@thecorporation/corp-tools 26.3.21 → 26.3.23

package/dist/index.d.ts

@@ -14,6 +14,7 @@ interface CorpConfig {
         email: string;
     };
     active_entity_id: string;
+    data_dir: string;
     active_entity_ids?: Record<string, string>;
     last_references?: Record<string, string>;
     [key: string]: unknown;
@@ -3212,7 +3213,7 @@ type DigestTriggerResponse = components["schemas"]["DigestTriggerResponse"];
 type InvoiceResponse = components["schemas"]["InvoiceResponse"];
 
 declare class SessionExpiredError extends Error {
-    constructor();
+    constructor(detail?: string);
 }
 declare function provisionWorkspace(apiUrl: string, name?: string): Promise<ApiRecord>;
 declare class CorpAPIClient {
@@ -3288,6 +3289,13 @@ declare class CorpAPIClient {
     computeResolution(meetingId: string, itemId: string, entityId: string, data: ApiRecord): Promise<ResolutionResponse>;
     attachResolutionDocument(meetingId: string, resolutionId: string, data: ApiRecord): Promise<ResolutionResponse>;
     writtenConsent(data: ApiRecord): Promise<WrittenConsentResponse>;
+    getGovernanceMode(entityId: string): Promise<ApiRecord>;
+    setGovernanceMode(data: ApiRecord): Promise<ApiRecord>;
+    resignSeat(seatId: string, entityId: string): Promise<ApiRecord>;
+    createGovernanceIncident(data: ApiRecord): Promise<ApiRecord>;
+    listGovernanceIncidents(entityId: string): Promise<ApiRecord[]>;
+    resolveGovernanceIncident(incidentId: string, data: ApiRecord): Promise<ApiRecord>;
+    getGovernanceProfile(entityId: string): Promise<ApiRecord>;
     listAgendaItems(meetingId: string, entityId: string): Promise<AgendaItemResponse[]>;
     listVotes(meetingId: string, itemId: string, entityId: string): Promise<VoteResponse[]>;
     getEntityDocuments(entityId: string): Promise<DocumentResponse[]>;
@@ -3307,8 +3315,12 @@ declare class CorpAPIClient {
     runPayroll(data: ApiRecord): Promise<ApiRecord>;
     submitPayment(data: ApiRecord): Promise<ApiRecord>;
     openBankAccount(data: ApiRecord): Promise<ApiRecord>;
+    activateBankAccount(bankAccountId: string, entityId: string): Promise<ApiRecord>;
     classifyContractor(data: ApiRecord): Promise<ApiRecord>;
     reconcileLedger(data: ApiRecord): Promise<ApiRecord>;
+    getFinancialStatements(entityId: string, params?: Record<string, string>): Promise<ApiRecord>;
+    getDilutionPreview(entityId: string, roundId: string): Promise<ApiRecord>;
+    getControlMap(entityId: string, rootEntityId: string): Promise<ApiRecord>;
     listTaxFilings(entityId: string): Promise<ApiRecord[]>;
     listDeadlines(entityId: string): Promise<ApiRecord[]>;
     listContractorClassifications(entityId: string): Promise<ApiRecord[]>;
@@ -3346,6 +3358,10 @@ declare class CorpAPIClient {
     sendAgentMessage(id: string, message: string): Promise<ApiRecord>;
     addAgentSkill(id: string, data: ApiRecord): Promise<ApiRecord>;
     listSupportedModels(): Promise<ApiRecord[]>;
+    getAgentExecution(agentId: string, executionId: string): Promise<ApiRecord>;
+    getAgentExecutionResult(agentId: string, executionId: string): Promise<ApiRecord>;
+    getAgentExecutionLogs(agentId: string, executionId: string): Promise<ApiRecord>;
+    killAgentExecution(agentId: string, executionId: string): Promise<ApiRecord>;
     createGovernanceBody(data: ApiRecord): Promise<ApiRecord>;
     createGovernanceSeat(bodyId: string, entityId: string, data: ApiRecord): Promise<ApiRecord>;
     listWorkItems(entityId: string, params?: Record<string, string>): Promise<ApiRecord[]>;
@@ -3356,8 +3372,18 @@ declare class CorpAPIClient {
     releaseWorkItem(entityId: string, workItemId: string): Promise<ApiRecord>;
     cancelWorkItem(entityId: string, workItemId: string): Promise<ApiRecord>;
     listApiKeys(): Promise<ApiRecord[]>;
+    createApiKey(data: ApiRecord): Promise<ApiRecord>;
+    revokeApiKey(keyId: string): Promise<void>;
+    rotateApiKey(keyId: string): Promise<ApiRecord>;
