@mneme-ai/core 0.25.0 → 0.27.0

package/dist/audit/certify.test.js

@@ -0,0 +1,324 @@
+import { describe, it, expect } from "vitest";
+import { buildCertificate, classifyForensicAxis, combineVerdicts, compareApiSurface, compareBehavioralParity, comparePerf, compareTestPassRate, evaluateNarrativeAxis, } from "./certify.js";
+function mkBaseline(over = {}) {
+    return {
+        capturedAt: "2026-05-07T00:00:00Z",
+        headHash: "abc123def",
+        outputs: {
+            git_head: { exitCode: 0, stdoutHash: "h1", stdoutLines: 1 },
+            git_log_20: { exitCode: 0, stdoutHash: "h2", stdoutLines: 20 },
+            node_version: { exitCode: 0, stdoutHash: "h3", stdoutLines: 1 },
+        },
+        testPassRate: { passed: 100, failed: 0, files: 5 },
+        apiSurface: { core: ["foo", "bar"], cli: ["baz"] },
+        perfMs: { git_status: 10, git_head: 5 },
+        ...over,
+    };
+}
+describe("audit/certify — combineVerdicts + classifyForensicAxis", () => {
+    it("combineVerdicts: any fail beats warn beats pass", () => {
+        expect(combineVerdicts(["pass", "pass"])).toBe("pass");
+        expect(combineVerdicts(["pass", "warn"])).toBe("warn");
+        expect(combineVerdicts(["pass", "fail", "warn"])).toBe("fail");
+        expect(combineVerdicts([])).toBe("pass");
+    });
+    it("classifyForensicAxis maps anomaly scores → verdicts", () => {
+        expect(classifyForensicAxis(0)).toBe("pass");
+        expect(classifyForensicAxis(0.4)).toBe("warn");
+        expect(classifyForensicAxis(0.7)).toBe("fail");
+        expect(classifyForensicAxis(1.0)).toBe("fail");
+    });
+});
+describe("audit/certify — compareBehavioralParity", () => {
+    it("pass when all sample hashes match", () => {
+        const before = mkBaseline();
+        const r = compareBehavioralParity(before, { outputs: before.outputs });
+        expect(r.verdict).toBe("pass");
+    });
+    it("expected drift on git_head/git_log = pass with note", () => {
+        const before = mkBaseline();
+        const after = {
+            outputs: {
+                git_head: { exitCode: 0, stdoutHash: "h1-different", stdoutLines: 1 },
+                git_log_20: { exitCode: 0, stdoutHash: "h2-different", stdoutLines: 22 },
+                node_version: { exitCode: 0, stdoutHash: "h3", stdoutLines: 1 },
+            },
+        };
+        const r = compareBehavioralParity(before, after);
+        expect(r.verdict).toBe("pass");
+        expect(r.details.some((d) => d.includes("expected"))).toBe(true);
+    });
+    it("warn when an unexpected sample drifts (e.g. node_version)", () => {
+        const before = mkBaseline();
+        const after = {
+            outputs: {
+                ...before.outputs,
+                node_version: { exitCode: 0, stdoutHash: "different", stdoutLines: 1 },
+            },
+        };
+        const r = compareBehavioralParity(before, after);
+        expect(r.verdict).toBe("warn");
+    });
+    it("fail when an exit code changes (any sample)", () => {
+        const before = mkBaseline();
+        const after = {
+            outputs: {
+                ...before.outputs,
+                git_head: { exitCode: 1, stdoutHash: "h1", stdoutLines: 1 },
+            },
+        };
+        const r = compareBehavioralParity(before, after);
+        expect(r.verdict).toBe("fail");
+    });
+});
+describe("audit/certify — compareApiSurface", () => {
+    it("pass when surface unchanged", () => {
+        const b = mkBaseline();
+        const r = compareApiSurface(b, { apiSurface: b.apiSurface });
+        expect(r.verdict).toBe("pass");
+    });
+    it("pass when only additions", () => {
+        const b = mkBaseline();
+        const r = compareApiSurface(b, {
+            apiSurface: { core: ["foo", "bar", "newOne"], cli: ["baz"] },
+        });
+        expect(r.verdict).toBe("pass");
+        expect(r.details.some((d) => d.includes("newOne"))).toBe(true);
+    });
+    it("fail when an export is removed", () => {
+        const b = mkBaseline();
+        const r = compareApiSurface(b, {
+            apiSurface: { core: ["foo"], cli: ["baz"] },
+        });
+        expect(r.verdict).toBe("fail");
+        expect(r.details.some((d) => d.includes("bar"))).toBe(true);
+    });
+});
+describe("audit/certify — compareTestPassRate", () => {
+    it("pass when nothing regresses", () => {
+        const b = mkBaseline();
+        const r = compareTestPassRate(b, {
+            testPassRate: { passed: 100, failed: 0, files: 5 },
+        });
+        expect(r.verdict).toBe("pass");
+    });
+    it("fail when failures appear", () => {
+        const b = mkBaseline();
+        const r = compareTestPassRate(b, {
+            testPassRate: { passed: 99, failed: 1, files: 5 },
+        });
+        expect(r.verdict).toBe("fail");
+    });
+    it("warn when passing count drops without new failures", () => {
+        const b = mkBaseline();
+        const r = compareTestPassRate(b, {
+            testPassRate: { passed: 95, failed: 0, files: 5 },
+        });
+        expect(r.verdict).toBe("warn");
+    });
+});
+describe("audit/certify — comparePerf", () => {
+    it("pass when no degradation", () => {
+        const b = mkBaseline();
