@mmnto/mcp 1.115.0 → 1.117.0

package/dist/search-log.d.ts

@@ -1,3 +1,4 @@
+import type { AgentSourceProvenance, AttributionConflict } from '@mmnto/totem';
 export interface SearchLogEntry {
     timestamp: string;
     query: string;
@@ -33,36 +34,65 @@ export interface SearchLogEntry {
      * identity to join against (ruled on mmnto-ai/totem#2362).
      */
     agent_source?: string | null;
+    /**
+     * Provenance of `agent_source` (mmnto-ai/totem#2629, ruled two-value enum):
+     * `'env'` iff the row was stamped from `TOTEM_SELF_AGENT`, `'absent'` iff no
+     * attribution was stamped (the honest stamped-absence default). Optional for
+     * pre-sensor rows; `logSearch` stamps it on every new row.
+     */
+    agent_source_provenance?: AgentSourceProvenance;
+    /**
+     * Fail-closed disclosure (#2629): present iff the ambient env seat and the
+     * session pointer's minting seat disagreed — `agent_source` is withheld and
+     * both candidates are named. The query itself is never refused (Tenet 13).
+     */
+    attribution_conflict?: AttributionConflict;
+    /** Named degradation (#2629): the conflict probe failed; the env stamp stands. */
+    attribution_probe_error?: string;
     /** A.3.a: explicit session id passed through from `TOTEM_SESSION_ID` if present, else null (never guessed). Reserved forward primitive for the ADR-078 commit-side session join; deliberately inert in the current repo-wide windowing. */
     session_id?: string | null;
     /** A.3.a: trace-correlation id passed through from `TOTEM_CORRELATION_ID` if present, else null (never guessed). Reserved for the A.3.c end-to-end correlation pass; carried now so the trio lands in one producer touch. */
     correlation_id?: string | null;
 }
 /**
- * The A.3.a attribution trio stamped onto every `SearchLogEntry` at log time.
- * Every field is `string | null` — a present value or an explicit `null`
- * (Tenet 4: absence is stamped, never guessed).
+ * The attribution stamp applied to every `SearchLogEntry` at log time: the
+ * A.3.a trio (`string | null` — a present value or an explicit `null`, Tenet 4)
+ * plus the #2629 provenance/fail-closed fields. Every key is REQUIRED on this
+ * interface — `attribution_conflict` / `attribution_probe_error` carry explicit
+ * `undefined` when clean — so the spread-last stamp in `logSearch` displaces
+ * any caller-supplied value for every stamped field (absence from the sense is
+ * as authoritative as presence; `JSON.stringify` drops the undefined keys from
+ * the persisted row).
  */
 export interface SearchLogAttribution {
     agent_source: string | null;
+    agent_source_provenance: AgentSourceProvenance;
+    attribution_conflict: AttributionConflict | undefined;
+    attribution_probe_error: string | undefined;
     session_id: string | null;
     correlation_id: string | null;
 }
 /**
- * Derive the A.3.a attribution trio from the environment (default
- * `process.env`). Pure — no I/O, no side effects — so the producer stamp is
- * testable without touching the filesystem.
+ * Derive the attribution stamp for one row.
  *
- * - `agent_source`: from `TOTEM_SELF_AGENT`, reusing the same read + comma
- *   parsing precedent as `resolveSelfAgents` (orchestration-resolver.ts). The
- *   MCP server is spawned under a single seat, so the first non-empty
- *   comma-separated entry is that seat; a bare value passes through unchanged.
+ * - `agent_source` + the #2629 provenance/fail-closed fields: delegated to
+ *   core's `senseAgentAttribution` — the one derivation both stamp seams
+ *   (this one and the selection-manifest builder) consume. Same env read +
+ *   comma parse as `resolveSelfAgents` (the MCP server runs under a single
+ *   seat, so the first non-empty entry is that seat), cross-checked against
+ *   the session pointer's minting seat when `totemDir` is provided.
  * - `session_id` / `correlation_id`: straight pass-through from
  *   `TOTEM_SESSION_ID` / `TOTEM_CORRELATION_ID`.
  *
- * Any field whose env var is absent or blank is stamped `null`.
+ * Any field whose env var is absent or blank is stamped `null`. Env-only calls
+ * (no `totemDir`) stay pure — no I/O — the testable-producer property the
+ * original trio derivation had; with `totemDir` the conflict probe reads the
+ * pointer + `events.ndjson`, per call, never cached (ruled — a cache converts
+ * a transient contamination into a whole-session one). The probe can never
+ * throw into the stamp path: failures degrade to the env-only stamp with the
+ * failure named on `attribution_probe_error`.
  */
-export declare function deriveSearchLogAttribution(env?: NodeJS.ProcessEnv): SearchLogAttribution;
+export declare function deriveSearchLogAttribution(env?: NodeJS.ProcessEnv, totemDir?: string): SearchLogAttribution;
 export interface SearchStats {
     totalCalls: number;
     avgDuration: number;
@@ -73,13 +103,19 @@ export interface SearchStats {
  * Must be called before the first `logSearch` to enable file logging.
  */
 export declare function setLogDir(totemDir: string): void;
+/**
+ * Test seam — clears the configured log path so attribution runs env-only
+ * (no ledger in reach) and file logging is disarmed. Production never calls
+ * this; the naming follows `_clearBashResolverCacheForTesting` (core).
+ */
+export declare function _clearLogDirForTesting(): void;
 /**
  * Record a search call.