     assignObligation(obligationId: string, contactId: string): Promise<ApiRecord>;
     getConfig(): Promise<ApiRecord>;
+    listServiceCatalog(): Promise<ApiRecord[]>;
+    createServiceRequest(data: ApiRecord): Promise<ApiRecord>;
+    getServiceRequest(id: string, entityId: string): Promise<ApiRecord>;
+    listServiceRequests(entityId: string): Promise<ApiRecord[]>;
+    beginServiceCheckout(id: string, data: ApiRecord): Promise<ApiRecord>;
+    fulfillServiceRequest(id: string, data: ApiRecord): Promise<ApiRecord>;
+    cancelServiceRequest(id: string, data: ApiRecord): Promise<ApiRecord>;
     submitFeedback(message: string, category?: string, email?: string): Promise<{
         feedback_id: string;
         submitted_at: string;
@@ -3589,4 +3615,16 @@ type WorkItemStatus = (typeof WorkItemStatus)[number];
 declare const WorkflowType: readonly ["transfer", "fundraising"];
 type WorkflowType = (typeof WorkflowType)[number];
 
-export { type AcceptEquityRoundRequest, type AcceptRoundRequest, AccountType, type AddFounderRequest, type AddFounderResponse, type AddSecurityRequest, type AgendaItemResponse, AgendaItemStatus, AgendaItemType, type AgentResponse, AgentStatus, AntiDilutionMethod, type ApiRecord, type ApplyEquityRoundTermsRequest, type ApplyRoundTermsRequest, AssigneeType, type AttachResolutionDocumentRequest, AuthoritySource, AuthorityTier, BankAccountStatus, BankAccountType, type BoardApproveEquityRoundRequest, type BoardApproveRoundRequest, BodyStatus, BodyType, CapTableAccess, CapTableBasis, type CapTableHolderSummary, type CapTableInstrument, type CapTableInstrumentSummary, type CapTableResponse, type CastVoteRequest, ClassificationResult, type ComputeResolutionRequest, ContactCategory, type ContactProfileResponse, type ContactResponse, ContactStatus, ContactType, ContractStatus, ContractTemplateType, ControlType, type ConveneMeetingRequest, type ConvertEntityRequest, CorpAPIClient, type CorpConfig, type CreateAgentRequest, type CreateContactRequest, type CreateEquityRoundRequest, type CreateExecutionIntentRequest, type CreateFormationRequest, type CreatePendingFormationRequest, type CreateRoundRequest, Currency, DeadlineSeverity, DeadlineStatus, type DigestSummary, type DigestTriggerResponse, type DissolveEntityRequest, DistributionStatus, DistributionType, DocumentRequestStatus, type DocumentResponse, DocumentStatus, type DocumentSummary, DocumentType, EntityType, type EquityRoundResponse, EquityRoundStatus, EscalationStatus, type ExecuteRoundConversionRequest, type FinalizeAgendaItemRequest, type FormationGatesResponse, type FormationResponse, FormationState, FormationStatus, type FormationStatusResponse, type FormationWithCapTableResponse, GENERATED_TOOL_DEFINITIONS, GlAccountCode, GovernanceAuditEventType, type GovernanceBodyResponse, GovernanceMode, type GovernanceSeatResponse, GovernanceTriggerSource, GovernanceTriggerType, GoverningDocType, GrantType, HolderType, HttpMethod, IncidentSeverity, IncidentStatus, InstrumentKind, InstrumentStatus, type IntentResponse, IntentStatus, InvestorType, type InvoiceResponse, InvoiceStatus, type IssueStagedRoundResponse, JournalEntryStatus, type LLMResponse, LegalEntityRole, type MeetingResponse, MeetingStatus, MeetingType, MemberRole, NetworkEgress, type ObligationResponse, ObligationStatus, type ObligationsSummaryResponse, OfficerTitle, PaymentMethod, PaymentStatus, PayrollStatus, type PendingFormationResponse, PositionStatus, type PreviewRoundConversionRequest, QuorumStatus, QuorumThreshold, READ_ONLY_TOOLS, ReceiptStatus, ReconciliationStatus, Recurrence, ReferenceKind, type ResolutionResponse, ResolutionType, RiskLevel, type RoundResponse, SYSTEM_PROMPT_BASE, SafeStatus, SafeType, type ScheduleMeetingRequest, Scope, SeatRole, SeatStatus, SessionExpiredError, Side, type StartStagedRoundRequest, TOOL_DEFINITIONS, TOOL_REGISTRY, TaxFilingStatus, type ToolCall, type ToolContext, TransactionPacketStatus, TransferStatus, TransferType, TransfereeRights, Transport, type UpdateAgentRequest, type UpdateContactRequest, ValuationMethodology, ValuationStatus, ValuationType, type VoteResponse, VoteValue, VotingMethod, WorkItemActorTypeValue, WorkItemStatus, WorkflowType, type WorkspaceContactSummary, type WorkspaceEntitySummary, type WorkspaceStatusResponse, type WrittenConsentRequest, type WrittenConsentResponse, describeToolCall, ensureSafeInstrument, executeTool, formatConfigSection, isWriteTool, provisionWorkspace };
