@wrongstack/governance 0.313.1 → 0.316.2

package/dist/admin-session.d.ts

@@ -17,7 +17,7 @@ export interface ConnectGovernanceAdminSessionOptions extends GovernanceAdminSes
     readonly grantId: string;
     readonly credential: GovernanceServiceCredential;
 }
-export type GovernanceAdminSessionConnectionFailureCode = 'not_running' | 'endpoint_invalid' | 'project_mismatch' | 'credential_mismatch' | 'authentication_failed' | 'service_rejected' | 'admin_required' | 'grant_mismatch';
+type GovernanceAdminSessionConnectionFailureCode = 'not_running' | 'endpoint_invalid' | 'project_mismatch' | 'credential_mismatch' | 'authentication_failed' | 'service_rejected' | 'admin_required' | 'grant_mismatch';
 export type ConnectGovernanceAdminSessionResult = {
     readonly connected: true;
     readonly session: GovernanceAdminSession;

package/dist/attachment-broker-controller.d.ts

@@ -1,9 +1,6 @@
 import type { IssuedGovernanceCapabilityGrant, IssueGovernanceCapabilityGrantOptions } from './capability-grant.js';
 import { type GovernanceDaemonAttachmentBrokerRecord, type GovernanceDaemonMetadata } from './daemon-metadata.js';
-export declare const GOVERNANCE_DAEMON_ATTACHMENT_BROKER_RENEW_BEFORE_MS: number;
-export declare const GOVERNANCE_DAEMON_ATTACHMENT_BROKER_RETRY_MS = 5000;
-export declare const GOVERNANCE_DAEMON_ATTACHMENT_BROKER_DEGRADED_FAILURES = 3;
-export type GovernanceAttachmentBrokerLifecycleEventType = 'published' | 'renewal_failed' | 'degraded' | 'revocation_failed' | 'recovered' | 'stopped';
+type GovernanceAttachmentBrokerLifecycleEventType = 'published' | 'renewal_failed' | 'degraded' | 'revocation_failed' | 'recovered' | 'stopped';
 export interface GovernanceAttachmentBrokerLifecycleEvent {
     readonly schemaVersion: 1;
     readonly sequence: number;
@@ -39,7 +36,7 @@ interface GovernanceAttachmentBrokerGrantPort {
     issueGrant(options: IssueGovernanceCapabilityGrantOptions): IssuedGovernanceCapabilityGrant;
     revokeGrant(grantId: string, reason?: string): boolean;
 }
-export interface GovernanceAttachmentBrokerControllerOptions {
+interface GovernanceAttachmentBrokerControllerOptions {
     readonly projectRoot: string;
     readonly metadata: GovernanceDaemonMetadata;
     readonly grants: GovernanceAttachmentBrokerGrantPort;

package/dist/authenticated-project-service.d.ts

@@ -2,7 +2,6 @@ import type { GovernanceCapabilityGrantRegistry, GovernanceServiceCredential } f
 import type { GovernanceDaemonControlPort } from './daemon-control.js';
 import { GovernanceManagementReceiptCache } from './management-receipt-cache.js';
 import type { GovernanceProjectService, GovernanceServiceResponse } from './project-service.js';
-export declare const GOVERNANCE_RUNTIME_ATTACHMENT_MAX_TTL_MS: number;
 /** External facade for a future IPC transport. Raw capability sets never cross this boundary. */
 export declare class AuthenticatedGovernanceProjectService {
     #private;

package/dist/autonomy-envelope.d.ts

@@ -2,7 +2,7 @@ export declare const AUTONOMY_TIERS: readonly ['A0', 'A1', 'A2', 'A3', 'A4'];
 export type AutonomyTier = (typeof AUTONOMY_TIERS)[number];
 export declare const GOVERNED_OPERATIONS: readonly ['repository_read', 'file_edit', 'focused_check', 'shell_restricted', 'subagent_spawn', 'git_local_write', 'shell_arbitrary', 'package_install', 'public_api_change', 'schema_change', 'network_access', 'secret_access', 'git_push', 'publish', 'deploy', 'destructive_external'];
 export type GovernedOperation = (typeof GOVERNED_OPERATIONS)[number];
-export interface ChangeBudget {
+interface ChangeBudget {
     readonly maxChangedFiles: number;
     readonly maxChangedLines: number;
     readonly maxNewDependencies: number;
@@ -37,4 +37,5 @@ export type OperationAutonomyDecision = {
 export declare const OPERATION_MINIMUM_TIER: Readonly<Record<GovernedOperation, AutonomyTier>>;
 export declare function compareAutonomyTiers(left: AutonomyTier, right: AutonomyTier): number;
 export declare function decideOperationAutonomy(envelope: AutonomyEnvelope, operation: GovernedOperation): OperationAutonomyDecision;
+export {};
 //# sourceMappingURL=autonomy-envelope.d.ts.map

package/dist/capability-grant.d.ts

@@ -1,7 +1,6 @@
 import { type GovernanceServiceCapability, type GovernanceServiceClientContext } from './service-protocol.js';
 export declare const DEFAULT_GOVERNANCE_GRANT_MAX_TTL_MS: number;
-export declare const DEFAULT_GOVERNANCE_MAX_GRANTS = 10000;
-export type GovernanceCapabilityGrantStatus = 'active' | 'expired' | 'revoked';
+type GovernanceCapabilityGrantStatus = 'active' | 'expired' | 'revoked';
 export interface GovernanceCapabilityGrant {
     readonly grantId: string;
     readonly projectId: string;
@@ -25,7 +24,7 @@ export interface IssueGovernanceCapabilityGrantOptions {
     readonly capabilities: readonly GovernanceServiceCapability[];
     readonly ttlMs: number;
 }
-export interface RotateGovernanceCapabilityGrantOptions {
+interface RotateGovernanceCapabilityGrantOptions {
     readonly rotatedBy?: string | undefined;
     readonly ttlMs: number;
     readonly reason?: string | undefined;
@@ -35,8 +34,8 @@ export interface GovernanceServiceCredential {
     readonly projectId: string;
     readonly clientId: string;
 }
-export type GovernanceCapabilityAuthenticationFailureCode = 'invalid_token' | 'project_mismatch' | 'client_mismatch' | 'grant_expired' | 'grant_revoked';
-export type GovernanceCapabilityAuthenticationResult = {
+type GovernanceCapabilityAuthenticationFailureCode = 'invalid_token' | 'project_mismatch' | 'client_mismatch' | 'grant_expired' | 'grant_revoked';
+type GovernanceCapabilityAuthenticationResult = {
     readonly authenticated: true;
     readonly grant: GovernanceCapabilityGrant;
     readonly client: GovernanceServiceClientContext;
@@ -127,4 +126,5 @@ export declare class GovernanceCapabilityGrantRegistry {
     private appendAudit;
     private pruneInactive;
 }
+export {};
 //# sourceMappingURL=capability-grant.d.ts.map

package/dist/credential-lease-controller.d.ts

@@ -1,11 +1,7 @@
 import type { GovernanceServiceCredential } from './capability-grant.js';
 import type { GovernanceServiceResponse } from './project-service.js';
-export declare const GOVERNANCE_CREDENTIAL_LEASE_DEFAULT_TTL_MS: number;
-export declare const GOVERNANCE_CREDENTIAL_LEASE_DEFAULT_RENEW_BEFORE_MS: number;
-export declare const GOVERNANCE_CREDENTIAL_LEASE_DEFAULT_RETRY_MS = 1000;
-export declare const GOVERNANCE_CREDENTIAL_LEASE_DEFAULT_MAX_ATTEMPTS = 3;
-export type GovernanceCredentialLeaseState = 'idle' | 'scheduled' | 'rotating' | 'retry_wait' | 'stopped' | 'expired';
-export type GovernanceCredentialLeaseStopReason = 'stopped_by_owner' | 'retry_exhausted' | 'credential_expired';
+type GovernanceCredentialLeaseState = 'idle' | 'scheduled' | 'rotating' | 'retry_wait' | 'stopped' | 'expired';
+type GovernanceCredentialLeaseStopReason = 'stopped_by_owner' | 'retry_exhausted' | 'credential_expired';
 export interface GovernanceCredentialLeaseSnapshot {
     readonly state: GovernanceCredentialLeaseState;
     readonly projectId: string;
@@ -21,10 +17,10 @@ export interface GovernanceCredentialLeaseScheduler {
     schedule(callback: () => void, delayMs: number): unknown;
     cancel(handle: unknown): void;
 }
-export interface GovernanceCredentialLeaseClient {
+interface GovernanceCredentialLeaseClient {
     request(input: unknown): Promise<GovernanceServiceResponse>;
 }
-export interface GovernanceCredentialLeaseControllerOptions {
+interface GovernanceCredentialLeaseControllerOptions {
     readonly projectRoot: string;
     readonly projectId: string;
     readonly grantId: string;
@@ -82,4 +78,5 @@ export declare class GovernanceCredentialLeaseController implements GovernanceCr
     private clearTimer;
     private expire;
 }
+export {};
 //# sourceMappingURL=credential-lease-controller.d.ts.map

