
+                summary: Action that gets blocked
+                value:
+                  intent: "delete all customer tables"
+                  tool: "database"
+                  scope: "production"
+              allow_example:
+                summary: Action that is allowed
+                value:
+                  intent: "read user profile"
+                  tool: "database"
+                  scope: "users"
+      responses:
+        '200':
+          description: Action is allowed
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/GuardVerdict'
+        '403':
+          description: Action is blocked by governance policy
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/BlockResponse'
+
+  /api/plan/check:
+    post:
+      operationId: checkPlan
+      summary: Check an action against the active plan
+      description: |
+        Evaluates whether an action matches a step in the active plan.
+        Returns ON_PLAN, OFF_PLAN, CONSTRAINT_VIOLATED, or PLAN_COMPLETE.
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/GuardEvent'
+      responses:
+        '200':
+          description: Plan verdict
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/PlanVerdict'
+
+  /api/plan/advance:
+    post:
+      operationId: advancePlan
+      summary: Mark a plan step as completed
+      description: |
+        Advances a step in the active plan. In verified mode, steps with
+        a `verify` field require evidence (type + proof) to advance.
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              type: object
+              required:
+                - stepId
+              properties:
+                stepId:
+                  type: string
+                  description: ID of the step to advance
+                evidence:
+                  $ref: '#/components/schemas/StepEvidence'
+      responses:
+        '200':
+          description: Step advanced successfully
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/AdvanceResult'
+
+  /api/plan/status:
+    get:
+      operationId: getPlanStatus
+      summary: Get current plan progress
+      responses:
+        '200':
+          description: Plan progress
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/PlanProgress'
+
+components:
+  schemas:
+    GuardEvent:
+      type: object
+      required:
+        - intent
+      properties:
+        intent:
+          type: string
+          description: What the agent wants to do
+        tool:
+          type: string
+          description: Tool being invoked (e.g., "database", "http", "shell")
+        scope:
+          type: string
+          description: Resource or scope being accessed
+        actionCategory:
+          type: string
+          enum: [read, write, delete, execute, communicate, other]
+        direction:
+          type: string
+          enum: [input, output]
+        args:
+          type: object
+          additionalProperties: true
+
+    GuardVerdict:
+      type: object
+      properties:
+        status:
+          type: string
+          enum: [ALLOW, BLOCK, PAUSE]
+        reason:
+          type: string
+        ruleId:
+          type: string
+        invariantId:
+          type: string
+        trace:
+          type: object
+          description: Full evaluation trace (when trace mode is enabled)
+
+    BlockResponse:
+      type: object
+      properties:
+        error:
+          type: string
+          example: Governance policy violation
+        reason:
+          type: string
+        ruleId:
+          type: string
+        status:
+          type: string
+          enum: [BLOCK, PAUSE]
+
+    PlanVerdict:
+      type: object
+      properties:
+        allowed:
+          type: boolean
+        status:
+          type: string
+          enum: [ON_PLAN, OFF_PLAN, CONSTRAINT_VIOLATED, PLAN_COMPLETE]
+        matchedStep:
+          type: string
+        closestStep:
+          type: string
+        reason:
+          type: string
+        progress:
+          $ref: '#/components/schemas/PlanProgress'
+
+    PlanProgress:
+      type: object
+      properties:
+        completed:
+          type: integer
+        total:
+          type: integer
+        percentage:
+          type: integer
+
+    StepEvidence:
+      type: object
+      required:
+        - type
+        - proof
+      properties:
+        type:
+          type: string
+          description: Must match the step's `verify` field
+        proof:
+          type: string
+          description: URL, hash, output snippet, or other proof
+        timestamp:
+          type: string
+          format: date-time
+
+    AdvanceResult:
+      type: object
+      properties:
+        success:
+          type: boolean
+        reason:
+          type: string
+        evidence:
+          $ref: '#/components/schemas/StepEvidence'

