@mneme-ai/core 1.71.0 → 1.72.0

package/dist/diaspora/http_bridge.js

@@ -0,0 +1,229 @@
+/**
+ * v1.72.0 -- DIASPORA D4: HTTP BRIDGE + OPENAPI for ChatGPT.
+ *
+ * The headline new surface: `mneme serve --http` exposes a minimal
+ * HTTP API that ANY tool with HTTP-call capability (ChatGPT Custom
+ * GPT Actions, Zapier, n8n, etc) can hit. Includes:
+ *
+ *   POST /v1/precog        intercept claim (PRECOG firewall)
+ *   POST /v1/sentinel      intercept shell command (SENTINEL firewall)
+ *   POST /v1/apoptosis     detect hallucination (APOPTOSIS)
+ *   GET  /v1/openapi.json  OpenAPI 3.1 spec (for Custom GPT import)
+ *   GET  /v1/health        liveness probe
+ *
+ * SAFETY:
+ *   - Binds 127.0.0.1 by default (localhost only). User opts into
+ *     0.0.0.0 with explicit --host flag.
+ *   - Bearer token auth via .mneme/http-token (random per-repo).
+ *   - Per-IP rate limit (60 req/min).
+ *   - CORS allowed only for chat.openai.com + custom origin list.
+ *
+ * NO CLOUD REQUIRED: works on localhost via tunnel (Cloudflare /
+ * ngrok / fly.io) -- user chooses their tunnel provider. The bridge
+ * itself is local-first.
+ */
+import { createServer } from "node:http";
+import { existsSync, readFileSync, writeFileSync, mkdirSync } from "node:fs";
+import { join } from "node:path";
+import { randomBytes, timingSafeEqual } from "node:crypto";
+const TOKEN_FILE = ".mneme/http-token";
+const ALLOWED_ORIGINS = ["https://chat.openai.com", "https://chatgpt.com"];
+function ensureToken(repoRoot) {
+    const p = join(repoRoot, TOKEN_FILE);
+    if (existsSync(p))
+        return readFileSync(p, "utf8").trim();
+    const dir = join(repoRoot, ".mneme");
+    if (!existsSync(dir))
+        mkdirSync(dir, { recursive: true });
+    const t = "mneme_" + randomBytes(24).toString("base64url");
+    writeFileSync(p, t, "utf8");
+    return t;
+}
+const rateLimiter = new Map();
+function checkRateLimit(ip, perMinute = 60) {
+    const now = Date.now();
+    const window = 60_000;
+    const e = rateLimiter.get(ip);
+    if (!e || now - e.windowStart > window) {
+        rateLimiter.set(ip, { count: 1, windowStart: now });
+        return true;
+    }
+    if (e.count >= perMinute)
+        return false;
+    e.count += 1;
+    return true;
+}
+function isAuthorized(req, token) {
+    const auth = req.headers["authorization"] ?? "";
+    const m = /^Bearer\s+(.+)$/i.exec(auth);
+    if (!m)
+        return false;
+    const provided = m[1];
+    if (provided.length !== token.length)
+        return false;
+    try {
+        return timingSafeEqual(Buffer.from(provided), Buffer.from(token));
+    }
+    catch {
+        return false;
+    }
+}
+async function readJsonBody(req) {
+    return new Promise((resolve, reject) => {
+        let data = "";
+        req.on("data", (chunk) => { data += chunk; if (data.length > 65536) {
+            req.destroy();
+            reject(new Error("payload too large"));
+        } });
+        req.on("end", () => { try {
+            resolve(data ? JSON.parse(data) : {});
+        }
+        catch (e) {
+            reject(e);
+        } });
+        req.on("error", reject);
+    });
+}
+function setCors(req, res, customOrigins = []) {
+    const origin = req.headers.origin ?? "";
+    const allow = [...ALLOWED_ORIGINS, ...customOrigins].includes(origin);
+    if (allow)
+        res.setHeader("Access-Control-Allow-Origin", origin);
+    res.setHeader("Access-Control-Allow-Methods", "GET, POST, OPTIONS");
+    res.setHeader("Access-Control-Allow-Headers", "Content-Type, Authorization");
+}
+function json(res, status, body) {
+    res.statusCode = status;
+    res.setHeader("Content-Type", "application/json");
+    res.end(JSON.stringify(body));
+}
+export function openapiSpec(baseUrl) {
+    return {
+        openapi: "3.1.0",
+        info: {
+            title: "Mneme MCP Bridge",
+            version: "1.72.0",
+            description: "Local Mneme PRECOG / SENTINEL / APOPTOSIS surfaces over HTTP. AI tools (Custom GPT, Zapier, n8n) call these to verify claims + commands before delivery.",
+        },
+        servers: [{ url: baseUrl }],
+        components: {
+            securitySchemes: {
+                BearerAuth: { type: "http", scheme: "bearer" },
+            },
+        },
+        security: [{ BearerAuth: [] }],
+        paths: {
+            "/v1/health": {
+                get: {
+                    operationId: "health",
+                    summary: "Liveness probe",
+                    responses: { "200": { description: "OK" } },
+                },
+            },
+            "/v1/precog": {
+                post: {
+                    operationId: "precogIntercept",
+                    summary: "Run PRECOG firewall on an AI claim. Returns CERTIFIED / HEDGED / REJECTED + the verified (hedged) string.",
+                    requestBody: {
+                        required: true,
+                        content: { "application/json": { schema: { type: "object", required: ["claim"], properties: { claim: { type: "string" } } } } },
+                    },
+                    responses: { "200": { description: "Firewall verdict + hedged claim", content: { "application/json": { schema: { type: "object" } } } } },
+                },