+        const r = comparePerf(b, { perfMs: { git_status: 10, git_head: 5 } });
+        expect(r.verdict).toBe("pass");
+    });
+    it("warn when 10..25% slower", () => {
+        const b = mkBaseline();
+        const r = comparePerf(b, { perfMs: { git_status: 12, git_head: 5 } });
+        expect(r.verdict).toBe("warn");
+        expect(r.deltaPercent).toBeCloseTo(20, 0);
+    });
+    it("fail when >25% slower", () => {
+        const b = mkBaseline();
+        const r = comparePerf(b, { perfMs: { git_status: 20, git_head: 5 } });
+        expect(r.verdict).toBe("fail");
+        expect(r.deltaPercent).toBeCloseTo(100, 0);
+    });
+});
+describe("audit/certify — evaluateNarrativeAxis", () => {
+    it("pass when no commits", () => {
+        const trace = {
+            fromHash: "x",
+            toHash: "y",
+            commits: [],
+            filesChanged: [],
+            insertions: 0,
+            deletions: 0,
+        };
+        const r = evaluateNarrativeAxis({ trace, diffs: {} });
+        expect(r.verdict).toBe("pass");
+    });
+    it("fail when any claim is contradicted", () => {
+        const trace = {
+            fromHash: "x",
+            toHash: "y",
+            commits: [
+                {
+                    hash: "abc",
+                    shortHash: "abc",
+                    author: "AI",
+                    authorEmail: "noreply@anthropic.com",
+                    message: "Tweak handler. No change to db.ts.",
+                },
+            ],
+            filesChanged: ["src/db.ts"],
+            insertions: 1,
+            deletions: 0,
+        };
+        const r = evaluateNarrativeAxis({
+            trace,
+            diffs: { abc: { diff: "+ x", filesTouched: ["src/handler.ts", "src/db.ts"] } },
+        });
+        expect(r.verdict).toBe("fail");
+        expect(r.checks).toHaveLength(1);
+    });
+    it("pass when narratives verify cleanly", () => {
+        const trace = {
+            fromHash: "x",
+            toHash: "y",
+            commits: [
+                {
+                    hash: "abc",
+                    shortHash: "abc",
+                    author: "AI",
+                    authorEmail: "noreply@anthropic.com",
+                    message: "Adds function fooBar.",
+                },
+            ],
+            filesChanged: ["src/x.ts"],
+            insertions: 1,
+            deletions: 0,
+        };
+        const r = evaluateNarrativeAxis({
+            trace,
+            diffs: { abc: { diff: "+ export function fooBar() {}", filesTouched: ["src/x.ts"] } },
+        });
+        expect(r.verdict).toBe("pass");
+    });
+});
+describe("audit/certify — buildCertificate end-to-end", () => {
+    it("clean baseline+trace → pass + exit 0", () => {
+        const before = mkBaseline();
+        const cert = buildCertificate({
+            sessionId: "sess1",
+            beforeBaseline: before,
+            afterBaseline: before,
+            trace: {
+                fromHash: "x",
+                toHash: "y",
+                commits: [],
+                filesChanged: [],
+                insertions: 0,
+                deletions: 0,
+            },
+            diffs: {},
+        });
+        expect(cert.overallVerdict).toBe("pass");
+        expect(cert.exitCode).toBe(0);
+        expect(cert.axes.behavioralParity.verdict).toBe("pass");
+        expect(cert.axes.apiContractDrift.verdict).toBe("pass");
+        expect(cert.axes.testPassRate.verdict).toBe("pass");
+        expect(cert.axes.perfRegression.verdict).toBe("pass");
+        expect(cert.axes.aiNarrative.verdict).toBe("pass");
+    });
+    it("fabricated regression → overall fail + exit 1", () => {
+        const before = mkBaseline();
+        const after = mkBaseline({
+            apiSurface: { core: ["foo"], cli: ["baz"] }, // bar removed
+            testPassRate: { passed: 99, failed: 1, files: 5 },
+            perfMs: { git_status: 30, git_head: 5 },
+        });
+        const cert = buildCertificate({
+            sessionId: "sess1",
+            beforeBaseline: before,
+            afterBaseline: after,
+            trace: {
+                fromHash: "x",
+                toHash: "y",
+                commits: [
+                    {
+                        hash: "abc",
+                        shortHash: "abc",
+                        author: "AI",
+                        authorEmail: "noreply@anthropic.com",
+                        message: "Refactor. No change to core/foo.ts.",
+                    },
+                ],
+                filesChanged: ["core/foo.ts"],
+                insertions: 1,
+                deletions: 1,
+            },
+            diffs: {
+                abc: { diff: "+ x\n- y", filesTouched: ["core/foo.ts"] },
+            },
+        });
+        expect(cert.overallVerdict).toBe("fail");
+        expect(cert.exitCode).toBe(1);
+        expect(cert.axes.apiContractDrift.verdict).toBe("fail");
+        expect(cert.axes.testPassRate.verdict).toBe("fail");
+        expect(cert.axes.perfRegression.verdict).toBe("fail");
+        expect(cert.axes.aiNarrative.verdict).toBe("fail");
+    });
+    it("forensic axes default to pass when no scores supplied", () => {
