@parmanasystems/core

Aggregation package that re-exports the full public surface of the Parmana governance stack through a single import. Install this instead of individual packages when you need the governance lifecycle (create/validate/generate policy bundles), deterministic execution (executeFromSignals, executeDecision), portable verification (verifyAttestation, verifyBundle), provenance management, and canonicalization utilities together.

What it exports

@parmanasystems/core is a pure re-export package — all behaviour lives in the packages listed below. Each symbol is sourced from the package shown.

Governance lifecycle (from @parmanasystems/governance)

createPolicy(options)         // create policy directory scaffold
upgradePolicy(options)        // create next policy version
validatePolicy(policy)        // semantic validation
generateBundle(options)       // compile + sign + write bundle

Signing (from @parmanasystems/crypto)

signBundle(bundlePath, privateKey)

Deterministic execution (from @parmanasystems/execution)

executeDecision(context)         // three-stage deterministic execution
issueToken(input)                // issue an ExecutionToken
verifyExecutionToken(...)        // verify a token signature
confirmExecution(options)        // produce ExecutionIntegrityProof
getRuntimeManifest()             // static embedded runtime manifest
signRuntimeManifest(...)
verifyRuntimeManifest(...)
LocalSigner
LocalVerifier
INVARIANT_REGISTRY
InvariantViolation
violate(id, message)
hashInput(value)

// Types:
ExecutionContext, ExecutionAttestation, ExecutionToken,
RuntimeManifest, Signer, Verifier, ReplayStore,
InvariantBoundary, InvariantEntry, InvariantId, ViolationReport

Runtime orchestration (from @parmanasystems/execution-runtime)

executeFromSignals(input, signer, verifier, runtimeEnvironment?, replayStore?)
MemoryReplayStore
RedisReplayStore

Portable verification (from @parmanasystems/verifier)

verifyAttestation(attestation, publicKey)
verifyBundle(manifestPath, signaturePath, publicKey)
verifyRuntime(manifest, signature, verifier)
verifyRuntimeCompatibility(manifest, requirements)
verifyExecutionRequirements(requirements, manifest)

Deterministic canonicalization (from @parmanasystems/canonical)

canonicalize(value)
canonicalizeForSigning(value, domain)
applySigningDomain(value, domain)
SIGNING_DOMAINS
// Type: SigningDomain

Signal provenance (from @parmanasystems/provenance)

hashEvidence(evidence)
hashProvenance(provenance)
hashProvenanceSummary(signals)
extractSignalValues(signals)
extractProvenanceMap(signals)
validateProvenance(signals)
documentProvenance(signals, provenance)
accountAggregatorProvenance(signals, options)
voiceTranscriptProvenance(signals, options)
withProvenance(signals, provenance)
withoutProvenance(signals)

// Types: SignalProvenance, GovernedSignal, GovernedSignalMap,
//        SourceAttestation, VerificationMethod, TrustLevel,
//        SourceType, ProvenanceValidationResult

Contracts (from @parmanasystems/contracts)

// Types: ExecutedAction, ExecutionIntegrityProof, MatchDetails,
//        DecisionResult, DecisionOutcome

Override authority

approveOverride(input: ApproveOverrideInput): Promise<ExecutionAttestation>
// Type: ApproveOverrideInput

Validators and types

Internal validation schemas, envelope types, payload types, and metadata types are exported from ./validator.js, ./invariants.js, ./types/envelope.js, ./types/payloads.js, ./types/validation.js, ./types/metadata.js, ./deterministic-policy.js, and ./types/validator-config.js.

Environment variables

None directly. All env-var behaviour is in the underlying packages (@parmanasystems/signing, @parmanasystems/execution-runtime).

Package wiring

@parmanasystems/core depends on @parmanasystems/governance, @parmanasystems/crypto, @parmanasystems/execution, @parmanasystems/execution-runtime, @parmanasystems/verifier, @parmanasystems/canonical, @parmanasystems/contracts, and @parmanasystems/provenance. It is the intended import path for application-layer code that needs the full governance stack without constructing each package dependency individually.