  *
- * - Stamps the A.3.a attribution trio (`agent_source` / `session_id` /
- *   `correlation_id`) from the environment at log time — one producer touch
- *   shared by every call site. A caller-supplied value (none today) wins over
- *   the env derivation.
+ * - Stamps the attribution fields (the A.3.a trio + the #2629 provenance /
+ *   fail-closed fields) at log time — one producer touch shared by every call
+ *   site. The derived stamp is authoritative: a caller-supplied value for any
+ *   stamped field is displaced (see the stamp comment below).
  * - Always appends to the in-memory array.
  * - Best-effort appends a single JSON line to `{totemDir}/.search-log.jsonl`.
  *   File writes are fire-and-forget — failures are silently swallowed because

package/dist/search-log.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"search-log.d.ts","sourceRoot":"","sources":["../src/search-log.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB;;;;;;OAMG;IACH,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;;;;;;;;;;;;;OAgBG;IACH,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,2OAA2O;IAC3O,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,6NAA6N;IAC7N,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC;AAED;;;;GAIG;AACH,MAAM,WAAW,oBAAoB;IACnC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B;AAaD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,0BAA0B,CACxC,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,oBAAoB,CAgBtB;AAED,MAAM,WAAW,WAAW;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;CACrB;AAQD;;;GAGG;AACH,wBAAgB,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAEhD;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,cAAc,GAAG,cAAc,CAsB/D;AAED;;GAEG;AACH,wBAAgB,cAAc,IAAI,WAAW,CAc5C"}
+{"version":3,"file":"search-log.d.ts","sourceRoot":"","sources":["../src/search-log.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAG/E,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB;;;;;;OAMG;IACH,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;;;;;;;;;;;;;OAgBG;IACH,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B;;;;;OAKG;IACH,uBAAuB,CAAC,EAAE,qBAAqB,CAAC;IAChD;;;;OAIG;IACH,oBAAoB,CAAC,EAAE,mBAAmB,CAAC;IAC3C,kFAAkF;IAClF,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,2OAA2O;IAC3O,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,6NAA6N;IAC7N,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,oBAAoB;IACnC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,uBAAuB,EAAE,qBAAqB,CAAC;IAC/C,oBAAoB,EAAE,mBAAmB,GAAG,SAAS,CAAC;IACtD,uBAAuB,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5C,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B;AAaD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,0BAA0B,CACxC,GAAG,GAAE,MAAM,CAAC,UAAwB,EACpC,QAAQ,CAAC,EAAE,MAAM,GAChB,oBAAoB,CAWtB;AAED,MAAM,WAAW,WAAW;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;CACrB;AAQD;;;GAGG;AACH,wBAAgB,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAEhD;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,IAAI,IAAI,CAE7C;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,cAAc,GAAG,cAAc,CA+B/D;AAED;;GAEG;AACH,wBAAgB,cAAc,IAAI,WAAW,CAc5C"}

package/dist/search-log.js

@@ -1,5 +1,6 @@
 import * as fs from 'node:fs';
 import * as path from 'node:path';
+import { senseAgentAttribution } from '@mmnto/totem';
 /**
  * Read one env var, trim it, and normalize empty/whitespace-only to `null`.
  * `null` is the explicit "not present" stamp (Tenet 4) — never a guessed value.
@@ -12,30 +13,32 @@ function envOrNull(env, key) {
     return trimmed.length > 0 ? trimmed : null;
 }
 /**
- * Derive the A.3.a attribution trio from the environment (default
- * `process.env`). Pure — no I/O, no side effects — so the producer stamp is
- * testable without touching the filesystem.
+ * Derive the attribution stamp for one row.
  *
- * - `agent_source`: from `TOTEM_SELF_AGENT`, reusing the same read + comma
- *   parsing precedent as `resolveSelfAgents` (orchestration-resolver.ts). The
- *   MCP server is spawned under a single seat, so the first non-empty
- *   comma-separated entry is that seat; a bare value passes through unchanged.
+ * - `agent_source` + the #2629 provenance/fail-closed fields: delegated to
+ *   core's `senseAgentAttribution` — the one derivation both stamp seams
+ *   (this one and the selection-manifest builder) consume. Same env read +
+ *   comma parse as `resolveSelfAgents` (the MCP server runs under a single
+ *   seat, so the first non-empty entry is that seat), cross-checked against
+ *   the session pointer's minting seat when `totemDir` is provided.
  * - `session_id` / `correlation_id`: straight pass-through from
  *   `TOTEM_SESSION_ID` / `TOTEM_CORRELATION_ID`.
  *
- * Any field whose env var is absent or blank is stamped `null`.
+ * Any field whose env var is absent or blank is stamped `null`. Env-only calls
+ * (no `totemDir`) stay pure — no I/O — the testable-producer property the
+ * original trio derivation had; with `totemDir` the conflict probe reads the
+ * pointer + `events.ndjson`, per call, never cached (ruled — a cache converts
+ * a transient contamination into a whole-session one). The probe can never
+ * throw into the stamp path: failures degrade to the env-only stamp with the
+ * failure named on `attribution_probe_error`.
  */
-export function deriveSearchLogAttribution(env = process.env) {
-    const selfAgentRaw = envOrNull(env, 'TOTEM_SELF_AGENT');
-    const agent_source = selfAgentRaw !== null
-        ? // Same comma-split as resolveSelfAgents; take the first non-empty seat.