+        const before = mkBaseline();
+        const cert = buildCertificate({
+            sessionId: "sess1",
+            beforeBaseline: before,
+            afterBaseline: before,
+            trace: {
+                fromHash: "x",
+                toHash: "x",
+                commits: [],
+                filesChanged: [],
+                insertions: 0,
+                deletions: 0,
+            },
+            diffs: {},
+        });
+        expect(cert.forensicAxes.size).toBe("pass");
+        expect(cert.forensicAxes.files).toBe("pass");
+        expect(cert.forensicAxes.style).toBe("pass");
+        expect(cert.forensicAxes.time).toBe("pass");
+    });
+    it("forensic axes propagate to overall when high score", () => {
+        const before = mkBaseline();
+        const cert = buildCertificate({
+            sessionId: "sess1",
+            beforeBaseline: before,
+            afterBaseline: before,
+            trace: {
+                fromHash: "x",
+                toHash: "x",
+                commits: [],
+                filesChanged: [],
+                insertions: 0,
+                deletions: 0,
+            },
+            diffs: {},
+            forensicScores: { size: 0.8, files: 0.1, style: 0.1, time: 0.1 },
+        });
+        expect(cert.overallVerdict).toBe("fail");
+        expect(cert.forensicAxes.size).toBe("fail");
+    });
+    it("sessionId + capturedAt are populated", () => {
+        const before = mkBaseline();
+        const cert = buildCertificate({
+            sessionId: "my-session",
+            beforeBaseline: before,
+            afterBaseline: before,
+            trace: {
+                fromHash: "x",
+                toHash: "y",
+                commits: [],
+                filesChanged: [],
+                insertions: 0,
+                deletions: 0,
+            },
+            diffs: {},
+        });
+        expect(cert.sessionId).toBe("my-session");
+        expect(cert.capturedAt).toMatch(/^\d{4}-/);
+    });
+});
+//# sourceMappingURL=certify.test.js.map

package/dist/audit/certify.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"certify.test.js","sourceRoot":"","sources":["../../src/audit/certify.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EACL,gBAAgB,EAChB,oBAAoB,EACpB,eAAe,EACf,iBAAiB,EACjB,uBAAuB,EACvB,WAAW,EACX,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,cAAc,CAAC;AAItB,SAAS,UAAU,CAAC,OAA0B,EAAE;IAC9C,OAAO;QACL,UAAU,EAAE,sBAAsB;QAClC,QAAQ,EAAE,WAAW;QACrB,OAAO,EAAE;YACP,QAAQ,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,EAAE;YAC3D,UAAU,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE;YAC9D,YAAY,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,EAAE;SAChE;QACD,YAAY,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE;QAClD,UAAU,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,EAAE;QAClD,MAAM,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE;QACvC,GAAG,IAAI;KACR,CAAC;AACJ,CAAC;AAED,QAAQ,CAAC,wDAAwD,EAAE,GAAG,EAAE;IACtE,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,MAAM,CAAC,eAAe,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvD,MAAM,CAAC,eAAe,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvD,MAAM,CAAC,eAAe,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC/D,MAAM,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC7D,MAAM,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC7C,MAAM,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC/C,MAAM,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC/C,MAAM,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,yCAAyC,EAAE,GAAG,EAAE;IACvD,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;QAC5B,MAAM,CAAC,GAAG,uBAAuB,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;QACvE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC7D,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAG;YACZ,OAAO,EAAE;gBACP,QAAQ,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,UAAU,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,EAAE;gBACrE,UAAU,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,UAAU,EAAE,cAAc,EAAE,WAAW,EAAE,EAAE,EAAE;gBACxE,YAAY,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,EAAE;aAChE;SACF,CAAC;QACF,MAAM,CAAC,GAAG,uBAAuB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACjD,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC/B,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAG;YACZ,OAAO,EAAE;gBACP,GAAG,MAAM,CAAC,OAAO;gBACjB,YAAY,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC,EAAE;aACvE;SACF,CAAC;QACF,MAAM,CAAC,GAAG,uBAAuB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACjD,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAG;YACZ,OAAO,EAAE;gBACP,GAAG,MAAM,CAAC,OAAO;gBACjB,QAAQ,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,EAAE;aAC5D;SACF,CAAC;QACF,MAAM,CAAC,GAAG,uBAAuB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACjD,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,mCAAmC,EAAE,GAAG,EAAE;IACjD,EAAE,CAAC,6BAA6B,EAAE,GAAG,EAAE;QACrC,MAAM,CAAC,GAAG,UAAU,EAAE,CAAC;QACvB,MAAM,CAAC,GAAG,iBAAiB,CAAC,CAAC,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;QAC7D,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0BAA0B,EAAE,GAAG,EAAE;QAClC,MAAM,CAAC,GAAG