Host-aware governance runtime for AI-assisted software delivery. FlowGuard
enforces governed development workflows with hash-chained audit trails,
policy-bound decision enforcement, and evidence-first compliance.
OpenCode currently provides the strongest synchronous enforcement path through
its plugin integration. Claude Code and Codex are supported through MCP,
hooks, and native packaging with hook-gated, platform-limited guarantees.
Fail-closed: ambiguity blocks, never guesses.
Deterministic: same state + input = same result.
Evidence-first: every phase produces verifiable artifacts.
Policy-bound: every decision traced to a policy version.
Description
Public API for the FlowGuard runtime package.
This barrel exports the stable public surface. Internal modules
(adapters, individual collectors, machine topology, rail executors)
are available via direct imports for tests and internal tooling.
Consumer entry points:
@flowguard/core — this file (schemas, machine, policy, audit, archive, logging)
@flowguard/core/integration — Host integration surfaces, including OpenCode tool/plugin bindings
@flowguard/core/testing — Test utilities only
Several exports, such as SessionState, are runtime Zod schemas.
Use z.infer<typeof SessionState> for the corresponding TypeScript type.
FlowGuard API
Host-aware governance runtime for AI-assisted software delivery. FlowGuard enforces governed development workflows with hash-chained audit trails, policy-bound decision enforcement, and evidence-first compliance.
OpenCode currently provides the strongest synchronous enforcement path through its plugin integration. Claude Code and Codex are supported through MCP, hooks, and native packaging with hook-gated, platform-limited guarantees.
Package Structure
@flowguard/core@flowguard/core/integration@flowguard/core/integration/tools@flowguard/core/testingcreateTestContext)Quick Start
Policy Modes
Architecture
Fail-closed: ambiguity blocks, never guesses. Deterministic: same state + input = same result. Evidence-first: every phase produces verifiable artifacts. Policy-bound: every decision traced to a policy version.
Description
Public API for the FlowGuard runtime package.
This barrel exports the stable public surface. Internal modules (adapters, individual collectors, machine topology, rail executors) are available via direct imports for tests and internal tooling.
Consumer entry points:
@flowguard/core— this file (schemas, machine, policy, audit, archive, logging)@flowguard/core/integration— Host integration surfaces, including OpenCode tool/plugin bindings@flowguard/core/testing— Test utilities onlySeveral exports, such as
SessionState, are runtime Zod schemas. Usez.infer<typeof SessionState>for the corresponding TypeScript type.Version
v3