-            (selfAgentRaw
-                .split(',')
-                .map((s) => s.trim())
-                .find((s) => s.length > 0) ?? null)
-        : null;
+export function deriveSearchLogAttribution(env = process.env, totemDir) {
+    const sense = senseAgentAttribution({ env, totemDir });
     return {
-        agent_source,
+        agent_source: sense.agent_source,
+        agent_source_provenance: sense.agent_source_provenance,
+        attribution_conflict: sense.attribution_conflict,
+        attribution_probe_error: sense.attribution_probe_error,
         session_id: envOrNull(env, 'TOTEM_SESSION_ID'),
         correlation_id: envOrNull(env, 'TOTEM_CORRELATION_ID'),
     };
@@ -51,13 +54,21 @@ let logFilePath;
 export function setLogDir(totemDir) {
     logFilePath = path.join(totemDir, '.search-log.jsonl');
 }
+/**
+ * Test seam — clears the configured log path so attribution runs env-only
+ * (no ledger in reach) and file logging is disarmed. Production never calls
+ * this; the naming follows `_clearBashResolverCacheForTesting` (core).
+ */
+export function _clearLogDirForTesting() {
+    logFilePath = undefined;
+}
 /**
  * Record a search call.
  *
- * - Stamps the A.3.a attribution trio (`agent_source` / `session_id` /
- *   `correlation_id`) from the environment at log time — one producer touch
- *   shared by every call site. A caller-supplied value (none today) wins over
- *   the env derivation.
+ * - Stamps the attribution fields (the A.3.a trio + the #2629 provenance /
+ *   fail-closed fields) at log time — one producer touch shared by every call
+ *   site. The derived stamp is authoritative: a caller-supplied value for any
+ *   stamped field is displaced (see the stamp comment below).
  * - Always appends to the in-memory array.
  * - Best-effort appends a single JSON line to `{totemDir}/.search-log.jsonl`.
  *   File writes are fire-and-forget — failures are silently swallowed because
@@ -67,10 +78,19 @@ export function setLogDir(totemDir) {
  * without touching the filesystem.
  */
 export function logSearch(entry) {
-    // Env stamp LAST: the attribution trio is governance telemetry, so the
-    // environment-derived values are authoritative — a caller-supplied (or
-    // spread-truthy `undefined`) trio field must never displace the stamp.
-    const stamped = { ...entry, ...deriveSearchLogAttribution() };
+    // Env stamp LAST: the attribution fields are governance telemetry, so the
+    // derived values are authoritative — a caller-supplied (or spread-truthy
+    // `undefined`) stamped field must never displace the stamp. The attribution
+    // object carries every stamped key explicitly (undefined when clean), so a
+    // caller-supplied conflict cannot survive a clean sense either.
+    // `totemDir` recovers from the log path per call — when `setLogDir` was
+    // never called there is no ledger in reach and the sense runs env-only
+    // (provenance still stamped, no conflict probe).
+    const totemDir = logFilePath !== undefined ? path.dirname(logFilePath) : undefined;
+    const stamped = {
+        ...entry,
+        ...deriveSearchLogAttribution(process.env, totemDir),
+    };
     entries.push(stamped);
     // Best-effort, non-blocking file append
     if (logFilePath) {

package/dist/search-log.js.map

@@ -1 +1 @@
-{"version":3,"file":"search-log.js","sourceRoot":"","sources":["../src/search-log.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAsDlC;;;GAGG;AACH,SAAS,SAAS,CAAC,GAAsB,EAAE,GAAW;IACpD,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;IACrB,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACzC,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7C,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,0BAA0B,CACxC,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,YAAY,GAAG,SAAS,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC;IACxD,MAAM,YAAY,GAChB,YAAY,KAAK,IAAI;QACnB,CAAC,CAAC,wEAAwE;YACxE,CAAC,YAAY;iBACV,KAAK,CAAC,GAAG,CAAC;iBACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;iBACpB,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC;QACvC,CAAC,CAAC,IAAI,CAAC;IAEX,OAAO;QACL,YAAY;QACZ,UAAU,EAAE,SAAS,CAAC,GAAG,EAAE,kBAAkB,CAAC;QAC9C,cAAc,EAAE,SAAS,CAAC,GAAG,EAAE,sBAAsB,CAAC;KACvD,CAAC;AACJ,CAAC;AAQD,oEAAoE;AACpE,MAAM,OAAO,GAAqB,EAAE,CAAC;AAErC,wEAAwE;AACxE,IAAI,WAA+B,CAAC;AAEpC;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAC,QAAgB;IACxC,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC;AACzD,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,SAAS,CAAC,KAAqB;IAC7C,uEAAuE;IACvE,uEAAuE;IACvE,uEAAuE;IACvE,MAAM,OAAO,GAAmB,EAAE,GAAG,KAAK,EAAE,GAAG,0BAA0B,EAAE,EAAE,CAAC;IAC9E,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAEtB,wCAAwC;IACxC,IAAI,WAAW,EAAE,CAAC;QAChB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC;YAC5C,+EAA+E;YAC/E,4EAA4E;YAC5E,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,WAAW,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;gBAC5D,8EAA8E;YAChF,CAAC,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,oEAAoE;QACtE,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc;IAC5B,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC;IAElC,IAAI,UAAU,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO,EAAE,UAAU,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC;IAC3D,CAAC;IAED,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,GAAG,UAAU,CAAC;IAEnF,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC;IAC1D,MAAM,WAAW,GACf,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,QAAS,EAAE,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAE1F,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC;AAClD,CAAC"}