,UAAU,EAAE,CAAC;QACvB,MAAM,CAAC,GAAG,iBAAiB,CAAC,CAAC,EAAE;YAC7B,UAAU,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAC,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,EAAE;SAC7D,CAAC,CAAC;QACH,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC/B,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;QACxC,MAAM,CAAC,GAAG,UAAU,EAAE,CAAC;QACvB,MAAM,CAAC,GAAG,iBAAiB,CAAC,CAAC,EAAE;YAC7B,UAAU,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,EAAE;SAC5C,CAAC,CAAC;QACH,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC/B,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,qCAAqC,EAAE,GAAG,EAAE;IACnD,EAAE,CAAC,6BAA6B,EAAE,GAAG,EAAE;QACrC,MAAM,CAAC,GAAG,UAAU,EAAE,CAAC;QACvB,MAAM,CAAC,GAAG,mBAAmB,CAAC,CAAC,EAAE;YAC/B,YAAY,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE;SACnD,CAAC,CAAC;QACH,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2BAA2B,EAAE,GAAG,EAAE;QACnC,MAAM,CAAC,GAAG,UAAU,EAAE,CAAC;QACvB,MAAM,CAAC,GAAG,mBAAmB,CAAC,CAAC,EAAE;YAC/B,YAAY,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE;SAClD,CAAC,CAAC;QACH,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,MAAM,CAAC,GAAG,UAAU,EAAE,CAAC;QACvB,MAAM,CAAC,GAAG,mBAAmB,CAAC,CAAC,EAAE;YAC/B,YAAY,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE;SAClD,CAAC,CAAC;QACH,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,6BAA6B,EAAE,GAAG,EAAE;IAC3C,EAAE,CAAC,0BAA0B,EAAE,GAAG,EAAE;QAClC,MAAM,CAAC,GAAG,UAAU,EAAE,CAAC;QACvB,MAAM,CAAC,GAAG,WAAW,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QACtE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0BAA0B,EAAE,GAAG,EAAE;QAClC,MAAM,CAAC,GAAG,UAAU,EAAE,CAAC;QACvB,MAAM,CAAC,GAAG,WAAW,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QACtE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC/B,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uBAAuB,EAAE,GAAG,EAAE;QAC/B,MAAM,CAAC,GAAG,UAAU,EAAE,CAAC;QACvB,MAAM,CAAC,GAAG,WAAW,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QACtE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC/B,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,uCAAuC,EAAE,GAAG,EAAE;IACrD,EAAE,CAAC,sBAAsB,EAAE,GAAG,EAAE;QAC9B,MAAM,KAAK,GAAiB;YAC1B,QAAQ,EAAE,GAAG;YACb,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,EAAE;YACX,YAAY,EAAE,EAAE;YAChB,UAAU,EAAE,CAAC;YACb,SAAS,EAAE,CAAC;SACb,CAAC;QACF,MAAM,CAAC,GAAG,qBAAqB,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;QACtD,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,KAAK,GAAiB;YAC1B,QAAQ,EAAE,GAAG;YACb,MAAM,EAAE,GAAG;YACX,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,KAAK;oBACX,SAAS,EAAE,KAAK;oBAChB,MAAM,EAAE,IAAI;oBACZ,WAAW,EAAE,uBAAuB;oBACpC,OAAO,EAAE,oCAAoC;iBAC9C;aACF;YACD,YAAY,EAAE,CAAC,WAAW,CAAC;YAC3B,UAAU,EAAE,CAAC;YACb,SAAS,EAAE,CAAC;SACb,CAAC;QACF,MAAM,CAAC,GAAG,qBAAqB,CAAC;YAC9B,KAAK;YACL,KAAK,EAAE,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,gBAAgB,EAAE,WAAW,CAAC,EAAE,EAAE;SAC/E,CAAC,CAAC;QACH,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC/B,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,KAAK,GAAiB;YAC1B,QAAQ,EAAE,GAAG;YACb,MAAM,EAAE,GAAG;YACX,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,KAAK;oBACX,SAAS,EAAE,KAAK;oBAChB,MAAM,EAAE,IAAI;oBACZ,WAAW,EAAE,uBAAuB;oBACpC,OAAO,EAAE,uBAAuB;iBACjC;aACF;YACD,YAAY,EAAE,CAAC,UAAU,CAAC;YAC1B,UAAU,EAAE,CAAC;YACb,SAAS,EAAE,CAAC;SACb,CAAC;QACF,MAAM,CAAC,GAAG,qBAAqB,CAAC;YAC9B,KAAK;YACL,KAAK,EAAE,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,+BAA+B,EAAE,YAAY,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE;SACtF,CAAC,CAAC;QACH,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,6CAA6C,EAAE,GAAG,EAAE;IAC3D,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,gBAAgB,CAAC;YAC5B,SAAS,EAAE,OAAO;YAClB,cAAc,EAAE,MAAM;YACtB,aAAa,EAAE,MAAM;YACrB,KAAK,EAAE;gBACL,QAAQ,EAAE,GAAG;gBACb,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE,EAAE;gBACX,YAAY,EAAE,EAAE;gBAChB,UAAU,EAAE,CAAC;gBACb,SAAS,EAAE,CAAC;aACb;YACD,KAAK,EAAE,EAAE;SACV,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACzC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACxD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACxD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACpD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACtD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAG,UAAU,CAAC;YACvB,UAAU,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,cAAc;YAC3D,YAAY,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE;YACjD,MAAM,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE;SACxC,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,gBAAgB,CAAC;YAC5B,SAAS,EAAE,OAAO;YAClB,cAAc,EAAE,MAAM;YACtB,aAAa,EAAE,KAAK;YACpB,KAAK,EAAE;gBACL,QAAQ,EAAE,GAAG;gBACb,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,KAAK;wBACX,SAAS,EAAE,KAAK;wBAChB,MAAM,EAAE,IAAI;wBACZ,WAAW,EAAE,uBAAuB;wBACpC,OAAO,EAAE,qCAAqC;qBAC/C;iBACF;gBACD,YAAY,EAAE,CAAC,aAAa,CAAC;gBAC7B,UAAU,EAAE,CAAC;gBACb,SAAS,EAAE,CAAC;aACb;YACD,KAAK,EAAE;gBACL,GAAG,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC,aAAa,CAAC,EAAE;aACzD;SACF,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACzC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACxD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACpD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACtD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;QAC/D,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,gBAAgB,CAAC;YAC5B,SAAS,EAAE,OAAO;YAClB,cAAc,EAAE,MAAM;YACtB,aAAa,EAAE,MAAM;YACrB,KAAK,EAAE;gBACL,QAAQ,EAAE,GAAG;gBACb,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE,EAAE;gBACX,YAAY,EAAE,EAAE;gBAChB,UAAU,EAAE,CAAC;gBACb,SAAS,EAAE,CAAC;aACb;YACD,KAAK,EAAE,EAAE;SACV,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC5C,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC7C,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC7C,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,gBAAgB,CAAC;YAC5B,SAAS,EAAE,OAAO;YAClB,cAAc,EAAE,MAAM;YACtB,aAAa,EAAE,MAAM;YACrB,KAAK,EAAE;gBACL,QAAQ,EAAE,GAAG;gBACb,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE,EAAE;gBACX,YAAY,EAAE,EAAE;gBAChB,UAAU,EAAE,CAAC;gBACb,SAAS,EAAE,CAAC;aACb;YACD,KAAK,EAAE,EAAE;YACT,cAAc,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE;SACjE,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACzC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,gBAAgB,CAAC;YAC5B,SAAS,EAAE,YAAY;YACvB,cAAc,EAAE,MAAM;YACtB,aAAa,EAAE,MAAM;YACrB,KAAK,EAAE;gBACL,QAAQ,EAAE,GAAG;gBACb,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE,EAAE;gBACX,YAAY,EAAE,EAAE;gBAChB,UAAU,EAAE,CAAC;gBACb,SAAS,EAAE,CAAC;aACb;YACD,KAAK,EAAE,EAAE;SACV,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC1C,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/audit/index.d.ts

@@ -0,0 +1,14 @@
+/**
+ * AI Session Audit — public surface.
+ *
+ * The pitch: every AI-driven commit gets a trust certificate.  AI tools
+ * (Claude Code, Cursor, Codex, Devin, ...) silently introduce
+ * regressions; this module snapshots behavior BEFORE the AI works,
+ * traces what actually changed, verifies the AI's narrative, and emits
+ * a 5-axis trust certificate.  Vendor-neutral.
+ */
+export * from "./baseline.js";
+export * from "./trace.js";
+export * from "./verify.js";
+export * from "./certify.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/audit/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/audit/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,cAAc,eAAe,CAAC;AAC9B,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC"}

package/dist/audit/index.js

@@ -0,0 +1,14 @@
+/**
+ * AI Session Audit — public surface.
+ *
+ * The pitch: every AI-driven commit gets a trust certificate.  AI tools
+ * (Claude Code, Cursor, Codex, Devin, ...) silently introduce
+ * regressions; this module snapshots behavior BEFORE the AI works,
+ * traces what actually changed, verifies the AI's narrative, and emits
+ * a 5-axis trust certificate.  Vendor-neutral.
+ */
+export * from "./baseline.js";
+export * from "./trace.js";
+export * from "./verify.js";
+export * from "./certify.js";
+//# sourceMappingURL=index.js.map

package/dist/audit/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/audit/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,cAAc,eAAe,CAAC;AAC9B,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC"}

package/dist/audit/trace.d.ts

@@ -0,0 +1,88 @@
+/**
+ * AI Session Audit — TRACE module.
+ *
+ * Given a baseline HEAD hash, find every commit that landed since (the
+ * "AI session"), aggregate the diff, and detect which commits were
+ * AI-authored and by which vendor.
+ *
+ * Vendor detection is heuristic and intentionally conservative — we
+ * never block on a guess, only annotate.  The signals we use:
+ *   - commit-message regex  ("Co-Authored-By: Claude", "[Cursor]", ...)
+ *   - author/email patterns  (noreply@anthropic.com, cursor.sh, ...)
+ *
+ * All process I/O flows through a `GitRunner` interface so tests can
+ * replay canned commit logs.
+ */
+/** A single AI-vendor detection rule. */
+export interface VendorRule {
+    vendor: string;
+    /** If a regex matches the commit message, attribute to `vendor`. */
+    messageRe?: RegExp;
+    /** If a regex matches the author email, attribute to `vendor`. */
+    emailRe?: RegExp;
+    /** Confidence in [0, 1]; combined as max across matching rules. */
+    confidence: number;
+}
+/**
+ * Default rule set.  Order doesn't matter — we score every rule against
+ * every commit and take the maximum confidence per vendor.
+ */
+export declare const DEFAULT_VENDOR_RULES: VendorRule[];
+export interface AuditCommit {
+    hash: string;
+    shortHash: string;
+    author: string;
+    authorEmail: string;
+    message: string;
+    /** Vendor + confidence; `undefined` means "human (or undetected AI)". */
+    likelyAI?: {
+        vendor: string;
+        confidence: number;
+    };
+}
+export interface SessionTrace {
+    fromHash: string;
+    toHash: string;
+    commits: AuditCommit[];
+    filesChanged: string[];
+    insertions: number;
+    deletions: number;
+}
+/** Test seam — every git invocation goes through this. */
+export interface GitRunner {
+    /** Run `git <args>` in `cwd`; return stdout (empty string on failure). */
+    run(cwd: string, args: string[]): string;
+}
+export declare const realGitRunner: GitRunner;
+/** Sentinel separator we ask git to emit between commit blocks. */
+export declare const COMMIT_SEP = "<<<MNEME-AUDIT-COMMIT-SEP>>>";
+/**
+ * Detect AI vendor for a single commit.