+declare function generateFernetKey(): string;
+declare function generateSecret(length?: number): string;
+declare function loadEnvFile(path: string): void;
+declare function ensureEnvFile(envPath: string): void;
+
+declare function resolveBinaryPath(processUrl: string): string;
+interface ProcessRequestOptions {
+    dataDir?: string;
+}
+declare function processRequest(processUrl: string, method: string, pathWithQuery: string, headers: Record<string, string>, body?: string, options?: ProcessRequestOptions): Response;
+declare function resetCache(): void;
+
+export { type AcceptEquityRoundRequest, type AcceptRoundRequest, AccountType, type AddFounderRequest, type AddFounderResponse, type AddSecurityRequest, type AgendaItemResponse, AgendaItemStatus, AgendaItemType, type AgentResponse, AgentStatus, AntiDilutionMethod, type ApiRecord, type ApplyEquityRoundTermsRequest, type ApplyRoundTermsRequest, AssigneeType, type AttachResolutionDocumentRequest, AuthoritySource, AuthorityTier, BankAccountStatus, BankAccountType, type BoardApproveEquityRoundRequest, type BoardApproveRoundRequest, BodyStatus, BodyType, CapTableAccess, CapTableBasis, type CapTableHolderSummary, type CapTableInstrument, type CapTableInstrumentSummary, type CapTableResponse, type CastVoteRequest, ClassificationResult, type ComputeResolutionRequest, ContactCategory, type ContactProfileResponse, type ContactResponse, ContactStatus, ContactType, ContractStatus, ContractTemplateType, ControlType, type ConveneMeetingRequest, type ConvertEntityRequest, CorpAPIClient, type CorpConfig, type CreateAgentRequest, type CreateContactRequest, type CreateEquityRoundRequest, type CreateExecutionIntentRequest, type CreateFormationRequest, type CreatePendingFormationRequest, type CreateRoundRequest, Currency, DeadlineSeverity, DeadlineStatus, type DigestSummary, type DigestTriggerResponse, type DissolveEntityRequest, DistributionStatus, DistributionType, DocumentRequestStatus, type DocumentResponse, DocumentStatus, type DocumentSummary, DocumentType, EntityType, type EquityRoundResponse, EquityRoundStatus, EscalationStatus, type ExecuteRoundConversionRequest, type FinalizeAgendaItemRequest, type FormationGatesResponse, type FormationResponse, FormationState, FormationStatus, type FormationStatusResponse, type FormationWithCapTableResponse, GENERATED_TOOL_DEFINITIONS, GlAccountCode, GovernanceAuditEventType, type GovernanceBodyResponse, GovernanceMode, type GovernanceSeatResponse, GovernanceTriggerSource, GovernanceTriggerType, GoverningDocType, GrantType, HolderType, HttpMethod, IncidentSeverity, IncidentStatus, InstrumentKind, InstrumentStatus, type IntentResponse, IntentStatus, InvestorType, type InvoiceResponse, InvoiceStatus, type IssueStagedRoundResponse, JournalEntryStatus, type LLMResponse, LegalEntityRole, type MeetingResponse, MeetingStatus, MeetingType, MemberRole, NetworkEgress, type ObligationResponse, ObligationStatus, type ObligationsSummaryResponse, OfficerTitle, PaymentMethod, PaymentStatus, PayrollStatus, type PendingFormationResponse, PositionStatus, type PreviewRoundConversionRequest, type ProcessRequestOptions, QuorumStatus, QuorumThreshold, READ_ONLY_TOOLS, ReceiptStatus, ReconciliationStatus, Recurrence, ReferenceKind, type ResolutionResponse, ResolutionType, RiskLevel, type RoundResponse, SYSTEM_PROMPT_BASE, SafeStatus, SafeType, type ScheduleMeetingRequest, Scope, SeatRole, SeatStatus, SessionExpiredError, Side, type