+            },
+            "/v1/sentinel": {
+                post: {
+                    operationId: "sentinelIntercept",
+                    summary: "Run SENTINEL firewall on a proposed shell command. Returns ALLOW / AUDIT / WARN / BLOCK + reasoning.",
+                    requestBody: {
+                        required: true,
+                        content: { "application/json": { schema: { type: "object", required: ["command"], properties: { command: { type: "string" }, vendor: { type: "string" } } } } },
+                    },
+                    responses: { "200": { description: "Sentinel decision + audit", content: { "application/json": { schema: { type: "object" } } } } },
+                },
+            },
+            "/v1/apoptosis": {
+                post: {
+                    operationId: "apoptosisDetect",
+                    summary: "Run APOPTOSIS 7-layer hallucination detector. Returns HEALTHY / INFLAMED / NECROTIC / APOPTOTIC verdict + per-layer report.",
+                    requestBody: {
+                        required: true,
+                        content: { "application/json": { schema: { type: "object", required: ["claim"], properties: { claim: { type: "string" } } } } },
+                    },
+                    responses: { "200": { description: "Apoptosis verdict + briefing", content: { "application/json": { schema: { type: "object" } } } } },
+                },
+            },
+        },
+    };
+}
+/** Start the HTTP bridge. Returns a handle the caller stops on shutdown. */
+export async function startBridge(opts, handlers) {
+    const port = opts.port ?? 11434;
+    const host = opts.host ?? "127.0.0.1";
+    const token = opts.noAuth ? "" : ensureToken(opts.repoRoot);
+    const baseUrl = `http://${host}:${port}`;
+    const server = createServer(async (req, res) => {
+        const ip = req.socket.remoteAddress ?? "unknown";
+        if (!checkRateLimit(ip))
+            return json(res, 429, { error: "rate-limited" });
+        setCors(req, res, opts.extraCorsOrigins);
+        if (req.method === "OPTIONS") {
+            res.statusCode = 204;
+            return res.end();
+        }
+        if (req.url === "/v1/health" && req.method === "GET") {
+            return json(res, 200, { ok: true, version: "1.72.0", protocols: ["precog", "sentinel", "apoptosis"] });
+        }
+        if (req.url === "/v1/openapi.json" && req.method === "GET") {
+            return json(res, 200, openapiSpec(baseUrl));
+        }
+        // Auth required for non-health, non-openapi endpoints.
+        if (!opts.noAuth && !isAuthorized(req, token)) {
+            return json(res, 401, { error: "unauthorized -- set Authorization: Bearer <token>" });
+        }
+        try {
+            if (req.url === "/v1/precog" && req.method === "POST" && handlers.precog) {
+                const body = await readJsonBody(req);
+                if (typeof body.claim !== "string")
+                    return json(res, 400, { error: "claim field required" });
+                const r = await handlers.precog(body.claim);
+                return json(res, 200, r);
+            }
+            if (req.url === "/v1/sentinel" && req.method === "POST" && handlers.sentinel) {
+                const body = await readJsonBody(req);
+                if (typeof body.command !== "string")
+                    return json(res, 400, { error: "command field required" });
+                const r = await handlers.sentinel(body.command, body.vendor);
+                return json(res, 200, r);
+            }
+            if (req.url === "/v1/apoptosis" && req.method === "POST" && handlers.apoptosis) {
+                const body = await readJsonBody(req);
+                if (typeof body.claim !== "string")
+                    return json(res, 400, { error: "claim field required" });
+                const r = await handlers.apoptosis(body.claim);
+                return json(res, 200, r);
+            }
+        }
+        catch (e) {
+            return json(res, 500, { error: e.message });
+        }
+        return json(res, 404, { error: "not found" });
+    });
+    await new Promise((resolve) => server.listen(port, host, resolve));
+    const stop = async () => {
+        await new Promise((resolve) => server.close(() => resolve()));
+    };
+    return { server, port, host, token, baseUrl, stop };
+}
+/** Custom GPT template -- printed to user; they upload this JSON into the
+ *  Custom GPT "Actions" config. */
+export function customGptTemplate(baseUrl, token) {
+    return JSON.stringify({
+        name: "Mneme Bridge",
+        description: "Run claims through Mneme's PRECOG / SENTINEL / APOPTOSIS firewalls before delivering to the user.",
+        instructions: "Before answering any factual question about code, repos, or commands, POST the AI's draft answer to /v1/precog. If verdict is CERTIFIED, deliver. If HEDGED, deliver the hedged version. If REJECTED, refuse + explain. Before suggesting any shell command, POST it to /v1/sentinel; only execute on ALLOW or AUDIT.",
+        authentication: { type: "bearer", token },
+        actionEndpoint: `${baseUrl}/v1/openapi.json`,
+    }, null, 2);
+}
+//# sourceMappingURL=http_bridge.js.map