package/dist/daemon-control.d.ts

@@ -6,8 +6,8 @@ export interface GovernanceDaemonControlStatus {
     readonly startedAt: string;
     readonly attachmentBroker?: GovernanceAttachmentBrokerControllerSnapshot | undefined;
 }
-export type GovernanceDaemonOperatorSignalLevel = 'healthy' | 'notice' | 'warning';
-export interface GovernanceDaemonOperatorAttachmentBrokerStatus {
+type GovernanceDaemonOperatorSignalLevel = 'healthy' | 'notice' | 'warning';
+interface GovernanceDaemonOperatorAttachmentBrokerStatus {
     readonly state: GovernanceAttachmentBrokerControllerSnapshot['state'];
     readonly health: GovernanceAttachmentBrokerControllerSnapshot['health'];
     readonly expiresAt?: string | undefined;
@@ -45,4 +45,5 @@ export interface GovernanceDaemonShutdownNotice {
     readonly requestedBy: string;
     readonly reason: string;
 }
+export {};
 //# sourceMappingURL=daemon-control.d.ts.map

package/dist/daemon-metadata.d.ts

@@ -1,16 +1,9 @@
 import type { GovernanceServiceCredential } from './capability-grant.js';
 import { GOVERNANCE_SERVICE_PROTOCOL_VERSION } from './service-protocol.js';
-export declare const GOVERNANCE_DAEMON_METADATA_SCHEMA_VERSION: 1;
-export declare const GOVERNANCE_DAEMON_STARTUP_LEASE_SCHEMA_VERSION: 1;
-export declare const GOVERNANCE_DAEMON_ATTACHMENT_BROKER_SCHEMA_VERSION: 1;
-export declare const GOVERNANCE_DAEMON_METADATA_MAX_BYTES: number;
-export declare const GOVERNANCE_DAEMON_ENDPOINT_PROBE_TIMEOUT_MS = 750;
-export declare const GOVERNANCE_DAEMON_STARTUP_LEASE_TIMEOUT_MS = 10000;
-export declare const GOVERNANCE_DAEMON_STARTUP_LEASE_RETRY_MS = 50;
+declare const GOVERNANCE_DAEMON_METADATA_SCHEMA_VERSION: 1;
+declare const GOVERNANCE_DAEMON_STARTUP_LEASE_SCHEMA_VERSION: 1;
+declare const GOVERNANCE_DAEMON_ATTACHMENT_BROKER_SCHEMA_VERSION: 1;
 export declare const GOVERNANCE_DAEMON_ATTACHMENT_BROKER_TTL_MS: number;
-export declare const GOVERNANCE_DAEMON_METADATA_RELATIVE_PATH: string;
-export declare const GOVERNANCE_DAEMON_STARTUP_LEASE_RELATIVE_PATH: string;
-export declare const GOVERNANCE_DAEMON_ATTACHMENT_BROKER_RELATIVE_PATH: string;
 export interface GovernanceDaemonMetadata {
     readonly schemaVersion: typeof GOVERNANCE_DAEMON_METADATA_SCHEMA_VERSION;
     readonly protocolVersion: typeof GOVERNANCE_SERVICE_PROTOCOL_VERSION;
@@ -22,7 +15,7 @@ export interface GovernanceDaemonMetadata {
     readonly instanceId: string;
     readonly startedAt: string;
 }
-export interface GovernanceDaemonStartupLeaseRecord {
+interface GovernanceDaemonStartupLeaseRecord {
     readonly schemaVersion: typeof GOVERNANCE_DAEMON_STARTUP_LEASE_SCHEMA_VERSION;
     readonly projectKey: string;
     readonly pid: number;
@@ -41,7 +34,7 @@ export interface GovernanceDaemonAttachmentBrokerRecord {
     readonly expiresAt: string;
     readonly credential: GovernanceServiceCredential;
 }
-export type GovernanceDaemonAttachmentBrokerReadResult = {
+type GovernanceDaemonAttachmentBrokerReadResult = {
     readonly kind: 'missing';
 } | {
     readonly kind: 'invalid';
@@ -50,7 +43,7 @@ export type GovernanceDaemonAttachmentBrokerReadResult = {
     readonly kind: 'valid';
     readonly broker: GovernanceDaemonAttachmentBrokerRecord;
 };
-export type GovernanceDaemonMetadataReadResult = {
+type GovernanceDaemonMetadataReadResult = {
     readonly kind: 'missing';
 } | {
     readonly kind: 'invalid';
@@ -59,7 +52,7 @@ export type GovernanceDaemonMetadataReadResult = {
     readonly kind: 'valid';
     readonly metadata: GovernanceDaemonMetadata;
 };
-export type GovernanceDaemonInspection = {
+type GovernanceDaemonInspection = {
     readonly kind: 'live';
     readonly metadata: GovernanceDaemonMetadata;
 } | {
@@ -71,7 +64,7 @@ export type GovernanceDaemonInspection = {
     readonly metadata: GovernanceDaemonMetadata | null;
     readonly reason: string;
 };
-export type GovernanceDaemonStartupLeaseErrorCode = 'busy' | 'invalid_lease';
+type GovernanceDaemonStartupLeaseErrorCode = 'busy' | 'invalid_lease';
 export declare class GovernanceDaemonStartupLeaseError extends Error {
     readonly code: GovernanceDaemonStartupLeaseErrorCode;
     constructor(code: GovernanceDaemonStartupLeaseErrorCode, message: string);
@@ -108,8 +101,6 @@ export declare function createGovernanceDaemonMetadata(options: {
 export declare function writeGovernanceDaemonMetadata(projectRoot: string, metadata: GovernanceDaemonMetadata): Promise<void>;
 export declare function readGovernanceDaemonMetadata(projectRoot: string): Promise<GovernanceDaemonMetadataReadResult>;
 export declare function removeOwnedGovernanceDaemonMetadata(projectRoot: string, owner: Pick<GovernanceDaemonMetadata, 'pid' | 'instanceId'>): Promise<boolean>;
-export declare function isGovernanceProcessAlive(pid: number): boolean;
-export declare function probeGovernanceDaemonEndpoint(projectRoot: string, timeoutMs?: number): Promise<boolean>;
 export declare function inspectGovernanceDaemon(projectRoot: string): Promise<GovernanceDaemonInspection>;
 export declare function shouldRecoverGovernanceEndpoint(platform: NodeJS.Platform, inspection: GovernanceDaemonInspection): boolean;
 export declare class GovernanceDaemonStartupLease {

package/dist/daemon-protocol.d.ts

@@ -1,7 +1,7 @@
 import type { GovernanceServiceCredential } from './capability-grant.js';
 import { type GovernanceServiceCapability } from './service-protocol.js';
 export declare const GOVERNANCE_DAEMON_BOOTSTRAP_PROTOCOL_VERSION: 2;
-export interface GovernanceDaemonBootstrapRequest {
+interface GovernanceDaemonBootstrapRequest {
     readonly type: 'bootstrap';
     readonly protocolVersion: typeof GOVERNANCE_DAEMON_BOOTSTRAP_PROTOCOL_VERSION;
     readonly nonce: string;
@@ -36,18 +36,18 @@ export type GovernanceDaemonBootstrapMessage = {
     readonly code: GovernanceDaemonBootstrapErrorCode;
     readonly message: string;
 };
-export interface GovernanceDaemonProtocolIssue {
+interface GovernanceDaemonProtocolIssue {
     readonly path: string;
     readonly message: string;
 }
-export type GovernanceDaemonBootstrapRequestDecodeResult = {
+type GovernanceDaemonBootstrapRequestDecodeResult = {
     readonly decoded: true;
     readonly request: GovernanceDaemonBootstrapRequest;
 } | {
     readonly decoded: false;
     readonly issues: readonly GovernanceDaemonProtocolIssue[];
 };
-export type GovernanceDaemonBootstrapMessageDecodeResult = {
+type GovernanceDaemonBootstrapMessageDecodeResult = {
     readonly decoded: true;
     readonly message: GovernanceDaemonBootstrapMessage;
 } | {
@@ -56,4 +56,5 @@ export type GovernanceDaemonBootstrapMessageDecodeResult = {
 };
 export declare function decodeGovernanceDaemonBootstrapRequest(input: unknown): GovernanceDaemonBootstrapRequestDecodeResult;
 export declare function decodeGovernanceDaemonBootstrapMessage(input: unknown): GovernanceDaemonBootstrapMessageDecodeResult;
+export {};
 //# sourceMappingURL=daemon-protocol.d.ts.map