StartStagedRoundRequest, TOOL_DEFINITIONS, TOOL_REGISTRY, TaxFilingStatus, type ToolCall, type ToolContext, TransactionPacketStatus, TransferStatus, TransferType, TransfereeRights, Transport, type UpdateAgentRequest, type UpdateContactRequest, ValuationMethodology, ValuationStatus, ValuationType, type VoteResponse, VoteValue, VotingMethod, WorkItemActorTypeValue, WorkItemStatus, WorkflowType, type WorkspaceContactSummary, type WorkspaceEntitySummary, type WorkspaceStatusResponse, type WrittenConsentRequest, type WrittenConsentResponse, describeToolCall, ensureEnvFile, ensureSafeInstrument, executeTool, formatConfigSection, generateFernetKey, generateSecret, isWriteTool, loadEnvFile, processRequest, provisionWorkspace, resetCache, resolveBinaryPath };

package/dist/index.js

@@ -1,7 +1,239 @@
+// src/process-transport.ts
+import { execFileSync } from "child_process";
+import { existsSync as existsSync2, readFileSync as readFileSync2 } from "fs";
+import { resolve, join } from "path";
+import { homedir } from "os";
+import { createRequire } from "module";
+
+// src/env.ts
+import { readFileSync, writeFileSync, existsSync } from "fs";
+import { randomBytes } from "crypto";
+var ENV_TEMPLATE = `# Corporation API server configuration
+# Generated by: corp serve
+
+# Required \u2014 secret for signing JWTs
+JWT_SECRET={{JWT_SECRET}}
+
+# Required \u2014 Fernet key for encrypting secrets at rest (base64url, 32 bytes)
+SECRETS_MASTER_KEY={{SECRETS_MASTER_KEY}}
+
+# Required \u2014 bearer token for internal worker-to-server auth
+INTERNAL_WORKER_TOKEN={{INTERNAL_WORKER_TOKEN}}
+
+# Server port (default: 8000)
+# PORT=8000
+
+# Data directory for git repos (default: ./data/repos)
+# DATA_DIR=./data/repos
+
+# Redis URL for agent job queue (optional)
+# REDIS_URL=redis://localhost:6379/0
+
+# LLM proxy upstream (default: https://openrouter.ai/api/v1)
+# LLM_UPSTREAM_URL=https://openrouter.ai/api/v1
+
+# PEM-encoded Ed25519 key for signing git commits (optional)
+# COMMIT_SIGNING_KEY=
+
+# Max agent queue depth (default: 1000)
+# MAX_QUEUE_DEPTH=1000
+`;
+function generateFernetKey() {
+  return randomBytes(32).toString("base64url") + "=";
+}
+function generateSecret(length = 32) {
+  return randomBytes(length).toString("hex");
+}
+function loadEnvFile(path) {
+  if (!existsSync(path)) return;
+  const content = readFileSync(path, "utf-8");
+  for (const line of content.split("\n")) {
+    const trimmed = line.trim();
+    if (!trimmed || trimmed.startsWith("#")) continue;
+    const eqIdx = trimmed.indexOf("=");
+    if (eqIdx === -1) continue;
+    const key = trimmed.slice(0, eqIdx).trim();
+    const value = trimmed.slice(eqIdx + 1).trim().replace(/^["']|["']$/g, "");
+    if (!process.env[key]) {
+      process.env[key] = value;
+    }
+  }
+}
+function ensureEnvFile(envPath) {
+  if (existsSync(envPath)) return;
+  console.log("No .env file found. Generating one with dev defaults...\n");
+  const content = ENV_TEMPLATE.replace("{{JWT_SECRET}}", generateSecret()).replace("{{SECRETS_MASTER_KEY}}", generateFernetKey()).replace("{{INTERNAL_WORKER_TOKEN}}", generateSecret());
+  writeFileSync(envPath, content, "utf-8");
+  console.log(`  Created ${envPath}
+`);
+}
+
+// src/process-transport.ts
+var require2 = createRequire(import.meta.url);
+var cachedBinaryPath;
+function resolveBinaryPath(processUrl) {
+  if (cachedBinaryPath !== void 0) return cachedBinaryPath;
+  const parsed = new URL(processUrl);
+  if (parsed.pathname && parsed.pathname !== "/") {
+    cachedBinaryPath = parsed.pathname;
+    return cachedBinaryPath;
+  }
+  const envBin = process.env.CORP_SERVER_BIN;
+  if (envBin && existsSync2(envBin)) {
+    cachedBinaryPath = envBin;
+    return cachedBinaryPath;
+  }
+  try {
+    const server = require2("@thecorporation/server");
+    const pkgPath = server.getBinaryPath?.();
+    if (pkgPath) {
+      cachedBinaryPath = pkgPath;
+      return pkgPath;
+    }
+  } catch {
