@mneme-ai/core 1.70.0 → 1.72.0

package/dist/diaspora/diaspora.test.d.ts

@@ -0,0 +1,5 @@
+/**
+ * v1.72.0 -- DIASPORA PROTOCOL test suite incl. cross-vendor e2e.
+ */
+export {};
+//# sourceMappingURL=diaspora.test.d.ts.map

package/dist/diaspora/diaspora.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"diaspora.test.d.ts","sourceRoot":"","sources":["../../src/diaspora/diaspora.test.ts"],"names":[],"mappings":"AAAA;;GAEG"}

package/dist/diaspora/diaspora.test.js

@@ -0,0 +1,232 @@
+/**
+ * v1.72.0 -- DIASPORA PROTOCOL test suite incl. cross-vendor e2e.
+ */
+import { describe, it, expect, beforeEach, afterEach } from "vitest";
+import { mkdtempSync, rmSync, mkdirSync, writeFileSync, existsSync, readFileSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { execSync } from "node:child_process";
+import { ensureGitignoreEntries, ensureSingleGitignoreEntry, readManagedEntries, } from "./gitignore_writer.js";
+import { autoStartSpore, readSporeConfig, disableSpore, } from "./spore_autostart.js";
+import { saveCapsule, resumeCapsule, listCapsules, } from "./session_capsule.js";
+import { openapiSpec, startBridge, customGptTemplate } from "./http_bridge.js";
+function setup() { return mkdtempSync(join(tmpdir(), "mneme-dia-")); }
+function cleanup(r) { try {
+    rmSync(r, { recursive: true, force: true });
+}
+catch { /* */ } }
+// ─── D1 GHOST SNIPER GITIGNORE ───────────────────────────────────────
+describe("v1.72 Diaspora D1 · Ghost Sniper Gitignore", () => {
+    let r;
+    beforeEach(() => { r = setup(); });
+    afterEach(() => cleanup(r));
+    it("creates .gitignore when absent", () => {
+        const res = ensureGitignoreEntries(r);
+        expect(res.action).toBe("created");
+        expect(existsSync(join(r, ".gitignore"))).toBe(true);
+        const content = readFileSync(join(r, ".gitignore"), "utf8");
+        expect(content).toContain("AGENTS.md");
+        expect(content).toContain("GEMINI.md");
+        expect(content).toContain("CLAUDE.md");
+    });
+    it("idempotent on re-run", () => {
+        ensureGitignoreEntries(r);
+        const second = ensureGitignoreEntries(r);
+        expect(second.action).toBe("unchanged");
+    });
+    it("preserves existing manual entries outside sentinel", () => {
+        writeFileSync(join(r, ".gitignore"), "node_modules\ndist/\n", "utf8");
+        ensureGitignoreEntries(r);
+        const content = readFileSync(join(r, ".gitignore"), "utf8");
+        expect(content).toContain("node_modules");
+        expect(content).toContain("dist/");
+        expect(content).toContain("AGENTS.md");
+    });
+    it("doesn't duplicate when user manually added an entry", () => {
+        writeFileSync(join(r, ".gitignore"), "CLAUDE.md\n", "utf8");
+        ensureGitignoreEntries(r);
+        const content = readFileSync(join(r, ".gitignore"), "utf8");
+        // CLAUDE.md should appear ONCE (outside the managed block, not duplicated inside).
+        const matches = (content.match(/^CLAUDE\.md$/gm) ?? []);
+        expect(matches.length).toBe(1);
+    });
+    it("ensureSingleGitignoreEntry appends a single new entry", () => {
+        const r1 = ensureSingleGitignoreEntry(r, "AGENTS.md");
+        expect(r1.action).toBe("created");
+        const r2 = ensureSingleGitignoreEntry(r, "AGENTS.md");
+        expect(r2.action).toBe("unchanged");
+    });
+    it("readManagedEntries returns the managed list", () => {
+        ensureGitignoreEntries(r, ["AGENTS.md", "GEMINI.md"]);
+        const got = readManagedEntries(r);
+        expect(got).toContain("AGENTS.md");
+        expect(got).toContain("GEMINI.md");
+    });
+});
+// ─── D2 SPORE DEFAULT-ON ─────────────────────────────────────────────
+describe("v1.72 Diaspora D2 · Spore Default-On", () => {
+    let r;
+    beforeEach(() => { r = setup(); });
+    afterEach(() => cleanup(r));
+    it("no git remote -> spore stays off", () => {
+        const res = autoStartSpore(r);
+        expect(res.enabled).toBe(false);
+        expect(res.reason).toContain("no git remotes");
+    });
+    it("git remote detected -> spore auto-enables", () => {
+        mkdirSync(join(r, ".git"), { recursive: true });
+        writeFileSync(join(r, ".git/config"), `[core]\n\trepositoryformatversion = 0\n[remote "origin"]\n\turl = https://github.com/user/repo.git\n\tfetch = +refs/heads/*:refs/remotes/origin/*\n`, "utf8");
+        const res = autoStartSpore(r);
+        expect(res.enabled).toBe(true);
