@neuroverseos/governance 0.4.3 → 0.5.1

package/dist/{playground-3FLDGBET.js → playground-2EU5CFIH.js}

@@ -1,14 +1,14 @@
 import {
   validateWorld
 } from "./chunk-7P3S7MAY.js";
-import {
-  evaluateGuard
-} from "./chunk-ZAF6JH23.js";
 import {
   DEFAULT_BUNDLED_WORLD,
   loadBundledWorld,
   loadWorld
-} from "./chunk-I4RTIMLX.js";
+} from "./chunk-EQUAWNXW.js";
+import {
+  evaluateGuard
+} from "./chunk-ZAF6JH23.js";
 import "./chunk-QLPTHTVB.js";
 import "./chunk-QWGCMQQD.js";
 

package/dist/{redteam-HV6LMKEH.js → redteam-VK6OVHAE.js}

@@ -1,9 +1,9 @@
+import {
+  loadWorld
+} from "./chunk-EQUAWNXW.js";
 import {
   evaluateGuard
 } from "./chunk-ZAF6JH23.js";
-import {
-  loadWorld
-} from "./chunk-I4RTIMLX.js";
 import "./chunk-QLPTHTVB.js";
 import "./chunk-QWGCMQQD.js";
 

package/dist/{session-XZP2754M.js → session-NGA4DUPL.js}

@@ -2,10 +2,10 @@ import {
   SessionManager,
   runInteractiveMode,
   runPipeMode
-} from "./chunk-ZEIT2QLM.js";
+} from "./chunk-EK77AJAH.js";
 import "./chunk-D2UCV5AK.js";
+import "./chunk-EQUAWNXW.js";
 import "./chunk-ZAF6JH23.js";
-import "./chunk-I4RTIMLX.js";
 import "./chunk-QLPTHTVB.js";
 import "./chunk-QWGCMQQD.js";
 export {

package/dist/sign-RRELHKWM.js

@@ -0,0 +1,11 @@
+import {
+  buildManifest,
+  canonicalManifest,
+  main
+} from "./chunk-H3REGQRI.js";
+import "./chunk-QWGCMQQD.js";
+export {
+  buildManifest,
+  canonicalManifest,
+  main
+};

package/dist/{simulate-VT437EEL.js → simulate-4YNOBMES.js}

@@ -8,7 +8,7 @@ import {
 } from "./chunk-CYDMUJVZ.js";
 import {
   loadWorld
-} from "./chunk-I4RTIMLX.js";
+} from "./chunk-EQUAWNXW.js";
 import "./chunk-QWGCMQQD.js";
 
 // src/cli/simulate.ts

package/dist/{test-4WTX6RKQ.js → test-HDBPMQTG.js}

@@ -1,9 +1,9 @@
+import {
+  loadWorld
+} from "./chunk-EQUAWNXW.js";
 import {
   evaluateGuard
 } from "./chunk-ZAF6JH23.js";
-import {
-  loadWorld
-} from "./chunk-I4RTIMLX.js";
 import "./chunk-QLPTHTVB.js";
 import "./chunk-QWGCMQQD.js";
 

package/dist/{validate-M52DX22Y.js → validate-6MFQZ2EG.js}

@@ -6,7 +6,7 @@ import {
 } from "./chunk-7P3S7MAY.js";
 import {
   loadWorld
-} from "./chunk-I4RTIMLX.js";
+} from "./chunk-EQUAWNXW.js";
 import "./chunk-QWGCMQQD.js";
 