package/dist/event-store.d.ts

@@ -6,7 +6,7 @@ export declare const GOVERNANCE_OBSERVATION_CATEGORIES: readonly ['task_created'
 export type GovernanceObservationCategory = (typeof GOVERNANCE_OBSERVATION_CATEGORIES)[number];
 export declare const GOVERNANCE_OBSERVATION_DEFAULT_PAGE_SIZE = 50;
 export declare const GOVERNANCE_OBSERVATION_MAX_PAGE_SIZE = 100;
-export interface ReadGovernanceObservationsPageOptions {
+interface ReadGovernanceObservationsPageOptions {
     readonly projectId: string;
     readonly taskId?: string | undefined;
     /**
@@ -78,13 +78,10 @@ export interface GovernanceEventStore {
     readVerificationExecutionLeaseStatus(leaseId: string): VerificationExecutionLeaseStatus;
     close(): void;
 }
-export interface SqliteGovernanceEventStoreOptions {
+interface SqliteGovernanceEventStoreOptions {
     readonly now?: (() => string) | undefined;
     readonly verificationLeaseSecret?: (() => string) | undefined;
 }
-export declare class GovernanceStoreCorruptionError extends Error {
-    constructor(message: string);
-}
 export declare class SqliteGovernanceEventStore implements GovernanceEventStore {
     readonly databasePath: string;
     private readonly db;
@@ -132,4 +129,5 @@ export declare class SqliteGovernanceEventStore implements GovernanceEventStore
     private executionFromReceipt;
     private assertOpen;
 }
+export {};
 //# sourceMappingURL=event-store.d.ts.map

package/dist/evidence-candidate.d.ts

@@ -57,7 +57,7 @@ export interface GovernanceEvidenceCandidate {
         readonly outputLines?: number | undefined;
     };
 }
-export type GovernanceEvidenceCandidateIneligibilityReason = 'payload_invalid' | 'unsupported_schema' | 'binding_incomplete' | 'candidate_identity_missing' | 'candidate_identity_mismatch' | 'task_binding_mismatch' | 'trace_binding_incomplete';
+type GovernanceEvidenceCandidateIneligibilityReason = 'payload_invalid' | 'unsupported_schema' | 'binding_incomplete' | 'candidate_identity_missing' | 'candidate_identity_mismatch' | 'task_binding_mismatch' | 'trace_binding_incomplete';
 export interface GovernanceEvidenceCandidateLedgerEntry {
     readonly sequence: number;
     readonly observationId: string;
@@ -92,4 +92,5 @@ export interface GovernanceEvidenceCandidateObservation {
 }
 export declare function createGovernanceEvidenceCandidate(trace: GovernanceEvidenceTraceSnapshot, outcome: GovernanceToolOutcomeMetadata): GovernanceEvidenceCandidate;
 export declare function evaluateGovernanceEvidenceCandidateObservation(observation: GovernanceEvidenceCandidateObservation): GovernanceEvidenceCandidateLedgerEntry;
+export {};
 //# sourceMappingURL=evidence-candidate.d.ts.map

package/dist/index.js

@@ -8425,45 +8425,22 @@ export {
   CONTRACT_ASSUMPTION_STATUSES,
   CONTRACT_SOURCES,
   DEFAULT_GOVERNANCE_GRANT_MAX_TTL_MS,
-  DEFAULT_GOVERNANCE_MAX_GRANTS,
   EVIDENCE_KINDS,
   GOVERNANCE_ACTORS,
   GOVERNANCE_COMPATIBILITY_ADMIN_TTL_MS,
   GOVERNANCE_COMPATIBILITY_MODEL_TTL_MS,
-  GOVERNANCE_CREDENTIAL_LEASE_DEFAULT_MAX_ATTEMPTS,
-  GOVERNANCE_CREDENTIAL_LEASE_DEFAULT_RENEW_BEFORE_MS,
-  GOVERNANCE_CREDENTIAL_LEASE_DEFAULT_RETRY_MS,
-  GOVERNANCE_CREDENTIAL_LEASE_DEFAULT_TTL_MS,
-  GOVERNANCE_DAEMON_ATTACHMENT_BROKER_DEGRADED_FAILURES,
-  GOVERNANCE_DAEMON_ATTACHMENT_BROKER_RELATIVE_PATH,
-  GOVERNANCE_DAEMON_ATTACHMENT_BROKER_RENEW_BEFORE_MS,
-  GOVERNANCE_DAEMON_ATTACHMENT_BROKER_RETRY_MS,
-  GOVERNANCE_DAEMON_ATTACHMENT_BROKER_SCHEMA_VERSION,
   GOVERNANCE_DAEMON_ATTACHMENT_BROKER_TTL_MS,
   GOVERNANCE_DAEMON_BOOTSTRAP_PROTOCOL_VERSION,
-  GOVERNANCE_DAEMON_ENDPOINT_PROBE_TIMEOUT_MS,
-  GOVERNANCE_DAEMON_METADATA_MAX_BYTES,
-  GOVERNANCE_DAEMON_METADATA_RELATIVE_PATH,
-  GOVERNANCE_DAEMON_METADATA_SCHEMA_VERSION,
-  GOVERNANCE_DAEMON_STARTUP_LEASE_RELATIVE_PATH,
-  GOVERNANCE_DAEMON_STARTUP_LEASE_RETRY_MS,
-  GOVERNANCE_DAEMON_STARTUP_LEASE_SCHEMA_VERSION,
-  GOVERNANCE_DAEMON_STARTUP_LEASE_TIMEOUT_MS,
   GOVERNANCE_DAEMON_STARTUP_TIMEOUT_MS,
-  GOVERNANCE_DATABASE_RELATIVE_PATH,
   GOVERNANCE_EVIDENCE_CANDIDATE_DEFAULT_PAGE_SIZE,
   GOVERNANCE_EVIDENCE_CANDIDATE_MAX_PAGE_SIZE,
   GOVERNANCE_EVIDENCE_CANDIDATE_SCHEMA_VERSION,
   GOVERNANCE_IPC_DEFAULT_TIMEOUT_MS,
-  GOVERNANCE_IPC_MAX_CONNECTIONS,
   GOVERNANCE_IPC_MAX_FRAME_BYTES,
-  GOVERNANCE_IPC_SOCKET_TIMEOUT_MS,
-  GOVERNANCE_MANAGEMENT_RECEIPT_MAX_ENTRIES,
   GOVERNANCE_MANAGEMENT_RECEIPT_TTL_MS,
   GOVERNANCE_OBSERVATION_CATEGORIES,
   GOVERNANCE_OBSERVATION_DEFAULT_PAGE_SIZE,
   GOVERNANCE_OBSERVATION_MAX_PAGE_SIZE,
-  GOVERNANCE_RUNTIME_ATTACHMENT_MAX_TTL_MS,
   GOVERNANCE_SERVICE_CAPABILITIES,
   GOVERNANCE_SERVICE_PROTOCOL_VERSION,
   GOVERNED_OPERATIONS,
@@ -8480,11 +8457,9 @@ export {
   GovernanceProjectClient,
   GovernanceProjectServer,
   GovernanceProjectService,
-  GovernanceStoreCorruptionError,
   LegacyGovernanceShadowAdapter,
   MAX_VERIFICATION_CANDIDATE_PROPOSALS,
   MAX_VERIFICATION_CHECK_REGISTRATIONS,
-  MAX_VERIFICATION_RUN_DURATION_MS,
   MAX_VERIFICATION_RUN_TTL_MS,
   OPERATION_MINIMUM_TIER,
   PLAN_VERSION_SCHEMA_VERSION,
@@ -8493,14 +8468,9 @@ export {
   SqliteGovernanceEventStore,
   SqliteVerificationLedger,
   TASK_CONTRACT_SCHEMA_VERSION,
-  VERIFICATION_CHECK_BINDING_SCHEMA_VERSION,
   VERIFICATION_EXECUTION_LEASE_SCHEMA_VERSION,
   VERIFICATION_PLANNER_INPUT_SCHEMA_VERSION,
-  VERIFICATION_PLAN_DRAFT_SCHEMA_VERSION,
-  VERIFICATION_RUN_CONTRACT_SCHEMA_VERSION,
-  VERIFICATION_RUN_CONTRACT_V1_SCHEMA_VERSION,
   VERIFICATION_RUN_REQUEST_SCHEMA_VERSION,
-  VERIFICATION_TOOL_GATEWAY_REQUEST_SCHEMA_VERSION,
   VerificationCheckRegistry,
   VerificationCheckRegistryConfigurationError,
   VerificationIssuanceCoordinator,
@@ -8511,12 +8481,10 @@ export {
   applyGovernanceEvent,
   buildVerificationPlanDraft,
   calculatePlanVersionFingerprint,
-  calculateVerificationCheckHandlerFingerprint,
   calculateVerificationCheckRegistryFingerprint,
   calculateVerificationPlanDraftId,
   calculateVerificationRunId,
   canonicalGovernanceProjectRoot,
-  classifyPlanStepAutonomy,
   compareAutonomyTiers,
   connectGovernanceAdminSession,
   connectGovernanceAdminSessionFromLaunch,
@@ -8547,7 +8515,6 @@ export {
   governanceProjectKey,
   governanceProjectServerEndpoint,
   inspectGovernanceDaemon,
-  isGovernanceProcessAlive,
   isSuccessfulWorkflowState,
   isTerminalWorkflowState,
   isVerificationCheckBindingIntegrityValid,
@@ -8557,7 +8524,6 @@ export {
   issueVerificationRunContract,
   launchGovernanceProjectDaemon,
   prepareGovernanceCompatibilityRuntime,
-  probeGovernanceDaemonEndpoint,
   projectGovernanceDaemonOperatorStatus,
   readGovernanceDaemonAttachmentBroker,
   readGovernanceDaemonMetadata,