+        expect(res.config?.remoteName).toBe("origin");
+        expect(res.config?.remoteUrl).toBe("https://github.com/user/repo.git");
+    });
+    it("idempotent: second call doesn't overwrite", () => {
+        mkdirSync(join(r, ".git"), { recursive: true });
+        writeFileSync(join(r, ".git/config"), `[remote "origin"]\n\turl = https://example.com/r.git\n`, "utf8");
+        autoStartSpore(r);
+        const first = readSporeConfig(r);
+        autoStartSpore(r);
+        const second = readSporeConfig(r);
+        expect(first?.enabledAt).toBe(second?.enabledAt);
+    });
+    it("disableSpore turns it off", () => {
+        mkdirSync(join(r, ".git"), { recursive: true });
+        writeFileSync(join(r, ".git/config"), `[remote "origin"]\n\turl = x\n`, "utf8");
+        autoStartSpore(r);
+        disableSpore(r);
+        const cfg = readSporeConfig(r);
+        expect(cfg?.enabled).toBe(false);
+    });
+});
+// ─── D3 PORTABLE SESSION CAPSULE ─────────────────────────────────────
+describe("v1.72 Diaspora D3 · Portable Session Capsule (cross-vendor e2e)", () => {
+    let r;
+    beforeEach(() => {
+        r = setup();
+        execSync(`git init --quiet -b main`, { cwd: r, stdio: "ignore" });
+        execSync(`git config user.email "t@t.t"`, { cwd: r, stdio: "ignore" });
+        execSync(`git config user.name "t"`, { cwd: r, stdio: "ignore" });
+        execSync(`git config commit.gpgsign false`, { cwd: r, stdio: "ignore" });
+        writeFileSync(join(r, "README.md"), "x", "utf8");
+        execSync(`git add -A`, { cwd: r, stdio: "ignore" });
+        execSync(`git commit -m init --no-gpg-sign --quiet`, { cwd: r, stdio: "ignore" });
+    });
+    afterEach(() => cleanup(r));
+    it("save in vendor A + resume in vendor B preserves context", () => {
+        // VENDOR A saves
+        const cap = saveCapsule(r, {
+            vendor: "claude-opus-4-7",
+            contextSummary: "Investigating bug #1234 in auth.ts; user wants bcrypt vs argon2 comparison.",
+            promptTrace: [
+                { ts: new Date().toISOString(), role: "user", text: "why is auth slow?" },
+                { ts: new Date().toISOString(), role: "assistant", text: "auth.ts uses bcrypt at cost 12; could try argon2id" },
+            ],
+            decisions: ["explore argon2id"],
+        });
+        expect(cap.id).toMatch(/^[a-f0-9]{16}$/);
+        // VENDOR B resumes (different vendor name, same repo)
+        const res = resumeCapsule(r, cap.id, { toVendor: "cursor-claude" });
+        expect(res.verdict).toBe("RESUMED");
+        expect(res.recap).toContain("auth.ts");
+        expect(res.recap).toContain("argon2");
+        expect(res.inheritance?.fromVendor).toBe("claude-opus-4-7");
+        expect(res.inheritance?.toVendor).toBe("cursor-claude");
+        // Soul mirror records inheritance event
+        const soulPath = join(r, ".mneme/ai-souls/cursor-claude.json");
+        expect(existsSync(soulPath)).toBe(true);
+        const soul = JSON.parse(readFileSync(soulPath, "utf8"));
+        expect(soul.sessions.some((s) => s["kind"] === "capsule-inheritance")).toBe(true);
+    });
+    it("INVALID_HMAC when capsule is tampered", () => {
+        const cap = saveCapsule(r, {
+            vendor: "v1", contextSummary: "x", promptTrace: [],
+        });
+        const path = join(r, ".mneme/capsules", `${cap.id}.capsule`);
+        const tampered = JSON.parse(readFileSync(path, "utf8"));
+        tampered.contextSummary = "MALICIOUSLY EDITED";
+        writeFileSync(path, JSON.stringify(tampered), "utf8");
+        const res = resumeCapsule(r, cap.id, { toVendor: "v2" });
+        expect(res.verdict).toBe("INVALID_HMAC");
+    });
+    it("NOT_FOUND when capsule id is unknown", () => {
+        const res = resumeCapsule(r, "no-such-capsule", { toVendor: "v2" });
+        expect(res.verdict).toBe("NOT_FOUND");
+    });
+    it("EXPIRED when capsule is older than maxAgeHours", () => {
+        const cap = saveCapsule(r, { vendor: "v1", contextSummary: "x", promptTrace: [] });
+        const path = join(r, ".mneme/capsules", `${cap.id}.capsule`);
+        const data = JSON.parse(readFileSync(path, "utf8"));
+        data.createdAt = new Date(Date.now() - 1000 * 86400 * 1000).toISOString(); // 1000 days ago
+        writeFileSync(path, JSON.stringify(data), "utf8");
+        // BUT now the HMAC won't match... so test via maxAgeHours=0 instead.