 // src/cli/validate.ts

package/dist/verify-6AVTWX75.js

@@ -0,0 +1,151 @@
+import {
+  buildManifest,
+  canonicalManifest
+} from "./chunk-H3REGQRI.js";
+import "./chunk-QWGCMQQD.js";
+
+// src/cli/verify.ts
+import { createHash, verify } from "crypto";
+import { readFileSync, existsSync } from "fs";
+import { join } from "path";
+import { homedir } from "os";
+var USAGE = `
+neuroverse verify \u2014 Verify a signed world artifact
+
+Usage:
+  neuroverse verify --world <dir> [--key <path>]
+
+Options:
+  --world <dir>    World directory to verify (required)
+  --key <path>     Public key path (default: ~/.neuroverse/keys/neuroverse.pub)
+  --json           Output result as JSON
+
+Exit codes:
+  0  Valid \u2014 world matches signature
+  1  Invalid \u2014 signature mismatch, tampered files, or missing signature
+
+Examples:
+  neuroverse verify --world ./world/
+  neuroverse verify --world ./world/ --key ./keys/production.pub
+`.trim();
+function parseArgs(argv) {
+  let worldPath = "";
+  let keyPath = join(homedir(), ".neuroverse", "keys", "neuroverse.pub");
+  let json = false;
+  let help = false;
+  for (let i = 0; i < argv.length; i++) {
+    const arg = argv[i];
+    if (arg === "--world" && argv[i + 1]) {
+      worldPath = argv[++i];
+    } else if (arg === "--key" && argv[i + 1]) {
+      keyPath = argv[++i];
+    } else if (arg === "--json") {
+      json = true;
+    } else if (arg === "--help" || arg === "-h") {
+      help = true;
+    }
+  }
+  return { worldPath, keyPath, json, help };
+}
+async function main(argv = process.argv.slice(2)) {
+  const args = parseArgs(argv);
+  if (args.help) {
+    process.stdout.write(USAGE + "\n");
+    return;
+  }
+  if (!args.worldPath) {
+    process.stderr.write("Error: --world <dir> is required.\n");
+    process.exit(1);
+  }
+  const result = {
+    valid: false,
+    worldPath: args.worldPath,
+    fileCount: 0,
+    errors: []
+  };
+  const sigPath = join(args.worldPath, ".nv-signature.json");
+  if (!existsSync(sigPath)) {
+    result.errors.push("No .nv-signature.json found \u2014 world is unsigned.");
+    outputResult(result, args.json);
+    process.exit(1);
+  }
+  let artifact;
+  try {
+    artifact = JSON.parse(readFileSync(sigPath, "utf-8"));
+  } catch {
+    result.errors.push("Cannot parse .nv-signature.json \u2014 file is corrupt.");
+    outputResult(result, args.json);
+    process.exit(1);
+    return;
+  }
+  result.signedAt = artifact.signedAt;
+  result.fileCount = Object.keys(artifact.files).length;
+  let publicKey;
+  try {
+    publicKey = readFileSync(args.keyPath, "utf-8");
+  } catch {
+    result.errors.push(`Cannot read public key at ${args.keyPath}`);
+    outputResult(result, args.json);
+    process.exit(1);
+    return;
+  }
+  const currentFiles = buildManifest(args.worldPath);
+  for (const file of Object.keys(currentFiles)) {
+    if (!(file in artifact.files)) {
+      result.errors.push(`Added: ${file} (not in signature)`);
+    }
+  }
+  for (const [file, hash] of Object.entries(artifact.files)) {
+    if (!(file in currentFiles)) {
+      result.errors.push(`Missing: ${file} (was in signature)`);
+    } else if (currentFiles[file] !== hash) {
+      result.errors.push(`Changed: ${file} (hash mismatch)`);
+    }
+  }
+  if (result.errors.length > 0) {
+    outputResult(result, args.json);
+    process.exit(1);
+    return;
+  }
+  const canonical = canonicalManifest(artifact.files);
+  const manifestHash = createHash("sha256").update(canonical).digest("hex");
+  if (manifestHash !== artifact.manifestHash) {
+    result.errors.push("Manifest hash mismatch \u2014 signature metadata is corrupt.");
+    outputResult(result, args.json);
+    process.exit(1);
+    return;
+  }
+  const isValid = verify(null, Buffer.from(manifestHash), publicKey, Buffer.from(artifact.signature, "base64"));
+  if (!isValid) {
+    result.errors.push("Signature verification failed \u2014 wrong key or tampered manifest.");
+    outputResult(result, args.json);
+    process.exit(1);
+    return;
+  }
+  result.valid = true;
+  outputResult(result, args.json);
+}
+function outputResult(result, json) {
+  if (json) {
+    process.stdout.write(JSON.stringify(result, null, 2) + "\n");
+    return;
+  }
+  if (result.valid) {
+    process.stdout.write(`VALID \u2014 ${result.fileCount} files verified
+`);
+    process.stdout.write(`  Signed at: ${result.signedAt}
+`);
+    process.stdout.write(`  World: ${result.worldPath}
+`);
+  } else {
+    process.stdout.write(`INVALID \u2014 signature verification failed
+`);
+    for (const error of result.errors) {
+      process.stdout.write(`  ${error}
+`);
+    }
+  }
+}
+export {
+  main
+};

package/dist/{world-O4HTQPDP.js → world-H5WVURKU.js}

@@ -10,7 +10,7 @@ import {
 } from "./chunk-AKW5YVCE.js";
 import {
   loadWorld
-} from "./chunk-I4RTIMLX.js";
+} from "./chunk-EQUAWNXW.js";
 import "./chunk-QWGCMQQD.js";
 
 // src/cli/world.ts

package/dist/{world-loader-YTYFOP7D.js → world-loader-J47PCPDZ.js}

@@ -3,7 +3,7 @@ import {
   loadBundledWorld,
   loadWorld,
   loadWorldFromDirectory
-} from "./chunk-I4RTIMLX.js";
+} from "./chunk-EQUAWNXW.js";
 import "./chunk-QWGCMQQD.js";
 export {
   DEFAULT_BUNDLED_WORLD,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@neuroverseos/governance",
-  "version": "0.4.3",
+  "version": "0.5.1",
   "description": "Deterministic governance engine for AI agents — enforce worlds (permanent rules) and plans (mission constraints) with full audit trace",
   "license": "Apache-2.0",
   "type": "module",
@@ -60,31 +60,43 @@
     },
     "./adapters/mentraos": {
       "types": "./dist/adapters/mentraos.d.ts",
-      "import": "./dist/adapters/mentraos.js"
+      "import": "./dist/adapters/mentraos.js",
+      "require": "./dist/adapters/mentraos.cjs"
     },
     "./adapters/github": {
       "types": "./dist/adapters/github.d.ts",
-      "import": "./dist/adapters/github.js"
+      "import": "./dist/adapters/github.js",
+      "require": "./dist/adapters/github.cjs"
     },
     "./engine/guard-engine": {
       "types": "./dist/engine/guard-engine.d.ts",
-      "import": "./dist/engine/guard-engine.js"
+      "import": "./dist/engine/guard-engine.js",
+      "require": "./dist/engine/guard-engine.cjs"
     },
     "./engine/simulate-engine": {
       "types": "./dist/engine/simulate-engine.d.ts",
-      "import": "./dist/engine/simulate-engine.js"
+      "import": "./dist/engine/simulate-engine.js",
+      "require": "./dist/engine/simulate-engine.cjs"
     },
     "./engine/bootstrap-parser": {
       "types": "./dist/engine/bootstrap-parser.d.ts",
-      "import": "./dist/engine/bootstrap-parser.js"
+      "import": "./dist/engine/bootstrap-parser.js",
+      "require": "./dist/engine/bootstrap-parser.cjs"
     },
     "./engine/bootstrap-emitter": {
       "types": "./dist/engine/bootstrap-emitter.d.ts",
-      "import": "./dist/engine/bootstrap-emitter.js"
+      "import": "./dist/engine/bootstrap-emitter.js",
+      "require": "./dist/engine/bootstrap-emitter.cjs"
     },
     "./types": {
       "types": "./dist/types.d.ts",
-      "import": "./dist/types.js"
+      "import": "./dist/types.js",
+      "require": "./dist/types.cjs"
+    },
+    "./admin": {
+      "types": "./dist/admin/index.d.ts",
+      "import": "./dist/admin/index.js",
+      "require": "./dist/admin/index.cjs"
     }
   },
   "bin": {
@@ -107,14 +119,14 @@
   ],
   "scripts": {
     "prepare": "npm run build",
-    "build": "tsup src/index.ts src/types.ts src/cli/neuroverse.ts src/cli/plan.ts src/cli/run.ts src/adapters/index.ts src/adapters/langchain.ts src/adapters/openai.ts src/adapters/openclaw.ts src/adapters/express.ts src/adapters/autoresearch.ts src/adapters/deep-agents.ts src/adapters/mentraos.ts src/adapters/github.ts src/engine/guard-engine.ts src/engine/simulate-engine.ts src/engine/bootstrap-parser.ts src/engine/bootstrap-emitter.ts src/spatial/index.ts --format esm,cjs --dts --clean && npm run build:browser && cp src/worlds/*.nv-world.md dist/worlds/ && cp src/spatial/zones/*.nv-world.md dist/worlds/ && npm run build:viz",
+    "build": "tsup src/index.ts src/types.ts src/cli/neuroverse.ts src/cli/plan.ts src/cli/run.ts src/adapters/index.ts src/adapters/langchain.ts src/adapters/openai.ts src/adapters/openclaw.ts src/adapters/express.ts src/adapters/autoresearch.ts src/adapters/deep-agents.ts src/adapters/mentraos.ts src/adapters/github.ts src/engine/guard-engine.ts src/engine/simulate-engine.ts src/engine/bootstrap-parser.ts src/engine/bootstrap-emitter.ts src/spatial/index.ts src/admin/index.ts --format esm,cjs --dts --clean && npm run build:browser && cp src/worlds/*.nv-world.md dist/worlds/ && cp src/spatial/zones/*.nv-world.md dist/worlds/ && npm run build:viz",
     "build:browser": "tsup src/browser.ts --format iife --global-name NeuroVerse --outDir dist --no-dts",
     "build:viz": "vite build",
     "dev:viz": "vite dev",
     "prebuild": "mkdir -p dist/worlds",
     "dev": "tsup src/index.ts src/cli/neuroverse.ts --format esm,cjs --dts --watch",
     "prepublishOnly": "npm run build",
-    "test": "vitest run",
+    "test": "node scripts-vitest-runner.mjs",
     "test:watch": "vitest"
   },
   "devDependencies": {