package/dist/ipc-endpoint.d.ts

@@ -1,4 +1,3 @@
-export declare const GOVERNANCE_DATABASE_RELATIVE_PATH: string;
 export declare function canonicalGovernanceProjectRoot(projectRoot: string): string;
 export declare function governanceProjectKey(projectRoot: string): string;
 export declare function governanceProjectServerEndpoint(projectRoot: string): string;

package/dist/ipc-protocol.d.ts

@@ -7,11 +7,11 @@ export interface GovernanceIpcRequestEnvelope {
     readonly credential: GovernanceServiceCredential;
     readonly request: unknown;
 }
-export interface GovernanceIpcDecodeIssue {
+interface GovernanceIpcDecodeIssue {
     readonly path: string;
     readonly message: string;
 }
-export type GovernanceIpcEnvelopeDecodeResult = {
+type GovernanceIpcEnvelopeDecodeResult = {
     readonly decoded: true;
     readonly envelope: GovernanceIpcRequestEnvelope;
 } | {
@@ -21,4 +21,5 @@ export type GovernanceIpcEnvelopeDecodeResult = {
 export declare function decodeGovernanceIpcEnvelope(input: unknown): GovernanceIpcEnvelopeDecodeResult;
 export declare function encodeGovernanceIpcFrame(value: unknown): Buffer;
 export declare function decodeGovernanceIpcResponse(input: unknown): GovernanceServiceResponse;
+export {};
 //# sourceMappingURL=ipc-protocol.d.ts.map

package/dist/legacy-shadow-adapter.d.ts

@@ -1,14 +1,14 @@
 import type { AuthenticatedGovernanceProjectService } from './authenticated-project-service.js';
 import type { GovernanceServiceCredential } from './capability-grant.js';
 import type { GovernanceObservationCategory, StoredGovernanceObservation } from './event-store.js';
-export interface LegacyRuntimeObservation {
+interface LegacyRuntimeObservation {
     readonly observationId: string;
     readonly taskId?: string | undefined;
     readonly category: GovernanceObservationCategory;
     readonly observedAt: string;
     readonly payload: Readonly<Record<string, unknown>>;
 }
-export type LegacyShadowObservationResult = {
+type LegacyShadowObservationResult = {
     readonly observed: true;
     readonly idempotentReplay: boolean;
     readonly observation: StoredGovernanceObservation;
@@ -30,4 +30,5 @@ export declare class LegacyGovernanceShadowAdapter {
     observe(observation: LegacyRuntimeObservation): LegacyShadowObservationResult;
     private toResult;
 }
+export {};
 //# sourceMappingURL=legacy-shadow-adapter.d.ts.map

package/dist/management-receipt-cache.d.ts

@@ -1,13 +1,12 @@
 import type { GovernanceServiceCredential } from './capability-grant.js';
 import type { GovernanceServiceResponse } from './project-service.js';
 export declare const GOVERNANCE_MANAGEMENT_RECEIPT_TTL_MS = 30000;
-export declare const GOVERNANCE_MANAGEMENT_RECEIPT_MAX_ENTRIES = 1024;
-export interface GovernanceManagementReceiptCacheOptions {
+interface GovernanceManagementReceiptCacheOptions {
     readonly now?: (() => number) | undefined;
     readonly ttlMs?: number | undefined;
     readonly maxEntries?: number | undefined;
 }
-export type GovernanceManagementReceiptLookup = {
+type GovernanceManagementReceiptLookup = {
     readonly kind: 'miss';
 } | {
     readonly kind: 'in_progress';
@@ -19,7 +18,7 @@ export type GovernanceManagementReceiptLookup = {
     readonly response: GovernanceServiceResponse;
     readonly allowAfterRotation: boolean;
 };
-export interface GovernanceManagementReceiptReservation {
+interface GovernanceManagementReceiptReservation {
     readonly key: string;
     readonly fingerprint: string;
     readonly requestId: string;
@@ -50,4 +49,5 @@ export declare class GovernanceManagementReceiptCache {
     clear(): void;
     private pruneExpired;
 }
+export {};
 //# sourceMappingURL=management-receipt-cache.d.ts.map

package/dist/plan-version.d.ts

@@ -1,7 +1,7 @@
 import { type GovernedOperation, type OperationAutonomyDecision } from './autonomy-envelope.js';
 import { type TaskContractV1 } from './task-contract.js';
 export declare const PLAN_VERSION_SCHEMA_VERSION: 1;
-export interface PlanStepV1 {
+interface PlanStepV1 {
     readonly id: string;
     readonly title: string;
     readonly description: string;
@@ -11,7 +11,7 @@ export interface PlanStepV1 {
     readonly acceptanceCriteriaIds: readonly string[];
     readonly requiredCheckIds: readonly string[];
 }
-export interface PlanEdgeV1 {
+interface PlanEdgeV1 {
     readonly fromStepId: string;
     readonly toStepId: string;
 }
@@ -29,45 +29,45 @@ export interface PlanVersionV1 {
     readonly edges: readonly PlanEdgeV1[];
 }
 export declare function calculatePlanVersionFingerprint(plan: PlanVersionV1): string;
-export interface PlanStepAutonomy {
+interface PlanStepAutonomy {
     readonly stepId: string;
     readonly automatic: boolean;
     readonly decisions: readonly OperationAutonomyDecision[];
 }
-export interface PlanAutonomySummary {
+interface PlanAutonomySummary {
     readonly fullyAutonomous: boolean;
     readonly automaticStepIds: readonly string[];
     readonly humanApprovalStepIds: readonly string[];
     readonly steps: readonly PlanStepAutonomy[];
 }
-export type PlanValidationIssueCode = 'contract_invalid' | 'invalid_schema_version' | 'invalid_plan_version' | 'invalid_parent_version' | 'required_value_missing' | 'duplicate_step_id' | 'duplicate_edge' | 'unknown_edge_step' | 'self_edge' | 'cycle_detected' | 'task_mismatch' | 'contract_version_mismatch' | 'operation_not_allowed' | 'expected_path_missing' | 'path_outside_scope' | 'unknown_requirement' | 'unknown_acceptance_criterion' | 'unknown_required_check' | 'requirement_unplanned' | 'required_check_unplanned';
-export interface PlanValidationIssue {
+type PlanValidationIssueCode = 'contract_invalid' | 'invalid_schema_version' | 'invalid_plan_version' | 'invalid_parent_version' | 'required_value_missing' | 'duplicate_step_id' | 'duplicate_edge' | 'unknown_edge_step' | 'self_edge' | 'cycle_detected' | 'task_mismatch' | 'contract_version_mismatch' | 'operation_not_allowed' | 'expected_path_missing' | 'path_outside_scope' | 'unknown_requirement' | 'unknown_acceptance_criterion' | 'unknown_required_check' | 'requirement_unplanned' | 'required_check_unplanned';
+interface PlanValidationIssue {
     readonly code: PlanValidationIssueCode;
     readonly path: string;
     readonly message: string;
 }
-export type PlanValidationResult = {
+type PlanValidationResult = {
     readonly valid: true;
 } | {
     readonly valid: false;
     readonly issues: readonly PlanValidationIssue[];
 };
-export type PlanSupersessionIssueCode = 'plan_id_mismatch' | 'task_id_mismatch' | 'version_not_sequential' | 'parent_version_mismatch' | 'contract_version_regressed';
-export interface PlanSupersessionIssue {
+type PlanSupersessionIssueCode = 'plan_id_mismatch' | 'task_id_mismatch' | 'version_not_sequential' | 'parent_version_mismatch' | 'contract_version_regressed';
+interface PlanSupersessionIssue {
     readonly code: PlanSupersessionIssueCode;
     readonly message: string;
 }
-export type PlanSupersessionResult = {
+type PlanSupersessionResult = {
     readonly valid: true;
 } | {
     readonly valid: false;
     readonly issues: readonly PlanSupersessionIssue[];
 };
-export type ReplanValidationIssue = PlanValidationIssue | PlanSupersessionIssue | {
+type ReplanValidationIssue = PlanValidationIssue | PlanSupersessionIssue | {
     readonly code: 'invalid_completed_auto_replans';
     readonly message: string;
 };
-export type ReplanAuthorizationDecision = {
+type ReplanAuthorizationDecision = {
     readonly valid: true;
     readonly automatic: true;
     readonly requiresHumanApproval: false;
@@ -82,10 +82,10 @@ export type ReplanAuthorizationDecision = {
     readonly valid: false;
     readonly issues: readonly ReplanValidationIssue[];
 };
-export declare function classifyPlanStepAutonomy(contract: TaskContractV1, step: PlanStepV1): PlanStepAutonomy;
 export declare function summarizePlanAutonomy(contract: TaskContractV1, plan: PlanVersionV1): PlanAutonomySummary;
 export declare function validatePlanVersionV1(plan: PlanVersionV1, contract: TaskContractV1): PlanValidationResult;
 export declare function validatePlanSupersession(previous: PlanVersionV1, next: PlanVersionV1): PlanSupersessionResult;
 export declare function decideReplanAuthorization(contract: TaskContractV1, previous: PlanVersionV1, next: PlanVersionV1, completedAutomaticReplans: number): ReplanAuthorizationDecision;
 export declare function freezePlanVersionV1(plan: PlanVersionV1): PlanVersionV1;
+export {};
 //# sourceMappingURL=plan-version.d.ts.map