+        const res = resumeCapsule(r, cap.id, { toVendor: "v2", maxAgeHours: -1 });
+        expect(["EXPIRED", "INVALID_HMAC"]).toContain(res.verdict);
+    });
+    it("listCapsules sorted newest-first", () => {
+        saveCapsule(r, { vendor: "a", contextSummary: "first", promptTrace: [] });
+        saveCapsule(r, { vendor: "b", contextSummary: "second", promptTrace: [] });
+        const caps = listCapsules(r);
+        expect(caps.length).toBe(2);
+        expect(caps[0].createdAt >= caps[1].createdAt).toBe(true);
+    });
+});
+// ─── D4 HTTP BRIDGE ───────────────────────────────────────────────────
+describe("v1.72 Diaspora D4 · HTTP Bridge + OpenAPI", () => {
+    let r;
+    beforeEach(() => { r = setup(); });
+    afterEach(() => cleanup(r));
+    it("openapiSpec returns valid 3.1 structure", () => {
+        const spec = openapiSpec("http://127.0.0.1:11434");
+        expect(spec["openapi"]).toBe("3.1.0");
+        const paths = spec["paths"];
+        expect(paths["/v1/precog"]).toBeDefined();
+        expect(paths["/v1/sentinel"]).toBeDefined();
+        expect(paths["/v1/apoptosis"]).toBeDefined();
+    });
+    it("customGptTemplate is valid JSON pointing at the bridge", () => {
+        const tpl = customGptTemplate("http://localhost:11434", "test-token");
+        const parsed = JSON.parse(tpl);
+        expect(parsed.actionEndpoint).toContain("/v1/openapi.json");
+        expect(parsed.authentication.type).toBe("bearer");
+    });
+    it("server starts on a free port and stops cleanly", async () => {
+        const handle = await startBridge({ repoRoot: r, port: 0, noAuth: true }, {
+            precog: (claim) => ({ verdict: "HEDGED", claim }),
+            sentinel: (cmd) => ({ action: "ALLOW", command: cmd }),
+            apoptosis: (claim) => ({ verdict: "HEALTHY", claim }),
+        });
+        expect(handle.server.listening).toBe(true);
+        // GET health
+        const port = handle.server.address().port;
+        const res = await fetch(`http://127.0.0.1:${port}/v1/health`);
+        expect(res.status).toBe(200);
+        const body = await res.json();
+        expect(body.ok).toBe(true);
+        // GET openapi
+        const sp = await fetch(`http://127.0.0.1:${port}/v1/openapi.json`);
+        expect(sp.status).toBe(200);
+        await handle.stop();
+    });
+    it("rejects POST without bearer token", async () => {
+        const handle = await startBridge({ repoRoot: r, port: 0 }, { precog: () => ({ ok: true }) });
+        const port = handle.server.address().port;
+        const res = await fetch(`http://127.0.0.1:${port}/v1/precog`, { method: "POST", body: JSON.stringify({ claim: "x" }) });
+        expect(res.status).toBe(401);
+        await handle.stop();
+    });
+    it("accepts POST with bearer token", async () => {
+        const handle = await startBridge({ repoRoot: r, port: 0 }, { precog: (claim) => ({ verdict: "HEDGED", claim }) });
+        const port = handle.server.address().port;
+        const res = await fetch(`http://127.0.0.1:${port}/v1/precog`, {
+            method: "POST",
+            headers: { "Authorization": `Bearer ${handle.token}`, "Content-Type": "application/json" },
+            body: JSON.stringify({ claim: "test" }),
+        });
+        expect(res.status).toBe(200);
+        const body = await res.json();
+        expect(body.verdict).toBe("HEDGED");
+        await handle.stop();
+    });
+});
+//# sourceMappingURL=diaspora.test.js.map

package/dist/diaspora/diaspora.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"diaspora.test.js","sourceRoot":"","sources":["../../src/diaspora/diaspora.test.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACrE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,aAAa,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAClG,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAE9C,OAAO,EACL,sBAAsB,EAAE,0BAA0B,EAAE,kBAAkB,GACvE,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,cAAc,EAAkB,eAAe,EAAE,YAAY,GAC9D,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,WAAW,EAAE,aAAa,EAAE,YAAY,GACzC,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAE/E,SAAS,KAAK,KAAa,OAAO,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9E,SAAS,OAAO,CAAC,CAAS,IAAI,IAAI,CAAC;IAAC,MAAM,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAAC,CAAC;AAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAEpG,wEAAwE;AAExE,QAAQ,CAAC,4CAA4C,EAAE,GAAG,EAAE;IAC1D,IAAI,CAAS,CAAC;IACd,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACnC,SAAS,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IAE5B,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;QACxC,MAAM,GAAG,GAAG,sBAAsB,CAAC,CAAC,CAAC,CAAC;QACtC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACnC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrD,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,EAAE,YAAY,CAAC,EAAE,MAAM,CAAC,CAAC;QAC5D,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QACvC,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QACvC,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sBAAsB,EAAE,GAAG,EAAE;QAC9B,sBAAsB,CAAC,CAAC,CAAC,CAAC;QAC1B,MAAM,MAAM,GAAG,sBAAsB,CAAC,CAAC,CAAC,CAAC;QACzC