+ *
+ * Returns the vendor with the highest confidence, or `undefined` if no
+ * rule matched.  Ties are broken by alphabetical vendor name (stable).
+ */
+export declare function detectAiVendor(commit: {
+    message: string;
+    authorEmail: string;
+}, rules?: VendorRule[]): {
+    vendor: string;
+    confidence: number;
+} | undefined;
+/**
+ * Trace the session — every commit between `baselineHeadHash` and HEAD.
+ */
+export declare function traceSession(repoRoot: string, baselineHeadHash: string, runner?: GitRunner): Promise<SessionTrace>;
+export declare function parseCommitLog(raw: string): AuditCommit[];
+export declare function parseShortstat(s: string): {
+    insertions: number;
+    deletions: number;
+};
+/** Convenience: how many commits in the trace look AI-authored. */
+export declare function aiCommitCount(trace: SessionTrace): number;
+/** Distinct vendors observed (sorted by descending count, then name). */
+export declare function aiVendorBreakdown(trace: SessionTrace): Array<{
+    vendor: string;
+    count: number;
+}>;
+//# sourceMappingURL=trace.d.ts.map

package/dist/audit/trace.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"trace.d.ts","sourceRoot":"","sources":["../../src/audit/trace.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAIH,yCAAyC;AACzC,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,oEAAoE;IACpE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,kEAAkE;IAClE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,mEAAmE;IACnE,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;;GAGG;AACH,eAAO,MAAM,oBAAoB,EAAE,UAAU,EAa5C,CAAC;AAEF,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,yEAAyE;IACzE,QAAQ,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;CACnD;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,WAAW,EAAE,CAAC;IACvB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,0DAA0D;AAC1D,MAAM,WAAW,SAAS;IACxB,0EAA0E;IAC1E,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;CAC1C;AAED,eAAO,MAAM,aAAa,EAAE,SAa3B,CAAC;AAEF,mEAAmE;AACnE,eAAO,MAAM,UAAU,iCAAiC,CAAC;AAEzD;;;;;GAKG;AACH,wBAAgB,cAAc,CAC5B,MAAM,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,EAChD,KAAK,GAAE,UAAU,EAAyB,GACzC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAiBpD;AAED;;GAEG;AACH,wBAAsB,YAAY,CAChC,QAAQ,EAAE,MAAM,EAChB,gBAAgB,EAAE,MAAM,EACxB,MAAM,GAAE,SAAyB,GAChC,OAAO,CAAC,YAAY,CAAC,CA0CvB;AAID,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,WAAW,EAAE,CAyBzD;AAED,wBAAgB,cAAc,CAAC,CAAC,EAAE,MAAM,GAAG;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAQnF;AAED,mEAAmE;AACnE,wBAAgB,aAAa,CAAC,KAAK,EAAE,YAAY,GAAG,MAAM,CAEzD;AAED,yEAAyE;AACzE,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,YAAY,GAAG,KAAK,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAS/F"}

package/dist/audit/trace.js

@@ -0,0 +1,173 @@
+/**
+ * AI Session Audit — TRACE module.
+ *
+ * Given a baseline HEAD hash, find every commit that landed since (the
+ * "AI session"), aggregate the diff, and detect which commits were
+ * AI-authored and by which vendor.
+ *
+ * Vendor detection is heuristic and intentionally conservative — we
+ * never block on a guess, only annotate.  The signals we use:
+ *   - commit-message regex  ("Co-Authored-By: Claude", "[Cursor]", ...)
+ *   - author/email patterns  (noreply@anthropic.com, cursor.sh, ...)
+ *
+ * All process I/O flows through a `GitRunner` interface so tests can
+ * replay canned commit logs.
+ */
+import { execFileSync } from "node:child_process";
+/**
+ * Default rule set.  Order doesn't matter — we score every rule against
+ * every commit and take the maximum confidence per vendor.
+ */
+export const DEFAULT_VENDOR_RULES = [
+    { vendor: "claude", messageRe: /Co-Authored-By:\s*Claude/i, confidence: 0.95 },
+    { vendor: "claude", emailRe: /noreply@anthropic\.com$/i, confidence: 0.95 },
+    { vendor: "cursor", messageRe: /\[Cursor\]/, confidence: 0.9 },
+    { vendor: "cursor", emailRe: /noreply@cursor\.(sh|com)$/i, confidence: 0.9 },
+    { vendor: "codex", messageRe: /Generated\s+by\s+Codex/i, confidence: 0.9 },
+    { vendor: "codex", messageRe: /Co-Authored-By:\s*ChatGPT/i, confidence: 0.85 },
+    { vendor: "devin", messageRe: /devin\.ai/i, confidence: 0.9 },
+    { vendor: "devin", emailRe: /@devin\.ai$/i, confidence: 0.9 },
+    { vendor: "sweep", messageRe: /sweep\.dev/i, confidence: 0.85 },
+    { vendor: "sweep", emailRe: /@sweep\.dev$/i, confidence: 0.85 },
+    { vendor: "aider", messageRe: /\baider\b/i, confidence: 0.7 },
+    { vendor: "copilot", messageRe: /Co-Authored-By:\s*GitHub Copilot/i, confidence: 0.9 },
+];
+export const realGitRunner = {
+    run(cwd, args) {
+        try {
+            return execFileSync("git", args, {
+                cwd,
+                encoding: "utf8",
+                stdio: ["ignore", "pipe", "pipe"],
+                maxBuffer: 64 * 1024 * 1024,
+            });
+        }
+        catch {
+            return "";
+        }
+    },
+};
+/** Sentinel separator we ask git to emit between commit blocks. */
+export const COMMIT_SEP = "<<<MNEME-AUDIT-COMMIT-SEP>>>";
+/**
+ * Detect AI vendor for a single commit.