package/dist/project-client.d.ts

@@ -5,7 +5,7 @@ export declare const GOVERNANCE_IPC_DEFAULT_TIMEOUT_MS = 5000;
 export interface GovernanceProjectClientOptions {
     readonly timeoutMs?: number | undefined;
 }
-export interface ConnectGovernanceProjectClientOptions extends GovernanceProjectClientOptions {
+interface ConnectGovernanceProjectClientOptions extends GovernanceProjectClientOptions {
     readonly projectRoot: string;
     readonly projectId: string;
     readonly credential: GovernanceServiceCredential;
@@ -28,4 +28,5 @@ export declare class GovernanceProjectClient {
     request(request: unknown): Promise<GovernanceServiceResponse>;
 }
 export declare function connectGovernanceProjectClient(options: ConnectGovernanceProjectClientOptions): Promise<ConnectGovernanceProjectClientResult>;
+export {};
 //# sourceMappingURL=project-client.d.ts.map

package/dist/project-daemon.d.ts

@@ -1,7 +1,8 @@
-export interface GovernanceDaemonArguments {
+interface GovernanceDaemonArguments {
     readonly projectRoot: string;
     readonly projectId: string;
 }
 export declare function parseGovernanceDaemonArguments(argv: readonly string[]): GovernanceDaemonArguments;
 export declare function isGovernanceProjectDaemonEntrypoint(entrypoint?: string | undefined, moduleUrl?: string): boolean;
+export {};
 //# sourceMappingURL=project-daemon.d.ts.map

package/dist/project-server.d.ts

@@ -2,9 +2,7 @@ import type { GovernanceAttachmentBrokerLifecycleEvent } from './attachment-brok
 import { type GovernanceCapabilityGrantRegistryOptions, type IssuedGovernanceCapabilityGrant, type IssueGovernanceCapabilityGrantOptions } from './capability-grant.js';
 import type { GovernanceDaemonControlPort, GovernanceDaemonShutdownNotice } from './daemon-control.js';
 import { type GovernanceDecisionContextProvider } from './project-service.js';
-export declare const GOVERNANCE_IPC_MAX_CONNECTIONS = 128;
-export declare const GOVERNANCE_IPC_SOCKET_TIMEOUT_MS = 10000;
-export interface GovernanceProjectServerOptions {
+interface GovernanceProjectServerOptions {
     readonly projectRoot: string;
     readonly projectId: string;
     readonly resolveDecisionContext?: GovernanceDecisionContextProvider | undefined;
@@ -45,4 +43,5 @@ export declare class GovernanceProjectServer {
     private persistDaemonShutdownAudit;
     private closeListener;
 }
+export {};
 //# sourceMappingURL=project-server.d.ts.map

package/dist/project-service.d.ts

@@ -7,7 +7,7 @@ import type { GovernanceCommand, GovernanceDecisionContext, GovernanceEvent, Tas
 import type { RecordWorkspaceSnapshotResult } from './workspace-snapshot-fence.js';
 export type { GovernanceServiceCapability, GovernanceServiceClientContext, GovernanceServiceRequest, } from './service-protocol.js';
 export { GOVERNANCE_SERVICE_CAPABILITIES, GOVERNANCE_SERVICE_PROTOCOL_VERSION, } from './service-protocol.js';
-export type GovernanceServiceResult = {
+type GovernanceServiceResult = {
     readonly type: 'health';
     readonly projectId: string;
     readonly protocolVersion: typeof GOVERNANCE_SERVICE_PROTOCOL_VERSION;
@@ -86,7 +86,7 @@ export type GovernanceServiceResult = {
     readonly grant: GovernanceCapabilityGrant;
     readonly credential: GovernanceServiceCredential;
 };
-export type GovernanceServiceErrorCode = 'unsupported_protocol' | 'invalid_request' | 'authentication_failed' | 'permission_denied' | 'identity_mismatch' | 'project_mismatch' | 'store_failure' | 'request_in_progress';
+type GovernanceServiceErrorCode = 'unsupported_protocol' | 'invalid_request' | 'authentication_failed' | 'permission_denied' | 'identity_mismatch' | 'project_mismatch' | 'store_failure' | 'request_in_progress';
 export type GovernanceServiceResponse = {
     readonly ok: true;
     readonly requestId: string;

package/dist/protocol-decoder.d.ts

@@ -1,11 +1,11 @@
 import { type GovernanceServiceRequest } from './service-protocol.js';
-export type GovernanceProtocolDecodeIssueCode = 'expected_object' | 'expected_array' | 'unknown_field' | 'invalid_value' | 'semantic_invalid' | 'resource_limit';
-export interface GovernanceProtocolDecodeIssue {
+type GovernanceProtocolDecodeIssueCode = 'expected_object' | 'expected_array' | 'unknown_field' | 'invalid_value' | 'semantic_invalid' | 'resource_limit';
+interface GovernanceProtocolDecodeIssue {
     readonly code: GovernanceProtocolDecodeIssueCode;
     readonly path: string;
     readonly message: string;
 }
-export type GovernanceServiceRequestDecodeResult = {
+type GovernanceServiceRequestDecodeResult = {
     readonly decoded: true;
     readonly request: GovernanceServiceRequest;
 } | {
@@ -13,4 +13,5 @@ export type GovernanceServiceRequestDecodeResult = {
     readonly issues: readonly GovernanceProtocolDecodeIssue[];
 };
 export declare function decodeGovernanceServiceRequest(input: unknown): GovernanceServiceRequestDecodeResult;
+export {};
 //# sourceMappingURL=protocol-decoder.d.ts.map

package/dist/service-protocol.d.ts

@@ -10,7 +10,7 @@ export interface GovernanceServiceClientContext {
     /** Assigned by the transport/policy layer, never accepted from request payloads. */
     readonly capabilities: ReadonlySet<GovernanceServiceCapability>;
 }
-export interface GovernanceServiceRequestMetadata {
+interface GovernanceServiceRequestMetadata {
     readonly protocolVersion: typeof GOVERNANCE_SERVICE_PROTOCOL_VERSION;
     readonly requestId: string;
 }
@@ -83,4 +83,5 @@ export type GovernanceServiceRequest = GovernanceServiceRequestMetadata & ({
     readonly ttlMs: number;
     readonly reason?: string | undefined;
 });
+export {};
 //# sourceMappingURL=service-protocol.d.ts.map