+{"version":3,"file":"search-log.js","sourceRoot":"","sources":["../src/search-log.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAGlC,OAAO,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AA6ErD;;;GAGG;AACH,SAAS,SAAS,CAAC,GAAsB,EAAE,GAAW;IACpD,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;IACrB,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACzC,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7C,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,0BAA0B,CACxC,MAAyB,OAAO,CAAC,GAAG,EACpC,QAAiB;IAEjB,MAAM,KAAK,GAAG,qBAAqB,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC;IAEvD,OAAO;QACL,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,uBAAuB,EAAE,KAAK,CAAC,uBAAuB;QACtD,oBAAoB,EAAE,KAAK,CAAC,oBAAoB;QAChD,uBAAuB,EAAE,KAAK,CAAC,uBAAuB;QACtD,UAAU,EAAE,SAAS,CAAC,GAAG,EAAE,kBAAkB,CAAC;QAC9C,cAAc,EAAE,SAAS,CAAC,GAAG,EAAE,sBAAsB,CAAC;KACvD,CAAC;AACJ,CAAC;AAQD,oEAAoE;AACpE,MAAM,OAAO,GAAqB,EAAE,CAAC;AAErC,wEAAwE;AACxE,IAAI,WAA+B,CAAC;AAEpC;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAC,QAAgB;IACxC,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC;AACzD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB;IACpC,WAAW,GAAG,SAAS,CAAC;AAC1B,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,SAAS,CAAC,KAAqB;IAC7C,0EAA0E;IAC1E,yEAAyE;IACzE,4EAA4E;IAC5E,2EAA2E;IAC3E,gEAAgE;IAChE,wEAAwE;IACxE,uEAAuE;IACvE,iDAAiD;IACjD,MAAM,QAAQ,GAAG,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACnF,MAAM,OAAO,GAAmB;QAC9B,GAAG,KAAK;QACR,GAAG,0BAA0B,CAAC,OAAO,CAAC,GAAG,EAAE,QAAQ,CAAC;KACrD,CAAC;IACF,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAEtB,wCAAwC;IACxC,IAAI,WAAW,EAAE,CAAC;QAChB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC;YAC5C,+EAA+E;YAC/E,4EAA4E;YAC5E,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,WAAW,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;gBAC5D,8EAA8E;YAChF,CAAC,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,oEAAoE;QACtE,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc;IAC5B,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC;IAElC,IAAI,UAAU,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO,EAAE,UAAU,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC;IAC3D,CAAC;IAED,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,GAAG,UAAU,CAAC;IAEnF,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC;IAC1D,MAAM,WAAW,GACf,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,QAAS,EAAE,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAE1F,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC;AAClD,CAAC"}

package/dist/search-log.test.js

@@ -1,8 +1,31 @@
+import * as fs from 'node:fs';
+import * as os from 'node:os';
+import * as path from 'node:path';
 import { afterEach, beforeEach, describe, expect, it } from 'vitest';
-import { deriveSearchLogAttribution, logSearch } from './search-log.js';
-// ─── deriveSearchLogAttribution (pure — env in, trio out) ───
+import { _clearLogDirForTesting, deriveSearchLogAttribution, getSearchStats, logSearch, setLogDir, } from './search-log.js';
+const SESSION_A = '550e8400-e29b-41d4-a716-446655440000';
+/** Windows-safe teardown options — retries ride out transient ENOTEMPTY. */
+const RM_OPTS = { recursive: true, force: true, maxRetries: 3, retryDelay: 100 };
+/** Pointer at SESSION_A minted by `mintSeat` — the #2629 contamination fixture. */
+function contaminatedTotemDir(mintSeat) {
+    const totemDir = fs.mkdtempSync(path.join(os.tmpdir(), 'search-log-attr-'));
+    const ledgerDir = path.join(totemDir, 'ledger');
+    fs.mkdirSync(ledgerDir, { recursive: true });
+    fs.writeFileSync(path.join(ledgerDir, '.session-id'), SESSION_A, 'utf-8');
+    fs.writeFileSync(path.join(ledgerDir, 'events.ndjson'), JSON.stringify({
+        timestamp: '2026-08-12T03:03:00.000Z',
+        type: 'session_start',
+        activity_name: 'SessionStart',
+        source: 'bot',
+        justification: '',
+        session_id: SESSION_A,
+        agent_source: mintSeat,
+    }) + '\n', 'utf-8');
+    return totemDir;
+}
+// ─── deriveSearchLogAttribution (env-only calls stay pure) ───
 describe('deriveSearchLogAttribution', () => {
-    it('stamps all three fields from the environment when present', () => {
+    it('stamps all fields from the environment when present, with env provenance', () => {
         const attribution = deriveSearchLogAttribution({
             TOTEM_SELF_AGENT: 'totem-claude',
             TOTEM_SESSION_ID: 'sess-123',
@@ -10,13 +33,15 @@ describe('deriveSearchLogAttribution', () => {
         });
         expect(attribution).toEqual({
             agent_source: 'totem-claude',
+            agent_source_provenance: 'env',
             session_id: 'sess-123',
             correlation_id: 'corr-abc',
         });
     });
-    it('stamps null for every field when the env is absent (Tenet 4 — never guess)', () => {
+    it('stamps null + absent provenance when the env is absent (Tenet 4 — never guess)', () => {
         expect(deriveSearchLogAttribution({})).toEqual({
             agent_source: null,
+            agent_source_provenance: 'absent',
             session_id: null,
             correlation_id: null,
         });
@@ -24,6 +49,7 @@ describe('deriveSearchLogAttribution', () => {
     it('stamps null per-field independently (partial env)', () => {
         const attribution = deriveSearchLogAttribution({ TOTEM_SESSION_ID: 'only-session' });
         expect(attribution.agent_source).toBeNull();
+        expect(attribution.agent_source_provenance).toBe('absent');
         expect(attribution.session_id).toBe('only-session');