+ *
+ * Returns the vendor with the highest confidence, or `undefined` if no
+ * rule matched.  Ties are broken by alphabetical vendor name (stable).
+ */
+export function detectAiVendor(commit, rules = DEFAULT_VENDOR_RULES) {
+    let bestVendor;
+    let bestConfidence = -1;
+    for (const r of rules) {
+        let matched = false;
+        if (r.messageRe && r.messageRe.test(commit.message))
+            matched = true;
+        if (r.emailRe && r.emailRe.test(commit.authorEmail))
+            matched = true;
+        if (!matched)
+            continue;
+        if (r.confidence > bestConfidence ||
+            (r.confidence === bestConfidence && (bestVendor ?? "z") > r.vendor)) {
+            bestVendor = r.vendor;
+            bestConfidence = r.confidence;
+        }
+    }
+    return bestVendor ? { vendor: bestVendor, confidence: bestConfidence } : undefined;
+}
+/**
+ * Trace the session — every commit between `baselineHeadHash` and HEAD.
+ */
+export async function traceSession(repoRoot, baselineHeadHash, runner = realGitRunner) {
+    const headOut = runner.run(repoRoot, ["rev-parse", "HEAD"]);
+    const toHash = headOut.trim() || baselineHeadHash;
+    if (toHash === baselineHeadHash) {
+        return {
+            fromHash: baselineHeadHash,
+            toHash,
+            commits: [],
+            filesChanged: [],
+            insertions: 0,
+            deletions: 0,
+        };
+    }
+    const range = `${baselineHeadHash}..HEAD`;
+    // Header (TAB-separated) on line 1, commit body follows, separator marks end.
+    const fmt = `--pretty=format:%H%x09%an%x09%ae%x09%s%n%b%n${COMMIT_SEP}`;
+    const logRaw = runner.run(repoRoot, ["log", range, fmt]);
+    const commits = parseCommitLog(logRaw);
+    const shortstat = runner.run(repoRoot, ["diff", "--shortstat", range]);
+    const { insertions, deletions } = parseShortstat(shortstat);
+    const namesOut = runner.run(repoRoot, ["diff", "--name-only", range]);
+    const filesChanged = [
+        ...new Set(namesOut
+            .split(/\r?\n/)
+            .map((l) => l.trim())
+            .filter((l) => l.length > 0)),
+    ];
+    return {
+        fromHash: baselineHeadHash,
+        toHash,
+        commits,
+        filesChanged,
+        insertions,
+        deletions,
+    };
+}
+// ─── Parsers (exported for tests) ───────────────────────────────────
+export function parseCommitLog(raw) {
+    if (!raw)
+        return [];
+    const out = [];
+    for (const block of raw.split(COMMIT_SEP)) {
+        const trimmed = block.replace(/^\s+/, "").replace(/\s+$/, "");
+        if (!trimmed)
+            continue;
+        const firstNl = trimmed.indexOf("\n");
+        const headerLine = firstNl >= 0 ? trimmed.slice(0, firstNl) : trimmed;
+        const body = firstNl >= 0 ? trimmed.slice(firstNl + 1) : "";
+        const parts = headerLine.split("\t");
+        if (parts.length < 4)
+            continue;
+        const [hash, author, email, subject] = parts;
+        if (!hash || !author || !email)
+            continue;
+        const fullMessage = body ? `${subject}\n${body}` : (subject ?? "");
+        const ai = detectAiVendor({ message: fullMessage, authorEmail: email });
+        out.push({
+            hash,
+            shortHash: hash.slice(0, 7),
+            author,
+            authorEmail: email,
+            message: fullMessage,
+            likelyAI: ai,
+        });
+    }
+    return out;
+}
+export function parseShortstat(s) {
+    if (!s)
+        return { insertions: 0, deletions: 0 };
+    const ins = s.match(/(\d+)\s+insertion/);
+    const del = s.match(/(\d+)\s+deletion/);
+    return {
+        insertions: ins ? Number(ins[1]) : 0,
+        deletions: del ? Number(del[1]) : 0,
+    };
+}
+/** Convenience: how many commits in the trace look AI-authored. */
+export function aiCommitCount(trace) {
+    return trace.commits.filter((c) => !!c.likelyAI).length;
+}
+/** Distinct vendors observed (sorted by descending count, then name). */
+export function aiVendorBreakdown(trace) {
+    const map = new Map();
+    for (const c of trace.commits) {
+        if (!c.likelyAI)
+            continue;
+        map.set(c.likelyAI.vendor, (map.get(c.likelyAI.vendor) ?? 0) + 1);
+    }
+    return [...map.entries()]
+        .map(([vendor, count]) => ({ vendor, count }))
+        .sort((a, b) => b.count - a.count || a.vendor.localeCompare(b.vendor));
+}
+//# sourceMappingURL=trace.js.map