+  }
+  cachedBinaryPath = resolve("services/api-rs/target/release/api-rs");
+  return cachedBinaryPath;
+}
+function parseStatusFromStderr(stderr) {
+  const lines = stderr.split("\n");
+  for (let i = lines.length - 1; i >= 0; i--) {
+    const match = lines[i].match(/^HTTP (\d+)$/);
+    if (match) return parseInt(match[1], 10);
+  }
+  return null;
+}
+var STATUS_TEXT = {
+  200: "OK",
+  201: "Created",
+  204: "No Content",
+  400: "Bad Request",
+  401: "Unauthorized",
+  403: "Forbidden",
+  404: "Not Found",
+  409: "Conflict",
+  422: "Unprocessable Entity",
+  500: "Internal Server Error"
+};
+function buildProcessResponse(status, body) {
+  return {
+    status,
+    ok: status >= 200 && status < 300,
+    statusText: STATUS_TEXT[status] ?? String(status),
+    headers: new Headers({ "content-type": "application/json" }),
+    json: async () => JSON.parse(body),
+    text: async () => body,
+    body: null,
+    bodyUsed: false,
+    redirected: false,
+    type: "basic",
+    url: "",
+    clone: () => buildProcessResponse(status, body),
+    arrayBuffer: async () => new TextEncoder().encode(body).buffer,
+    blob: async () => new Blob([body]),
+    formData: async () => {
+      throw new Error("not supported");
+    },
+    bytes: async () => new TextEncoder().encode(body)
+  };
+}
+var CORP_CONFIG_DIR = process.env.CORP_CONFIG_DIR || join(homedir(), ".corp");
+function readJsonFileSafe(path) {
+  try {
+    if (!existsSync2(path)) return null;
+    return JSON.parse(readFileSync2(path, "utf-8"));
+  } catch {
+    return null;
+  }
+}
+function loadServerSecretsFromAuth() {
+  const auth = readJsonFileSafe(join(CORP_CONFIG_DIR, "auth.json"));
+  if (!auth) return null;
+  const ss = auth.server_secrets;
+  if (!ss || typeof ss !== "object") return null;
+  const s = ss;
+  if (typeof s.jwt_secret === "string" && typeof s.secrets_master_key === "string" && typeof s.internal_worker_token === "string") {
+    return { jwt_secret: s.jwt_secret, secrets_master_key: s.secrets_master_key, internal_worker_token: s.internal_worker_token };
+  }
+  return null;
+}
+function loadDataDirFromConfig() {
+  const cfg = readJsonFileSafe(join(CORP_CONFIG_DIR, "config.json"));
+  if (!cfg) return void 0;
+  const dataDir = typeof cfg.data_dir === "string" ? cfg.data_dir : void 0;
+  return dataDir || void 0;
+}
+var envLoaded = false;
+function ensureEnv() {
+  if (envLoaded) return;
+  const secrets = loadServerSecretsFromAuth();
+  if (secrets) {
+    if (!process.env.JWT_SECRET) process.env.JWT_SECRET = secrets.jwt_secret;
+    if (!process.env.SECRETS_MASTER_KEY) process.env.SECRETS_MASTER_KEY = secrets.secrets_master_key;
+    if (!process.env.INTERNAL_WORKER_TOKEN) process.env.INTERNAL_WORKER_TOKEN = secrets.internal_worker_token;
+    envLoaded = true;
+    return;
+  }
+  const envPath = resolve(process.cwd(), ".env");
+  ensureEnvFile(envPath);
+  loadEnvFile(envPath);
+  envLoaded = true;
+}
+function processRequest(processUrl, method, pathWithQuery, headers, body, options) {
+  ensureEnv();
+  const binPath = resolveBinaryPath(processUrl);
+  const args = ["--skip-validation", "call"];
+  const dataDir = options?.dataDir ?? loadDataDirFromConfig();
+  if (dataDir) {
+    args.push("--data-dir", dataDir);
+  }
+  args.push(method, pathWithQuery);
+  for (const [key, value] of Object.entries(headers)) {
+    args.push("-H", `${key}: ${value}`);
+  }
+  if (body) {
+    args.push("--stdin");
+  }
+  try {
+    const stdout = execFileSync(binPath, args, {
+      input: body ?? void 0,
+      stdio: ["pipe", "pipe", "pipe"],
+      maxBuffer: 10 * 1024 * 1024,
+      env: process.env
+    });
+    return buildProcessResponse(200, stdout.toString("utf-8"));
+  } catch (err) {
+    const execErr = err;
+    if (execErr.stdout === void 0 && execErr.stderr === void 0) {
+      throw new Error(
+        `No api-rs binary found. Install @thecorporation/server or set CORP_SERVER_BIN.