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,aAAa,CAAC,IAAI,CAAC,CAAC,EAAE,YAAY,CAAC,EAAE,uBAAuB,EAAE,MAAM,CAAC,CAAC;QACtE,sBAAsB,CAAC,CAAC,CAAC,CAAC;QAC1B,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,EAAE,YAAY,CAAC,EAAE,MAAM,CAAC,CAAC;QAC5D,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;QAC1C,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACnC,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC7D,aAAa,CAAC,IAAI,CAAC,CAAC,EAAE,YAAY,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC;QAC5D,sBAAsB,CAAC,CAAC,CAAC,CAAC;QAC1B,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,EAAE,YAAY,CAAC,EAAE,MAAM,CAAC,CAAC;QAC5D,mFAAmF;QACnF,MAAM,OAAO,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC,CAAC;QACxD,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;QAC/D,MAAM,EAAE,GAAG,0BAA0B,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;QACtD,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAClC,MAAM,EAAE,GAAG,0BAA0B,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;QACtD,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,sBAAsB,CAAC,CAAC,EAAE,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC;QACtD,MAAM,GAAG,GAAG,kBAAkB,CAAC,CAAC,CAAC,CAAC;QAClC,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QACnC,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,wEAAwE;AAExE,QAAQ,CAAC,sCAAsC,EAAE,GAAG,EAAE;IACpD,IAAI,CAAS,CAAC;IACd,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACnC,SAAS,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IAE5B,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,GAAG,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC;QAC9B,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,SAAS,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAChD,aAAa,CAAC,IAAI,CAAC,CAAC,EAAE,aAAa,CAAC,EAClC,qJAAqJ,EACrJ,MAAM,CAAC,CAAC;QACV,MAAM,GAAG,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC;QAC9B,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/B,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC9C,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;IACzE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,SAAS,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAChD,aAAa,CAAC,IAAI,CAAC,CAAC,EAAE,aAAa,CAAC,EAClC,wDAAwD,EAAE,MAAM,CAAC,CAAC;QACpE,cAAc,CAAC,CAAC,CAAC,CAAC;QAClB,MAAM,KAAK,GAAG,eAAe,CAAC,CAAC,CAAC,CAAC;QACjC,cAAc,CAAC,CAAC,CAAC,CAAC;QAClB,MAAM,MAAM,GAAG,eAAe,CAAC,CAAC,CAAC,CAAC;QAClC,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2BAA2B,EAAE,GAAG,EAAE;QACnC,SAAS,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAChD,aAAa,CAAC,IAAI,CAAC,CAAC,EAAE,aAAa,CAAC,EAAE,gCAAgC,EAAE,MAAM,CAAC,CAAC;QAChF,cAAc,CAAC,CAAC,CAAC,CAAC;QAClB,YAAY,CAAC,CAAC,CAAC,CAAC;QAChB,MAAM,GAAG,GAAG,eAAe,CAAC,CAAC,CAAC,CAAC;QAC/B,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,wEAAwE;AAExE,QAAQ,CAAC,iEAAiE,EAAE,GAAG,EAAE;IAC/E,IAAI,CAAS,CAAC;IACd,UAAU,CAAC,GAAG,EAAE;QACd,CAAC,GAAG,KAAK,EAAE,CAAC;QACZ,QAAQ,CAAC,0BAA0B,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QAClE,QAAQ,CAAC,+BAA+B,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QACvE,QAAQ,CAAC,0BAA0B,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QAClE,QAAQ,CAAC,iCAAiC,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QACzE,aAAa,CAAC,IAAI,CAAC,CAAC,EAAE,WAAW,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;QACjD,QAAQ,CAAC,YAAY,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QACpD,QAAQ,CAAC,0CAA0C,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IACpF,CAAC,CAAC,CAAC;IACH,SAAS,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IAE5B,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,iBAAiB;QACjB,MAAM,GAAG,GAAG,WAAW,CAAC,CAAC,EAAE;YACzB,MAAM,EAAE,iBAAiB;YACzB,cAAc,EAAE,6EAA6E;YAC7F,WAAW,EAAE;gBACX,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAmB,EAAE;gBACzE,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,oDAAoD,EAAE;aAChH;YACD,SAAS,EAAE,CAAC,kBAAkB,CAAC;SAChC,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QAEzC,sDAAsD;QACtD,MAAM,GAAG,GAAG,aAAa,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,eAAe,EAAE,CAAC,CAAC;QACpE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACpC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACvC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACtC,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAC5D,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAExD,wCAAwC;QACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,CAAC,EAAE,oCAAoC,CAAC,CAAC;QAC/D,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAiD,CAAC;QACxG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,qBAAqB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,GAAG,GAAG,WAAW,CAAC,CAAC,EAAE;YACzB,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE,GAAG,EAAE,WAAW,EAAE,EAAE;SACnD,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,EAAE,iBAAiB,EAAE,GAAG,GAAG,CAAC,EAAE,UAAU,CAAC,CAAC;QAC7D,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAe,CAAC;QACtE,QAAQ,CAAC,cAAc,GAAG,oBAAoB,CAAC;QAC/C,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAC;QACtD,MAAM,GAAG,GAAG,aAAa,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACzD,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