package/dist/diaspora/http_bridge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http_bridge.js","sourceRoot":"","sources":["../../src/diaspora/http_bridge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,YAAY,EAA0D,MAAM,WAAW,CAAC;AACjG,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE3D,MAAM,UAAU,GAAG,mBAAmB,CAAC;AACvC,MAAM,eAAe,GAAG,CAAC,yBAAyB,EAAE,qBAAqB,CAAC,CAAC;AAE3E,SAAS,WAAW,CAAC,QAAgB;IACnC,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IACrC,IAAI,UAAU,CAAC,CAAC,CAAC;QAAE,OAAO,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IACzD,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACrC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,MAAM,CAAC,GAAG,QAAQ,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC3D,aAAa,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;IAC5B,OAAO,CAAC,CAAC;AACX,CAAC;AAGD,MAAM,WAAW,GAAG,IAAI,GAAG,EAA0B,CAAC;AAEtD,SAAS,cAAc,CAAC,EAAU,EAAE,SAAS,GAAG,EAAE;IAChD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,MAAM,GAAG,MAAM,CAAC;IACtB,MAAM,CAAC,GAAG,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC9B,IAAI,CAAC,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,WAAW,GAAG,MAAM,EAAE,CAAC;QACvC,WAAW,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC;QACpD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,CAAC,KAAK,IAAI,SAAS;QAAE,OAAO,KAAK,CAAC;IACvC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;IACb,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,YAAY,CAAC,GAAoB,EAAE,KAAa;IACvD,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC;IAChD,MAAM,CAAC,GAAG,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxC,IAAI,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACrB,MAAM,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;IACvB,IAAI,QAAQ,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACnD,IAAI,CAAC;QACH,OAAO,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IACpE,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,KAAK,CAAC;IAAC,CAAC;AAC3B,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,GAAoB;IAC9C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,GAAG,IAAI,IAAI,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,KAAK,EAAE,CAAC;YAAC,GAAG,CAAC,OAAO,EAAE,CAAC;YAAC,MAAM,CAAC,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC;QAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAClI,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;YAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAAC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACjG,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,OAAO,CAAC,GAAoB,EAAE,GAAmB,EAAE,gBAA0B,EAAE;IACtF,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC;IACxC,MAAM,KAAK,GAAG,CAAC,GAAG,eAAe,EAAE,GAAG,aAAa,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACtE,IAAI,KAAK;QAAE,GAAG,CAAC,SAAS,CAAC,6BAA6B,EAAE,MAAM,CAAC,CAAC;IAChE,GAAG,CAAC,SAAS,CAAC,8BAA8B,EAAE,oBAAoB,CAAC,CAAC;IACpE,GAAG,CAAC,SAAS,CAAC,8BAA8B,EAAE,6BAA6B,CAAC,CAAC;AAC/E,CAAC;AAED,SAAS,IAAI,CAAC,GAAmB,EAAE,MAAc,EAAE,IAAa;IAC9D,GAAG,CAAC,UAAU,GAAG,MAAM,CAAC;IACxB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;IAClD,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;AAChC,CAAC;AAqBD,MAAM,UAAU,WAAW,CAAC,OAAe;IACzC,OAAO;QACL,OAAO,EAAE,OAAO;QAChB,IAAI,EAAE;YACJ,KAAK,EAAE,kBAAkB;YACzB,OAAO,EAAE,QAAQ;YACjB,WAAW,EAAE,0JAA0J;SACxK;QACD,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;QAC3B,UAAU,EAAE;YACV,eAAe,EAAE;gBACf,UAAU,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE;aAC/C;SACF;QACD,QAAQ,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;QAC9B,KAAK,EAAE;YACL,YAAY,EAAE;gBACZ,GAAG,EAAE;oBACH,WAAW,EAAE,QAAQ;oBACrB,OAAO,EAAE,gBAAgB;oBACzB,SAAS,EAAE,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE;iBAC5C;aACF;YACD,YAAY,EAAE;gBACZ,IAAI,EAAE;oBACJ,WAAW,EAAE,iBAAiB;oBAC9B,OAAO,EAAE,2GAA2G;oBACpH,WAAW,EAAE;wBACX,QAAQ,EAAE,IAAI;wBACd,OAAO,EAAE,EAAE,kBAAkB,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,EAAE;qBAChI;oBACD,SAAS,EAAE,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,iCAAiC,EAAE,OAAO,EAAE,EAAE,kBAAkB,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,EAAE;iBAC1I;aACF;YACD,cAAc,EAAE;gBACd,IAAI,EAAE;oBACJ,WAAW,EAAE,mBAAmB;oBAChC,OAAO,EAAE,sGAAsG;oBAC/G,WAAW,EAAE;wBACX,QAAQ,EAAE,IAAI;wBACd,OAAO,EAAE,EAAE,kBAAkB,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,EAAE;qBAChK;oBACD,SAAS,EAAE,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,2BAA2B,EAAE,OAAO,EAAE,EAAE,kBAAkB,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,EAAE;iBACpI;aACF;YACD,eAAe,EAAE;gBACf,IAAI,EAAE;oBACJ,WAAW,EAAE,iBAAiB;oBAC9B,OAAO,EAAE,6HAA6H;oBACtI,WAAW,EAAE;wBACX,QAAQ,EAAE,IAAI;wBACd,OAAO,EAAE,EAAE,kBAAkB,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,EAAE;qBAChI;oBACD,SAAS,EAAE,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,8BAA8B,EAAE,OAAO,EAAE,EAAE,kBAAkB,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,EAAE;iBACvI;aACF;SACF;KACF,CAAC;AACJ,CAAC;AAQD,4EAA4E;AAC5E,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAmB,EAAE,QAAwB;IAC7E,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC;IAChC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,WAAW,CAAC;IACtC,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC5D,MAAM,OAAO,GAAG,UAAU,IAAI,IAAI,IAAI,EAAE,CAAC;IAEzC,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC7C,MAAM,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,aAAa,IAAI,SAAS,CAAC;QACjD,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC;YAAE,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;QAE1E,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;QACzC,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAAC,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;YAAC,OAAO,GAAG,CAAC,GAAG,EAAE,CAAC;QAAC,CAAC;QAEzE,IAAI,GAAG,CAAC,GAAG,KAAK,YAAY,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YACrD,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,QAAQ,EAAE,UAAU,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC;QACzG,CAAC;QAED,IAAI,GAAG,CAAC,GAAG,KAAK,kBAAkB,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YAC3D,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;QAC9C,CAAC;QAED,uDAAuD;QACvD,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,CAAC;YAC9C,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,mDAAmD,EAAE,CAAC,CAAC;QACxF,CAAC;QAED,IAAI,CAAC;YACH,IAAI,GAAG,CAAC,GAAG,KAAK,YAAY,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;gBACzE,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,GAAG,CAAuB,CAAC;gBAC3D,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ;oBAAE,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC,CAAC;gBAC7F,MAAM,CAAC,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAC5C,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;YAC3B,CAAC;YACD,IAAI,GAAG,CAAC,GAAG,KAAK,cAAc,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;gBAC7E,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,GAAG,CAA0C,CAAC;gBAC9E,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ;oBAAE,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC,CAAC;gBACjG,MAAM,CAAC,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;gBAC7D,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;YAC3B,CAAC;YACD,IAAI,GAAG,CAAC,GAAG,KAAK,eAAe,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;gBAC/E,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,GAAG,CAAuB,CAAC;gBAC3D,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ;oBAAE,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC,CAAC;gBAC7F,MAAM,CAAC,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAC/C,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;YAC3B,CAAC;QACH,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAG,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;QACzD,CAAC;QAED,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;IAEzE,MAAM,IAAI,GAAG,KAAK,IAAI,EAAE;QACtB,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IACtE,CAAC,CAAC;IAEF,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AACtD,CAAC;AAED;mCACmC;AACnC,MAAM,UAAU,iBAAiB,CAAC,OAAe,EAAE,KAAa;IAC9D,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,mGAAmG;QAChH,YAAY,EAAE,uTAAuT;QACrU,cAAc,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;QACzC,cAAc,EAAE,GAAG,OAAO,kBAAkB;KAC7C,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AACd,CAAC"}