package/dist/task-aggregate.d.ts

@@ -2,7 +2,7 @@ import { type PlanVersionV1 } from './plan-version.js';
 import { type TaskContractV1 } from './task-contract.js';
 import { type GovernanceActor, type TransitionFacts } from './transition-engine.js';
 import type { WorkflowState } from './workflow-state.js';
-export interface GovernanceCommandMetadata {
+interface GovernanceCommandMetadata {
     readonly commandId: string;
     readonly taskId: string;
     readonly expectedRevision: number;
@@ -24,7 +24,7 @@ export interface GovernanceDecisionContext {
     /** Trusted facts computed by deterministic policy/adapters, never copied from model arguments. */
     readonly transitionFacts?: TransitionFacts | undefined;
 }
-export type GovernanceEventPayload = {
+type GovernanceEventPayload = {
     readonly type: 'task_created';
     readonly projectId: string;
     readonly contract: TaskContractV1;
@@ -58,7 +58,7 @@ export interface TaskAggregate {
     readonly createdAt: string;
     readonly updatedAt: string;
 }
-export type CommandRejectionCode = 'stale_revision' | 'task_already_exists' | 'task_missing' | 'task_identity_mismatch' | 'project_identity_mismatch' | 'initial_contract_version_invalid' | 'contract_invalid' | 'plan_invalid' | 'plan_supersession_invalid' | 'plan_attach_state_invalid' | 'active_plan_missing' | 'replan_version_missing' | 'transition_facts_missing' | 'transition_rejected';
+type CommandRejectionCode = 'stale_revision' | 'task_already_exists' | 'task_missing' | 'task_identity_mismatch' | 'project_identity_mismatch' | 'initial_contract_version_invalid' | 'contract_invalid' | 'plan_invalid' | 'plan_supersession_invalid' | 'plan_attach_state_invalid' | 'active_plan_missing' | 'replan_version_missing' | 'transition_facts_missing' | 'transition_rejected';
 export type GovernanceCommandDecision = {
     readonly accepted: true;
     readonly event: GovernanceEvent;
@@ -68,8 +68,8 @@ export type GovernanceCommandDecision = {
     readonly message: string;
     readonly details?: readonly unknown[] | undefined;
 };
-export type EventApplyRejectionCode = 'first_event_not_task_created' | 'duplicate_task_created' | 'task_id_mismatch' | 'event_revision_gap' | 'event_state_mismatch' | 'event_requires_existing_task';
-export type EventApplyResult = {
+type EventApplyRejectionCode = 'first_event_not_task_created' | 'duplicate_task_created' | 'task_id_mismatch' | 'event_revision_gap' | 'event_state_mismatch' | 'event_requires_existing_task';
+type EventApplyResult = {
     readonly applied: true;
     readonly aggregate: TaskAggregate;
 } | {
@@ -77,7 +77,7 @@ export type EventApplyResult = {
     readonly code: EventApplyRejectionCode;
     readonly message: string;
 };
-export type TaskReplayResult = {
+type TaskReplayResult = {
     readonly replayed: true;
     readonly aggregate: TaskAggregate;
 } | {
@@ -89,4 +89,5 @@ export type TaskReplayResult = {
 export declare function decideGovernanceCommand(aggregate: TaskAggregate | null, command: GovernanceCommand, context?: GovernanceDecisionContext): GovernanceCommandDecision;
 export declare function applyGovernanceEvent(aggregate: TaskAggregate | null, event: GovernanceEvent): EventApplyResult;
 export declare function replayTaskEvents(events: readonly GovernanceEvent[]): TaskReplayResult;
+export {};
 //# sourceMappingURL=task-aggregate.d.ts.map

package/dist/task-contract.d.ts

@@ -1,32 +1,32 @@
 import { type AutonomyEnvelope } from './autonomy-envelope.js';
 export declare const TASK_CONTRACT_SCHEMA_VERSION: 1;
 export declare const CONTRACT_SOURCES: readonly ['explicit_user', 'project_policy', 'deterministic_inference', 'model_proposal'];
-export type ContractSource = (typeof CONTRACT_SOURCES)[number];
+type ContractSource = (typeof CONTRACT_SOURCES)[number];
 export declare const EVIDENCE_KINDS: readonly ['test', 'typecheck', 'lint', 'build', 'static_analysis', 'security', 'api_compatibility', 'schema', 'performance', 'review'];
 export type EvidenceKind = (typeof EVIDENCE_KINDS)[number];
 export declare const REVIEW_DIMENSIONS: readonly ['correctness', 'requirements_traceability', 'security_permissions', 'api_schema_compatibility', 'testing_evidence', 'performance_resources', 'concurrency_recovery', 'maintainability_architecture'];
-export type ReviewDimension = (typeof REVIEW_DIMENSIONS)[number];
+type ReviewDimension = (typeof REVIEW_DIMENSIONS)[number];
 export declare const ROLLBACK_CLASSES: readonly ['isolated_discard', 'git_revert', 'verified_compensation', 'manual_only', 'irreversible'];
-export type RollbackClass = (typeof ROLLBACK_CLASSES)[number];
+type RollbackClass = (typeof ROLLBACK_CLASSES)[number];
 export declare const CONTRACT_ASSUMPTION_STATUSES: readonly ['unverified', 'verified', 'rejected', 'expired'];
 export declare const BASELINE_POLICIES: readonly ['required', 'optional', 'read_only'];
-export interface TaskRequirement {
+interface TaskRequirement {
     readonly id: string;
     readonly text: string;
     readonly acceptanceCriteriaIds: readonly string[];
 }
-export interface AcceptanceCriterion {
+interface AcceptanceCriterion {
     readonly id: string;
     readonly statement: string;
     readonly evidenceKinds: readonly EvidenceKind[];
 }
-export interface RequiredCheck {
+interface RequiredCheck {
     readonly id: string;
     readonly kind: EvidenceKind;
     readonly required: boolean;
     readonly requirementIds: readonly string[];
 }
-export interface ContractAssumption {
+interface ContractAssumption {
     readonly id: string;
     readonly statement: string;
     readonly source: ContractSource;
@@ -57,13 +57,13 @@ export interface TaskContractV1 {
         readonly autonomy: ContractSource;
     };
 }
-export type ContractValidationIssueCode = 'invalid_schema_version' | 'invalid_contract_version' | 'required_value_missing' | 'duplicate_id' | 'unknown_acceptance_criterion' | 'unknown_requirement' | 'path_scope_missing' | 'path_scope_conflict' | 'invalid_budget' | 'auto_replan_exceeds_budget' | 'approval_operation_not_allowed' | 'operation_exceeds_tier';
-export interface ContractValidationIssue {
+type ContractValidationIssueCode = 'invalid_schema_version' | 'invalid_contract_version' | 'required_value_missing' | 'duplicate_id' | 'unknown_acceptance_criterion' | 'unknown_requirement' | 'path_scope_missing' | 'path_scope_conflict' | 'invalid_budget' | 'auto_replan_exceeds_budget' | 'approval_operation_not_allowed' | 'operation_exceeds_tier';
+interface ContractValidationIssue {
     readonly code: ContractValidationIssueCode;
     readonly path: string;
     readonly message: string;
 }
-export type ContractValidationResult = {
+type ContractValidationResult = {
     readonly valid: true;
 } | {
     readonly valid: false;
@@ -71,4 +71,5 @@ export type ContractValidationResult = {
 };
 export declare function validateTaskContractV1(contract: TaskContractV1): ContractValidationResult;
 export declare function freezeTaskContractV1(contract: TaskContractV1): TaskContractV1;
+export {};
 //# sourceMappingURL=task-contract.d.ts.map

package/dist/transition-engine.d.ts

@@ -1,7 +1,7 @@
 import type { WorkflowState } from './workflow-state.js';
 export declare const GOVERNANCE_ACTORS: readonly ['model', 'human', 'policy', 'system'];
 export type GovernanceActor = (typeof GOVERNANCE_ACTORS)[number];
-export type AuthorizationKind = 'none' | 'automatic' | 'human';
+type AuthorizationKind = 'none' | 'automatic' | 'human';
 export interface TransitionFacts {
     readonly contractApproved: boolean;
     readonly planApproved: boolean;
@@ -22,8 +22,8 @@ export interface TransitionProposal {
     /** Trusted facts computed by governance adapters/policy, never copied from model arguments. */
     readonly facts: TransitionFacts;
 }
-export type TransitionRejectionCode = 'stale_revision' | 'illegal_transition' | 'authorization_missing' | 'contract_not_approved' | 'plan_not_approved' | 'outside_autonomy_envelope' | 'execution_grant_missing' | 'stale_snapshot' | 'evidence_missing' | 'blocking_findings' | 'model_cannot_self_admit' | 'rollback_unverified';
-export type TransitionDecision = {
+type TransitionRejectionCode = 'stale_revision' | 'illegal_transition' | 'authorization_missing' | 'contract_not_approved' | 'plan_not_approved' | 'outside_autonomy_envelope' | 'execution_grant_missing' | 'stale_snapshot' | 'evidence_missing' | 'blocking_findings' | 'model_cannot_self_admit' | 'rollback_unverified';
+type TransitionDecision = {
     readonly allowed: true;
     readonly from: WorkflowState;
     readonly to: WorkflowState;
@@ -34,4 +34,5 @@ export type TransitionDecision = {
     readonly message: string;
 };
 export declare function decideTransition(proposal: TransitionProposal): TransitionDecision;
+export {};
 //# sourceMappingURL=transition-engine.d.ts.map