         expect(attribution.correlation_id).toBeNull();
     });
@@ -35,6 +61,7 @@ describe('deriveSearchLogAttribution', () => {
         });
         expect(attribution).toEqual({
             agent_source: null,
+            agent_source_provenance: 'absent',
             session_id: null,
             correlation_id: null,
         });
@@ -45,6 +72,31 @@ describe('deriveSearchLogAttribution', () => {
         expect(deriveSearchLogAttribution({ TOTEM_SELF_AGENT: ' , totem-gemini , extra' }).agent_source).toBe('totem-gemini');
     });
 });
+// ─── #2629 fail-closed conflict (totemDir-armed calls) ───
+describe('deriveSearchLogAttribution conflict sense (#2629)', () => {
+    let totemDir;
+    afterEach(() => {
+        fs.rmSync(totemDir, RM_OPTS);
+    });
+    it('FAIL-CLOSED: env seat ≠ pointer minting seat → stamp neither, name both', () => {
+        totemDir = contaminatedTotemDir('totem-claude');
+        const attribution = deriveSearchLogAttribution({ TOTEM_SELF_AGENT: 'totem-gemini' }, totemDir);
+        expect(attribution.agent_source).toBeNull();
+        expect(attribution.agent_source_provenance).toBe('absent');
+        expect(attribution.attribution_conflict).toEqual({
+            env_seat: 'totem-gemini',
+            minting_seat: 'totem-claude',
+            pointer_session_id: SESSION_A,
+        });
+    });
+    it('agreement keeps the env stamp — no conflict fabricated', () => {
+        totemDir = contaminatedTotemDir('totem-claude');
+        const attribution = deriveSearchLogAttribution({ TOTEM_SELF_AGENT: 'totem-claude' }, totemDir);
+        expect(attribution.agent_source).toBe('totem-claude');
+        expect(attribution.agent_source_provenance).toBe('env');
+        expect(attribution.attribution_conflict).toBeUndefined();
+    });
+});
 // ─── logSearch stamping (no setLogDir → in-memory only, no fs) ───
 describe('logSearch attribution stamp', () => {
     const ENV_KEYS = ['TOTEM_SELF_AGENT', 'TOTEM_SESSION_ID', 'TOTEM_CORRELATION_ID'];
@@ -69,21 +121,92 @@ describe('logSearch attribution stamp', () => {
             else
                 process.env[k] = saved[k];
         }
+        // Reset the module-level log path so no test depends on file order and a
+        // torn-down tmpdir is never probed by a later logSearch (CR on #2634).
+        _clearLogDirForTesting();
     });
-    it('stamps the trio from process.env onto the returned entry', () => {
+    it('stamps the trio + env provenance from process.env onto the returned entry', () => {
         process.env.TOTEM_SELF_AGENT = 'totem-claude';
         process.env.TOTEM_SESSION_ID = 'sess-9';
         process.env.TOTEM_CORRELATION_ID = 'corr-9';
         const stamped = logSearch({ ...baseEntry });
         expect(stamped.agent_source).toBe('totem-claude');
+        expect(stamped.agent_source_provenance).toBe('env');
         expect(stamped.session_id).toBe('sess-9');
         expect(stamped.correlation_id).toBe('corr-9');
     });
-    it('stamps explicit null on every field when the env is absent', () => {
+    it('stamps explicit null + absent provenance on every field when the env is absent', () => {
         const stamped = logSearch({ ...baseEntry });
         expect(stamped.agent_source).toBeNull();
+        expect(stamped.agent_source_provenance).toBe('absent');
         expect(stamped.session_id).toBeNull();
         expect(stamped.correlation_id).toBeNull();
     });
+    it('a caller-supplied conflict/provenance never displaces the stamp — absence from the sense is authoritative too', () => {
+        process.env.TOTEM_SELF_AGENT = 'totem-claude';
+        const stamped = logSearch({
+            ...baseEntry,
+            agent_source: 'forged-seat',
+            agent_source_provenance: 'absent',
+            attribution_conflict: {
+                env_seat: 'forged-a',
+                minting_seat: 'forged-b',
+                pointer_session_id: SESSION_A,
+            },
+            attribution_probe_error: 'forged failure',
+        });
+        expect(stamped.agent_source).toBe('totem-claude');
+        expect(stamped.agent_source_provenance).toBe('env');
+        // Clean sense → explicit undefined displaces the forged values, and
+        // JSON.stringify (the persistence shape) drops the keys entirely.
+        expect(stamped.attribution_conflict).toBeUndefined();
+        expect(stamped.attribution_probe_error).toBeUndefined();
+        expect(JSON.parse(JSON.stringify(stamped))).not.toHaveProperty('attribution_conflict');
+    });
+    it('SEAM-LEVEL invariant 10: with EVERY probe failing (pointer AND events paths are directories), logSearch still records, stamps env, and names the errno', () => {
+        const totemDir = fs.mkdtempSync(path.join(os.tmpdir(), 'search-log-probe-'));
+        try {
+            const ledgerDir = path.join(totemDir, 'ledger');
+            // DIRECTORIES where both probe files should be — EISDIR on read for the
+            // pointer and the events file alike: every probe fails, the non-benign
+            // class (not the honest-absence ENOENT set).
+            fs.mkdirSync(path.join(ledgerDir, 'events.ndjson'), { recursive: true });
+            fs.mkdirSync(path.join(ledgerDir, '.session-id'), { recursive: true });
+            process.env.TOTEM_SELF_AGENT = 'totem-claude';
+            setLogDir(totemDir);
+            const callsBefore = getSearchStats().totalCalls;
+            const stamped = logSearch({ ...baseEntry });
+            // "still records": the in-memory log grew (the file append is
+            // fire-and-forget by contract and not asserted here).