package/dist/diaspora/index.d.ts

@@ -0,0 +1,26 @@
+/**
+ * v1.72.0 -- DIASPORA PROTOCOL.
+ *
+ * Four wild axes that crack open the cross-machine + cross-vendor +
+ * cross-app barriers that kept Mneme local:
+ *
+ *   D1 GHOST SNIPER GITIGNORE  auto-append AI-tooling artifacts
+ *                              on every inject (privacy-leak-proof)
+ *   D2 SPORE DEFAULT-ON        git remote detected -> auto-enable
+ *                              cross-machine sync (no manual opt-in)
+ *   D3 PORTABLE SESSION CAPSULE  vendor A saves; vendor B resumes.
+ *                              HMAC-signed; soul-mirror records the
+ *                              inheritance event.
+ *   D4 HTTP BRIDGE             localhost HTTP API + OpenAPI 3.1
+ *                              spec + Custom GPT template. ChatGPT
+ *                              Custom GPT "Actions" can call this.
+ */
+export * as gitignoreWriter from "./gitignore_writer.js";
+export * as sporeAutostart from "./spore_autostart.js";
+export * as sessionCapsule from "./session_capsule.js";
+export * as httpBridge from "./http_bridge.js";
+export { ensureGitignoreEntries, ensureSingleGitignoreEntry, readManagedEntries, PRIVATE_AI_ARTIFACTS, } from "./gitignore_writer.js";
+export { autoStartSpore, readGitRemotes, readSporeConfig, disableSpore, type SporeConfig, type GitRemote, type AutoStartResult, } from "./spore_autostart.js";
+export { saveCapsule, resumeCapsule, listCapsules, type SessionCapsule, type ResumeVerdict, type ResumeResult, } from "./session_capsule.js";
+export { startBridge, openapiSpec, customGptTemplate, type BridgeOptions, type BridgeHandle, type BridgeHandlers, } from "./http_bridge.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/diaspora/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/diaspora/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,eAAe,MAAM,uBAAuB,CAAC;AACzD,OAAO,KAAK,cAAc,MAAM,sBAAsB,CAAC;AACvD,OAAO,KAAK,cAAc,MAAM,sBAAsB,CAAC;AACvD,OAAO,KAAK,UAAU,MAAM,kBAAkB,CAAC;AAE/C,OAAO,EACL,sBAAsB,EAAE,0BAA0B,EAAE,kBAAkB,EAAE,oBAAoB,GAC7F,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,cAAc,EAAE,cAAc,EAAE,eAAe,EAAE,YAAY,EAC7D,KAAK,WAAW,EAAE,KAAK,SAAS,EAAE,KAAK,eAAe,GACvD,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,WAAW,EAAE,aAAa,EAAE,YAAY,EACxC,KAAK,cAAc,EAAE,KAAK,aAAa,EAAE,KAAK,YAAY,GAC3D,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,WAAW,EAAE,WAAW,EAAE,iBAAiB,EAC3C,KAAK,aAAa,EAAE,KAAK,YAAY,EAAE,KAAK,cAAc,GAC3D,MAAM,kBAAkB,CAAC"}

package/dist/diaspora/index.js

@@ -0,0 +1,26 @@
+/**
+ * v1.72.0 -- DIASPORA PROTOCOL.
+ *
+ * Four wild axes that crack open the cross-machine + cross-vendor +
+ * cross-app barriers that kept Mneme local:
+ *
+ *   D1 GHOST SNIPER GITIGNORE  auto-append AI-tooling artifacts
+ *                              on every inject (privacy-leak-proof)
+ *   D2 SPORE DEFAULT-ON        git remote detected -> auto-enable
+ *                              cross-machine sync (no manual opt-in)
+ *   D3 PORTABLE SESSION CAPSULE  vendor A saves; vendor B resumes.
+ *                              HMAC-signed; soul-mirror records the
+ *                              inheritance event.
+ *   D4 HTTP BRIDGE             localhost HTTP API + OpenAPI 3.1
+ *                              spec + Custom GPT template. ChatGPT
+ *                              Custom GPT "Actions" can call this.
+ */
+export * as gitignoreWriter from "./gitignore_writer.js";
+export * as sporeAutostart from "./spore_autostart.js";
+export * as sessionCapsule from "./session_capsule.js";
+export * as httpBridge from "./http_bridge.js";
+export { ensureGitignoreEntries, ensureSingleGitignoreEntry, readManagedEntries, PRIVATE_AI_ARTIFACTS, } from "./gitignore_writer.js";
+export { autoStartSpore, readGitRemotes, readSporeConfig, disableSpore, } from "./spore_autostart.js";
+export { saveCapsule, resumeCapsule, listCapsules, } from "./session_capsule.js";
+export { startBridge, openapiSpec, customGptTemplate, } from "./http_bridge.js";
+//# sourceMappingURL=index.js.map