+Attempted: ${binPath}
+Error: ${execErr.message ?? String(err)}`
+      );
+    }
+    const stderr = execErr.stderr?.toString("utf-8") ?? "";
+    const stdout = execErr.stdout?.toString("utf-8") ?? "";
+    const status = parseStatusFromStderr(stderr);
+    if (status !== null) {
+      return buildProcessResponse(status, stdout);
+    }
+    const isConfigError = stderr.includes("panic") || stderr.includes("INTERNAL_WORKER_TOKEN") || stderr.includes("JWT_SECRET") || stderr.includes("SECRETS_MASTER_KEY");
+    if (isConfigError) {
+      throw new Error("Server configuration incomplete. Run 'corp setup' to configure local mode.");
+    }
+    throw new Error(`api-rs process failed:
+${stderr || stdout || String(err)}`);
+  }
+}
+function resetCache() {
+  cachedBinaryPath = void 0;
+  envLoaded = false;
+}
+
 // src/api-client.ts
 var SessionExpiredError = class extends Error {
-  constructor() {
-    super("Your API key is no longer valid. Run 'corp setup' to re-authenticate.");
+  constructor(detail) {
+    super(detail || "Your API key is no longer valid. Run 'corp setup' to re-authenticate.");
     this.name = "SessionExpiredError";
   }
 };
@@ -42,7 +274,8 @@ async function provisionWorkspace(apiUrl, name) {
   });
   if (!resp.ok) {
     const detail = await extractErrorMessage(resp);
-    throw new Error(`Provision failed: ${resp.status} ${resp.statusText} \u2014 ${detail}`);
+    const prefix = resp.status >= 500 ? "Server error" : resp.status === 404 ? "Not found" : resp.status === 422 ? "Validation error" : `HTTP ${resp.status}`;
+    throw new Error(`Provision failed (${prefix}): ${detail}`);
   }
   return resp.json();
 }
@@ -51,7 +284,7 @@ var CorpAPIClient = class {
   apiKey;
   workspaceId;
   constructor(apiUrl, apiKey, workspaceId) {
-    this.apiUrl = apiUrl.replace(/\/+$/, "");
+    this.apiUrl = apiUrl.startsWith("process://") ? apiUrl : apiUrl.replace(/\/+$/, "");
     this.apiKey = apiKey;
     this.workspaceId = workspaceId;
   }
@@ -63,20 +296,27 @@ var CorpAPIClient = class {
     };
   }
   async request(method, path, body, params) {
-    let url = `${this.apiUrl}${path}`;
+    let fullPath = path;
     if (params) {
       const qs = new URLSearchParams(params).toString();
-      if (qs) url += `?${qs}`;
+      if (qs) fullPath += `?${qs}`;
+    }
+    if (this.apiUrl.startsWith("process://")) {
+      const hdrs = this.headers();
+      const bodyStr = body !== void 0 ? JSON.stringify(body) : void 0;
+      return processRequest(this.apiUrl, method, fullPath, hdrs, bodyStr);
     }
+    const url = `${this.apiUrl}${fullPath}`;
     const opts = { method, headers: this.headers() };
     if (body !== void 0) opts.body = JSON.stringify(body);
     return fetch(url, opts);
   }
   async throwIfError(resp) {
-    if (resp.status === 401) throw new SessionExpiredError();
     if (!resp.ok) {
       const detail = await extractErrorMessage(resp);
-      throw new Error(`${resp.status} ${resp.statusText} \u2014 ${detail}`);
+      if (resp.status === 401) throw new SessionExpiredError(detail);
+      const prefix = resp.status >= 500 ? "Server error" : resp.status === 404 ? "Not found" : resp.status === 422 ? "Validation error" : `HTTP ${resp.status}`;
+      throw new Error(`${prefix}: ${detail}`);
     }
   }
   async get(path, params) {
@@ -285,6 +525,27 @@ var CorpAPIClient = class {
   writtenConsent(data) {
     return this.post("/v1/meetings/written-consent", data);
   }
+  getGovernanceMode(entityId) {
+    return this.get("/v1/governance/mode", { entity_id: entityId });
+  }
+  setGovernanceMode(data) {