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@neuroverseos/governance",
-  "version": "0.2.2",
+  "version": "0.2.3",
   "description": "Deterministic governance engine for AI agents — enforce worlds (permanent rules) and plans (mission constraints) with full audit trace",
   "license": "Apache-2.0",
   "type": "module",
@@ -38,6 +38,16 @@
       "import": "./dist/adapters/express.js",
       "require": "./dist/adapters/express.cjs"
     },
+    "./adapters/autoresearch": {
+      "types": "./dist/adapters/autoresearch.d.ts",
+      "import": "./dist/adapters/autoresearch.js",
+      "require": "./dist/adapters/autoresearch.cjs"
+    },
+    "./adapters/deep-agents": {
+      "types": "./dist/adapters/deep-agents.d.ts",
+      "import": "./dist/adapters/deep-agents.js",
+      "require": "./dist/adapters/deep-agents.cjs"
+    },
     "./plan": {
       "types": "./dist/index.d.ts",
       "import": "./dist/index.js",
@@ -51,10 +61,14 @@
     "dist",
     "dist/worlds",
     "LICENSE.md",
-    "README.md"
+    "README.md",
+    "AGENTS.md",
+    "llms.txt",
+    "openapi.yaml",
+    ".well-known"
   ],
   "scripts": {
-    "build": "tsup src/index.ts src/cli/neuroverse.ts src/cli/plan.ts src/cli/run.ts src/adapters/index.ts src/adapters/langchain.ts src/adapters/openai.ts src/adapters/openclaw.ts src/adapters/express.ts --format esm,cjs --dts --clean && cp src/worlds/derivation-world.nv-world.md dist/worlds/derivation-world.nv-world.md",
+    "build": "tsup src/index.ts src/cli/neuroverse.ts src/cli/plan.ts src/cli/run.ts src/adapters/index.ts src/adapters/langchain.ts src/adapters/openai.ts src/adapters/openclaw.ts src/adapters/express.ts src/adapters/autoresearch.ts src/adapters/deep-agents.ts --format esm,cjs --dts --clean && cp src/worlds/derivation-world.nv-world.md dist/worlds/derivation-world.nv-world.md && cp src/worlds/autoresearch.nv-world.md dist/worlds/autoresearch.nv-world.md && cp src/worlds/coding-agent.nv-world.md dist/worlds/coding-agent.nv-world.md",
     "prebuild": "mkdir -p dist/worlds",
     "dev": "tsup src/index.ts src/cli/neuroverse.ts --format esm,cjs --dts --watch",
     "test": "vitest run",
@@ -82,10 +96,18 @@
     "ai-safety",
     "openclaw-plugin",
     "langchain-plugin",
+    "deep-agents",
+    "coding-agent-governance",
     "drift-prevention",
     "mcp",
     "mcp-server",
-    "model-context-protocol"
+    "model-context-protocol",
+    "autoresearch",
+    "research-agents",
+    "deep-agents",
+    "coding-agents",
+    "ai-firewall",
+    "agent-guardrails"
   ],
   "repository": {
     "type": "git",

package/dist/{chunk-GR6DGCZ2.js → chunk-BMOXICAB.js}

@@ -1,9 +1,9 @@
-import {
-  simulateWorld
-} from "./chunk-FYS2CBUW.js";
 import {
   validateWorld
 } from "./chunk-7P3S7MAY.js";
+import {
+  simulateWorld
+} from "./chunk-FYS2CBUW.js";
 
 // src/engine/improve-engine.ts
 function improveWorld(world) {

package/dist/{chunk-NF5POFCI.js → chunk-ORJ3NOE6.js}

@@ -1,13 +1,13 @@
 import {
   createProvider
 } from "./chunk-Q6O7ZLO2.js";
-import {
-  loadConfig
-} from "./chunk-OT6PXH54.js";
 import {
   emitWorldDefinition,
   parseWorldMarkdown
 } from "./chunk-XPDMYECO.js";
+import {
+  loadConfig
+} from "./chunk-OT6PXH54.js";
 import {
   validateWorld
 } from "./chunk-7P3S7MAY.js";

package/dist/{world-LAXO6DOX.js → world-BFJCIQSH.js}

@@ -1,3 +1,6 @@
+import {
+  validateWorld
+} from "./chunk-7P3S7MAY.js";
 import {
   describeActiveWorld,
   getActiveWorldName,
@@ -5,9 +8,6 @@ import {
   resolveWorldPath,
   setActiveWorld
 } from "./chunk-AKW5YVCE.js";
-import {
-  validateWorld
-} from "./chunk-7P3S7MAY.js";
 import {
   loadWorld
 } from "./chunk-JZPQGIKR.js";