+            expect(getSearchStats().totalCalls).toBe(callsBefore + 1);
+            expect(stamped.agent_source).toBe('totem-claude');
+            expect(stamped.agent_source_provenance).toBe('env');
+            expect(stamped.attribution_conflict).toBeUndefined();
+            // "names the failure": the errno itself — the half a post-hoc reader
+            // filters on — must survive the cause unroll, not just the wrapper text.
+            expect(stamped.attribution_probe_error).toMatch(/EISDIR|EPERM|EACCES/);
+        }
+        finally {
+            fs.rmSync(totemDir, RM_OPTS);
+        }
+    });
+    it('with setLogDir armed, a contaminated ledger produces a conflict row and the call still succeeds', () => {
+        const totemDir = contaminatedTotemDir('totem-claude');
+        try {
+            process.env.TOTEM_SELF_AGENT = 'totem-gemini';
+            setLogDir(totemDir);
+            const stamped = logSearch({ ...baseEntry });
+            expect(stamped.agent_source).toBeNull();
+            expect(stamped.agent_source_provenance).toBe('absent');
+            expect(stamped.attribution_conflict).toEqual({
+                env_seat: 'totem-gemini',
+                minting_seat: 'totem-claude',
+                pointer_session_id: SESSION_A,
+            });
+        }
+        finally {
+            fs.rmSync(totemDir, RM_OPTS);
+        }
+    });
 });
 //# sourceMappingURL=search-log.test.js.map

package/dist/search-log.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"search-log.test.js","sourceRoot":"","sources":["../src/search-log.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAErE,OAAO,EAAE,0BAA0B,EAAE,SAAS,EAAuB,MAAM,iBAAiB,CAAC;AAE7F,+DAA+D;AAE/D,QAAQ,CAAC,4BAA4B,EAAE,GAAG,EAAE;IAC1C,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,MAAM,WAAW,GAAG,0BAA0B,CAAC;YAC7C,gBAAgB,EAAE,cAAc;YAChC,gBAAgB,EAAE,UAAU;YAC5B,oBAAoB,EAAE,UAAU;SACjC,CAAC,CAAC;QACH,MAAM,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC;YAC1B,YAAY,EAAE,cAAc;YAC5B,UAAU,EAAE,UAAU;YACtB,cAAc,EAAE,UAAU;SAC3B,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4EAA4E,EAAE,GAAG,EAAE;QACpF,MAAM,CAAC,0BAA0B,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;YAC7C,YAAY,EAAE,IAAI;YAClB,UAAU,EAAE,IAAI;YAChB,cAAc,EAAE,IAAI;SACrB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,MAAM,WAAW,GAAG,0BAA0B,CAAC,EAAE,gBAAgB,EAAE,cAAc,EAAE,CAAC,CAAC;QACrF,MAAM,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC5C,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACpD,MAAM,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC,QAAQ,EAAE,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,MAAM,WAAW,GAAG,0BAA0B,CAAC;YAC7C,gBAAgB,EAAE,KAAK;YACvB,gBAAgB,EAAE,IAAI;YACtB,oBAAoB,EAAE,EAAE;SACzB,CAAC,CAAC;QACH,MAAM,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC;YAC1B,YAAY,EAAE,IAAI;YAClB,UAAU,EAAE,IAAI;YAChB,cAAc,EAAE,IAAI;SACrB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wEAAwE,EAAE,GAAG,EAAE;QAChF,yEAAyE;QACzE,gDAAgD;QAChD,MAAM,CACJ,0BAA0B,CAAC,EAAE,gBAAgB,EAAE,yBAAyB,EAAE,CAAC,CAAC,YAAY,CACzF,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IACzB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,oEAAoE;AAEpE,QAAQ,CAAC,6BAA6B,EAAE,GAAG,EAAE;IAC3C,MAAM,QAAQ,GAAG,CAAC,kBAAkB,EAAE,kBAAkB,EAAE,sBAAsB,CAAU,CAAC;IAC3F,MAAM,KAAK,GAAuC,EAAE,CAAC;IAErD,MAAM,SAAS,GAAmB;QAChC,SAAS,EAAE,0BAA0B;QACrC,KAAK,EAAE,GAAG;QACV,WAAW,EAAE,CAAC;QACd,UAAU,EAAE,CAAC;QACb,QAAQ,EAAE,IAAI;KACf,CAAC;IAEF,UAAU,CAAC,GAAG,EAAE;QACd,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;YACzB,KAAK,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAC1B,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACxB,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;YACzB,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS;gBAAE,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;;gBAC7C,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACjC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,OAAO,CAAC,GAAG,CAAC,gBAAgB,GAAG,cAAc,CAAC;QAC9C,OAAO,CAAC,GAAG,CAAC,gBAAgB,GAAG,QAAQ,CAAC;QACxC,OAAO,CAAC,GAAG,CAAC,oBAAoB,GAAG,QAAQ,CAAC;QAC5C,MAAM,OAAO,GAAG,SAAS,CAAC,EAAE,GAAG,SAAS,EAAE,CAAC,CAAC;QAC5C,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAClD,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1C,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,MAAM,OAAO,GAAG,SAAS,CAAC,EAAE,GAAG,SAAS,EAAE,CAAC,CAAC;QAC5C,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,QAAQ,EAAE,CAAC;QACxC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,QAAQ,EAAE,CAAC;QACtC,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC5C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