package/dist/diaspora/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/diaspora/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,eAAe,MAAM,uBAAuB,CAAC;AACzD,OAAO,KAAK,cAAc,MAAM,sBAAsB,CAAC;AACvD,OAAO,KAAK,cAAc,MAAM,sBAAsB,CAAC;AACvD,OAAO,KAAK,UAAU,MAAM,kBAAkB,CAAC;AAE/C,OAAO,EACL,sBAAsB,EAAE,0BAA0B,EAAE,kBAAkB,EAAE,oBAAoB,GAC7F,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,cAAc,EAAE,cAAc,EAAE,eAAe,EAAE,YAAY,GAE9D,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,WAAW,EAAE,aAAa,EAAE,YAAY,GAEzC,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,WAAW,EAAE,WAAW,EAAE,iBAAiB,GAE5C,MAAM,kBAAkB,CAAC"}

package/dist/diaspora/session_capsule.d.ts

@@ -0,0 +1,78 @@
+/**
+ * v1.72.0 -- DIASPORA D3: PORTABLE SESSION CAPSULE.
+ *
+ * Cross-vendor handover proof. Every vendor's working context (recent
+ * prompts, generated answers, ACGV verdicts, sentinel events) gets
+ * compressed into a portable .capsule file. On the OTHER vendor,
+ * `resume` opens the file and replays the context summary.
+ *
+ *   Vendor A (Claude Code) -- session.save -> .mneme/capsules/<id>.capsule
+ *   ---hand off the file---
+ *   Vendor B (Cursor)      -- session.resume <id> -> recovered context
+ *
+ * Capsule format (HMAC-signed JSON):
+ *   {
+ *     id, capsuleVersion, createdAt, originVendor,
+ *     repoFingerprint, contextSummary,
+ *     promptTrace[], reasoningTrace[],
+ *     hmac
+ *   }
+ *
+ * The wild bit: every replay tells Mneme that vendor B is INHERITING
+ * from vendor A. Soul-mirror records the handover; Aletheia trust
+ * compounds across vendors when handovers go well.
+ */
+export interface CapsulePromptStep {
+    ts: string;
+    role: "user" | "assistant" | "tool";
+    /** Truncated text. */
+    text: string;
+}
+export interface SessionCapsule {
+    id: string;
+    capsuleVersion: 1;
+    createdAt: string;
+    originVendor: string;
+    /** sha256 of repo root path + first 5 commit subjects. */
+    repoFingerprint: string;
+    /** 1-3 sentence plain-English summary of what was being worked on. */
+    contextSummary: string;
+    /** Recent prompt/response trace. */
+    promptTrace: CapsulePromptStep[];
+    /** Optional reasoning steps (innerlife reasoning genome). */
+    reasoningTrace?: string[];
+    /** Lessons / decisions the user explicitly captured. */
+    decisions?: string[];
+    /** HMAC over canonical payload. */
+    hmac: string;
+}
+export interface SaveOptions {
+    vendor: string;
+    contextSummary: string;
+    promptTrace: CapsulePromptStep[];
+    reasoningTrace?: string[];
+    decisions?: string[];
+}
+export declare function saveCapsule(repoRoot: string, opts: SaveOptions): SessionCapsule;
+export type ResumeVerdict = "RESUMED" | "INVALID_HMAC" | "REPO_MISMATCH" | "NOT_FOUND" | "EXPIRED";
+export interface ResumeResult {
+    verdict: ResumeVerdict;
+    capsule: SessionCapsule | null;
+    /** Plain-English recap for the resuming vendor to read aloud / inject as system prompt. */
+    recap: string;
+    /** Inheritance record (writes to soul mirror). */
+    inheritance: {
+        fromVendor: string;
+        toVendor: string;
+        ts: string;
+    } | null;
+}
+export interface ResumeOptions {
+    /** Vendor doing the resume. */
+    toVendor: string;
+    /** Reject capsule older than N hours. Default 720 (30 days). */
+    maxAgeHours?: number;
+}
+export declare function resumeCapsule(repoRoot: string, capsuleId: string, opts: ResumeOptions): ResumeResult;
+export declare function listCapsules(repoRoot: string): SessionCapsule[];
+//# sourceMappingURL=session_capsule.d.ts.map