+    return this.post("/v1/governance/mode", data);
+  }
+  resignSeat(seatId, entityId) {
+    return this.post(`/v1/governance-seats/${pathSegment(seatId)}/resign`, { entity_id: entityId });
+  }
+  createGovernanceIncident(data) {
+    return this.post("/v1/governance/incidents", data);
+  }
+  listGovernanceIncidents(entityId) {
+    return this.get(`/v1/entities/${pathSegment(entityId)}/governance/incidents`);
+  }
+  resolveGovernanceIncident(incidentId, data) {
+    return this.post(`/v1/governance/incidents/${pathSegment(incidentId)}/resolve`, data);
+  }
+  getGovernanceProfile(entityId) {
+    return this.get(`/v1/entities/${pathSegment(entityId)}/governance/profile`);
+  }
   listAgendaItems(meetingId, entityId) {
     return this.get(`/v1/meetings/${pathSegment(meetingId)}/agenda-items`, { entity_id: entityId });
   }
@@ -313,6 +574,11 @@ var CorpAPIClient = class {
     return { entity_id: entityId, document_id: documentId };
   }
   getPreviewPdfUrl(entityId, documentId) {
+    if (this.apiUrl.startsWith("process://")) {
+      throw new Error(
+        "PDF preview is not available in local process transport mode.\n  Use cloud mode (npx corp setup) or start a local HTTP server (npx corp serve) instead."
+      );
+    }
     const qs = new URLSearchParams({ entity_id: entityId, document_id: documentId }).toString();
     return `${this.apiUrl}/v1/documents/preview/pdf?${qs}`;
   }
@@ -347,12 +613,25 @@ var CorpAPIClient = class {
   openBankAccount(data) {
     return this.post("/v1/treasury/bank-accounts", data);
   }
+  activateBankAccount(bankAccountId, entityId) {
+    return this.postWithParams(`/v1/bank-accounts/${pathSegment(bankAccountId)}/activate`, {}, { entity_id: entityId });
+  }
   classifyContractor(data) {
     return this.post("/v1/contractors/classify", data);
   }
   reconcileLedger(data) {
     return this.post("/v1/ledger/reconcile", data);
   }
+  getFinancialStatements(entityId, params) {
+    return this.get("/v1/treasury/financial-statements", { entity_id: entityId, ...params ?? {} });
+  }
+  // --- Equity analytics ---
+  getDilutionPreview(entityId, roundId) {
+    return this.get("/v1/equity/dilution/preview", { entity_id: entityId, round_id: roundId });
+  }
+  getControlMap(entityId, rootEntityId) {
+    return this.get("/v1/equity/control-map", { entity_id: entityId, root_entity_id: rootEntityId });
+  }
   // --- Tax ---
   listTaxFilings(entityId) {
     return this.get(`/v1/entities/${pathSegment(entityId)}/tax-filings`);
@@ -483,6 +762,18 @@ var CorpAPIClient = class {
   listSupportedModels() {
     return this.get("/v1/models");
   }
+  async getAgentExecution(agentId, executionId) {
+    return this.get(`/v1/agents/${pathSegment(agentId)}/executions/${pathSegment(executionId)}`);
+  }
+  async getAgentExecutionResult(agentId, executionId) {
+    return this.get(`/v1/agents/${pathSegment(agentId)}/executions/${pathSegment(executionId)}/result`);
+  }
+  async getAgentExecutionLogs(agentId, executionId) {
+    return this.get(`/v1/agents/${pathSegment(agentId)}/executions/${pathSegment(executionId)}/logs`);
+  }
+  async killAgentExecution(agentId, executionId) {
+    return this.post(`/v1/agents/${pathSegment(agentId)}/executions/${pathSegment(executionId)}/kill`, {});
+  }
   // --- Governance bodies ---
   createGovernanceBody(data) {
     return this.post("/v1/governance-bodies", data);
@@ -516,6 +807,15 @@ var CorpAPIClient = class {
   listApiKeys() {
     return this.get("/v1/api-keys", { workspace_id: this.workspaceId });
   }
+  async createApiKey(data) {
+    return this.post("/v1/api-keys", data);
+  }