+{"version":3,"file":"search-log.test.js","sourceRoot":"","sources":["../src/search-log.test.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAErE,OAAO,EACL,sBAAsB,EACtB,0BAA0B,EAC1B,cAAc,EACd,SAAS,EAET,SAAS,GACV,MAAM,iBAAiB,CAAC;AAEzB,MAAM,SAAS,GAAG,sCAAsC,CAAC;AAEzD,4EAA4E;AAC5E,MAAM,OAAO,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,EAAE,UAAU,EAAE,GAAG,EAAW,CAAC;AAE1F,mFAAmF;AACnF,SAAS,oBAAoB,CAAC,QAAgB;IAC5C,MAAM,QAAQ,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,kBAAkB,CAAC,CAAC,CAAC;IAC5E,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAChD,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7C,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IAC1E,EAAE,CAAC,aAAa,CACd,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,EACrC,IAAI,CAAC,SAAS,CAAC;QACb,SAAS,EAAE,0BAA0B;QACrC,IAAI,EAAE,eAAe;QACrB,aAAa,EAAE,cAAc;QAC7B,MAAM,EAAE,KAAK;QACb,aAAa,EAAE,EAAE;QACjB,UAAU,EAAE,SAAS;QACrB,YAAY,EAAE,QAAQ;KACvB,CAAC,GAAG,IAAI,EACT,OAAO,CACR,CAAC;IACF,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,gEAAgE;AAEhE,QAAQ,CAAC,4BAA4B,EAAE,GAAG,EAAE;IAC1C,EAAE,CAAC,0EAA0E,EAAE,GAAG,EAAE;QAClF,MAAM,WAAW,GAAG,0BAA0B,CAAC;YAC7C,gBAAgB,EAAE,cAAc;YAChC,gBAAgB,EAAE,UAAU;YAC5B,oBAAoB,EAAE,UAAU;SACjC,CAAC,CAAC;QACH,MAAM,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC;YAC1B,YAAY,EAAE,cAAc;YAC5B,uBAAuB,EAAE,KAAK;YAC9B,UAAU,EAAE,UAAU;YACtB,cAAc,EAAE,UAAU;SAC3B,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gFAAgF,EAAE,GAAG,EAAE;QACxF,MAAM,CAAC,0BAA0B,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;YAC7C,YAAY,EAAE,IAAI;YAClB,uBAAuB,EAAE,QAAQ;YACjC,UAAU,EAAE,IAAI;YAChB,cAAc,EAAE,IAAI;SACrB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,MAAM,WAAW,GAAG,0BAA0B,CAAC,EAAE,gBAAgB,EAAE,cAAc,EAAE,CAAC,CAAC;QACrF,MAAM,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC5C,MAAM,CAAC,WAAW,CAAC,uBAAuB,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC3D,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACpD,MAAM,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC,QAAQ,EAAE,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,MAAM,WAAW,GAAG,0BAA0B,CAAC;YAC7C,gBAAgB,EAAE,KAAK;YACvB,gBAAgB,EAAE,IAAI;YACtB,oBAAoB,EAAE,EAAE;SACzB,CAAC,CAAC;QACH,MAAM,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC;YAC1B,YAAY,EAAE,IAAI;YAClB,uBAAuB,EAAE,QAAQ;YACjC,UAAU,EAAE,IAAI;YAChB,cAAc,EAAE,IAAI;SACrB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wEAAwE,EAAE,GAAG,EAAE;QAChF,yEAAyE;QACzE,gDAAgD;QAChD,MAAM,CACJ,0BAA0B,CAAC,EAAE,gBAAgB,EAAE,yBAAyB,EAAE,CAAC,CAAC,YAAY,CACzF,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IACzB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,4DAA4D;AAE5D,QAAQ,CAAC,mDAAmD,EAAE,GAAG,EAAE;IACjE,IAAI,QAAgB,CAAC;IAErB,SAAS,CAAC,GAAG,EAAE;QACb,EAAE,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yEAAyE,EAAE,GAAG,EAAE;QACjF,QAAQ,GAAG,oBAAoB,CAAC,cAAc,CAAC,CAAC;QAChD,MAAM,WAAW,GAAG,0BAA0B,CAAC,EAAE,gBAAgB,EAAE,cAAc,EAAE,EAAE,QAAQ,CAAC,CAAC;QAC/F,MAAM,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC5C,MAAM,CAAC,WAAW,CAAC,uBAAuB,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC3D,MAAM,CAAC,WAAW,CAAC,oBAAoB,CAAC,CAAC,OAAO,CAAC;YAC/C,QAAQ,EAAE,cAAc;YACxB,YAAY,EAAE,cAAc;YAC5B,kBAAkB,EAAE,SAAS;SAC9B,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,QAAQ,GAAG,oBAAoB,CAAC,cAAc,CAAC,CAAC;QAChD,MAAM,WAAW,GAAG,0BAA0B,CAAC,EAAE,gBAAgB,EAAE,cAAc,EAAE,EAAE,QAAQ,CAAC,CAAC;QAC/F,MAAM,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACtD,MAAM,CAAC,WAAW,CAAC,uBAAuB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxD,MAAM,CAAC,WAAW,CAAC,oBAAoB,CAAC,CAAC,aAAa,EAAE,CAAC;IAC3D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,oEAAoE;AAEpE,QAAQ,CAAC,6BAA6B,EAAE,GAAG,EAAE;IAC3C,MAAM,QAAQ,GAAG,CAAC,kBAAkB,EAAE,kBAAkB,EAAE,sBAAsB,CAAU,CAAC;IAC3F,MAAM,KAAK,GAAuC,EAAE,CAAC;IAErD,MAAM,SAAS,GAAmB;QAChC,SAAS,EAAE,0BAA0B;QACrC,KAAK,EAAE,GAAG;