package/dist/{behavioral-SLW7ALEK.js → behavioral-SPWPGYXL.js}

@@ -1,11 +1,11 @@
-import {
-  readAuditLog
-} from "./chunk-2VAWP6FI.js";
 import {
   adaptationFromVerdict,
   detectBehavioralPatterns,
   generateAdaptationNarrative
 } from "./chunk-CNSO6XW5.js";
+import {
+  readAuditLog
+} from "./chunk-2VAWP6FI.js";
 import "./chunk-ZAF6JH23.js";
 import "./chunk-QLPTHTVB.js";
 import "./chunk-QWGCMQQD.js";

package/dist/{bootstrap-2OW5ZLBL.js → bootstrap-IP5QMC3Q.js}

@@ -1,12 +1,12 @@
 import {
   BOOTSTRAP_EXIT_CODES
 } from "./chunk-4NGDRRQH.js";
-import {
-  emitWorldDefinition
-} from "./chunk-YPCVY4GS.js";
 import {
   parseWorldMarkdown
 } from "./chunk-3NZMMSOW.js";
+import {
+  emitWorldDefinition
+} from "./chunk-YPCVY4GS.js";
 import "./chunk-QWGCMQQD.js";
 
 // src/cli/bootstrap.ts

package/dist/{chunk-DA5MHFRR.js → chunk-NTHXZAW4.js}

@@ -1,9 +1,9 @@
-import {
-  simulateWorld
-} from "./chunk-CYDMUJVZ.js";
 import {
   validateWorld
 } from "./chunk-7P3S7MAY.js";
+import {
+  simulateWorld
+} from "./chunk-CYDMUJVZ.js";
 
 // src/engine/improve-engine.ts
 function improveWorld(world) {

package/dist/{chunk-FHXXD2TI.js → chunk-QZ666FCV.js}

@@ -1,18 +1,18 @@
-import {
-  createProvider
-} from "./chunk-INWQHLPS.js";
 import {
   loadConfig
 } from "./chunk-OT6PXH54.js";
+import {
+  createProvider
+} from "./chunk-INWQHLPS.js";
 import {
   validateWorld
 } from "./chunk-7P3S7MAY.js";
-import {
-  emitWorldDefinition
-} from "./chunk-YPCVY4GS.js";
 import {
   parseWorldMarkdown
 } from "./chunk-3NZMMSOW.js";
+import {
+  emitWorldDefinition
+} from "./chunk-YPCVY4GS.js";
 
 // src/engine/derive-normalizer.ts
 function findSections(lines) {

package/dist/{configure-ai-LL3VAPQW.js → configure-ai-5MP5DWTT.js}

@@ -1,15 +1,15 @@
 import {
   CONFIGURE_AI_EXIT_CODES
 } from "./chunk-FMSTRBBS.js";
-import {
-  createProvider
-} from "./chunk-INWQHLPS.js";
 import {
   getConfigPath,
   loadConfig,
   redactConfig,
   saveConfig
 } from "./chunk-OT6PXH54.js";
+import {
+  createProvider
+} from "./chunk-INWQHLPS.js";
 import "./chunk-QWGCMQQD.js";
 
 // src/cli/configure-ai.ts

package/dist/{decision-flow-3K4D72G4.js → decision-flow-IJPNMVQK.js}

@@ -1,10 +1,10 @@
-import {
-  readAuditLog
-} from "./chunk-2VAWP6FI.js";
 import {
   generateDecisionFlow,
   renderDecisionFlow
 } from "./chunk-D2UCV5AK.js";
+import {
+  readAuditLog
+} from "./chunk-2VAWP6FI.js";
 import "./chunk-ZAF6JH23.js";
 import "./chunk-QLPTHTVB.js";
 import "./chunk-QWGCMQQD.js";