package/dist/verification-check-binding.d.ts

@@ -1,5 +1,5 @@
 import { type EvidenceKind } from './task-contract.js';
-export declare const VERIFICATION_CHECK_BINDING_SCHEMA_VERSION: 1;
+declare const VERIFICATION_CHECK_BINDING_SCHEMA_VERSION: 1;
 export interface VerificationCheckDescriptor {
     readonly id: string;
     readonly evidenceKind: EvidenceKind;
@@ -15,9 +15,9 @@ export interface VerificationCheckBindingV1 {
     readonly executionClass: 'trusted_deterministic';
     readonly handlerFingerprint: string;
 }
-export declare function calculateVerificationCheckHandlerFingerprint(descriptor: VerificationCheckDescriptor): string;
 export declare function calculateVerificationCheckRegistryFingerprint(descriptors: readonly VerificationCheckDescriptor[]): string;
 export declare function createVerificationCheckBinding(registryFingerprint: string, descriptor: VerificationCheckDescriptor): VerificationCheckBindingV1;
 export declare function isVerificationCheckBindingIntegrityValid(binding: VerificationCheckBindingV1): boolean;
 export declare function verificationCheckBindingMatches(binding: VerificationCheckBindingV1, registryFingerprint: string, descriptor: VerificationCheckDescriptor): boolean;
+export {};
 //# sourceMappingURL=verification-check-binding.d.ts.map

package/dist/verification-check-registry.d.ts

@@ -3,7 +3,7 @@ import { type VerificationCheckBindingV1, type VerificationCheckDescriptor } fro
 import type { VerificationExecutionLeaseConsumption } from './verification-execution-lease.js';
 import { type VerificationRunContract } from './verification-run-contract.js';
 export declare const MAX_VERIFICATION_CHECK_REGISTRATIONS = 256;
-export interface FocusedVerificationExecutionContext {
+interface FocusedVerificationExecutionContext {
     readonly run: VerificationRunContract;
     readonly consumption: VerificationExecutionLeaseConsumption;
     readonly workspaceManifestHash: string;
@@ -20,7 +20,7 @@ export type VerificationCheckBindingResolution = {
     readonly code: 'check_not_registered' | 'evidence_kind_mismatch';
     readonly message: string;
 };
-export type VerificationCheckRegistryExecutionResult<Result> = {
+type VerificationCheckRegistryExecutionResult<Result> = {
     readonly executed: false;
     readonly code: VerificationCheckRegistryDenialCode;
     readonly message: string;
@@ -40,4 +40,5 @@ export declare class VerificationCheckRegistry<Result> {
     bindingFor(checkId: string, evidenceKind: EvidenceKind): VerificationCheckBindingResolution;
     execute(context: FocusedVerificationExecutionContext): Promise<VerificationCheckRegistryExecutionResult<Result>>;
 }
+export {};
 //# sourceMappingURL=verification-check-registry.d.ts.map

package/dist/verification-issuance-coordinator.d.ts

@@ -6,18 +6,18 @@ import type { VerificationCheckBindingResolution } from './verification-check-re
 import type { IssueVerificationExecutionLeaseResult } from './verification-execution-lease.js';
 import type { VerificationPlanDraftV1 } from './verification-planner.js';
 import { type VerificationRunIssuanceIssue, type VerificationRunRequestV1 } from './verification-run-contract.js';
-export type VerificationIssuanceCoordinatorMode = 'legacy' | 'enforced';
-export interface VerificationCheckBindingResolver {
+type VerificationIssuanceCoordinatorMode = 'legacy' | 'enforced';
+interface VerificationCheckBindingResolver {
     bindingFor(checkId: string, evidenceKind: EvidenceKind): VerificationCheckBindingResolution;
 }
-export interface VerificationExecutionLeaseIssuer {
+interface VerificationExecutionLeaseIssuer {
     issueVerificationExecutionLeaseIfCurrent: GovernanceEventStore['issueVerificationExecutionLeaseIfCurrent'];
     recordWorkspaceSnapshot?: GovernanceEventStore['recordWorkspaceSnapshot'];
 }
-export interface VerificationWorkspaceSnapshotRecorder {
+interface VerificationWorkspaceSnapshotRecorder {
     recordWorkspaceSnapshot: GovernanceEventStore['recordWorkspaceSnapshot'];
 }
-export interface VerificationIssuanceCoordinatorOptions {
+interface VerificationIssuanceCoordinatorOptions {
     /** Defaults to legacy; construction alone cannot enable governed issuance. */
     readonly mode?: VerificationIssuanceCoordinatorMode | undefined;
     readonly verifierClientId: string;
@@ -44,7 +44,7 @@ type VerificationLeaseFailure = Extract<IssueVerificationExecutionLeaseResult, {
 type VerificationLeaseSuccess = Extract<IssueVerificationExecutionLeaseResult, {
     issued: true;
 }>;
-export type VerificationIssuanceCoordinatorResult = {
+type VerificationIssuanceCoordinatorResult = {
     readonly route: 'legacy';
     readonly handled: false;
     readonly reason: 'coordinator_disabled';

package/dist/verification-ledger-store.d.ts

@@ -2,7 +2,7 @@ import type { DatabaseSync } from 'node:sqlite';
 import { type ConsumeVerificationExecutionLeaseResult, type IssueVerificationExecutionLeaseResult, type VerificationExecutionBinding, type VerificationExecutionLeaseCredential, type VerificationExecutionLeaseStatus, type VerificationLeaseIssuancePrecondition } from './verification-execution-lease.js';
 import { type VerificationRunContract } from './verification-run-contract.js';
 import { type RecordWorkspaceSnapshotResult, type WorkspaceSnapshotFenceDescriptor } from './workspace-snapshot-fence.js';
-export interface SqliteVerificationLedgerOptions {
+interface SqliteVerificationLedgerOptions {
     readonly now: () => string;
     readonly verificationLeaseSecret?: (() => string) | undefined;
 }
@@ -17,4 +17,5 @@ export declare class SqliteVerificationLedger {
     consume(credential: VerificationExecutionLeaseCredential, binding: VerificationExecutionBinding): ConsumeVerificationExecutionLeaseResult;
     readStatus(leaseId: string): VerificationExecutionLeaseStatus;
 }
+export {};
 //# sourceMappingURL=verification-ledger-store.d.ts.map

package/dist/verification-planner.d.ts

@@ -2,31 +2,31 @@ import type { GovernanceEvidenceCandidateLedgerEntry } from './evidence-candidat
 import type { TaskAggregate } from './task-aggregate.js';
 import { type EvidenceKind } from './task-contract.js';
 export declare const VERIFICATION_PLANNER_INPUT_SCHEMA_VERSION: 1;
-export declare const VERIFICATION_PLAN_DRAFT_SCHEMA_VERSION: 1;
+declare const VERIFICATION_PLAN_DRAFT_SCHEMA_VERSION: 1;
 export declare const MAX_VERIFICATION_CANDIDATE_PROPOSALS = 512;
-export interface VerificationPlanningScopeV1 {
+interface VerificationPlanningScopeV1 {
     readonly taskId: string;
     readonly contractVersion: number;
     readonly planFingerprint: string;
     readonly workspaceManifestHash: string;
 }
-export interface VerificationCandidateProposalV1 {
+interface VerificationCandidateProposalV1 {
     readonly requiredCheckId: string;
     readonly candidateId: string;
 }
-export interface VerificationPlannerInputV1 {
+interface VerificationPlannerInputV1 {
     readonly schemaVersion: typeof VERIFICATION_PLANNER_INPUT_SCHEMA_VERSION;
     readonly scope: VerificationPlanningScopeV1;
     readonly proposals: readonly VerificationCandidateProposalV1[];
 }
-export type VerificationPlannerIssueCode = 'task_missing' | 'active_contract_missing' | 'contract_invalid' | 'invalid_schema_version' | 'task_mismatch' | 'contract_version_mismatch' | 'scope_identity_invalid' | 'proposal_limit_exceeded';
-export interface VerificationPlannerIssue {
+type VerificationPlannerIssueCode = 'task_missing' | 'active_contract_missing' | 'contract_invalid' | 'invalid_schema_version' | 'task_mismatch' | 'contract_version_mismatch' | 'scope_identity_invalid' | 'proposal_limit_exceeded';
+interface VerificationPlannerIssue {
     readonly code: VerificationPlannerIssueCode;
     readonly path: string;
     readonly message: string;
 }
-export type VerificationProposalRejectionCode = 'proposal_invalid' | 'duplicate_proposal' | 'unknown_required_check' | 'candidate_missing' | 'candidate_ambiguous' | 'candidate_ineligible' | 'candidate_task_mismatch' | 'candidate_plan_mismatch' | 'candidate_workspace_mismatch';
-export type VerificationProposalDisposition = {
+type VerificationProposalRejectionCode = 'proposal_invalid' | 'duplicate_proposal' | 'unknown_required_check' | 'candidate_missing' | 'candidate_ambiguous' | 'candidate_ineligible' | 'candidate_task_mismatch' | 'candidate_plan_mismatch' | 'candidate_workspace_mismatch';
+type VerificationProposalDisposition = {
     readonly state: 'accepted_as_proposal';
     readonly requiredCheckId: string;
     readonly candidateId: string;
@@ -37,7 +37,7 @@ export type VerificationProposalDisposition = {
     readonly code: VerificationProposalRejectionCode;
     readonly path: string;
 };
-export interface VerificationCheckDraftV1 {
+interface VerificationCheckDraftV1 {
     readonly requiredCheckId: string;
     readonly expectedEvidenceKind: EvidenceKind;
     readonly required: boolean;
@@ -63,7 +63,7 @@ export interface VerificationPlanDraftV1 {
         readonly nextAction: 'repropose_candidates' | 'independent_verification';
     };
 }
-export type VerificationPlanningResult = {
+type VerificationPlanningResult = {
     readonly planned: false;
     readonly issues: readonly VerificationPlannerIssue[];
 } | {
@@ -73,4 +73,5 @@ export type VerificationPlanningResult = {
 };
 export declare function calculateVerificationPlanDraftId(draft: Pick<VerificationPlanDraftV1, 'schemaVersion' | 'status' | 'scope' | 'checks'>): string;
 export declare function buildVerificationPlanDraft(task: TaskAggregate | null, candidates: readonly GovernanceEvidenceCandidateLedgerEntry[], input: VerificationPlannerInputV1): VerificationPlanningResult;
+export {};
 //# sourceMappingURL=verification-planner.d.ts.map