+  async revokeApiKey(keyId) {
+    return this.del(`/v1/api-keys/${pathSegment(keyId)}`);
+  }
+  async rotateApiKey(keyId) {
+    return this.post(`/v1/api-keys/${pathSegment(keyId)}/rotate`, {});
+  }
   // --- Obligations ---
   assignObligation(obligationId, contactId) {
     return this.patch(`/v1/obligations/${pathSegment(obligationId)}/assign`, { contact_id: contactId });
@@ -524,6 +824,28 @@ var CorpAPIClient = class {
   getConfig() {
     return this.get("/v1/config");
   }
+  // --- Services ---
+  listServiceCatalog() {
+    return this.get("/v1/services/catalog");
+  }
+  createServiceRequest(data) {
+    return this.post("/v1/services/requests", data);
+  }
+  getServiceRequest(id, entityId) {
+    return this.get(`/v1/services/requests/${pathSegment(id)}`, { entity_id: entityId });
+  }
+  listServiceRequests(entityId) {
+    return this.get(`/v1/entities/${pathSegment(entityId)}/service-requests`);
+  }
+  beginServiceCheckout(id, data) {
+    return this.post(`/v1/services/requests/${pathSegment(id)}/checkout`, data);
+  }
+  fulfillServiceRequest(id, data) {
+    return this.post(`/v1/services/requests/${pathSegment(id)}/fulfill`, data);
+  }
+  cancelServiceRequest(id, data) {
+    return this.post(`/v1/services/requests/${pathSegment(id)}/cancel`, data);
+  }
   // --- Feedback ---
   submitFeedback(message, category, email) {
     return this.post("/v1/feedback", { message, category, email });
@@ -533,15 +855,17 @@ var CorpAPIClient = class {
     const resp = await this.request("POST", "/v1/workspaces/link", { external_id: externalId, provider });
     if (!resp.ok) {
       const detail = await extractErrorMessage(resp);
-      throw new Error(`${resp.status} ${resp.statusText} \u2014 ${detail}`);
+      if (resp.status === 401) throw new SessionExpiredError(detail);
+      const prefix = resp.status >= 500 ? "Server error" : resp.status === 404 ? "Not found" : resp.status === 422 ? "Validation error" : `HTTP ${resp.status}`;
+      throw new Error(`${prefix}: ${detail}`);
     }
     return resp.json();
   }
 };
 
 // src/tools.ts
-import { readFileSync, writeFileSync, mkdirSync, existsSync } from "fs";
-import { join } from "path";
+import { readFileSync as readFileSync3, writeFileSync as writeFileSync2, mkdirSync, existsSync as existsSync3 } from "fs";
+import { join as join2 } from "path";
 
 // src/tool-defs.generated.ts
 var GENERATED_TOOL_DEFINITIONS = [
@@ -1472,14 +1796,14 @@ var documentActions = {
 };
 var checklistActions = {
   get: async (_args, _client, ctx) => {
-    const path = join(ctx.dataDir, "checklist.md");
-    if (existsSync(path)) return { checklist: readFileSync(path, "utf-8") };
+    const path = join2(ctx.dataDir, "checklist.md");
+    if (existsSync3(path)) return { checklist: readFileSync3(path, "utf-8") };
     return { checklist: null, message: "No checklist yet." };
   },
   update: async (args, _client, ctx) => {
-    const path = join(ctx.dataDir, "checklist.md");
+    const path = join2(ctx.dataDir, "checklist.md");
     mkdirSync(ctx.dataDir, { recursive: true });
-    writeFileSync(path, args.checklist);
+    writeFileSync2(path, args.checklist);
     return { status: "updated", checklist: args.checklist };
   }
 };
@@ -2073,10 +2397,17 @@ export {
   WorkItemStatus,
   WorkflowType,
   describeToolCall,
+  ensureEnvFile,
   ensureSafeInstrument,
   executeTool,
   formatConfigSection,
+  generateFernetKey,
+  generateSecret,
   isWriteTool,
-  provisionWorkspace
+  loadEnvFile,
+  processRequest,
+  provisionWorkspace,
+  resetCache,
+  resolveBinaryPath
 };
 //# sourceMappingURL=index.js.map