package/dist/diaspora/session_capsule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session_capsule.d.ts","sourceRoot":"","sources":["../../src/diaspora/session_capsule.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AASH,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,GAAG,WAAW,GAAG,MAAM,CAAC;IACpC,sBAAsB;IACtB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,cAAc,EAAE,CAAC,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,0DAA0D;IAC1D,eAAe,EAAE,MAAM,CAAC;IACxB,sEAAsE;IACtE,cAAc,EAAE,MAAM,CAAC;IACvB,oCAAoC;IACpC,WAAW,EAAE,iBAAiB,EAAE,CAAC;IACjC,6DAA6D;IAC7D,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,wDAAwD;IACxD,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,mCAAmC;IACnC,IAAI,EAAE,MAAM,CAAC;CACd;AAoCD,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,iBAAiB,EAAE,CAAC;IACjC,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;CACtB;AAED,wBAAgB,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,GAAG,cAAc,CAsB/E;AAED,MAAM,MAAM,aAAa,GAAG,SAAS,GAAG,cAAc,GAAG,eAAe,GAAG,WAAW,GAAG,SAAS,CAAC;AAEnG,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,aAAa,CAAC;IACvB,OAAO,EAAE,cAAc,GAAG,IAAI,CAAC;IAC/B,2FAA2F;IAC3F,KAAK,EAAE,MAAM,CAAC;IACd,kDAAkD;IAClD,WAAW,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;CAC1E;AAED,MAAM,WAAW,aAAa;IAC5B,+BAA+B;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,gEAAgE;IAChE,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,GAAG,YAAY,CA8CpG;AA8BD,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,cAAc,EAAE,CAe/D"}

package/dist/diaspora/session_capsule.js

@@ -0,0 +1,193 @@
+/**
+ * v1.72.0 -- DIASPORA D3: PORTABLE SESSION CAPSULE.
+ *
+ * Cross-vendor handover proof. Every vendor's working context (recent
+ * prompts, generated answers, ACGV verdicts, sentinel events) gets
+ * compressed into a portable .capsule file. On the OTHER vendor,
+ * `resume` opens the file and replays the context summary.
+ *
+ *   Vendor A (Claude Code) -- session.save -> .mneme/capsules/<id>.capsule
+ *   ---hand off the file---
+ *   Vendor B (Cursor)      -- session.resume <id> -> recovered context
+ *
+ * Capsule format (HMAC-signed JSON):
+ *   {
+ *     id, capsuleVersion, createdAt, originVendor,
+ *     repoFingerprint, contextSummary,
+ *     promptTrace[], reasoningTrace[],
+ *     hmac
+ *   }
+ *
+ * The wild bit: every replay tells Mneme that vendor B is INHERITING
+ * from vendor A. Soul-mirror records the handover; Aletheia trust
+ * compounds across vendors when handovers go well.
+ */
+import { existsSync, readFileSync, writeFileSync, mkdirSync, readdirSync } from "node:fs";
+import { createHash, createHmac, randomBytes } from "node:crypto";
+import { join } from "node:path";
+const CAPSULE_DIR = ".mneme/capsules";
+const SECRET_FILE = ".mneme/capsules/secret";
+function ensureSecret(repoRoot) {
+    const p = join(repoRoot, SECRET_FILE);
+    if (existsSync(p))
+        return readFileSync(p, "utf8").trim();
+    const dir = join(repoRoot, CAPSULE_DIR);
+    if (!existsSync(dir))
+        mkdirSync(dir, { recursive: true });
+    const s = randomBytes(32).toString("hex");
+    try {
+        writeFileSync(p, s, "utf8");
+    }
+    catch { /* */ }
+    return s;
+}
+function canonical(payload) {
+    return JSON.stringify({
+        capsuleVersion: payload.capsuleVersion,
+        createdAt: payload.createdAt,
+        originVendor: payload.originVendor,
+        repoFingerprint: payload.repoFingerprint,
+        contextSummary: payload.contextSummary,
+        promptTrace: payload.promptTrace,
+        reasoningTrace: payload.reasoningTrace ?? null,
+        decisions: payload.decisions ?? null,
+    });
+}
+function computeRepoFingerprint(repoRoot) {
+    let extras = "";
+    try {
+        const { execSync } = require("node:child_process");
+        extras = execSync(`git -C "${repoRoot}" log --max-count=5 --pretty=format:%s`, {
+            encoding: "utf8", stdio: ["ignore", "pipe", "ignore"], timeout: 2000,
+        });
+    }
+    catch { /* */ }
+    return createHash("sha256").update(repoRoot + "|" + extras).digest("hex").slice(0, 16);
+}
+export function saveCapsule(repoRoot, opts) {
+    const secret = ensureSecret(repoRoot);
+    const createdAt = new Date().toISOString();
+    const repoFingerprint = computeRepoFingerprint(repoRoot);
+    const payload = {
+        capsuleVersion: 1,
+        createdAt,
+        originVendor: opts.vendor,
+        repoFingerprint,
+        contextSummary: opts.contextSummary.slice(0, 800),
+        promptTrace: opts.promptTrace.slice(-50), // last 50 steps
+        reasoningTrace: opts.reasoningTrace?.slice(-20),
+        decisions: opts.decisions?.slice(0, 20),
+    };
+    const canon = canonical(payload);
+    const hmac = createHmac("sha256", secret).update(canon).digest("hex");
+    const id = createHash("sha256").update(canon).digest("hex").slice(0, 16);
+    const cap = { ...payload, id, hmac };
+    const dir = join(repoRoot, CAPSULE_DIR);
+    if (!existsSync(dir))
+        mkdirSync(dir, { recursive: true });
+    writeFileSync(join(dir, `${id}.capsule`), JSON.stringify(cap, null, 2) + "\n", "utf8");
+    return cap;
+}
+export function resumeCapsule(repoRoot, capsuleId, opts) {
+    const dir = join(repoRoot, CAPSULE_DIR);
+    const path = join(dir, `${capsuleId}.capsule`);
+    if (!existsSync(path))
+        return { verdict: "NOT_FOUND", capsule: null, recap: "", inheritance: null };
+    let cap;
+    try {
+        cap = JSON.parse(readFileSync(path, "utf8"));
+    }
+    catch {
+        return { verdict: "NOT_FOUND", capsule: null, recap: "", inheritance: null };
+    }
+    const secret = ensureSecret(repoRoot);
+    const expected = createHmac("sha256", secret).update(canonical(cap)).digest("hex");
+    if (expected !== cap.hmac)
+        return { verdict: "INVALID_HMAC", capsule: cap, recap: "", inheritance: null };
+    const ageMs = Date.now() - Date.parse(cap.createdAt);
+    const maxMs = (opts.maxAgeHours ?? 720) * 3600 * 1000;
+    if (ageMs > maxMs)
+        return { verdict: "EXPIRED", capsule: cap, recap: "", inheritance: null };
+    const currentFingerprint = computeRepoFingerprint(repoRoot);
+    if (cap.repoFingerprint !== currentFingerprint) {
+        // Soft warning -- the same repo on a different host has a different
+        // fingerprint by design. We allow but flag.
+    }
+    const recap = renderRecap(cap, opts.toVendor);
+    const inheritance = { fromVendor: cap.originVendor, toVendor: opts.toVendor, ts: new Date().toISOString() };
+    // Append inheritance event to the ai-souls ledger so the receiving
+    // vendor "inherits" from the origin in Mneme's records.
+    try {
+        const soulsDir = join(repoRoot, ".mneme/ai-souls");
+        if (!existsSync(soulsDir))
+            mkdirSync(soulsDir, { recursive: true });
+        const path2 = join(soulsDir, `${opts.toVendor}.json`);
+        let soul = { vendor: opts.toVendor, sessions: [] };
+        if (existsSync(path2)) {
+            try {
+                soul = JSON.parse(readFileSync(path2, "utf8"));
+            }
+            catch { /* */ }
+        }
+        soul.sessions.push({
+            kind: "capsule-inheritance",
+            fromVendor: cap.originVendor,
+            capsuleId: cap.id,
+            ts: inheritance.ts,
+            contextSummary: cap.contextSummary,
+        });
+        writeFileSync(path2, JSON.stringify(soul, null, 2), "utf8");
+    }
+    catch { /* */ }
+    return { verdict: "RESUMED", capsule: cap, recap, inheritance };
+}
+function renderRecap(cap, toVendor) {
+    const lines = [];
+    lines.push(`# Session resumed from ${cap.originVendor} (capsule ${cap.id})`);
+    lines.push(``);
+    lines.push(`## Context`);
+    lines.push(cap.contextSummary);
+    lines.push(``);
+    if (cap.decisions && cap.decisions.length > 0) {
+        lines.push(`## Decisions made in prior session`);
+        for (const d of cap.decisions)
+            lines.push(`- ${d}`);
+        lines.push(``);
+    }
+    if (cap.promptTrace.length > 0) {
+        lines.push(`## Last ${Math.min(5, cap.promptTrace.length)} turns`);
+        for (const step of cap.promptTrace.slice(-5)) {
+            lines.push(`- **${step.role}**: ${step.text.slice(0, 160)}`);
+        }
+        lines.push(``);
+    }
+    if (cap.reasoningTrace && cap.reasoningTrace.length > 0) {
+        lines.push(`## Reasoning snapshot`);
+        for (const r of cap.reasoningTrace.slice(-3))
+            lines.push(`- ${r.slice(0, 200)}`);
+        lines.push(``);
+    }
+    lines.push(`*Vendor ${toVendor} now INHERITS this context. Mneme has recorded the handover from ${cap.originVendor}.*`);
+    return lines.join("\n");
+}
+export function listCapsules(repoRoot) {
+    const dir = join(repoRoot, CAPSULE_DIR);
+    if (!existsSync(dir))
+        return [];
+    const out = [];
+    try {
+        for (const f of readdirSync(dir)) {
+            if (!f.endsWith(".capsule"))
+                continue;
+            try {
+                const cap = JSON.parse(readFileSync(join(dir, f), "utf8"));
+                out.push(cap);
+            }
+            catch { /* */ }
+        }
+    }
+    catch { /* */ }
+    out.sort((a, b) => b.createdAt.localeCompare(a.createdAt));
+    return out;
+}
+//# sourceMappingURL=session_capsule.js.map