,GAAG,GAAG,aAAa,CAAC,CAAC,EAAE,iBAAiB,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACpE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,MAAM,GAAG,GAAG,WAAW,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE,GAAG,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;QACnF,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,EAAE,iBAAiB,EAAE,GAAG,GAAG,CAAC,EAAE,UAAU,CAAC,CAAC;QAC7D,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAe,CAAC;QAClE,IAAI,CAAC,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,KAAK,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,gBAAgB;QAC3F,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;QAClD,qEAAqE;QACrE,MAAM,GAAG,GAAG,aAAa,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;QAC1E,MAAM,CAAC,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,WAAW,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,cAAc,EAAE,OAAO,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;QAC1E,WAAW,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,cAAc,EAAE,QAAQ,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;QAC3E,MAAM,IAAI,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC5B,MAAM,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,SAAS,IAAI,IAAI,CAAC,CAAC,CAAE,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,yEAAyE;AAEzE,QAAQ,CAAC,2CAA2C,EAAE,GAAG,EAAE;IACzD,IAAI,CAAS,CAAC;IACd,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACnC,SAAS,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IAE5B,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,MAAM,IAAI,GAAG,WAAW,CAAC,wBAAwB,CAAC,CAAC;QACnD,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACtC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAA4B,CAAC;QACvD,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;QAC1C,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;QAC5C,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,MAAM,GAAG,GAAG,iBAAiB,CAAC,wBAAwB,EAAE,YAAY,CAAC,CAAC;QACtE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;QAC5D,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,MAAM,MAAM,GAAG,MAAM,WAAW,CAC9B,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,EACtC;YACE,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;YACjD,QAAQ,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;YACtD,SAAS,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;SACtD,CACF,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3C,aAAa;QACb,MAAM,IAAI,GAAI,MAAM,CAAC,MAAM,CAAC,OAAO,EAAuB,CAAC,IAAI,CAAC;QAChE,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,oBAAoB,IAAI,YAAY,CAAC,CAAC;QAC9D,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAqB,CAAC;QACjD,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3B,cAAc;QACd,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,oBAAoB,IAAI,kBAAkB,CAAC,CAAC;QACnE,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC5B,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;IACtB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;QACjD,MAAM,MAAM,GAAG,MAAM,WAAW,CAC9B,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,EACxB,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CACjC,CAAC;QACF,MAAM,IAAI,GAAI,MAAM,CAAC,MAAM,CAAC,OAAO,EAAuB,CAAC,IAAI,CAAC;QAChE,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,oBAAoB,IAAI,YAAY,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QACxH,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;IACtB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gCAAgC,EAAE,KAAK,IAAI,EAAE;QAC9C,MAAM,MAAM,GAAG,MAAM,WAAW,CAC9B,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,EACxB,EAAE,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,EAAE,CACtD,CAAC;QACF,MAAM,IAAI,GAAI,MAAM,CAAC,MAAM,CAAC,OAAO,EAAuB,CAAC,IAAI,CAAC;QAChE,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,oBAAoB,IAAI,YAAY,EAAE;YAC5D,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,eAAe,EAAE,UAAU,MAAM,CAAC,KAAK,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC1F,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;SACxC,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAyB,CAAC;QACrD,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACpC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;IACtB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/diaspora/gitignore_writer.d.ts

@@ -0,0 +1,43 @@
+/**
+ * v1.72.0 -- DIASPORA D1: GHOST SNIPER GITIGNORE CONTRACT.
+ *
+ * Root-cause fix: every time Mneme injects an AI-tooling file
+ * (CLAUDE.md / AGENTS.md / GEMINI.md / .cursor / .windsurf / etc),
+ * the corresponding `.gitignore` entry MUST be appended atomically.
+ *
+ * Mneme memory + design intent: AI tool fingerprints stay private.
+ * The prior version only handled some of the entries -- AGENTS.md
+ * and GEMINI.md leaked. This module fixes that ONCE for all current
+ * + future injection targets.
+ *
+ * Behaviour:
+ *   - Idempotent: if entry already present (exact or fnmatch'd),
+ *     skip silently.
+ *   - Sentinel-bracketed: entries grouped under
+ *     `# >>> mneme auto-managed (do not edit) <<<`
+ *     so future updates can edit-in-place.
+ *   - Atomic: writes once, never partial.
+ */
+/** Canonical list of every AI-tooling artifact Mneme might write.