QACV,WAAW,EAAE,CAAC;QACd,UAAU,EAAE,CAAC;QACb,QAAQ,EAAE,IAAI;KACf,CAAC;IAEF,UAAU,CAAC,GAAG,EAAE;QACd,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;YACzB,KAAK,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAC1B,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACxB,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;YACzB,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS;gBAAE,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;;gBAC7C,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACjC,CAAC;QACD,yEAAyE;QACzE,uEAAuE;QACvE,sBAAsB,EAAE,CAAC;IAC3B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2EAA2E,EAAE,GAAG,EAAE;QACnF,OAAO,CAAC,GAAG,CAAC,gBAAgB,GAAG,cAAc,CAAC;QAC9C,OAAO,CAAC,GAAG,CAAC,gBAAgB,GAAG,QAAQ,CAAC;QACxC,OAAO,CAAC,GAAG,CAAC,oBAAoB,GAAG,QAAQ,CAAC;QAC5C,MAAM,OAAO,GAAG,SAAS,CAAC,EAAE,GAAG,SAAS,EAAE,CAAC,CAAC;QAC5C,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAClD,MAAM,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpD,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1C,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gFAAgF,EAAE,GAAG,EAAE;QACxF,MAAM,OAAO,GAAG,SAAS,CAAC,EAAE,GAAG,SAAS,EAAE,CAAC,CAAC;QAC5C,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,QAAQ,EAAE,CAAC;QACxC,MAAM,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACvD,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,QAAQ,EAAE,CAAC;QACtC,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+GAA+G,EAAE,GAAG,EAAE;QACvH,OAAO,CAAC,GAAG,CAAC,gBAAgB,GAAG,cAAc,CAAC;QAC9C,MAAM,OAAO,GAAG,SAAS,CAAC;YACxB,GAAG,SAAS;YACZ,YAAY,EAAE,aAAa;YAC3B,uBAAuB,EAAE,QAAQ;YACjC,oBAAoB,EAAE;gBACpB,QAAQ,EAAE,UAAU;gBACpB,YAAY,EAAE,UAAU;gBACxB,kBAAkB,EAAE,SAAS;aAC9B;YACD,uBAAuB,EAAE,gBAAgB;SAC1C,CAAC,CAAC;QACH,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAClD,MAAM,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpD,oEAAoE;QACpE,kEAAkE;QAClE,MAAM,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC,aAAa,EAAE,CAAC;QACrD,MAAM,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC,aAAa,EAAE,CAAC;QACxD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,sBAAsB,CAAC,CAAC;IACzF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wJAAwJ,EAAE,GAAG,EAAE;QAChK,MAAM,QAAQ,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,mBAAmB,CAAC,CAAC,CAAC;QAC7E,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;YAChD,wEAAwE;YACxE,uEAAuE;YACvE,6CAA6C;YAC7C,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACzE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACvE,OAAO,CAAC,GAAG,CAAC,gBAAgB,GAAG,cAAc,CAAC;YAC9C,SAAS,CAAC,QAAQ,CAAC,CAAC;YACpB,MAAM,WAAW,GAAG,cAAc,EAAE,CAAC,UAAU,CAAC;YAChD,MAAM,OAAO,GAAG,SAAS,CAAC,EAAE,GAAG,SAAS,EAAE,CAAC,CAAC;YAC5C,8DAA8D;YAC9D,sDAAsD;YACtD,MAAM,CAAC,cAAc,EAAE,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC;YAC1D,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YAClD,MAAM,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACpD,MAAM,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC,aAAa,EAAE,CAAC;YACrD,qEAAqE;YACrE,yEAAyE;YACzE,MAAM,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;QACzE,CAAC;gBAAS,CAAC;YACT,EAAE,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iGAAiG,EAAE,GAAG,EAAE;QACzG,MAAM,QAAQ,GAAG,oBAAoB,CAAC,cAAc,CAAC,CAAC;QACtD,IAAI,CAAC;YACH,OAAO,CAAC,GAAG,CAAC,gBAAgB,GAAG,cAAc,CAAC;YAC9C,SAAS,CAAC,QAAQ,CAAC,CAAC;YACpB,MAAM,OAAO,GAAG,SAAS,CAAC,EAAE,GAAG,SAAS,EAAE,CAAC,CAAC;YAC5C,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,QAAQ,EAAE,CAAC;YACxC,MAAM,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACvD,MAAM,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC,OAAO,CAAC;gBAC3C,QAAQ,EAAE,cAAc;gBACxB,YAAY,EAAE,cAAc;gBAC5B,kBAAkB,EAAE,SAAS;aAC9B,CAAC,CAAC;QACL,CAAC;gBAAS,CAAC;YACT,EAAE,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mmnto/mcp",
-  "version": "1.115.0",
+  "version": "1.117.0",
   "description": "MCP server for Totem, the local-first toolkit that keeps AI-agent work queryable, enforceable, and derivable as plain files in your codebase",
   "type": "module",
   "engines": {
@@ -22,7 +22,7 @@
     "dotenv": "^16.4.0",
     "jiti": "^2.4.0",
     "zod": "^3.24.0",
-    "@mmnto/totem": "1.115.0"
+    "@mmnto/totem": "1.117.0"
   },
   "devDependencies": {
     "@types/node": "^22.0.0",