package/dist/diaspora/session_capsule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session_capsule.js","sourceRoot":"","sources":["../../src/diaspora/session_capsule.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAC1F,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAClE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,MAAM,WAAW,GAAG,iBAAiB,CAAC;AACtC,MAAM,WAAW,GAAG,wBAAwB,CAAC;AA4B7C,SAAS,YAAY,CAAC,QAAgB;IACpC,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IACtC,IAAI,UAAU,CAAC,CAAC,CAAC;QAAE,OAAO,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IACzD,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IACxC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,MAAM,CAAC,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC1C,IAAI,CAAC;QAAC,aAAa,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC;IACpD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,SAAS,CAAC,OAA4C;IAC7D,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,eAAe,EAAE,OAAO,CAAC,eAAe;QACxC,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,cAAc,EAAE,OAAO,CAAC,cAAc,IAAI,IAAI;QAC9C,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,IAAI;KACrC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,sBAAsB,CAAC,QAAgB;IAC9C,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC,oBAAoB,CAAwC,CAAC;QAC1F,MAAM,GAAG,QAAQ,CAAC,WAAW,QAAQ,wCAAwC,EAAE;YAC7E,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,OAAO,EAAE,IAAI;SACrE,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC;IACjB,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,GAAG,GAAG,GAAG,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACzF,CAAC;AAUD,MAAM,UAAU,WAAW,CAAC,QAAgB,EAAE,IAAiB;IAC7D,MAAM,MAAM,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;IACtC,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,MAAM,eAAe,GAAG,sBAAsB,CAAC,QAAQ,CAAC,CAAC;IACzD,MAAM,OAAO,GAAwC;QACnD,cAAc,EAAE,CAAC;QACjB,SAAS;QACT,YAAY,EAAE,IAAI,CAAC,MAAM;QACzB,eAAe;QACf,cAAc,EAAE,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;QACjD,WAAW,EAAE,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,gBAAgB;QAC1D,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;QAC/C,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;KACxC,CAAC;IACF,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IACjC,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACtE,MAAM,EAAE,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACzE,MAAM,GAAG,GAAmB,EAAE,GAAG,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACrD,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IACxC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,UAAU,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;IACvF,OAAO,GAAG,CAAC;AACb,CAAC;AAoBD,MAAM,UAAU,aAAa,CAAC,QAAgB,EAAE,SAAiB,EAAE,IAAmB;IACpF,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,UAAU,CAAC,CAAC;IAC/C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IACpG,IAAI,GAAmB,CAAC;IACxB,IAAI,CAAC;QAAC,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAmB,CAAC;IAAC,CAAC;IACvE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IAAC,CAAC;IAEvF,MAAM,MAAM,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;IACtC,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACnF,IAAI,QAAQ,KAAK,GAAG,CAAC,IAAI;QAAE,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IAE1G,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,WAAW,IAAI,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;IACtD,IAAI,KAAK,GAAG,KAAK;QAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IAE7F,MAAM,kBAAkB,GAAG,sBAAsB,CAAC,QAAQ,CAAC,CAAC;IAC5D,IAAI,GAAG,CAAC,eAAe,KAAK,kBAAkB,EAAE,CAAC;QAC/C,oEAAoE;QACpE,4CAA4C;IAC9C,CAAC;IAED,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC9C,MAAM,WAAW,GAAG,EAAE,UAAU,EAAE,GAAG,CAAC,YAAY,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;IAE5G,mEAAmE;IACnE,wDAAwD;IACxD,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAC;QACnD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;YAAE,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACpE,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,QAAQ,OAAO,CAAC,CAAC;QACtD,IAAI,IAAI,GAAiE,EAAE,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;QACjH,IAAI,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YACtB,IAAI,CAAC;gBAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,CAAgB,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC;QACxF,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;YACjB,IAAI,EAAE,qBAAqB;YAC3B,UAAU,EAAE,GAAG,CAAC,YAAY;YAC5B,SAAS,EAAE,GAAG,CAAC,EAAE;YACjB,EAAE,EAAE,WAAW,CAAC,EAAE;YAClB,cAAc,EAAE,GAAG,CAAC,cAAc;SACnC,CAAC,CAAC;QACH,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IAC9D,CAAC;IAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC;IAEjB,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;AAClE,CAAC;AAED,SAAS,WAAW,CAAC,GAAmB,EAAE,QAAgB;IACxD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,0BAA0B,GAAG,CAAC,YAAY,aAAa,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;IAC7E,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACzB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAC/B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,IAAI,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9C,KAAK,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;QACjD,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,SAAS;YAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACpD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IACD,IAAI,GAAG,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,KAAK,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACnE,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7C,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QAC/D,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IACD,IAAI,GAAG,CAAC,cAAc,IAAI,GAAG,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxD,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QACpC,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QACjF,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,WAAW,QAAQ,oEAAoE,GAAG,CAAC,YAAY,IAAI,CAAC,CAAC;IACxH,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,QAAgB;IAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IACxC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IAChC,MAAM,GAAG,GAAqB,EAAE,CAAC;IACjC,IAAI,CAAC;QACH,KAAK,MAAM,CAAC,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;YACjC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC;gBAAE,SAAS;YACtC,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAmB,CAAC;gBAC7E,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAChB,CAAC;YAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC;QACnB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC;IACjB,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;IAC3D,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/diaspora/spore_autostart.d.ts