+ *  Extending this list is the SINGLE place to update when a new
+ *  vendor is added; everything else flows from here. */
+export declare const PRIVATE_AI_ARTIFACTS: string[];
+export interface EnsureResult {
+    /** Path written. */
+    path: string;
+    /** Action taken. */
+    action: "created" | "replaced" | "unchanged" | "added" | "failed";
+    /** Entries that ended up in the block. */
+    entries: string[];
+    /** Plain-English. */
+    detail: string;
+}
+/** Ensure all `entries` are present in repoRoot/.gitignore under the
+ *  Mneme-managed sentinel block. Idempotent + atomic. */
+export declare function ensureGitignoreEntries(repoRoot: string, entries?: string[]): EnsureResult;
+/** Convenience: ensure a SINGLE entry. Use when a parasite-bridge
+ *  inject just wrote one file. */
+export declare function ensureSingleGitignoreEntry(repoRoot: string, entry: string): EnsureResult;
+/** Read current managed entries (for inspection). */
+export declare function readManagedEntries(repoRoot: string): string[];
+//# sourceMappingURL=gitignore_writer.d.ts.map

package/dist/diaspora/gitignore_writer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gitignore_writer.d.ts","sourceRoot":"","sources":["../../src/diaspora/gitignore_writer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAQH;;wDAEwD;AACxD,eAAO,MAAM,oBAAoB,UAehC,CAAC;AAEF,MAAM,WAAW,YAAY;IAC3B,oBAAoB;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,oBAAoB;IACpB,MAAM,EAAE,SAAS,GAAG,UAAU,GAAG,WAAW,GAAG,OAAO,GAAG,QAAQ,CAAC;IAClE,0CAA0C;IAC1C,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,qBAAqB;IACrB,MAAM,EAAE,MAAM,CAAC;CAChB;AAiCD;yDACyD;AACzD,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,GAAE,MAAM,EAAyB,GAAG,YAAY,CA0D/G;AAED;kCACkC;AAClC,wBAAgB,0BAA0B,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,YAAY,CAExF;AAED,qDAAqD;AACrD,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,EAAE,CAO7D"}

package/dist/diaspora/gitignore_writer.js

@@ -0,0 +1,161 @@
+/**
+ * v1.72.0 -- DIASPORA D1: GHOST SNIPER GITIGNORE CONTRACT.
+ *
+ * Root-cause fix: every time Mneme injects an AI-tooling file
+ * (CLAUDE.md / AGENTS.md / GEMINI.md / .cursor / .windsurf / etc),
+ * the corresponding `.gitignore` entry MUST be appended atomically.
+ *
+ * Mneme memory + design intent: AI tool fingerprints stay private.
+ * The prior version only handled some of the entries -- AGENTS.md
+ * and GEMINI.md leaked. This module fixes that ONCE for all current
+ * + future injection targets.
+ *
+ * Behaviour:
+ *   - Idempotent: if entry already present (exact or fnmatch'd),
+ *     skip silently.
+ *   - Sentinel-bracketed: entries grouped under
+ *     `# >>> mneme auto-managed (do not edit) <<<`
+ *     so future updates can edit-in-place.
+ *   - Atomic: writes once, never partial.
+ */
+import { existsSync, readFileSync, writeFileSync } from "node:fs";
+import { join } from "node:path";
+const SENTINEL_BEGIN = "# >>> mneme auto-managed (do not edit between sentinels) <<<";
+const SENTINEL_END = "# <<< mneme auto-managed >>>";
+/** Canonical list of every AI-tooling artifact Mneme might write.
+ *  Extending this list is the SINGLE place to update when a new
+ *  vendor is added; everything else flows from here. */
+export const PRIVATE_AI_ARTIFACTS = [
+    "CLAUDE.md",
+    "AGENTS.md",
+    "GEMINI.md",
+    ".cursor/",
+    ".cursorrules",
+    ".cursorignore",
+    ".aider*",
+    ".continue/",
+    ".windsurfrules",
+    ".codeium/",
+    ".claude/",
+    ".claude.json",
+    ".claudeignore",
+    ".github/copilot-instructions.md",
+];
+function readExistingEntries(content) {
+    const beginIdx = content.indexOf(SENTINEL_BEGIN);
+    const endIdx = content.indexOf(SENTINEL_END);
+    if (beginIdx === -1 || endIdx === -1 || endIdx < beginIdx) {
+        return { before: content, managed: new Set(), after: "" };
+    }
+    const managedBlock = content.slice(beginIdx + SENTINEL_BEGIN.length, endIdx);
+    const managed = new Set();
+    for (const line of managedBlock.split("\n")) {
+        const trimmed = line.trim();
+        if (trimmed && !trimmed.startsWith("#"))
+            managed.add(trimmed);
+    }
+    return {
+        before: content.slice(0, beginIdx).trimEnd(),
+        managed,
+        after: content.slice(endIdx + SENTINEL_END.length).trimStart(),
+    };
+}
+function lineAlreadyIgnored(allLines, entry) {
+    for (const raw of allLines) {
+        const l = raw.trim();
+        if (!l || l.startsWith("#"))
+            continue;
+        if (l === entry)
+            return true;
+        // Pattern equivalence: CLAUDE.md ≡ CLAUDE.md; .cursor/ ≡ .cursor; .aider* ≡ .aider*
+        if (entry.endsWith("/") && (l === entry.slice(0, -1) || l === entry))
+            return true;
+        if (entry.endsWith("*") && l.startsWith(entry.slice(0, -1)))
+            return true;
+    }
+    return false;
+}
+/** Ensure all `entries` are present in repoRoot/.gitignore under the
+ *  Mneme-managed sentinel block. Idempotent + atomic. */
+export function ensureGitignoreEntries(repoRoot, entries = PRIVATE_AI_ARTIFACTS) {
+    const path = join(repoRoot, ".gitignore");
+    let original = "";
+    let createdNew = false;
+    if (!existsSync(path)) {
+        createdNew = true;
+    }
+    else {
+        try {
+            original = readFileSync(path, "utf8");
+        }
+        catch {
+            return { path, action: "failed", entries: [], detail: "read failed" };
+        }
+    }
+    // Pre-existing manual entries (outside the sentinel block) -- preserved
+    // verbatim. If the user already added "CLAUDE.md" manually, we DON'T
+    // duplicate it in our managed block.