package/dist/audit/trace.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trace.js","sourceRoot":"","sources":["../../src/audit/trace.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAalD;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAiB;IAChD,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,2BAA2B,EAAE,UAAU,EAAE,IAAI,EAAE;IAC9E,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,0BAA0B,EAAE,UAAU,EAAE,IAAI,EAAE;IAC3E,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,GAAG,EAAE;IAC9D,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,4BAA4B,EAAE,UAAU,EAAE,GAAG,EAAE;IAC5E,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,yBAAyB,EAAE,UAAU,EAAE,GAAG,EAAE;IAC1E,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,4BAA4B,EAAE,UAAU,EAAE,IAAI,EAAE;IAC9E,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,GAAG,EAAE;IAC7D,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,GAAG,EAAE;IAC7D,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,UAAU,EAAE,IAAI,EAAE;IAC/D,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,IAAI,EAAE;IAC/D,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,GAAG,EAAE;IAC7D,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,mCAAmC,EAAE,UAAU,EAAE,GAAG,EAAE;CACvF,CAAC;AA2BF,MAAM,CAAC,MAAM,aAAa,GAAc;IACtC,GAAG,CAAC,GAAG,EAAE,IAAI;QACX,IAAI,CAAC;YACH,OAAO,YAAY,CAAC,KAAK,EAAE,IAAI,EAAE;gBAC/B,GAAG;gBACH,QAAQ,EAAE,MAAM;gBAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;gBACjC,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;aAC5B,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;CACF,CAAC;AAEF,mEAAmE;AACnE,MAAM,CAAC,MAAM,UAAU,GAAG,8BAA8B,CAAC;AAEzD;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAC5B,MAAgD,EAChD,QAAsB,oBAAoB;IAE1C,IAAI,UAA8B,CAAC;IACnC,IAAI,cAAc,GAAG,CAAC,CAAC,CAAC;IACxB,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;YAAE,OAAO,GAAG,IAAI,CAAC;QACpE,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;YAAE,OAAO,GAAG,IAAI,CAAC;QACpE,IAAI,CAAC,OAAO;YAAE,SAAS;QACvB,IACE,CAAC,CAAC,UAAU,GAAG,cAAc;YAC7B,CAAC,CAAC,CAAC,UAAU,KAAK,cAAc,IAAI,CAAC,UAAU,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,EACnE,CAAC;YACD,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;YACtB,cAAc,GAAG,CAAC,CAAC,UAAU,CAAC;QAChC,CAAC;IACH,CAAC;IACD,OAAO,UAAU,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AACrF,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,QAAgB,EAChB,gBAAwB,EACxB,SAAoB,aAAa;IAEjC,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC;IAC5D,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,IAAI,gBAAgB,CAAC;IAElD,IAAI,MAAM,KAAK,gBAAgB,EAAE,CAAC;QAChC,OAAO;YACL,QAAQ,EAAE,gBAAgB;YAC1B,MAAM;YACN,OAAO,EAAE,EAAE;YACX,YAAY,EAAE,EAAE;YAChB,UAAU,EAAE,CAAC;YACb,SAAS,EAAE,CAAC;SACb,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,GAAG,gBAAgB,QAAQ,CAAC;IAC1C,8EAA8E;IAC9E,MAAM,GAAG,GAAG,+CAA+C,UAAU,EAAE,CAAC;IACxE,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;IACzD,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;IAEvC,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,aAAa,EAAE,KAAK,CAAC,CAAC,CAAC;IACvE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC;IAE5D,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,aAAa,EAAE,KAAK,CAAC,CAAC,CAAC;IACtE,MAAM,YAAY,GAAG;QACnB,GAAG,IAAI,GAAG,CACR,QAAQ;aACL,KAAK,CAAC,OAAO,CAAC;aACd,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;aACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAC/B;KACF,CAAC;IAEF,OAAO;QACL,QAAQ,EAAE,gBAAgB;QAC1B,MAAM;QACN,OAAO;QACP,YAAY;QACZ,UAAU;QACV,SAAS;KACV,CAAC;AACJ,CAAC;AAED,uEAAuE;AAEvE,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAC;IACpB,MAAM,GAAG,GAAkB,EAAE,CAAC;IAC9B,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;QAC1C,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC9D,IAAI,CAAC,OAAO;YAAE,SAAS;QACvB,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,UAAU,GAAG,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;QACtE,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,SAAS;QAC/B,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,KAAK,CAAC;QAC7C,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK;YAAE,SAAS;QACzC,MAAM,WAAW,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,OAAO,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;QACnE,MAAM,EAAE,GAAG,cAAc,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;QACxE,GAAG,CAAC,IAAI,CAAC;YACP,IAAI;YACJ,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;YAC3B,MAAM;YACN,WAAW,EAAE,KAAK;YAClB,OAAO,EAAE,WAAW;YACpB,QAAQ,EAAE,EAAE;SACb,CAAC,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,CAAS;IACtC,IAAI,CAAC,CAAC;QAAE,OAAO,EAAE,UAAU,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IAC/C,MAAM,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACzC,MAAM,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;IACxC,OAAO;QACL,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACpC,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;KACpC,CAAC;AACJ,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,aAAa,CAAC,KAAmB;IAC/C,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC;AAC1D,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,iBAAiB,CAAC,KAAmB;IACnD,MAAM,GAAG,GAAG,IAAI,GAAG,EAAkB,CAAC;IACtC,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QAC9B,IAAI,CAAC,CAAC,CAAC,QAAQ;YAAE,SAAS;QAC1B,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,CAAC,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC;SACtB,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;SAC7C,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;AAC3E,CAAC"}