package/dist/verification-run-contract.d.ts

@@ -5,10 +5,9 @@ import { type EvidenceKind } from './task-contract.js';
 import { type VerificationCheckBindingV1 } from './verification-check-binding.js';
 import { type VerificationPlanDraftV1 } from './verification-planner.js';
 export declare const VERIFICATION_RUN_REQUEST_SCHEMA_VERSION: 1;
-export declare const VERIFICATION_RUN_CONTRACT_V1_SCHEMA_VERSION: 1;
-export declare const VERIFICATION_RUN_CONTRACT_SCHEMA_VERSION: 2;
+declare const VERIFICATION_RUN_CONTRACT_V1_SCHEMA_VERSION: 1;
+declare const VERIFICATION_RUN_CONTRACT_SCHEMA_VERSION: 2;
 export declare const MAX_VERIFICATION_RUN_TTL_MS: number;
-export declare const MAX_VERIFICATION_RUN_DURATION_MS: number;
 export interface VerificationRunRequestV1 {
     readonly schemaVersion: typeof VERIFICATION_RUN_REQUEST_SCHEMA_VERSION;
     readonly draftId: string;
@@ -16,13 +15,13 @@ export interface VerificationRunRequestV1 {
     readonly candidateId: string;
 }
 /** Supplied by the deterministic daemon/transport, never by the model request payload. */
-export interface VerificationRunAuthorityContext {
+interface VerificationRunAuthorityContext {
     readonly verifierClientId: string;
     readonly issuedAt: string;
     readonly ttlMs: number;
     readonly maxDurationMs: number;
 }
-export interface BoundVerificationRunAuthorityContext extends VerificationRunAuthorityContext {
+interface BoundVerificationRunAuthorityContext extends VerificationRunAuthorityContext {
     /** Derived from the trusted immutable registry, never from the model request. */
     readonly checkBinding: VerificationCheckBindingV1;
 }
@@ -63,14 +62,14 @@ export interface VerificationRunContractV2 extends Omit<VerificationRunContractV
     readonly checkBinding: VerificationCheckBindingV1;
 }
 export type VerificationRunContract = VerificationRunContractV1 | VerificationRunContractV2;
-export type VerificationRunContractWithoutId = Omit<VerificationRunContractV1, 'runId'> | Omit<VerificationRunContractV2, 'runId'>;
-export type VerificationRunIssuanceIssueCode = 'task_missing' | 'active_contract_missing' | 'workflow_state_invalid' | 'draft_invalid' | 'draft_scope_mismatch' | 'request_invalid' | 'required_check_missing' | 'required_check_drifted' | 'candidate_not_proposed' | 'candidate_missing' | 'candidate_ambiguous' | 'candidate_ineligible' | 'candidate_scope_mismatch' | 'verifier_identity_invalid' | 'verifier_not_independent' | 'operation_not_authorized' | 'check_binding_invalid' | 'check_binding_mismatch' | 'authority_time_invalid' | 'authority_limits_invalid';
+type VerificationRunContractWithoutId = Omit<VerificationRunContractV1, 'runId'> | Omit<VerificationRunContractV2, 'runId'>;
+type VerificationRunIssuanceIssueCode = 'task_missing' | 'active_contract_missing' | 'workflow_state_invalid' | 'draft_invalid' | 'draft_scope_mismatch' | 'request_invalid' | 'required_check_missing' | 'required_check_drifted' | 'candidate_not_proposed' | 'candidate_missing' | 'candidate_ambiguous' | 'candidate_ineligible' | 'candidate_scope_mismatch' | 'verifier_identity_invalid' | 'verifier_not_independent' | 'operation_not_authorized' | 'check_binding_invalid' | 'check_binding_mismatch' | 'authority_time_invalid' | 'authority_limits_invalid';
 export interface VerificationRunIssuanceIssue {
     readonly code: VerificationRunIssuanceIssueCode;
     readonly path: string;
     readonly message: string;
 }
-export type VerificationRunIssuanceResult = {
+type VerificationRunIssuanceResult = {
     readonly issued: true;
     readonly contract: VerificationRunContract;
 } | {
@@ -81,4 +80,5 @@ export declare function calculateVerificationRunId(contract: VerificationRunCont
 export declare function isVerificationRunContractIntegrityValid(contract: VerificationRunContract): boolean;
 export declare function issueVerificationRunContract(task: TaskAggregate | null, draft: VerificationPlanDraftV1, candidates: readonly GovernanceEvidenceCandidateLedgerEntry[], request: VerificationRunRequestV1, authority: VerificationRunAuthorityContext): VerificationRunIssuanceResult;
 export declare function issueBoundVerificationRunContract(task: TaskAggregate | null, draft: VerificationPlanDraftV1, candidates: readonly GovernanceEvidenceCandidateLedgerEntry[], request: VerificationRunRequestV1, authority: BoundVerificationRunAuthorityContext): VerificationRunIssuanceResult;
+export {};
 //# sourceMappingURL=verification-run-contract.d.ts.map

package/dist/verification-tool-gateway.d.ts

@@ -3,8 +3,8 @@ import type { VerificationCheckDescriptor } from './verification-check-binding.j
 import type { VerificationCheckRegistry, VerificationCheckRegistryDenialCode } from './verification-check-registry.js';
 import type { ConsumeVerificationExecutionLeaseResult, VerificationExecutionLeaseConsumption, VerificationExecutionLeaseCredential } from './verification-execution-lease.js';
 import type { VerificationRunContract } from './verification-run-contract.js';
-export declare const VERIFICATION_TOOL_GATEWAY_REQUEST_SCHEMA_VERSION: 1;
-export type VerificationToolGatewayMode = 'legacy' | 'enforced';
+declare const VERIFICATION_TOOL_GATEWAY_REQUEST_SCHEMA_VERSION: 1;
+type VerificationToolGatewayMode = 'legacy' | 'enforced';
 /**
  * Contains only canonical identities and a one-time credential. Tool names,
  * commands, paths, and arguments are deliberately not accepted at this boundary.
@@ -18,13 +18,13 @@ export interface VerificationToolGatewayRequestV1 {
         readonly planFingerprint: string;
     };
 }
-export interface VerificationWorkspaceIdentity {
+interface VerificationWorkspaceIdentity {
     readonly manifestHash: string;
 }
-export interface VerificationExecutionLeaseConsumer {
+interface VerificationExecutionLeaseConsumer {
     consumeVerificationExecutionLease: GovernanceEventStore['consumeVerificationExecutionLease'];
 }
-export interface VerificationToolGatewayOptions<Result> {
+interface VerificationToolGatewayOptions<Result> {
     /** Defaults to legacy so construction alone can never enable enforcement. */
     readonly mode?: VerificationToolGatewayMode | undefined;
     readonly verifierClientId: string;
@@ -36,7 +36,7 @@ type VerificationLeaseDenialCode = Extract<ConsumeVerificationExecutionLeaseResu
     readonly authorized: false;
 }>['code'];
 type VerificationToolGatewayDenialCode = VerificationLeaseDenialCode | 'request_invalid' | 'workspace_identity_unavailable';
-export type VerificationToolGatewayResult<Result> = {
+type VerificationToolGatewayResult<Result> = {
     readonly route: 'legacy';
     readonly handled: false;
     readonly reason: 'gateway_disabled';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wrongstack/governance",
-  "version": "0.313.1",
+  "version": "0.316.2",
   "license": "MIT",
   "description": "Deterministic workflow contracts and transition policy for WrongStack orchestration.",
   "repository": {
@@ -27,7 +27,7 @@
     "README.md"
   ],
   "dependencies": {
-    "@wrongstack/persistence": "0.313.1"
+    "@wrongstack/persistence": "0.316.2"
   },
   "devDependencies": {
     "@types/node": "^26.2.0",