Master Agreement Generator

Master Agreement Generator

One master template, one small spec per counterparty, one draft build step. The generator always labels output DRAFT, including documents generated from a completed template. A successful conversion proves artifact generation, not legal completeness, authority to contract, or readiness to send or sign. An executed agreement may permit designated opportunities to be added by notice; that authority must be established before using the Schedule A workflow.

When to Use

• You issue a framework agreement (NDA, referral or sourcing fee, non-circumvention, master services) to many counterparties with the same terms and a few party-specific fields.
• Deals are added over time and re-papering each one is the bottleneck.
• Documents must be reproducible from tracked source, diffable, and free of hand edits.
• Signature fields are placed by automation and need a stable page layout.

How It Works

Template

A single markdown template with {{PLACEHOLDER}} fields. Every party-specific value is a placeholder; everything else is fixed text. A skeleton lives at references/master-template.example.md. Replace its generic sentences with your counsel-approved clauses.

Placeholders the reference script fills:

Spec

One JSON file per counterparty:

{
  "file": "AcmeSupplier",
  "short": "Acme",
  "role": "supplier",
  "legal": "Acme Compute Ltd",
  "juris": "England and Wales company",
  "addr": "1 Example Street, London",
  "signer": "A. Person",
  "title": "Director",
  "email": "signer@example.com",
  "schedule": [["1", "2026-09-01", "Lot A (16 nodes)", "introducer", "12 months", "standard"]],
  "supplement": "the Data Processing Addendum dated 2026-09-01"
}

Only file, short, and role are required for a draft. Missing signature fields render as blank lines for review and completion. See references/spec.example.json.

file must be a nonempty portable filename, such as AcmeSupplier or Acme Supplier, without directory components. The builder rejects either path separator, drive/UNC syntax, control characters, Windows-reserved punctuation or device names, and trailing dots or spaces. Invalid names are rejected without sanitizing or renaming them, before creating output or invoking pandoc.

Omit schedule or use [] for the “no entries at signing” placeholder. A supplied schedule must otherwise be a dense array of six-cell arrays, in this order: number, date, protected counterparty or lot, role, terms, fee. Each cell must be a valid Unicode string or finite number; empty strings are allowed for intentional blanks. Nulls, booleans, objects, nested cell arrays, missing cells and non-finite numbers are rejected with a row/cell index before any artifact write or pandoc activity. Unpaired UTF-16 surrogates are also rejected rather than replaced during UTF-8 output; valid supplementary characters, such as emoji, remain supported.

Cells are plain text, not Markdown or HTML. The builder encodes syntax characters so literal pipes, backslashes, backticks and markup stay in their original fields. Each CRLF, bare CR or LF becomes a space; text around line breaks is retained. Other whitespace and literal punctuation are preserved in the rendered cells. The source spec is not modified. An ordinary valid schedule retains its six columns; malformed input is never silently replaced with an empty schedule.

Role table

spec.role selects three strings: the standing-arrangement clause, the fee section title, and the fee clause opener.

Unknown roles are rejected at build time.

Build

Use operator-reviewed templates and specs only. Ordinary template substitutions outside Schedule A are markup-capable, not a sanitizer for untrusted documents. Pandoc can read referenced local or remote resources; this generator does not sandbox the converter's filesystem or network access. Review those references and run conversion in your own appropriately restricted environment. The focused tests use a synthetic converter and do not certify real DOCX layout or isolation.

node skills/master-agreement-generator/scripts/build-agreement.js \
  skills/master-agreement-generator/references/master-template.example.md \
  specs/AcmeSupplier.json \
  out/

The script fills placeholders, renders the schedule table, and writes out/<file> MASTER.md with a mandatory DRAFT notice. By default (or with --require-docx) it requires installed pandoc to produce a nonempty regular .docx artifact. Missing pandoc, failed conversion or missing/empty output returns exit code 1. Each pandoc probe or conversion is bounded to ten seconds. Unknown, duplicate or conflicting flags return exit code 2.

Use --markdown-only explicitly for a successful Markdown-only draft. This mode never probes or invokes pandoc, returns docxSkipped: true from the library, and provides no DOCX for an e-sign workflow. Library callers must pass { markdownOnly: true }; { pandoc: false } alone now fails the DOCX requirement. The result always reports documentStatus: 'draft'. Existing generated DOCX is removed when rebuilding its Markdown, and failed conversion leaves no partial DOCX, so an earlier artifact cannot masquerade as the current output. Keep both generated files out of version control; the template and specs are source.

There is no execution-copy mode. The example deliberately contains unresolved bracketed drafting directives; filling {{PLACEHOLDER}} tokens does not complete those legal provisions. Before preparing an execution document, obtain separate review of the completed clauses, party details, authorized signer, commercial terms and exact document version. Preserve the draft and the reviewed execution copy as distinct records. Even a successful DOCX conversion does not authorize an upload, send or signature. See the esign-field-placement approval workflow.

Both output destinations must be direct children of the resolved output directory. An existing symlink at either destination, including a dangling link, is rejected before either artifact is written, even when DOCX conversion is disabled. Ordinary regular files can be rebuilt. Use an output directory you control; these checks do not provide isolation against concurrent hostile filesystem changes. Returned artifact paths are absolute.