@@ -0,0 +1,53 @@
+/**
+ * v1.72.0 -- DIASPORA D2: SPORE DEFAULT-ON.
+ *
+ * Today `mneme init` does NOT enable spore (cross-machine wisdom
+ * sync). User has to opt in manually. Result: "cross-machine" is
+ * marketing, not default UX.
+ *
+ * D2 changes the calculus: if the repo has a `git remote` (origin or
+ * any), spore should auto-enable on init. The remote URL IS the
+ * cross-machine identity -- no extra config needed.
+ *
+ * Detection rule:
+ *   1. Read `.git/config` -> any [remote "..."] section
+ *   2. If found -> create `.mneme/spore.json` with detected origin
+ *   3. Idempotent: don't overwrite existing spore config
+ */
+export interface GitRemote {
+    name: string;
+    url: string;
+}
+export interface SporeConfig {
+    enabled: boolean;
+    /** Origin remote name (usually "origin"). */
+    remoteName: string;
+    /** Remote URL. */
+    remoteUrl: string;
+    /** ISO ts when spore was auto-enabled. */
+    enabledAt: string;
+    /** Reason: "git-remote-detected" / "manual". */
+    reason: string;
+}
+export interface AutoStartResult {
+    /** Did we enable spore? */
+    enabled: boolean;
+    /** Why or why not. */
+    reason: string;
+    /** Detected remotes (for inspection). */
+    remotes: GitRemote[];
+    /** The config that was written / detected. */
+    config: SporeConfig | null;
+}
+export declare function readGitRemotes(repoRoot: string): GitRemote[];
+export declare function readSporeConfig(repoRoot: string): SporeConfig | null;
+export interface AutoStartOptions {
+    /** When true, override existing spore.json (rare; usually idempotent). */
+    force?: boolean;
+}
+/** Idempotent: detect git remote + write spore.json if absent. Safe to
+ *  call on every `mneme init` / daemon startup. */
+export declare function autoStartSpore(repoRoot: string, opts?: AutoStartOptions): AutoStartResult;
+/** Disable spore explicitly. */
+export declare function disableSpore(repoRoot: string): void;
+//# sourceMappingURL=spore_autostart.d.ts.map