+    const allLines = original.split("\n");
+    const { before, managed, after } = readExistingEntries(original);
+    const toAddToManaged = [];
+    for (const e of entries) {
+        if (managed.has(e))
+            continue;
+        if (lineAlreadyIgnored(allLines, e))
+            continue;
+        toAddToManaged.push(e);
+    }
+    // If nothing new + sentinel block already exists with all entries -> unchanged.
+    if (toAddToManaged.length === 0 && !createdNew && original.includes(SENTINEL_BEGIN)) {
+        return {
+            path,
+            action: "unchanged",
+            entries: [...managed],
+            detail: `All ${entries.length} entr(ies) already ignored.`,
+        };
+    }
+    // Build new content.
+    const allManaged = [...managed, ...toAddToManaged];
+    const block = [
+        "",
+        SENTINEL_BEGIN,
+        "# AI tooling artifacts -- never commit. Mneme manages this block.",
+        ...allManaged,
+        SENTINEL_END,
+        "",
+    ].join("\n");
+    const next = createdNew
+        ? block.trimStart()
+        : (before ? before + "\n" : "") + block + (after ? after + "\n" : "");
+    try {
+        writeFileSync(path, next, "utf8");
+        return {
+            path,
+            action: createdNew ? "created" : (original.includes(SENTINEL_BEGIN) ? "replaced" : "added"),
+            entries: allManaged,
+            detail: `${createdNew ? "Created" : "Updated"} .gitignore; ${toAddToManaged.length} new entr(ies): ${toAddToManaged.join(", ") || "none"}.`,
+        };
+    }
+    catch (e) {
+        return { path, action: "failed", entries: [], detail: `write failed: ${e.message}` };
+    }
+}
+/** Convenience: ensure a SINGLE entry. Use when a parasite-bridge
+ *  inject just wrote one file. */
+export function ensureSingleGitignoreEntry(repoRoot, entry) {
+    return ensureGitignoreEntries(repoRoot, [entry]);
+}
+/** Read current managed entries (for inspection). */
+export function readManagedEntries(repoRoot) {
+    const path = join(repoRoot, ".gitignore");
+    if (!existsSync(path))
+        return [];
+    try {
+        const content = readFileSync(path, "utf8");
+        return [...readExistingEntries(content).managed];
+    }
+    catch {
+        return [];
+    }
+}
+//# sourceMappingURL=gitignore_writer.js.map

package/dist/diaspora/gitignore_writer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gitignore_writer.js","sourceRoot":"","sources":["../../src/diaspora/gitignore_writer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAClE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,MAAM,cAAc,GAAG,8DAA8D,CAAC;AACtF,MAAM,YAAY,GAAG,8BAA8B,CAAC;AAEpD;;wDAEwD;AACxD,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,WAAW;IACX,WAAW;IACX,WAAW;IACX,UAAU;IACV,cAAc;IACd,eAAe;IACf,SAAS;IACT,YAAY;IACZ,gBAAgB;IAChB,WAAW;IACX,UAAU;IACV,cAAc;IACd,eAAe;IACf,iCAAiC;CAClC,CAAC;AAaF,SAAS,mBAAmB,CAAC,OAAe;IAC1C,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IACjD,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IAC7C,IAAI,QAAQ,KAAK,CAAC,CAAC,IAAI,MAAM,KAAK,CAAC,CAAC,IAAI,MAAM,GAAG,QAAQ,EAAE,CAAC;QAC1D,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IAC5D,CAAC;IACD,MAAM,YAAY,GAAG,OAAO,CAAC,KAAK,CAAC,QAAQ,GAAG,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7E,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,KAAK,MAAM,IAAI,IAAI,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAChE,CAAC;IACD,OAAO;QACL,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,OAAO,EAAE;QAC5C,OAAO;QACP,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE;KAC/D,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,QAAkB,EAAE,KAAa;IAC3D,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QACrB,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QACtC,IAAI,CAAC,KAAK,KAAK;YAAE,OAAO,IAAI,CAAC;QAC7B,oFAAoF;QACpF,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,KAAK,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAClF,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;IAC3E,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;yDACyD;AACzD,MAAM,UAAU,sBAAsB,CAAC,QAAgB,EAAE,UAAoB,oBAAoB;IAC/F,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IAC1C,IAAI,QAAQ,GAAG,EAAE,CAAC;IAClB,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,UAAU,GAAG,IAAI,CAAC;IACpB,CAAC;SAAM,CAAC;QACN,IAAI,CAAC;YAAC,QAAQ,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;QAAC,CAAC;IACjI,CAAC;IAED,wEAAwE;IACxE,qEAAqE;IACrE,qCAAqC;IACrC,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IACjE,MAAM,cAAc,GAAa,EAAE,CAAC;IACpC,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,SAAS;QAC7B,IAAI,kBAAkB,CAAC,QAAQ,EAAE,CAAC,CAAC;YAAE,SAAS;QAC9C,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACzB,CAAC;IAED,gFAAgF;IAChF,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,UAAU,IAAI,QAAQ,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;QACpF,OAAO;YACL,IAAI;YACJ,MAAM,EAAE,WAAW;YACnB,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC;YACrB,MAAM,EAAE,OAAO,OAAO,CAAC,MAAM,6BAA6B;SAC3D,CAAC;IACJ,CAAC;IAED,qBAAqB;IACrB,MAAM,UAAU,GAAG,CAAC,GAAG,OAAO,EAAE,GAAG,cAAc,CAAC,CAAC;IACnD,MAAM,KAAK,GAAG;QACZ,EAAE;QACF,cAAc;QACd,mEAAmE;QACnE,GAAG,UAAU;QACb,YAAY;QACZ,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEb,MAAM,IAAI,GAAG,UAAU;QACrB,CAAC,CAAC,KAAK,CAAC,SAAS,EAAE;QACnB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,KAAK,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAExE,IAAI,CAAC;QACH,aAAa,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QAClC,OAAO;YACL,IAAI;YACJ,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC;YAC3F,OAAO,EAAE,UAAU;YACnB,MAAM,EAAE,GAAG,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,gBAAgB,cAAc,CAAC,MAAM,mBAAmB,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,GAAG;SAC5I,CAAC;IACJ,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,iBAAkB,CAAW,CAAC,OAAO,EAAE,EAAE,CAAC;IAClG,CAAC;AACH,CAAC;AAED;kCACkC;AAClC,MAAM,UAAU,0BAA0B,CAAC,QAAgB,EAAE,KAAa;IACxE,OAAO,sBAAsB,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;AACnD,CAAC;AAED,qDAAqD;AACrD,MAAM,UAAU,kBAAkB,CAAC,QAAgB;IACjD,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IAC1C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACjC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC3C,OAAO,CAAC,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,EAAE,CAAC;IAAC,CAAC;AACxB,CAAC"}

package/dist/diaspora/http_bridge.d.ts

@@ -0,0 +1,54 @@
+/**
+ * v1.72.0 -- DIASPORA D4: HTTP BRIDGE + OPENAPI for ChatGPT.
+ *
+ * The headline new surface: `mneme serve --http` exposes a minimal
+ * HTTP API that ANY tool with HTTP-call capability (ChatGPT Custom
+ * GPT Actions, Zapier, n8n, etc) can hit. Includes:
+ *
+ *   POST /v1/precog        intercept claim (PRECOG firewall)
+ *   POST /v1/sentinel      intercept shell command (SENTINEL firewall)
+ *   POST /v1/apoptosis     detect hallucination (APOPTOSIS)
+ *   GET  /v1/openapi.json  OpenAPI 3.1 spec (for Custom GPT import)
+ *   GET  /v1/health        liveness probe
+ *
+ * SAFETY:
+ *   - Binds 127.0.0.1 by default (localhost only). User opts into
+ *     0.0.0.0 with explicit --host flag.
+ *   - Bearer token auth via .mneme/http-token (random per-repo).
+ *   - Per-IP rate limit (60 req/min).
+ *   - CORS allowed only for chat.openai.com + custom origin list.
+ *
+ * NO CLOUD REQUIRED: works on localhost via tunnel (Cloudflare /
+ * ngrok / fly.io) -- user chooses their tunnel provider. The bridge
+ * itself is local-first.
+ */
+import { type Server } from "node:http";
+export interface BridgeOptions {
+    repoRoot: string;
+    port?: number;
+    host?: string;
+    /** Additional CORS origins (e.g. user's custom tunnel domain). */
+    extraCorsOrigins?: string[];
+    /** Skip auth (dev mode only; never expose externally). */
+    noAuth?: boolean;
+}
+export interface BridgeHandle {
+    server: Server;
+    port: number;
+    host: string;
+    token: string;
+    baseUrl: string;
+    stop: () => Promise<void>;
+}
+export declare function openapiSpec(baseUrl: string): Record<string, unknown>;
+export interface BridgeHandlers {
+    precog?: (claim: string) => Promise<unknown> | unknown;
+    sentinel?: (command: string, vendor?: string) => Promise<unknown> | unknown;
+    apoptosis?: (claim: string) => Promise<unknown> | unknown;
+}
+/** Start the HTTP bridge. Returns a handle the caller stops on shutdown. */
+export declare function startBridge(opts: BridgeOptions, handlers: BridgeHandlers): Promise<BridgeHandle>;
+/** Custom GPT template -- printed to user; they upload this JSON into the
+ *  Custom GPT "Actions" config. */
+export declare function customGptTemplate(baseUrl: string, token: string): string;
+//# sourceMappingURL=http_bridge.d.ts.map

package/dist/diaspora/http_bridge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http_bridge.d.ts","sourceRoot":"","sources":["../../src/diaspora/http_bridge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAA2D,KAAK,MAAM,EAAE,MAAM,WAAW,CAAC;AAoEjG,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,kEAAkE;IAClE,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,0DAA0D;IAC1D,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3B;AAED,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CA0DpE;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;IACvD,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;IAC5E,SAAS,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;CAC3D;AAED,4EAA4E;AAC5E,wBAAsB,WAAW,CAAC,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,cAAc,GAAG,OAAO,CAAC,YAAY,CAAC,CA2DtG;AAED;mCACmC;AACnC,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAQxE"}